last executing test programs: 14.339890972s ago: executing program 2 (id=781): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x552b, &(0x7f000000b2c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 12.199919047s ago: executing program 1 (id=785): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020200000a0000000000000000001000030006000000000002000008ac1e0001000000000000000002000100000000000000000b000000a003000500000000000200fffd00000000000000000000000087d1719963486e8ba1cb796ae10cf2fc136d23b5f366639cd367a83f0cd5a78aad2e167fa484e205a655e6d134ee3ca6fbd38b0dd85dd69068130c949988039625"], 0x50}}, 0x0) 9.359019223s ago: executing program 1 (id=788): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wINUxI6u/MLNWeaus6Z9PtpUfy+Gp3oZvHyMDA8P8/hH2FEyHOgsN+kPgBR2aGEij//3+YbghQgdIhDExwdigDE4MmlB3OwMigB2UnMDAxhEHZqQyMDJFQdhYSOx/mppxUveT8nJS0zJxUAxBhCCKMQIQxuvveNjIypDAwMHBA3ceIJF9cWZWdmJOTWoTOYP0PswdDilQGjqCDuY/lrSMTgy1S+IHiK6KjuRHEh4WNAVL4GTIwMRhC2cYMjAzBULYFAzuDnp4eIkiQ/C/FgjCfmRj/DwaGoC4+NTqDwIXDhQHLEoPFPXgZjOgiINfDRcTe7jqNqespLR2mQFsvgwsuBgYGDKlLXJSZzAaNdaxqEOUnqMhVRyqfWJBqA/2S3AL94soq3czcxPTU9NQ8IyNjMwMTAwNTI31wQQQh8ZR/HODyiQvJfFYcatkY2RgqEktKigwrGBhKigzhfCMIiVTiBm/LfwPWwwQu/5gYNJQhZoCSCtjb7NjtYIRiJjANYmkw43T8KBgFo2AUjIJRMApGwSgYBaNgFIyCUTAKRsEoGAWjYBSQBOQZGMGjoNCJqv84gFEAWDUgAAD//zhUZjs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1}, &(0x7f00000001c0)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 9.354493413s ago: executing program 3 (id=789): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e1cdf1c9d746bcaa9854b30731a00f236b0aa22e760f29fc5e15ebe36fbe2e1698", 0x21}], 0x1}}], 0x1, 0x20000050) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r2}, 0x10, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) syz_open_dev$vcsu(&(0x7f0000000280), 0x100000000, 0x759002) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.275899868s ago: executing program 2 (id=790): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba", @ANYRES8], 0x1, 0x552b, &(0x7f000000b2c0)="$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") ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x51) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 9.217269921s ago: executing program 4 (id=793): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)=0xe6be, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000300)) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x100) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000280)={0x2, 0x0, 0x98, &(0x7f0000001b80)={0x6, 0x2, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5}, 0x18) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/!\x00', 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="400d0500000005224a20ee9ae54bf64d294fff70f35d159c9fec1059e1ecd8612ba2b4eec1409ab88430c240b2be4ee54529cb9a764fa3d21eef852c03d7317a0566acfbf45b9652c4848d5d943e2c568ff8caf3cd15e2c39486027c53610bce9d45e12d28b76e8fcce08b1b2d7193952556a2961a2b7a154ce045b2f007e0e9a13e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.203945882s ago: executing program 3 (id=794): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x21a200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0xffffffffffffffff, 0x3, 0xe, 0x1, 0x8001}}) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) capset(0x0, 0x0) socket(0xa, 0x2, 0x0) fsopen(&(0x7f0000000180)='ncpfs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001780)=@newtaction={0x14, 0x32, 0xffff}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0x1, 0x18, 0x65, 0x0, 0x0, 0xc, 0x0, @empty, @broadcast, {[@generic={0x94, 0x2}, @noop, @noop]}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}}, 0x0) 9.129518136s ago: executing program 0 (id=795): openat$ppp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") unshare(0x22020600) unshare(0x22020600) 8.455952786s ago: executing program 1 (id=796): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000ff0f00000400000005"], 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1506, &(0x7f0000001d00)="$eJzs3AuYjlXXOPC99t43Y5KeJjkMe+1186TBNkmSQ0IOSZIkSU4JiUmShMSQU9KQhBwnyWEIyWEak8b5fMg5afJKkyQhOYX9v/T2/b1fvd/X//ve/p/r+mb9rmtf9nI/az3rnjXX3Pf9XNfM9z1H1W1er1ZTIhL/Evj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP9rb8L+Wo+mXesO2LXE88/deP65G88/d+P55248/9yN55+78fxzN54/Y7nZ9jlFb+SVexd//p+b8fX/f5GccpO/3lju5l7/hRSef+7G88/deP65G88/d+P55248///9av4nx3j+uRvPn7Hc7Fp//szr2q5r/f3HGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx3OOev0kKIf9tf674YY4wxxhhjjDH21/F5r3UHjDHGGGOMMcYY+/8PhBRKaBGIPCKviBH5RKy4TuQX14sC4gYRETeKOHGTKChuFoVEYVFEFBXxopgoLoxAYQWJUJQQJUVU3CJKiVtFgigtyoiywolyIlHcJsqL20UFcYeoKO4UlcRdorKoIqqKauJuUV3cI2qImqKWuFfUFnVEXVFP3Cfqi/tFA/GAaCgeFI3EQ6KxeFg0EY+IpuJR0Uw8JpqLx0UL8YRoKVqJ1qKNaPvfyn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/V1+LxAgQIIEDRryQB6IgRiIhVjID/mhABSACEQgDuKgIBSEQlAIikARiId4KA7FAQGBgKAElIAoRKEUlIIESIAyUAYcOEiERCgPt0MFqAAVoSJUgkpQGapAFagG1aA6VIcaUANqQS2oDbWhLtSF++A+uB8aQANoCA2hETSCxtAYmkATaApNoRk0g+bQHFpAC2gJLaE1tIa20BbaQTtoD+2hI3SETtAJOkNnSIIk6ApdoRt0g+7QHXpAD+gJPaEX9Ibe8DK8DK/AK9AfassBMBAGwiAYBENgKAyF12A4vA6vwxuQAiNhFLwJb8JbMAbOwFgYB+NhPFSXE2ESTAaSUyEVUmEaTIPpMB1mwEyYCbMhDebAXJgL82A+zIcPYSF8BB/BYlgMSyEd0iEDlkEmZMJyOAtZsAJWwipYDWtgNayD9bAONsIm2AhbYAtsg23wGXwGO2En7IbdsBf2wufwOXwBX0AKZEM2HISDcAgOwWE4DDmQA0fgCByFo3AMjsFxOA4n4CScgpNwGk7DGTgL5+AcXIALcBFejP+22d7SG1KEvEJLLfPIPDJGxshYGSvzy/yygCwgIzIi42ScLCgLykKykCwii8h4GS+Ly+ISJUqSoSwhS8QIIWQpWUomyARZRpaRTjqZKBNleVleVpAVZEV5p6wk75KVZRXZwVWT1WR12dHVkDVlLVlL1pZ1ZF1ZT9aT9WV92UA2kA1lQ9lINpKN5cOyiRwAQ+BReWUyzeVIaCFHQUvZSraWbeRb8KRsJ8dAe9lBdpRPy3EwFjrLdi5JPiu7yknQTT4vJ8MLsoecCj3lS7KX7C37yJdlX9ne9ZP95QwYIAfK2TBIDpZD5FA5D+rIKxOrK9+QKXKkHCXflEvhLTlGvi3HynFyvHxHTpAT5SQ5WU6RU2WqfFdOk+/J6fJ9OUPOlLPkbJkm58i58gM5T86XC+SHcqH8SC6Si+USuVSmy49lhlwmM+Uncrn8VGbJFXKlXCVXyzVyrVwn18sNcqPcJDfLLXKr3Ca3y8/kDrlT7pK75R65V+6Tn8v98gt5QH4ps+VX8qD8mzwkv5aH5TcyR34rj8jv5FH5vTwmf5DH5Y/yhDwpT8mf5Gn5szwjz8pz8ry8IH+RF+UleVl6KRQoqZTSKlB5VF4Vo/KpWHWdyq+uVwXUDSqiblRx6iZVUN2sCqnCqogqquJVMVVcGYXKKlKhKqFKqqi6RZVSt6oEVVqVUWWVU+VUorpNlVe3qwrqDlVR3akqqbtUZVVFVVXV1N2qurpH1VA1VS11r6qt6qi6qp66T9VX96sG6gHVUD2oGqmHVGP1sGqiHlFN1aOqmXpMNVePqxbqCdVStVKtVRvVVj2p2qmnVHvVQXVUT6tO6hnVWXVRSepZ1VU9p7qp51V39YLqoV5UPdVLqpfqrfqoS+qy8qqf6q+S1QA1UL2qBqnBaogaqoap19Rw9boaod5QKWqkGqXeVKPVW2qMeluNVePUePWOmqAmqklqspqipqpU9a6apt5T09X7aoaaqWap2SpNzVFDfqu04Hf5A3676v5j/nv/JH/Er+++TW1Xn6kdaqfapXarPWqv2qf2qf1qvzqgDqhsla0OqoPqkDqkDqvDKkflqCPqiDqqjqpj6pg6ro6rE+qkOq9+UqfVz+qMOqvOqvPqgrqgLv72NRAatNRKax3oPDqvjtH5dKy+TufX1+sC+gYd0TfqOH2TLqhv1oV0YV1EF9Xxupguro1GbTXpUJfQJXVU36JL6Vt1gi6ty+iy2ulyOlHf9i/n/1l/bXVb3U630+11e91Rd9SddCfdWXfWSTpJd9VddTfdTXfX3XUP3UP31D11L91L99F9dF/dV/fT/XSyTtYD9at6kB6sh+iheph+TQ/Xw/UIPUKn6BQ9So/So/VoPUaP0WP1WD1ej9cT9AQ9SU/SU/QUnapT9TQ9TU/X0/UMPUPP0rN0mk7Tc/VcPU/P0wv0Ar1QL9SL9CK9RC/R6TpdZ+gMnakz9XK9XGfpFXqFXqVX6TV6jV6n1+kNeoPepDfpLXqLztLb9Xa9Q+/Qu/QuvUfv0fv0Pr1f79cH9AGdrbP1QX1QH9KH9GF9WOfoHH1EH9FH9VF9TB8bcFwf1yf0CX1Kn9Kn9Wl9Rp/R5/Q5fUFf0Bf1RX1ZX75y2xfIQAY60EGeIE8QE8QEsUFskD/IHxQICgSRIBLEBXFBweDmoFBQOCgSFA3ig2JB8cAE+YQNKAiDEkHJIBrcEpQKbg0SgtJBmaBs4IJyQWJwW1A+uD2oENwRVAzuDCoFdwWVgypB1aBacHdQPbgnqBHUDGoF9wa1gzpB3aBecF9QP7g/aBA8EDQMHgwaBQ8FjYOHgybBI0HT4NGgWfBY0Dx4PGgRPBG0DFoFrYM2Qdu/tL73Zwo/5fqZ/ibZDDADzatmkBlshpihZph5zQw3r5sR5g2TYkaaUeZNM9q8ZcaYt81YM86MN++YCWaimWQmmylmqkk175pp5j0z3bxvZpiZZpaZbdLMHDPXfGDmmflmgfnQLDQfmUVmsVlilpp087HJMMtMpvnELDefmiyzwqw0q8xqs+b8jUKY9WaD2Wg2mc1mi9lqtpnt5jOzw+w0u8xus8fsNfvM52a/+cIcMF+abPOVOWj+Zg6Zr81h843JMd+aI+Y7c9R8b46ZH8xx86M5YU6aU+Ync9r8bM6Ys+acOW8umF/MRXPJXDb+ys39lcs7atSYB/NgDMZgLMZifsyPBbAARjCCcRiHBbEgFsJCWASLYDzGY3EsjlcQEpbAEhjFKJbCUpiACVgGy6BDh4mYiOWxPFbAClgRK2IlrISVsTJWxap4N96N9+A9WBNr4r14L9bBOlgP62F9rI8NsAE2xIbYCBthY2yMTbAJNsWm2AybYXNsji2wBbbEltgaW2NbbIvtsB22x/bYETtiJ+yEnbEzJmESdsWu2A27YXfsjj2wB/bEntgLe2Ef7IN9sS/2w36YjMk4EAfiIByEQ3AIDsNhOByH4wgcgSmYgqNwFI7G0TgGx+BYHIfj8R2cgBNxEk7GKTgVUzEVp+E0nI7TcQbOwFk4C9MwDefiXJyH83ABLsCFuBAX4SJcgkswHdMxAzMwEzNxOS7HLMzClbgSV+NqXItrcT2ux424ETfjZtyKW3E7bscduAN34S7cg3twH+7D/bgfD+ABzMZsPIgH8RAewsN4GHMwB4/gETyKR/EYHsPjeBxP4Ak8hafwNJ7GM3gGz+E5vIC/4EW8hJfRY4yVItZeZ/Pb620Be4ONsfnsP8ZFbFEbb4vZ4tbYQrbwv4vRWptgS9sytqx1tpxNtLf9Ia5sq9iqtpq921a399gaf4jr2/ttA/uAbWgftPXsfb/FeX+NG9mHbGP7uG1in7BNbSvbzLaxze3jtoV9wra0rWxr28Z2ss/YzraLTbLP2q72uT/EGXaZXW832I12k91vv7Dn7Hl71H5vL9hfbD/b3w6zr9nh9nU7wr5hU+zIP8Tj7Tt2gp1oJ9nJdoqd+od4lp1t0+wcO9d+YOfZ+X+I0+3HdqHNtIvsYrvELv01vtJTpv3ELref2iy7wq60q+xqu8autev+b6+r7Ba71W6z++zndofdaXfZ3XaP3ftrfOU8Dtgvbbb9yh6x39lD9mt72B6zOfbbX+Mr53fM/mCP2x/tCXvSnrI/2dP2Z3vGnv31/K+c+0/2kr1svRUEJEmRpoDyUF6KoXwUS9dRfrqeCtANFKEbKY5uooJ0MxWiwlSEilI8FaPiZAjJElFIJagkRekWKkW3UgKVpjJUlhyVo0S6jcrT7VSB7qCKdCdVoruoMlWhqlSN7qbqdA/VoJpUi+6l2lSH6lI9uo/q0/3UgB6ghvQgNaKHqDE9TE3oEWpKj1Izeoya0+PUgp6gltSKWlMbaktPUjt6itpTB+pIT1MneoY6UxdKomepKz1H3eh56k4vUA96kXrSS9SLelMfepn60ivUj/pTMg2ggfQqDaLBNISG0jB6jYbT6zSC3qAUGkmj6E0aTW/RGHqbxtI4Gk/v0ASaSJNoMk2hqZRK79LZ9C5FrtzrzaCZNItmUxrNobn0Ac2j+bSAPqSF9BEtosW0hJZSOn1MGbSMMukTWk6fUhatoJW0ilbTGlpL62g9baCNtIk20xbaSttoO31GO2gn7aLdtIf20j76nPbTF3SAvqRs+ooO0t/oEH1Nh+kbyqFv6Qh9R0fpezpGP9Bx+pFO0Ek6RT/RafqZztBZOkfn6QL9QhfpEl0mTyKEUIYq1GEQ5gnzhjFhvjA2vC7MH14fFghvCCPhjWFceFNYMLw5LBQWDouERcP4sFhYPDQhhjakMAxLhCXDaHhLWCq8NUwIS4dlwrKhC8uFieFtYfnw9rBCeEdYMbwzrBTeFVYOq4SPP1gtvDusHt4T1ghrhrXCe8PaYZ2wblgvvC+sH94fNggfCBuGD4YVwofCxuHDYZPwkbBp+GjYLHwsbB4+HrYInwhbhq3C1mGbsG34ZNgufCpsH3YIO4ZPh53CZ8LOYZcwKXw27Bo+96fHk8MB4cDw1fDV0PsH1JLo0mh69ONoRnRZNDP6SXR59NNoVnRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W9T7enmFAyedctoFLo/L62JcPhfrrnP53fWugLvBRdyNLs7d5Aq6m10hV9gVcUVdvCvmijvj0FlHLnQlXEkXdbe4Uu5Wl+BKuzKurHOunEt0bVxb19a1c0+59q6D6+iedk+7Z9wzrovr4p51Xd1zrpt73nV3L7ge7kX3onvJ9XK9XR/3suvrXnH9XH+X7JLdQDfQDXKD3BA3xA1zw9xwN9yNcCNciktxo9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcaku1U1z09x0N93NcDPcLDfLpbk0N9fNdfPcPLfALXALExa6RW6RW+KWuHSX7jJchst0mW65W+6yXJZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3bZ7qA76A65Q+6w+8bluG/dEfedO+q+d8fcD+64+9GdcCfdKfeTO+1+dmfcWXfOnXcX3C/uorvkLjvvUiPvRqZF3otMj7wfmRGZGZkVmR1Ji8yJzI18EJkXmR9ZEPkwsjDyUWRRZHFkSWRpJD3ycSQjsiySGfkksjzyaSQrsiKyMrIqsjqyJuJ9sR2hL+FL+qi/xZfyt/oEX9qX8WW98+V8or/Nl/e3+wr+Dl/R3+kr+bt8ZV/FV/VP+Ja+lW/t2/i2/knfzj/l2/sOvqN/2nfyz/jOvotP8s/6rv45380/77v7F3wP/6Lv6V/yvXxv38e/7Pv6V3w/398n+wF+oH/VD/KD/RA/1A/zr/nh/nU/wr/hU/xIP8q/6Uf7t/wY/7Yf68f58f4dP8FP9JP8ZD/FT/Wp/l0/zb/np/v3/Qw/08/ys32an+Pn+g/8PD/fL/Af+oX+I7/IL/ZL/FKf7j/2GX6Zz/Sf+OX+U5/lV/iVfpVf7df4tX6dX+83+I1+k9/st/itfpvf7j/zO/xOv8vv9nv8Xr/Pf+73+y/8Af+lz/Zf+YP+b/6Q/9of9t/4HP+tP+K/80f99/6Y/8Ef9z/6E/6kP+V/8qf9z/6MP+vP+fP+gv/FX/SX/GX+nTXGGGOMsf8n6k+OD/gn/yd/W1cMFEJcv7Nozu9rbi709/1gGd8pIoR4tn/PR/9t1a6dnJz822uzlAhKLhZCRK7m5xFX4xWio3hGJIkOovw/7W+w7H2B/qR+9E4hYq9W/lWs+H392/+D+k8+PT6jUngu7j+pv1iIhJJXc/KJq/HV+hX+g/qF2/1J//m+ThWi/T/k5BdX46v1E8VT4jmR9O9eyRhjjDHGGGOM/d1gWbX7nz0/X3k+j9dXc/KKq/GfPZ8zxhhjjDHGGGPs2nuhd58uTyYldejOm//eRgkhete45m3whjd/7eZa/2RijDHGGGOM/dWu3vRf604YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLHc63/iz4ld63NkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGrrX/EwAA//9jSzaU") sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x930}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@nodiscard}, {@lazytime}, {@nombcache}, {@noload}]}, 0x1, 0x440, &(0x7f0000000280)="$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") connect$netlink(r4, 0x0, 0x0) 7.467327884s ago: executing program 0 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4, 0x0, 0xffffffff7ffffffe}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.67090628s ago: executing program 2 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x100) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x31, 0x4, 0x0, {0x5, 0xff, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.216677047s ago: executing program 1 (id=799): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) getdents(0xffffffffffffffff, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa4891800"], 0x590}}], 0x1, 0x8008801) sendto$inet6(r5, 0x0, 0x0, 0x480c0, 0x0, 0x0) 5.770504693s ago: executing program 2 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 5.65425587s ago: executing program 4 (id=801): openat$ppp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) unshare(0x22020600) unshare(0x22020600) 5.527871687s ago: executing program 3 (id=802): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020200000a0000000000000000001000030006000000000002000008ac1e0001000000000000000002000100000000000000000b000000a003000500000000000200fffd00000000000000000000000087d1719963486e8ba1cb796ae10cf2fc136d23b5f366639cd367a83f0cd5a78aad2e167fa484e205a655e6d134ee3ca6fbd38b0dd85dd69068130c949988039625"], 0x50}}, 0x0) 4.742198083s ago: executing program 2 (id=803): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x552b, &(0x7f000000b2c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 4.741133093s ago: executing program 0 (id=804): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e1cdf1c9d746bcaa9854b30731a00f236b0aa22e760f29fc5e15ebe36fbe2e1698", 0x21}], 0x1}}], 0x1, 0x20000050) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r2}, 0x10, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) syz_open_dev$vcsu(&(0x7f0000000280), 0x100000000, 0x759002) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.28931647s ago: executing program 4 (id=805): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) setitimer(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000300)) 4.151998877s ago: executing program 0 (id=806): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 3.147238936s ago: executing program 3 (id=807): timer_getoverrun(0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e00008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.031364401s ago: executing program 0 (id=808): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x552b, &(0x7f000000b2c0)="$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") ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x51) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 2.016839492s ago: executing program 1 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x100) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x31, 0x4, 0x0, {0x5, 0xff, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.016418282s ago: executing program 2 (id=810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) unshare(0x64000600) 2.015963993s ago: executing program 3 (id=811): sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) 2.004118693s ago: executing program 4 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x100) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x31, 0x4, 0x0, {0x5, 0xff, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.093486696s ago: executing program 4 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000010101020000000000000000000000000c00"], 0x50}, 0x1, 0x0, 0x0, 0xc010840}, 0x24008840) 1.087105167s ago: executing program 1 (id=814): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 1.068308758s ago: executing program 3 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000004c0)={[{@utf8}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x96}}]}, 0x1, 0x14f7, &(0x7f0000001580)="$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") link(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0xf5, 0x0, &(0x7f0000000080)) rename(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 1.02964793s ago: executing program 0 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x100) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x31, 0x4, 0x0, {0x5, 0xff, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, 0x0, &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5, 0x0, 0xffffffff7ffffffe}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 0s ago: executing program 4 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readahead(0xffffffffffffffff, 0xe86f, 0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) io_setup(0x8, &(0x7f0000002740)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) pipe(0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 225.747131][ T2232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.779362][ T2232] EXT4-fs (loop3): orphan cleanup on readonly fs [ 226.117304][ T2232] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 226.126795][ T2232] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 226.136013][ T2232] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.412: Failed to acquire dquot type 1 [ 226.147667][ T2232] EXT4-fs (loop3): 1 truncate cleaned up [ 226.165291][ T2231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.174244][ T2232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 226.195799][ T2231] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.411: Allocating blocks 497-513 which overlap fs metadata [ 226.208886][ T297] EXT4-fs (loop4): unmounting filesystem. [ 226.215333][ T2231] EXT4-fs (loop1): pa ffff88810bdf92a0: logic 256, phys. 385, len 8 [ 226.223202][ T2231] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 226.290122][ T2234] loop0: detected capacity change from 0 to 40427 [ 226.297094][ T2234] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 226.304524][ T2234] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 226.316582][ T2242] loop4: detected capacity change from 0 to 512 [ 226.318904][ T2234] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 226.329286][ T2242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.333344][ T2234] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 226.339200][ T2242] EXT4-fs (loop4): orphan cleanup on readonly fs [ 226.353247][ T2242] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 226.362687][ T2242] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 226.372339][ T2242] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.414: Failed to acquire dquot type 1 [ 226.384001][ T2242] EXT4-fs (loop4): 1 truncate cleaned up [ 226.389610][ T2242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.450070][ T292] EXT4-fs (loop1): unmounting filesystem. [ 226.472722][ T293] EXT4-fs (loop3): unmounting filesystem. [ 228.011451][ T2257] loop2: detected capacity change from 0 to 512 [ 229.347625][ T2258] loop3: detected capacity change from 0 to 1024 [ 233.105476][ T2257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.116063][ T2257] EXT4-fs: failed to create workqueue [ 233.121419][ T2257] EXT4-fs (loop2): mount failed [ 233.136669][ T297] EXT4-fs (loop4): unmounting filesystem. [ 233.202426][ T2258] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 233.420306][ T2275] loop4: detected capacity change from 0 to 256 [ 233.426628][ T2275] exfat: Deprecated parameter 'utf8' [ 233.431768][ T2275] exfat: Deprecated parameter 'utf8' [ 233.436891][ T2275] exfat: Deprecated parameter 'namecase' [ 233.465853][ T2275] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 233.538368][ T2280] loop2: detected capacity change from 0 to 512 [ 233.552631][ T2280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.762642][ T2280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.780170][ T2280] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 233.789623][ T2280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 233.798860][ T2280] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.421: Failed to acquire dquot type 1 [ 233.812318][ T2280] EXT4-fs (loop2): 1 truncate cleaned up [ 233.819309][ T2280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.057803][ T2279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 236.088731][ T2279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 236.120380][ T2289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 236.386883][ T2291] loop3: detected capacity change from 0 to 512 [ 236.404355][ T2291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.518854][ T2291] EXT4-fs (loop3): orphan cleanup on readonly fs [ 236.556482][ T2291] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.424: bg 0: block 248: padding at end of block bitmap is not set [ 236.573763][ T2291] Quota error (device loop3): write_blk: dquota write failed [ 236.581410][ T2291] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 236.591477][ T2291] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.424: Failed to acquire dquot type 1 [ 236.613942][ T2291] EXT4-fs (loop3): 1 truncate cleaned up [ 236.622267][ T2291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.126978][ T294] EXT4-fs (loop2): unmounting filesystem. [ 238.155392][ T293] EXT4-fs (loop3): unmounting filesystem. [ 238.197307][ T2297] loop2: detected capacity change from 0 to 512 [ 238.204226][ T2297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.216916][ T2301] loop4: detected capacity change from 0 to 512 [ 238.223711][ T2301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.237005][ T2301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 238.243683][ T2301] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 238.253036][ T2301] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 238.262277][ T2301] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.427: Failed to acquire dquot type 1 [ 238.274680][ T2297] EXT4-fs (loop2): orphan cleanup on readonly fs [ 238.275485][ T2301] EXT4-fs (loop4): 1 truncate cleaned up [ 238.286888][ T2301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.290771][ T2307] loop3: detected capacity change from 0 to 512 [ 238.302233][ T2297] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.426: bg 0: block 248: padding at end of block bitmap is not set [ 238.302454][ T2307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.330414][ T2297] Quota error (device loop2): write_blk: dquota write failed [ 238.337759][ T2297] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 238.347495][ T2297] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.426: Failed to acquire dquot type 1 [ 238.359011][ T2297] EXT4-fs (loop2): 1 truncate cleaned up [ 238.360658][ T2307] EXT4-fs (loop3): orphan cleanup on readonly fs [ 238.371549][ T2307] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 238.371572][ T2297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.381417][ T2307] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 238.398644][ T2307] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.428: Failed to acquire dquot type 1 [ 238.412649][ T2307] EXT4-fs (loop3): 1 truncate cleaned up [ 238.418558][ T2307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.464912][ T294] EXT4-fs (loop2): unmounting filesystem. [ 238.465299][ T297] EXT4-fs (loop4): unmounting filesystem. [ 238.653492][ T2317] loop2: detected capacity change from 0 to 512 [ 238.661235][ T2317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.705117][ T2317] EXT4-fs (loop2): orphan cleanup on readonly fs [ 238.712740][ T2317] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.431: bg 0: block 248: padding at end of block bitmap is not set [ 238.727672][ T2317] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.431: Failed to acquire dquot type 1 [ 238.740339][ T2317] EXT4-fs (loop2): 1 truncate cleaned up [ 238.746561][ T2317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.928331][ T2306] loop1: detected capacity change from 0 to 40427 [ 238.945069][ T2306] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 238.956316][ T2306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 238.985847][ T2306] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4 [ 238.993595][ T2306] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 239.075889][ T293] EXT4-fs (loop3): unmounting filesystem. [ 240.353431][ T2326] loop3: detected capacity change from 0 to 1024 [ 241.236712][ T2326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.268351][ T2325] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.433: Allocating blocks 497-513 which overlap fs metadata [ 241.288500][ T2325] EXT4-fs (loop3): pa ffff88810bdf9930: logic 256, phys. 385, len 8 [ 241.296344][ T2325] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 241.473179][ T293] EXT4-fs (loop3): unmounting filesystem. [ 242.754324][ T2343] loop1: detected capacity change from 0 to 128 [ 242.871250][ T2343] xt_CONNSECMARK: invalid mode: 0 [ 242.882536][ T294] EXT4-fs (loop2): unmounting filesystem. [ 243.615637][ T2350] loop0: detected capacity change from 0 to 512 [ 243.622020][ T2350] EXT4-fs: Ignoring removed oldalloc option [ 243.638337][ T2350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.880307][ T2360] loop3: detected capacity change from 0 to 512 [ 245.232737][ T2361] loop2: detected capacity change from 0 to 512 [ 245.244542][ T2361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.296363][ T2361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 245.323720][ T2361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.439: bg 0: block 248: padding at end of block bitmap is not set [ 245.342622][ T2361] __quota_error: 3 callbacks suppressed [ 245.342677][ T2361] Quota error (device loop2): write_blk: dquota write failed [ 245.355845][ T2361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 245.366323][ T2361] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.439: Failed to acquire dquot type 1 [ 245.387125][ T2361] EXT4-fs (loop2): 1 truncate cleaned up [ 245.395889][ T2361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.025679][ T2360] EXT4-fs: error -4 creating inode table initialization thread [ 247.033632][ T2360] EXT4-fs (loop3): mount failed [ 247.082811][ T294] EXT4-fs (loop2): unmounting filesystem. [ 247.117030][ T291] EXT4-fs (loop0): unmounting filesystem. [ 247.164924][ T2376] loop2: detected capacity change from 0 to 512 [ 247.270820][ T2378] loop3: detected capacity change from 0 to 512 [ 247.282572][ T2378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.297741][ T2376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.325934][ T2378] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.335622][ T2378] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 247.345040][ T2378] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 247.354318][ T2378] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.444: Failed to acquire dquot type 1 [ 247.368485][ T2378] EXT4-fs (loop3): 1 truncate cleaned up [ 247.383924][ T2378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.410121][ T2376] EXT4-fs (loop2): orphan cleanup on readonly fs [ 247.418344][ T2376] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 247.427859][ T2376] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 247.437124][ T2376] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.443: Failed to acquire dquot type 1 [ 247.450631][ T2376] EXT4-fs (loop2): 1 truncate cleaned up [ 247.464294][ T2376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.909592][ T2384] loop0: detected capacity change from 0 to 512 [ 247.920322][ T2384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.025192][ T294] EXT4-fs (loop2): unmounting filesystem. [ 248.033333][ T2384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 248.060567][ T2384] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 248.070698][ T2384] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 248.080133][ T2384] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.445: Failed to acquire dquot type 1 [ 248.093032][ T2384] EXT4-fs (loop0): 1 truncate cleaned up [ 248.345980][ T2384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.379216][ T293] EXT4-fs (loop3): unmounting filesystem. [ 248.644237][ T291] EXT4-fs (loop0): unmounting filesystem. [ 248.687439][ T2391] loop2: detected capacity change from 0 to 40427 [ 248.700188][ T2391] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 248.715339][ T2391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 248.774730][ T2391] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 248.784996][ T2402] loop0: detected capacity change from 0 to 512 [ 248.793595][ T2402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.811581][ T2402] EXT4-fs (loop0): orphan cleanup on readonly fs [ 248.818884][ T2402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.450: bg 0: block 248: padding at end of block bitmap is not set [ 248.833992][ T2402] Quota error (device loop0): write_blk: dquota write failed [ 248.841300][ T2402] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 248.851035][ T2402] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.450: Failed to acquire dquot type 1 [ 248.863404][ T2402] EXT4-fs (loop0): 1 truncate cleaned up [ 248.869528][ T2402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.906061][ T2391] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 251.661069][ T2410] loop4: detected capacity change from 0 to 512 [ 251.856770][ T2410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.886748][ T2410] EXT4-fs (loop4): orphan cleanup on readonly fs [ 251.893406][ T2410] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 251.903133][ T2410] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 251.912436][ T2410] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.451: Failed to acquire dquot type 1 [ 251.924520][ T2410] EXT4-fs (loop4): 1 truncate cleaned up [ 251.998524][ T2410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.219844][ T291] EXT4-fs (loop0): unmounting filesystem. [ 252.246649][ T297] EXT4-fs (loop4): unmounting filesystem. [ 253.310317][ T2425] loop3: detected capacity change from 0 to 512 [ 253.502300][ T2426] loop4: detected capacity change from 0 to 128 [ 253.799136][ T2425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.894237][ T2425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 253.903486][ T2425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.455: bg 0: block 248: padding at end of block bitmap is not set [ 253.920066][ T2425] Quota error (device loop3): write_blk: dquota write failed [ 253.927451][ T2425] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 253.937242][ T2425] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.455: Failed to acquire dquot type 1 [ 253.951876][ T2425] EXT4-fs (loop3): 1 truncate cleaned up [ 253.958433][ T2425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.005370][ T2426] xt_CONNSECMARK: invalid mode: 0 [ 255.240618][ T293] EXT4-fs (loop3): unmounting filesystem. [ 255.331607][ T2440] loop4: detected capacity change from 0 to 512 [ 255.339279][ T2440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.366766][ T2440] EXT4-fs (loop4): orphan cleanup on readonly fs [ 255.373365][ T2440] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 255.383189][ T2440] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 255.392411][ T2440] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.459: Failed to acquire dquot type 1 [ 255.405575][ T2440] EXT4-fs (loop4): 1 truncate cleaned up [ 255.411189][ T2440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.528605][ T2446] loop2: detected capacity change from 0 to 512 [ 255.561794][ T2446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.592693][ T2446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 255.601875][ T2446] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 255.611337][ T2446] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 255.620614][ T2446] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.460: Failed to acquire dquot type 1 [ 255.634429][ T2446] EXT4-fs (loop2): 1 truncate cleaned up [ 255.641165][ T2446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.813752][ T2432] loop0: detected capacity change from 0 to 40427 [ 255.896981][ T2432] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 255.905458][ T2432] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 256.081669][ T2432] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 256.093200][ T2432] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 256.175420][ T297] EXT4-fs (loop4): unmounting filesystem. [ 256.658967][ T294] EXT4-fs (loop2): unmounting filesystem. [ 256.660500][ T2455] loop3: detected capacity change from 0 to 40427 [ 256.690077][ T2455] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 256.702529][ T2455] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 256.724755][ T2455] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 256.808973][ T2467] loop2: detected capacity change from 0 to 512 [ 256.816866][ T2467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.827491][ T2455] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 256.837196][ T2467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 256.844394][ T2467] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.464: bg 0: block 248: padding at end of block bitmap is not set [ 256.859632][ T2467] Quota error (device loop2): write_blk: dquota write failed [ 257.050083][ T2467] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 257.077576][ T2467] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.464: Failed to acquire dquot type 1 [ 257.931912][ T2467] EXT4-fs (loop2): 1 truncate cleaned up [ 257.937697][ T2467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.154077][ T2473] loop0: detected capacity change from 0 to 16 [ 258.194224][ T2473] erofs: (device loop0): mounted with root inode @ nid 36. [ 259.872458][ T294] EXT4-fs (loop2): unmounting filesystem. [ 259.973257][ T2494] loop2: detected capacity change from 0 to 512 [ 260.006344][ T2495] loop0: detected capacity change from 0 to 512 [ 260.015998][ T2495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.025612][ T2494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.103153][ T2495] EXT4-fs (loop0): orphan cleanup on readonly fs [ 260.112261][ T2495] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.469: bg 0: block 248: padding at end of block bitmap is not set [ 260.128604][ T2495] Quota error (device loop0): write_blk: dquota write failed [ 260.135927][ T2495] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 260.145733][ T2495] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.469: Failed to acquire dquot type 1 [ 260.158646][ T2495] EXT4-fs (loop0): 1 truncate cleaned up [ 260.165051][ T2495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 260.236057][ T2494] EXT4-fs (loop2): orphan cleanup on readonly fs [ 260.244177][ T2494] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 260.253717][ T2494] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 260.262980][ T2494] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.471: Failed to acquire dquot type 1 [ 260.277365][ T2494] EXT4-fs (loop2): 1 truncate cleaned up [ 260.284297][ T2494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 260.775307][ T294] EXT4-fs (loop2): unmounting filesystem. [ 260.877310][ T2501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.468'. [ 261.019769][ T2501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.468'. [ 261.046683][ T291] EXT4-fs (loop0): unmounting filesystem. [ 261.132285][ T2508] loop0: detected capacity change from 0 to 512 [ 261.140658][ T2508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.154917][ T2508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 261.161709][ T2508] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 261.171124][ T2508] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 261.180394][ T2508] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.473: Failed to acquire dquot type 1 [ 261.191945][ T2508] EXT4-fs (loop0): 1 truncate cleaned up [ 261.197626][ T2508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.365604][ T2511] loop4: detected capacity change from 0 to 16 [ 261.398137][ T2511] erofs: (device loop4): mounted with root inode @ nid 36. [ 261.871883][ T2515] loop4: detected capacity change from 0 to 40427 [ 261.886554][ T2515] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 261.895314][ T2515] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 261.911063][ T291] EXT4-fs (loop0): unmounting filesystem. [ 261.941203][ T2515] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 261.951775][ T2515] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 262.079556][ T2525] loop2: detected capacity change from 0 to 40427 [ 262.105994][ T2525] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 262.113759][ T2525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 262.189888][ T2525] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 