last executing test programs: 2.720669543s ago: executing program 1 (id=7725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2.50798218s ago: executing program 1 (id=7735): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=',-\x15*\x00', &(0x7f0000000440)='$\b&U0\xb5i\x16\xca\xcd\x01\xf8\x13x\\\x16\x0e\x8c\x1b\xc1rv\xa5k|\x92*ON\x9d\xf21KH\xfcx\xdayx\xe4\xf8\x86\xc3\xf1\xb4\x94/9\',\xf7uX/W\xcc5\a\x9e^\x90\xa8\xaf\xda\x97\xe0M]\xcd\xe2\x17\'\xbf\x04i\xcakbA\xf6\xd2P\xa5H\xf0\xa0B=\x01\x00\x86%\x97\xcb\xbcWo\xf2\xa6', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) close(r0) 2.445249295s ago: executing program 1 (id=7738): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) 2.436995716s ago: executing program 1 (id=7740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeef, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442ac39d59aa0370071b34de016c447989a", 0x4d}], 0x1}, 0x20000044) socketpair$unix(0x1, 0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) 2.387028539s ago: executing program 1 (id=7743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x28, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfc, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 2.315323505s ago: executing program 1 (id=7747): syz_usb_connect(0x2, 0x60, &(0x7f0000000080)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) unshare(0x60480) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.028650728s ago: executing program 0 (id=7757): openat$urandom(0xffffffffffffff9c, 0x0, 0x880, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000940)) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd102000a"], 0x1028}}, 0x20000050) 1.028516508s ago: executing program 2 (id=7758): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 856.430752ms ago: executing program 0 (id=7764): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6108000000383afffc000000000000000000000000000001ff020000000000000000000000000001"], 0x0) 798.486316ms ago: executing program 4 (id=7765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 775.178758ms ago: executing program 2 (id=7766): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) 774.679808ms ago: executing program 0 (id=7767): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 733.598402ms ago: executing program 4 (id=7768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 683.454606ms ago: executing program 0 (id=7770): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) 683.078946ms ago: executing program 4 (id=7771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) 682.638566ms ago: executing program 0 (id=7773): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 649.226308ms ago: executing program 0 (id=7775): r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000021900000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) 648.806038ms ago: executing program 2 (id=7777): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}]}}}], 0x18}}], 0x2, 0x44004) 629.67499ms ago: executing program 2 (id=7778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 616.583991ms ago: executing program 2 (id=7780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 615.454941ms ago: executing program 4 (id=7781): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) signalfd(r1, 0x0, 0x0) 546.264286ms ago: executing program 4 (id=7783): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 537.829087ms ago: executing program 2 (id=7784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)={0x20, r7, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x71ee33ae2e41d682}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240041c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "18f2"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 527.902208ms ago: executing program 4 (id=7785): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 381.87576ms ago: executing program 3 (id=7791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000400000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x2004c804) 184.920495ms ago: executing program 3 (id=7792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x200400) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x44000840) 165.746157ms ago: executing program 3 (id=7793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 94.271882ms ago: executing program 3 (id=7794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000500000000000000000000baa90ffdfbb2b800660f648cdebbdc7444cf8dc191d4fe459f26cdafd48d0207c776533dda9965ec6535e9144788b1d69acecb7f835487e3acd2e3a14938fa140f3b5f47cf78ea983f6b67719d9c9ca4b74156c6305c7d8083b518462628681652ae58d281c0fb551e502f66401e69f1"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) unshare(0x20000400) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 10.292149ms ago: executing program 3 (id=7795): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 0s ago: executing program 3 (id=7796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) 0s ago: executing program 3 (id=7797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x9}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x6, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) kernel console output (not intermixed with test programs): t filesystem [ 1977.862638][T11344] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1977.862737][T27843] EXT4-fs (loop2): 1 orphan inode deleted [ 1977.871332][T11344] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1977.877036][T27843] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1977.920282][T27845] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.6889: Invalid block bitmap block 0 in block_group 0 [ 1977.933984][T27845] Quota error (device loop0): write_blk: dquota write failed [ 1977.941985][T27845] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1977.952363][T27845] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.6889: Failed to acquire dquot type 0 [ 1977.963889][T27845] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.6889: Freeing blocks not in datazone - block = 0, count = 4096 [ 1977.977654][T27845] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6889: Invalid inode bitmap blk 0 in block_group 0 [ 1977.990455][T27845] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1977.991836][ T301] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1977.999117][T27845] EXT4-fs (loop0): 1 orphan inode deleted [ 1978.013395][T27845] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1978.027022][ T301] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1978.100648][T27845] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1978.973460][T27862] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1979.031381][T27860] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.6891: Invalid block bitmap block 0 in block_group 0 [ 1979.047530][T27860] Quota error (device loop3): write_blk: dquota write failed [ 1979.055065][T27860] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1979.065199][T27860] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.6891: Failed to acquire dquot type 0 [ 1979.078856][T27860] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.6891: Freeing blocks not in datazone - block = 0, count = 4096 [ 1979.098807][T27860] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.6891: Invalid inode bitmap blk 0 in block_group 0 [ 1979.112012][T25437] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1979.121857][T27860] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1979.130975][T27860] EXT4-fs (loop3): 1 orphan inode deleted [ 1979.136728][T27860] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1979.155398][T25437] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 1979.582400][T27869] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1979.775819][T27871] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1979.968333][T27881] hub 