last executing test programs: 1m50.212591924s ago: executing program 0 (id=176): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 1m49.910167193s ago: executing program 0 (id=179): io_uring_setup(0x5095, &(0x7f0000000080)={0x0, 0xcaa7, 0x1, 0x3, 0x16a}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x43) 1m49.808030083s ago: executing program 0 (id=182): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m49.775420226s ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x226) 1m49.639423889s ago: executing program 0 (id=186): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 1m49.393685713s ago: executing program 0 (id=191): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m49.378230905s ago: executing program 32 (id=191): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 5.397587168s ago: executing program 3 (id=1544): r0 = syz_open_dev$sg(0x0, 0x5dc, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000700)={0x53, 0x0, 0x7, 0x63, @scatter={0x0, 0x0, 0x0}, &(0x7f00000005c0)="b9576e689c3de8", 0x0, 0x7, 0x10000, 0x3, 0x0}) 5.397211528s ago: executing program 3 (id=1545): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 5.036583992s ago: executing program 3 (id=1546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r3, r4, 0x4, r2}, 0xfffffd1d) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000140), 0x800) pipe2(&(0x7f00000000c0), 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0x62b6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x6}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.999993985s ago: executing program 5 (id=1548): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 4.479999333s ago: executing program 1 (id=1553): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 4.285857271s ago: executing program 1 (id=1557): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.175306002s ago: executing program 3 (id=1558): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x9, @empty, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 3.956081042s ago: executing program 5 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac00000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nocompress}, {@session={'session', 0x3d, 0x13}}, {@map_normal}, {@check_strict}, {@mode={'mode', 0x3d, 0x1}}, {@hide}, {@session={'session', 0x3d, 0x54}}, {@cruft}, {@dmode={'dmode', 0x3d, 0x7}}, {@gid}, {@check_strict}, {@map_off}], [{@uid_eq}], 0x2c}, 0x1, 0x9d7, &(0x7f0000001800)="$eJzs3c1vHOUdB/Dv+CVxDQoBUpqiQDahAQOpYzslNOJCYq8TU79UtiMRVRWhJKmiWKWCVgLUQypVPRW1h6oHeuPYExIXuFS5tX9BD5Uq/gXUU9RDt5rZ9Rv2eh3XsU3y+VjjnZffPM/v8czuox3vzhO+zhqNRjVtcfnSX3YyWfae82NffPzJh+X061vZl+68VHyW9CWpJT1JDie9o2OzM1MdCrqZXElyOymS7E/zcVOupPh9Hl5evp3iz2W9lUtbbBib0uCBttvnHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EXF6NjQ0HCRyYnpS6/X2quGAG+3sWu5vM+rUb+LzzvWmxTllL6+xaG+Dx9a3vxE+et4jjSXjlQDkqcvHzz0xMFXHu/pWtx/g4Tvxn9bgyHf9Y7vvv/BzTcXFq69s02JfN1cqE9PzM1MTJ27UK9NzM3Uzp45M3Tq4vhcbXxisj53eW6+PlUbna2fm5+ZrQ2MPl8bPnv2dK0+eHnm0vSFscHJ+uLKl787MjR0pvba4A/r52bnZqZPvTY4N3rxzuTkxPSFKqbcXMa8XJ6IP5iYr83Xz03VatdvLFw7vSqjdU6JMmi4U0vKoJFOQSNDIyPDwyMjw2deOvvSy0NDPcsrulOtGPqKrNll6aQtz+i7+Vuzp33UtdnI7X0Bh/9DV6v/z2QmMp1LeT21dX9GM5bZzGRq9foirbmWxf7/xKn6hvUu9f+9S6uOHF7e/GSq/v/p5tLT7fr/Nrnu3M+7eT8f5GbezEIWci3vrNq6fwslNhq736rN/1xIPdOZyFxmMpGpnKvW1FprajmbMzmTobyRixnPXGoZz0QmU89cLmcu86lXZ9RoZlPPucz3lAe6loGM5vnUMpyzOZvTqaWewVzOTC5lOhcylnNVKddzo/q7n94gx6Wg4c0EjWwQtEH/31pxF/0/D6jtfgmHLWu0+v99nUMHRnciIQAAAGDbffvvOXDosb/9K+nNU9U1dgAAAOB+U31c70j5UH0Q76kU4xOT9aHdTgsAAADYRkX1HbsiSX+ONucWvwnlIgAAAADcJ6r//z9dPvSXc0dTeP8PAAAA95vO99jvGFGcTC23yk21q83Iq62I1n1++8cnJuuDozOTrwzn2eouA9U3DdaU1p2DSfX1gxdyrBl1rL/52L+6xL4yanjwleH05XirIQPPlA/PDKwTOVJGvpDnmpHPLUb2ZU3k6TISAO53xzfojzfb/7+Qk82Ik09Wt2/veXKdPnhIzwoAe0X7MXZ6lvr/DqPwFN9bHP6nzfv/x3L9aPMjBYN5K29nIVdzsvq2QfWJg1apuV1kudT+FR9DONnhakD/ihFeTi5eDzj68LrXA/pXDPRycs0VgXaxp3fgSADAzjm+ph9e+/5/qf9vNJpza67/b/z+v99HCgFgT1kawf4ezux2GwGA1bbUS3ffw4QAAAAAAAAAAAAAAAAAAAAAAAAAAADgPrAT9//fkzO3kuyBNL5GMzm4J9K4u5m+nTnDf7wv2StN3q7DDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAOgSLrXW9+V7E96hpKc2vms7p1bu53Ajijab7mTO3kvB3Y0HQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB0Dr/v9daT4+1Lp5fE9XciLJlSQ/2u0ct9Od3U5gl624/395zNMo0tM87Cl6R8dmZ6aqsQP2l9u/+PiTD8tpK/WUBZQ1rBpcolVD+70erfbqH7v27s1fvP3z2tj5Ksnz8+OTY1MXZl9dDnyi+DSppTktWsz3V8V6QyAUn5Yt3Vy941W9Y2vr/dZ6ey/Ve+Kvf2jftmXLadxYuDZS1jRff33+lz+78d6KoMdyLHlmIBlYXdNPy6lNTcfSu87axuKfoviy+G1xIH/Kler4l2kUjaI8RI9U7f/G9RsL1wbfenvhapucDuZokqtJ3+ZzOtp+MIrqrOvqLWsdqoLKX4c6lLehh7oPNBrNEofbtOHR6pTpv6s21DYYUCNt/+7LmhmdbpPR43n2ro/0sx1qbPlPo6m5VHxZ/LO4mH/kNyvG/+gqj/+JbObZWcZUkSvOlPZtPrHc8pGVG974amTbZyX3wO/yk3x/6fh3rXj9bx2re/56VFlR4z17XhTNXqilmj/0lR6p9erTLstWnoeaUW3y/GZeXLtfhzxf7PCKsk3P/9WKL4uPioH8O7eM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx9RdK93vqu5ESSg0keKZdrSWM76uvqL7ajmE3at2bNrR2sfe/oWpor7uRO3suBXU0HAAAAAAAAgG1zfuyLjz/5sJyq/8d35zvFZ0lf8z/9PUkOFn/sHR2bnZnqUFBvciXJ7XK+b9WWVzvlUO6Xh5eXb5dLh7fWHgCgs/8FAAD//xHnd+c=") 3.879826629s ago: executing program 5 (id=1562): fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8a203) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2b706964730d02bae5c6e129a9576920"], 0x6) 3.357022828s ago: executing program 1 (id=1566): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c}, 0x35) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 3.22823581s ago: executing program 1 (id=1568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r3, r4, 0x4, r2}, 0xfffffd1d) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000140), 0x800) pipe2(&(0x7f00000000c0), 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0x62b6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x6}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.952770446s ago: executing program 5 (id=1569): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040), 0x0) 2.922433338s ago: executing program 3 (id=1570): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 2.621585057s ago: executing program 5 (id=1572): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 2.143801081s ago: executing program 1 (id=1573): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e98a0000000008000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9a, 0x7, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x40, 0x8000, 0x6, 0x9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000cc0)={0xf97cff8c, 0x8, 'SE Linux', "a9e27f515f3a36ebf2a2a396fdd488bc"}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 890.796898ms ago: executing program 5 (id=1576): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 828.782333ms ago: executing program 2 (id=1578): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c}, 0x35) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 825.793424ms ago: executing program 3 (id=1579): fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x8a203) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2b706964730d02bae5c6e129a9576920"], 0x6) 707.273274ms ago: executing program 1 (id=1581): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x9, @empty, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 674.153697ms ago: executing program 4 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 598.797674ms ago: executing program 2 (id=1583): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 440.784519ms ago: executing program 4 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="07800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1], 0x4c}}, 0x40000) 378.261345ms ago: executing program 4 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) pipe(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8818) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40488dc) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 356.130407ms ago: executing program 2 (id=1586): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000040), 0x0) 322.461ms ago: executing program 4 (id=1587): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 321.82606ms ago: executing program 2 (id=1588): fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8a203) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2b706964730d02bae5c6e129a9576920"], 0x6) 229.019209ms ago: executing program 2 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82", 0x21}, {0x0}, {0x0}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581", 0xc}], 0x4}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x1d}, {0xc, 0xffe0}, {0xa, 0xa}}, [{0x8, 0xb, 0xe5fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket(0x400000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0x10, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x50, 0xa, 0x4, 0x800, 0x3, 0x10, 0x7, 0x9, 0x1, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537c, 0x0, 0xfffffffa, 0x11fffffe, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0xffffffff, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x401, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x2c, 0xd, 0x6, 0xffd, 0x40, 0xfffeffff, 0x7fff, 0x4, 0x7f, 0xfffdfffe, 0x7ffffd, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x9a0, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x810000, 0xb422, 0x1, 0x1, 0x8, 0x2, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0x6, 0x8, 0x62, 0x800, 0x0, 0x9, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad09, 0x8001, 0x8, 0x9, 0x101, 0x0, 0xb10, 0x8, 0x7, 0x1ff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x2, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x8, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0xc, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffffd, 0x1, 0xff, 0x80000000, 0xfffffff8, 0x80000001, 0x4, 0x9, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0x5, 0x4, 0xc, 0x0, 0xffffff68, 0x80000000, 0x5, 0x4, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x1, 0x4, 0x0, 0x0, 0x5, 0x1c000000, 0x1, 0x8006, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x0, 0x6, 0xfffff7f0, 0x2, 0x7, 0x8090, 0x7, 0x6d8, 0xfffffffb, 0x6, 0x400, 0x800, 0x8, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x0, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x200, 0x121) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffff9, 0x8, 0x6, 0x3, 0x5, 0xfff, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000720000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x8004) 203.755241ms ago: executing program 2 (id=1590): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340), &(0x7f0000000f80)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffde6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vcsa(0x0, 0x4, 0x10000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0xfffffffffffffffd, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000000)={0x8, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000c000300686173683a6970000500040000000000fcff020073797a310000000005df0500020000000500010006000000"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000136510febe39bf72b6a4324a3ed75ffc1465a1c8744cfbd4727e237f628e09642250fb12f71"], 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa6, 0x6, 0x81, 0x43, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x700, 0x40, 0x5baf, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0xfe, 0x6, 0x56, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x7, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000840)={'wg1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000880)={0x0, @empty}, &(0x7f00000008c0)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xa4, 0x0, 0x1a, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000005}, 0x4015) 82.390653ms ago: executing program 4 (id=1591): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000200), 0x0, 0x20000011) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 4 (id=1592): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) kernel console output (not intermixed with test programs): re dquot type 0 [ 94.093189][ T37] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 94.104976][ T5861] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 94.179423][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.189838][ T37] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 94.198850][ T5861] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.857: mark_inode_dirty error [ 94.218812][ T5861] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 94.227562][ T37] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.233669][ T5861] EXT4-fs (loop2): 1 orphan inode deleted [ 94.248187][ T37] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.272354][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 94.277751][ T5861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.290128][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.306240][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.319939][ T5861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.329692][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.351782][ T5861] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.857: Invalid inode table block 1 in block_group 0 [ 94.395352][ T5861] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 94.421771][ T5861] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.857: mark_inode_dirty error [ 94.433170][ T5869] netlink: 96 bytes leftover after parsing attributes in process `syz.3.860'. [ 94.536853][ T5873] loop3: detected capacity change from 0 to 512 [ 94.549436][ T5873] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 94.558282][ T5875] tipc: Enabled bearer , priority 0 [ 94.565908][ T5875] syzkaller0: entered promiscuous mode [ 94.571427][ T5875] syzkaller0: entered allmulticast mode [ 94.582385][ T5873] EXT4-fs (loop3): invalid journal inode [ 94.611144][ T5873] EXT4-fs (loop3): can't get