262.196664][ T2525] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 262.588329][ T2544] loop4: detected capacity change from 0 to 512 [ 262.595844][ T2544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.612747][ T2544] EXT4-fs (loop4): orphan cleanup on readonly fs [ 262.620315][ T2544] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.482: bg 0: block 248: padding at end of block bitmap is not set [ 262.639367][ T2544] Quota error (device loop4): write_blk: dquota write failed [ 262.646697][ T2544] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 262.656478][ T2544] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.482: Failed to acquire dquot type 1 [ 262.669632][ T2544] EXT4-fs (loop4): 1 truncate cleaned up [ 262.676847][ T2544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.851554][ T2548] loop2: detected capacity change from 0 to 512 [ 262.859383][ T2548] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.881233][ T2548] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.889790][ T2548] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 262.899225][ T2548] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 262.908524][ T2548] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.483: Failed to acquire dquot type 1 [ 262.921947][ T2548] EXT4-fs (loop2): 1 truncate cleaned up [ 262.928683][ T2548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 264.922314][ T2555] loop1: detected capacity change from 0 to 512 [ 269.506481][ T294] EXT4-fs (loop2): unmounting filesystem. [ 269.514882][ T2555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.523511][ T2555] EXT4-fs: failed to create workqueue [ 269.528753][ T2555] EXT4-fs (loop1): mount failed [ 269.613042][ T2559] loop0: detected capacity change from 0 to 16 [ 269.632334][ T2559] erofs: (device loop0): mounted with root inode @ nid 36. [ 269.645578][ T2561] 9pnet_fd: Insufficient options for proto=fd [ 269.708635][ T297] EXT4-fs (loop4): unmounting filesystem. [ 269.819490][ T2568] loop2: detected capacity change from 0 to 256 [ 269.846079][ T2568] exfat: Deprecated parameter 'utf8' [ 269.863002][ T2568] exfat: Deprecated parameter 'utf8' [ 269.871428][ T2568] exfat: Deprecated parameter 'namecase' [ 269.908249][ T2572] loop0: detected capacity change from 0 to 512 [ 269.923785][ T2572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.965226][ T2578] loop4: detected capacity change from 0 to 512 [ 270.081190][ T2572] EXT4-fs (loop0): orphan cleanup on readonly fs [ 270.103990][ T2568] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 270.120614][ T2578] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 270.130952][ T2578] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 270.140223][ T2578] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.490: Failed to acquire dquot type 0 [ 270.153450][ T2578] EXT4-fs (loop4): Remounting filesystem read-only [ 270.160072][ T2578] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 270.170348][ T2578] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 270.179618][ T2578] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.490: Failed to acquire dquot type 0 [ 270.192413][ T2578] EXT4-fs (loop4): Remounting filesystem read-only [ 270.200038][ T2578] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 270.210281][ T2578] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 270.219488][ T2578] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.490: Failed to acquire dquot type 0 [ 270.232029][ T2578] EXT4-fs (loop4): Remounting filesystem read-only [ 270.238661][ T2578] EXT4-fs (loop4): 1 orphan inode deleted [ 270.244289][ T2578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.253336][ T2578] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.358562][ T2578] tc_dump_action: action bad kind [ 270.402115][ T2572] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 270.431319][ T2572] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 270.464908][ T2572] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.492: Failed to acquire dquot type 1 [ 270.578888][ T2572] EXT4-fs (loop0): 1 truncate cleaned up [ 270.585530][ T2572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.165226][ T2587] loop1: detected capacity change from 0 to 1024 [ 271.195531][ T297] EXT4-fs (loop4): unmounting filesystem. [ 271.318589][ T2587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.387930][ T2587] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.493: Allocating blocks 497-513 which overlap fs metadata [ 271.403536][ T2587] EXT4-fs (loop1): pa ffff88811799d150: logic 256, phys. 385, len 8 [ 271.411468][ T2587] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 271.652512][ T291] EXT4-fs (loop0): unmounting filesystem. [ 272.203453][ T292] EXT4-fs (loop1): unmounting filesystem. [ 272.372962][ T2604] loop1: detected capacity change from 0 to 128 [ 272.417844][ T2604] xt_CONNSECMARK: invalid mode: 0 [ 272.536006][ T2594] loop0: detected capacity change from 0 to 40427 [ 272.664417][ T2594] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 272.756417][ T2594] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 273.054708][ T2594] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 273.090994][ T2594] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 273.467071][ T2593] loop4: detected capacity change from 0 to 40427 [ 273.513655][ T2593] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 273.536443][ T2593] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 273.575525][ T2593] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 273.582217][ T2593] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 273.739053][ T2617] loop1: detected capacity change from 0 to 512 [ 273.749170][ T2617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.764129][ T2617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 273.771941][ T2617] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 273.781237][ T2617] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 273.790370][ T2617] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.498: Failed to acquire dquot type 1 [ 273.801880][ T2617] EXT4-fs (loop1): 1 truncate cleaned up [ 273.807539][ T2617] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.092183][ T2625] loop0: detected capacity change from 0 to 512 [ 274.100126][ T2625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.257781][ T2625] EXT4-fs (loop0): orphan cleanup on readonly fs [ 274.267366][ T2625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.499: bg 0: block 248: padding at end of block bitmap is not set [ 274.282749][ T2625] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.499: Failed to acquire dquot type 1 [ 274.295836][ T2625] EXT4-fs (loop0): 1 truncate cleaned up [ 274.302197][ T2625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.390054][ T2630] loop4: detected capacity change from 0 to 512 [ 275.399457][ T2630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.409699][ T292] EXT4-fs (loop1): unmounting filesystem. [ 275.419117][ T2630] EXT4-fs (loop4): orphan cleanup on readonly fs [ 275.426268][ T2630] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.501: bg 0: block 248: padding at end of block bitmap is not set [ 275.442113][ T2630] __quota_error: 2 callbacks suppressed [ 275.442128][ T2630] Quota error (device loop4): write_blk: dquota write failed [ 275.455204][ T2630] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 275.464939][ T2630] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.501: Failed to acquire dquot type 1 [ 275.477215][ T2630] EXT4-fs (loop4): 1 truncate cleaned up [ 275.483667][ T2630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.501550][ T291] EXT4-fs (loop0): unmounting filesystem. [ 275.849859][ T2639] 9pnet_fd: Insufficient options for proto=fd [ 276.930095][ T2648] loop0: detected capacity change from 0 to 16 [ 276.966999][ T297] EXT4-fs (loop4): unmounting filesystem. [ 276.975963][ T2648] erofs: (device loop0): mounted with root inode @ nid 36. [ 276.995624][ T2649] loop1: detected capacity change from 0 to 512 [ 277.002303][ T2649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.017551][ T2649] EXT4-fs (loop1): orphan cleanup on readonly fs [ 277.024428][ T2649] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 277.033943][ T2649] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 277.043194][ T2649] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.506: Failed to acquire dquot type 1 [ 277.064984][ T2649] EXT4-fs (loop1): 1 truncate cleaned up [ 277.072689][ T2649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 277.135645][ T2657] 9p: Unknown Cache mode fscach [ 277.374301][ T2659] loop0: detected capacity change from 0 to 40427 [ 277.398118][ T2659] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 277.409849][ T2659] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 277.438790][ T2659] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 277.446556][ T2659] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 277.617831][ T2663] loop3: detected capacity change from 0 to 40427 [ 277.624643][ T2663] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 277.632350][ T2663] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 277.680038][ T2663] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 277.686799][ T2663] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 277.765266][ T292] EXT4-fs (loop1): unmounting filesystem. [ 277.843126][ T2673] loop1: detected capacity change from 0 to 512 [ 277.850650][ T2673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.868903][ T2673] EXT4-fs (loop1): orphan cleanup on readonly fs [ 277.875502][ T2673] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 277.884891][ T2673] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 277.894234][ T2673] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.512: Failed to acquire dquot type 1 [ 277.916550][ T2673] EXT4-fs (loop1): 1 truncate cleaned up [ 277.922439][ T2673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 277.937825][ T2677] device pim6reg1 entered promiscuous mode [ 278.008392][ T2682] 9pnet_fd: Insufficient options for proto=fd [ 278.102203][ T2687] loop4: detected capacity change from 0 to 512 [ 278.119496][ T2687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.220723][ T2687] EXT4-fs (loop4): orphan cleanup on readonly fs [ 278.230764][ T2687] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.514: bg 0: block 248: padding at end of block bitmap is not set [ 278.252440][ T2687] Quota error (device loop4): write_blk: dquota write failed [ 278.261722][ T2687] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 278.272864][ T2687] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.514: Failed to acquire dquot type 1 [ 278.291134][ T2687] EXT4-fs (loop4): 1 truncate cleaned up [ 278.298464][ T2687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 280.658752][ T2696] loop3: detected capacity change from 0 to 512 [ 280.851301][ T2696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.873571][ T297] EXT4-fs (loop4): unmounting filesystem. [ 280.876313][ T292] EXT4-fs (loop1): unmounting filesystem. [ 280.912504][ T2696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 280.922537][ T2696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.518: bg 0: block 248: padding at end of block bitmap is not set [ 280.938343][ T2696] Quota error (device loop3): write_blk: dquota write failed [ 280.945548][ T2696] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 280.955300][ T2696] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.518: Failed to acquire dquot type 1 [ 280.967673][ T2696] EXT4-fs (loop3): 1 truncate cleaned up [ 280.984048][ T2696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 281.040145][ T2700] loop0: detected capacity change from 0 to 256 [ 281.067110][ T2706] loop1: detected capacity change from 0 to 16 [ 281.073792][ T2700] exfat: Deprecated parameter 'utf8' [ 282.435959][ T2708] loop2: detected capacity change from 0 to 1024 [ 285.543270][ T2700] exfat: Deprecated parameter 'utf8' [ 285.722606][ T293] EXT4-fs (loop3): unmounting filesystem. [ 285.790387][ T2700] exfat: Deprecated parameter 'namecase' [ 285.892854][ T2705] loop4: detected capacity change from 0 to 512 [ 285.914327][ T2708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.982212][ T2708] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.522: Allocating blocks 497-513 which overlap fs metadata [ 285.998257][ T2708] EXT4-fs (loop2): pa ffff88811799d738: logic 256, phys. 385, len 8 [ 286.006088][ T2708] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 286.074970][ T2700] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 286.161996][ T294] EXT4-fs (loop2): unmounting filesystem. [ 286.271595][ T2722] 9pnet_fd: Insufficient options for proto=fd [ 286.447571][ T2717] loop4: detected capacity change from 0 to 40427 [ 286.478737][ T2717] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 286.486166][ T2717] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 286.512801][ T2717] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 286.520562][ T2717] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 286.584785][ T2728] loop2: detected capacity change from 0 to 40427 [ 286.605576][ T2728] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 286.613222][ T2728] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 286.630928][ T2728] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 286.638634][ T2728] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 287.140984][ T2743] loop4: detected capacity change from 0 to 512 [ 287.148398][ T2743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.206942][ T2743] EXT4-fs (loop4): orphan cleanup on readonly fs [ 287.213539][ T2743] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 287.223120][ T2743] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 287.232369][ T2743] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.530: Failed to acquire dquot type 1 [ 287.247025][ T2743] EXT4-fs (loop4): 1 truncate cleaned up [ 287.607168][ T2750] loop3: detected capacity change from 0 to 256 [ 287.613526][ T2750] exfat: Deprecated parameter 'utf8' [ 287.618856][ T2750] exfat: Deprecated parameter 'namecase' [ 287.624366][ T2750] exfat: Deprecated parameter 'utf8' [ 287.629473][ T2750] exfat: Bad value for 'uid' [ 287.634219][ T2743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.720751][ T2750] loop3: detected capacity change from 0 to 512 [ 287.730076][ T2750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.338847][ T2756] loop2: detected capacity change from 0 to 512 [ 288.376574][ T2756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.840109][ T2756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 288.930078][ T2756] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.532: bg 0: block 248: padding at end of block bitmap is not set [ 288.991341][ T2756] Quota error (device loop2): write_blk: dquota write failed [ 288.998988][ T2756] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 289.008886][ T2756] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.532: Failed to acquire dquot type 1 [ 289.113985][ T2756] EXT4-fs (loop2): 1 truncate cleaned up [ 289.231765][ T297] EXT4-fs (loop4): unmounting filesystem. [ 289.508972][ T2756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.119447][ T2750] EXT4-fs: failed to create workqueue [ 290.124664][ T2750] EXT4-fs (loop3): mount failed [ 290.309967][ T2761] loop4: detected capacity change from 0 to 16 [ 290.331866][ T2761] erofs: (device loop4): mounted with root inode @ nid 36. [ 290.343822][ T2763] loop1: detected capacity change from 0 to 256 [ 290.645025][ T2765] loop0: detected capacity change from 0 to 512 [ 290.717714][ T2765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.734770][ T2763] exfat: Deprecated parameter 'utf8' [ 290.739316][ T294] EXT4-fs (loop2): unmounting filesystem. [ 290.746445][ T2765] EXT4-fs (loop0): orphan cleanup on readonly fs [ 290.753526][ T2765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.533: bg 0: block 248: padding at end of block bitmap is not set [ 290.768300][ T2765] Quota error (device loop0): write_blk: dquota write failed [ 290.775509][ T2765] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 290.785314][ T2765] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.533: Failed to acquire dquot type 1 [ 290.797337][ T2765] EXT4-fs (loop0): 1 truncate cleaned up [ 290.805095][ T2765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.822718][ T2763] exfat: Deprecated parameter 'utf8' [ 290.828172][ T2763] exfat: Deprecated parameter 'namecase' [ 290.859866][ T2763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 293.726181][ T2775] loop3: detected capacity change from 0 to 1024 [ 297.541583][ T2775] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 297.577491][ T291] EXT4-fs (loop0): unmounting filesystem. [ 297.590132][ T2779] 9pnet_fd: Insufficient options for proto=fd [ 297.683391][ T387] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.071954][ T2796] loop0: detected capacity change from 0 to 512 [ 298.391046][ T2796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.441235][ T2796] EXT4-fs (loop0): orphan cleanup on readonly fs [ 298.447980][ T2796] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 298.457321][ T2796] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 298.466690][ T2796] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.539: Failed to acquire dquot type 1 [ 298.481970][ T2799] loop4: detected capacity change from 0 to 512 [ 298.489679][ T2799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.498658][ T2796] EXT4-fs (loop0): 1 truncate cleaned up [ 298.504327][ T2796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 298.629301][ T2799] EXT4-fs (loop4): orphan cleanup on readonly fs [ 298.636064][ T2799] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 298.645330][ T2799] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 