8-0:1.0: USB hub found [ 1979.973428][T27881] hub 8-0:1.0: 1 port detected [ 1980.784168][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1981.269324][T27878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1981.278344][T27878] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1981.507404][T27892] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1982.074902][T27901] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1982.426366][T27902] exfat: Unknown parameter 'fsmagic' [ 1983.542555][T27910] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.6904: Invalid block bitmap block 0 in block_group 0 [ 1983.556902][T27910] Quota error (device loop2): write_blk: dquota write failed [ 1983.564397][T27910] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1983.574387][T27910] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.6904: Failed to acquire dquot type 0 [ 1983.586356][T27910] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.6904: Freeing blocks not in datazone - block = 0, count = 4096 [ 1983.849874][T27904] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1983.858964][T27904] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1983.873710][T27910] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.6904: Invalid inode bitmap blk 0 in block_group 0 [ 1983.886647][T27910] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1983.895795][ T301] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1983.904549][T27910] EXT4-fs (loop2): 1 orphan inode deleted [ 1983.910427][T27910] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1983.951543][ T301] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1983.960591][T27899] xt_hashlimit: max too large, truncated to 1048576 [ 1983.983336][T27910] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1983.990486][T27910] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1984.019214][T27919] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.6905: Invalid block bitmap block 0 in block_group 0 [ 1984.038463][T27919] Quota error (device loop4): write_blk: dquota write failed [ 1984.045992][T27919] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1984.056052][T27919] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.6905: Failed to acquire dquot type 0 [ 1984.068282][T27919] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.6905: Freeing blocks not in datazone - block = 0, count = 4096 [ 1984.081996][T27919] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.6905: Invalid inode bitmap blk 0 in block_group 0 [ 1984.094988][T27919] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1984.095171][T11344] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1984.104139][T27919] EXT4-fs (loop4): 1 orphan inode deleted [ 1984.116231][T11344] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1984.118345][T27919] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1984.136552][T27899] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1984.758367][T27932] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.6908: Invalid block bitmap block 0 in block_group 0 [ 1984.773086][T27932] Quota error (device loop2): write_blk: dquota write failed [ 1984.780681][T27932] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1984.790746][T27932] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.6908: Failed to acquire dquot type 0 [ 1984.803777][T27932] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.6908: Freeing blocks not in datazone - block = 0, count = 4096 [ 1984.818043][T27932] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.6908: Invalid inode bitmap blk 0 in block_group 0 [ 1984.831669][T27932] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1984.840636][T11344] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1984.849423][T11344] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1984.861104][T27932] EXT4-fs (loop2): 1 orphan inode deleted [ 1984.866883][T27932] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1984.913040][T27932] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1985.330892][T27943] exfat: Unknown parameter 'fsmagic' [ 1985.755822][T27954] hub 8-0:1.0: USB hub found [ 1985.760825][T27954] hub 8-0:1.0: 1 port detected [ 1985.973239][T27955] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1986.235851][T27960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1986.429818][T27943] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1986.736218][T27962] attempt to access beyond end of device [ 1986.736218][T27962] loop0: rw=2049, want=1041, limit=128 [ 1986.889848][T27962] attempt to access beyond end of device [ 1986.889848][T27962] loop0: rw=524288, want=369, limit=128 [ 1986.911296][T27962] attempt to access beyond end of device [ 1986.911296][T27962] loop0: rw=0, want=153, limit=128 [ 1986.922042][T27962] attempt to access beyond end of device [ 1986.922042][T27962] loop0: rw=0, want=153, limit=128 [ 1986.932974][T27962] attempt to access beyond end of device [ 1986.932974][T27962] loop0: rw=0, want=153, limit=128 [ 1987.830920][T27979] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1988.641843][T27980] exfat: Unknown parameter 'fsmagic' [ 1988.779249][T27980] xt_hashlimit: max too large, truncated to 1048576 [ 1988.921941][T27980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1989.563786][T27993] exfat: Unknown parameter 'fsmagic' [ 1989.573781][T27993] xt_hashlimit: max too large, truncated to 1048576 [ 1990.370332][T28000] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1990.423693][T27982] EXT4-fs: failed to create workqueue [ 1990.439436][T27982] EXT4-fs (loop4): mount failed [ 1990.700283][T28013] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1992.221260][T28022] overlayfs: failed to resolve './file0': -2 [ 1992.399007][T28026] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1992.451873][T28020] exfat: Unknown parameter 'fsmagic' [ 1992.512782][T28020] xt_hashlimit: max too large, truncated to 1048576 [ 1992.712317][T28020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1993.489641][T28037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1994.063561][T28030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1994.072577][T28030] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1994.465035][T28047] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.6936: Invalid block bitmap block 0 in block_group 0 [ 1994.479132][T28047] Quota error (device loop0): write_blk: dquota write failed [ 1994.486615][T28047] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1994.496631][T28047] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.6936: Failed to acquire dquot type 0 [ 1994.513048][T28055] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1994.518705][T28047] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.6936: Freeing blocks not in datazone - block = 0, count = 4096 [ 1994.541364][T28047] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6936: Invalid inode bitmap blk 0 in block_group 0 [ 1994.554745][T28047] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1994.563784][ T301] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1994.573236][T28047] EXT4-fs (loop0): 1 orphan inode deleted [ 1994.578994][T28047] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1994.592551][ T301] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1994.615579][T28047] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1994.714206][T28056] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.6934: Invalid block bitmap block 0 in block_group 0 [ 1994.728621][T28056] Quota error (device loop4): write_blk: dquota write failed [ 1994.736140][T28056] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1994.746137][T28056] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.6934: Failed to acquire dquot type 0 [ 