journal size [ 94.620138][ T5873] EXT4-fs (loop3): 1 truncate cleaned up [ 94.626635][ T5873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.763189][ T5890] net_ratelimit: 52 callbacks suppressed [ 94.763208][ T5890] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 95.321686][ T5870] tipc: Resetting bearer [ 95.333847][ T5899] loop1: detected capacity change from 0 to 512 [ 95.340567][ T5870] tipc: Disabling bearer [ 95.362173][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.424066][ T5902] loop5: detected capacity change from 0 to 512 [ 95.432649][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.469385][ T5899] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.480667][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.501380][ T5902] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 95.513228][ T5899] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.869: corrupted inode contents [ 95.525311][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.545141][ T5902] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.549579][ T5899] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.869: mark_inode_dirty error [ 95.564848][ T5902] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 95.589131][ T5899] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.869: corrupted inode contents [ 95.606384][ T5902] EXT4-fs (loop5): Remounting filesystem read-only [ 95.613142][ T5899] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.869: mark_inode_dirty error [ 95.625258][ T5902] EXT4-fs (loop5): 1 truncate cleaned up [ 95.819672][ T2147] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.830327][ T2147] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.842176][ T2147] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.853211][ T5902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.855132][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.038229][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.048016][ T5917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.048695][ T5922] Driver unsupported XDP return value 0 on prog (id 209) dev N/A, expect packet loss! [ 96.850375][ T5930] Set syz1 is full, maxelem 65536 reached [ 97.321867][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.349417][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.485602][ T5959] netlink: 96 bytes leftover after parsing attributes in process `syz.4.886'. [ 97.562977][ T5962] loop2: detected capacity change from 0 to 512 [ 97.624187][ T5962] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.683184][ T5962] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.737208][ T5962] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 97.783859][ T5962] EXT4-fs (loop2): Remounting filesystem read-only [ 97.791361][ T5962] EXT4-fs (loop2): 1 truncate cleaned up [ 97.868997][ T2147] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.879891][ T2147] __quota_error: 7 callbacks suppressed [ 97.879934][ T2147] Quota error (device loop2): write_blk: dquota write failed [ 97.892914][ T2147] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 97.902991][ T2147] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.913558][ T2147] Quota error (device loop2): write_blk: dquota write failed [ 97.921000][ T2147] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 97.950532][ T5971] loop3: detected capacity change from 0 to 164 [ 97.957517][ T2147] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 97.967738][ T2147] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 98.028574][ T2147] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 98.048319][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.107411][ T5975] loop3: detected capacity change from 0 to 128 [ 98.130980][ T5975] veth0: entered promiscuous mode [ 98.139476][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 98.218225][ T5980] loop1: detected capacity change from 0 to 128 [ 98.352687][ T29] audit: type=1326 audit(1767180970.191:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.4.893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08a2faf749 code=0x0 [ 98.476094][ T5988] hub 9-0:1.0: USB hub found [ 98.483130][ T5988] hub 9-0:1.0: 8 ports detected [ 98.613349][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.090310][ T6006] loop2: detected capacity change from 0 to 512 [ 99.150340][ T6006] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 99.158464][ T6006] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.166504][ T6006] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.899: corrupted inode contents [ 99.178718][ T6006] EXT4-fs (loop2): Remounting filesystem read-only [ 99.185460][ T6006] EXT4-fs (loop2): 1 truncate cleaned up [ 99.191995][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.202665][ T31] Quota error (device loop2): write_blk: dquota write failed [ 99.210149][ T31] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 99.220320][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.230887][ T31] Quota error (device loop2): write_blk: dquota write failed [ 99.335542][ T6016] netlink: 'syz.1.904': attribute type 12 has an invalid length. [ 99.343360][ T6016] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 99.351300][ T6016] netlink: 148 bytes leftover after parsing attributes in process `syz.1.904'. [ 99.369606][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.380341][ T6006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.710830][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.720924][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.776558][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.814039][ T3486] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 99.823128][ T3486] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.858746][ T6023] fido_id[6023]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.902294][ T6029] loop3: detected capacity change from 0 to 1024 [ 99.918079][ T6029] EXT4-fs: inline encryption not supported [ 99.924240][ T6029] EXT4-fs: Ignoring removed i_version option [ 99.931066][ T6029] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.953073][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.973059][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.982146][ T6029] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.910: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.029737][ T6029] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.910: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.044273][ T6029] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.910: Failed to acquire dquot type 0 [ 100.056090][ T6029] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 100.065809][ T6029] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.910: mark_inode_dirty error [ 100.077707][ T6029] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 100.088298][ T6029] EXT4-fs (loop3): 1 orphan inode deleted [ 100.094628][ T6029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.107047][ T2147] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.129862][ T2147] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 100.133074][ T6041] loop2: detected capacity change from 0 to 256 [ 100.149884][ T6029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.166830][ T6029] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.910: Invalid inode table block 1 in block_group 0 [ 100.185428][ T6029] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 100.195604][ T6029] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.910: mark_inode_dirty error [ 100.210338][ T6043] loop5: detected capacity change from 0 to 256 [ 100.231897][ T6043] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.266799][ T6043] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.339263][ T6055] netlink: 96 bytes leftover after parsing attributes in process `syz.1.922'. [ 100.418475][ T6061] loop2: detected capacity change from 0 to 128 [ 100.636855][ T6073] batadv_slave_1: entered promiscuous mode [ 100.852560][ T6077] loop4: detected capacity change from 0 to 512 [ 100.959006][ T6077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.108533][ T6077] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.173281][ T6069] syz.5.921 (6069) used greatest stack depth: 10488 bytes left [ 101.412604][ T6092] netlink: 96 bytes leftover after parsing attributes in process `syz.2.934'. [ 101.448321][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.489742][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.539315][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.583866][ T6107] loop4: detected capacity change from 0 to 1024 [ 101.626697][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.769436][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.769662][ C1] hrtimer: interrupt took 103414 ns [ 102.181394][ T6136] loop3: detected capacity change from 0 to 512 [ 102.258081][ T6136] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 102.350693][ T6133] netlink: 96 bytes leftover after parsing attributes in process `syz.2.950'. [ 102.413850][ T6136] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.557961][ T6136] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 102.596385][ T6136] EXT4-fs (loop3): Remounting filesystem read-only [ 102.603398][ T6136] EXT4-fs (loop3): 1 truncate cleaned up [ 102.619023][ T55] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.629760][ T55] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.646991][ T55] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 102.669430][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.177972][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.203936][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.959'. [ 103.213905][ T3486] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 103.227488][ T3486] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.241683][ T6161] Set syz1 is full, maxelem 65536 reached [ 103.257404][ T6161] loop1: detected capacity change from 0 to 2048 [ 103.282647][ T6166] loop3: detected capacity change from 0 to 256 [ 103.288542][ T6164] fido_id[6164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.308631][ T6166] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.332016][ T6166] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.346085][ T6161] Alternate GPT is invalid, using primary GPT. [ 103.352443][ T6161] loop1: p2 p3 p7 [ 103.397369][ T6168] loop3: detected capacity change from 0 to 1024 [ 103.436409][ T6170] program syz.1.963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.458072][ T6168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.529956][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.681925][ T6185] EXT4-fs: inline encryption not supported [ 103.687820][ T6185] EXT4-fs: Ignoring removed i_version option [ 103.808783][ T6185] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.834716][ T6185] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.969: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.040200][ T6185] __quota_error: 14 callbacks suppressed [ 104.040217][ T6185] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 104.099758][ T6185] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.969: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.239207][ T6185] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 104.248049][ T6185] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.969: Failed to acquire dquot type 0 [ 104.305818][ T6185] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 104.316811][ T6185] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.969: mark_inode_dirty error [ 104.328249][ T6185] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 104.346608][ T6199] program syz.2.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.358742][ T6185] EXT4-fs (loop3): 1 orphan inode deleted [ 104.365087][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.389001][ T55] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.403567][ T55] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 104.412082][ T55] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 104.438479][ T6185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.469514][ T6185] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.969: Invalid inode table block 1 in block_group 0 [ 104.483834][ T6185] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 104.513521][ T6185] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.969: mark_inode_dirty error [ 104.600234][ T6206] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 104.605221][ T6203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.637464][ T6203] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.769637][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.786476][ T6220] program syz.3.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.903669][ T6237] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 105.465160][ T6239] Set syz1 is full, maxelem 65536 reached [ 105.576776][ T6248] set_capacity_and_notify: 4 callbacks suppressed [ 105.576796][ T6248] loop3: detected capacity change from 0 to 128 [ 105.615959][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 105.713896][ T6257] program syz.1.