298.654530][ T2799] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.544: Failed to acquire dquot type 1 [ 298.700097][ T2799] EXT4-fs (loop4): 1 truncate cleaned up [ 298.866289][ T369] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 298.982130][ T2799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.014812][ T291] EXT4-fs (loop0): unmounting filesystem. [ 299.056269][ T369] usb 3-1: Using ep0 maxpacket: 16 [ 299.118271][ T297] EXT4-fs (loop4): unmounting filesystem. [ 299.156330][ T369] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.164150][ T369] usb 3-1: config 0 has no interface number 0 [ 299.186452][ T369] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.202234][ T2807] loop1: detected capacity change from 0 to 40427 [ 299.208607][ T369] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.593131][ T2819] loop4: detected capacity change from 0 to 128 [ 299.600710][ T2807] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 299.630169][ T2819] xt_CONNSECMARK: invalid mode: 0 [ 299.663128][ T2807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 299.714475][ T369] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 299.722320][ T2807] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4 [ 299.732684][ T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.736457][ T2807] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 300.641890][ T2827] loop0: detected capacity change from 0 to 1024 [ 300.824257][ T2827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 300.886285][ T2827] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.550: Allocating blocks 497-513 which overlap fs metadata [ 300.987336][ T369] usb 3-1: config 0 descriptor?? [ 302.038948][ T2835] loop4: detected capacity change from 0 to 512 [ 303.961188][ T2835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.969936][ T2827] EXT4-fs (loop0): pa ffff88811799dc78: logic 256, phys. 385, len 8 [ 303.977909][ T2827] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 304.049862][ T2835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 304.056847][ T2835] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.551: bg 0: block 248: padding at end of block bitmap is not set [ 304.072093][ T2835] Quota error (device loop4): write_blk: dquota write failed [ 304.079335][ T2835] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 304.089074][ T2835] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.551: Failed to acquire dquot type 1 [ 304.100893][ T2835] EXT4-fs (loop4): 1 truncate cleaned up [ 304.108257][ T2835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.205560][ T369] usbhid 3-1:0.1: can't add hid device: -71 [ 304.215231][ T291] EXT4-fs (loop0): unmounting filesystem. [ 304.220826][ T2842] loop1: detected capacity change from 0 to 16 [ 304.221078][ T369] usbhid: probe of 3-1:0.1 failed with error -71 [ 304.305159][ T2842] erofs: (device loop1): mounted with root inode @ nid 36. [ 304.362626][ T369] usb 3-1: USB disconnect, device number 5 [ 304.375322][ T2848] loop0: detected capacity change from 0 to 256 [ 304.381775][ T2848] exfat: Deprecated parameter 'utf8' [ 304.388564][ T2848] exfat: Deprecated parameter 'utf8' [ 304.396460][ T297] EXT4-fs (loop4): unmounting filesystem. [ 304.402181][ T2848] exfat: Deprecated parameter 'namecase' [ 304.535725][ T2850] 9pnet_fd: Insufficient options for proto=fd [ 304.558070][ T2848] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 305.240569][ T2868] loop3: detected capacity change from 0 to 512 [ 305.317170][ T2868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.341628][ T2871] loop1: detected capacity change from 0 to 512 [ 305.348567][ T2871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.362841][ T2871] EXT4-fs (loop1): orphan cleanup on readonly fs [ 305.369515][ T2871] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 305.378765][ T2871] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 305.387962][ T2871] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.560: Failed to acquire dquot type 1 [ 305.399805][ T2871] EXT4-fs (loop1): 1 truncate cleaned up [ 305.406344][ T2871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 305.450183][ T2868] EXT4-fs (loop3): orphan cleanup on readonly fs [ 305.485489][ T2868] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.559: bg 0: block 248: padding at end of block bitmap is not set [ 305.505827][ T2868] Quota error (device loop3): write_blk: dquota write failed [ 305.525628][ T2868] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 305.535660][ T2868] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.559: Failed to acquire dquot type 1 [ 305.547792][ T2868] EXT4-fs (loop3): 1 truncate cleaned up [ 305.566917][ T2875] loop2: detected capacity change from 0 to 16 [ 305.584974][ T2868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 305.595358][ T2875] erofs: (device loop2): mounted with root inode @ nid 36. [ 306.040487][ T2880] netlink: 72 bytes leftover after parsing attributes in process `syz.4.562'. [ 306.041420][ T2877] loop4: detected capacity change from 0 to 32768 [ 306.116023][ T292] EXT4-fs (loop1): unmounting filesystem. [ 306.126721][ T2877] loop4: p1 p2 p3 < p5 p6 p7 > [ 306.298643][ T2886] loop1: detected capacity change from 0 to 1024 [ 306.598268][ T2886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 306.667904][ T2886] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.563: Allocating blocks 497-513 which overlap fs metadata [ 306.683983][ T2886] EXT4-fs (loop1): pa ffff8881326c8690: logic 256, phys. 385, len 8 [ 306.691805][ T2886] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 307.271683][ T2868] syz.3.559 (2868) used greatest stack depth: 19432 bytes left [ 307.363687][ T292] EXT4-fs (loop1): unmounting filesystem. [ 307.493812][ T2894] loop1: detected capacity change from 0 to 1024 [ 307.527815][ T2894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 308.267076][ T292] EXT4-fs (loop1): unmounting filesystem. [ 308.455670][ T2912] loop1: detected capacity change from 0 to 512 [ 308.463404][ T2912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.513252][ T2912] EXT4-fs (loop1): orphan cleanup on readonly fs [ 308.520426][ T2912] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.568: bg 0: block 248: padding at end of block bitmap is not set [ 308.534883][ T2912] Quota error (device loop1): write_blk: dquota write failed [ 308.542155][ T2912] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 308.551864][ T2912] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.568: Failed to acquire dquot type 1 [ 308.565365][ T2912] EXT4-fs (loop1): 1 truncate cleaned up [ 308.571468][ T2912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 309.652491][ T293] EXT4-fs (loop3): unmounting filesystem. [ 310.190594][ T292] EXT4-fs (loop1): unmounting filesystem. [ 310.336123][ T2927] loop4: detected capacity change from 0 to 512 [ 310.361879][ T2927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.436928][ T2927] EXT4-fs (loop4): orphan cleanup on readonly fs [ 310.445055][ T2927] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 310.454535][ T2927] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 310.463814][ T2927] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.571: Failed to acquire dquot type 1 [ 310.477779][ T2927] EXT4-fs (loop4): 1 truncate cleaned up [ 310.484987][ T2927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 310.932619][ T2936] loop2: detected capacity change from 0 to 256 [ 310.940337][ T2936] exfat: Deprecated parameter 'utf8' [ 310.945592][ T2936] exfat: Deprecated parameter 'namecase' [ 310.951140][ T2936] exfat: Deprecated parameter 'utf8' [ 310.956482][ T2936] exfat: Bad value for 'uid' [ 312.049149][ T2933] loop2: detected capacity change from 0 to 512 [ 312.068811][ T2933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 312.126063][ T297] EXT4-fs (loop4): unmounting filesystem. [ 312.128578][ T2943] loop0: detected capacity change from 0 to 256 [ 312.227828][ T2945] loop3: detected capacity change from 0 to 1024 [ 312.251630][ T2943] exfat: Deprecated parameter 'utf8' [ 312.346926][ T2943] exfat: Deprecated parameter 'utf8' [ 312.360604][ T2945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.427648][ T2945] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.575: Allocating blocks 497-513 which overlap fs metadata [ 312.443000][ T2945] EXT4-fs (loop3): pa ffff8881326c8a80: logic 256, phys. 385, len 8 [ 312.450910][ T2945] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 312.544813][ T2943] exfat: Deprecated parameter 'namecase' [ 312.588456][ T2943] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 313.205347][ T2933] EXT4-fs (loop2): 1 truncate cleaned up [ 313.210868][ T2933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 313.226765][ T293] EXT4-fs (loop3): unmounting filesystem. [ 313.305936][ T2959] loop3: detected capacity change from 0 to 512 [ 313.382379][ T2959] EXT4-fs: Ignoring removed oldalloc option [ 313.389177][ T294] EXT4-fs (loop2): unmounting filesystem. [ 313.514547][ T2959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 313.652779][ T2964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'. [ 313.661541][ T2964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'. [ 313.970358][ T2957] loop4: detected capacity change from 0 to 40427 [ 313.998610][ T2957] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 314.006042][ T2957] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 314.046482][ T2957] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 314.055769][ T2957] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 314.314172][ T293] EXT4-fs (loop3): unmounting filesystem. [ 315.809281][ T28] audit: type=1400 audit(1739856622.037:187): avc: denied { write } for pid=2980 comm="syz.3.584" name="pfkey" dev="proc" ino=4026532544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 316.022633][ T2987] loop2: detected capacity change from 0 to 512 [ 316.035101][ T2987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.119184][ T2987] EXT4-fs (loop2): orphan cleanup on readonly fs [ 316.127840][ T2987] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 316.137243][ T2987] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 316.146549][ T2987] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.583: Failed to acquire dquot type 1 [ 316.159895][ T2987] EXT4-fs (loop2): 1 truncate cleaned up [ 316.166186][ T2987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.074833][ T2995] loop4: detected capacity change from 0 to 16 [ 317.099413][ T2995] erofs: (device loop4): mounted with root inode @ nid 36. [ 317.214413][ T294] EXT4-fs (loop2): unmounting filesystem. [ 317.301150][ T3002] loop2: detected capacity change from 0 to 512 [ 317.308693][ T3002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.323629][ T3002] EXT4-fs (loop2): orphan cleanup on readonly fs [ 317.330400][ T3002] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 317.339851][ T3002] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 317.349085][ T3002] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.588: Failed to acquire dquot type 1 [ 317.361256][ T3002] EXT4-fs (loop2): 1 truncate cleaned up [ 317.367637][ T3002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.980088][ T3009] loop0: detected capacity change from 0 to 1024 [ 318.076513][ T294] EXT4-fs (loop2): unmounting filesystem. [ 318.126638][ T3009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 318.154795][ T3009] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.589: Allocating blocks 497-513 which overlap fs metadata [ 318.169674][ T3009] EXT4-fs (loop0): pa ffff88810bdf95e8: logic 256, phys. 385, len 8 [ 318.177741][ T3009] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 318.771587][ T3021] loop1: detected capacity change from 0 to 1024 [ 319.702948][ T3022] loop2: detected capacity change from 0 to 1024 [ 320.265370][ T3028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.592'. [ 320.441160][ T291] EXT4-fs (loop0): unmounting filesystem. [ 321.088320][ T3022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 321.193808][ T3020] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.590: Allocating blocks 497-513 which overlap fs metadata [ 321.208760][ T3020] EXT4-fs (loop2): pa ffff8881326c8dc8: logic 256, phys. 385, len 8 [ 321.216907][ T3020] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 321.298192][ T3021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.813911][ T294] EXT4-fs (loop2): unmounting filesystem. [ 321.860036][ T292] EXT4-fs (loop1): unmounting filesystem. [ 321.878485][ T3036] loop3: detected capacity change from 0 to 512 [ 321.885187][ T3036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.942529][ T3036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 321.950617][ T3036] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 321.959863][ T3036] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 321.969049][ T3036] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.594: Failed to acquire dquot type 1 [ 321.980875][ T3036] EXT4-fs (loop3): 1 truncate cleaned up [ 322.026329][ T3036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 322.284337][ T3048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.593'. [ 322.443860][ T293] EXT4-fs (loop3): unmounting filesystem. [ 322.482382][ T3052] loop3: detected capacity change from 0 to 1024 [ 322.497608][ T3052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 322.517470][ T3052] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.598: Allocating blocks 497-513 which overlap fs metadata [ 322.531327][ T3052] EXT4-fs (loop3): pa ffff8881326c8738: logic 256, phys. 385, len 8 [ 322.539162][ T3052] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 322.564873][ T293] EXT4-fs (loop3): unmounting filesystem. [ 322.583040][ T3056] loop3: detected capacity change from 0 to 256 [ 322.589444][ T3056] exfat: Deprecated parameter 'utf8' [ 322.594796][ T3056] exfat: Deprecated parameter 'utf8' [ 322.600068][ T3056] exfat: Deprecated parameter 'namecase' [ 322.608783][ T3056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 322.856916][ T3064] loop0: detected capacity change from 0 to 512 [ 322.866133][ T3064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 322.882209][ T3064] EXT4-fs (loop0): orphan cleanup on readonly fs [ 322.889109][ T3064] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 322.898448][ T3064] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 322.907735][ T3064] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.601: Failed to acquire dquot type 1 [ 322.919875][ T3064] EXT4-fs (loop0): 1 truncate cleaned up [ 322.927702][ T3064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 322.970443][ T3067] device pim6reg1 entered promiscuous mode [ 323.100663][ T3069] loop1: detected capacity change from 0 to 32768 [ 323.173594][ T3075] loop2: detected capacity change from 0 to 512 [ 323.189561][ T3075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.198509][ T3069] loop1: p1 p2 p3 < p5 p6 p7 > [ 323.230933][ T3075] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.237653][ T3075] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 323.246950][ T3075] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 323.256062][ T3075] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.605: Failed to acquire dquot type 1 [ 323.269322][ T3075] EXT4-fs (loop2): 1 truncate cleaned up [ 323.349454][ T3079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.603'. [ 323.642089][ T291] EXT4-fs (loop0): unmounting filesystem. [ 323.737490][ T3075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 323.772027][ T103] loop1: p1 p2 p3 < p5 p6 p7 > [ 323.912432][ T3089] loop0: detected capacity change from 0 to 1024 [ 323.962797][ T294] EXT4-fs (loop2): unmounting filesystem. [ 324.170398][ T3089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 324.236124][ T3089] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.607: Allocating blocks 497-513 which overlap fs metadata [ 324.251612][ T3089] EXT4-fs (loop0): pa ffff88811799d348: logic 256, phys. 385, len 8 [ 324.259513][ T3089] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 324.519395][ T3094] loop4: detected capacity change from 0 to 512 [ 324.529194][ T3094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.593902][ T3094] EXT4-fs (loop4): orphan cleanup on readonly fs [ 324.601894][ T3094] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 324.611247][ T3094] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 324.620479][ T3094] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.609: Failed to acquire dquot type 1 [ 324.713873][ T3094] EXT4-fs (loop4): 1 truncate cleaned up [ 324.720752][ T3094] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 324.952917][ T291] EXT4-fs (loop0): unmounting filesystem. [ 325.132899][ T3106] loop0: detected capacity change from 0 to 128 [ 325.182987][ T3106] xt_CONNSECMARK: invalid mode: 0 [ 325.314149][ T297] EXT4-fs (loop4): unmounting filesystem. [ 326.429862][ T3111] loop1: detected capacity change from 0 to 512 [ 326.438267][ T3111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.621478][ T3111] EXT4-fs (loop1): orphan cleanup on readonly fs [ 326.629026][ T3111] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 326.638404][ T3111] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 326.647616][ T3111] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.611: Failed to acquire dquot type 1 [ 326.661641][ T3111] EXT4-fs (loop1): 1 truncate cleaned up [ 326.669357][ T3111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 327.480264][ T3113] loop2: detected capacity change from 0 to 40427 [ 327.495849][ T3113] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 327.503605][ T3113] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 327.513283][ T3113] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 327.519907][ T3113] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 327.527909][ T355] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 327.528194][ T292] EXT4-fs (loop1): unmounting filesystem. [ 327.615479][ T3130] loop4: detected capacity change from 0 to 512 [ 327.631565][ T3130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.758986][ T3130] EXT4-fs (loop4): orphan cleanup on readonly fs [ 327.768230][ T3130] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 327.777643][ T3130] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 327.787033][ T3130] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.617: Failed to acquire dquot type 1 [ 327.802136][ T3130] EXT4-fs (loop4): 1 truncate cleaned up [ 327.813436][ T3130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 328.103625][ T355] usb 1-1: Using ep0 maxpacket: 16 [ 328.112158][ T355] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.174742][ T3132] loop3: detected capacity change from 0 to 256 [ 328.833205][ T3136] loop1: detected capacity change from 0 to 512 [ 328.859865][ T355] usb 1-1: config 0 has no interface number 0 [ 328.865779][ T355] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.876798][ T355] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.886526][ T355] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 328.895371][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.904472][ T355] usb 1-1: config 0 descriptor?? [ 328.934279][ T297] EXT4-fs (loop4): unmounting filesystem. [ 328.959234][ T3136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.974435][ T3132] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 328.997340][ T3136] EXT4-fs (loop1): orphan cleanup on readonly fs [ 329.003961][ T3136] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 329.013235][ T3136] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 329.022389][ T3136] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.618: Failed to acquire dquot type 1 [ 329.034173][ T3136] EXT4-fs (loop1): 1 truncate cleaned up [ 329.285896][ T3141] fuse: Unknown parameter '0xffffffffffffffff' [ 329.297927][ T3141] loop0: detected capacity change from 0 to 128 [ 329.646319][ T3136] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 329.690623][ T355] usbhid 1-1:0.1: can't add hid device: -71 [ 329.700680][ T355] usbhid: probe of 1-1:0.1 failed with error -71 [ 329.721737][ T355] usb 1-1: USB disconnect, device number 3 [ 329.843338][ T292] EXT4-fs (loop1): unmounting filesystem. [ 329.908266][ T3144] loop4: detected capacity change from 0 to 40427 [ 329.915086][ T3144] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 329.925126][ T3144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 329.982451][ T3149] loop1: detected capacity change from 0 to 1024 [ 330.215340][ T3144] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 330.228137][ T3149] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 330.292438][ T3149] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.621: Allocating blocks 497-513 which overlap fs metadata [ 330.311817][ T3149] EXT4-fs (loop1): pa ffff88811799db28: logic 256, phys. 385, len 8 [ 330.319749][ T3149] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 330.406365][ T3144] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 330.455238][ T3157] loop2: detected capacity change from 0 to 16 [ 330.607674][ T3157] erofs: (device loop2): mounted with root inode @ nid 36. [ 330.846309][ T3160] loop0: detected capacity change from 0 to 512 [ 330.860957][ T3160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.880620][ T3160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 330.887319][ T3160] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 330.896573][ T3160] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 330.905777][ T3160] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.623: Failed to acquire dquot type 1 [ 330.917581][ T3160] EXT4-fs (loop0): 1 truncate cleaned up [ 330.923135][ T3160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.154012][ T292] EXT4-fs (loop1): unmounting filesystem. [ 331.626652][ T291] EXT4-fs (loop0): unmounting filesystem. [ 332.186540][ T3173] loop0: detected capacity change from 0 to 40427 [ 332.212744][ T3173] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 332.220305][ T3173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 332.230495][ T3173] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 332.237303][ T3173] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 334.591008][ T3200] loop3: detected capacity change from 0 to 512 [ 334.638481][ T3200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.678530][ T3200] EXT4-fs (loop3): orphan cleanup on readonly fs [ 334.779997][ T3200] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 334.789373][ T3200] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 334.798544][ T3200] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.631: Failed to acquire dquot type 1 [ 334.810561][ T3200] EXT4-fs (loop3): 1 truncate cleaned up [ 334.816131][ T3200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.032717][ T3206] loop2: detected capacity change from 0 to 256 [ 335.041689][ T3206] exfat: Deprecated parameter 'utf8' [ 339.367628][ T3206] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x089a7d90, utbl_chksum : 0xe619d30d) [ 339.516122][ T293] EXT4-fs (loop3): unmounting filesystem. [ 340.825633][ T3218] loop0: detected capacity change from 0 to 1024 [ 340.935108][ T3221] loop4: detected capacity change from 0 to 256 [ 340.942605][ T3221] exfat: Deprecated parameter 'utf8' [ 340.947891][ T3221] exfat: Deprecated parameter 'namecase' [ 340.953399][ T3221] exfat: Deprecated parameter 'utf8' [ 340.959177][ T3221] exfat: Bad value for 'uid' [ 341.119749][ T3221] loop4: detected capacity change from 0 to 512 [ 341.225354][ T3221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 341.497157][ T1552] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.689414][ T3218] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 344.716424][ T3221] EXT4-fs: failed to create workqueue [ 344.721660][ T3221] EXT4-fs (loop4): mount failed [ 344.834288][ T3232] loop2: detected capacity change from 0 to 512 [ 344.844886][ T3232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.863999][ T3232] EXT4-fs (loop2): orphan cleanup on readonly fs [ 344.870718][ T3232] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 344.880063][ T3232] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 344.889271][ T3232] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.637: Failed to acquire dquot type 1 [ 344.902055][ T3232] EXT4-fs (loop2): 1 truncate cleaned up [ 344.908258][ T3232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 345.025330][ T376] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.173328][ T3229] loop3: detected capacity change from 0 to 40427 [ 345.186256][ T3229] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 345.191712][ T3239] loop4: detected capacity change from 0 to 512 [ 345.197308][ T3231] loop1: detected capacity change from 0 to 40427 [ 345.205990][ T3229] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 345.215279][ T3231] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 345.222704][ T3231] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 345.238509][ T3229] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 345.249611][ T3239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.258612][ T3229] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 345.258784][ T3231] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4 [ 345.293703][ T3239] EXT4-fs (loop4): orphan cleanup on readonly fs [ 345.313045][ T3231] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 345.333523][ T3239] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.641: bg 0: block 248: padding at end of block bitmap is not set [ 345.356422][ T3239] Quota error (device loop4): write_blk: dquota write failed [ 345.367387][ T3239] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 345.406844][ T3239] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.641: Failed to acquire dquot type 1 [ 345.438381][ T3239] EXT4-fs (loop4): 1 truncate cleaned up [ 345.455001][ T3239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 346.132454][ T294] EXT4-fs (loop2): unmounting filesystem. [ 346.726536][ T3265] loop1: detected capacity change from 0 to 512 [ 346.744658][ T3265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.247303][ T3265] EXT4-fs (loop1): orphan cleanup on readonly fs [ 347.254042][ T3265] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 347.263326][ T3265] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 347.272508][ T3265] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.646: Failed to acquire dquot type 1 [ 347.284388][ T3265] EXT4-fs (loop1): 1 truncate cleaned up [ 347.862752][ T3276] loop3: detected capacity change from 0 to 256 [ 347.869790][ T3276] exfat: Deprecated parameter 'utf8' [ 348.864998][ T3265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 348.980032][ T3276] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x089a7d90, utbl_chksum : 0xe619d30d) [ 349.603375][ T292] EXT4-fs (loop1): unmounting filesystem. [ 349.818381][ T3292] loop2: detected capacity change from 0 to 512 [ 350.159718][ T3295] netlink: 72 bytes leftover after parsing attributes in process `syz.0.652'. [ 350.217338][ T3292] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 350.232733][ T3292] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 350.251294][ T3292] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.654: Failed to acquire dquot type 0 [ 350.282798][ T3292] EXT4-fs (loop2): Remounting filesystem read-only [ 350.289632][ T3292] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 350.299950][ T3292] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 350.309350][ T3292] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.654: Failed to acquire dquot type 0 [ 350.326203][ T3292] EXT4-fs (loop2): Remounting filesystem read-only [ 350.340035][ T3292] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 350.350798][ T3292] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 350.362224][ T3292] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.654: Failed to acquire dquot type 0 [ 350.374136][ T3284] loop0: detected capacity change from 0 to 32768 [ 350.380783][ T3292] EXT4-fs (loop2): Remounting filesystem read-only [ 350.395228][ T3292] EXT4-fs (loop2): 1 orphan inode deleted [ 350.401065][ T3292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 350.401349][ T297] EXT4-fs (loop4): unmounting filesystem. [ 350.409914][ T3292] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.416090][ T3284] loop0: p1 p2 p3 < p5 p6 p7 > [ 350.431413][ T3292] tc_dump_action: action bad kind [ 350.442001][ T3303] loop3: detected capacity change from 0 to 512 [ 350.449920][ T3303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.464064][ T3303] EXT4-fs (loop3): orphan cleanup on readonly fs [ 350.470791][ T3303] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 350.480133][ T3303] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 350.489428][ T3303] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.655: Failed to acquire dquot type 1 [ 350.490146][ T294] EXT4-fs (loop2): unmounting filesystem. [ 350.501581][ T3303] EXT4-fs (loop3): 1 truncate cleaned up [ 350.512575][ T3303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.741057][ T3306] loop4: detected capacity change from 0 to 40427 [ 350.748039][ T3306] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 350.762044][ T3306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 350.798352][ T3306] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 350.805910][ T3306] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 350.841455][ T3309] loop1: detected capacity change from 0 to 32768 [ 350.858604][ T3318] netlink: 72 bytes leftover after parsing attributes in process `syz.1.658'. [ 350.873787][ T3309] loop1: p1 p2 p3 < p5 p6 p7 > [ 351.025973][ T3321] loop0: detected capacity change from 0 to 512 [ 351.111889][ T3321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.201860][ T3321] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.253461][ T3321] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 351.263137][ T3321] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 351.272488][ T3321] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.659: Failed to acquire dquot type 1 [ 351.286802][ T3321] EXT4-fs (loop0): 1 truncate cleaned up [ 351.292529][ T3321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.664658][ T293] EXT4-fs (loop3): unmounting filesystem. [ 352.184318][ T291] EXT4-fs (loop0): unmounting filesystem. [ 352.655770][ T3334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.662'. [ 353.522453][ T3335] loop0: detected capacity change from 0 to 512 [ 353.614416][ T3335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.634077][ T3325] loop3: detected capacity change from 0 to 40427 [ 353.653835][ T3335] EXT4-fs (loop0): orphan cleanup on readonly fs [ 353.660493][ T3335] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.661: Failed to acquire dquot type 1 [ 353.672164][ T3335] EXT4-fs (loop0): 1 truncate cleaned up [ 353.727921][ T3335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.760114][ T3342] loop2: detected capacity change from 0 to 512 [ 353.768511][ T3342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.792405][ T3325] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 353.802833][ T3345] loop4: detected capacity change from 0 to 512 [ 353.809568][ T3342] EXT4-fs (loop2): orphan cleanup on readonly fs [ 353.817174][ T3342] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.664: Failed to acquire dquot type 1 [ 353.828646][ T3342] EXT4-fs (loop2): 1 truncate cleaned up [ 353.848447][ T3325] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 353.871051][ T3345] EXT4-fs: Ignoring removed oldalloc option [ 353.891027][ T3345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 353.907561][ T3325] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 353.924235][ T3325] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 354.094225][ T3342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 354.124742][ T291] EXT4-fs (loop0): unmounting filesystem. [ 354.215053][ T3357] loop1: detected capacity change from 0 to 1024 [ 356.211628][ T294] EXT4-fs (loop2): unmounting filesystem. [ 356.463414][ T3371] loop3: detected capacity change from 0 to 512 [ 356.471448][ T3371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.503605][ T3357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 356.570168][ T3357] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.666: Allocating blocks 497-513 which overlap fs metadata [ 356.585705][ T3357] EXT4-fs (loop1): pa ffff88811799dd20: logic 256, phys. 385, len 8 [ 356.593678][ T3357] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 356.669883][ T3371] EXT4-fs (loop3): orphan cleanup on readonly fs [ 356.677978][ T3371] __quota_error: 4 callbacks suppressed [ 356.678003][ T3371] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 356.692726][ T3371] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 356.701952][ T3371] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.670: Failed to acquire dquot type 1 [ 356.796825][ T3371] EXT4-fs (loop3): 1 truncate cleaned up [ 356.802396][ T3371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 357.056754][ T297] EXT4-fs (loop4): unmounting filesystem. [ 357.093827][ T292] EXT4-fs (loop1): unmounting filesystem. [ 357.364433][ T3381] loop2: detected capacity change from 0 to 1024 [ 357.389262][ T293] EXT4-fs (loop3): unmounting filesystem. [ 357.536909][ T3381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 357.616319][ T3384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 358.752368][ T3384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 358.932383][ T294] EXT4-fs (loop2): unmounting filesystem. [ 359.056276][ T369] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 359.167902][ T3379] loop4: detected capacity change from 0 to 40427 [ 359.188212][ T3402] netlink: 72 bytes leftover after parsing attributes in process `syz.1.675'. [ 359.199195][ T3379] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 359.212325][ T3379] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 359.246231][ T369] usb 4-1: Using ep0 maxpacket: 16 [ 359.253074][ T369] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.310992][ T3399] loop2: detected capacity change from 0 to 40427 [ 359.395273][ T3399] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 359.407383][ T369] usb 4-1: config 0 has no interface number 0 [ 359.448285][ T3379] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 359.452834][ T3399] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 359.462673][ T369] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.479687][ T369] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 359.491001][ T3379] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 359.497265][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.511045][ T369] usb 4-1: config 0 descriptor?? [ 359.516527][ T3399] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 359.523674][ T369] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 359.531695][ T3399] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 359.542112][ T3397] loop1: detected capacity change from 0 to 32768 [ 359.586884][ T3397] loop1: p1 p2 p3 < p5 p6 p7 > [ 359.753700][ T3418] loop4: detected capacity change from 0 to 512 [ 359.761544][ T3418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.775394][ T3418] EXT4-fs (loop4): orphan cleanup on readonly fs [ 359.782047][ T3418] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 359.791725][ T3418] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 359.800920][ T3418] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.678: Failed to acquire dquot type 1 [ 359.812369][ T3418] EXT4-fs (loop4): 1 truncate cleaned up [ 359.819893][ T3418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 