1994.757971][T28056] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.6934: Freeing blocks not in datazone - block = 0, count = 4096 [ 1994.772417][T28056] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.6934: Invalid inode bitmap blk 0 in block_group 0 [ 1994.785591][T28056] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1994.857133][T28056] EXT4-fs (loop4): 1 orphan inode deleted [ 1994.862999][T28056] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1994.881798][T28056] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1994.888935][T28056] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1994.919207][ T301] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1994.934224][ T301] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1996.504314][T28064] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.6938: Invalid block bitmap block 0 in block_group 0 [ 1996.520361][T28064] Quota error (device loop2): write_blk: dquota write failed [ 1996.527901][T28064] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1996.538085][T28064] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.6938: Failed to acquire dquot type 0 [ 1996.551664][T28064] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.6938: Freeing blocks not in datazone - block = 0, count = 4096 [ 1996.566365][T28064] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.6938: Invalid inode bitmap blk 0 in block_group 0 [ 1996.580056][T28064] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1996.589314][T11344] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1996.598193][T28064] EXT4-fs (loop2): 1 orphan inode deleted [ 1996.604017][T28064] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1996.651031][T11344] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1996.797587][T28069] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.6940: Invalid block bitmap block 0 in block_group 0 [ 1996.812414][T28069] Quota error (device loop1): write_blk: dquota write failed [ 1996.820112][T28069] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.6940: Failed to acquire dquot type 0 [ 1996.833528][T28069] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.6940: Freeing blocks not in datazone - block = 0, count = 4096 [ 1996.848080][T28069] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6940: Invalid inode bitmap blk 0 in block_group 0 [ 1996.861609][T28069] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1996.870808][T11344] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1996.882405][T28069] EXT4-fs (loop1): 1 orphan inode deleted [ 1996.888205][T28069] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1997.036182][T28063] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1997.043409][T28063] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1997.074446][T28069] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1997.550284][T28078] exfat: Unknown parameter 'fsmagic' [ 1997.563662][T28078] xt_hashlimit: max too large, truncated to 1048576 [ 1998.725001][T28082] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1998.758322][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop0 [ 1998.768451][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop0 [ 1998.949679][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6945'. [ 1999.149639][T28082] netlink: 'syz.0.6944': attribute type 6 has an invalid length. [ 1999.222353][T28100] overlayfs: failed to resolve './file0': -2 [ 1999.753214][T28107] exfat: Unknown parameter 'fsmagic' [ 1999.821617][T28107] xt_hashlimit: max too large, truncated to 1048576 [ 2000.018253][T28107] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2001.040526][T28115] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2001.049534][T28115] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2001.131616][T28114] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2001.140659][T28114] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2002.745114][T28136] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.6952: Invalid block bitmap block 0 in block_group 0 [ 2002.759702][T28136] __quota_error: 2 callbacks suppressed [ 2002.759724][T28136] Quota error (device loop0): write_blk: dquota write failed [ 2002.772826][T28136] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2002.782952][T28136] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.6952: Failed to acquire dquot type 0 [ 2002.795404][T28136] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.6952: Freeing blocks not in datazone - block = 0, count = 4096 [ 2002.809827][T28136] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6952: Invalid inode bitmap blk 0 in block_group 0 [ 2002.823083][T28136] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 2002.832413][T21622] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 2002.841181][T28136] EXT4-fs (loop0): 1 orphan inode deleted [ 2002.846970][T28136] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2002.892079][T28136] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2002.993998][T28137] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.6953: Invalid block bitmap block 0 in block_group 0 [ 2003.009042][T28137] Quota error (device loop1): write_blk: dquota write failed [ 2003.016619][T28137] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2003.026790][T28137] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.6953: Failed to acquire dquot type 0 [ 2003.039808][T28137] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.6953: Freeing blocks not in datazone - block = 0, count = 4096 [ 2003.124237][T28137] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6953: Invalid inode bitmap blk 0 in block_group 0 [ 2003.137393][T28137] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 2003.146107][T28137] EXT4-fs (loop1): 1 orphan inode deleted [ 2003.152156][T28137] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2003.208376][T28135] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2003.239796][T21622] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2003.262066][T21622] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 2003.271013][T21622] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2003.611564][T28149] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2003.648141][T28149] EXT4-fs (loop0): 1 truncate cleaned up [ 2003.653886][T28149] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2003.684775][T28133] F2FS-fs (loop4): fault_injection options not supported [ 2003.709972][T28153] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2003.775514][T28133] F2FS-fs (loop4): invalid crc value [ 2003.819515][T28133] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2004.005781][T28153] netlink: 'syz.1.6957': attribute type 6 has an invalid length. [ 2004.401786][T28160] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.6958: Invalid block bitmap block 0 in block_group 0 [ 2004.415566][T28160] Quota error (device loop1): write_blk: dquota write failed [ 2004.423016][T28160] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2004.433009][T28160] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.6958: Failed to acquire dquot type 0 [ 2004.445411][T28160] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.6958: Freeing blocks not in datazone - block = 0, count = 4096 [ 2004.459926][T28160] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6958: Invalid inode bitmap blk 0 in block_group 0 [ 2004.472869][T28160] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 2004.481575][T28160] EXT4-fs (loop1): 1 orphan inode deleted [ 2004.487332][T28160] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2004.510305][T21622] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 2004.526596][T28160] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2004.575507][T21622] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2004.851481][T28168] exfat: Unknown