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.996570][ T6271] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 106.168655][ T6248] syz.3.994: attempt to access beyond end of device [ 106.168655][ T6248] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 106.182342][ T6248] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 106.192095][ T6255] syz.3.994: attempt to access beyond end of device [ 106.192095][ T6255] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 106.205773][ T6255] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 106.293311][ T6279] loop3: detected capacity change from 0 to 512 [ 106.301192][ T6279] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 106.310443][ T6279] EXT4-fs (loop3): invalid journal inode [ 106.316304][ T6279] EXT4-fs (loop3): can't get journal size [ 106.323286][ T6279] EXT4-fs (loop3): 1 truncate cleaned up [ 106.329945][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.045296][ T6292] program syz.2.1009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.112296][ T3957] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 107.127657][ T3957] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.131076][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 107.282117][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.464414][ T6303] loop3: detected capacity change from 0 to 512 [ 107.490666][ T6305] loop1: detected capacity change from 0 to 256 [ 107.564822][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.585365][ T6303] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.684813][ T6319] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 107.753307][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.912456][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 107.939009][ T10] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.909711][ T6345] program syz.3.1028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.941568][ T6337] fido_id[6337]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.966359][ T6347] loop5: detected capacity change from 0 to 1024 [ 108.999160][ T6347] EXT4-fs: inline encryption not supported [ 109.005127][ T6347] EXT4-fs: Ignoring removed i_version option [ 109.029273][ T6347] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.049347][ T6347] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1027: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.094290][ T6347] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 109.105721][ T6347] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1027: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.120508][ T6347] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 109.129344][ T6347] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1027: Failed to acquire dquot type 0 [ 109.140840][ T6347] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 109.153080][ T6347] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1027: mark_inode_dirty error [ 109.216242][ T6347] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 109.251392][ T6347] EXT4-fs (loop5): 1 orphan inode deleted [ 109.261777][ T6347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.274015][ T803] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.293960][ T803] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 109.302535][ T803] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 109.333989][ T6347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.344040][ T6347] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.1027: Invalid inode table block 1 in block_group 0 [ 109.365616][ T29] audit: type=1326 audit(1767180981.201:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.1037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccc530f749 code=0x0 [ 109.388625][ T6347] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 109.408873][ T6347] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.1027: mark_inode_dirty error [ 109.424748][ T6376] hub 9-0:1.0: USB hub found [ 109.429595][ T6376] hub 9-0:1.0: 8 ports detected [ 109.484745][ T3957] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 109.499835][ T3957] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.523910][ T6381] fido_id[6381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.619326][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1043'. [ 109.629930][ T6388] Set syz1 is full, maxelem 65536 reached [ 109.644340][ T6388] loop5: detected capacity change from 0 to 2048 [ 109.692215][ T3309] Alternate GPT is invalid, using primary GPT. [ 109.698949][ T3309] loop5: p2 p3 p7 [ 109.711175][ T6388] Alternate GPT is invalid, using primary GPT. [ 109.717575][ T6388] loop5: p2 p3 p7 [ 109.783605][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 109.786271][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 109.793553][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 109.819115][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 109.844371][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 109.854512][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 109.962021][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 109.984656][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.028386][ T6400] fido_id[6400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.043084][ T6404] loop5: detected capacity change from 0 to 1024 [ 110.051406][ T6404] EXT4-fs: inline encryption not supported [ 110.057291][ T6404] EXT4-fs: Ignoring removed i_version option [ 110.070983][ T6404] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.090823][ T6404] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1050: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.105884][ T6404] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 110.111832][ T6408] loop1: detected capacity change from 0 to 128 [ 110.115967][ T6404] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1050: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.134635][ T6404] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 110.143490][ T6404] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1050: Failed to acquire dquot type 0 [ 110.149126][ T6408] veth0: entered promiscuous mode [ 110.160364][ T6404] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 110.162140][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 110.171517][ T6404] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1050: mark_inode_dirty error [ 110.191318][ T6404] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 110.209172][ T6404] EXT4-fs (loop5): 1 orphan inode deleted [ 110.215390][ T6404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.228547][ T351] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.242996][ T351] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 110.251522][ T351] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 110.263926][ T6404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.283980][ T6404] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.1050: Invalid inode table block 1 in block_group 0 [ 110.298052][ T6404] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 110.310032][ T6404] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.1050: mark_inode_dirty error [ 110.654042][ T6435] loop4: detected capacity change from 0 to 164 [ 111.073367][ T6444] loop2: detected capacity change from 0 to 512 [ 111.138102][ T6444] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.209167][ T6444] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.264833][ T6444] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 111.319229][ T6444] EXT4-fs (loop2): Remounting filesystem read-only [ 111.338881][ T6444] EXT4-fs (loop2): 1 truncate cleaned up [ 111.407474][ T6455] loop4: detected capacity change from 0 to 512 [ 111.411123][ T55] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 111.424326][ T55] Quota error (device loop2): write_blk: dquota write failed [ 111.431806][ T55] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 111.441878][ T55] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 111.452457][ T55] Quota error (device loop2): write_blk: dquota write failed [ 111.521733][ T55] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 111.589704][ T6444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.612560][ T6455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.635278][ T6455] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.826741][ T6464] loop5: detected capacity change from 0 to 2048 [ 111.843397][ T6464] EXT4-fs: Ignoring removed bh option [ 111.885579][ T6464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.905732][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.954076][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.964715][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.995079][ T6468] program syz.2.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.070453][ T6474] loop1: detected capacity change from 0 to 128 [ 112.126161][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 112.277232][ T6500] loop3: detected capacity change from 0 to 512 [ 112.285480][ T6500] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 112.318531][ T6500] EXT4-fs (loop3): invalid journal inode [ 112.336890][ T6500] EXT4-fs (loop3): can't get journal size [ 112.351007][ T6500] EXT4-fs (loop3): 1 truncate cleaned up [ 112.357264][ T6500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.536042][ T6512] program syz.5.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.701355][ T6516] loop4: detected capacity change from 0 to 512 [ 112.777697][ T6516] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.965485][ T6516] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.019470][ T6474] syz.1.1076: attempt to access beyond end of device [ 113.019470][ T6474] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.033352][ T6474] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 113.046144][ T6516] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 113.058048][ T6516] EXT4-fs (loop4): Remounting filesystem read-only [ 113.065162][ T6516] EXT4-fs (loop4): 1 truncate cleaned up [ 113.085647][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.096256][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.135846][ T6490] syz.1.1076: attempt to access beyond end of device [ 113.135846][ T6490] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.149708][ T6490] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 113.168925][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 113.196775][ T6527] hub 9-0:1.0: USB hub found [ 113.201519][ T6527] hub 9-0:1.0: 8 ports detected [ 113.248564][ T6516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.261826][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.399862][ T6538] loop1: detected capacity change from 0 to 164 [ 113.512791][ T6546] program syz.3.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.583944][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 113.641597][ T6558] loop3: detected capacity change from 0 to 128 [ 113.675024][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 113.704912][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.884862][ T6574] loop4: detected capacity change from 0 to 164 [ 113.951516][ T6558] syz.3.1106: attempt to access beyond end of device [ 113.951516][ T6558] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.965323][ T6558] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 113.979804][ T6564] syz.3.1106: attempt to access beyond end of device [ 113.979804][ T6564] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.993642][ T6564] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 114.024992][ T6580] EXT4-fs: inline encryption not supported [ 114.027951][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1116'. [ 114.030906][ T6580] EXT4-fs: Ignoring removed i_version option [ 114.050181][ T6580] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.069071][ T6580] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1115: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.083301][ T6580] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1115: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.116577][ T6580] __quota_error: 11 callbacks suppressed [ 114.116663][ T6580] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 114.131434][ T6580] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1115: Failed to acquire dquot type 0 [ 114.144506][ T6580] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 114.154431][ T6580] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1115: mark_inode_dirty error [ 114.178881][ T6580] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 114.298419][ T6580] EXT4-fs (loop4): 1 orphan inode deleted [ 114.304689][ T6580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.318243][ T351] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.345461][ T351] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 114.354007][ T351] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 114.460287][ T6596] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 114.478914][ T6596] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.499434][ T6596] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1119: corrupted inode contents [ 114.624838][ T6580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.671277][ T6580] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1115: Invalid inode table block 1 in block_group 0 [ 114.693453][ T6599] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 114.698121][ T6580] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 114.711245][ T6596] EXT4-fs (loop3): Remounting filesystem read-only [ 114.717980][ T6596] EXT4-fs (loop3): 1 truncate cleaned up [ 114.723793][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.724001][ T6599] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.734505][ T37] Quota error (device loop3): write_blk: dquota write failed [ 114.745292][ T6580] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1115: mark_inode_dirty error [ 114.748182][ T37] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 114.769345][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.780001][ T37] Quota error (device