last executing test programs: 1m22.482060721s ago: executing program 2 (id=312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m22.344427092s ago: executing program 2 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) 1m22.078957423s ago: executing program 2 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000040)=r2}, 0x20) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m21.979859791s ago: executing program 2 (id=322): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1m20.645644299s ago: executing program 2 (id=331): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x0, 0x1, 0x11, "0e36af413bb901527fe4d0ce5d295c3676345a41499dd6aac69c4730251a0ca0ea0000000000000000000c00002000", "038447c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m19.980995863s ago: executing program 2 (id=338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x2, 0x40, r3, 0x40000000}, 0x50) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 1m4.820643376s ago: executing program 32 (id=338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x2, 0x40, r3, 0x40000000}, 0x50) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 55.962388193s ago: executing program 4 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) 55.764035949s ago: executing program 4 (id=602): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) execve(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 54.483104262s ago: executing program 4 (id=617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) umount2(&(0x7f0000000000)='./file0\x00', 0xb) 54.321954575s ago: executing program 4 (id=620): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x0, 0x1, 0x11, "0e36af413bb901527fe4d0ce5d295c3676345a41499dd6aac69c4730251a0ca0ea0000000000000000000c00002000", "038447c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 53.796394679s ago: executing program 4 (id=626): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x79) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 52.947360247s ago: executing program 4 (id=632): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x53}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) close(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) 52.879932332s ago: executing program 33 (id=632): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x53}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) close(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) 4.341902429s ago: executing program 6 (id=1109): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b4000000100009040000", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 4.297826773s ago: executing program 1 (id=1110): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/1, 0x1}, 0x7}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x8, 0x6, 0xa, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x8, 0x20000}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}, @const={0x7, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x3a, 0x0, 0x1, 0x3, 0x558dc5433a1fcaae, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x42, 0x0, 0x1, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r8, &(0x7f0000000100)=""/100, 0x64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 3.386347946s ago: executing program 1 (id=1116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 3.281249314s ago: executing program 6 (id=1117): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000884}, 0x1000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 2.84380985s ago: executing program 6 (id=1118): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) stat(0x0, 0x0) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x65, &(0x7f00000001c0)=""/101, 0x41000, 0x23, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x7, 0x80000001}, 0x10, 0x0, r0, 0x6, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x4, 0xa}, {0x3, 0x1, 0x3, 0xa}, {0x4, 0x3, 0x6, 0x8}, {0x1, 0x3, 0x2, 0x4}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0xffff34f0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xa0000004}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 2.755073767s ago: executing program 5 (id=1120): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0x11, 0x40, 0xffffffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ppoll(&(0x7f00000000c0)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) 2.514741206s ago: executing program 5 (id=1122): open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 2.371750788s ago: executing program 1 (id=1124): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.131717987s ago: executing program 5 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r2 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x104, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) close(0x3) close_range(r2, 0xffffffffffffffff, 0x0) 1.892549816s ago: executing program 6 (id=1126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$xdp(0x2c, 0x3, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.879034878s ago: executing program 3 (id=1128): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b40000001000090400000000000000", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.568025453s ago: executing program 1 (id=1131): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.414042095s ago: executing program 6 (id=1132): socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.394048867s ago: executing program 0 (id=1133): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x18, 0x1, 0xb1, 0x0, 0x42}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180070fcaeb9d09d7666", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 1.332362962s ago: executing program 1 (id=1134): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.122706029s ago: executing program 5 (id=1135): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='kfree\x00', r2}, 0x18) copy_file_range(r3, &(0x7f0000000700)=0x9, r1, 0x0, 0x6, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002700)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x8040006, {0x0, 0x0, 0x0, r7, {0xffff, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x15d8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.082685032s ago: executing program 3 (id=1137): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0xc040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) 1.024385527s ago: executing program 0 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 984.82835ms ago: executing program 3 (id=1139): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 938.070294ms ago: executing program 0 (id=1140): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 937.664594ms ago: executing program 5 (id=1141): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 929.744495ms ago: executing program 3 (id=1142): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x48, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) socket$inet(0x2, 0x3, 0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$char_usb(r3, 0x0, 0x0) 880.749029ms ago: executing program 0 (id=1143): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) write$cgroup_type(r1, &(0x7f0000000080), 0x9) fallocate(r0, 0x0, 0x100, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x4, 0x0, 0x0, 0xfffffffffdffffff}) 696.249473ms ago: executing program 3 (id=1144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$xdp(0x2c, 0x3, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 327.434483ms ago: executing program 0 (id=1145): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 160.244357ms ago: executing program 6 (id=1146): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/1, 0x1}, 0x7}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000400"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x8, 0x6, 0xa, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x8, 0x20000}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/3, 0x0, 0x3, 0x1, 0x3, 0x558dc5433a1fcaae, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r10, 0x42, 0x0, 0x1, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r11, &(0x7f0000000100)=""/100, 0x64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r12, 0x0) 159.430147ms ago: executing program 1 (id=1147): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b40000001000090400000000000000", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x0, &(0x7f0000000900)='\x00'/10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 124.34725ms ago: executing program 0 (id=1148): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="610302100206039040560b68f43397c068015ee79cd942a3edb22fc26a11515b10a1d8c13e80049b9748c323db96f7d12ebf700dafac917aa1673e82f5688f240c6343524a1b5df3d7fe239ebd181fde39851ea0673c9a594ef7daf5ba9a06f7f57d84da2a1d7244c8e798136eb76f02e61fc8c0706e50e1df761addea171ce71007afb5a76642b330ebd000e46885dd5617f07631d62f667e432c35f83f6479c7020deee2fca2782ce3a3682ca709d469699b6e8e04a69d5317b3442640bd1ddb1c8fd2f17f9efb87861dc86dfb9654e825dc324a477f713b2c783dff8d2df47fdeb20d589025f0e345cdd714a401175b941409374ba39e26899134480ff3a244d6762887f1d34347159f8689423332d7d3c47fbaf9"], 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_rr_get_interval(0x0, &(0x7f0000000380)) 123.39031ms ago: executing program 5 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) 0s ago: executing program 3 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 103.418614][ T29] audit: type=1326 audit(1756560714.655:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 103.459078][ T29] audit: type=1326 audit(1756560714.655:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 103.496811][ T5866] loop0: detected capacity change from 0 to 1024 [ 103.504069][ T5867] loop3: detected capacity change from 0 to 512 [ 103.520953][ T5863] loop6: detected capacity change from 0 to 2048 [ 103.527447][ T29] audit: type=1326 audit(1756560714.805:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 103.544672][ T5867] EXT4-fs: Ignoring removed nobh option [ 103.565549][ T29] audit: type=1326 audit(1756560714.805:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 103.631416][ T5873] loop5: detected capacity change from 0 to 1024 [ 103.634477][ T5867] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.766: iget: bad i_size value: 38620345925642 [ 103.652334][ T5866] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.664338][ T5867] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.766: couldn't read orphan inode 15 (err -117) [ 103.707185][ T5881] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.765: inline data xattr refers to an external xattr inode [ 103.752005][ T5878] loop1: detected capacity change from 0 to 1024 [ 103.793570][ T5873] support for cryptoloop has been removed. Use dm-crypt instead. [ 103.793950][ T5878] EXT4-fs: Ignoring removed bh option [ 103.839010][ T5881] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.896780][ T5881] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 216 with error 28 [ 103.912756][ T5881] EXT4-fs (loop6): This should not happen!! Data will be lost [ 103.912756][ T5881] [ 103.928468][ T5881] EXT4-fs (loop6): Total free blocks count 0 [ 103.937191][ T5881] EXT4-fs (loop6): Free/Dirty block details [ 103.946077][ T5881] EXT4-fs (loop6): free_blocks=2415919104 [ 103.954942][ T5881] EXT4-fs (loop6): dirty_blocks=224 [ 103.962347][ T5881] EXT4-fs (loop6): Block reservation details [ 103.970185][ T5881] EXT4-fs (loop6): i_reserved_data_blocks=14 [ 104.036048][ T5867] EXT4-fs (loop3): shut down requested (0) [ 104.052076][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 104.115476][ T51] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 104.160057][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1768 with error 28 [ 104.179620][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.179620][ T51] [ 104.197932][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 104.207507][ T51] EXT4-fs (loop3): Free/Dirty block details [ 104.218792][ T51] EXT4-fs (loop3): free_blocks=0 [ 104.229013][ T51] EXT4-fs (loop3): dirty_blocks=1772 [ 104.236002][ T51] EXT4-fs (loop3): Block reservation details [ 104.246178][ T51] EXT4-fs (loop3): i_reserved_data_blocks=1772 [ 104.342686][ T5904] smc: net device bond0 erased user defined pnetid SYZ0 [ 104.503566][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 104.522752][ T51] EXT4-fs (loop6): This should not happen!! Data will be lost [ 104.522752][ T51] [ 104.627465][ T5914] loop6: detected capacity change from 0 to 512 [ 104.666652][ T5914] EXT4-fs mount: 16 callbacks suppressed [ 104.666670][ T5914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.714919][ T5916] loop3: detected capacity change from 0 to 2048 [ 104.726760][ T5914] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.751441][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 104.836952][ T5923] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.781: inline data xattr refers to an external xattr inode [ 104.946204][ T5923] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.946398][ T5923] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 698 with error 28 [ 104.946500][ T5923] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.946500][ T5923] [ 104.946514][ T5923] EXT4-fs (loop3): Total free blocks count 0 [ 104.946529][ T5923] EXT4-fs (loop3): Free/Dirty block details [ 104.946542][ T5923] EXT4-fs (loop3): free_blocks=2415919104 [ 104.946556][ T5923] EXT4-fs (loop3): dirty_blocks=704 [ 104.946569][ T5923] EXT4-fs (loop3): Block reservation details [ 104.946586][ T5923] EXT4-fs (loop3): i_reserved_data_blocks=44 [ 