359.874084][ T3423] loop1: detected capacity change from 0 to 1024 [ 359.887576][ T3423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 359.907181][ T3423] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.680: Allocating blocks 497-513 which overlap fs metadata [ 359.921276][ T3423] EXT4-fs (loop1): pa ffff88811148e3f0: logic 256, phys. 385, len 8 [ 359.929386][ T3423] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 360.104481][ T3435] loop0: detected capacity change from 0 to 512 [ 360.111233][ T3435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 360.120470][ T3435] EXT4-fs (loop0): orphan cleanup on readonly fs [ 360.127149][ T3435] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 360.136808][ T3435] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 360.145977][ T3435] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.683: Failed to acquire dquot type 1 [ 360.157608][ T3435] EXT4-fs (loop0): 1 truncate cleaned up [ 360.163241][ T3435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 360.528758][ T297] EXT4-fs (loop4): unmounting filesystem. [ 360.549076][ T3438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 360.652575][ T292] EXT4-fs (loop1): unmounting filesystem. [ 361.808828][ T3448] loop2: detected capacity change from 0 to 256 [ 361.815320][ T3448] exfat: Deprecated parameter 'utf8' [ 362.059732][ T3448] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x089a7d90, utbl_chksum : 0xe619d30d) [ 362.167615][ T291] EXT4-fs (loop0): unmounting filesystem. [ 362.702998][ T1779] usb 4-1: USB disconnect, device number 3 [ 362.754675][ T3455] loop3: detected capacity change from 0 to 256 [ 362.761077][ T3455] exfat: Deprecated parameter 'utf8' [ 362.766227][ T3455] exfat: Deprecated parameter 'utf8' [ 362.771308][ T3455] exfat: Deprecated parameter 'namecase' [ 362.779296][ T3455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 364.294544][ T3471] loop0: detected capacity change from 0 to 512 [ 364.302405][ T3471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.385212][ T3452] loop1: detected capacity change from 0 to 40427 [ 364.406971][ T3471] EXT4-fs (loop0): orphan cleanup on readonly fs [ 364.611206][ T3476] loop3: detected capacity change from 0 to 512 [ 364.622178][ T3477] loop2: detected capacity change from 0 to 1024 [ 364.630601][ T3452] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 364.640659][ T3476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.652232][ T3471] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 364.661566][ T3471] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 364.670798][ T3471] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.693: Failed to acquire dquot type 1 [ 364.685988][ T3471] EXT4-fs (loop0): 1 truncate cleaned up [ 364.692239][ T3471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 364.912395][ T3452] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 364.950801][ T3476] EXT4-fs (loop3): orphan cleanup on readonly fs [ 364.958884][ T3476] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 364.968300][ T3476] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 364.977560][ T3476] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.695: Failed to acquire dquot type 1 [ 365.030931][ T291] EXT4-fs (loop0): unmounting filesystem. [ 365.085176][ T3476] EXT4-fs (loop3): 1 truncate cleaned up [ 365.090914][ T3476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 365.302373][ T3477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 365.364076][ T3477] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.694: Allocating blocks 497-513 which overlap fs metadata [ 365.422603][ T3477] EXT4-fs (loop2): pa ffff88811148e9d8: logic 256, phys. 385, len 8 [ 365.430511][ T3477] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 365.554239][ T293] EXT4-fs (loop3): unmounting filesystem. [ 365.582303][ T3453] loop4: detected capacity change from 0 to 40427 [ 365.606022][ T3453] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 365.613747][ T3453] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 365.622904][ T3452] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4 [ 365.629516][ T3452] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 365.640973][ T3453] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 365.651342][ T3453] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 365.660547][ T294] EXT4-fs (loop2): unmounting filesystem. [ 365.828442][ T3499] loop3: detected capacity change from 0 to 512 [ 365.839047][ T3499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.918149][ T3499] EXT4-fs (loop3): orphan cleanup on readonly fs [ 365.926035][ T3499] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 365.935391][ T3499] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 365.944719][ T3499] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.699: Failed to acquire dquot type 1 [ 365.959644][ T3499] EXT4-fs (loop3): 1 truncate cleaned up [ 365.965570][ T3499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 366.975334][ T3505] loop0: detected capacity change from 0 to 512 [ 367.157477][ T3505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.175195][ T293] EXT4-fs (loop3): unmounting filesystem. [ 367.221714][ T3505] EXT4-fs (loop0): orphan cleanup on readonly fs [ 367.229640][ T3505] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 367.238988][ T3505] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 367.248244][ T3505] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.701: Failed to acquire dquot type 1 [ 367.261679][ T3505] EXT4-fs (loop0): 1 truncate cleaned up [ 367.267553][ T3505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 367.692635][ T3497] loop2: detected capacity change from 0 to 40427 [ 367.757780][ T3497] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 367.769210][ T3497] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 367.785301][ T3497] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 367.799642][ T3497] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 368.440556][ T3518] loop1: detected capacity change from 0 to 512 [ 368.449835][ T3519] loop4: detected capacity change from 0 to 512 [ 368.575531][ T3518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.584574][ T3519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.607813][ T291] EXT4-fs (loop0): unmounting filesystem. [ 368.661571][ T3519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 368.669459][ T3519] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 368.678841][ T3519] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 368.688064][ T3519] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.700: Failed to acquire dquot type 1 [ 368.701383][ T3519] EXT4-fs (loop4): 1 truncate cleaned up [ 368.707924][ T3519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 368.760506][ T3518] EXT4-fs (loop1): orphan cleanup on readonly fs [ 368.769309][ T3518] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.702: Failed to acquire dquot type 1 [ 368.782494][ T3518] EXT4-fs (loop1): 1 truncate cleaned up [ 368.789266][ T3518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 369.041585][ T3525] loop0: detected capacity change from 0 to 512 [ 370.128687][ T3531] loop2: detected capacity change from 0 to 512 [ 370.177313][ T3531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.187980][ T3531] EXT4-fs (loop2): orphan cleanup on readonly fs [ 370.194971][ T3531] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.705: bg 0: block 248: padding at end of block bitmap is not set [ 370.211431][ T3531] __quota_error: 2 callbacks suppressed [ 370.211446][ T3531] Quota error (device loop2): write_blk: dquota write failed [ 370.224054][ T3531] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 370.233889][ T3531] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.705: Failed to acquire dquot type 1 [ 370.245934][ T3531] EXT4-fs (loop2): 1 truncate cleaned up [ 370.254367][ T3531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 370.273886][ T292] EXT4-fs (loop1): unmounting filesystem. [ 370.281770][ T297] EXT4-fs (loop4): unmounting filesystem. [ 370.282619][ T3525] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 370.404381][ T3525] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 370.831221][ T3542] loop1: detected capacity change from 0 to 512 [ 370.846870][ T294] EXT4-fs (loop2): unmounting filesystem. [ 370.909237][ T3542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.946256][ T3542] EXT4-fs (loop1): orphan cleanup on readonly fs [ 370.953026][ T3542] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 370.962616][ T3542] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 370.971886][ T3542] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.706: Failed to acquire dquot type 1 [ 370.984831][ T3542] EXT4-fs (loop1): 1 truncate cleaned up [ 371.026959][ T3525] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.704: Failed to acquire dquot type 0 [ 371.033022][ T3542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 371.071685][ T3525] EXT4-fs (loop0): Remounting filesystem read-only [ 371.079150][ T3525] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 371.089615][ T3525] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 371.099107][ T3525] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.704: Failed to acquire dquot type 0 [ 371.113209][ T3525] EXT4-fs (loop0): Remounting filesystem read-only [ 371.124895][ T3525] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 371.135933][ T3525] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 371.145266][ T3525] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.704: Failed to acquire dquot type 0 [ 371.156919][ T3525] EXT4-fs (loop0): Remounting filesystem read-only [ 371.165730][ T3547] loop2: detected capacity change from 0 to 512 [ 371.172382][ T3525] EXT4-fs (loop0): 1 orphan inode deleted [ 371.181267][ T3547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.204052][ T3525] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 371.204717][ T292] EXT4-fs (loop1): unmounting filesystem. [ 371.213031][ T3525] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.221367][ T3550] loop3: detected capacity change from 0 to 16 [ 371.229090][ T3547] EXT4-fs (loop2): orphan cleanup on readonly fs [ 371.242223][ T3547] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.708: Failed to acquire dquot type 1 [ 371.255236][ T3547] EXT4-fs (loop2): 1 truncate cleaned up [ 371.260816][ T3550] erofs: (device loop3): mounted with root inode @ nid 36. [ 371.260875][ T3547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 371.285315][ T3525] tc_dump_action: action bad kind [ 371.332392][ T291] EXT4-fs (loop0): unmounting filesystem. [ 371.560192][ T3552] loop1: detected capacity change from 0 to 40427 [ 371.666532][ T3552] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 371.675440][ T3552] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 371.685459][ T3552] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4 [ 371.692227][ T3552] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 371.710790][ T3559] loop4: detected capacity change from 0 to 40427 [ 371.717635][ T3559] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 371.725068][ T3559] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 371.761614][ T3559] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 371.771991][ T3559] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 371.879277][ T294] EXT4-fs (loop2): unmounting filesystem. [ 372.278728][ T3584] loop2: detected capacity change from 0 to 256 [ 372.285155][ T3584] exfat: Deprecated parameter 'utf8' [ 373.290485][ T3585] loop1: detected capacity change from 0 to 512 [ 373.323431][ T3584] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x089a7d90, utbl_chksum : 0xe619d30d) [ 373.387647][ T3585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 373.506468][ T3585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 373.515059][ T3585] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.716: Failed to acquire dquot type 1 [ 373.529373][ T3585] EXT4-fs (loop1): 1 truncate cleaned up [ 374.129276][ T3585] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 374.302864][ T292] EXT4-fs (loop1): unmounting filesystem. [ 374.397181][ T3602] loop0: detected capacity change from 0 to 1024 [ 375.951222][ T3609] loop3: detected capacity change from 0 to 512 [ 376.284296][ T3609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.323977][ T3602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 376.333054][ T3609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 377.354566][ T3614] loop1: detected capacity change from 0 to 512 [ 377.362136][ T3614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.372087][ T3609] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.723: bg 0: block 248: padding at end of block bitmap is not set [ 377.387412][ T3609] __quota_error: 4 callbacks suppressed [ 377.387427][ T3609] Quota error (device loop3): write_blk: dquota write failed [ 377.400166][ T3609] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 377.409951][ T3609] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.723: Failed to acquire dquot type 1 [ 377.423142][ T3609] EXT4-fs (loop3): 1 truncate cleaned up [ 377.433399][ T3609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.450997][ T291] EXT4-fs (loop0): unmounting filesystem. [ 377.467109][ T3614] EXT4-fs (loop1): orphan cleanup on readonly fs [ 377.474515][ T3614] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 377.483833][ T3614] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 377.493090][ T3614] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.722: Failed to acquire dquot type 1 [ 377.505782][ T3614] EXT4-fs (loop1): 1 truncate cleaned up [ 377.511435][ T3614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 377.685218][ T3623] loop2: detected capacity change from 0 to 512 [ 377.692626][ T3623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.716905][ T3623] EXT4-fs (loop2): orphan cleanup on readonly fs [ 377.723571][ T3623] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 377.732831][ T3623] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 377.742010][ T3623] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.725: Failed to acquire dquot type 1 [ 377.753945][ T3623] EXT4-fs (loop2): 1 truncate cleaned up [ 377.759533][ T3623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 377.981164][ T292] EXT4-fs (loop1): unmounting filesystem. [ 377.988524][ T293] EXT4-fs (loop3): unmounting filesystem. [ 378.039879][ T3630] loop1: detected capacity change from 0 to 16 [ 378.060612][ T3630] erofs: (device loop1): mounted with root inode @ nid 36. [ 378.133784][ T3622] loop0: detected capacity change from 0 to 40427 [ 378.236656][ T3632] loop3: detected capacity change from 0 to 512 [ 378.245517][ T3632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.267391][ T3622] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 378.351917][ T3632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 378.394081][ T3632] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 378.406756][ T3632] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 378.416904][ T3632] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.729: Failed to acquire dquot type 1 [ 378.446505][ T3632] EXT4-fs (loop3): 1 truncate cleaned up [ 379.206004][ T3632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.706937][ T3622] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 379.707172][ T294] EXT4-fs (loop2): unmounting filesystem. [ 379.792284][ T3626] loop4: detected capacity change from 0 to 40427 [ 379.794683][ T3622] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 379.810991][ T3622] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 379.815090][ T3626] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 379.839321][ T3626] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 380.142329][ T3645] loop2: detected capacity change from 0 to 512 [ 380.150317][ T3645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.167001][ T293] EXT4-fs (loop3): unmounting filesystem. [ 380.178358][ T3645] EXT4-fs (loop2): orphan cleanup on readonly fs [ 380.187616][ T3645] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 380.197031][ T3645] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 380.206295][ T3645] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.730: Failed to acquire dquot type 1 [ 380.220888][ T3645] EXT4-fs (loop2): 1 truncate cleaned up [ 380.226860][ T3645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 380.321957][ T3626] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 380.329657][ T3626] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 381.157848][ T294] EXT4-fs (loop2): unmounting filesystem. [ 381.184725][ T3656] loop4: detected capacity change from 0 to 1024 [ 381.233374][ T3661] loop1: detected capacity change from 0 to 512 [ 381.238214][ T3656] EXT4-fs: Ignoring removed nobh option [ 381.245163][ T3661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.260054][ T3656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 381.272231][ T3661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 381.279263][ T3661] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.733: Failed to acquire dquot type 1 [ 381.290823][ T3661] EXT4-fs (loop1): 1 truncate cleaned up [ 381.303489][ T3661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 381.366328][ T3655] loop0: detected capacity change from 0 to 40427 [ 381.374334][ T3656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 381.384489][ T3655] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 381.394773][ T3655] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 381.528109][ T3675] loop2: detected capacity change from 0 to 512 [ 381.548729][ T3675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.557411][ T3655] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 381.572502][ T3655] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 