loop3): write_blk: dquota write failed [ 114.787471][ T37] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 114.798357][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 114.808620][ T37] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 114.817522][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.828497][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.829209][ T6599] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 114.852854][ T6599] EXT4-fs (loop5): Remounting filesystem read-only [ 114.859748][ T6599] EXT4-fs (loop5): 1 truncate cleaned up [ 114.865524][ T2147] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.876176][ T2147] Quota error (device loop5): write_blk: dquota write failed [ 114.883599][ T2147] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 114.893787][ T2147] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.108241][ T2147] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 115.180958][ T6599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.517643][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 115.546708][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 115.555782][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 115.566222][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.579986][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.610995][ T6620] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 115.619192][ T6620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.627583][ T6620] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 115.639245][ T6620] EXT4-fs (loop2): Remounting filesystem read-only [ 115.645852][ T6620] EXT4-fs (loop2): 1 truncate cleaned up [ 115.651837][ T2147] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.662576][ T2147] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.677957][ T2147] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 115.688878][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.702106][ T6620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.898172][ T6619] syz.1.1127: attempt to access beyond end of device [ 115.898172][ T6619] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 115.911940][ T6619] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 115.921089][ T6619] syz.1.1127: attempt to access beyond end of device [ 115.921089][ T6619] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 115.935036][ T6619] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 115.991744][ T6650] set_capacity_and_notify: 6 callbacks suppressed [ 115.991757][ T6650] loop3: detected capacity change from 0 to 512 [ 116.014755][ T6650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.027528][ T6650] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.042363][ T6650] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.057622][ T6650] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 23 with error 28 [ 116.070059][ T6650] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.070059][ T6650] [ 116.079764][ T6650] EXT4-fs (loop3): Total free blocks count 0 [ 116.085791][ T6650] EXT4-fs (loop3): Free/Dirty block details [ 116.091753][ T6650] EXT4-fs (loop3): free_blocks=65280 [ 116.097058][ T6650] EXT4-fs (loop3): dirty_blocks=23 [ 116.102305][ T6650] EXT4-fs (loop3): Block reservation details [ 116.108317][ T6650] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 116.118166][ T6650] syz.3.1138 (6650) used greatest stack depth: 9752 bytes left [ 116.139332][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.152349][ T3427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 116.161366][ T3427] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.210882][ T6659] fido_id[6659]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.256587][ T6665] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 116.263910][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 116.280864][ T5915] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 116.289803][ T5915] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.301637][ T3485] IPVS: starting estimator thread 0... [ 116.390653][ T6673] tipc: Started in network mode [ 116.395588][ T6673] tipc: Node identity 06ebce2d3025, cluster identity 4711 [ 116.402880][ T6673] tipc: Enabled bearer , priority 0 [ 116.410942][ T6666] IPVS: using max 2208 ests per chain, 110400 per kthread [ 116.461906][ T6679] syzkaller0: entered promiscuous mode [ 116.467447][ T6679] syzkaller0: entered allmulticast mode [ 116.819751][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1150'. [ 116.831588][ T6658] Set syz1 is full, maxelem 65536 reached [ 116.838410][ T6686] Set syz1 is full, maxelem 65536 reached [ 116.853851][ T6686] loop5: detected capacity change from 0 to 2048 [ 116.910941][ T3309] Alternate GPT is invalid, using primary GPT. [ 116.917519][ T3309] loop5: p2 p3 p7 [ 116.930242][ T6686] Alternate GPT is invalid, using primary GPT. [ 116.936720][ T6686] loop5: p2 p3 p7 [ 116.981325][ T3009] Alternate GPT is invalid, using primary GPT. [ 116.987769][ T3009] loop5: p2 p3 p7 [ 117.065535][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 117.076086][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 117.080055][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 117.103097][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 117.140020][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 117.212043][ T6695] loop5: detected capacity change from 0 to 512 [ 117.235650][ T6695] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 117.361112][ T6695] EXT4-fs (loop5): invalid journal inode [ 117.366969][ T6695] EXT4-fs (loop5): can't get journal size [ 117.373736][ T6695] EXT4-fs (loop5): 1 truncate cleaned up [ 117.380020][ T6695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.395052][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 117.803107][ T6699] loop2: detected capacity change from 0 to 512 [ 117.825430][ T6699] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.833647][ T6699] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.841770][ T6699] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 117.853418][ T6699] EXT4-fs (loop2): Remounting filesystem read-only [ 117.860188][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 117.885543][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.896188][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.924416][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 117.936736][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 117.946976][ T1088] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 117.958632][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 117.993789][ T3957] tipc: Node number set to 919522861 [ 118.004603][ T6699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.018257][ T6699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.551082][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.679225][ T6730] loop2: detected capacity change from 0 to 512 [ 118.712865][ T6730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.739409][ T6730] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.757042][ T6730] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1168: corrupted inode contents [ 118.770328][ T6730] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1168: mark_inode_dirty error [ 118.782161][ T6730] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1168: corrupted inode contents [ 118.794711][ T6730] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1168: mark_inode_dirty error [ 118.823243][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.115597][ T6744] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 119.122908][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 119.178219][ T6748] loop3: detected capacity change from 0 to 512 [ 119.200944][ T6751] loop2: detected capacity change from 0 to 512 [ 119.209696][ T6748] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 119.237516][ T6751] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.252761][ T6748] EXT4-fs (loop3): invalid journal inode [ 119.272331][ T6748] EXT4-fs (loop3): can't get journal size [ 119.287284][ T6748] EXT4-fs (loop3): 1 truncate cleaned up [ 119.297419][ T6748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.217494][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.228907][ T6761] loop5: detected capacity change from 0 to 128 [ 120.476506][ T6767] loop3: detected capacity change from 0 to 512 [ 120.641389][ T6783] syzkaller0: entered promiscuous mode [ 120.646946][ T6783] syzkaller0: entered allmulticast mode [ 120.888953][ T6767] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.897046][ T6767] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.905936][ T6767] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1178: corrupted inode contents [ 120.918540][ T6767] EXT4-fs (loop3): Remounting filesystem read-only [ 120.925300][ T6767] EXT4-fs (loop3): 1 truncate cleaned up [ 120.935026][ T2080] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 120.945634][ T2080] __quota_error: 19 callbacks suppressed [ 120.945651][ T2080] Quota error (device loop3): write_blk: dquota write failed [ 120.958791][ T2080] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 120.968883][ T2080] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 120.979493][ T2080] Quota error (device loop3): write_blk: dquota write failed [ 120.986882][ T2080] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 121.028255][ T2080] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 121.038633][ T2080] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 121.049342][ T2080] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.133764][ T6767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.211368][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.297293][ T6790] loop3: detected capacity change from 0 to 512 [ 121.350009][ T6790] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.436659][ T6796] loop2: detected capacity change from 0 to 512 [ 121.484603][ T6796] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 121.516638][ T6796] EXT4-fs (loop2): invalid journal inode [ 121.517412][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.524920][ T6796] EXT4-fs (loop2): can't get journal size [ 121.537725][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.550921][ T6796] EXT4-fs (loop2): 1 truncate cleaned up [ 121.557515][ T6796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.935421][ T6746] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 121.961075][ T6746] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.043814][ T6816] fido_id[6816]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.188120][ T6821] hub 2-0:1.0: USB hub found [ 122.193117][ T6821] hub 2-0:1.0: 8 ports detected [ 122.239789][ T6825] loop4: detected capacity change from 0 to 164 [ 122.346906][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.381189][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.391652][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.413797][ T6835] loop2: detected capacity change from 0 to 1024 [ 122.420699][ T29] audit: type=1326 audit(1767180994.261:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.1203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc09140f749 code=0x0 [ 122.444270][ T6835] EXT4-fs: inline encryption not supported [ 122.450265][ T6835] EXT4-fs: Ignoring removed i_version option [ 122.477647][ T6835] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.496210][ T6835] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1202: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.510629][ T6835] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 122.520120][ T6835] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1202: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.553977][ T6835] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 122.562854][ T6835] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1202: Failed to acquire dquot type 0 [ 122.574782][ T6835] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 122.584396][ T6835] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1202: mark_inode_dirty error [ 122.595981][ T6835] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 122.607360][ T6835] EXT4-fs (loop2): 1 orphan inode deleted [ 122.613784][ T6835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.625997][ T1088] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.632763][ T6847] loop4: detected capacity change from 0 to 128 [ 122.643182][ T1088] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 122.655230][ T1088] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 122.669271][ T6847] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.682531][ T6835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.692283][ T6835] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1202: Invalid inode table block 1 in block_group 0 [ 122.692565][ T6847] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.708509][ T6835] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 122.749735][ T6835] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1202: mark_inode_dirty error [ 122.775930][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.910911][ T6862] loop4: detected capacity change from 0 to 164 [ 124.232826][ T6875] Set syz1 is full, maxelem 65536 reached [ 124.348067][ T6889] loop2: detected capacity change from 0 to 256 [ 124.412583][ T6893] loop2: detected capacity change from 0 to 128 [ 125.248899][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.257497][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.324020][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.332847][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.423156][ T6911] loop3: detected capacity change from 0 to 512 [ 125.430052][ T6911] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.592061][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1237'. [ 125.608999][ T6921] Set syz1 is full, maxelem 65536 reached [ 125.623906][ T6921] loop5: detected capacity change from 0 to 2048 [ 125.673196][ T3776] Alternate GPT is invalid, using primary GPT. [ 125.679751][ T3776] loop5: p2 p3 p7 [ 125.690504][ T6921] Alternate GPT is invalid, using primary GPT. [ 125.694926][ T6926] tipc: Enabled bearer , priority 0 [ 125.697093][ T6921] loop5: p2 p3 p7 [ 125.705190][ T6926] syzkaller0: entered promiscuous mode [ 125.712626][ T6926] syzkaller0: entered allmulticast mode [ 125.743655][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 125.743984][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 125.762957][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 125.796161][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 125.800869][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 125.816147][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 125.847223][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.859048][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.127070][ T6941] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.154828][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.164034][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.257291][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 126.470063][ T6924] tipc: Resetting bearer [ 126.482383][ T6924] tipc: Disabling bearer [ 126.489157][ T6953] set_capacity_and_notify: 1 callbacks suppressed [ 126.489175][ T6953] loop2: detected capacity change from 0 to 512 [ 126.515865][ T6953] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 126.525344][ T6953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.533684][ T6953] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1250: corrupted inode contents [ 126.545840][ T6953] EXT4-fs (loop2): Remounting filesystem read-only [ 126.552546][ T6953] EXT4-fs (loop2): 1 truncate cleaned up [ 126.558426][ T803] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 126.569026][ T803] __quota_error: 1 callbacks suppressed [ 126.569042][ T803] Quota error (device loop2): write_blk: dquota write failed [ 126.582124][ T803] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 126.592182][ T803] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 126.602755][ T803] Quota error (device loop2): write_blk: dquota write failed [ 126.610268][ T803] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 126.620958][ T803] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 126.631115][ T803] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 126.640644][ T803] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 126.652459][ T6953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.667017][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.687293][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.717375][ T6961] loop5: detected capacity change from 0 to 128 [ 126.727700][ T6963] loop1: detected capacity change from 0 to 256 [ 126.734825][ T6961] veth0: entered promiscuous mode [ 126.746032][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 127.150379][ T6973] loop5: detected capacity change from 0 to 512 [ 127.246226][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.255672][ T6973] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 127.283006][ T6973] EXT4-fs (loop5): orphan cleanup on readonly fs [ 127.308151][ T6973] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 127.321910][ T6980] loop3: detected capacity change from 0 to 512 [ 127.334015][ T6973] EXT4-fs (loop5): Remounting filesystem read-only [ 127.356487][ T6980] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.381030][ T6973] EXT4-fs (loop5): 1 truncate cleaned up [ 127.386909][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.397535][ T52] Quota error (device loop5): write_blk: dquota write failed [ 127.404978][ T52] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 127.415040][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.425712][ T52] Quota error (device loop5): write_blk: dquota write failed [ 127.433134][ T52] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 127.448032][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 127.484022][ T6973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.553986][ T6986] loop3: detected capacity change from 0 to 512 [ 127.620391][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.633646][ T6986] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.693984][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.839109][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.304152][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.313112][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.377757][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.386384][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.876185][ T3485] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 128.912801][ T3485] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.623116][ T7019] loop4: detected capacity change from 0 to 512 [ 129.746509][ T7019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.842742][ T7015] fido_id[7015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.878862][ T7019] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.910838][ T7019] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1274: corrupted inode contents [ 129.948854][ T7019] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1274: mark_inode_dirty error [ 129.996577][ T7019] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1274: corrupted inode contents [ 130.009921][ T7036] loop3: detected capacity change from 0 to 128 [ 130.030226][ T7019] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1274: mark_inode_dirty error [ 130.068390][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 130.100230][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.215426][ T7045] loop2: detected capacity change from 0 to 512 [ 130.268391][ T7045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 130.290593][ T7045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.324935][ T7045] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 130.340339][ T7045] EXT4-fs (loop2): Remounting filesystem read-only [ 130.347159][ T7045] EXT4-fs (loop2): 1 truncate cleaned up [ 130.353144][ T417] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.363709][ T417] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.377797][ T417] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.400516][ T7045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.464180][ T7047] syz.3.1280: attempt to access beyond end of device [ 130.464180][ T7047] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 130.477982][ T7047] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 130.509408][ T7036] syz.3.1280: attempt to access beyond end of device [ 130.509408][ T7036] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 130.523201][ T7036] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 130.790053][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.145651][ T7078] loop4: detected capacity change from 0 to 512 [ 131.379266][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.452618][ T7078] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.631489][ T7084] loop2: detected capacity change from 0 to 512 [ 131.644450][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.654646][ T7088] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 131.670611][ T7084] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.685736][ T7088] SELinux: failed to load policy [ 131.712689][ T7088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.718282][ T7084] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.816181][ T7084] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1292: corrupted inode contents [ 131.893815][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 131.912767][ T7088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.926558][ T7084] EXT4-fs (loop2): 1 truncate cleaned up [ 131.932992][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.943661][ T12] __quota_error: 8 callbacks suppressed [ 131.943678][ T12] Quota error (device loop2): write_blk: dquota write failed [ 131.956707][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 131.966774][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.977344][ T12] Quota error (device loop2): write_blk: dquota write failed [ 131.984935][ T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 132.005823][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 132.016104][ T12] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 132.025495][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.038314][ T7088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.050274][ T7084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.106874][ T7088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.194915][ T803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.216793][ T803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.229985][ T803] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.238462][ T803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.509139][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.799886][ T7117] loop5: detected capacity change from 0 to 128 [ 132.858010][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'. [ 133.141782][ T7137] loop1: detected capacity change from 0 to 128 [ 133.224379][ T7126] syz.5.1305: attempt to access beyond end of device [ 133.224379][ T7126] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 133.238273][ T7126] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 133.247746][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 133.257426][ T7117] syz.5.1305: attempt to access beyond end of device [ 133.257426][ T7117] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 133.271244][ T7117] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 133.297760][ T7117] syz.5.1305: attempt to access beyond end of device [ 133.297760][ T7117] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 133.311616][ T7117] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 133.583309][ T7142] syz.1.1313: attempt to access beyond end of device [ 133.583309][ T7142] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 133.597174][ T7142] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 133.609276][ T7137] syz.1.1313: attempt to access beyond end of device [ 133.609276][ T7137] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 133.623034][ T7137] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 134.254762][ T7177] loop2: detected capacity change from 0 to 256 [ 134.908014][ T7189] loop2: detected capacity change from 0 to 512 [ 134.922699][ T7187] loop5: detected capacity change from 0 to 1024 [ 134.942658][ T7189] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.011396][ T7187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.131382][ T7195] loop1: detected capacity change from 0 to 1024 [ 135.154606][ T7195] EXT4-fs: inline encryption not supported [ 135.160620][ T7195] EXT4-fs: Ignoring removed i_version option [ 135.196313][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.211564][ T7195] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.245264][ T7195] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1335: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.277591][ T7195] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 135.305541][ T7195] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1335: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.323240][ T7202] loop3: detected capacity change from 0 to 164 [ 135.343895][ T7195] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 135.352785][ T7195] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1335: Failed to acquire dquot type 0 [ 135.392074][ T7204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1340'. [ 135.407616][ T7195] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 135.426563][ T7195] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1335: mark_inode_dirty error [ 135.588782][ T7195] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 135.604697][ T7195] EXT4-fs (loop1): 1 orphan inode deleted [ 135.628870][ T7195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.660440][ T417] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.678161][ T7210] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 135.712132][ T417] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 135.720714][ T417] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 135.750102][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.769441][ T7195] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1335: Invalid inode table block 1 in block_group 0 [ 135.899811][ T7195] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 135.910072][ T7195] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1335: mark_inode_dirty error [ 136.040589][ T7221] loop4: detected capacity change from 0 to 512 [ 136.072943][ T7221] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.081257][ T7221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.091488][ T7221] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 136.103621][ T7221] EXT4-fs (loop4): Remounting filesystem read-only [ 136.110379][ T7221] EXT4-fs (loop4): 1 truncate cleaned up [ 136.116323][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.126900][ T31] Quota error (device loop4): write_blk: dquota write failed [ 