parameter 'fsmagic' [ 2004.924272][T28168] xt_hashlimit: max too large, truncated to 1048576 [ 2005.126971][T28168] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2005.439245][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6961'. [ 2009.100020][T28206] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2010.911225][T28215] exfat: Unknown parameter 'fsmagic' [ 2011.014471][T28215] xt_hashlimit: max too large, truncated to 1048576 [ 2011.774110][T28215] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2012.308944][T28225] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.6972: Invalid block bitmap block 0 in block_group 0 [ 2012.434790][T28225] Quota error (device loop4): write_blk: dquota write failed [ 2012.442439][T28225] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2012.452582][T28225] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.6972: Failed to acquire dquot type 0 [ 2012.466248][T28225] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.6972: Freeing blocks not in datazone - block = 0, count = 4096 [ 2012.481148][T28225] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.6972: Invalid inode bitmap blk 0 in block_group 0 [ 2012.494304][T25437] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2012.504683][T28225] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2012.514077][T28225] EXT4-fs (loop4): 1 orphan inode deleted [ 2012.520007][T28225] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2012.556015][T25437] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2012.581642][T28233] exfat: Unknown parameter 'fsmagic' [ 2012.604928][T28225] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2012.800828][T28233] xt_hashlimit: max too large, truncated to 1048576 [ 2013.225954][T28233] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2014.104684][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6975'. [ 2014.576580][T28249] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.6977: Invalid block bitmap block 0 in block_group 0 [ 2014.591340][T28249] Quota error (device loop0): write_blk: dquota write failed [ 2014.598797][T28249] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2014.608959][T28249] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.6977: Failed to acquire dquot type 0 [ 2014.621904][T28249] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.6977: Freeing blocks not in datazone - block = 0, count = 4096 [ 2014.638235][T28249] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6977: Invalid inode bitmap blk 0 in block_group 0 [ 2014.651654][T25437] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 2014.660597][T28249] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 2014.669785][T28249] EXT4-fs (loop0): 1 orphan inode deleted [ 2014.675734][T28249] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2014.705396][T25437] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2014.778039][T28249] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2014.901832][T28253] exfat: Unknown parameter 'fsmagic' [ 2015.282500][T28248] xt_hashlimit: max too large, truncated to 1048576 [ 2015.559689][T28276] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2015.812611][T28253] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2016.262317][T28274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2016.338981][T28274] EXT4-fs (loop1): 1 truncate cleaned up [ 2016.347484][T28274] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2016.530487][T28287] exfat: Unknown parameter 'fsmagic' [ 2016.621531][T28287] xt_hashlimit: max too large, truncated to 1048576 [ 2016.832494][T28296] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2016.865967][T28298] overlayfs: failed to resolve './file0': -2 [ 2016.982050][T28287] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2017.383571][T28302] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2017.393222][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop3 [ 2017.407190][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop3 [ 2017.681413][T28310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6990'. [ 2018.054091][T28319] netlink: 'syz.3.6988': attribute type 6 has an invalid length. [ 2018.070541][T28319] input: syz1 as /devices/virtual/input/input174 [ 2018.216777][T28315] exfat: Unknown parameter 'fsmagic' [ 2018.267426][T28322] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2018.348226][T28315] xt_hashlimit: max too large, truncated to 1048576 [ 2018.631772][T28315] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2018.963391][T28342] exfat: Unknown parameter 'fsmagic' [ 2019.015458][T28342] xt_hashlimit: max too large, truncated to 1048576 [ 2019.254244][T28342] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2020.172407][T28349] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.6999: Invalid block bitmap block 0 in block_group 0 [ 2020.187374][T28349] Quota error (device loop1): write_blk: dquota write failed [ 2020.194892][T28349] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2020.205033][T28349] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.6999: Failed to acquire dquot type 0 [ 2020.218330][T28349] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.6999: Freeing blocks not in datazone - block = 0, count = 4096 [ 2020.233000][T28349] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6999: Invalid inode bitmap blk 0 in block_group 0 [ 2020.246519][T28349] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 2020.255811][T28349] EXT4-fs (loop1): 1 orphan inode deleted [ 2020.261611][T28349] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2020.276576][T25437] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 2020.320040][T28349] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2020.571590][T25437] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2020.778938][T28356] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.7001: Invalid block bitmap block 0 in block_group 0 [ 2020.806370][T28356] Quota error (device loop3): write_blk: dquota write failed [ 2020.824194][T28356] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2020.840256][T28356] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.7001: Failed to acquire dquot type 0 [ 2020.861940][T28356] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.7001: Freeing blocks not in datazone - block = 0, count = 4096 [ 2020.900230][T28356] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.7001: Invalid inode bitmap blk 0 in block_group 0 [ 2020.920176][T11344] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 2021.214768][T11344] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 2021.226829][T28356] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 2021.235837][T28365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2021.253926][T28356] EXT4-fs (loop3): 1 orphan inode deleted [ 2021.264089][T28356] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2021.334035][T28365] EXT4-fs (loop4): 1 truncate cleaned up [ 2021.354481][T28365] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2021.765079][T28377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7003'. [ 2023.610291][T28408] incfs: Backing dir is not set, filesystem can't be mounted. [ 2023.617904][T28408] incfs: mount failed -2 [ 2024.021355][T28406] exfat: Unknown parameter 'fsmagic' [ 2024.065948][T28406] xt_hashlimit: max too large, truncated to 1048576 [ 2024.201871][T28406] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2025.711751][T28423] exfat: Unknown parameter 'fsmagic' [ 2025.724657][T28423] xt_hashlimit: max too large, truncated to 1048576 [ 2026.563582][T28433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 2026.982423][T28447] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2027.165810][T28443] attempt to access beyond end of device [ 2027.165810][T28443] loop2: rw=2049, want=234, limit=128 [ 2027.228197][T28443] attempt to access beyond end of device [ 2027.228197][T28443] loop2: rw=2049, want=1041, limit=128 [ 2027.267726][T28443] attempt to access beyond end of device [ 2027.267726][T28443] loop2: rw=524288, want=497, limit=128 [ 2027.291264][T28443] attempt to access beyond end of device [ 2027.291264][T28443] loop2: rw=0, want=249, limit=128 [ 2027.313497][T28443] attempt to access beyond end of device [ 2027.313497][T28443] loop2: rw=0, want=249, limit=128 [ 2027.371661][T28443] attempt to access beyond end of device [ 2027.371661][T28443] loop2: rw=0, want=249, limit=128 [ 2027.382602][T28443] attempt to access beyond end of device [ 2027.382602][T28443] loop2: rw=0, want=249, limit=128 [ 2027.394061][T28443] attempt to access beyond end of device [ 2027.394061][T28443] loop2: rw=0, want=249, limit=128 [ 2028.306075][T28461] hub 8-0:1.0: USB hub found [ 2028.311276][T28461] hub 8-0:1.0: 1 port detected [ 2028.491532][T28443] attempt to access beyond end of device [ 2028.491532][T28443] loop2: rw=0, want=249, limit=128 [ 2028.611837][T28454] attempt to access beyond end of device [ 2028.611837][T28454] loop2: rw=0, want=242, limit=128 [ 2029.660517][T28476] exfat: Unknown parameter 'fsmagic' [ 2030.861238][T28483] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2030.910541][T28473] xt_hashlimit: max too large, truncated to 1048576 [ 2030.994108][T28473] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2031.490431][T28495] exfat: Unknown parameter 'fsmagic' [ 2031.552370][T28495] xt_hashlimit: max too large, truncated to 1048576 [ 2031.564230][T28502] exfat: Unknown parameter 'fsmagic' [ 2031.602415][T28502] xt_hashlimit: max too large, truncated to 1048576 [ 2031.640486][T28503] exfat: Unknown parameter 'fsmagic' [ 2031.751839][T28503] xt_hashlimit: max too large, truncated to 1048576 [ 2032.187530][T28503] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2032.490568][T28516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2032.499972][T28516] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2032.888767][T28528] hub 8-0:1.0: USB hub found [ 2032.893553][T28528] hub 8-0:1.0: 1 port detected [ 2032.900101][T28523] exfat: Unknown parameter 'fsmagic' [ 2033.003818][T28523] xt_hashlimit: max too large, truncated to 1048576 [ 2033.008412][T28524] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.7037: Invalid block bitmap block 0 in block_group 0 [ 2033.024312][T28524] Quota error (device loop0): write_blk: dquota write failed [ 2033.032003][T28524] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2033.042440][T28524] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.7037: Failed to acquire dquot type 0 [ 2033.055855][T28524] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.7037: Freeing blocks not in datazone - block = 0, count = 4096 [ 2033.069972][T28524] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7037: Invalid inode bitmap blk 0 in block_group 0 [ 2033.082784][T25437] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 2033.084222][T28524] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 2033.096475][T25437] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2033.109933][T28524] EXT4-fs (loop0): 1 orphan inode deleted [ 2033.117862][T28524] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2033.137508][T28523] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2033.177059][T28524] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2033.367025][T28538] exfat: Unknown parameter 'fsmagic' [ 2033.387925][T28538] xt_hashlimit: max too large, truncated to 1048576 [ 2034.334136][T28541] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2034.347334][T22347] udevd[22347]: incorrect ext4 checksum on /dev/loop3 [ 2034.367979][T22347] udevd[22347]: incorrect ext4 checksum on /dev/loop3 [ 2034.380941][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop3 [ 2034.482314][T28544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2034.895845][T28556] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2034.925722][T28552] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2035.351260][T28561] exfat: Unknown parameter 'fsmagic' [ 2035.395930][T28561] xt_hashlimit: max too large, truncated to 1048576 [ 2035.507509][T28561] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2037.608138][T28582] overlayfs: failed to resolve './file0': -2 [ 2038.221280][T28583] exfat: Unknown parameter 'fsmagic' [ 2038.302501][T28594] hub 8-0:1.0: USB hub found [ 2038.309429][T28594] hub 8-0:1.0: 1 port detected [ 2038.332337][T28583] xt_hashlimit: max too large, truncated to 1048576 [ 2038.460465][T28583] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2038.530454][T28585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2038.542759][T28585] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2038.594961][T28597] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2039.669341][T28613] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.7056: Invalid block bitmap block 0 in block_group 0 [ 2039.683672][T28613] Quota error (device loop3): write_blk: dquota write failed [ 2039.691155][T28613] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2039.701198][T28613] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.7056: Failed to acquire dquot type 0 [ 2039.712900][T28613] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.7056: Freeing blocks not in datazone - block = 0, count = 4096 [ 2039.726752][T28613] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.7056: Invalid inode bitmap blk 0 in block_group 0 [ 2039.739911][T25437] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 2039.811139][T28613] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 2039.819982][T28613] EXT4-fs (loop3): 1 orphan inode deleted [ 2039.825752][T28613] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2039.851301][T25437] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2039.852246][T28611] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7055: Invalid block bitmap block 0 in block_group 0 [ 2039.880851][T28611] Quota error (device loop4): write_blk: dquota write failed [ 2039.904927][T28611] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2040.020266][T28611] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7055: Failed to acquire dquot type 0 [ 2040.115974][T28611] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7055: Freeing blocks not in datazone - block = 0, count = 4096 [ 2040.140434][T28611] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7055: Invalid inode bitmap blk 0 in block_group 0 [ 2040.153301][T25448] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2040.169880][T28628] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2040.182113][T25448] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 2040.205471][T28611] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2040.228637][T28611] EXT4-fs (loop4): 1 orphan inode deleted [ 2040.234700][T28611] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2040.263437][T28623] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2040.287661][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop1 [ 2040.315565][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2040.327082][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop1 [ 2040.362371][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop1 [ 2040.661608][T28632] exfat: Unknown parameter 'fsmagic' [ 2040.897571][T28632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2041.389982][T28641] netlink: 'syz.1.7060': attribute type 6 has an invalid length. [ 2041.430649][T28641] input: syz1 as /devices/virtual/input/input175 [ 2041.608502][T28644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2041.716457][T28655] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2042.014933][T28647] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2042.285597][T28663] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2042.608822][T28667] hub 