104.974967][ T31] EXT4-fs error: 1341 callbacks suppressed [ 104.974988][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 104.978797][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 104.980525][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 104.982100][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 104.989187][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 105.233670][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 105.235331][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 105.270426][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 105.291094][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 105.294371][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 105.361356][ T1825] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 105.448646][ T5937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.785'. [ 105.479026][ T5937] loop3: detected capacity change from 0 to 2048 [ 105.482235][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.517916][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 105.568315][ T5947] netlink: 'syz.5.789': attribute type 13 has an invalid length. [ 105.568360][ T5947] netlink: 'syz.5.789': attribute type 17 has an invalid length. [ 105.568383][ T5947] lo: left promiscuous mode [ 105.568397][ T5947] lo: left allmulticast mode [ 105.569879][ T5947] tunl0: left promiscuous mode [ 105.569899][ T5947] tunl0: left allmulticast mode [ 105.575707][ T5947] gre0: left promiscuous mode [ 105.575730][ T5947] gre0: left allmulticast mode [ 105.595034][ T5947] 0ªî{X¹¦: left promiscuous mode [ 105.595057][ T5947] 0ªî{X¹¦: left allmulticast mode [ 105.600222][ T5948] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.785: inline data xattr refers to an external xattr inode [ 105.615585][ T5947] erspan0: left promiscuous mode [ 105.615609][ T5947] erspan0: left allmulticast mode [ 105.629002][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.629065][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.631041][ T5947] ip_vti0: left promiscuous mode [ 105.631070][ T5947] ip_vti0: left allmulticast mode [ 105.632302][ T5947] ip6_vti0: left promiscuous mode [ 105.632371][ T5947] ip6_vti0: left allmulticast mode [ 105.634365][ T5947] sit0: left promiscuous mode [ 105.634470][ T5947] sit0: left allmulticast mode [ 105.635891][ T5947] ip6tnl0: left promiscuous mode [ 105.635909][ T5947] ip6tnl0: left allmulticast mode [ 105.637436][ T5947] ip6gre0: left promiscuous mode [ 105.637456][ T5947] ip6gre0: left allmulticast mode [ 105.639091][ T5947] syz_tun: left promiscuous mode [ 105.639109][ T5947] syz_tun: left allmulticast mode [ 105.647724][ T5947] ip6gretap0: left promiscuous mode [ 105.647747][ T5947] ip6gretap0: left allmulticast mode [ 105.656362][ T5947] bridge0: left promiscuous mode [ 105.656384][ T5947] bridge0: left allmulticast mode [ 105.657625][ T5947] vcan0: left promiscuous mode [ 105.657643][ T5947] vcan0: left allmulticast mode [ 105.657909][ T5947] bond0: left promiscuous mode [ 105.657933][ T5947] bond_slave_0: left promiscuous mode [ 105.657989][ T5947] bond_slave_1: left promiscuous mode [ 105.658208][ T5947] bond0: left allmulticast mode [ 105.658220][ T5947] bond_slave_0: left allmulticast mode [ 105.658234][ T5947] bond_slave_1: left allmulticast mode [ 105.660129][ T5947] team0: left allmulticast mode [ 105.660144][ T5947] team_slave_0: left allmulticast mode [ 105.660157][ T5947] team_slave_1: left allmulticast mode [ 105.672575][ T5948] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 105.680626][ T5947] dummy0: left promiscuous mode [ 105.685399][ T5948] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.691513][ T5947] dummy0: left allmulticast mode [ 105.734296][ T5948] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 414 with error 28 [ 105.915054][ T5947] nlmon0: left promiscuous mode [ 105.917051][ T5948] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.917051][ T5948] [ 105.917073][ T5948] EXT4-fs (loop3): Total free blocks count 0 [ 105.917087][ T5948] EXT4-fs (loop3): Free/Dirty block details [ 105.917099][ T5948] EXT4-fs (loop3): free_blocks=2415919104 [ 105.917185][ T5948] EXT4-fs (loop3): dirty_blocks=416 [ 105.927450][ T5947] nlmon0: left allmulticast mode [ 105.935786][ T5948] EXT4-fs (loop3): Block reservation details [ 105.959600][ T5948] EXT4-fs (loop3): i_reserved_data_blocks=26 [ 106.206091][ T5947] caif0: left promiscuous mode [ 106.206107][ T5947] caif0: left allmulticast mode [ 106.206121][ T5947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.208859][ T5949] IPv6: sit1: Disabled Multicast RS [ 106.393245][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 106.406994][ T5959] loop6: detected capacity change from 0 to 128 [ 106.419215][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 106.450802][ T5959] syz.6.792: attempt to access beyond end of device [ 106.450802][ T5959] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 106.492594][ T5959] syz.6.792: attempt to access beyond end of device [ 106.492594][ T5959] loop6: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 106.516037][ T5959] syz.6.792: attempt to access beyond end of device [ 106.516037][ T5959] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 106.536430][ T5959] buffer_io_error: 11 callbacks suppressed [ 106.536449][ T5959] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 106.578157][ T5959] syz.6.792: attempt to access beyond end of device [ 106.578157][ T5959] loop6: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 106.602970][ T5959] syz.6.792: attempt to access beyond end of device [ 106.602970][ T5959] loop6: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 106.621027][ T5959] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 106.656628][ T5959] syz.6.792: attempt to access beyond end of device [ 106.656628][ T5959] loop6: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 106.685914][ T5959] syz.6.792: attempt to access beyond end of device [ 106.685914][ T5959] loop6: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 106.704545][ T5959] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 106.751368][ T5959] syz.6.792: attempt to access beyond end of device [ 106.751368][ T5959] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 106.853801][ T5959] syz.6.792: attempt to access beyond end of device [ 106.853801][ T5959] loop6: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 106.892842][ T5959] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 106.919355][ T5959] Buffer I/O error on dev loop6, logical block 108, lost async page write [ 106.941822][ T5959] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 106.962883][ T5990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.795'. [ 106.978575][ T5959] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 106.992249][ T5959] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 107.003797][ T5959] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 107.080050][ T5959] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 107.538425][ T6021] program syz.3.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.562955][ T6022] loop5: detected capacity change from 0 to 512 [ 107.596163][ T6022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.619466][ T6018] loop1: detected capacity change from 0 to 164 [ 107.650446][ T6018] bio_check_eod: 21 callbacks suppressed [ 107.650526][ T6018] syz.1.799: attempt to access beyond end of device [ 107.650526][ T6018] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 107.723844][ T6018] syz.1.799: attempt to access beyond end of device [ 107.723844][ T6018] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 108.125315][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 108.125334][ T29] audit: type=1400 audit(1756560719.415:6269): avc: denied { read } for pid=6039 comm="syz.6.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.254915][ T29] audit: type=1400 audit(1756560719.465:6270): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 108.280955][ T29] audit: type=1400 audit(1756560719.485:6271): avc: denied { ioctl } for pid=6044 comm="syz.1.806" path="socket:[13204]" dev="sockfs" ino=13204 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.594892][ T6054] tipc: Enabled bearer , priority 0 [ 108.705014][ T6051] tipc: Resetting bearer [ 108.762060][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.812882][ T6051] tipc: Disabling bearer [ 108.956679][ T29] audit: type=1400 audit(1756560720.235:6272): avc: denied { create } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.990008][ T29] audit: type=1400 audit(1756560720.245:6273): avc: denied { connect } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.024210][ T29] audit: type=1400 audit(1756560720.245:6274): avc: denied { setopt } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.067076][ T29] audit: type=1400 audit(1756560720.345:6275): avc: denied { bind } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.102117][ T29] audit: type=1400 audit(1756560720.345:6276): avc: denied { remount } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.139118][ T29] audit: type=1400 audit(1756560720.345:6277): avc: denied { write } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.176622][ T29] audit: type=1400 audit(1756560720.345:6278): avc: denied { read } for pid=6059 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.313615][ T6062] Falling back ldisc for ttyS3. [ 109.378532][ T6069] loop1: detected capacity change from 0 to 128 [ 109.462061][ T6069] syz.1.812: attempt to access beyond end of device [ 109.462061][ T6069] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 109.516901][ T6069] syz.1.812: attempt to access beyond end of device [ 109.516901][ T6069] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 109.554038][ T6069] syz.1.812: attempt to access beyond end of device [ 109.554038][ T6069] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 109.597106][ T6072] syzkaller0: entered promiscuous mode [ 109.606026][ T6072] syzkaller0: entered allmulticast mode [ 109.626985][ T6069] syz.1.812: attempt to access beyond end of device [ 109.626985][ T6069] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 109.711304][ T6069] syz.1.812: attempt to access beyond end of device [ 109.711304][ T6069] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 109.819191][ T6069] syz.1.812: attempt to access beyond end of device [ 109.819191][ T6069] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 109.938559][ T6086] loop3: detected capacity change from 0 to 512 [ 109.948659][ T6069] syz.1.812: attempt to access beyond end of device [ 109.948659][ T6069] loop1: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 109.989032][ T31] EXT4-fs error: 1104 callbacks suppressed [ 109.989049][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 110.006011][ T6086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.038331][ T6069] syz.1.812: attempt to access beyond end of device [ 110.038331][ T6069] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 110.063586][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 110.084143][ T6086] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.090980][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 110.116167][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 110.137803][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 110.157326][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 110.183406][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 110.236049][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 110.314847][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 110.346239][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 110.472065][ T6093] loop6: detected capacity change from 0 to 512 [ 110.487249][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.547941][ T6093] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 110.572591][ T6095] netlink: 'syz.5.821': attribute type 4 has an invalid length. [ 110.687481][ T6093] EXT4-fs (loop6): 1 truncate cleaned up [ 110.696425][ T6093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.743887][ T6090] loop0: detected capacity change from 0 to 512 [ 110.767682][ T6090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.806399][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.982295][ T6090] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.819: bad orphan inode 11 [ 111.134057][ T6090] ext4_test_bit(bit=10, block=4) = 1 [ 111.146010][ T6090] is_bad_inode(inode)=0 [ 111.151544][ T6090] NEXT_ORPHAN(inode)=2080374784 [ 111.158283][ T6090] max_ino=32 [ 111.162505][ T6090] i_nlink=0 [ 111.195607][ T6111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.256035][ T6090] EXT4-fs (loop0): 1 truncate cleaned up [ 111.279374][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.369150][ T6111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.512908][ T6111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.534117][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.592408][ T6111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.683400][ T1825] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.706115][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.755892][ T59] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.813719][ T1825] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.867829][ T6125] loop3: detected capacity change from 0 to 128 [ 111.881725][ T6125] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.898822][ T6125] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.018230][ T6130] loop5: detected capacity change from 0 to 1024 [ 112.049997][ T6127] loop1: detected capacity change from 0 to 2048 [ 112.076044][ T6130] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.834: Failed to acquire dquot type 0 [ 112.106879][ T6130] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 112.109526][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 112.184646][ T6130] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.834: corrupted inode contents [ 112.210740][ T6130] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.834: mark_inode_dirty error [ 112.253038][ T6130] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.834: corrupted inode contents [ 112.281779][ T6130] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.834: mark_inode_dirty error [ 112.299291][ T6139] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.833: inline data xattr refers to an external xattr inode [ 112.340483][ T6140] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 112.348797][ T6140] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.361075][ T6140] vhci_hcd vhci_hcd.0: Device attached [ 112.375207][ T6130] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.834: corrupted inode contents [ 112.404032][ T6141] vhci_hcd: connection closed [ 112.405995][ T59] vhci_hcd: stop threads [ 112.416962][ T6130] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 112.418884][ T59] vhci_hcd: release socket [ 112.438845][ T59] vhci_hcd: disconnect device [ 112.449369][ T6145] bridge_slave_0: left allmulticast mode [ 112.459260][ T6145] bridge_slave_0: left promiscuous mode [ 112.467983][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.479340][ T6130] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.834: corrupted inode contents [ 112.509291][ T6139] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.535108][ T6139] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 660 with error 28 [ 112.536296][ T6145] bridge_slave_1: left allmulticast mode [ 112.552203][ T6139] EXT4-fs (loop1): This should not happen!! Data will be lost [ 112.552203][ T6139] [ 112.552227][ T6139] EXT4-fs (loop1): Total free blocks count 0 [ 112.552305][ T6139] EXT4-fs (loop1): Free/Dirty block details [ 112.559637][ T6145] bridge_slave_1: left promiscuous mode [ 112.574904][ T6139] EXT4-fs (loop1): free_blocks=2415919104 [ 112.574928][ T6139] EXT4-fs (loop1): dirty_blocks=672 [ 112.574943][ T6139] EXT4-fs (loop1): Block reservation details [ 112.584070][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.592073][ T6139] EXT4-fs (loop1): i_reserved_data_blocks=42 [ 112.605048][ T6130] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.834: mark_inode_dirty error [ 112.675155][ T6130] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 112.675288][ T6145] bond0: (slave bond_slave_0): Releasing backup interface [ 112.727216][ T6130] EXT4-fs (loop5): 1 truncate cleaned up [ 112.742641][ T6145] bond0: (slave bond_slave_1): Releasing backup interface [ 112.759933][ T6130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.789866][ T6145] team0: Port device team_slave_0 removed [ 112.803327][ T6130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.852868][ T6145] team0: Port device team_slave_1 removed [ 112.870119][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.881072][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.897890][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.910574][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.986821][ T6146] team0: Mode changed to "activebackup" [ 113.011537][ T145] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 113.166960][ T6160] loop5: detected capacity change from 0 to 1024 [ 113.197921][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 113.197963][ T29] audit: type=1326 audit(1756560724.485:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.244290][ T29] audit: type=1326 audit(1756560724.485:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.275592][ T29] audit: type=1326 audit(1756560724.485:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.289665][ T6162] loop6: detected capacity change from 0 to 512 [ 113.312839][ T29] audit: type=1326 audit(1756560724.485:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.356089][ T29] audit: type=1326 audit(1756560724.485:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.393293][ T29] audit: type=1326 audit(1756560724.485:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.428316][ T29] audit: type=1326 audit(1756560724.485:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.464060][ T29] audit: type=1326 audit(1756560724.485:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.467124][ T6162] EXT4-fs (loop6): too many log groups per flexible block group [ 113.499024][ T29] audit: type=1326 audit(1756560724.485:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.510366][ T6162] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 113.546740][ T29] audit: type=1326 audit(1756560724.535:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.6.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 113.574402][ T6162] EXT4-fs (loop6): mount failed [ 113.608316][ T6160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.222875][ T6179] loop3: detected capacity change from 0 to 1024 [ 114.259705][ T6179] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.279218][ T6179] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.300113][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.316718][ T6179] JBD2: no valid journal superblock found [ 114.325979][ T6179] EXT4-fs (loop3): Could not load journal inode [ 114.333189][ T6183] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 114.345094][ T6183] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.354794][ T6183] vhci_hcd vhci_hcd.0: Device attached [ 114.404338][ T6186] vhci_hcd: connection closed [ 114.407023][ T59] vhci_hcd: stop threads [ 114.418071][ T59] vhci_hcd: release socket [ 114.424566][ T59] vhci_hcd: disconnect device [ 114.450022][ T6189] loop1: detected capacity change from 0 to 2048 [ 114.507146][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 114.585826][ T6205] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.854: inline data xattr refers to an external xattr inode [ 114.608658][ T6203] loop5: detected capacity change from 0 to 512 [ 114.647581][ T6203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.665967][ T6203] EXT4-fs: Ignoring removed i_version option [ 114.688607][ T6205] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.740427][ T6205] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 62 with max blocks 1084 with error 28 [ 114.762251][ T6205] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.762251][ T6205] [ 114.779822][ T6205] EXT4-fs (loop1): Total free blocks count 0 [ 114.789265][ T6205] EXT4-fs (loop1): Free/Dirty block details [ 114.798551][ T6205] EXT4-fs (loop1): free_blocks=2415919104 [ 114.809122][ T6205] EXT4-fs (loop1): dirty_blocks=1152 [ 114.818609][ T6205] EXT4-fs (loop1): Block reservation details [ 114.826651][ T6205] EXT4-fs (loop1): i_reserved_data_blocks=72 [ 114.847433][ T6203] EXT4-fs (loop5): 1 orphan inode deleted [ 114.880294][ T6203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.979580][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.000165][ T31] EXT4-fs error: 1607 callbacks suppressed [ 115.000182][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 115.132635][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 115.150636][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 115.180311][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 115.195332][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 115.246013][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 115.276162][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 115.298663][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 115.315660][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 115.345928][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 115.374178][ T6217] loop3: detected capacity change from 0 to 2048 [ 115.393876][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 115.414453][ T5447] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 115.438387][ T6217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 115.530305][ T6233] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.862: inline data xattr refers to an external xattr inode [ 115.632997][ T6233] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.682608][ T6233] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1182 with error 28 [ 115.699611][ T6233] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.699611][ T6233] [ 115.713162][ T6233] EXT4-fs (loop3): Total free blocks count 0 [ 115.721651][ T6233] EXT4-fs (loop3): Free/Dirty block details [ 115.729117][ T6233] EXT4-fs (loop3): free_blocks=2415919104 [ 115.737315][ T6233] EXT4-fs (loop3): dirty_blocks=1184 [ 115.748718][ T6233] EXT4-fs (loop3): Block reservation details [ 115.758078][ T6233] EXT4-fs (loop3): i_reserved_data_blocks=74 [ 116.315849][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 116.393373][ T6260] loop0: detected capacity change from 0 to 1024 [ 116.425082][ T6260] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 116.441941][ T6260] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 116.466414][ T6260] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 116.495009][ T6262] SELinux: security policydb version 17 (MLS) not backwards compatible [ 116.526451][ T6266] loop6: detected capacity change from 0 to 164 [ 116.537516][ T6260] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #5: comm syz.0.878: unexpected bad inode w/o EXT4_IGET_BAD [ 116.550922][ T6262] SELinux: failed to load policy [ 116.564787][ T6266] rock: directory entry would overflow storage [ 116.574734][ T6266] rock: sig=0x66, size=4, remaining=3 [ 116.586990][ T6260] EXT4-fs (loop0): no journal found [ 116.587009][ T6260] EXT4-fs (loop0): can't get journal size [ 116.596664][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.597729][ T6266] rock: directory entry would overflow storage [ 116.597740][ T6266] rock: sig=0x66, size=4, remaining=3 [ 116.605834][ T6266] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.660918][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.693505][ T6272] loop6: detected capacity change from 0 to 164 [ 116.833323][ T6280] loop0: detected capacity change from 0 to 2048 [ 116.833691][ T6280] EXT4-fs: Ignoring removed orlov option [ 116.848604][ T6280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.958047][ T6293] binfmt_misc: register: failed to install interpreter file ./file2 [ 117.048262][ T6297] loop1: detected capacity change from 0 to 2048 [ 117.079195][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 117.250273][ T6309] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.887: inline data xattr refers to an external xattr inode [ 117.351757][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.384153][ T6309] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.457232][ T6309] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 320 with error 28 [ 117.475609][ T6309] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.475609][ T6309] [ 117.488890][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.489085][ T6309] EXT4-fs (loop1): Total free blocks count 0 [ 117.500177][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.507863][ T6309] EXT4-fs (loop1): Free/Dirty block details [ 117.507881][ T6309] EXT4-fs (loop1): free_blocks=2415919104 [ 117.507895][ T6309] EXT4-fs (loop1): dirty_blocks=336 [ 117.540266][ T6309] EXT4-fs (loop1): Block reservation details [ 117.549397][ T6309] EXT4-fs (loop1): i_reserved_data_blocks=21 [ 117.577138][ T6320] bridge0: entered allmulticast mode [ 117.622662][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.633730][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.646473][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.655015][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.676128][ T6320] bridge0: entered promiscuous mode [ 117.776986][ T6333] loop3: detected capacity change from 0 to 512 [ 117.845275][ T6333] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.898: missing EA_INODE flag [ 117.878774][ T6333] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.898: error while reading EA inode 11 err=-117 [ 117.898675][ T6333] EXT4-fs (loop3): 1 orphan inode deleted [ 117.909556][ T6333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.975727][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.999328][ T1825] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 118.085174][ T6341] syzkaller0: entered promiscuous mode [ 118.093752][ T6341] syzkaller0: entered allmulticast mode [ 118.095765][ T6343] loop1: detected capacity change from 0 to 164 [ 118.213160][ T6343] hub 6-0:1.0: USB hub found [ 118.225102][ T6343] hub 6-0:1.0: 8 ports detected [ 118.509810][ T6362] loop6: detected capacity change from 0 to 512 [ 118.520770][ T6362] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.537789][ T6362] EXT4-fs (loop6): 1 truncate cleaned up [ 118.562773][ T6362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.604333][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 118.604350][ T29] audit: type=1326 audit(1756560729.895:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91118eebe9 code=0x7ffc0000 [ 118.623983][ T6368] netlink: 148 