136.134365][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.431936][ T7228] loop1: detected capacity change from 0 to 512 [ 136.502068][ T7228] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.527827][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 136.559073][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.572080][ T7221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.642661][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.735657][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.781986][ T7243] set_capacity_and_notify: 1 callbacks suppressed [ 136.782068][ T7243] loop4: detected capacity change from 0 to 164 [ 136.811114][ T7245] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 137.060667][ T7257] loop3: detected capacity change from 0 to 1024 [ 137.069713][ T7257] EXT4-fs: inline encryption not supported [ 137.075601][ T7257] EXT4-fs: Ignoring removed i_version option [ 137.084624][ T7257] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.098461][ T7257] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1355: lblock 2 mapped to illegal pblock 2 (length 1) [ 137.112817][ T7257] __quota_error: 5 callbacks suppressed [ 137.112842][ T7257] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 137.128829][ T7257] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1355: lblock 0 mapped to illegal pblock 48 (length 1) [ 137.145286][ T7257] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 137.154219][ T7257] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1355: Failed to acquire dquot type 0 [ 137.167134][ T7257] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 137.176884][ T7257] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1355: mark_inode_dirty error [ 137.189257][ T7257] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 137.199742][ T7257] EXT4-fs (loop3): 1 orphan inode deleted [ 137.206028][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.218814][ T52] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.233453][ T52] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 137.241946][ T52] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 137.279092][ T7257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.288384][ T7263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1359'. [ 137.297959][ T7257] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1355: Invalid inode table block 1 in block_group 0 [ 137.318745][ T7257] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 137.338914][ T7257] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.1355: mark_inode_dirty error [ 137.351207][ T7265] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 137.360608][ T7265] SELinux: failed to load policy [ 137.368191][ T7265] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.462375][ T7265] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.530651][ T7265] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.636530][ T7269] loop3: detected capacity change from 0 to 512 [ 137.759535][ T7269] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 137.767978][ T7269] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.789126][ T7269] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 137.801340][ T7269] EXT4-fs (loop3): Remounting filesystem read-only [ 137.807981][ T7269] EXT4-fs (loop3): 1 truncate cleaned up [ 137.890120][ T1088] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.900702][ T1088] Quota error (device loop3): write_blk: dquota write failed [ 137.908183][ T1088] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 137.918315][ T1088] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.929010][ T1088] Quota error (device loop3): write_blk: dquota write failed [ 137.936409][ T1088] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 138.006263][ T7265] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.192489][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.213165][ T1088] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 138.223368][ T1088] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 138.239173][ T1088] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 138.250395][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.306563][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 138.315681][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 138.336957][ T7278] loop4: detected capacity change from 0 to 512 [ 138.361278][ T7278] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 138.369718][ T7278] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.394293][ T7278] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 138.406218][ T7278] EXT4-fs (loop4): Remounting filesystem read-only [ 138.413060][ T7278] EXT4-fs (loop4): 1 truncate cleaned up [ 138.458219][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.508326][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.556501][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.752106][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.839165][ T1088] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 138.849830][ T1088] Quota error (device loop4): write_blk: dquota write failed [ 138.857232][ T1088] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 138.869659][ T1088] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 138.942061][ T7269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.955998][ T7269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.967249][ T7278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.981038][ T7278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.098649][ T7288] loop1: detected capacity change from 0 to 164 [ 139.379196][ T7294] loop1: detected capacity change from 0 to 512 [ 139.400361][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.413231][ T7294] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.548155][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.573203][ T7302] loop4: detected capacity change from 0 to 128 [ 139.613026][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 139.700067][ T7309] program syz.1.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.019514][ T6746] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 140.089026][ T6746] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.111466][ T7302] syz.4.1372: attempt to access beyond end of device [ 140.111466][ T7302] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 140.125276][ T7302] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 140.177776][ T7317] fido_id[7317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.232086][ T7308] syz.4.1372: attempt to access beyond end of device [ 140.232086][ T7308] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 140.245917][ T7308] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 140.264200][ T7319] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 140.289636][ T7320] loop2: detected capacity change from 0 to 512 [ 140.310866][ T7298] Set syz1 is full, maxelem 65536 reached [ 140.362797][ T7308] syz.4.1372: attempt to access beyond end of device [ 140.362797][ T7308] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 140.376711][ T7308] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 140.400208][ T7320] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 140.410623][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.441528][ T7320] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.480119][ T7320] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 140.521571][ T7320] EXT4-fs (loop2): Remounting filesystem read-only [ 140.528222][ T7320] EXT4-fs (loop2): 1 truncate cleaned up [ 140.534125][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.544913][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.588758][ T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 140.609349][ T7320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.705010][ T7333] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 140.714531][ T7333] SELinux: failed to load policy [ 140.722088][ T7333] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.223276][ T7333] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.320787][ T7333] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.392708][ T7333] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.520010][ T803] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.570122][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1386'. [ 141.621577][ T7347] Set syz1 is full, maxelem 65536 reached [ 141.637343][ T803] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.657944][ T803] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.670337][ T803] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.701003][ T7350] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 141.707138][ T7347] loop3: detected capacity change from 0 to 2048 [ 141.795023][ T3309] Alternate GPT is invalid, using primary GPT. [ 141.801599][ T3309] loop3: p2 p3 p7 [ 141.829904][ T7357] loop4: detected capacity change from 0 to 1024 [ 141.841252][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.861661][ T7347] Alternate GPT is invalid, using primary GPT. [ 141.868162][ T7347] loop3: p2 p3 p7 [ 142.024327][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.156234][ T7371] loop4: detected capacity change from 0 to 1024 [ 142.173518][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.183778][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 142.185777][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 142.260922][ T7371] EXT4-fs: inline encryption not supported [ 142.266817][ T7371] EXT4-fs: Ignoring removed i_version option [ 142.293624][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.370280][ T7371] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.540250][ T7371] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1395: lblock 2 mapped to illegal pblock 2 (length 1) [ 142.722029][ T7371] __quota_error: 11 callbacks suppressed [ 142.722049][ T7371] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 142.756679][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 142.763712][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 142.776365][ T7371] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1395: lblock 0 mapped to illegal pblock 48 (length 1) [ 142.790844][ T7371] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 142.799825][ T7371] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1395: Failed to acquire dquot type 0 [ 142.805226][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.825698][ T7380] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 142.839603][ T7371] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 142.849768][ T7380] SELinux: failed to load policy [ 142.855125][ T7371] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1395: mark_inode_dirty error [ 142.867679][ T7380] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.927332][ T7371] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 142.978038][ T7371] EXT4-fs (loop4): 1 orphan inode deleted [ 142.990560][ T7380] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.010410][ T7371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.078532][ T1088] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.103755][ T1088] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 143.112336][ T1088] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 143.241930][ T7385] loop3: detected capacity change from 0 to 512 [ 143.260438][ T7380] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.311439][ T7380] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.341080][ T7371] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.352596][ T7385] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 143.360833][ T7385] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.372241][ T7385] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 143.384152][ T7385] EXT4-fs (loop3): Remounting filesystem read-only [ 143.390980][ T7385] EXT4-fs (loop3): 1 truncate cleaned up [ 143.396867][ T803] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 143.407561][ T803] Quota error (device loop3): write_blk: dquota write failed [ 143.415004][ T803] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 143.425072][ T803] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 143.435653][ T803] Quota error (device loop3): write_blk: dquota write failed [ 143.443069][ T803] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 143.632518][ T803] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 143.642721][ T803] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 143.651647][ T803] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 143.669267][ T7385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.682212][ T7385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.692755][ T7371] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1395: Invalid inode table block 1 in block_group 0 [ 143.716430][ T7371] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 143.731247][ T7371] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1395: mark_inode_dirty error [ 143.833834][ T7389] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 143.900029][ T7393] hub 2-0:1.0: USB hub found [ 143.923415][ T7393] hub 2-0:1.0: 8 ports detected [ 143.985493][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1404'. [ 143.995340][ T7397] Set syz1 is full, maxelem 65536 reached [ 144.015051][ T417] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.028256][ T417] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.045138][ T7397] loop3: detected capacity change from 0 to 2048 [ 144.054719][ T417] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.082156][ T417] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.092083][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 144.112397][ T3309] Alternate GPT is invalid, using primary GPT. [ 144.118776][ T3309] loop3: p2 p3 p7 [ 144.137775][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.156657][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.165609][ T7397] Alternate GPT is invalid, using primary GPT. [ 144.172133][ T7397] loop3: p2 p3 p7 [ 144.230007][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 144.251085][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 144.262379][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 144.283106][ T7411] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 144.308984][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 144.742370][ T7417] loop4: detected capacity change from 0 to 512 [ 144.878991][ T7417] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 144.887067][ T7417] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.894956][ T7417] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 144.907301][ T7417] EXT4-fs (loop4): Remounting filesystem read-only [ 144.914001][ T7417] EXT4-fs (loop4): 1 truncate cleaned up [ 144.919772][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.930328][ T52] Quota error (device loop4): write_blk: dquota write failed [ 144.937736][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.951403][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 144.962526][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.975481][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.998856][ T7423] loop2: detected capacity change from 0 to 512 [ 145.049325][ T7423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.085626][ T7423] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.207039][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.363582][ T7432] loop2: detected capacity change from 0 to 164 [ 146.295377][ T7450] program syz.1.