8-0:1.0: USB hub found [ 2042.613791][T28667] hub 8-0:1.0: 1 port detected [ 2043.246264][T28673] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7069: Invalid block bitmap block 0 in block_group 0 [ 2043.261131][T28673] Quota error (device loop4): write_blk: dquota write failed [ 2043.268609][T28673] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2043.278718][T28673] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7069: Failed to acquire dquot type 0 [ 2043.291373][T28673] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7069: Freeing blocks not in datazone - block = 0, count = 4096 [ 2043.306381][T28673] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7069: Invalid inode bitmap blk 0 in block_group 0 [ 2043.320078][T28673] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2043.329472][T28673] EXT4-fs (loop4): 1 orphan inode deleted [ 2043.335294][T28673] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2043.375541][T25437] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2043.560895][T25437] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2043.792194][T28682] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2044.140621][T28684] exfat: Unknown parameter 'fsmagic' [ 2044.207821][T28684] xt_hashlimit: max too large, truncated to 1048576 [ 2044.548996][T28684] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2044.624115][T28692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2044.633214][T28692] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2044.659339][T28695] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7073: Invalid block bitmap block 0 in block_group 0 [ 2044.674145][T28695] Quota error (device loop4): write_blk: dquota write failed [ 2044.681608][T28695] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7073: Failed to acquire dquot type 0 [ 2044.694252][T28695] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7073: Freeing blocks not in datazone - block = 0, count = 4096 [ 2044.708208][T28695] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7073: Invalid inode bitmap blk 0 in block_group 0 [ 2044.752246][T28695] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2044.761128][T28695] EXT4-fs (loop4): 1 orphan inode deleted [ 2044.766862][T28695] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2044.783754][T25437] __quota_error: 1 callbacks suppressed [ 2044.783867][T25437] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2044.869607][T25437] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2046.321525][T28711] exfat: Unknown parameter 'fsmagic' [ 2046.502246][T28711] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2046.699875][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop1 [ 2046.716251][T28717] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2047.635196][T28725] F2FS-fs (loop4): fault_injection options not supported [ 2047.644127][T28725] F2FS-fs (loop4): invalid crc value [ 2047.965339][T28731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2048.002835][T28725] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2048.039324][T28725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2048.188215][T28741] netlink: 'syz.1.7077': attribute type 6 has an invalid length. [ 2048.210357][T28741] input: syz1 as /devices/virtual/input/input176 [ 2048.222437][T28740] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2048.971500][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop3 [ 2049.207270][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop3 [ 2049.241521][T28745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2049.250742][T28745] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2049.516974][T28750] netlink: 'syz.3.7082': attribute type 6 has an invalid length. [ 2049.556272][T28750] input: syz1 as /devices/virtual/input/input177 [ 2050.794040][T28769] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2051.271118][T28753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2052.472187][T28795] exfat: Unknown parameter 'fsmagic' [ 2053.401358][T28800] overlayfs: failed to resolve './file0': -2 [ 2053.606508][T28795] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2053.997894][T28782] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2054.006917][T28782] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2054.100951][T28806] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2054.105669][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop4 [ 2054.653738][T28821] netlink: 'syz.4.7094': attribute type 6 has an invalid length. [ 2054.694800][T28821] input: syz1 as /devices/virtual/input/input178 [ 2056.673668][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2056.680795][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2057.473262][T28823] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.7095: Invalid block bitmap block 0 in block_group 0 [ 2057.487572][T28823] Quota error (device loop2): write_blk: dquota write failed [ 2057.495069][T28823] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2057.505036][T28823] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.7095: Failed to acquire dquot type 0 [ 2057.517485][T28823] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.7095: Freeing blocks not in datazone - block = 0, count = 4096 [ 2057.532030][T28823] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7095: Invalid inode bitmap blk 0 in block_group 0 [ 2057.545764][T28823] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 2057.554722][T21622] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 2057.639949][T28823] EXT4-fs (loop2): 1 orphan inode deleted [ 2057.646169][T28823] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2057.666236][T28823] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2058.244611][T21622] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2058.801298][T28842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2058.810536][T28842] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2058.900383][T28854] incfs: Backing dir is not set, filesystem can't be mounted. [ 2058.908185][T28854] incfs: mount failed -2 [ 2059.484588][T28863] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7103: Invalid block bitmap block 0 in block_group 0 [ 2059.499364][T28863] Quota error (device loop4): write_blk: dquota write failed [ 2059.506904][T28863] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2059.517252][T28863] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7103: Failed to acquire dquot type 0 [ 2059.590016][T28863] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7103: Freeing blocks not in datazone - block = 0, count = 4096 [ 2059.604717][T28863] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7103: Invalid inode bitmap blk 0 in block_group 0 [ 2059.618025][T28863] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2059.627328][T28863] EXT4-fs (loop4): 1 orphan inode deleted [ 2059.633104][T28863] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2059.666042][T28863] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2059.709466][T21622] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2059.724219][T21622] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2061.101707][T28885] incfs: Backing dir is not set, filesystem can't be mounted. [ 2061.110178][T28885] incfs: mount failed -2 [ 2062.661940][T28883] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7107: Invalid block bitmap block 0 in block_group 0 [ 2062.675581][T28883] Quota error (device loop4): write_blk: dquota write failed [ 2062.683044][T28883] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2062.693765][T28883] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7107: Failed to acquire dquot type 0 [ 