381.667067][ T3675] EXT4-fs (loop2): orphan cleanup on readonly fs [ 381.673886][ T3675] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.737: Failed to acquire dquot type 1 [ 381.687727][ T3675] EXT4-fs (loop2): 1 truncate cleaned up [ 381.782323][ T3678] overlayfs: './file2' not a directory [ 382.063673][ T3675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 382.102452][ T292] EXT4-fs (loop1): unmounting filesystem. [ 382.428626][ T294] EXT4-fs (loop2): unmounting filesystem. [ 383.908975][ T3691] loop3: detected capacity change from 0 to 1024 [ 384.318024][ T3692] loop2: detected capacity change from 0 to 1024 [ 384.325124][ T3668] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 456: padding at end of block bitmap is not set [ 384.393671][ T3691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 384.420729][ T3690] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.740: Allocating blocks 497-513 which overlap fs metadata [ 384.434950][ T3690] EXT4-fs (loop3): pa ffff88811148e738: logic 256, phys. 385, len 8 [ 384.442773][ T3690] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 384.460923][ T3692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 384.490341][ T3692] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.739: Allocating blocks 497-513 which overlap fs metadata [ 384.504782][ T3692] EXT4-fs (loop2): pa ffff88811148ee70: logic 256, phys. 385, len 8 [ 384.512637][ T3692] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 385.521919][ T3700] loop0: detected capacity change from 0 to 512 [ 385.534436][ T3700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.547717][ T293] EXT4-fs (loop3): unmounting filesystem. [ 385.569797][ T3700] EXT4-fs (loop0): orphan cleanup on readonly fs [ 385.572167][ T294] EXT4-fs (loop2): unmounting filesystem. [ 385.582169][ T3700] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.741: bg 0: block 248: padding at end of block bitmap is not set [ 385.596995][ T3700] __quota_error: 4 callbacks suppressed [ 385.597009][ T3700] Quota error (device loop0): write_blk: dquota write failed [ 385.607888][ T3706] loop1: detected capacity change from 0 to 16 [ 385.609675][ T3700] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 385.625551][ T3700] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.741: Failed to acquire dquot type 1 [ 385.637142][ T3700] EXT4-fs (loop0): 1 truncate cleaned up [ 385.642785][ T3700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 385.658191][ T3706] erofs: (device loop1): mounted with root inode @ nid 36. [ 385.883229][ T3707] loop3: detected capacity change from 0 to 40427 [ 385.918236][ T291] EXT4-fs (loop0): unmounting filesystem. [ 385.934190][ T3707] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 385.951887][ T3707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 385.962538][ T297] EXT4-fs (loop4): unmounting filesystem. [ 385.999978][ T3707] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 386.028438][ T3707] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 386.058027][ T3709] loop2: detected capacity change from 0 to 40427 [ 386.088142][ T3709] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 386.096452][ T3709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 386.106095][ T3709] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 386.112758][ T3709] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 386.262004][ T3724] loop0: detected capacity change from 0 to 256 [ 386.269047][ T3724] exfat: Deprecated parameter 'utf8' [ 386.285374][ T3724] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x089a7d90, utbl_chksum : 0xe619d30d) [ 387.738581][ T3736] loop1: detected capacity change from 0 to 512 [ 387.800214][ T3736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.896194][ T3736] EXT4-fs (loop1): orphan cleanup on readonly fs [ 387.902839][ T3736] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 387.912089][ T3736] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 387.921313][ T3736] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.749: Failed to acquire dquot type 1 [ 387.933005][ T3736] EXT4-fs (loop1): 1 truncate cleaned up [ 387.940249][ T3728] loop4: detected capacity change from 0 to 40427 [ 388.016474][ T3728] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 388.039792][ T3728] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 388.120023][ T3728] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 388.128229][ T3728] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 388.260480][ T3748] netlink: 72 bytes leftover after parsing attributes in process `syz.3.750'. [ 388.316936][ T3736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 388.485698][ T292] EXT4-fs (loop1): unmounting filesystem. [ 388.497741][ T3754] loop2: detected capacity change from 0 to 256 [ 388.504000][ T3754] exfat: Deprecated parameter 'utf8' [ 388.509333][ T3754] exfat: Deprecated parameter 'utf8' [ 388.514343][ T3754] exfat: Deprecated parameter 'namecase' [ 388.521956][ T3754] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 388.619621][ T3762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.751'. [ 388.681046][ T3741] loop3: detected capacity change from 0 to 32768 [ 388.908929][ T3741] loop3: p1 p2 p3 < p5 p6 p7 > [ 389.914698][ T3770] loop1: detected capacity change from 0 to 1024 [ 390.098008][ T3770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.162028][ T3770] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.754: Allocating blocks 497-513 which overlap fs metadata [ 390.178501][ T3770] EXT4-fs (loop1): pa ffff88813278c2a0: logic 256, phys. 385, len 8 [ 390.186347][ T3770] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 391.355646][ T292] EXT4-fs (loop1): unmounting filesystem. [ 392.124835][ T3788] loop2: detected capacity change from 0 to 16 [ 392.193667][ T3788] erofs: (device loop2): mounted with root inode @ nid 36. [ 392.210222][ T3792] 9pnet_fd: Insufficient options for proto=fd [ 393.220918][ T3806] loop1: detected capacity change from 0 to 512 [ 393.241148][ T3806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.306712][ T3808] loop0: detected capacity change from 0 to 256 [ 393.312938][ T3808] exfat: Deprecated parameter 'utf8' [ 394.363901][ T3808] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x089a7d90, utbl_chksum : 0xe619d30d) [ 394.389064][ T3806] EXT4-fs (loop1): orphan cleanup on readonly fs [ 394.450579][ T3806] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 394.459833][ T3806] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 394.469101][ T3806] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.763: Failed to acquire dquot type 1 [ 394.481690][ T3806] EXT4-fs (loop1): 1 truncate cleaned up [ 394.500820][ T3806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 394.770199][ T292] EXT4-fs (loop1): unmounting filesystem. [ 394.861879][ T3797] loop4: detected capacity change from 0 to 40427 [ 394.916763][ T3797] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 394.924158][ T3797] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 394.999249][ T3797] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 395.015859][ T3797] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 395.298500][ T3829] loop1: detected capacity change from 0 to 1024 [ 396.054995][ T3829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.118339][ T3829] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.768: Allocating blocks 497-513 which overlap fs metadata [ 396.133732][ T3829] EXT4-fs (loop1): pa ffff88813278c000: logic 256, phys. 385, len 8 [ 396.141635][ T3829] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 396.503976][ T3814] loop0: detected capacity change from 0 to 40427 [ 396.571057][ T3814] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 396.588647][ T3814] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 396.629512][ T3814] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 396.635990][ T3814] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 396.687826][ T292] EXT4-fs (loop1): unmounting filesystem. [ 396.693681][ T3840] 9pnet_fd: Insufficient options for proto=fd [ 396.882504][ T3835] loop3: detected capacity change from 0 to 40427 [ 397.290532][ T3835] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 397.346869][ T3835] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 397.665967][ T3835] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 397.848216][ T3835] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 398.001103][ T3857] loop4: detected capacity change from 0 to 16 [ 398.019255][ T3857] erofs: (device loop4): mounted with root inode @ nid 36. [ 400.140193][ T3876] loop4: detected capacity change from 0 to 512 [ 400.150002][ T3877] loop1: detected capacity change from 0 to 512 [ 400.185166][ T3877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.193870][ T3876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.300653][ T3876] EXT4-fs (loop4): orphan cleanup on readonly fs [ 400.308735][ T3876] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 400.318220][ T3876] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 400.327462][ T3876] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.778: Failed to acquire dquot type 1 [ 400.341117][ T3876] EXT4-fs (loop4): 1 truncate cleaned up [ 400.347040][ T3876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 400.500572][ T3877] EXT4-fs (loop1): orphan cleanup on readonly fs [ 400.508719][ T3877] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 400.518137][ T3877] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 400.527372][ T3877] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.777: Failed to acquire dquot type 1 [ 400.540467][ T3877] EXT4-fs (loop1): 1 truncate cleaned up [ 400.546451][ T3877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 401.027221][ T297] EXT4-fs (loop4): unmounting filesystem. [ 401.157501][ T292] EXT4-fs (loop1): unmounting filesystem. [ 401.332634][ T3892] loop1: detected capacity change from 0 to 1024 [ 401.415763][ T3892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 401.479909][ T3892] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.783: Allocating blocks 497-513 which overlap fs metadata [ 401.495573][ T3892] EXT4-fs (loop1): pa ffff88813278c498: logic 256, phys. 385, len 8 [ 401.503430][ T3892] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 402.323900][ T3883] loop2: detected capacity change from 0 to 40427 [ 402.351246][ T292] EXT4-fs (loop1): unmounting filesystem. [ 402.382277][ T3883] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 402.396457][ T3885] loop4: detected capacity change from 0 to 40427 [ 402.420501][ T3885] F2FS-fs (loop4): Invalid log_blocksize (0), supports only 12 [ 402.427964][ T3885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 402.437697][ T3885] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 4 [ 402.444176][ T3885] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 402.453216][ T3883] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 402.687385][ T3883] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 402.713794][ T3883] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 402.896714][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 405.219298][ T3924] loop1: detected capacity change from 0 to 16 [ 405.261172][ T3924] erofs: (device loop1): mounted with root inode @ nid 36. [ 405.280590][ T3931] 9pnet_fd: Insufficient options for proto=fd [ 405.390210][ T3938] loop3: detected capacity change from 0 to 512 [ 405.821248][ T3947] loop0: detected capacity change from 0 to 512 [ 405.858177][ T3938] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 405.868901][ T3938] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 405.872672][ T3947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 405.887159][ T3947] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.916809][ T3938] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.794: Failed to acquire dquot type 0 [ 405.928936][ T3938] EXT4-fs (loop3): Remounting filesystem read-only [ 405.935527][ T3938] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 405.946380][ T3938] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 405.948863][ T3929] loop2: detected capacity change from 0 to 40427 [ 405.962956][ T3938] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.794: Failed to acquire dquot type 0 [ 405.975404][ T3929] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 405.982989][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 405.983241][ T3929] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 405.998424][ T3938] EXT4-fs (loop3): Remounting filesystem read-only [ 406.000722][ T3929] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 406.013069][ T3929] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 406.013170][ T3938] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 406.032036][ T3938] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 406.041728][ T3938] EXT4-fs error (device loop3): ext4_acquire_dquot:6781: comm syz.3.794: Failed to acquire dquot type 0 [ 406.091346][ T3938] EXT4-fs (loop3): Remounting filesystem read-only [ 406.098873][ T3938] EXT4-fs (loop3): 1 orphan inode deleted [ 406.216318][ T3938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.229150][ T3938] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.239967][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 406.249299][ T19] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.056559][ T19] usb 5-1: config 0 has no interface number 0 [ 407.062330][ T291] EXT4-fs (loop0): unmounting filesystem. [ 407.062725][ T19] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.148138][ T3958] loop1: detected capacity change from 0 to 256 [ 407.155411][ T3958] exfat: Deprecated parameter 'utf8' [ 407.160670][ T3958] exfat: Deprecated parameter 'namecase' [ 407.166167][ T3958] exfat: Deprecated parameter 'utf8' [ 407.171459][ T3958] exfat: Bad value for 'uid' [ 407.241136][ T3958] loop1: detected capacity change from 0 to 512 [ 407.250253][ T3958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.363021][ T3958] EXT4-fs (loop1): 1 truncate cleaned up [ 407.368575][ T3958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 407.814067][ T19] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.824190][ T3938] tc_dump_action: action bad kind [ 407.829858][ T19] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 408.269579][ T3968] loop2: detected capacity change from 0 to 1024 [ 408.285590][ T3969] loop0: detected capacity change from 0 to 1024 [ 408.296322][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.332807][ T292] EXT4-fs (loop1): unmounting filesystem. [ 408.388762][ T19] usb 5-1: config 0 descriptor?? [ 408.438916][ T3968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 408.518983][ T3968] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.798: Allocating blocks 497-513 which overlap fs metadata [ 408.534172][ T3968] EXT4-fs (loop2): pa ffff88813278c5e8: logic 256, phys. 385, len 8 [ 408.541991][ T3968] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 408.796976][ T294] EXT4-fs (loop2): unmounting filesystem. [ 408.835989][ T19] usb 5-1: can't set config #0, error -71 [ 408.878563][ T3969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 408.939073][ T3969] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.797: Allocating blocks 497-513 which overlap fs metadata [ 408.954042][ T3969] EXT4-fs (loop0): pa ffff88811148ed20: logic 256, phys. 385, len 8 [ 408.961935][ T3969] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 409.043546][ T19] usb 5-1: USB disconnect, device number 3 [ 409.132848][ T293] EXT4-fs (loop3): unmounting filesystem. [ 409.233996][ T3980] incfs: Backing dir is not set, filesystem can't be mounted. [ 409.241392][ T3980] incfs: mount failed -2 [ 409.817644][ T291] EXT4-fs (loop0): unmounting filesystem. [ 410.250194][ T3983] loop2: detected capacity change from 0 to 40427 [ 410.257375][ T3983] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 410.265283][ T3983] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 410.274578][ T1151] Bluetooth: hci0: Frame reassembly failed (-84) [ 410.276704][ T3983] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 4 [ 410.287430][ T3983] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 410.403830][ T4001] loop0: detected capacity change from 0 to 16 [ 410.422401][ T4001] erofs: (device loop0): mounted with root inode @ nid 36. [ 412.471199][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 412.477707][ T1675] Bluetooth: hci0: command 0x1003 tx timeout [ 412.517108][ T3996] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 412.606698][ T4023] loop4: detected capacity change from 0 to 1024 [ 412.615336][ T4024] loop1: detected capacity change from 0 to 1024 [ 412.645173][ T4023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 412.645216][ T4024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 412.672977][ T4023] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.812: Allocating blocks 497-513 which overlap fs metadata [ 412.686933][ T4023] EXT4-fs (loop4): pa ffff88811148e3f0: logic 256, phys. 385, len 8 [ 412.694736][ T4023] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 412.697003][ T4024] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.809: Allocating blocks 497-513 which overlap fs metadata [ 412.719037][ T4024] EXT4-fs (loop1): pa ffff88810bdf92a0: logic 256, phys. 385, len 8 [ 412.726901][ T4024] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 412.811743][ T4013] loop0: detected capacity change from 0 to 40427 [ 412.835212][ T4013] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 412.842711][ T4013] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 412.853693][ T4013] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 412.860335][ T4013] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 413.465453][ T292] EXT4-fs (loop1): unmounting filesystem. [ 413.484016][ T4037] loop3: detected capacity change from 0 