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.319334][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1425'. [ 146.403441][ T7458] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 146.446867][ T7461] loop2: detected capacity change from 0 to 1024 [ 146.453424][ T7458] SELinux: failed to load policy [ 146.463915][ T7461] EXT4-fs: inline encryption not supported [ 146.469850][ T7461] EXT4-fs: Ignoring removed i_version option [ 146.481621][ T7458] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.491780][ T7461] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.523868][ T7461] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1429: lblock 2 mapped to illegal pblock 2 (length 1) [ 146.557814][ T7463] loop1: detected capacity change from 0 to 512 [ 146.558917][ T7461] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1429: lblock 0 mapped to illegal pblock 48 (length 1) [ 146.579173][ T7461] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1429: Failed to acquire dquot type 0 [ 146.600331][ T7458] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.614748][ T7463] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 146.645140][ T7461] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 146.657525][ T7463] EXT4-fs (loop1): invalid journal inode [ 146.665616][ T7458] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.681080][ T7463] EXT4-fs (loop1): can't get journal size [ 146.688926][ T7461] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1429: mark_inode_dirty error [ 146.705425][ T7463] EXT4-fs (loop1): 1 truncate cleaned up [ 146.720133][ T7463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.738527][ T7461] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 146.872118][ T7461] EXT4-fs (loop2): 1 orphan inode deleted [ 146.879668][ T7458] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.889638][ T1088] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 146.910868][ T7461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.037064][ T803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.079509][ T803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.154228][ T803] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.249152][ T803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.288842][ T7470] loop4: detected capacity change from 0 to 512 [ 147.363656][ T1088] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 147.366948][ T7470] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.435793][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.447746][ T7461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.457872][ T7461] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1429: Invalid inode table block 1 in block_group 0 [ 147.510569][ T7461] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 147.527873][ T7461] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1429: mark_inode_dirty error [ 147.573956][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1437'. [ 147.769670][ T7500] loop1: detected capacity change from 0 to 512 [ 147.776591][ T7500] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.902993][ T7506] tipc: Started in network mode [ 147.908007][ T7506] tipc: Node identity 461ce7b91bb2, cluster identity 4711 [ 147.915251][ T7506] tipc: Enabled bearer , priority 0 [ 148.368168][ T7509] loop3: detected capacity change from 0 to 512 [ 148.375178][ T7509] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.501791][ T7515] loop4: detected capacity change from 0 to 1024 [ 148.509145][ T7515] EXT4-fs: inline encryption not supported [ 148.515128][ T7515] EXT4-fs: Ignoring removed i_version option [ 148.523819][ T7515] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.540663][ T7515] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1450: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.577167][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1451'. [ 148.609245][ T7515] __quota_error: 8 callbacks suppressed [ 148.609262][ T7515] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 148.635431][ T7515] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1450: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.691020][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.706334][ T7504] tipc: Disabling bearer [ 148.712677][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.720707][ T7515] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 148.729611][ T7515] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1450: Failed to acquire dquot type 0 [ 148.732297][ T29] audit: type=1326 audit(1767181020.571:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.3.1452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc09140f749 code=0x0 [ 148.762823][ T7515] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 148.793270][ T7515] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1450: mark_inode_dirty error [ 148.822079][ T7515] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 148.838627][ T7515] EXT4-fs (loop4): 1 orphan inode deleted [ 148.848836][ T803] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.849356][ T7515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.875379][ T803] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 148.883890][ T803] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 148.897098][ T7530] loop1: detected capacity change from 0 to 1024 [ 148.906210][ T7515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.923612][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.944806][ T7515] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1450: Invalid inode table block 1 in block_group 0 [ 148.964625][ T7515] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 148.978851][ T7515] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1450: mark_inode_dirty error [ 149.030195][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.095376][ T7542] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 149.129584][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 149.162183][ T7549] loop1: detected capacity change from 0 to 164 [ 149.232035][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 149.969094][ T7558] tipc: Enabled bearer , priority 0 [ 150.162783][ T7568] loop1: detected capacity change from 0 to 1024 [ 150.185155][ T7568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.229156][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.265888][ T7572] loop1: detected capacity change from 0 to 512 [ 150.273150][ T7572] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.345848][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 150.359206][ T7578] loop4: detected capacity change from 0 to 512 [ 150.423080][ T7584] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 150.432372][ T7584] SELinux: failed to load policy [ 150.440643][ T7584] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.470160][ T7578] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 150.478371][ T7578] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.486470][ T7578] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 150.509029][ T7578] EXT4-fs (loop4): Remounting filesystem read-only [ 150.516675][ T7584] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.526002][ T7578] EXT4-fs (loop4): 1 truncate cleaned up [ 150.532458][ T417] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.543060][ T417] Quota error (device loop4): write_blk: dquota write failed [ 150.550609][ T417] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 150.560994][ T417] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.571566][ T417] Quota error (device loop4): write_blk: dquota write failed [ 150.579103][ T417] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 150.589584][ T417] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 150.599808][ T417] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 150.608983][ T417] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 150.619519][ T7578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.620500][ T7584] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.700848][ T7584] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.766209][ T417] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.786341][ T417] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.795316][ T417] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.803601][ T417] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.968741][ T5915] tipc: Node number set to 2818443125 [ 151.027455][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.431333][ T7607] loop1: detected capacity change from 0 to 128 [ 151.555145][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 151.646862][ T7612] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 151.656841][ T7612] EXT4-fs (loop4): invalid journal inode [ 151.669523][ T7612] EXT4-fs (loop4): can't get journal size [ 151.679109][ T7612] EXT4-fs (loop4): 1 truncate cleaned up [ 151.689804][ T7612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.872557][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1486'. [ 152.321356][ T7627] set_capacity_and_notify: 1 callbacks suppressed [ 152.321375][ T7627] loop3: detected capacity change from 0 to 512 [ 152.339277][ T7627] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.463181][ T7607] syz.1.1483: attempt to access beyond end of device [ 152.463181][ T7607] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 152.476924][ T7607] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 152.647899][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.854080][ T7609] syz.1.1483: attempt to access beyond end of device [ 152.854080][ T7609] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 152.867895][ T7609] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 153.203428][ T7650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1499'. [ 153.214880][ T7648] loop5: detected capacity change from 0 to 164 [ 153.293326][ T7652] loop5: detected capacity change from 0 to 512 [ 153.319314][ T7652] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.665048][ T7660] loop1: detected capacity change from 0 to 512 [ 153.889741][ T7660] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.953907][ T7660] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.985119][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 153.995675][ T7660] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 154.058628][ T7660] EXT4-fs (loop1): Remounting filesystem read-only [ 154.086024][ T7660] EXT4-fs (loop1): 1 truncate cleaned up [ 154.092152][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 154.102739][ T12] Quota error (device loop1): write_blk: dquota write failed [ 154.110256][ T12] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 154.120268][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 154.130810][ T12] Quota error (device loop1): write_blk: dquota write failed [ 154.138202][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 154.205247][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 154.215443][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 154.231411][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.244118][ T7660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.264029][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.273347][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.514174][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.776398][ T7693] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1515'. [ 155.349549][ T7715] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1526'. [ 155.471199][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 155.482913][ T7725] Set syz1 is full, maxelem 65536 reached [ 155.500738][ T7725] loop3: detected capacity change from 0 to 2048 [ 155.551630][ T3309] Alternate GPT is invalid, using primary GPT. [ 155.558050][ T3309] loop3: p2 p3 p7 [ 155.569674][ T7725] Alternate GPT is invalid, using primary GPT. [ 155.576068][ T7725] loop3: p2 p3 p7 [ 155.600547][ T7735] tipc: Enabling of bearer rejected, already enabled [ 155.627224][ T7737] program syz.3.