2062.705658][T28883] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7107: Freeing blocks not in datazone - block = 0, count = 4096 [ 2062.719470][T28883] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7107: Invalid inode bitmap blk 0 in block_group 0 [ 2062.732401][T21622] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2062.732410][T28883] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2062.732563][T28883] EXT4-fs (loop4): 1 orphan inode deleted [ 2062.741391][T21622] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2062.749504][T28883] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2062.990151][T28893] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2063.088026][T28881] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2064.122254][T28906] exfat: Unknown parameter 'fsmagic' [ 2064.261438][T28900] exfat: Unknown parameter 'fsmagic' [ 2064.377821][T28906] xt_hashlimit: max too large, truncated to 1048576 [ 2064.634353][T28906] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2064.652712][T28900] xt_hashlimit: max too large, truncated to 1048576 [ 2064.771900][T28911] F2FS-fs (loop2): fault_injection options not supported [ 2064.783915][T28911] F2FS-fs (loop2): invalid crc value [ 2064.980547][T28909] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2064.993867][T28911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2065.033624][T28911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2065.084747][T28900] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2066.041702][T28928] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2066.111608][T28932] incfs: Backing dir is not set, filesystem can't be mounted. [ 2066.119438][T28932] incfs: mount failed -2 [ 2067.889842][T28941] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2067.898921][T28941] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2068.328228][T28950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2068.343438][T28950] EXT4-fs (loop2): 1 truncate cleaned up [ 2068.349165][T28950] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2068.886762][T28966] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2069.654007][T28972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2069.822223][T28972] EXT4-fs (loop2): 1 truncate cleaned up [ 2069.828061][T28972] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2070.843953][T28986] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2070.852733][T28986] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2070.903796][T28988] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2071.695603][T28991] F2FS-fs (loop3): fault_injection options not supported [ 2071.703614][T28991] F2FS-fs (loop3): invalid crc value [ 2071.850942][T28991] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2071.930150][T28991] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2074.539415][T29015] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.7136: Invalid block bitmap block 0 in block_group 0 [ 2074.554393][T29015] Quota error (device loop1): write_blk: dquota write failed [ 2074.562013][T29015] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2074.572226][T29015] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.7136: Failed to acquire dquot type 0 [ 2074.586919][T29015] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.7136: Freeing blocks not in datazone - block = 0, count = 4096 [ 2074.602154][T29015] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.7136: Invalid inode bitmap blk 0 in block_group 0 [ 2074.618434][T29015] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 2074.627658][T21622] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 2074.638227][T29015] EXT4-fs (loop1): 1 orphan inode deleted [ 2074.644175][T29015] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2074.710433][T21622] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2074.972109][T29012] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2074.981126][T29012] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2075.429405][T29025] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.7139: Invalid block bitmap block 0 in block_group 0 [ 2075.443658][T29025] Quota error (device loop0): write_blk: dquota write failed [ 2075.451159][T29025] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2075.461237][T29025] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.7139: Failed to acquire dquot type 0 [ 2075.473492][T29025] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.7139: Freeing blocks not in datazone - block = 0, count = 4096 [ 2075.487601][T29025] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7139: Invalid inode bitmap blk 0 in block_group 0 [ 2075.500755][T29025] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 2075.509673][T21622] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 2075.518344][T29025] EXT4-fs (loop0): 1 orphan inode deleted [ 2075.524144][T29025] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2075.598448][T21622] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2076.105487][T29025] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2076.196014][T29032] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2076.205312][T29032] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2076.381927][T29041] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.7143: Invalid block bitmap block 0 in block_group 0 [ 2076.395828][T29041] Quota error (device loop2): write_blk: dquota write failed [ 2076.403326][T29041] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2076.413463][T29041] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.7143: Failed to acquire dquot type 0 [ 2077.198286][T29050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2077.314054][T29050] EXT4-fs (loop4): 1 truncate cleaned up [ 2077.319800][T29050] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2077.581612][T29041] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.7143: Freeing blocks not in datazone - block = 0, count = 4096 [ 2077.598319][T29041] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7143: Invalid inode bitmap blk 0 in block_group 0 [ 2077.611991][T11344] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 2077.621138][T29041] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 2077.629811][T11344] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 2077.653876][T29041] EXT4-fs (loop2): 1 orphan inode deleted [ 2077.659630][T29041] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2077.713110][T29052] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.7141: Invalid block bitmap block 0 in block_group 0 [ 2077.794898][T29052] Quota error (device loop1): write_blk: dquota write failed [ 2077.818549][T29059] attempt to access beyond end of device [ 2077.818549][T29059] loop3: rw=2049, want=234, limit=128 [ 2077.850184][T29052] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.7141: Failed to acquire dquot type 0 [ 2077.861649][T29052] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.7141: Freeing blocks not in datazone - block = 0, count = 4096 [ 2077.875332][T29052] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.7141: Invalid inode bitmap blk 0 in block_group 0 [ 2077.888381][T29052] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 2077.897461][T29052] EXT4-fs (loop1): 1 orphan inode deleted [ 2077.902910][T25437] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2077.903352][T29052] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2077.940386][T29067] exfat: Unknown parameter 'fsmagic' [ 2077.951102][T29067] xt_hashlimit: max too large, truncated to 1048576 [ 2077.961880][T29059] attempt to access beyond end of device [ 2077.961880][T29059] loop3: rw=2049, want=1041, limit=128 [ 2078.010730][T29059] attempt to access beyond end of device [ 2078.010730][T29059] loop3: rw=524288, want=497, limit=128 [ 2078.024495][T29059] attempt