bytes leftover after parsing attributes in process `syz.5.911'. [ 118.646289][ T29] audit: type=1326 audit(1756560729.895:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91118eebe9 code=0x7ffc0000 [ 118.679936][ T6368] loop5: detected capacity change from 0 to 2048 [ 118.698857][ T29] audit: type=1326 audit(1756560729.905:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.743217][ T29] audit: type=1326 audit(1756560729.905:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.782016][ T29] audit: type=1326 audit(1756560729.905:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.817209][ T29] audit: type=1326 audit(1756560729.905:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.852246][ T29] audit: type=1326 audit(1756560729.905:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.887314][ T29] audit: type=1326 audit(1756560729.905:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.888175][ T6371] vlan2: entered allmulticast mode [ 118.921233][ T29] audit: type=1326 audit(1756560729.905:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 118.921267][ T29] audit: type=1326 audit(1756560729.905:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa044b3ebe9 code=0x7ffc0000 [ 119.021881][ T6369] loop0: detected capacity change from 0 to 2048 [ 119.044622][ T6368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 119.096576][ T6369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 119.131123][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.180095][ T6381] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:169: inode #12: comm syz.5.911: inline data xattr refers to an external xattr inode [ 119.226779][ T6369] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.910: inline data xattr refers to an external xattr inode [ 119.271062][ T6385] loop3: detected capacity change from 0 to 128 [ 119.291741][ T6381] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.334946][ T6369] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.335539][ T6381] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 186 with max blocks 874 with error 28 [ 119.364808][ T6369] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1388 with error 28 [ 119.375278][ T6381] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.375278][ T6381] [ 119.396029][ T6369] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.396029][ T6369] [ 119.408401][ T6381] EXT4-fs (loop5): Total free blocks count 0 [ 119.408424][ T6381] EXT4-fs (loop5): Free/Dirty block details [ 119.422661][ T6369] EXT4-fs (loop0): Total free blocks count 0 [ 119.422684][ T6369] EXT4-fs (loop0): Free/Dirty block details [ 119.422698][ T6369] EXT4-fs (loop0): free_blocks=2415919104 [ 119.422748][ T6369] EXT4-fs (loop0): dirty_blocks=1392 [ 119.422763][ T6369] EXT4-fs (loop0): Block reservation details [ 119.422774][ T6369] EXT4-fs (loop0): i_reserved_data_blocks=87 [ 119.491683][ T6381] EXT4-fs (loop5): free_blocks=2415919104 [ 119.501454][ T6381] EXT4-fs (loop5): dirty_blocks=1072 [ 119.509766][ T6381] EXT4-fs (loop5): Block reservation details [ 119.521126][ T6381] EXT4-fs (loop5): i_reserved_data_blocks=67 [ 119.894086][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.904757][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.003866][ T31] EXT4-fs error: 1891 callbacks suppressed [ 120.003923][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 120.290154][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 120.330608][ T1825] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 120.394959][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 120.416658][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 120.470902][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 120.515768][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 120.528973][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 120.536703][ T6402] syzkaller0: entered promiscuous mode [ 120.551130][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 120.552303][ T6402] syzkaller0: entered allmulticast mode [ 120.590394][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 120.611834][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 120.628318][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 120.898184][ T6420] loop3: detected capacity change from 0 to 512 [ 120.917559][ T6420] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.937930][ T6420] EXT4-fs (loop3): mount failed [ 121.458714][ T6427] pim6reg1: entered promiscuous mode [ 121.464858][ T6425] loop3: detected capacity change from 0 to 512 [ 121.466121][ T6427] pim6reg1: entered allmulticast mode [ 121.496917][ T6425] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.515590][ T6425] EXT4-fs (loop3): mount failed [ 121.545526][ T6431] tipc: New replicast peer: 255.255.255.83 [ 121.554047][ T6431] tipc: Enabled bearer , priority 10 [ 121.591439][ T10] IPVS: starting estimator thread 0... [ 121.683777][ T6434] IPVS: using max 2976 ests per chain, 148800 per kthread [ 121.745962][ T6442] loop0: detected capacity change from 0 to 2048 [ 121.826489][ T6442] loop0: p1 < > p4 [ 121.830838][ T6444] syzkaller0: entered promiscuous mode [ 121.841015][ T6444] syzkaller0: entered allmulticast mode [ 121.857788][ T6442] loop0: p4 size 8388608 extends beyond EOD, truncated [ 122.088494][ T6462] loop1: detected capacity change from 0 to 128 [ 122.107770][ T6458] IPVS: stopping master sync thread 6465 ... [ 122.107807][ T6465] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 122.126400][ T6462] bio_check_eod: 22 callbacks suppressed [ 122.126419][ T6462] syz.1.943: attempt to access beyond end of device [ 122.126419][ T6462] loop1: rw=2049, sector=137, nr_sectors = 13 limit=128 [ 122.309247][ T6469] syzkaller0: entered promiscuous mode [ 122.318923][ T6469] syzkaller0: entered allmulticast mode [ 122.342410][ T6479] loop1: detected capacity change from 0 to 512 [ 122.353301][ T6479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.394574][ T6479] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.949: corrupted in-inode xattr: overlapping e_value [ 122.418611][ T6479] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.949: couldn't read orphan inode 15 (err -117) [ 122.456937][ T6479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.502705][ T6487] loop0: detected capacity change from 0 to 128 [ 122.557468][ T6487] syz.0.951: attempt to access beyond end of device [ 122.557468][ T6487] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 122.691011][ T3360] tipc: Node number set to 3012744917 [ 122.815738][ T6495] loop0: detected capacity change from 0 to 2048 [ 122.914776][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 122.915922][ T6499] syzkaller0: entered promiscuous mode [ 122.940474][ T6499] syzkaller0: entered allmulticast mode [ 122.990521][ T6504] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.953: inline data xattr refers to an external xattr inode [ 123.122722][ T6504] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.207220][ T6504] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 562 with error 28 [ 123.226981][ T6504] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.226981][ T6504] [ 123.240511][ T6504] EXT4-fs (loop0): Total free blocks count 0 [ 123.250245][ T6504] EXT4-fs (loop0): Free/Dirty block details [ 123.258106][ T6504] EXT4-fs (loop0): free_blocks=2415919104 [ 123.268288][ T6504] EXT4-fs (loop0): dirty_blocks=576 [ 123.275497][ T6504] EXT4-fs (loop0): Block reservation details [ 123.286706][ T6504] EXT4-fs (loop0): i_reserved_data_blocks=36 [ 123.296315][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.387881][ T6508] syzkaller0: entered promiscuous mode [ 123.395688][ T6508] syzkaller0: entered allmulticast mode [ 123.498924][ T6515] pim6reg1: entered promiscuous mode [ 123.505859][ T6515] pim6reg1: entered allmulticast mode [ 123.577896][ T6520] loop3: detected capacity change from 0 to 128 [ 123.697595][ T6520] syz.3.960: attempt to access beyond end of device [ 123.697595][ T6520] loop3: rw=2049, sector=137, nr_sectors = 13 limit=128 [ 123.720751][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 123.802822][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 123.802840][ T29] audit: type=1326 audit(1756560735.085:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 123.843097][ T29] audit: type=1326 audit(1756560735.085:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 123.902568][ T6525] netlink: 148 bytes leftover after parsing attributes in process `syz.1.963'. [ 123.925677][ T6525] loop1: detected capacity change from 0 to 2048 [ 123.934611][ T29] audit: type=1326 audit(1756560735.175:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 123.967028][ T29] audit: type=1326 audit(1756560735.185:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.001388][ T29] audit: type=1326 audit(1756560735.185:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.034979][ T29] audit: type=1326 audit(1756560735.185:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.067696][ T29] audit: type=1326 audit(1756560735.185:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.110049][ T29] audit: type=1326 audit(1756560735.185:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.146130][ T29] audit: type=1326 audit(1756560735.185:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.178185][ T29] audit: type=1326 audit(1756560735.185:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 124.239725][ T6529] loop6: detected capacity change from 0 to 8192 [ 124.265928][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 124.345620][ T6535] netlink: 'syz.0.966': attribute type 4 has an invalid length. [ 124.360737][ T6536] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.963: inline data xattr refers to an external xattr inode [ 124.384680][ T6537] loop3: detected capacity change from 0 to 128 [ 124.440333][ T6535] netlink: 'syz.0.966': attribute type 4 has an invalid length. [ 124.482980][ T6537] syz.3.965: attempt to access beyond end of device [ 124.482980][ T6537] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 124.603495][ T6536] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.633803][ T6542] loop0: detected capacity change from 0 to 512 [ 124.636837][ T6536] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 430 with error 28 [ 124.642592][ T6542] EXT4-fs: Ignoring removed nobh option [ 124.661470][ T6536] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.661470][ T6536] [ 124.682745][ T6536] EXT4-fs (loop1): Total free blocks count 0 [ 124.691630][ T6536] EXT4-fs (loop1): Free/Dirty block details [ 124.701390][ T6536] EXT4-fs (loop1): free_blocks=2415919104 [ 124.708601][ T6536] EXT4-fs (loop1): dirty_blocks=432 [ 124.714897][ T6536] EXT4-fs (loop1): Block reservation details [ 124.721659][ T6536] EXT4-fs (loop1): i_reserved_data_blocks=27 [ 124.732111][ T6542] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.968: corrupted inode contents [ 124.807917][ T6542] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.968: mark_inode_dirty error [ 124.845481][ T6542] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.968: corrupted inode contents [ 124.867154][ T6542] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.968: mark_inode_dirty error [ 124.903570][ T6542] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.968: Failed to acquire dquot type 0 [ 124.924269][ T6542] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.968: corrupted inode contents [ 124.951104][ T6542] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.968: mark_inode_dirty error [ 124.977517][ T6542] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.968: corrupted inode contents [ 125.000446][ T6542] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.968: mark_inode_dirty error [ 125.018872][ T6556] loop6: detected capacity change from 0 to 512 [ 125.032462][ T31] EXT4-fs error: 2016 callbacks suppressed [ 125.032479][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 125.041735][ T6554] loop3: detected capacity change from 0 to 1024 [ 125.057661][ T6542] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.968: corrupted inode contents [ 125.064840][ T6554] EXT4-fs: Ignoring removed bh option [ 125.090478][ T6556] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.105288][ T6542] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 125.107806][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 125.120295][ T6542] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.968: corrupted inode contents [ 125.137468][ T6554] EXT4-fs: inline encryption not supported [ 125.156061][ T5447] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 125.164105][ T6554] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.185873][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 125.194705][ T6542] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.968: mark_inode_dirty error [ 125.224491][ T6542] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 125.224764][ T6556] EXT4-fs (loop6): 1 truncate cleaned up [ 125.238402][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 125.247630][ T6542] EXT4-fs (loop0): 1 truncate cleaned up [ 125.269400][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 125.272479][ T6556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.285073][ T6542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.313983][ T6554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 125.327772][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 125.356943][ T6542] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.359618][ T6554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.974: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.395431][ T6554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.974: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.397718][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 125.429471][ T6554] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.974: Failed to acquire dquot type 0 [ 125.451810][ T6554] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 125.457416][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 125.484770][ T6560] loop1: detected capacity change from 0 to 2048 [ 125.500415][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 125.523111][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 125.542831][ T6554] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.974: mark_inode_dirty error [ 125.562560][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.572669][ T6554] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 125.592026][ T1825] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 125.610824][ T6554] EXT4-fs (loop3): 1 orphan inode deleted [ 125.618894][ T1825] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 125.623091][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.658989][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 125.692937][ T1825] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.717930][ T1825] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 125.735521][ T6554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.974: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.765740][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.816548][ T6561] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.975: inline data xattr refers to an external xattr inode [ 125.851268][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.925018][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 125.938097][ T6575] netlink: 'syz.0.980': attribute type 30 has an invalid length. [ 125.954548][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 126.032678][ T5447] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.061459][ T6561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.068769][ T5447] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.105867][ T5447] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.115388][ T6561] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 674 with error 28 [ 126.140624][ T6561] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.140624][ T6561] [ 126.157884][ T6561] EXT4-fs (loop1): Total free blocks count 0 [ 126.163322][ T5447] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.169575][ T6561] EXT4-fs (loop1): Free/Dirty block details [ 126.197850][ T6561] EXT4-fs (loop1): free_blocks=2415919104 [ 126.207714][ T6561] EXT4-fs (loop1): dirty_blocks=688 [ 126.216485][ T6561] EXT4-fs (loop1): Block reservation details [ 126.258830][ T6561] EXT4-fs (loop1): i_reserved_data_blocks=43 [ 126.298087][ T6580] loop0: detected capacity change from 0 to 512 [ 126.323983][ T6580] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.467743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2ff200: rx timeout, send abort [ 126.478822][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2ff400: rx timeout, send abort [ 126.493679][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a2ff200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.518566][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a2ff400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.648678][ T1825] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 126.660251][ T6590] netlink: 148 bytes leftover after parsing attributes in process `syz.6.985'. [ 126.715801][ T6588] loop0: detected capacity change from 0 to 2048 [ 126.753271][ T6588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 126.779893][ T6590] loop6: detected capacity change from 0 to 2048 [ 126.855448][ T6590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 126.887498][ T6601] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.995: inline data xattr refers to an external xattr inode [ 126.979160][ T6601] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.011763][ T6607] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.985: inline data xattr refers to an external xattr inode [ 127.034621][ T6601] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 950 with error 28 [ 127.051957][ T6601] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.051957][ T6601] [ 127.066722][ T6601] EXT4-fs (loop0): Total free blocks count 0 [ 127.075730][ T6601] EXT4-fs (loop0): Free/Dirty block details [ 127.083382][ T6601] EXT4-fs (loop0): free_blocks=2415919104 [ 127.083975][ T6609] loop5: detected capacity change from 0 to 128 [ 127.092698][ T6601] EXT4-fs (loop0): dirty_blocks=960 [ 127.110670][ T6601] EXT4-fs (loop0): Block reservation details [ 127.119525][ T6601] EXT4-fs (loop0): i_reserved_data_blocks=60 [ 127.162048][ T6609] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 127.166876][ T6607] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, [ 127.173981][ T6609] FAT-fs (loop5): Filesystem has been set read-only [ 127.173990][ T6607] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.174783][ T6607] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 788 with error 28 [ 127.222461][ T6609] syz.5.992: attempt to access beyond end of device [ 127.222461][ T6609] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 127.229649][ T6607] EXT4-fs (loop6): This should not happen!! Data will be lost [ 127.229649][ T6607] [ 127.255123][ T6609] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 127.266145][ T6607] EXT4-fs (loop6): Total free blocks count 0 [ 127.266168][ T6607] EXT4-fs (loop6): Free/Dirty block details [ 127.277882][ T6609] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 127.286123][ T6607] EXT4-fs (loop6): free_blocks=2415919104 [ 127.297445][ T6609] syz.5.992: attempt to access beyond end of device [ 127.297445][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.306332][ T6607] EXT4-fs (loop6): dirty_blocks=800 [ 127.306355][ T6607] EXT4-fs (loop6): Block reservation details [ 127.306365][ T6607] EXT4-fs (loop6): i_reserved_data_blocks=50 [ 127.363894][ T6609] syz.5.992: attempt to access beyond end of device [ 127.363894][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.389825][ T6609] syz.5.992: attempt to access beyond end of device [ 127.389825][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.412475][ T6609] syz.5.992: attempt to access beyond end of device [ 127.412475][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.456919][ T6609] syz.5.992: attempt to access beyond end of device [ 127.456919][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.533679][ T6609] syz.5.992: attempt to access beyond end of device [ 127.533679][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.552850][ T6609] syz.5.992: attempt to access beyond end of device [ 127.552850][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.595590][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 127.608701][ T6620] netlink: 'syz.3.994': attribute type 30 has an invalid length. [ 127.623743][ T6609] syz.5.992: attempt to access beyond end of device [ 127.623743][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.715441][ T1825] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.738198][ T1825] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.765183][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 127.773654][ T6609] syz.5.992: attempt to access beyond end of device [ 127.773654][ T6609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 127.791416][ T1825] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.815349][ T5447] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 127.844185][ T1825] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.878199][ T6628] capability: warning: `syz.0.997' uses deprecated v2 capabilities in a way that may be insecure [ 128.026070][ T6630] loop6: detected capacity change from 0 to 2048 [ 128.075520][ T6630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 128.133645][ T6642] loop5: detected capacity change from 0 to 1024 [ 128.160491][ T6642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.182827][ T6645] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.998: inline data xattr refers to an external xattr inode [ 128.321827][ T6645] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.366038][ T6645] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 128.388161][ T6645] EXT4-fs (loop6): This should not happen!! Data will be lost [ 128.388161][ T6645] [ 128.402545][ T6645] EXT4-fs (loop6): Total free blocks count 0 [ 128.410607][ T6645] EXT4-fs (loop6): Free/Dirty block details [ 128.419297][ T6645] EXT4-fs (loop6): free_blocks=2415919104 [ 128.427322][ T6645] EXT4-fs (loop6): dirty_blocks=32 [ 128.434474][ T6645] EXT4-fs (loop6): Block reservation details [ 128.442734][ T6645] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 128.611594][ T6650] loop1: detected capacity change from 0 to 2048 [ 128.622927][ T6642] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1002: Allocating blocks 497-513 which overlap fs metadata [ 128.642574][ T6642] EXT4-fs (loop5): pa ffff888106dc1ee0: logic 256, phys. 385, len 8 [ 128.653369][ T6642] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 128.714858][ T6650] Alternate GPT is invalid, using primary GPT. [ 128.725094][ T6650] loop1: p2 p3 p7 [ 128.821110][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.856058][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 128.961674][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 128.961693][ T29] audit: type=1326 audit(1756560740.235:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 128.983347][ T6662] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1010'. [ 129.013027][ T29] audit: type=1326 audit(1756560740.235:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 129.061585][ T29] audit: type=1400 audit(1756560740.235:8074): avc: denied { setattr } for pid=6659 comm="syz.5.1008" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.100895][ T29] audit: type=1326 audit(1756560740.245:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 129.156125][ T29] audit: type=1326 audit(1756560740.255:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 129.193179][ T29] audit: type=1326 audit(1756560740.255:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 129.229466][ T29] audit: type=1326 audit(1756560740.255:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 129.229802][ T6663] loop6: detected capacity change from 0 to 2048 [ 129.259986][ T29] audit: type=1326 audit(1756560740.265:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 129.304743][ T29] audit: type=1326 audit(1756560740.265:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 129.342553][ T29] audit: type=1326 audit(1756560740.265:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 129.346233][ T6662] loop1: detected capacity change from 0 to 2048 [ 129.394703][ T6663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 129.540447][ T6662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 129.558244][ T6664] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.1009: inline data xattr refers to an external xattr inode [ 129.704091][ T6685] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1010: inline data xattr refers to an external xattr inode [ 129.835891][ T6689] loop5: detected capacity change from 0 to 128 [ 129.869706][ T6689] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.941468][ T6685] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.976585][ T6685] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 508 with error 28 [ 129.997962][ T6685] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.997962][ T6685] [ 130.014382][ T6685] EXT4-fs (loop1): Total free blocks count 0 [ 130.023876][ T6685] EXT4-fs (loop1): Free/Dirty block details [ 130.032710][ T6685] EXT4-fs (loop1): free_blocks=2415919104 [ 130.040421][ T6685] EXT4-fs (loop1): dirty_blocks=512 [ 130.041445][ T31] EXT4-fs error: 1409 callbacks suppressed [ 130.041517][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 130.046879][ T6685] EXT4-fs (loop1): Block reservation details [ 130.046901][ T6685] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 130.108280][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 130.166691][ T6696] loop6: detected capacity change from 0 to 1024 [ 130.198249][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 130.287919][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 130.305573][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 130.332040][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 130.350844][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 130.352123][ T6696] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.388894][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 130.413725][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 130.494555][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 130.581943][ T6699] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.1018: lblock 0 mapped to illegal pblock 0 (length 6) [ 130.612739][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 130.641653][ T6712] loop0: detected capacity change from 0 to 512 [ 130.667803][ T6714] loop5: detected capacity change from 0 to 512 [ 130.685797][ T6712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.708833][ T6699] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 130.726558][ T6699] EXT4-fs (loop6): This should not happen!! Data will be lost [ 130.726558][ T6699] [ 130.753632][ T6714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.778832][ T6712] EXT4-fs (loop0): 1 truncate cleaned up [ 130.789644][ T6721] loop1: detected capacity change from 0 to 512 [ 130.840415][ T6714] EXT4-fs (loop5): 1 truncate cleaned up [ 130.878453][ T6725] loop0: detected capacity change from 0 to 256 [ 130.956791][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.968304][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.991610][ T6725] bridge0: left promiscuous mode [ 131.000345][ T6725] bridge0: left allmulticast mode [ 131.037579][ T6715] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm syz.6.1018: lblock 8 mapped to illegal pblock 8 (length 8) [ 131.084493][ T6715] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.108133][ T6715] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.108133][ T6715] [ 131.108375][ T6728] loop3: detected capacity change from 0 to 2048 [ 131.182751][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.211119][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.213211][ T37] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.247029][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 400 with max blocks 2048 with error 28 [ 131.257491][ T6732] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.1028: inline data xattr refers to an external xattr inode [ 131.267624][ T37] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.267624][ T37] [ 131.301605][ T37] EXT4-fs (loop6): Total free blocks count 0 [ 131.312893][ T37] EXT4-fs (loop6): Free/Dirty block details [ 131.320796][ T37] EXT4-fs (loop6): free_blocks=4293918720 [ 131.329630][ T37] EXT4-fs (loop6): dirty_blocks=2944 [ 131.330628][ T1035] kernel read not supported for file /275/oom_adj (pid: 1035 comm: kworker/1:2) [ 131.385461][ T6731] bridge: RTM_NEWNEIGH with invalid ether address [ 131.397007][ T1825] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.409549][ T1825] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.421453][ T1825] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.432215][ T1825] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.458575][ T1825] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.473888][ T1825] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.493718][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.506720][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.531284][ T6732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.552256][ T6742] loop0: detected capacity change from 0 to 512 [ 131.568543][ T6732] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 330 with error 28 [ 131.586832][ T6732] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.586832][ T6732] [ 131.601297][ T6732] EXT4-fs (loop3): Total free blocks count 0 [ 131.609688][ T6732] EXT4-fs (loop3): Free/Dirty block details [ 131.617407][ T6732] EXT4-fs (loop3): free_blocks=2415919104 [ 131.625807][ T6732] EXT4-fs (loop3): dirty_blocks=336 [ 131.629507][ T6749] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1035'. [ 131.633386][ T6732] EXT4-fs (loop3): Block reservation details [ 131.633406][ T6732] EXT4-fs (loop3): i_reserved_data_blocks=21 [ 131.689466][ T6753] loop6: detected capacity change from 0 to 2048 [ 131.698476][ T6742] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.711373][ T6742] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.725502][ T6742] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1032: corrupted inode contents [ 131.770556][ T6742] EXT4-fs (loop0): Remounting filesystem read-only [ 131.799653][ T6742] EXT4-fs (loop0): 1 truncate cleaned up [ 131.809906][ T6753] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.1035: inline data xattr refers to an external xattr inode [ 131.844894][ T59] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.861868][ T59] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.879320][ T59] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 131.977938][ T6742] tipc: New replicast peer: 255.255.255.83 [ 131.986316][ T6742] tipc: Enabled bearer , priority 10 [ 132.021143][ T6753] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.069746][ T6753] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 736 with error 28 [ 132.085704][ T6753] EXT4-fs (loop6): This should not happen!! Data will be lost [ 132.085704][ T6753] [ 132.098560][ T6753] EXT4-fs (loop6): Total free blocks count 0 [ 132.105968][ T6753] EXT4-fs (loop6): Free/Dirty block details [ 132.114680][ T6753] EXT4-fs (loop6): free_blocks=2415919104 [ 132.122852][ T6753] EXT4-fs (loop6): dirty_blocks=752 [ 132.131396][ T6753] EXT4-fs (loop6): Block reservation details [ 132.140119][ T6753] EXT4-fs (loop6): i_reserved_data_blocks=47 [ 132.159063][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 132.179349][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.179349][ T37] [ 132.251524][ T6763] loop0: detected capacity change from 0 to 2048 [ 132.279638][ T6766] loop3: detected capacity change from 0 to 128 [ 132.329700][ T6766] bio_check_eod: 3518 callbacks suppressed [ 132.329722][ T6766] syz.3.1037: attempt to access beyond end of device [ 132.329722][ T6766] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 132.384321][ T6766] syz.3.1037: attempt to access beyond end of device [ 132.384321][ T6766] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 132.421510][ T6766] buffer_io_error: 20 callbacks suppressed [ 132.421526][ T6766] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 132.447682][ T6770] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.1036: inline data xattr refers to an external xattr inode [ 132.508091][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1038'. [ 132.541552][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'. [ 132.594512][ T6774] loop1: detected capacity change from 0 to 2048 [ 132.620604][ T6770] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.699013][ T6770] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 272 with error 28 [ 132.718620][ T6770] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.718620][ T6770] [ 132.733585][ T6770] EXT4-fs (loop0): Total free blocks count 0 [ 132.744422][ T6770] EXT4-fs (loop0): Free/Dirty block details [ 132.752819][ T6770] EXT4-fs (loop0): free_blocks=2415919104 [ 132.766744][ T6770] EXT4-fs (loop0): dirty_blocks=1296 [ 132.775657][ T6770] EXT4-fs (loop0): Block reservation details [ 132.788752][ T6770] EXT4-fs (loop0): i_reserved_data_blocks=81 [ 132.801343][ T6781] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1039: inline data xattr refers to an external xattr inode [ 132.823986][ T59] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 132.844957][ T59] EXT4-fs (loop6): This should not happen!! Data will be lost [ 132.844957][ T59] [ 132.951416][ T6781] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.993593][ T3390] tipc: Node number set to 3353897855 [ 133.036878][ T6781] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 468 with error 28 [ 133.058181][ T6781] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.058181][ T6781] [ 133.071727][ T6781] EXT4-fs (loop1): Total free blocks count 0 [ 133.081191][ T6781] EXT4-fs (loop1): Free/Dirty block details [ 133.090603][ T6781] EXT4-fs (loop1): free_blocks=2415919104 [ 133.102646][ T6781] EXT4-fs (loop1): dirty_blocks=480 [ 133.111499][ T6781] EXT4-fs (loop1): Block reservation details [ 133.122121][ T6781] EXT4-fs (loop1): i_reserved_data_blocks=30 [ 133.149375][ T6796] loop6: detected capacity change from 0 to 512 [ 133.203031][ T6796] EXT4-fs (loop6): too many log groups per flexible block group [ 133.215419][ T6796] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 133.216959][ T6797] tipc: Started in network mode [ 133.231253][ T6797] tipc: Node identity 8e2c81a43cf7, cluster identity 4711 [ 133.242160][ T6797] tipc: Enabled bearer , priority 0 [ 133.313749][ T6796] EXT4-fs (loop6): mount failed [ 133.333348][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 133.351612][ T59] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.351612][ T59] [ 133.369524][ T6792] tipc: Resetting bearer [ 133.413144][ T6796] loop6: detected capacity change from 0 to 512 [ 133.461335][ T6792] tipc: Disabling bearer [ 133.501988][ T6796] $Hÿ: renamed from bond0 (while UP) [ 133.540419][ T6796] $Hÿ: entered promiscuous mode [ 133.598706][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 133.617501][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.617501][ T59] [ 133.671494][ T6809] syzkaller1: entered promiscuous mode [ 133.680163][ T6809] syzkaller1: entered allmulticast mode [ 133.777551][ T6807] syzkaller0: entered promiscuous mode [ 133.784874][ T6807] syzkaller0: entered allmulticast mode [ 133.960833][ T6817] loop1: detected capacity change from 0 to 512 [ 133.991766][ T6817] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.035110][ T6817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.055090][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 134.055107][ T29] audit: type=1400 audit(1756561001.346:8984): avc: denied { create } for pid=6820 comm="syz.5.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.123542][ T29] audit: type=1400 audit(1756561001.406:8985): avc: denied { read } for pid=6820 comm="syz.5.1053" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.133395][ T6819] tipc: Enabled bearer , priority 0 [ 134.164275][ T29] audit: type=1400 audit(1756561001.406:8986): avc: denied { open } for pid=6820 comm="syz.5.1053" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.183771][ T6817] EXT4-fs (loop1): 1 truncate cleaned up [ 134.209556][ T29] audit: type=1400 audit(1756561001.406:8987): avc: denied { ioctl } for pid=6820 comm="syz.5.1053" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.209639][ T29] audit: type=1400 audit(1756561001.406:8988): avc: denied { read write } for pid=6820 comm="syz.5.1053" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.289903][ T29] audit: type=1400 audit(1756561001.406:8989): avc: denied { open } for pid=6820 comm="syz.5.1053" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.384408][ T29] audit: type=1400 audit(1756561001.616:8990): avc: denied { mount } for pid=6816 comm="syz.1.1051" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.410225][ T29] audit: type=1400 audit(1756561001.676:8991): avc: denied { add_name } for pid=6816 comm="syz.1.1051" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.436936][ T29] audit: type=1400 audit(1756561001.676:8992): avc: denied { create } for pid=6816 comm="syz.1.1051" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.463258][ T29] audit: type=1400 audit(1756561001.706:8993): avc: denied { open } for pid=6816 comm="syz.1.1051" path="/229/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.463300][ T6818] tipc: Resetting bearer [ 134.532030][ T6818] tipc: Disabling bearer [ 134.556963][ T6828] sd 0:0:1:0: device reset [ 134.657407][ T6833] hub 2-0:1.0: USB hub found [ 134.665421][ T6833] hub 2-0:1.0: 8 ports detected [ 134.746756][ T6837] loop6: detected capacity change from 0 to 512 [ 134.759937][ T6837] EXT4-fs (loop6): orphan cleanup on readonly fs [ 134.810000][ T6837] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1058: bad orphan inode 13 [ 134.834207][ T6837] ext4_test_bit(bit=12, block=18) = 1 [ 134.842479][ T6837] is_bad_inode(inode)=0 [ 134.848736][ T6837] NEXT_ORPHAN(inode)=2130706432 [ 134.858096][ T6837] max_ino=32 [ 134.863067][ T6837] i_nlink=1 [ 134.870530][ T3301] EXT4-fs unmount: 23 callbacks suppressed [ 134.870550][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.885331][ T3360] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.902196][ T6837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.931884][ T3360] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.991112][ T6844] ALSA: seq fatal error: cannot create timer (-19) [ 135.030470][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.054920][ T31] EXT4-fs error: 1332 callbacks suppressed [ 135.054939][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 135.100645][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 135.118907][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 135.150879][ T6853] loop1: detected capacity change from 0 to 2048 [ 135.181797][ T6852] loop6: detected capacity change from 0 to 1024 [ 135.205350][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 135.240623][ T6852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.260581][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 135.291550][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 135.309979][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 135.348148][ T6852] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 135.371407][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 135.384630][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 135.386345][ T6859] hub 9-0:1.0: USB hub found [ 135.406976][ T6859] hub 9-0:1.0: 8 ports detected [ 135.409587][ T6853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 135.462814][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 135.498060][ T6863] 9pnet_fd: Insufficient options for proto=fd [ 135.518949][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.535163][ T6866] loop5: detected capacity change from 0 to 4096 [ 135.546374][ T6863] loop0: detected capacity change from 0 to 512 [ 