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.655372][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 155.666913][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 155.678450][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 155.712714][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 155.717067][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 155.728621][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 155.909528][ T7753] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 156.002748][ T7761] loop3: detected capacity change from 0 to 128 [ 156.033841][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 156.251224][ T7761] syz.3.1545: attempt to access beyond end of device [ 156.251224][ T7761] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 156.264956][ T7761] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 156.274261][ T7761] syz.3.1545: attempt to access beyond end of device [ 156.274261][ T7761] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 156.287962][ T7761] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 156.869483][ T7784] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 157.000490][ T7793] loop4: detected capacity change from 0 to 512 [ 157.008229][ T7793] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 157.026088][ T7793] EXT4-fs (loop4): invalid journal inode [ 157.037706][ T7794] loop2: detected capacity change from 0 to 1024 [ 157.044321][ T7793] EXT4-fs (loop4): can't get journal size [ 157.050568][ T7794] EXT4-fs: inline encryption not supported [ 157.056518][ T7794] EXT4-fs: Ignoring removed i_version option [ 157.070898][ T7793] EXT4-fs (loop4): 1 truncate cleaned up [ 157.081490][ T7793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.097821][ T7794] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.136778][ T7794] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1555: lblock 2 mapped to illegal pblock 2 (length 1) [ 157.154559][ T7794] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 157.162875][ T7794] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1555: lblock 0 mapped to illegal pblock 48 (length 1) [ 157.177429][ T7794] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 157.186344][ T7794] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1555: Failed to acquire dquot type 0 [ 157.198061][ T7794] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 157.208405][ T7800] tipc: Enabled bearer , priority 0 [ 157.215195][ T7794] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1555: mark_inode_dirty error [ 157.248437][ T7800] syzkaller0: entered promiscuous mode [ 157.254038][ T7800] syzkaller0: entered allmulticast mode [ 157.281920][ T7794] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 157.300653][ T7794] EXT4-fs (loop2): 1 orphan inode deleted [ 157.306907][ T7794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.319042][ T417] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.333685][ T417] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 157.342194][ T417] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 157.356446][ T7794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.366268][ T7794] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1555: Invalid inode table block 1 in block_group 0 [ 157.379717][ T7794] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 157.389438][ T7794] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1555: mark_inode_dirty error [ 157.474480][ T7809] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 157.483771][ T7807] loop5: detected capacity change from 0 to 1764 [ 157.495027][ T7809] loop2: detected capacity change from 0 to 164 [ 157.575416][ T29] audit: type=1326 audit(1767181029.411:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.1564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccc530f749 code=0x0 [ 157.967891][ T7797] tipc: Resetting bearer [ 157.983549][ T7797] tipc: Disabling bearer [ 158.024628][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.313551][ T7834] loop4: detected capacity change from 0 to 512 [ 158.908292][ T7843] loop3: detected capacity change from 0 to 512 [ 159.090225][ T7834] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 159.098562][ T7834] EXT4-fs (loop4): orphan cleanup on readonly fs [ 159.116423][ T7843] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 159.124716][ T7843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.134280][ T7843] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1570: corrupted inode contents [ 159.309132][ T7843] EXT4-fs (loop3): Remounting filesystem read-only [ 159.316001][ T7843] EXT4-fs (loop3): 1 truncate cleaned up [ 159.321829][ T7834] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1567: corrupted inode contents [ 159.507232][ T7851] loop5: detected capacity change from 0 to 512 [ 159.577317][ T7853] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 159.624477][ T7853] SELinux: failed to load policy [ 159.648918][ T7834] EXT4-fs (loop4): Remounting filesystem read-only [ 159.655620][ T7834] EXT4-fs (loop4): 1 truncate cleaned up [ 159.680052][ T7851] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 159.688309][ T7851] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.698083][ T7851] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1572: corrupted inode contents [ 159.711949][ T7851] EXT4-fs (loop5): Remounting filesystem read-only [ 159.718605][ T7851] EXT4-fs (loop5): 1 truncate cleaned up [ 159.753814][ T7858] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.835283][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.845996][ T52] Quota error (device loop3): write_blk: dquota write failed [ 159.853618][ T52] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 159.863655][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.874255][ T52] Quota error (device loop3): write_blk: dquota write failed [ 159.881668][ T52] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 159.891604][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 159.894548][ T7858] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.901777][ T52] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 159.902019][ T52] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 159.932573][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.943356][ T52] Quota error (device loop4): write_blk: dquota write failed [ 159.950823][ T52] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 159.960963][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.971764][ T52] Quota error (device loop4): write_blk: dquota write failed [ 159.979279][ T52] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 159.990075][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 160.000560][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 160.011282][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 160.022036][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 160.033773][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.073330][ T7851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.086740][ T7834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.138604][ T7858] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.437472][ T7860] Set syz1 is full, maxelem 65536 reached [ 160.495209][ T7858] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.529622][ T3995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.539450][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.602314][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.616174][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.648977][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.657601][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.665975][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.676688][ T7867] tipc: Enabling of bearer rejected, already enabled [ 160.722477][ T7867] syzkaller0: entered promiscuous mode [ 160.728122][ T7867] syzkaller0: entered allmulticast mode [ 160.829438][ T7881] loop2: detected capacity change from 0 to 1024 [ 160.836257][ T7881] EXT4-fs: inline encryption not supported [ 160.842713][ T7881] EXT4-fs: Ignoring removed i_version option [ 160.851937][ T7881] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.864541][ T7881] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1583: lblock 2 mapped to illegal pblock 2 (length 1) [ 160.878808][ T7881] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1583: lblock 0 mapped to illegal pblock 48 (length 1) [ 160.893165][ T7881] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1583: Failed to acquire dquot type 0 [ 160.904692][ T7881] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 160.914531][ T7881] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1583: mark_inode_dirty error [ 160.926086][ T7881] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 160.936738][ T7881] EXT4-fs (loop2): 1 orphan inode deleted [ 160.943233][ T7881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.955646][ T12] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.971714][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 160.984376][ T7881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.995901][ T7881] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1583: Invalid inode table block 1 in block_group 0 [ 161.012205][ T7881] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 161.021871][ T7881] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1583: mark_inode_dirty error [ 161.083745][ T7891] loop4: detected capacity change from 0 to 1024 [ 161.092488][ T7891] EXT4-fs: inline encryption not supported [ 161.098365][ T7891] EXT4-fs: Ignoring removed i_version option [ 161.111394][ T7891] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.123445][ T7891] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1587: lblock 2 mapped to illegal pblock 2 (length 1) [ 161.137772][ T7891] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1587: lblock 0 mapped to illegal pblock 48 (length 1) [ 161.152222][ T7891] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1587: Failed to acquire dquot type 0 [ 161.163882][ T7891] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 161.173530][ T7891] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1587: mark_inode_dirty error [ 161.188579][ T7891] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 161.199045][ T7891] EXT4-fs (loop4): 1 orphan inode deleted [ 161.205541][ T7891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.218372][ T55] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.234416][ T55] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 161.247299][ T7891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.249797][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1590'. [ 161.257425][ T7891] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1587: Invalid inode table block 1 in block_group 0 [ 161.270925][ T7898] Set syz1 is full, maxelem 65536 reached [ 161.279563][ T7891] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 161.293419][ T7891] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1587: mark_inode_dirty error [ 161.309603][ T7898] loop2: detected capacity change from 0 to 2048 [ 161.381730][ T3776] Alternate GPT is invalid, using primary GPT. [ 161.388270][ T3776] loop2: p2 p3 p7 [ 161.399537][ T7898] Alternate GPT is invalid, using primary GPT. [ 161.405944][ T7898] loop2: p2 p3 p7 [ 161.431505][ T3529] ================================================================== [ 161.439644][ T3529] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 161.446802][ T3529] [ 161.449147][ T3529] write to 0xffff8881052d9548 of 4 bytes by task 3309 on cpu 1: [ 161.456794][ T3529] touch_atime+0x1e8/0x340 [ 161.461278][ T3529] shmem_file_read_iter+0x477/0x540 [ 161.466511][ T3529] vfs_read+0x64c/0x770 [ 161.470707][ T3529] ksys_read+0xda/0x1a0 [ 161.474970][ T3529] __x64_sys_read+0x40/0x50 [ 161.479511][ T3529] x64_sys_call+0x2889/0x3000 [ 161.484223][ T3529] do_syscall_64+0xca/0x2b0 [ 161.488857][ T3529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.494772][ T3529] [ 161.497116][ T3529] read to 0xffff8881052d9548 of 4 bytes by task 3529 on cpu 0: [ 161.504673][ T3529] generic_fillattr+0x172/0x340 [ 161.509554][ T3529] shmem_getattr+0x181/0x200 [ 161.514173][ T3529] vfs_getattr_nosec+0x146/0x1e0 [ 161.519135][ T3529] __se_sys_newfstat+0x96/0x2e0 [ 161.524016][ T3529] __x64_sys_newfstat+0x31/0x40 [ 161.528891][ T3529] x64_sys_call+0x2c51/0x3000 [ 161.533599][ T3529] do_syscall_64+0xca/0x2b0 [ 161.538133][ T3529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.544047][ T3529] [ 161.546387][ T3529] value changed: 0x1070ebb2 -> 0x1092ead4 [ 161.552114][ T3529] [ 161.554486][ T3529] Reported by Kernel Concurrency Sanitizer on: [ 161.560663][ T3529] CPU: 0 UID: 0 PID: 3529 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.569967][ T3529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.580044][ T3529] ================================================================== [ 161.660841][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 161.661190][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 161.681897][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 161.696095][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 161.696041][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 161.702628][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory