last executing test programs: 9.274265695s ago: executing program 1 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.076322905s ago: executing program 1 (id=539): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052", 0x26}], 0x1) 8.908537215s ago: executing program 1 (id=540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000a00)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@jqfmt_vfsv0}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@init_itable}, {@bh}]}, 0x1, 0x455, &(0x7f0000000e00)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000a40), 0x1, 0x41) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000003c0)=""/109) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x8080c61) fallocate(r0, 0x100000003, 0x800002, 0x28120001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = syz_usb_connect$hid(0x4, 0x3f, 0x0, &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7f, 0x6, 0x4, 0x40, 0x6}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42c}}, {0x93, &(0x7f0000000b00)=@string={0x93, 0x3, "5b1ac9b30e6d1db036e6b255ecb2d9486282049c8f4437d3dce09dfc62a3a64d4ee7105afa154ca13cd217f045ef192eea69c542e435e09cfde4081fc510bccd23835caf030bc03e3f8adae498cb234321c6e82c92ae2d7760f7e95bf11e8043201dd46d9a4a2f77cf04ccdc2e3f9cf320367e84caadc56e3de4924e2142a3176a927e0db25cf3029deb6bb28152900c04"}}, {0xfc, &(0x7f0000000c00)=ANY=[@ANYBLOB="fc038691efe2d18a19eded4c678f93d8db6e4d10a29fdcadb8f166ac97d8dfa4cb1cbb6ef6437ba0b506dfacce57a79efc8d29fb2e1efae885c9d0cc0b8ea7c6adbc09c95b67f74b0f4503b2f864a2f36f69a2fa827e872b7ec8842bd0743204"]}, {0xa, &(0x7f0000000540)=@string={0xa, 0x3, "e78affe2d6f85da1"}}, {0x71, &(0x7f0000000480)=ANY=[@ANYBLOB="7103630ec71dc8931add47d7eb62f4a7e4322f9c11724f57040000004d255c708ae4b33825af5c6004e2d64792e41c2c9eaf5e05b3818329a44e32dd673e067ce1b016a71840f4a2e3fe2e87c323d5b35ef7e4ccfa26944cfc35857f6cd97b9ae656a642e0d4aad6774d"]}]}) syz_usb_control_io$hid(r4, &(0x7f0000001640)={0x24, &(0x7f0000000500)=ANY=[], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002201ffe5f523e61c4d0c621451723ba8ff0098"], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 5.928058007s ago: executing program 4 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) getrlimit(0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@local}, &(0x7f0000000bc0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.927612647s ago: executing program 0 (id=555): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_socket_connect_nvme_tcp() recvmsg(0xffffffffffffffff, 0x0, 0x10000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 3.719333168s ago: executing program 3 (id=557): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rtc(0xffffffffffffff9c, 0x0, 0x181082, 0x0) syz_clone(0xc0008100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.532797588s ago: executing program 1 (id=558): syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x5e, 0xc, 0x2c}, {0x7, 0x9, 0x1, 0x7fff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000014000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='f2fs_truncate_partial_nodes\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x10, 0x2, 0xfffffffc}}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8=r4], 0x48) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0x6000, 0x1) 3.207550138s ago: executing program 4 (id=559): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x759, &(0x7f00000005c0)={[{@usrjquota}, {@noblock_validity}, {@discard}, {@norecovery}, {@data_err_ignore, 0x0}, {@journal_dev={'journal_dev', 0x3d, 0x40}}, {@bh}, {@grpjquota}, {@mblk_io_submit}, {@init_itable}, {@usrjquota}, {@barrier}, {@nolazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}, {@stripe={'stripe', 0x3d, 0x973}}, {@grpquota}, {@noauto_da_alloc}, {@inlinecrypt}], [{@dont_measure}, {@dont_hash}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") lchown(0x0, 0x0, 0x0) 3.141147028s ago: executing program 2 (id=561): syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x5e, 0xc, 0x2c}, {0x7, 0x9, 0x1, 0x7fff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000014000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='f2fs_truncate_partial_nodes\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01ce04000b0000000d671b44c708000000000000000000000000000000000000000000efa1398c6516b482531090c8f02016ade28c977e890af7a3b7331d4f90c962c47f84a3753d80f83dedc2a5c55442c8abbf4223481e31922bd87f8565d49470a6a6c6c62e194186f456d6c9c9ebb0a50af0d6c52915e1d6f577da3d38a4f46f30f3153139f0a15b06a481c56a64a3062d484865b3278a92adf20bf38a88a461e9d2d52be10f586c59cd5417494c730d898c36ff3018aac60db249591fcc6a21c265b6f2", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x10, 0x2, 0xfffffffc}}) readv(r5, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8=r5], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x5, r6}, 0x38) r7 = getpid() setreuid(0xee00, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0x6000, 0x1) 2.783633458s ago: executing program 0 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.623593548s ago: executing program 3 (id=563): syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x5e, 0xc, 0x2c}, {0x7, 0x9, 0x1, 0x7fff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000014000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='f2fs_truncate_partial_nodes\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01ce04000b0000000d671b44c708000000000000000000000000000000000000000000efa1398c6516b482531090c8f02016ade28c977e890af7a3b7331d4f90c962c47f84a3753d80f83dedc2a5c55442c8abbf4223481e31922bd87f8565d49470a6a6c6c62e194186f456d6c9c9ebb0a50af0d6c52915e1d6f577da3d38a4f46f30f3153139f0a15b06a481c56a64a3062d484865b3278a92adf20bf38a88a461e9d2d52be10f586c59cd5417494c730d898c36ff3018aac60db249591fcc6a21c265b6f2", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x10, 0x2, 0xfffffffc}}) readv(r5, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8=r5], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x5, r6}, 0x38) r7 = getpid() setreuid(0xee00, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0x6000, 0x1) 2.393817018s ago: executing program 0 (id=564): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 2.356070128s ago: executing program 0 (id=565): syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x5e, 0xc, 0x2c}, {0x7, 0x9, 0x1, 0x7fff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000014000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='f2fs_truncate_partial_nodes\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000740)}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x10, 0x2, 0xfffffffc}}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r4], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x5, r5}, 0x38) r6 = getpid() setreuid(0xee00, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0x6000, 0x1) 2.220245908s ago: executing program 2 (id=566): socket(0x1e, 0x4, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000ff0f00000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xfd], 'batadv0\x00', 'geneve1\x00'}, 0x0, 0x188, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast1, [0xffffff00, 0xff, 0xff000000, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x42}, [0xff, 0xff, 0x0, 0xffffffff], @ipv4=@loopback, [0x0, 0xff, 0xffffffff, 0xff000000], 0x4, 0x6, 0x88, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x290, 0x80}, 0x80, 0x41}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0xb7a}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 1.932916568s ago: executing program 4 (id=567): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.880353729s ago: executing program 1 (id=568): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x759, &(0x7f00000005c0)={[{@usrjquota}, {@noblock_validity}, {@discard}, {@norecovery}, {@data_err_ignore, 0x0}, {@journal_dev={'journal_dev', 0x3d, 0x40}}, {@bh}, {@grpjquota}, {@mblk_io_submit}, {@init_itable}, {@usrjquota}, {@barrier}, {@nolazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}, {@stripe={'stripe', 0x3d, 0x973}}, {@grpquota}, {@noauto_da_alloc}, {@inlinecrypt}], [{@dont_measure}, {@dont_hash}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") lchown(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1.854740148s ago: executing program 4 (id=569): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x4, 0xfffff010}, {0x6}]}, 0x10) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 1.748616339s ago: executing program 4 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) getrlimit(0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@local}, &(0x7f0000000bc0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1.123179059s ago: executing program 3 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) 975.029249ms ago: executing program 0 (id=572): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x100000000004, 0x21040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x806, 0x57, 0xa, 0x0, 0x2, 0x1, 0x1004, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', 0xfffffffffffffffb) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x40}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r3, 0x25, 0xa, @void}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x5, 0x2, 0x9, 0x68, 0x0, 0x10, 0x2, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000300)}, 0x2020, 0x0, 0x6923, 0x2, 0xe2ac, 0x401, 0x7, 0x0, 0x7, 0x0, 0x3}, r5, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xb, 0xc, 0xff, 0x2, 0x0, 0x6, 0xc20, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x12d, 0x5}, 0x10408, 0x0, 0x2, 0x5, 0x7, 0x3, 0x800, 0x0, 0xe, 0x0, 0x2}, 0x0, 0x5, r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) r8 = socket(0x10, 0x3, 0x9) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_usb_connect$uac1(0x4, 0x103, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0xfc, 0x20, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xcf}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0x1, "2283"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x4, 0x8, 0x7f, "f07df840e464df63"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x40, "", "17fd"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x0, "ffebabf2c8c1ad"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xff, 0x4, 0x3, "74563e05517ccde6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x12, 0x4, 0x12, "55df"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xf0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xc9, 0xd0, 0x3, {0x7, 0x25, 0x1, 0x1, 0x3, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x8b, "6e18c015ead3b6a4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0x27, 0x0, "ce82"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x8, 0x1002}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x1, 0xa, 0x3, "b15332310d2837"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x4, 0x6, 0x7, "0c018923b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x24, 0x9, 0xd8, {0x7, 0x25, 0x1, 0x0, 0xad}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0xfd, &(0x7f0000000780)=@string={0xfd, 0x3, "f24bbc180e915cc2fc0b778e36daf655ba1a10311144a8d5c83133acde23e12b6ea320a8bdb55d1b986b8136e9e2135c6af8980c95e885f395c77cbe7f2996ca94ba0aee9a36b938c2a5da43995de524a715aeb042abf6f7acf43eff8cf32ac72334d5d489db1cfdc6f5a47d3256767e4a4b6193ee2b1a072796d3b56fcce495a16d6d55d83b3e217609a6508e8ad4b6517447dc7180ec061db91676ef4051643995b3de06591e9f6335bd3949970682e76fdedb95a5b8e2f9b69a71f6743e707272e42f8c2d08cc5112b695d333f1c5777f25b974756a5491c4f6b0bfe4f9f2135d00eae0496f2223d4a27133db171d2f5ed09588f584c13882cd"}}, {0xfb, &(0x7f0000000c80)=@string={0xfb, 0x3, "818f7a37ba50717c63bf7ebb80a4c1b190f89d39e6f4c8266fd0c8ba79c3ec2ebf58a7bde1dbaf352a8afb36180078c018243378010317e737a48d4ca3e94a5dcad64819683e1b3a9c3d26b8b6c68c9676b72a0caffb1c689aad6785456c167c41587d181d8e53b4d902388f2841ede8dd7e9d2ab930554cbaa575da248c145aaf473c45d923b9c7ecbc66ab32bd36ffb5828049a74653fe3760dc5cf428ba4da17a916a6d10ec7c324937967d20280a2ea6e095d16182f46bdb37550b1719aafb201a6b09484726a8a7831caa5f7055de9c590a490c66ce4f90d1df160b942b03e4ce23d046ba5454d318ca6213172a003b94fafeba4c67d5"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x445}}]}) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000da00000000000000000a140000001100010000000000000000000000000a5396d9022a5aa395fc22835b8c12085a0c04436bbac293d1dad1524871fc30dd04eff44e5fd4b58f18d55f68952c84314ad9875c6f983e9520b9269617adacdfe064112c65418629a032dca17148568d0caeb97eeb3aa1fa788579f25fb96e5457f94ef9c0821da5dcf954262ba1ca05185a361745a1e5c3ad1845d706a30474d2bb9e52"], 0x28}}, 0x0) 865.848409ms ago: executing program 2 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 574.125479ms ago: executing program 2 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 456.395159ms ago: executing program 2 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 454.353039ms ago: executing program 1 (id=576): unshare(0x40040000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040), 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)="39000000130003475fae7cdac52541300600000001000000450000002500100019001900040002000200000000000006040000000000000000", 0x39}], 0x1) 205.416319ms ago: executing program 3 (id=577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/rcu_expedited', 0x80000, 0x104) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 181.432549ms ago: executing program 3 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e80b0000", @ANYRES16, @ANYBLOB="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"], 0xbe8}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 88.774269ms ago: executing program 0 (id=579): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) io_setup(0x202, &(0x7f0000000200)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_getevents(r0, 0x2, 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) 50.972649ms ago: executing program 3 (id=580): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x4, 0xfffff010}, {0x6}]}, 0x10) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 40.341359ms ago: executing program 2 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@orlov}, {@data_err_abort}]}, 0x1, 0x5de, &(0x7f0000001800)="$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") r7 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 0s ago: executing program 4 (id=582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000a00)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@jqfmt_vfsv0}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@init_itable}, {@bh}]}, 0x1, 0x455, &(0x7f0000000e00)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000a40), 0x1, 0x41) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000003c0)=""/109) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x8080c61) fallocate(r0, 0x100000003, 0x800002, 0x28120001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = syz_usb_connect$hid(0x4, 0x3f, 0x0, &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7f, 0x6, 0x4, 0x40, 0x6}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42c}}, {0x93, &(0x7f0000000b00)=@string={0x93, 0x3, "5b1ac9b30e6d1db036e6b255ecb2d9486282049c8f4437d3dce09dfc62a3a64d4ee7105afa154ca13cd217f045ef192eea69c542e435e09cfde4081fc510bccd23835caf030bc03e3f8adae498cb234321c6e82c92ae2d7760f7e95bf11e8043201dd46d9a4a2f77cf04ccdc2e3f9cf320367e84caadc56e3de4924e2142a3176a927e0db25cf3029deb6bb28152900c04"}}, {0xfc, &(0x7f0000000c00)=ANY=[@ANYBLOB="fc038691efe2d18a19eded4c678f93d8db6e4d10a29fdcadb8f166ac97d8dfa4cb1cbb6ef6437ba0b506dfacce57a79efc8d29fb2e1efae885c9d0cc0b8ea7c6adbc09c95b67f74b0f4503b2f864a2f36f69a2fa827e872b7ec8842bd0743204"]}, {0xa, &(0x7f0000000540)=@string={0xa, 0x3, "e78affe2d6f85da1"}}, {0x71, &(0x7f0000000480)=ANY=[@ANYBLOB="7103630ec71dc8931add47d7eb62f4a7e4322f9c11724f57040000004d255c708ae4b33825af5c6004e2d64792e41c2c9eaf5e05b3818329a44e32dd673e067ce1b016a71840f4a2e3fe2e87c323d5b35ef7e4ccfa26944cfc35857f6cd97b9ae656a642e0d4aad6774d"]}]}) syz_usb_control_io$hid(r4, &(0x7f0000001640)={0x24, &(0x7f0000000500)=ANY=[], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002201ffe5f523e61c4d0c621451723ba8ff0098"], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.878803][ T3974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.891394][ T3974] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.900578][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.950104][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.964594][ T3982] loop2: detected capacity change from 0 to 128 [ 70.042010][ T3989] loop3: detected capacity change from 0 to 164 [ 70.048764][ T3989] iso9660: Unknown parameter '' [ 70.330604][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.348006][ T3993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.361553][ T3993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.602698][ T4006] loop0: detected capacity change from 0 to 128 [ 70.681424][ T4008] loop1: detected capacity change from 0 to 1024 [ 70.688234][ T4008] EXT4-fs: Ignoring removed orlov option [ 70.716696][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.290264][ T4022] loop2: detected capacity change from 0 to 1024 [ 73.297097][ T4022] EXT4-fs: Ignoring removed orlov option [ 74.072860][ T4026] loop3: detected capacity change from 0 to 512 [ 74.096457][ T4030] loop4: detected capacity change from 0 to 512 [ 74.185827][ T4030] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.203722][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.246821][ T4030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 74.254838][ T4030] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.262261][ T4030] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.156: attempt to clear invalid blocks 1024 len 1 [ 74.276071][ T4030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.156: bg 0: block 361: padding at end of block bitmap is not set [ 74.290923][ T4030] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 74.300625][ T4030] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.156: invalid indirect mapped block 1811939328 (level 0) [ 74.319347][ T4030] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.156: invalid indirect mapped block 2185560079 (level 1) [ 74.333967][ T4030] EXT4-fs (loop4): 1 truncate cleaned up [ 74.340066][ T4030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 74.353398][ T4030] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.156: dx entry: limit 0 != root limit 125 [ 74.365144][ T4030] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.156: Corrupt directory, running e2fsck is recommended [ 74.379278][ T4026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.391863][ T4026] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.434152][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.460528][ T4036] loop1: detected capacity change from 0 to 128 [ 74.513762][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.569596][ T4043] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 74.569596][ T4043] program syz.3.160 not setting count and/or reply_len properly [ 74.881935][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 74.899860][ T4052] loop1: detected capacity change from 0 to 512 [ 74.920677][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 74.920691][ T29] audit: type=1326 audit(1741221960.183:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 74.950175][ T29] audit: type=1326 audit(1741221960.183:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 74.973536][ T29] audit: type=1326 audit(1741221960.183:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 74.996775][ T29] audit: type=1326 audit(1741221960.183:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 75.020456][ T29] audit: type=1326 audit(1741221960.183:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 75.043760][ T29] audit: type=1326 audit(1741221960.183:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 75.067010][ T29] audit: type=1326 audit(1741221960.183:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 75.090269][ T29] audit: type=1326 audit(1741221960.183:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 75.113518][ T29] audit: type=1326 audit(1741221960.183:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 75.136833][ T29] audit: type=1326 audit(1741221960.183:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd41b84d1a3 code=0x7ffc0000 [ 75.189512][ T4052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.202061][ T4052] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.423015][ T4059] loop0: detected capacity change from 0 to 256 [ 75.444360][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.456701][ T4060] loop4: detected capacity change from 0 to 512 [ 75.458818][ T4059] FAT-fs (loop0): codepage cp1251 not found [ 75.521662][ T4060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.565877][ T4060] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.678556][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.469596][ T4087] veth1_to_team: entered promiscuous mode [ 76.512948][ T4087] team0: Port device team_slave_1 removed [ 76.580949][ T4091] loop2: detected capacity change from 0 to 512 [ 76.599251][ T4091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.611914][ T4091] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.241673][ T4103] loop3: detected capacity change from 0 to 512 [ 77.307971][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.320877][ T4103] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.380707][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.550256][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.979854][ T4111] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 77.979854][ T4111] program syz.2.176 not setting count and/or reply_len properly [ 78.100428][ T4113] loop1: detected capacity change from 0 to 512 [ 78.124852][ T4113] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.178: corrupted xattr block 95: invalid header [ 78.139578][ T4113] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.178: bg 0: block 7: invalid block bitmap [ 78.152289][ T4113] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 78.161482][ T4113] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.178: corrupted xattr block 95: invalid header [ 78.175309][ T4113] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 78.184346][ T4113] EXT4-fs (loop1): 1 orphan inode deleted [ 78.190384][ T4113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.295860][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.353900][ T4119] loop4: detected capacity change from 0 to 164 [ 78.369122][ T4119] iso9660: Unknown parameter '' [ 78.805266][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.885847][ T4140] capability: warning: `syz.0.185' uses deprecated v2 capabilities in a way that may be insecure [ 79.096688][ T4149] loop2: detected capacity change from 0 to 512 [ 79.147686][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.160514][ T4149] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.245024][ T4153] xt_socket: unknown flags 0x58 [ 79.267053][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.592408][ T4156] loop4: detected capacity change from 0 to 512 [ 79.600700][ T4156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.611298][ T4156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.619170][ T4156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.190: bg 0: block 248: padding at end of block bitmap is not set [ 79.635072][ T4156] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.190: Failed to acquire dquot type 1 [ 79.649395][ T4156] EXT4-fs (loop4): 1 truncate cleaned up [ 80.298693][ T4156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.368963][ T4166] loop3: detected capacity change from 0 to 128 [ 80.439124][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.860607][ T4171] loop3: detected capacity change from 0 to 512 [ 80.867220][ T4171] EXT4-fs: Ignoring removed oldalloc option [ 80.886241][ T4171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.895817][ T4171] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.902749][ T4171] __quota_error: 111 callbacks suppressed [ 80.902763][ T4171] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 80.917965][ T4171] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 80.927406][ T4171] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.193: Failed to acquire dquot type 1 [ 80.939385][ T4171] EXT4-fs (loop3): 1 truncate cleaned up [ 80.957839][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.266647][ T4184] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 81.266647][ T4184] program syz.0.198 not setting count and/or reply_len properly [ 82.021098][ T4197] loop1: detected capacity change from 0 to 512 [ 82.178091][ T4195] loop4: detected capacity change from 0 to 512 [ 82.241862][ T4195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.254494][ T4195] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.270825][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.306851][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.431724][ T4197] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.447378][ T29] audit: type=1326 audit(1741221967.733:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.470882][ T29] audit: type=1326 audit(1741221967.733:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.494231][ T29] audit: type=1326 audit(1741221967.733:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.517439][ T29] audit: type=1326 audit(1741221967.733:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.540912][ T29] audit: type=1326 audit(1741221967.733:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.564207][ T29] audit: type=1326 audit(1741221967.733:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.587611][ T29] audit: type=1326 audit(1741221967.733:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.610885][ T29] audit: type=1326 audit(1741221967.733:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 82.797203][ T4210] loop0: detected capacity change from 0 to 164 [ 82.823931][ T4210] iso9660: Unknown parameter '' [ 83.391536][ T4218] loop0: detected capacity change from 0 to 512 [ 83.403599][ T4218] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 83.455651][ T4218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 83.463824][ T4218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.556346][ T4218] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.205: attempt to clear invalid blocks 1024 len 1 [ 83.571640][ T4218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.205: bg 0: block 361: padding at end of block bitmap is not set [ 83.586260][ T4218] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 83.595525][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.982173][ T4218] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.205: invalid indirect mapped block 1811939328 (level 0) [ 83.996900][ T4218] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.205: invalid indirect mapped block 2185560079 (level 1) [ 84.014313][ T4218] EXT4-fs (loop0): 1 truncate cleaned up [ 84.020285][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 84.033475][ T4218] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.205: dx entry: limit 0 != root limit 125 [ 84.045165][ T4218] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.205: Corrupt directory, running e2fsck is recommended [ 84.098193][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.253443][ T4232] loop4: detected capacity change from 0 to 512 [ 84.274875][ T4232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.402045][ T4237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.436875][ T4238] loop0: detected capacity change from 0 to 1024 [ 84.444013][ T4238] EXT4-fs: Ignoring removed orlov option [ 84.498317][ T4240] loop3: detected capacity change from 0 to 512 [ 84.507211][ T4240] EXT4-fs: Ignoring removed bh option [ 84.553154][ T4240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.574857][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.595241][ T4232] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.611960][ T4232] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.206: Failed to acquire dquot type 1 [ 84.629862][ T4232] EXT4-fs (loop4): 1 truncate cleaned up [ 84.639785][ T4232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.695860][ T4240] EXT4-fs (loop3): 1 orphan inode deleted [ 84.701654][ T4240] EXT4-fs (loop3): 1 truncate cleaned up [ 84.851662][ T4240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.139480][ T4245] loop2: detected capacity change from 0 to 256 [ 85.254854][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.980322][ T4251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.001565][ T4251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.707135][ T4258] loop4: detected capacity change from 0 to 512 [ 86.737519][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.750227][ T4258] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.028128][ T4264] loop2: detected capacity change from 0 to 512 [ 87.961514][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.973685][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.983225][ T4264] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.215: corrupted xattr block 95: invalid header [ 87.998539][ T4264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.215: bg 0: block 7: invalid block bitmap [ 88.011128][ T4264] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.020054][ T4264] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.215: corrupted xattr block 95: invalid header [ 88.033820][ T4264] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 88.042889][ T4264] EXT4-fs (loop2): 1 orphan inode deleted [ 88.048876][ T4264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.070285][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.088542][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.128801][ T4268] loop3: detected capacity change from 0 to 128 [ 88.179201][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 88.179215][ T29] audit: type=1400 audit(1741221973.463:788): avc: denied { mount } for pid=4272 comm="syz.1.219" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.207184][ T29] audit: type=1400 audit(1741221973.463:789): avc: denied { unmount } for pid=4272 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.286134][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.158151][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 89.166991][ T4286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 89.175874][ T4286] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 89.332334][ T4290] loop1: detected capacity change from 0 to 512 [ 89.339689][ C0] hrtimer: interrupt took 28080 ns [ 89.344765][ T4290] EXT4-fs: Ignoring removed bh option [ 89.353460][ T4290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.424509][ T4292] loop2: detected capacity change from 0 to 512 [ 89.433507][ T4292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.489870][ T4292] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.499677][ T4290] EXT4-fs (loop1): 1 orphan inode deleted [ 89.505459][ T4290] EXT4-fs (loop1): 1 truncate cleaned up [ 89.511350][ T4292] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.223: bg 0: block 248: padding at end of block bitmap is not set [ 89.527936][ T4292] Quota error (device loop2): write_blk: dquota write failed [ 89.535435][ T4292] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 89.545417][ T4292] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.223: Failed to acquire dquot type 1 [ 89.559096][ T4292] EXT4-fs (loop2): 1 truncate cleaned up [ 89.565297][ T4292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.573068][ T4290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.148680][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.419733][ T4310] loop2: detected capacity change from 0 to 512 [ 90.431154][ T4305] loop4: detected capacity change from 0 to 512 [ 90.561807][ T4305] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.579553][ T4312] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 90.586128][ T4312] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.593872][ T4312] vhci_hcd vhci_hcd.0: Device attached [ 90.603424][ T4305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 90.611709][ T4305] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.632003][ T4305] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.228: attempt to clear invalid blocks 1024 len 1 [ 90.649848][ T4305] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.228: bg 0: block 361: padding at end of block bitmap is not set [ 90.664821][ T4310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.677358][ T4310] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.690321][ T4305] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 90.700196][ T4305] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.228: invalid indirect mapped block 1811939328 (level 0) [ 90.716392][ T4305] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.228: invalid indirect mapped block 2185560079 (level 1) [ 90.731747][ T4305] EXT4-fs (loop4): 1 truncate cleaned up [ 90.737877][ T4305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 90.751026][ T4305] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.228: dx entry: limit 0 != root limit 125 [ 90.762723][ T4305] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.228: Corrupt directory, running e2fsck is recommended [ 90.823836][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 90.850676][ T4319] loop0: detected capacity change from 0 to 1024 [ 90.883997][ T4319] EXT4-fs: dax option not supported [ 90.926742][ T4313] vhci_hcd: connection closed [ 90.926935][ T3329] vhci_hcd: stop threads [ 90.935942][ T3329] vhci_hcd: release socket [ 90.940350][ T3329] vhci_hcd: disconnect device [ 91.613053][ T4294] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 91.613370][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.677224][ T4328] loop2: detected capacity change from 0 to 128 [ 91.885461][ T29] audit: type=1326 audit(1741221977.163:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 91.908772][ T29] audit: type=1326 audit(1741221977.163:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 91.932175][ T29] audit: type=1326 audit(1741221977.163:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 91.955465][ T29] audit: type=1326 audit(1741221977.163:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 91.978691][ T29] audit: type=1326 audit(1741221977.163:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 92.002121][ T29] audit: type=1326 audit(1741221977.203:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 92.071546][ T4334] loop0: detected capacity change from 0 to 164 [ 92.079421][ T4334] iso9660: Unknown parameter '' [ 92.293571][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 92.302498][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 92.311573][ T4343] netlink: 'syz.4.237': attribute type 12 has an invalid length. [ 92.416074][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.615983][ T4345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.626238][ T4345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.642924][ T4350] loop3: detected capacity change from 0 to 512 [ 92.693718][ T4350] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.240: corrupted xattr block 95: invalid header [ 92.709418][ T4350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.240: bg 0: block 7: invalid block bitmap [ 92.722398][ T4350] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 92.735995][ T4350] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.240: corrupted xattr block 95: invalid header [ 92.749771][ T4350] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 92.764166][ T4350] EXT4-fs (loop3): 1 orphan inode deleted [ 92.770449][ T4350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.188019][ T4360] Zero length message leads to an empty skb [ 93.206282][ T4360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.225845][ T4360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.392990][ T4362] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 93.392990][ T4362] program syz.0.242 not setting count and/or reply_len properly [ 93.839073][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.913922][ T4368] loop1: detected capacity change from 0 to 512 [ 93.922016][ T4368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.937930][ T4375] loop3: detected capacity change from 0 to 128 [ 93.988004][ T4368] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.997137][ T4368] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.243: bg 0: block 248: padding at end of block bitmap is not set [ 94.677847][ T4377] loop2: detected capacity change from 0 to 512 [ 94.687233][ T4368] __quota_error: 89 callbacks suppressed [ 94.687248][ T4368] Quota error (device loop1): write_blk: dquota write failed [ 94.700422][ T4368] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 94.710328][ T4368] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.243: Failed to acquire dquot type 1 [ 94.722114][ T4368] EXT4-fs (loop1): 1 truncate cleaned up [ 94.760859][ T4379] loop3: detected capacity change from 0 to 128 [ 94.770598][ T4377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.783311][ T4377] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.807931][ T4379] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.048736][ T4385] loop0: detected capacity change from 0 to 512 [ 95.056162][ T4385] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.074715][ T4385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 95.082853][ T4385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.089909][ T4385] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.247: attempt to clear invalid blocks 1024 len 1 [ 95.104096][ T4385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.247: bg 0: block 361: padding at end of block bitmap is not set [ 95.120909][ T4385] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 95.130496][ T4385] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.247: invalid indirect mapped block 1811939328 (level 0) [ 95.145551][ T4385] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.247: invalid indirect mapped block 2185560079 (level 1) [ 95.159864][ T4385] EXT4-fs (loop0): 1 truncate cleaned up [ 95.170765][ T4385] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.247: dx entry: limit 0 != root limit 125 [ 95.182526][ T4385] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.247: Corrupt directory, running e2fsck is recommended [ 95.218843][ T29] audit: type=1326 audit(1741221980.503:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.247456][ T29] audit: type=1326 audit(1741221980.523:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.270850][ T29] audit: type=1326 audit(1741221980.523:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.294101][ T29] audit: type=1326 audit(1741221980.523:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.317388][ T29] audit: type=1326 audit(1741221980.523:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.340721][ T29] audit: type=1326 audit(1741221980.523:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.364012][ T29] audit: type=1326 audit(1741221980.523:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.387345][ T29] audit: type=1326 audit(1741221980.523:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 95.479346][ T4389] loop2: detected capacity change from 0 to 164 [ 95.486341][ T4389] iso9660: Unknown parameter '' [ 95.572979][ T4397] loop1: detected capacity change from 0 to 512 [ 95.583553][ T4397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.593018][ T4397] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.599903][ T4397] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.250: Failed to acquire dquot type 1 [ 95.895394][ T4397] EXT4-fs (loop1): 1 truncate cleaned up [ 96.105430][ T4356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.374431][ T4417] loop3: detected capacity change from 0 to 128 [ 96.746051][ T4426] loop3: detected capacity change from 0 to 512 [ 96.758873][ T4426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.770349][ T4426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.795922][ T4426] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.257: Failed to acquire dquot type 1 [ 96.809519][ T4426] EXT4-fs (loop3): 1 truncate cleaned up [ 98.831903][ T4435] loop4: detected capacity change from 0 to 512 [ 98.839172][ T3298] EXT4-fs unmount: 9 callbacks suppressed [ 98.839185][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.285575][ T4448] loop2: detected capacity change from 0 to 512 [ 99.320937][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.333619][ T4435] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.354616][ T4448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.364118][ T4448] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.373101][ T4448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.261: bg 0: block 248: padding at end of block bitmap is not set [ 99.388001][ T4448] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.261: Failed to acquire dquot type 1 [ 99.399631][ T4448] EXT4-fs (loop2): 1 truncate cleaned up [ 99.417452][ T4453] loop3: detected capacity change from 0 to 256 [ 99.488860][ T4453] FAT-fs (loop3): codepage cp1251 not found [ 99.685411][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.693822][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.745677][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.780196][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.338216][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.965472][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 100.965484][ T29] audit: type=1400 audit(1741221986.253:975): avc: denied { create } for pid=4475 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 101.006997][ T29] audit: type=1400 audit(1741221986.293:976): avc: denied { getopt } for pid=4475 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 101.027699][ T4476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4476 comm=syz.0.270 [ 101.040320][ T29] audit: type=1400 audit(1741221986.313:977): avc: denied { write } for pid=4475 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 101.066788][ T29] audit: type=1400 audit(1741221986.343:978): avc: denied { read } for pid=4475 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 101.086998][ T29] audit: type=1400 audit(1741221986.343:979): avc: denied { ioctl } for pid=4475 comm="syz.0.270" path="socket:[6688]" dev="sockfs" ino=6688 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.125134][ T29] audit: type=1400 audit(1741221986.403:980): avc: denied { append } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.170508][ T29] audit: type=1400 audit(1741221986.423:981): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.194658][ T29] audit: type=1400 audit(1741221986.423:982): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.218672][ T29] audit: type=1400 audit(1741221986.423:983): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.244273][ T29] audit: type=1400 audit(1741221986.443:984): avc: denied { execmem } for pid=4477 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.351799][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 101.360679][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 101.369874][ T4483] netlink: 'syz.4.273': attribute type 12 has an invalid length. [ 101.680444][ T4487] loop2: detected capacity change from 0 to 512 [ 101.872692][ T4487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.946759][ T4487] EXT4-fs (loop2): 1 truncate cleaned up [ 102.157095][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.176614][ T4494] loop3: detected capacity change from 0 to 512 [ 102.198810][ T4494] EXT4-fs: dax option not supported [ 102.223273][ T4502] loop0: detected capacity change from 0 to 128 [ 102.387871][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.398387][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.430468][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.440751][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.495592][ T4510] veth1_to_team: entered promiscuous mode [ 102.527658][ T4510] team0: Port device team_slave_1 removed [ 102.950289][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 102.959190][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 102.968328][ T4526] netlink: 'syz.2.286': attribute type 12 has an invalid length. [ 102.999293][ T4528] loop2: detected capacity change from 0 to 512 [ 103.028117][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.045780][ T4528] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.059853][ T4528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.287: bg 0: block 328: padding at end of block bitmap is not set [ 103.132248][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.574692][ T4541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.583214][ T4541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.730808][ T4547] loop1: detected capacity change from 0 to 512 [ 103.751652][ T4549] loop0: detected capacity change from 0 to 512 [ 103.815921][ T4549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.830637][ T4547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.843961][ T4549] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.855567][ T4549] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.292: Failed to acquire dquot type 1 [ 103.874397][ T4549] EXT4-fs (loop0): 1 truncate cleaned up [ 103.986463][ T4549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.036507][ T4547] EXT4-fs (loop1): 1 truncate cleaned up [ 104.157233][ T4547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.230087][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.311004][ T4560] loop3: detected capacity change from 0 to 512 [ 104.356426][ T4560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.453661][ T4560] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.496925][ T4560] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.294: bg 0: block 248: padding at end of block bitmap is not set [ 104.528106][ T4560] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.294: Failed to acquire dquot type 1 [ 104.553527][ T4560] EXT4-fs (loop3): 1 truncate cleaned up [ 105.113977][ T4570] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 105.186141][ T4560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.416752][ T4573] loop2: detected capacity change from 0 to 512 [ 105.427630][ T4573] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.438935][ T4573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 105.447077][ T4573] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.447412][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.470235][ T4573] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.297: attempt to clear invalid blocks 1024 len 1 [ 105.484602][ T4573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.297: bg 0: block 361: padding at end of block bitmap is not set [ 105.542832][ T4573] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 105.559894][ T4573] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.297: invalid indirect mapped block 1811939328 (level 0) [ 105.574389][ T4573] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.297: invalid indirect mapped block 2185560079 (level 1) [ 105.588462][ T4573] EXT4-fs (loop2): 1 truncate cleaned up [ 105.594580][ T4573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 105.610900][ T4573] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.297: dx entry: limit 0 != root limit 125 [ 105.622703][ T4573] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.297: Corrupt directory, running e2fsck is recommended [ 105.740129][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 105.749181][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 105.758107][ T4580] netlink: 'syz.1.298': attribute type 12 has an invalid length. [ 106.109834][ T4589] xt_socket: unknown flags 0x58 [ 106.186860][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 106.385069][ T4594] loop2: detected capacity change from 0 to 512 [ 106.394253][ T4594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.419704][ T4596] loop4: detected capacity change from 0 to 1024 [ 106.426969][ T4596] EXT4-fs: Ignoring removed orlov option [ 106.450275][ T4594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.465346][ T4596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.485848][ T4594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.304: bg 0: block 248: padding at end of block bitmap is not set [ 106.503267][ T4594] __quota_error: 75 callbacks suppressed [ 106.503281][ T4594] Quota error (device loop2): write_blk: dquota write failed [ 106.516402][ T4594] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.526360][ T4594] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.304: Failed to acquire dquot type 1 [ 106.541175][ T4594] EXT4-fs (loop2): 1 truncate cleaned up [ 106.552756][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.625866][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.686788][ T4601] veth1_to_team: entered promiscuous mode [ 107.754927][ T4601] team0: Port device team_slave_1 removed [ 107.955169][ T29] audit: type=1400 audit(1741221993.203:1056): avc: denied { checkpoint_restore } for pid=4602 comm="syz.1.307" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.003248][ T4611] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 108.003248][ T4611] program syz.2.308 not setting count and/or reply_len properly [ 108.142812][ T29] audit: type=1400 audit(1741221993.423:1057): avc: denied { create } for pid=4602 comm="syz.1.307" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.275041][ T29] audit: type=1400 audit(1741221994.553:1058): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.428026][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.467555][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 109.476400][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 109.485351][ T4622] netlink: 'syz.4.312': attribute type 12 has an invalid length. [ 109.536716][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.545787][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.704184][ T29] audit: type=1400 audit(1741221994.983:1059): avc: denied { create } for pid=4626 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.741929][ T4630] loop4: detected capacity change from 0 to 512 [ 109.800169][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.835943][ T4630] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.984860][ T4637] loop1: detected capacity change from 0 to 512 [ 109.995042][ T4637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.004374][ T4637] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.011180][ T4637] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.316: bg 0: block 248: padding at end of block bitmap is not set [ 110.215215][ T4637] Quota error (device loop1): write_blk: dquota write failed [ 110.222622][ T4637] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 110.232552][ T4637] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.316: Failed to acquire dquot type 1 [ 110.464325][ T4637] EXT4-fs (loop1): 1 truncate cleaned up [ 110.472131][ T4637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.579906][ T4643] loop2: detected capacity change from 0 to 1024 [ 110.586720][ T4643] EXT4-fs: Ignoring removed orlov option [ 110.630845][ T4643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.649349][ T29] audit: type=1400 audit(1741221995.933:1060): avc: denied { create } for pid=4640 comm="syz.2.317" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.669458][ T29] audit: type=1400 audit(1741221995.933:1061): avc: denied { read write open } for pid=4640 comm="syz.2.317" path="/72/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.779381][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.922258][ T4647] loop0: detected capacity change from 0 to 512 [ 111.725830][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.225339][ T4647] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.319: corrupted xattr block 95: invalid header [ 112.240719][ T4647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.319: bg 0: block 7: invalid block bitmap [ 112.253267][ T4647] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 112.262843][ T4647] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.319: corrupted xattr block 95: invalid header [ 112.276689][ T4647] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 112.285947][ T4647] EXT4-fs (loop0): 1 orphan inode deleted [ 112.292041][ T4647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.380751][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.392928][ T4650] loop1: detected capacity change from 0 to 2048 [ 112.448334][ T4650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.898449][ T4658] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 112.898449][ T4658] program syz.0.321 not setting count and/or reply_len properly [ 113.564492][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.608263][ T4666] loop2: detected capacity change from 0 to 512 [ 113.615701][ T4666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.625287][ T4666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.632162][ T4666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.324: bg 0: block 248: padding at end of block bitmap is not set [ 113.647636][ T4666] Quota error (device loop2): write_blk: dquota write failed [ 113.655133][ T4666] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 113.665101][ T4666] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.324: Failed to acquire dquot type 1 [ 113.681291][ T4666] EXT4-fs (loop2): 1 truncate cleaned up [ 113.687777][ T4666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.716203][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.928338][ T4677] loop3: detected capacity change from 0 to 256 [ 113.969683][ T4677] FAT-fs (loop3): codepage cp1251 not found [ 113.996125][ T29] audit: type=1400 audit(1741221999.273:1062): avc: denied { create } for pid=4676 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.015475][ T29] audit: type=1400 audit(1741221999.273:1063): avc: denied { write } for pid=4676 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.089603][ T4678] loop2: detected capacity change from 0 to 512 [ 114.110166][ T29] audit: type=1400 audit(1741221999.373:1064): avc: denied { cpu } for pid=4671 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.129347][ T29] audit: type=1400 audit(1741221999.373:1065): avc: denied { write } for pid=4671 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.331047][ T4678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.343592][ T4678] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.390415][ T4688] loop0: detected capacity change from 0 to 512 [ 114.397293][ T4688] ext4: Unknown parameter '0e230000 r--s 00000000 08:01 1924 /root/syz.ayz3nL (deleted) [ 114.397293][ T4688] 1b31820000-1b31e20000 rw-s 0./file0' [ 114.783159][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.872765][ T4691] loop2: detected capacity change from 0 to 512 [ 114.879829][ T4691] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.900397][ T4691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 114.908490][ T4691] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.915233][ T4691] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.329: attempt to clear invalid blocks 1024 len 1 [ 114.928609][ T4691] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.329: bg 0: block 361: padding at end of block bitmap is not set [ 114.968604][ T4691] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 114.977790][ T4691] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.329: invalid indirect mapped block 1811939328 (level 0) [ 114.992590][ T4691] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.329: invalid indirect mapped block 2185560079 (level 1) [ 115.009008][ T4691] EXT4-fs (loop2): 1 truncate cleaned up [ 115.015017][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 115.025478][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.036872][ T4691] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.329: dx entry: limit 0 != root limit 125 [ 115.048584][ T4691] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.329: Corrupt directory, running e2fsck is recommended [ 115.069614][ T29] audit: type=1326 audit(1741222000.353:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 115.093076][ T29] audit: type=1326 audit(1741222000.353:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 115.116457][ T29] audit: type=1326 audit(1741222000.353:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 115.139795][ T29] audit: type=1326 audit(1741222000.353:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 115.169662][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 115.178552][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 115.187451][ T4698] netlink: 'syz.1.330': attribute type 12 has an invalid length. [ 115.272029][ T4705] loop1: detected capacity change from 0 to 512 [ 115.286544][ T4706] loop0: detected capacity change from 0 to 164 [ 115.297390][ T4705] EXT4-fs: dax option not supported [ 115.305168][ T4706] iso9660: Unknown parameter '' [ 116.391613][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.647552][ T4713] loop1: detected capacity change from 0 to 512 [ 116.765870][ T4713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.775583][ T4713] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.782373][ T4713] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.337: Failed to acquire dquot type 1 [ 118.636052][ T4722] loop2: detected capacity change from 0 to 1024 [ 118.642872][ T4722] EXT4-fs: Ignoring removed orlov option [ 118.837339][ T4713] EXT4-fs (loop1): 1 truncate cleaned up [ 118.846696][ T4713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.950190][ T4722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.175932][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.495179][ T4731] loop3: detected capacity change from 0 to 128 [ 119.541058][ T4733] loop0: detected capacity change from 0 to 512 [ 119.586925][ T4731] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.611016][ T4733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.664681][ T4736] loop1: detected capacity change from 0 to 512 [ 119.721086][ T4731] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.759129][ T4736] EXT4-fs: dax option not supported [ 119.772106][ T4733] EXT4-fs (loop0): 1 truncate cleaned up [ 119.815519][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.948687][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.397357][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 120.397370][ T29] audit: type=1400 audit(1741222005.683:1114): avc: denied { execute } for pid=4730 comm="syz.3.342" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.448058][ T4745] loop0: detected capacity change from 0 to 512 [ 120.516285][ T29] audit: type=1400 audit(1741222005.713:1115): avc: denied { execute_no_trans } for pid=4730 comm="syz.3.342" path="/71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.612925][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 120.621814][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 120.630732][ T4747] netlink: 'syz.1.345': attribute type 12 has an invalid length. [ 120.674298][ T4745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.713864][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.837320][ T4745] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.925572][ T4745] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.344: bg 0: block 248: padding at end of block bitmap is not set [ 120.940634][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.997886][ T4745] Quota error (device loop0): write_blk: dquota write failed [ 121.006155][ T4745] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 121.016217][ T4745] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.344: Failed to acquire dquot type 1 [ 121.033643][ T4756] loop2: detected capacity change from 0 to 512 [ 121.035307][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.056069][ T4756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 121.066421][ T4756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 121.074439][ T4756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.081355][ T4756] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.347: attempt to clear invalid blocks 1024 len 1 [ 121.094726][ T4756] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.347: bg 0: block 361: padding at end of block bitmap is not set [ 121.109162][ T4756] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 121.118122][ T4756] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.347: invalid indirect mapped block 1811939328 (level 0) [ 121.132511][ T4756] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.347: invalid indirect mapped block 2185560079 (level 1) [ 121.158366][ T4756] EXT4-fs (loop2): 1 truncate cleaned up [ 121.164352][ T4756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 121.177604][ T4756] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.347: dx entry: limit 0 != root limit 125 [ 121.189307][ T4756] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.347: Corrupt directory, running e2fsck is recommended [ 121.212415][ T4745] EXT4-fs (loop0): 1 truncate cleaned up [ 121.347129][ T4745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.807468][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 121.897356][ T29] audit: type=1326 audit(1741222007.163:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 121.920833][ T29] audit: type=1326 audit(1741222007.163:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 121.944213][ T29] audit: type=1326 audit(1741222007.163:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 121.967788][ T29] audit: type=1326 audit(1741222007.163:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 121.991390][ T29] audit: type=1326 audit(1741222007.163:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 122.015240][ T29] audit: type=1326 audit(1741222007.163:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 122.060839][ T4768] loop3: detected capacity change from 0 to 164 [ 122.068093][ T4768] iso9660: Unknown parameter 'ÿÿÿÿ0000000000000000000901777777777777777777777' [ 122.152935][ T4770] loop2: detected capacity change from 0 to 1024 [ 122.159631][ T4770] EXT4-fs: Ignoring removed orlov option [ 122.312586][ T4770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.538744][ T4778] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 122.538744][ T4778] program syz.4.353 not setting count and/or reply_len properly [ 124.318209][ T4803] loop4: detected capacity change from 0 to 512 [ 124.362510][ T4805] loop3: detected capacity change from 0 to 164 [ 124.411002][ T4805] iso9660: Unknown parameter '' [ 124.447703][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.567788][ T4803] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.039265][ T4815] loop1: detected capacity change from 0 to 512 [ 125.083235][ T4815] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 125.114421][ T4815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 125.146556][ T4815] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.160460][ T4815] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.361: attempt to clear invalid blocks 1024 len 1 [ 125.178350][ T4815] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.361: bg 0: block 361: padding at end of block bitmap is not set [ 125.205199][ T4815] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 125.214318][ T4815] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.361: invalid indirect mapped block 1811939328 (level 0) [ 125.230898][ T4815] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.361: invalid indirect mapped block 2185560079 (level 1) [ 125.246164][ T4815] EXT4-fs (loop1): 1 truncate cleaned up [ 125.256339][ T4815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 125.287694][ T4815] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.361: dx entry: limit 0 != root limit 125 [ 125.299463][ T4815] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.361: Corrupt directory, running e2fsck is recommended [ 125.557327][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 125.590606][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 125.599470][ T4821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 125.608392][ T4821] netlink: 'syz.1.365': attribute type 12 has an invalid length. [ 125.870369][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.942956][ T4825] loop3: detected capacity change from 0 to 1024 [ 125.949601][ T4825] EXT4-fs: dax option not supported [ 126.085645][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 126.085660][ T29] audit: type=1326 audit(1741222011.373:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.172227][ T29] audit: type=1326 audit(1741222011.403:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.195693][ T29] audit: type=1326 audit(1741222011.403:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.219197][ T29] audit: type=1326 audit(1741222011.403:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.242564][ T29] audit: type=1326 audit(1741222011.403:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.265894][ T29] audit: type=1326 audit(1741222011.403:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.289379][ T29] audit: type=1326 audit(1741222011.403:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.312773][ T29] audit: type=1326 audit(1741222011.403:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.336146][ T29] audit: type=1326 audit(1741222011.403:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.359518][ T29] audit: type=1326 audit(1741222011.403:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b84d169 code=0x7ffc0000 [ 126.455508][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.487746][ T4829] loop1: detected capacity change from 0 to 164 [ 126.517619][ T4832] loop0: detected capacity change from 0 to 256 [ 126.528843][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 126.535061][ T4829] iso9660: Unknown parameter '' [ 126.537789][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 126.551535][ T4834] netlink: 'syz.2.366': attribute type 12 has an invalid length. [ 126.607034][ T4832] FAT-fs (loop0): codepage cp1251 not found [ 126.663303][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 126.691847][ T4842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4842 comm=syz.3.371 [ 126.704384][ T4842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4842 comm=syz.3.371 [ 126.719495][ T4844] loop0: detected capacity change from 0 to 164 [ 126.735395][ T4844] iso9660: Unknown parameter '' [ 127.076998][ T4862] loop2: detected capacity change from 0 to 512 [ 127.086025][ T4862] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 127.098235][ T4862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 127.106259][ T4862] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.113234][ T4862] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.375: attempt to clear invalid blocks 1024 len 1 [ 127.126485][ T4862] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.375: bg 0: block 361: padding at end of block bitmap is not set [ 127.140892][ T4862] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 127.149981][ T4862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.375: invalid indirect mapped block 1811939328 (level 0) [ 127.164325][ T4862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.375: invalid indirect mapped block 2185560079 (level 1) [ 127.178564][ T4862] EXT4-fs (loop2): 1 truncate cleaned up [ 127.184619][ T4862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 127.186022][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.208927][ T4862] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.375: dx entry: limit 0 != root limit 125 [ 127.220658][ T4862] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.375: Corrupt directory, running e2fsck is recommended [ 127.393871][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 127.402818][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 127.411725][ T4876] netlink: 'syz.3.381': attribute type 12 has an invalid length. [ 127.471108][ T4884] loop3: detected capacity change from 0 to 1024 [ 127.477987][ T4884] EXT4-fs: Ignoring removed orlov option [ 127.486567][ T4884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.490384][ T4886] veth1_to_team: entered promiscuous mode [ 127.517563][ T4886] team0: Port device team_slave_1 removed [ 128.648462][ T4899] loop1: detected capacity change from 0 to 512 [ 128.666306][ T4899] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.388: corrupted xattr block 95: invalid header [ 128.838192][ T4898] loop4: detected capacity change from 0 to 512 [ 128.856076][ T4899] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.388: bg 0: block 7: invalid block bitmap [ 128.870835][ T4899] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 128.879777][ T4899] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.388: corrupted xattr block 95: invalid header [ 128.952167][ T4899] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 128.953530][ T4902] loop0: detected capacity change from 0 to 512 [ 128.966069][ T4899] EXT4-fs (loop1): 1 orphan inode deleted [ 128.968969][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 128.973631][ T4899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.994126][ T4898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.006873][ T4898] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.007461][ T4902] EXT4-fs: dax option not supported [ 129.058773][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.204272][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.237462][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.246394][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.255279][ T4916] netlink: 'syz.4.394': attribute type 12 has an invalid length. [ 129.677803][ T4919] loop3: detected capacity change from 0 to 1024 [ 129.684417][ T4919] EXT4-fs: dax option not supported [ 129.788936][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.978565][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.994459][ T4941] loop2: detected capacity change from 0 to 512 [ 130.001158][ T4941] EXT4-fs: Ignoring removed oldalloc option [ 130.029002][ T4941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.048991][ T4941] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.059152][ T4941] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.399: Failed to acquire dquot type 1 [ 130.078748][ T4941] EXT4-fs (loop2): 1 truncate cleaned up [ 130.085367][ T4941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.123845][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.180419][ T4943] loop0: detected capacity change from 0 to 512 [ 130.201806][ T4943] EXT4-fs: dax option not supported [ 132.038742][ T4957] loop0: detected capacity change from 0 to 512 [ 132.081972][ T4957] EXT4-fs: Ignoring removed bh option [ 132.106110][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 132.115170][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 132.124099][ T4959] netlink: 'syz.4.407': attribute type 12 has an invalid length. [ 132.138551][ T4957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.161369][ T4957] EXT4-fs (loop0): 1 orphan inode deleted [ 132.167165][ T4957] EXT4-fs (loop0): 1 truncate cleaned up [ 132.174018][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 132.174032][ T29] audit: type=1400 audit(1741222017.453:1509): avc: denied { write } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.201879][ T29] audit: type=1400 audit(1741222017.453:1510): avc: denied { remove_name } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.224639][ T29] audit: type=1400 audit(1741222017.453:1511): avc: denied { rename } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.247032][ T29] audit: type=1400 audit(1741222017.453:1512): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.269582][ T29] audit: type=1400 audit(1741222017.453:1513): avc: denied { unlink } for pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.292090][ T29] audit: type=1400 audit(1741222017.453:1514): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.317012][ T4957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.374065][ T4968] loop4: detected capacity change from 0 to 512 [ 132.439005][ T29] audit: type=1400 audit(1741222017.723:1515): avc: denied { write } for pid=4955 comm="syz.0.405" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.462279][ T29] audit: type=1400 audit(1741222017.723:1516): avc: denied { ioctl } for pid=4955 comm="syz.0.405" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.502320][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.624795][ T4968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.638524][ T4968] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.858192][ T4927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.130149][ T4963] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 133.422787][ T4993] loop2: detected capacity change from 0 to 512 [ 133.460656][ T4993] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 133.507052][ T4993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 133.539702][ T4993] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.546428][ T4993] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.414: attempt to clear invalid blocks 1024 len 1 [ 133.561625][ T4985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.571114][ T4993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.414: bg 0: block 361: padding at end of block bitmap is not set [ 133.575179][ T4985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.594738][ T4993] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 133.606417][ T4993] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.414: invalid indirect mapped block 1811939328 (level 0) [ 133.624933][ T4993] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.414: invalid indirect mapped block 2185560079 (level 1) [ 133.641423][ T4993] EXT4-fs (loop2): 1 truncate cleaned up [ 133.648048][ T4993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 133.662130][ T4993] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.414: dx entry: limit 0 != root limit 125 [ 133.673834][ T4993] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.414: Corrupt directory, running e2fsck is recommended [ 134.026139][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 134.170332][ T5005] loop1: detected capacity change from 0 to 2048 [ 134.198444][ T5005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.528015][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.536521][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.572565][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.615544][ T5027] loop4: detected capacity change from 0 to 512 [ 134.622828][ T5027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.636117][ T5027] EXT4-fs (loop4): 1 truncate cleaned up [ 134.642501][ T5027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.672991][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.088917][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.362251][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.472248][ T5038] loop0: detected capacity change from 0 to 512 [ 135.479090][ T5038] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 135.499328][ T5038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 135.507452][ T5038] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.514199][ T5038] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.427: attempt to clear invalid blocks 1024 len 1 [ 135.527937][ T5038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.427: bg 0: block 361: padding at end of block bitmap is not set [ 135.542405][ T5038] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 135.551476][ T5038] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.427: invalid indirect mapped block 1811939328 (level 0) [ 135.566808][ T5038] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.427: invalid indirect mapped block 2185560079 (level 1) [ 135.581720][ T5038] EXT4-fs (loop0): 1 truncate cleaned up [ 135.588595][ T5038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 135.601852][ T5038] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.427: dx entry: limit 0 != root limit 125 [ 135.613628][ T5038] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.427: Corrupt directory, running e2fsck is recommended [ 136.212657][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 136.817982][ T5065] loop4: detected capacity change from 0 to 512 [ 136.857021][ T5065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.870647][ T5065] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.468911][ T5021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.644514][ T5080] loop3: detected capacity change from 0 to 1024 [ 137.651273][ T5080] EXT4-fs: Ignoring removed orlov option [ 137.660532][ T5080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.087531][ T5098] loop0: detected capacity change from 0 to 512 [ 140.611879][ T5098] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.980219][ T5098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 140.988372][ T5098] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.225813][ T5094] loop1: detected capacity change from 0 to 512 [ 141.244896][ T5098] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.442: attempt to clear invalid blocks 1024 len 1 [ 141.260549][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.270066][ T5098] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.442: bg 0: block 361: padding at end of block bitmap is not set [ 141.294757][ T5098] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 141.304502][ T5098] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.442: invalid indirect mapped block 1811939328 (level 0) [ 141.319359][ T5098] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.442: invalid indirect mapped block 2185560079 (level 1) [ 141.333757][ T5098] EXT4-fs (loop0): 1 truncate cleaned up [ 141.339348][ T5094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.339817][ T5098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 141.351902][ T5094] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.378957][ T5098] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.442: dx entry: limit 0 != root limit 125 [ 141.390665][ T5098] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.442: Corrupt directory, running e2fsck is recommended [ 141.458991][ T5108] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 141.458991][ T5108] program syz.2.444 not setting count and/or reply_len properly [ 141.616957][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 141.995660][ T29] audit: type=1326 audit(1741222027.273:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.042254][ T5121] loop3: detected capacity change from 0 to 164 [ 142.057607][ T5121] iso9660: Unknown parameter '' [ 142.081153][ T29] audit: type=1326 audit(1741222027.303:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.104521][ T29] audit: type=1326 audit(1741222027.303:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.127888][ T29] audit: type=1326 audit(1741222027.303:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.151234][ T29] audit: type=1326 audit(1741222027.303:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.174527][ T29] audit: type=1326 audit(1741222027.303:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.197829][ T29] audit: type=1326 audit(1741222027.303:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.221140][ T29] audit: type=1326 audit(1741222027.303:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.244498][ T29] audit: type=1326 audit(1741222027.303:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.267774][ T29] audit: type=1326 audit(1741222027.303:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 142.312948][ T5123] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 142.312948][ T5123] program syz.0.446 not setting count and/or reply_len properly [ 142.330618][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.487791][ T5133] loop3: detected capacity change from 0 to 164 [ 142.494670][ T5133] iso9660: Unknown parameter '' [ 142.520739][ T5136] loop2: detected capacity change from 0 to 1024 [ 142.527524][ T5136] EXT4-fs: Ignoring removed orlov option [ 142.546506][ T5136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.651199][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.272488][ T5153] usb usb8: usbfs: process 5153 (syz.0.458) did not claim interface 0 before use [ 143.394788][ T5161] loop0: detected capacity change from 0 to 164 [ 143.401577][ T5161] iso9660: Unknown parameter '' [ 143.546253][ T5168] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 143.546253][ T5168] program syz.0.463 not setting count and/or reply_len properly [ 143.582890][ T5171] loop3: detected capacity change from 0 to 512 [ 143.606646][ T5171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.619203][ T5171] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.672740][ T5179] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 143.672740][ T5179] program syz.1.465 not setting count and/or reply_len properly [ 143.715955][ T5180] loop4: detected capacity change from 0 to 512 [ 143.754705][ T5180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.810936][ T5180] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.837883][ T5180] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.464: bg 0: block 248: padding at end of block bitmap is not set [ 143.892650][ T5180] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.464: Failed to acquire dquot type 1 [ 143.942795][ T5180] EXT4-fs (loop4): 1 truncate cleaned up [ 143.969423][ T5180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.479441][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 144.488472][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 144.497435][ T5189] netlink: 'syz.0.466': attribute type 12 has an invalid length. [ 144.578370][ T5191] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 144.578370][ T5191] program syz.0.467 not setting count and/or reply_len properly [ 144.810209][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.407899][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.544663][ T5215] loop2: detected capacity change from 0 to 1024 [ 145.551750][ T5215] EXT4-fs: Ignoring removed orlov option [ 145.562546][ T5215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.024211][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.179600][ T5230] loop3: detected capacity change from 0 to 164 [ 146.224283][ T5230] iso9660: Unknown parameter 'ÿÿÿÿ0000000000000000001001777777777777777777777' [ 146.477907][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 146.487261][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 146.497700][ T5237] netlink: 'syz.4.477': attribute type 12 has an invalid length. [ 146.753261][ T5250] loop0: detected capacity change from 0 to 512 [ 146.761399][ T5250] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.831614][ T5250] EXT4-fs (loop0): 1 truncate cleaned up [ 146.841085][ T5250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.953158][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.981327][ T5254] loop4: detected capacity change from 0 to 128 [ 147.071172][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 147.071206][ T29] audit: type=1326 audit(1741222032.353:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.100788][ T29] audit: type=1326 audit(1741222032.353:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.124353][ T5258] loop0: detected capacity change from 0 to 512 [ 147.152387][ T5258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.163752][ T29] audit: type=1326 audit(1741222032.433:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.187719][ T29] audit: type=1326 audit(1741222032.433:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.211440][ T29] audit: type=1326 audit(1741222032.433:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.234811][ T29] audit: type=1326 audit(1741222032.433:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.258231][ T29] audit: type=1326 audit(1741222032.433:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.281591][ T29] audit: type=1326 audit(1741222032.433:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.281688][ T5266] loop4: detected capacity change from 0 to 512 [ 147.305080][ T29] audit: type=1326 audit(1741222032.433:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.305108][ T29] audit: type=1326 audit(1741222032.433:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 147.362310][ T5258] EXT4-fs (loop0): 1 truncate cleaned up [ 147.368725][ T5258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.403982][ T5266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.404379][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.451521][ T5266] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.459402][ T5266] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.488: bg 0: block 248: padding at end of block bitmap is not set [ 147.503953][ T5266] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.488: Failed to acquire dquot type 1 [ 147.533270][ T5273] loop0: detected capacity change from 0 to 1024 [ 147.539936][ T5273] EXT4-fs: Ignoring removed orlov option [ 147.552067][ T5273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.571254][ T5266] EXT4-fs (loop4): 1 truncate cleaned up [ 147.580142][ T5272] loop1: detected capacity change from 0 to 164 [ 147.587058][ T5272] iso9660: Unknown parameter 'ÿÿÿÿ0000000000000000001001777777777777777777777' [ 147.607178][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.797882][ T5281] loop3: detected capacity change from 0 to 512 [ 147.826755][ T5281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.839492][ T5281] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.468260][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.486754][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.539202][ T5292] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 148.539202][ T5292] program syz.3.496 not setting count and/or reply_len properly [ 148.776628][ T5300] loop2: detected capacity change from 0 to 512 [ 148.850063][ T5300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.880438][ T5300] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.960135][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 148.997989][ T5307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5307 comm=syz.1.499 [ 149.010449][ T5307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5307 comm=syz.1.499 [ 149.183001][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.522292][ T5313] loop4: detected capacity change from 0 to 512 [ 149.678637][ T5313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.691226][ T5313] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.328598][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.427609][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.468621][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.448275][ T5336] loop2: detected capacity change from 0 to 512 [ 151.527598][ T5338] loop3: detected capacity change from 0 to 512 [ 152.464488][ T5337] loop0: detected capacity change from 0 to 1024 [ 152.471195][ T5337] EXT4-fs: Ignoring removed orlov option [ 152.518055][ T5336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.543198][ T5336] EXT4-fs (loop2): orphan cleanup on readonly fs [ 152.554688][ T5337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.579399][ T5338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.589320][ T5336] __quota_error: 81 callbacks suppressed [ 152.589335][ T5336] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 152.604410][ T5336] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 152.613869][ T5336] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.504: Failed to acquire dquot type 1 [ 152.768623][ T5336] EXT4-fs (loop2): 1 truncate cleaned up [ 152.775018][ T5336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.819771][ T5338] EXT4-fs (loop3): orphan cleanup on readonly fs [ 152.973887][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.120757][ T5338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.505: bg 0: block 248: padding at end of block bitmap is not set [ 153.184738][ T5338] Quota error (device loop3): write_blk: dquota write failed [ 153.192272][ T5338] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 153.202225][ T5338] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.505: Failed to acquire dquot type 1 [ 153.227664][ T5338] EXT4-fs (loop3): 1 truncate cleaned up [ 153.239564][ T5338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.196468][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.284996][ T29] audit: type=1326 audit(1741222039.563:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 154.308423][ T29] audit: type=1326 audit(1741222039.563:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 154.331749][ T29] audit: type=1326 audit(1741222039.563:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb22723d169 code=0x7ffc0000 [ 154.478700][ T29] audit: type=1400 audit(1741222039.573:1973): avc: denied { mounton } for pid=5349 comm="syz.2.508" path="/106/file0" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.560366][ T29] audit: type=1326 audit(1741222039.813:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762244d169 code=0x7ffc0000 [ 154.584268][ T29] audit: type=1326 audit(1741222039.813:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762244d169 code=0x7ffc0000 [ 154.691931][ T5364] loop4: detected capacity change from 0 to 512 [ 154.735476][ T5364] EXT4-fs: Ignoring removed bh option [ 154.745231][ T5364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.798438][ T5364] EXT4-fs (loop4): 1 orphan inode deleted [ 154.804278][ T5364] EXT4-fs (loop4): 1 truncate cleaned up [ 154.818725][ T5364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.900694][ T5367] loop2: detected capacity change from 0 to 164 [ 154.907423][ T5367] iso9660: Unknown parameter '' [ 155.060599][ T5373] loop0: detected capacity change from 0 to 1024 [ 155.067555][ T5373] EXT4-fs: Ignoring removed orlov option [ 155.075299][ T5373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.271637][ T5378] loop2: detected capacity change from 0 to 164 [ 155.311723][ T5378] iso9660: Unknown parameter 'ÿÿÿÿ0000000000000000001001777777777777777777777' [ 155.898074][ T5382] loop2: detected capacity change from 0 to 512 [ 156.005879][ T5382] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 156.014394][ T5382] EXT4-fs (loop2): 1 truncate cleaned up [ 156.022579][ T5382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.235446][ T5342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.510493][ T5386] loop1: detected capacity change from 0 to 512 [ 156.536167][ T5386] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.519: corrupted xattr block 95: invalid header [ 156.558394][ T5386] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.519: bg 0: block 7: invalid block bitmap [ 156.584196][ T5386] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 156.603221][ T5386] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.519: corrupted xattr block 95: invalid header [ 156.643001][ T5386] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 156.671942][ T5386] EXT4-fs (loop1): 1 orphan inode deleted [ 156.690711][ T5386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.807079][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.361901][ T5342] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 157.380060][ T5389] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 157.380060][ T5389] program syz.3.520 not setting count and/or reply_len properly [ 157.611688][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.771985][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.782333][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.833176][ T5400] loop2: detected capacity change from 0 to 512 [ 157.842386][ T5400] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.873294][ T5400] EXT4-fs (loop2): 1 truncate cleaned up [ 157.880552][ T5400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.928274][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 157.928290][ T29] audit: type=1400 audit(1741222043.143:2182): avc: denied { ioctl } for pid=5394 comm="syz.1.521" path="socket:[9645]" dev="sockfs" ino=9645 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.158624][ T5411] loop4: detected capacity change from 0 to 512 [ 158.180201][ T5411] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.224469][ T5406] loop0: detected capacity change from 0 to 2048 [ 159.122342][ T29] audit: type=1326 audit(1741222044.403:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.145748][ T29] audit: type=1326 audit(1741222044.403:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.190045][ T5426] loop2: detected capacity change from 0 to 1024 [ 159.196753][ T5426] EXT4-fs: Ignoring removed orlov option [ 159.248835][ T5426] EXT4-fs mount: 4 callbacks suppressed [ 159.248848][ T5426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.286834][ T5425] loop3: detected capacity change from 0 to 164 [ 159.321696][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.364671][ T5425] iso9660: Unknown parameter '' [ 159.427358][ T5432] loop4: detected capacity change from 0 to 2048 [ 159.433834][ T29] audit: type=1326 audit(1741222044.483:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.457165][ T29] audit: type=1326 audit(1741222044.483:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.480505][ T29] audit: type=1326 audit(1741222044.483:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.503812][ T29] audit: type=1326 audit(1741222044.483:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.527173][ T29] audit: type=1326 audit(1741222044.483:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.550469][ T29] audit: type=1326 audit(1741222044.483:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.573819][ T29] audit: type=1326 audit(1741222044.483:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cc1d169 code=0x7ffc0000 [ 159.809568][ T5432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.084057][ T5439] loop3: detected capacity change from 0 to 164 [ 160.123500][ T5439] iso9660: Unknown