135.560764][ T6853] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1063: inline data xattr refers to an external xattr inode [ 135.588599][ T6866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.626183][ T6863] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 135.643332][ T6863] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 135.657658][ T6863] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1066: Corrupt directory, running e2fsck is recommended [ 135.687400][ T6853] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.710737][ T6872] loop6: detected capacity change from 0 to 512 [ 135.720600][ T6853] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1616 with error 28 [ 135.738063][ T6853] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.738063][ T6853] [ 135.741402][ T6872] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.753669][ T6853] EXT4-fs (loop1): Total free blocks count 0 [ 135.771374][ T6863] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 135.780573][ T6853] EXT4-fs (loop1): Free/Dirty block details [ 135.802418][ T6853] EXT4-fs (loop1): free_blocks=2415919104 [ 135.811247][ T6853] EXT4-fs (loop1): dirty_blocks=1632 [ 135.819285][ T6853] EXT4-fs (loop1): Block reservation details [ 135.829161][ T6853] EXT4-fs (loop1): i_reserved_data_blocks=102 [ 135.830595][ T6872] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 135.865651][ T6863] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1066: corrupted in-inode xattr: invalid ea_ino [ 135.945318][ T6872] EXT4-fs (loop6): 1 truncate cleaned up [ 135.965651][ T6872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.969642][ T6863] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1066: couldn't read orphan inode 15 (err -117) [ 136.025482][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.099102][ T6872] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 136.099102][ T6872] program syz.6.1068 not setting count and/or reply_len properly [ 136.270748][ T6878] EXT4-fs error (device loop5): ext4_empty_dir:3096: inode #12: block 80: comm syz.5.1067: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 136.299188][ T6878] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #12: comm syz.5.1067: directory missing '..' [ 136.504261][ T6863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.545757][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.583590][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.698570][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 136.705225][ T6881] tipc: Enabled bearer , priority 0 [ 136.730338][ T6880] tipc: Resetting bearer [ 136.759408][ T6880] tipc: Disabling bearer [ 136.842893][ T6894] loop1: detected capacity change from 0 to 2048 [ 136.877658][ T6894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.901602][ T6902] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 136.916439][ T6901] loop6: detected capacity change from 0 to 1024 [ 136.975227][ T6901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.980094][ T6910] loop3: detected capacity change from 0 to 512 [ 137.023983][ T6910] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.103864][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.197679][ T6914] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1082'. [ 137.263046][ T6916] loop3: detected capacity change from 0 to 2048 [ 137.295010][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 137.309871][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 137.366206][ T6916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 137.480845][ T6927] loop1: detected capacity change from 0 to 512 [ 137.491676][ T6916] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.1082: inline data xattr refers to an external xattr inode [ 137.515801][ T6923] loop0: detected capacity change from 0 to 512 [ 137.529872][ T6901] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1077: Allocating blocks 497-513 which overlap fs metadata [ 137.561296][ T6901] EXT4-fs (loop6): pa ffff888106dc1cb0: logic 256, phys. 385, len 8 [ 137.563909][ T6927] EXT4-fs: Ignoring removed nobh option [ 137.570273][ T6901] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 137.577818][ T6923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.605627][ T6927] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1085: iget: bad i_size value: 38620345925642 [ 137.628901][ T6916] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.655632][ T6923] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 137.683593][ T6916] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 136 with error 28 [ 137.700315][ T6916] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.700315][ T6916] [ 137.701892][ T6923] EXT4-fs (loop0): 1 truncate cleaned up [ 137.711784][ T6916] EXT4-fs (loop3): Total free blocks count 0 [ 137.711807][ T6916] EXT4-fs (loop3): Free/Dirty block details [ 137.711820][ T6916] EXT4-fs (loop3): free_blocks=2415919104 [ 137.737727][ T6916] EXT4-fs (loop3): dirty_blocks=144 [ 137.744280][ T6916] EXT4-fs (loop3): Block reservation details [ 137.750984][ T6916] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 137.768020][ T6927] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1085: couldn't read orphan inode 15 (err -117) [ 137.784119][ T6923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.788549][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.834226][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.898864][ T6933] loop6: detected capacity change from 0 to 1024 [ 137.936375][ T6927] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1085: bg 0: block 5: invalid block bitmap [ 137.964969][ T6927] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 137.981027][ T6927] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.981027][ T6927] [ 137.994173][ T6927] EXT4-fs (loop1): Total free blocks count 0 [ 138.001370][ T6927] EXT4-fs (loop1): Free/Dirty block details [ 138.008705][ T6927] EXT4-fs (loop1): free_blocks=0 [ 138.014608][ T6927] EXT4-fs (loop1): dirty_blocks=16 [ 138.020732][ T6927] EXT4-fs (loop1): Block reservation details [ 138.027572][ T6927] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 138.042752][ T6933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.154920][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.171658][ T6923] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 138.171658][ T6923] program syz.0.1083 not setting count and/or reply_len properly [ 138.200946][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 138.221249][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.266642][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.388451][ T6954] loop3: detected capacity change from 0 to 512 [ 138.429257][ T6954] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.429396][ T3390] IPVS: starting estimator thread 0... [ 138.459311][ T6954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.495384][ T6954] EXT4-fs (loop3): 1 truncate cleaned up [ 138.543628][ T6957] IPVS: using max 3024 ests per chain, 151200 per kthread [ 138.568326][ T6954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.100557][ T6972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6972 comm=syz.1.1101 [ 139.131633][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 139.132012][ T29] audit: type=1326 audit(1756561006.416:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.153150][ T6974] loop6: detected capacity change from 0 to 2048 [ 139.177104][ T29] audit: type=1326 audit(1756561006.416:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.187398][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 139.221834][ T29] audit: type=1326 audit(1756561006.416:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.365985][ T6974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 139.384715][ T29] audit: type=1326 audit(1756561006.416:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.423201][ T29] audit: type=1326 audit(1756561006.416:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.460283][ T29] audit: type=1326 audit(1756561006.416:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.500824][ T29] audit: type=1326 audit(1756561006.416:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.537235][ T29] audit: type=1326 audit(1756561006.416:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.574098][ T29] audit: type=1326 audit(1756561006.416:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.615454][ T29] audit: type=1326 audit(1756561006.416:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.6.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35f94ebe9 code=0x7ffc0000 [ 139.683190][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.861825][ T6984] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.1100: inline data xattr refers to an external xattr inode [ 140.010272][ T6984] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.031159][ T6984] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1446 with error 28 [ 140.046717][ T6984] EXT4-fs (loop6): This should not happen!! Data will be lost [ 140.046717][ T6984] [ 140.057541][ T6984] EXT4-fs (loop6): Total free blocks count 0 [ 140.064399][ T6984] EXT4-fs (loop6): Free/Dirty block details [ 140.071481][ T6984] EXT4-fs (loop6): free_blocks=2415919104 [ 140.078527][ T6984] EXT4-fs (loop6): dirty_blocks=1456 [ 140.084594][ T6984] EXT4-fs (loop6): Block reservation details [ 140.092432][ T6984] EXT4-fs (loop6): i_reserved_data_blocks=91 [ 140.102391][ T31] EXT4-fs error: 1315 callbacks suppressed [ 140.102464][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 140.155317][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 140.159472][ T6993] loop5: detected capacity change from 0 to 512 [ 140.207588][ T6993] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.215659][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 140.256217][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 140.269427][ T6997] veth0_vlan: entered allmulticast mode [ 140.323982][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 140.335162][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 140.359418][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 140.372454][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 140.404997][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 140.429481][ T7000] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 140.429481][ T7000] program syz.1.1107 not setting count and/or reply_len properly [ 140.449889][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 140.473258][ T7002] loop5: detected capacity change from 0 to 512 [ 140.505553][ T145] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 140.505893][ T6997] ªªªªªª: renamed from vlan0 [ 140.534764][ T7002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.560384][ T7002] EXT4-fs (loop5): 1 truncate cleaned up [ 140.587920][ T7002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.628006][ T7009] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1109'. [ 140.658203][ T7009] loop6: detected capacity change from 0 to 2048 [ 140.675841][ T7009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 140.813978][ T7020] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.1109: inline data xattr refers to an external xattr inode [ 140.953974][ T7020] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.996656][ T7020] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 954 with error 28 [ 141.014001][ T7020] EXT4-fs (loop6): This should not happen!! Data will be lost [ 141.014001][ T7020] [ 141.030777][ T7020] EXT4-fs (loop6): Total free blocks count 0 [ 141.039186][ T7020] EXT4-fs (loop6): Free/Dirty block details [ 141.047207][ T7020] EXT4-fs (loop6): free_blocks=2415919104 [ 141.055455][ T7020] EXT4-fs (loop6): dirty_blocks=960 [ 141.065661][ T7020] EXT4-fs (loop6): Block reservation details [ 141.074488][ T7020] EXT4-fs (loop6): i_reserved_data_blocks=60 [ 141.346836][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.504080][ T7029] loop1: detected capacity change from 0 to 2048 [ 141.565207][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 141.621843][ T7029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 141.740371][ T7039] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1116: inline data xattr refers to an external xattr inode [ 141.762194][ T7035] pim6reg1: entered promiscuous mode [ 141.770975][ T7035] pim6reg1: entered allmulticast mode [ 141.873072][ T7039] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.900567][ T7039] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 552 with error 28 [ 141.920516][ T7039] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.920516][ T7039] [ 141.932605][ T7039] EXT4-fs (loop1): Total free blocks count 0 [ 141.941880][ T7039] EXT4-fs (loop1): Free/Dirty block details [ 141.949414][ T7039] EXT4-fs (loop1): free_blocks=2415919104 [ 141.957586][ T7039] EXT4-fs (loop1): dirty_blocks=560 [ 141.964250][ T7039] EXT4-fs (loop1): Block reservation details [ 141.972951][ T7039] EXT4-fs (loop1): i_reserved_data_blocks=35 [ 142.031024][ T7043] loop6: detected capacity change from 0 to 512 [ 142.062551][ T7043] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.092034][ T7043] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.148549][ T7043] EXT4-fs (loop6): 1 truncate cleaned up [ 142.269832][ T7043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.301797][ T7047] SELinux: failed to load policy [ 142.369761][ T7052] loop5: detected capacity change from 0 to 512 [ 142.379466][ T7052] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.419470][ T7052] EXT4-fs (loop5): 1 truncate cleaned up [ 142.428761][ T145] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 142.447135][ T7052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.488214][ T7057] loop0: detected capacity change from 0 to 512 [ 142.500500][ T7057] EXT4-fs: Ignoring removed nobh option [ 142.511985][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.556438][ T7057] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1123: iget: bad i_size value: 38620345925642 [ 142.582283][ T7060] loop1: detected capacity change from 0 to 2048 [ 142.593364][ T7057] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1123: couldn't read orphan inode 15 (err -117) [ 142.625776][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 142.634543][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.676421][ T7057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1123: bg 0: block 5: invalid block bitmap [ 142.691871][ T7057] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 142.705344][ T7057] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.705344][ T7057] [ 142.716111][ T7057] EXT4-fs (loop0): Total free blocks count 0 [ 142.724179][ T7057] EXT4-fs (loop0): Free/Dirty block details [ 142.730501][ T7057] EXT4-fs (loop0): free_blocks=0 [ 142.736307][ T7057] EXT4-fs (loop0): dirty_blocks=16 [ 142.742314][ T7057] EXT4-fs (loop0): Block reservation details [ 142.749933][ T7057] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 142.763323][ T7064] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1124: inline data xattr refers to an external xattr inode [ 142.861689][ T7063] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.873700][ T37] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 142.880653][ T7063] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1032 with error 28 [ 142.904454][ T7063] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.904454][ T7063] [ 142.915017][ T7063] EXT4-fs (loop1): Total free blocks count 0 [ 142.921209][ T7063] EXT4-fs (loop1): Free/Dirty block details [ 142.929199][ T7063] EXT4-fs (loop1): free_blocks=2415919104 [ 142.936525][ T7063] EXT4-fs (loop1): dirty_blocks=1040 [ 142.943247][ T7063] EXT4-fs (loop1): Block reservation details [ 142.949842][ T7063] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 142.981167][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.995292][ T7075] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1128'. [ 143.010543][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.037465][ T7078] loop6: detected capacity change from 0 to 128 [ 143.052475][ T7075] loop3: detected capacity change from 0 to 2048 [ 143.065376][ T7080] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 143.080318][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 143.092934][ T7078] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.110085][ T7078] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.127138][ T7075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 143.128021][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 143.258540][ T7084] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.1128: inline data xattr refers to an external xattr inode [ 143.281899][ T145] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 143.340248][ T7084] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.358459][ T7084] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1566 with error 28 [ 143.372171][ T7084] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.372171][ T7084] [ 143.382205][ T7084] EXT4-fs (loop3): Total free blocks count 0 [ 143.388583][ T7084] EXT4-fs (loop3): Free/Dirty block details [ 143.394887][ T7084] EXT4-fs (loop3): free_blocks=2415919104 [ 143.400977][ T7084] EXT4-fs (loop3): dirty_blocks=1568 [ 143.406957][ T7084] EXT4-fs (loop3): Block reservation details [ 143.413425][ T7084] EXT4-fs (loop3): i_reserved_data_blocks=98 [ 143.432909][ T5376] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.518784][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1132'. [ 143.737248][ T7102] loop1: detected capacity change from 0 to 2048 [ 143.764260][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 143.787737][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 143.871170][ T7118] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1134: inline data xattr refers to an external xattr inode [ 143.925027][ T7121] loop5: detected capacity change from 0 to 512 [ 143.932953][ T7121] EXT4-fs: Ignoring removed nobh option [ 143.975733][ T7127] loop0: detected capacity change from 0 to 512 [ 143.984918][ T7118] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.991214][ T7121] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1141: iget: bad i_size value: 38620345925642 [ 144.028647][ T7127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.032660][ T7118] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1082 with error 28 [ 144.061184][ T7127] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.066115][ T7118] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.066115][ T7118] [ 144.066140][ T7118] EXT4-fs (loop1): Total free blocks count 0 [ 144.066204][ T7118] EXT4-fs (loop1): Free/Dirty block details [ 144.066215][ T7118] EXT4-fs (loop1): free_blocks=2415919104 [ 144.066229][ T7118] EXT4-fs (loop1): dirty_blocks=1088 [ 144.119008][ T7118] EXT4-fs (loop1): Block reservation details [ 144.126449][ T7118] EXT4-fs (loop1): i_reserved_data_blocks=68 [ 144.136049][ T7121] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1141: couldn't read orphan inode 15 (err -117) [ 144.160043][ T7133] loop3: detected capacity change from 0 to 128 [ 144.165113][ T7121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.183304][ T29] kauditd_printk_skb: 882 callbacks suppressed [ 144.183320][ T29] audit: type=1326 audit(1756561011.466:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8dcdc5ba7 code=0x7ffc0000 [ 144.219418][ T29] audit: type=1326 audit(1756561011.466:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8dcd6adb9 code=0x7ffc0000 [ 144.249247][ T29] audit: type=1326 audit(1756561011.466:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 144.287814][ T29] audit: type=1326 audit(1756561011.466:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 144.319314][ T29] audit: type=1326 audit(1756561011.466:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 144.343218][ T7121] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1141: bg 0: block 5: invalid block bitmap [ 144.357178][ T29] audit: type=1326 audit(1756561011.646:10304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8dcdc5ba7 code=0x7ffc0000 [ 144.368004][ T7133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.394411][ T29] audit: type=1326 audit(1756561011.646:10305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8dcd6adb9 code=0x7ffc0000 [ 144.433808][ T7121] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 144.435374][ T29] audit: type=1326 audit(1756561011.646:10306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcdcebe9 code=0x7ffc0000 [ 144.449977][ T7121] EXT4-fs (loop5): This should not happen!! Data will be lost [ 144.449977][ T7121] [ 144.486485][ T7121] EXT4-fs (loop5): Total free blocks count 0 [ 144.492939][ T7121] EXT4-fs (loop5): Free/Dirty block details [ 144.499158][ T7121] EXT4-fs (loop5): free_blocks=0 [ 144.504492][ T7121] EXT4-fs (loop5): dirty_blocks=16 [ 144.510594][ T7121] EXT4-fs (loop5): Block reservation details [ 144.517442][ T7121] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 144.518983][ T29] audit: type=1326 audit(1756561011.816:10307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8dcdc5ba7 code=0x7ffc0000 [ 144.529756][ T7133] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.551142][ T29] audit: type=1326 audit(1756561011.816:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8dcd6adb9 code=0x7ffc0000 [ 144.644612][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.687696][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 144.775917][ T7140] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1147'. [ 144.805717][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.848959][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.881553][ T7140] loop1: detected capacity change from 0 to 2048 [ 144.935631][ T7140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 144.980342][ T1825] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 145.042527][ T7161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 145.049543][ T7161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.057566][ T7161] vhci_hcd vhci_hcd.0: Device attached [ 145.078856][ T7165] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1147: inline data xattr refers to an external xattr inode [ 145.122815][ T31] EXT4-fs error: 1720 callbacks suppressed [ 145.122834][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 145.166045][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 145.166409][ T7165] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.207364][ T7166] ================================================================== [ 145.215947][ T7166] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 145.224157][ T7166] [ 145.227376][ T7166] write to 0xffff8881036d1448 of 8 bytes by task 7161 on cpu 1: [ 145.235996][ T7166] shmem_fallocate+0x221/0x840 [ 145.241045][ T7166] vfs_fallocate+0x3b6/0x400 [ 145.246187][ T7166] madvise_vma_behavior+0x192d/0x1cf0 [ 145.252246][ T7166] madvise_do_behavior+0x5b7/0x970 [ 145.258318][ T7166] do_madvise+0x10e/0x190 [ 145.263049][ T7166] __x64_sys_madvise+0x64/0x80 [ 145.269733][ T7166] x64_sys_call+0x1f1a/0x2ff0 [ 145.275040][ T7166] do_syscall_64+0xd2/0x200 [ 145.280053][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.286507][ T7166] [ 145.288851][ T7166] read to 0xffff8881036d1448 of 8 bytes by task 7166 on cpu 0: [ 145.296755][ T7166] shmem_fault+0x90/0x250 [ 145.301721][ T7166] __do_fault+0xb9/0x200 [ 145.306683][ T7166] handle_mm_fault+0xf78/0x2c20 [ 145.311905][ T7166] __get_user_pages+0x102e/0x1fa0 [ 145.317369][ T7166] __mm_populate+0x243/0x3a0 [ 145.322766][ T7166] vm_mmap_pgoff+0x232/0x2e0 [ 145.327920][ T7166] ksys_mmap_pgoff+0xc2/0x310 [ 145.333114][ T7166] x64_sys_call+0x14a3/0x2ff0 [ 145.337988][ T7166] do_syscall_64+0xd2/0x200 [ 145.342594][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.348849][ T7166] [ 145.351520][ T7166] value changed: 0x0000000000000000 -> 0xffffc90005e27b58 [ 145.360116][ T7166] [ 145.362632][ T7166] Reported by Kernel Concurrency Sanitizer on: [ 145.369480][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.0.1148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.380850][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.394748][ T7166] ================================================================== [ 145.409884][ T7165] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 466 with error 28 [ 145.422943][ T7165] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.422943][ T7165] [ 145.433770][ T7165] EXT4-fs (loop1): Total free blocks count 0 [ 145.441095][ T7165] EXT4-fs (loop1): Free/Dirty block details [ 145.447577][ T7165] EXT4-fs (loop1): free_blocks=2415919104 [ 145.453701][ T7165] EXT4-fs (loop1): dirty_blocks=480 [ 145.459236][ T7165] EXT4-fs (loop1): Block reservation details [ 145.465855][ T7165] EXT4-fs (loop1): i_reserved_data_blocks=30 [ 145.467240][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 145.486022][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 145.501053][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 145.524364][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 145.569450][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 145.608366][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 145.649476][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 145.684572][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 145.712379][ T7162] vhci_hcd: connection closed [ 145.712551][ T51] vhci_hcd: stop threads [ 145.724337][ T51] vhci_hcd: release socket [ 145.730008][ T51] vhci_hcd: disconnect device [ 145.816970][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 150.124361][ T31] EXT4-fs error: 5964 callbacks suppressed [ 150.124375][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 150.141062][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 150.155042][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 150.164586][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 150.179077][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 150.189969][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 150.203134][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 150.212838][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 150.226541][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 150.237087][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 155.134325][ T31] EXT4-fs error: 7084 callbacks suppressed [ 155.134340][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 155.150893][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 155.164677][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 155.174911][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 155.188633][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 155.198098][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 155.212063][ T31] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 155.221479][ T31] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error