to 256 [ 413.490313][ T4037] exfat: Deprecated parameter 'utf8' [ 413.495446][ T4037] exfat: Deprecated parameter 'utf8' [ 413.500562][ T4037] exfat: Deprecated parameter 'namecase' [ 413.510194][ T297] EXT4-fs (loop4): unmounting filesystem. [ 413.521446][ T4037] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 413.746267][ T4048] loop0: detected capacity change from 0 to 1024 [ 413.754287][ T4046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.813'. [ 413.897886][ T4048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 414.177399][ T4050] loop1: detected capacity change from 0 to 512 [ 414.284225][ T4050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 414.553404][ T28] audit: type=1400 audit(1739856720.777:188): avc: denied { mounton } for pid=4056 comm="syz.4.817" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 414.576167][ C1] ================================================================== [ 414.584657][ C1] BUG: KASAN: use-after-free in __run_timers+0x34a/0xa10 [ 414.591508][ C1] Write of size 8 at addr ffff88811a6bca00 by task syz.0.816/4045 [ 414.599148][ C1] [ 414.601323][ C1] CPU: 1 PID: 4045 Comm: syz.0.816 Not tainted 6.1.124-syzkaller-00008-gccc915784332 #0 [ 414.610863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 414.620765][ C1] Call Trace: [ 414.623882][ C1] [ 414.626574][ C1] dump_stack_lvl+0x151/0x1b7 [ 414.631087][ C1] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 414.636387][ C1] ? _printk+0xd1/0x111 [ 414.640373][ C1] ? __virt_addr_valid+0x242/0x2f0 [ 414.645424][ C1] print_report+0x158/0x4e0 [ 414.649762][ C1] ? __virt_addr_valid+0x242/0x2f0 [ 414.654709][ C1] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 414.660787][ C1] ? __run_timers+0x34a/0xa10 [ 414.665315][ C1] kasan_report+0x13c/0x170 [ 414.669638][ C1] ? __run_timers+0x34a/0xa10 [ 414.674154][ C1] __asan_report_store8_noabort+0x17/0x20 [ 414.679707][ C1] __run_timers+0x34a/0xa10 [ 414.684046][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 414.689080][ C1] ? calc_index+0x270/0x270 [ 414.693421][ C1] ? sched_clock+0x9/0x10 [ 414.697588][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 414.702273][ C1] run_timer_softirq+0x69/0xf0 [ 414.706878][ C1] handle_softirqs+0x1db/0x650 [ 414.711476][ C1] __irq_exit_rcu+0x52/0xf0 [ 414.715812][ C1] irq_exit_rcu+0x9/0x10 [ 414.719895][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 414.725359][ C1] [ 414.728138][ C1] [ 414.730914][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 414.736747][ C1] RIP: 0010:__unix_dgram_recvmsg+0x65e/0x12b0 [ 414.742633][ C1] Code: 18 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 96 2d 49 fd 41 bc 60 03 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 80 3c 18 00 <74> 08 4c 89 e7 e8 78 2d 49 fd 4d 8b 34 24 4d 85 f6 0f 84 bc 00 00 [ 414.762507][ C1] RSP: 0018:ffffc90011e07720 EFLAGS: 00000246 [ 414.768408][ C1] RAX: 1ffff11026307d04 RBX: dffffc0000000000 RCX: 0000000000080000 [ 414.776228][ C1] RDX: ffffc90001b4b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 414.784033][ C1] RBP: ffffc90011e078d0 R08: ffffffff84089f89 R09: ffffed10220a3bd7 [ 414.791842][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813183e820 [ 414.799770][ C1] R13: 1ffff920023c0fa4 R14: ffff88811051ddd8 R15: ffff88811051ddc0 [ 414.807558][ C1] ? __skb_try_recv_datagram+0x1e9/0x6a0 [ 414.813028][ C1] ? unix_unhash+0x10/0x10 [ 414.817274][ C1] ? up_read+0x5d/0x220 [ 414.821266][ C1] ? exc_page_fault+0x4e5/0x6d0 [ 414.825954][ C1] ? iovec_from_user+0x60/0x320 [ 414.830643][ C1] ? __import_iovec+0x24f/0x430 [ 414.835329][ C1] unix_dgram_recvmsg+0xb7/0xd0 [ 414.840018][ C1] ? unix_dgram_sendmsg+0x2050/0x2050 [ 414.845221][ C1] ____sys_recvmsg+0x285/0x530 [ 414.849825][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 414.854685][ C1] do_recvmmsg+0x46d/0xab0 [ 414.858940][ C1] ? __sys_recvmmsg+0x270/0x270 [ 414.863626][ C1] ? memcg_rstat_updated+0x57/0x120 [ 414.868661][ C1] ? __count_memcg_events+0x91/0xe0 [ 414.873702][ C1] ? handle_mm_fault+0x2b2d/0x30e0 [ 414.878645][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 414.883413][ C1] ? __fget_files+0x2cb/0x330 [ 414.887927][ C1] __x64_sys_recvmmsg+0x195/0x240 [ 414.892787][ C1] ? debug_smp_processor_id+0x17/0x20 [ 414.898004][ C1] ? do_recvmmsg+0xab0/0xab0 [ 414.902421][ C1] ? irqentry_exit_to_user_mode+0xe/0x10 [ 414.907889][ C1] ? irqentry_exit+0x12/0x40 [ 414.912313][ C1] x64_sys_call+0x7e5/0x9a0 [ 414.916655][ C1] do_syscall_64+0x3b/0xb0 [ 414.920907][ C1] ? clear_bhb_loop+0x55/0xb0 [ 414.925421][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.931153][ C1] RIP: 0033:0x7fee38f8cde9 [ 414.935401][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.954847][ C1] RSP: 002b:00007fee39e8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 414.963095][ C1] RAX: ffffffffffffffda RBX: 00007fee391a6080 RCX: 00007fee38f8cde9 [ 414.970901][ C1] RDX: 03fffffffffffcb5 RSI: 00004000000000c0 RDI: 0000000000000003 [ 414.978711][ C1] RBP: 00007fee3900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.986525][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 414.994342][ C1] R13: 0000000000000001 R14: 00007fee391a6080 R15: 00007ffef232a378 [ 415.002161][ C1] [ 415.005038][ C1] [ 415.007181][ C1] Allocated by task 3996: [ 415.011347][ C1] kasan_set_track+0x4b/0x70 [ 415.015773][ C1] kasan_save_alloc_info+0x1f/0x30 [ 415.020721][ C1] __kasan_kmalloc+0x9c/0xb0 [ 415.025145][ C1] __kmalloc+0xb4/0x1e0 [ 415.029136][ C1] hci_alloc_dev_priv+0x27/0x1c00 [ 415.033997][ C1] hci_uart_tty_ioctl+0x401/0xa70 [ 415.038857][ C1] tty_ioctl+0x903/0xc50 [ 415.042937][ C1] __se_sys_ioctl+0x114/0x190 [ 415.047454][ C1] __x64_sys_ioctl+0x7b/0x90 [ 415.051878][ C1] x64_sys_call+0x98/0x9a0 [ 415.056137][ C1] do_syscall_64+0x3b/0xb0 [ 415.060386][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.066118][ C1] [ 415.068283][ C1] Freed by task 3996: [ 415.072102][ C1] kasan_set_track+0x4b/0x70 [ 415.076529][ C1] kasan_save_free_info+0x2b/0x40 [ 415.081389][ C1] ____kasan_slab_free+0x131/0x180 [ 415.086336][ C1] __kasan_slab_free+0x11/0x20 [ 415.090935][ C1] __kmem_cache_free+0x21d/0x410 [ 415.095711][ C1] kfree+0x7a/0xf0 [ 415.099288][ C1] hci_release_dev+0x14d3/0x1640 [ 415.104040][ C1] bt_host_release+0x83/0xa0 [ 415.108482][ C1] device_release+0x95/0x1c0 [ 415.112895][ C1] kobject_put+0x178/0x260 [ 415.117151][ C1] put_device+0x1f/0x30 [ 415.121139][ C1] hci_dev_cmd+0x2be/0x9b0 [ 415.125514][ C1] hci_sock_ioctl+0x415/0x7f0 [ 415.130027][ C1] sock_do_ioctl+0x152/0x450 [ 415.134452][ C1] sock_ioctl+0x455/0x740 [ 415.138623][ C1] __se_sys_ioctl+0x114/0x190 [ 415.143132][ C1] __x64_sys_ioctl+0x7b/0x90 [ 415.147563][ C1] x64_sys_call+0x98/0x9a0 [ 415.151811][ C1] do_syscall_64+0x3b/0xb0 [ 415.156064][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.161811][ C1] [ 415.163966][ C1] Last potentially related work creation: [ 415.169521][ C1] kasan_save_stack+0x3b/0x60 [ 415.174033][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 415.179239][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 415.184881][ C1] insert_work+0x56/0x310 [ 415.189045][ C1] __queue_work+0x9b6/0xd70 [ 415.193388][ C1] queue_work_on+0x105/0x170 [ 415.197936][ C1] __hci_cmd_sync_sk+0xc2a/0xf70 [ 415.202715][ C1] hci_cmd_sync_status+0x52/0x130 [ 415.207576][ C1] hci_dev_cmd+0x771/0x9b0 [ 415.211827][ C1] hci_sock_ioctl+0x415/0x7f0 [ 415.216340][ C1] sock_do_ioctl+0x152/0x450 [ 415.220766][ C1] sock_ioctl+0x455/0x740 [ 415.224934][ C1] __se_sys_ioctl+0x114/0x190 [ 415.229449][ C1] __x64_sys_ioctl+0x7b/0x90 [ 415.233877][ C1] x64_sys_call+0x98/0x9a0 [ 415.238127][ C1] do_syscall_64+0x3b/0xb0 [ 415.242379][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.248112][ C1] [ 415.250286][ C1] Second to last potentially related work creation: [ 415.256702][ C1] kasan_save_stack+0x3b/0x60 [ 415.261645][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 415.266852][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 415.272495][ C1] insert_work+0x56/0x310 [ 415.276660][ C1] __queue_work+0x9b6/0xd70 [ 415.280998][ C1] queue_work_on+0x105/0x170 [ 415.285440][ C1] hci_cmd_timeout+0x199/0x200 [ 415.290024][ C1] process_one_work+0x73d/0xcb0 [ 415.294714][ C1] worker_thread+0xa60/0x1260 [ 415.299227][ C1] kthread+0x26d/0x300 [ 415.303135][ C1] ret_from_fork+0x1f/0x30 [ 415.307387][ C1] [ 415.309553][ C1] The buggy address belongs to the object at ffff88811a6bc000 [ 415.309553][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 415.323442][ C1] The buggy address is located 2560 bytes inside of [ 415.323442][ C1] 8192-byte region [ffff88811a6bc000, ffff88811a6be000) [ 415.336718][ C1] [ 415.338890][ C1] The buggy address belongs to the physical page: [ 415.345154][ C1] page:ffffea000469ae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a6b8 [ 415.355209][ C1] head:ffffea000469ae00 order:3 compound_mapcount:0 compound_pincount:0 [ 415.363945][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 415.369852][ C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 415.378279][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 415.386690][ C1] page dumped because: kasan: bad access detected [ 415.392939][ C1] page_owner tracks the page as allocated [ 415.398487][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 534, tgid 533 (syz.0.46), ts 47575652703, free_ts 47566978968 [ 415.420535][ C1] post_alloc_hook+0x213/0x220 [ 415.425131][ C1] prep_new_page+0x1b/0x110 [ 415.429469][ C1] get_page_from_freelist+0x3a98/0x3b10 [ 415.434850][ C1] __alloc_pages+0x234/0x610 [ 415.439277][ C1] alloc_slab_page+0x6c/0xf0 [ 415.443704][ C1] new_slab+0x90/0x3e0 [ 415.447716][ C1] ___slab_alloc+0x6f9/0xb80 [ 415.452133][ C1] __slab_alloc+0x5d/0xa0 [ 415.456303][ C1] __kmem_cache_alloc_node+0x207/0x2a0 [ 415.462117][ C1] __kmalloc_node_track_caller+0xa2/0x1e0 [ 415.467670][ C1] kmemdup+0x29/0x60 [ 415.471402][ C1] ipv4_sysctl_init_net+0x43/0x280 [ 415.476351][ C1] ops_init+0x1cd/0x480 [ 415.480343][ C1] setup_net+0x4ca/0xd60 [ 415.484420][ C1] copy_net_ns+0x35f/0x5b0 [ 415.488771][ C1] create_new_namespaces+0x416/0x670 [ 415.493880][ C1] page last free stack trace: [ 415.498422][ C1] free_unref_page_prepare+0x9f1/0xa00 [ 415.503690][ C1] free_unref_page+0xb2/0x5c0 [ 415.508222][ C1] __free_pages+0x61/0xf0 [ 415.512401][ C1] __free_slab+0xce/0x1a0 [ 415.516557][ C1] __unfreeze_partials+0x165/0x1a0 [ 415.521582][ C1] put_cpu_partial+0xa9/0x100 [ 415.526092][ C1] __slab_free+0x1c8/0x280 [ 415.530334][ C1] ___cache_free+0xc6/0xd0 [ 415.534592][ C1] qlist_free_all+0xc5/0x140 [ 415.539013][ C1] kasan_quarantine_reduce+0x15a/0x180 [ 415.544311][ C1] __kasan_slab_alloc+0x24/0x80 [ 415.548996][ C1] slab_post_alloc_hook+0x53/0x2c0 [ 415.553940][ C1] kmem_cache_alloc_node+0x188/0x330 [ 415.559062][ C1] __alloc_skb+0xcc/0x2d0 [ 415.563321][ C1] tcp_stream_alloc_skb+0x46/0x340 [ 415.568266][ C1] tcp_sendmsg_locked+0xda6/0x4000 [ 415.573209][ C1] [ 415.575381][ C1] Memory state around the buggy address: [ 415.580852][ C1] ffff88811a6bc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.588750][ C1] ffff88811a6bc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.596648][ C1] >ffff88811a6bca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.604542][ C1] ^ [ 415.608450][ C1] ffff88811a6bca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.616349][ C1] ffff88811a6bcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.624245][ C1] ================================================================== [ 415.632144][ C1] Disabling lock debugging due to kernel taint [ 415.638201][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 415.649674][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 415.657924][ C1] CPU: 1 PID: 4045 Comm: syz.0.816 Tainted: G B 6.1.124-syzkaller-00008-gccc915784332 #0 [ 415.668944][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 415.678839][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 415.683961][ C1] Code: 39 03 0f 84 40 01 00 00 e8 5c 6c 2a 00 4c 89 e7 e8 64 49 d7 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 70 09 72 00 49 8b 3e e8 18 42 d7 [ 415.703405][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 415.709305][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810d1e3cc0 [ 415.717117][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 415.724927][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b261b R09: 0000000000000007 [ 415.732743][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811a6bc9c8 [ 415.740560][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811a6bc9e0 [ 415.748363][ C1] FS: 00007fee39e8d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 415.757127][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.763548][ C1] CR2: 000040000099c030 CR3: 000000013163d000 CR4: 00000000003506a0 [ 415.771364][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.779173][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.786985][ C1] Call Trace: [ 415.790110][ C1] [ 415.792800][ C1] ? __die_body+0x62/0xb0 [ 415.796965][ C1] ? die_addr+0x9f/0xd0 [ 415.800961][ C1] ? exc_general_protection+0x317/0x4c0 [ 415.806352][ C1] ? asm_exc_general_protection+0x27/0x30 [ 415.811894][ C1] ? __queue_work+0x28b/0xd70 [ 415.816409][ C1] ? __queue_work+0x4f1/0xd70 [ 415.820922][ C1] ? __queue_work+0x29c/0xd70 [ 415.825446][ C1] delayed_work_timer_fn+0x61/0x80 [ 415.830380][ C1] ? queue_work_node+0x1d0/0x1d0 [ 415.835156][ C1] call_timer_fn+0x3b/0x2d0 [ 415.839498][ C1] ? queue_work_node+0x1d0/0x1d0 [ 415.844267][ C1] __run_timers+0x756/0xa10 [ 415.848613][ C1] ? calc_index+0x270/0x270 [ 415.852948][ C1] ? sched_clock+0x9/0x10 [ 415.857121][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 415.861801][ C1] run_timer_softirq+0x69/0xf0 [ 415.866401][ C1] handle_softirqs+0x1db/0x650 [ 415.871021][ C1] __irq_exit_rcu+0x52/0xf0 [ 415.875339][ C1] irq_exit_rcu+0x9/0x10 [ 415.879440][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 415.884888][ C1] [ 415.887675][ C1] [ 415.890450][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 415.896257][ C1] RIP: 0010:__unix_dgram_recvmsg+0x65e/0x12b0 [ 415.902160][ C1] Code: 18 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 96 2d 49 fd 41 bc 60 03 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 80 3c 18 00 <74> 08 4c 89 e7 e8 78 2d 49 fd 4d 8b 34 24 4d 85 f6 0f 84 bc 00 00 [ 415.921600][ C1] RSP: 0018:ffffc90011e07720 EFLAGS: 00000246 [ 415.927506][ C1] RAX: 1ffff11026307d04 RBX: dffffc0000000000 RCX: 0000000000080000 [ 415.935318][ C1] RDX: ffffc90001b4b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 415.943153][ C1] RBP: ffffc90011e078d0 R08: ffffffff84089f89 R09: ffffed10220a3bd7 [ 415.950946][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813183e820 [ 415.958751][ C1] R13: 1ffff920023c0fa4 R14: ffff88811051ddd8 R15: ffff88811051ddc0 [ 415.966564][ C1] ? __skb_try_recv_datagram+0x1e9/0x6a0 [ 415.972032][ C1] ? unix_unhash+0x10/0x10 [ 415.976281][ C1] ? up_read+0x5d/0x220 [ 415.980273][ C1] ? exc_page_fault+0x4e5/0x6d0 [ 415.984961][ C1] ? iovec_from_user+0x60/0x320 [ 415.989649][ C1] ? __import_iovec+0x24f/0x430 [ 415.994335][ C1] unix_dgram_recvmsg+0xb7/0xd0 [ 415.999022][ C1] ? unix_dgram_sendmsg+0x2050/0x2050 [ 416.004227][ C1] ____sys_recvmsg+0x285/0x530 [ 416.008831][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 416.013695][ C1] do_recvmmsg+0x46d/0xab0 [ 416.017948][ C1] ? __sys_recvmmsg+0x270/0x270 [ 416.022631][ C1] ? memcg_rstat_updated+0x57/0x120 [ 416.027665][ C1] ? __count_memcg_events+0x91/0xe0 [ 416.032697][ C1] ? handle_mm_fault+0x2b2d/0x30e0 [ 416.037651][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 416.042420][ C1] ? __fget_files+0x2cb/0x330 [ 416.046932][ C1] __x64_sys_recvmmsg+0x195/0x240 [ 416.051793][ C1] ? debug_smp_processor_id+0x17/0x20 [ 416.056999][ C1] ? do_recvmmsg+0xab0/0xab0 [ 416.061774][ C1] ? irqentry_exit_to_user_mode+0xe/0x10 [ 416.067242][ C1] ? irqentry_exit+0x12/0x40 [ 416.071666][ C1] x64_sys_call+0x7e5/0x9a0 [ 416.076008][ C1] do_syscall_64+0x3b/0xb0 [ 416.080275][ C1] ? clear_bhb_loop+0x55/0xb0 [ 416.084777][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.090509][ C1] RIP: 0033:0x7fee38f8cde9 [ 416.094757][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.114284][ C1] RSP: 002b:00007fee39e8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 416.122530][ C1] RAX: ffffffffffffffda RBX: 00007fee391a6080 RCX: 00007fee38f8cde9 [ 416.130340][ C1] RDX: 03fffffffffffcb5 RSI: 00004000000000c0 RDI: 0000000000000003 [ 416.138162][ C1] RBP: 00007fee3900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 416.146050][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 416.153863][ C1] R13: 0000000000000001 R14: 00007fee391a6080 R15: 00007ffef232a378 [ 416.161676][ C1] [ 416.164535][ C1] Modules linked in: [ 416.168286][ C1] ---[ end trace 0000000000000000 ]--- [ 416.173566][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 416.178686][ C1] Code: 39 03 0f 84 40 01 00 00 e8 5c 6c 2a 00 4c 89 e7 e8 64 49 d7 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 70 09 72 00 49 8b 3e e8 18 42 d7 [ 416.198231][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 416.204131][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810d1e3cc0 [ 416.211941][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 416.219765][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b261b R09: 0000000000000007 [ 416.227655][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811a6bc9c8 [ 416.235464][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811a6bc9e0 [ 416.243321][ C1] FS: 00007fee39e8d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 416.252046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.258473][ C1] CR2: 000040000099c030 CR3: 000000013163d000 CR4: 00000000003506a0 [ 416.266279][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.274088][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.281902][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 416.289232][ C1] Kernel Offset: disabled [ 416.293365][ C1] Rebooting in 86400 seconds..