parameter '' [ 160.360032][ T5444] loop3: detected capacity change from 0 to 512 [ 160.404982][ T5444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.442490][ T5444] EXT4-fs (loop3): 1 truncate cleaned up [ 160.448688][ T5444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.657667][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.028157][ T5458] loop1: detected capacity change from 0 to 512 [ 161.078459][ T5458] EXT4-fs: Ignoring removed bh option [ 161.137309][ T5458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.167149][ T5458] EXT4-fs (loop1): 1 orphan inode deleted [ 161.172909][ T5458] EXT4-fs (loop1): 1 truncate cleaned up [ 161.247412][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.898335][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.940489][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 161.949312][ T5466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 161.958293][ T5466] netlink: 'syz.0.542': attribute type 12 has an invalid length. [ 161.984807][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.008526][ T5469] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 162.008526][ T5469] program syz.4.543 not setting count and/or reply_len properly [ 162.166098][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.270990][ T5478] loop0: detected capacity change from 0 to 128 [ 162.347706][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 162.356597][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 162.365544][ T5482] netlink: 'syz.0.546': attribute type 12 has an invalid length. [ 162.481366][ T5487] loop3: detected capacity change from 0 to 512 [ 162.499505][ T5487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.517238][ T5487] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.524409][ T5487] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.547: Failed to acquire dquot type 1 [ 162.544691][ T5487] EXT4-fs (loop3): 1 truncate cleaned up [ 162.551762][ T5487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.261200][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 163.261215][ T29] audit: type=1326 audit(1741222048.543:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.348585][ T29] audit: type=1326 audit(1741222048.583:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.372019][ T29] audit: type=1326 audit(1741222048.583:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.395464][ T29] audit: type=1326 audit(1741222048.583:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.418770][ T29] audit: type=1326 audit(1741222048.583:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.442139][ T29] audit: type=1326 audit(1741222048.583:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.465612][ T29] audit: type=1326 audit(1741222048.583:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.488941][ T29] audit: type=1326 audit(1741222048.583:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.512169][ T29] audit: type=1326 audit(1741222048.583:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.535543][ T29] audit: type=1326 audit(1741222048.583:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c6532d169 code=0x7ffc0000 [ 163.619843][ T5492] loop2: detected capacity change from 0 to 164 [ 163.626709][ T5492] iso9660: Unknown parameter '' [ 164.951592][ T5510] loop4: detected capacity change from 0 to 512 [ 165.003563][ T5513] loop2: detected capacity change from 0 to 512 [ 165.033397][ T5342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 165.058431][ T5513] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 165.358159][ T5513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 165.366272][ T5513] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.385077][ T5513] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.552: attempt to clear invalid blocks 1024 len 1 [ 165.398464][ T5513] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.552: bg 0: block 361: padding at end of block bitmap is not set [ 165.412976][ T5513] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 165.422160][ T5513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.552: invalid indirect mapped block 1811939328 (level 0) [ 165.455014][ T5510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.929921][ T5513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.552: invalid indirect mapped block 2185560079 (level 1) [ 165.944181][ T5513] EXT4-fs (loop2): 1 truncate cleaned up [ 165.951098][ T5513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 165.964649][ T5513] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.552: dx entry: limit 0 != root limit 125 [ 165.976346][ T5513] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.552: Corrupt directory, running e2fsck is recommended [ 166.015810][ T5510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 166.022605][ T5510] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.554: Failed to acquire dquot type 1 [ 166.133739][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 166.185953][ T5510] EXT4-fs (loop4): 1 truncate cleaned up [ 166.192925][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.302722][ T5512] loop0: detected capacity change from 0 to 512 [ 166.328571][ T5512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.337855][ T5512] EXT4-fs (loop0): orphan cleanup on readonly fs [ 166.344518][ T5512] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.555: bg 0: block 248: padding at end of block bitmap is not set [ 166.359645][ T5512] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.555: Failed to acquire dquot type 1 [ 166.372104][ T5512] EXT4-fs (loop0): 1 truncate cleaned up [ 166.409686][ T5510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.429449][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.441200][ T5520] loop2: detected capacity change from 0 to 128 [ 166.455303][ T5512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.705857][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.790998][ T5524] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 166.790998][ T5524] program syz.2.561 not setting count and/or reply_len properly [ 167.136899][ T5534] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 167.136899][ T5534] program syz.1.558 not setting count and/or reply_len properly [ 167.153895][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.220038][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 167.229003][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 167.237926][ T5538] netlink: 'syz.0.562': attribute type 12 has an invalid length. [ 167.293483][ T5542] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 167.293483][ T5542] program syz.3.563 not setting count and/or reply_len properly [ 167.339322][ T5536] loop4: detected capacity change from 0 to 512 [ 167.350516][ T5536] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 167.361546][ T5536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 167.369746][ T5536] EXT4-fs (loop4): orphan cleanup on readonly fs [ 167.377326][ T5536] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.559: attempt to clear invalid blocks 1024 len 1 [ 167.390844][ T5536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.559: bg 0: block 361: padding at end of block bitmap is not set [ 167.405701][ T5536] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 167.414671][ T5536] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.559: invalid indirect mapped block 1811939328 (level 0) [ 167.429264][ T5536] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.559: invalid indirect mapped block 2185560079 (level 1) [ 167.443603][ T5536] EXT4-fs (loop4): 1 truncate cleaned up [ 167.449717][ T5536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 167.840377][ T5560] xt_socket: unknown flags 0x58 [ 167.979425][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 168.643634][ T5572] loop4: detected capacity change from 0 to 512 [ 168.668451][ T5572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.708658][ T5572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.715832][ T5572] __quota_error: 66 callbacks suppressed [ 168.715846][ T5572] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 168.730941][ T5572] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 168.740316][ T5572] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.570: Failed to acquire dquot type 1 [ 168.754253][ T5572] EXT4-fs (loop4): 1 truncate cleaned up [ 168.760792][ T5572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.067945][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 169.081772][ T5582] loop2: detected capacity change from 0 to 512 [ 169.091389][ T5582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.105782][ T5578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5578 comm=syz.0.572 [ 169.118177][ T5578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5578 comm=syz.0.572 [ 169.133255][ T5580] loop1: detected capacity change from 0 to 512 [ 169.140400][ T5580] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 169.166225][ T5580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 169.174380][ T5580] EXT4-fs (loop1): orphan cleanup on readonly fs [ 169.181121][ T5580] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.568: attempt to clear invalid blocks 1024 len 1 [ 169.196986][ T5580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.568: bg 0: block 361: padding at end of block bitmap is not set [ 169.212804][ T5580] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 169.223015][ T5580] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.568: invalid indirect mapped block 1811939328 (level 0) [ 169.237288][ T5580] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.568: invalid indirect mapped block 2185560079 (level 1) [ 169.251618][ T5580] EXT4-fs (loop1): 1 truncate cleaned up [ 169.257594][ T5580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 169.270876][ T5580] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.568: dx entry: limit 0 != root limit 125 [ 169.282761][ T5580] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.568: Corrupt directory, running e2fsck is recommended [ 169.300100][ T5582] EXT4-fs (loop2): 1 truncate cleaned up [ 169.309253][ T5582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.339422][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.458197][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 169.470347][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 169.479298][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 169.488220][ T5589] netlink: 'syz.2.575': attribute type 12 has an invalid length. [ 170.023850][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.066738][ T3298] ================================================================== [ 170.074861][ T3298] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 170.082339][ T3298] [ 170.084658][ T3298] read-write to 0xffff88811ee07270 of 8 bytes by task 5601 on cpu 1: [ 170.092722][ T3298] inode_add_bytes+0x45/0xd0 [ 170.097341][ T3298] __dquot_alloc_space+0x181/0x8a0 [ 170.102467][ T3298] shmem_inode_acct_blocks+0x124/0x230 [ 170.107941][ T3298] shmem_get_folio_gfp+0x5be/0xd90 [ 170.113070][ T3298] shmem_write_begin+0xa2/0x180 [ 170.117917][ T3298] generic_perform_write+0x1a8/0x4a0 [ 170.123209][ T3298] shmem_file_write_iter+0xc2/0xe0 [ 170.128416][ T3298] __kernel_write_iter+0x247/0x4c0 [ 170.133548][ T3298] dump_user_range+0x3ac/0x550 [ 170.138331][ T3298] elf_core_dump+0x1d17/0x1ea0 [ 170.143107][ T3298] do_coredump+0x17fe/0x1f40 [ 170.147701][ T3298] get_signal+0xd4f/0x1000 [ 170.152118][ T3298] arch_do_signal_or_restart+0x95/0x4b0 [ 170.157673][ T3298] irqentry_exit_to_user_mode+0xa7/0x120 [ 170.163312][ T3298] irqentry_exit+0x12/0x50 [ 170.167732][ T3298] asm_exc_page_fault+0x26/0x30 [ 170.172684][ T3298] [ 170.175002][ T3298] read to 0xffff88811ee07270 of 8 bytes by task 3298 on cpu 0: [ 170.182543][ T3298] generic_fillattr+0x274/0x330 [ 170.187411][ T3298] shmem_getattr+0x17b/0x200 [ 170.192009][ T3298] vfs_getattr+0x172/0x1b0 [ 170.196437][ T3298] vfs_statx+0x12d/0x320 [ 170.200678][ T3298] vfs_fstatat+0xe4/0x130 [ 170.205006][ T3298] __se_sys_newfstatat+0x58/0x260 [ 170.210033][ T3298] __x64_sys_newfstatat+0x55/0x70 [ 170.215061][ T3298] x64_sys_call+0x236d/0x2dc0 [ 170.219747][ T3298] do_syscall_64+0xc9/0x1c0 [ 170.224260][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.230162][ T3298] [ 170.232477][ T3298] value changed: 0x000000000000df00 -> 0x000000000000df18 [ 170.239578][ T3298] [ 170.241893][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 170.248053][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 170.258914][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.268980][ T3298] ================================================================== [ 170.336236][ T5605] loop2: detected capacity change from 0 to 1024 [ 170.343004][ T5605] EXT4-fs: Ignoring removed orlov option [ 170.407250][ T5608] loop4: detected capacity change from 0 to 512 [ 170.427495][ T5605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.498157][ T5608] EXT4-fs: Ignoring removed bh option [ 170.518637][ T5608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.570252][ T5608] EXT4-fs (loop4): 1 orphan inode deleted [ 170.576156][ T5608] EXT4-fs (loop4): 1 truncate cleaned up [ 170.592532][ T5608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.395361][ T5585] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 172.912187][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.439121][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.