to access beyond end of device [ 2078.024495][T29059] loop3: rw=0, want=249, limit=128 [ 2078.035584][T29059] attempt to access beyond end of device [ 2078.035584][T29059] loop3: rw=0, want=249, limit=128 [ 2078.050218][T29059] attempt to access beyond end of device [ 2078.050218][T29059] loop3: rw=0, want=249, limit=128 [ 2078.080199][T29065] attempt to access beyond end of device [ 2078.080199][T29065] loop3: rw=0, want=242, limit=128 [ 2078.094485][T29066] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7146: Invalid block bitmap block 0 in block_group 0 [ 2078.118213][T29067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2078.141784][T29059] attempt to access beyond end of device [ 2078.141784][T29059] loop3: rw=0, want=242, limit=128 [ 2078.152968][T29059] buffer_io_error: 5046 callbacks suppressed [ 2078.152980][T29059] Buffer I/O error on dev loop3, logical block 241, async page read [ 2078.167497][T29059] attempt to access beyond end of device [ 2078.167497][T29059] loop3: rw=0, want=243, limit=128 [ 2078.178332][T29059] Buffer I/O error on dev loop3, logical block 242, async page read [ 2078.186614][T29059] attempt to access beyond end of device [ 2078.186614][T29059] loop3: rw=0, want=244, limit=128 [ 2078.197427][T29059] Buffer I/O error on dev loop3, logical block 243, async page read [ 2078.205466][T29059] Buffer I/O error on dev loop3, logical block 244, async page read [ 2078.213788][T29059] Buffer I/O error on dev loop3, logical block 245, async page read [ 2078.228048][T29059] Buffer I/O error on dev loop3, logical block 246, async page read [ 2078.233406][T29066] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7146: Failed to acquire dquot type 0 [ 2078.236125][T29059] Buffer I/O error on dev loop3, logical block 247, async page read [ 2078.255450][T29059] Buffer I/O error on dev loop3, logical block 248, async page read [ 2078.261823][T29066] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7146: Freeing blocks not in datazone - block = 0, count = 4096 [ 2078.263525][T29059] Buffer I/O error on dev loop3, logical block 241, async page read [ 2078.316445][T29066] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7146: Invalid inode bitmap blk 0 in block_group 0 [ 2078.357847][T29075] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7148'. [ 2078.371194][T25437] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2078.421290][T29059] Buffer I/O error on dev loop3, logical block 242, async page read [ 2078.450764][T29066] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2078.507483][T29066] EXT4-fs (loop4): 1 orphan inode deleted [ 2078.556543][T29066] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2079.136011][T29066] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2079.519419][T29078] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2079.648064][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop0 [ 2079.738666][T29091] netlink: 'syz.0.7150': attribute type 6 has an invalid length. [ 2079.747596][T29091] input: syz1 as /devices/virtual/input/input179 [ 2080.558858][T29095] incfs: Backing dir is not set, filesystem can't be mounted. [ 2080.566473][T29095] incfs: mount failed -2 [ 2080.833950][T29098] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2081.706912][T29118] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2081.716058][T29118] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2081.848712][T29129] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7160'. [ 2082.820745][T29126] handle_bad_sector: 5868 callbacks suppressed [ 2082.820759][T29126] attempt to access beyond end of device [ 2082.820759][T29126] loop4: rw=0, want=244, limit=128 [ 2082.878367][T29126] attempt to access beyond end of device [ 2082.878367][T29126] loop4: rw=0, want=245, limit=128 [ 2082.936485][T29126] attempt to access beyond end of device [ 2082.936485][T29126] loop4: rw=0, want=246, limit=128 [ 2083.093563][T29126] attempt to access beyond end of device [ 2083.093563][T29126] loop4: rw=0, want=247, limit=128 [ 2083.131203][T29126] attempt to access beyond end of device [ 2083.131203][T29126] loop4: rw=0, want=248, limit=128 [ 2083.152068][T29126] attempt to access beyond end of device [ 2083.152068][T29126] loop4: rw=0, want=249, limit=128 [ 2083.170440][T29126] buffer_io_error: 4053 callbacks suppressed [ 2083.170452][T29126] Buffer I/O error on dev loop4, logical block 248, async page read [ 2083.191589][T29138] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2083.201235][T29138] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2083.352370][T29147] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2083.363675][T22347] udevd[22347]: incorrect ext4 checksum on /dev/loop2 [ 2083.508562][T29157] netlink: 'syz.2.7166': attribute type 6 has an invalid length. [ 2083.517294][T29157] input: syz1 as /devices/virtual/input/input180 [ 2083.947814][T29160] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7169: Invalid block bitmap block 0 in block_group 0 [ 2083.963211][T29160] __quota_error: 5 callbacks suppressed [ 2083.963223][T29160] Quota error (device loop4): write_blk: dquota write failed [ 2083.976379][T29160] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2083.986422][T29160] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7169: Failed to acquire dquot type 0 [ 2083.997963][T29160] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7169: Freeing blocks not in datazone - block = 0, count = 4096 [ 2084.012058][T29160] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7169: Invalid inode bitmap blk 0 in block_group 0 [ 2084.025171][T29160] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2084.033865][T21622] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2084.042545][T29160] EXT4-fs (loop4): 1 orphan inode deleted [ 2084.042875][T21622] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 2084.048423][T29160] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2084.301702][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2084.643768][T29176] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2085.034997][T29184] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2085.043810][T29184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2086.992661][T29191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2087.327351][T29193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2087.337117][T29193] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2087.465732][T29191] EXT4-fs (loop1): 1 truncate cleaned up [ 2087.471462][T29191] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2087.999224][T29208] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2088.008898][T29208] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2088.509994][T29219] xt_hashlimit: max too large, truncated to 1048576 [ 2089.354701][T29219] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2090.398871][T29234] hub 8-0:1.0: USB hub found [ 2090.404902][T29234] hub 8-0:1.0: 1 port detected [ 2090.548647][T29235] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2090.902753][T29240] hub 8-0:1.0: USB hub found [ 2090.907523][T29240] hub 8-0:1.0: 1 port detected [ 2091.509875][T29256] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2091.773679][T29247] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2091.782842][T29247] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2091.833993][T29252] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2091.851069][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop1 [ 2091.874866][T29265] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2091.883656][T29265] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2092.011342][T29267] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2092.018859][T29267] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2092.532503][T29269] netlink: 'syz.1.7190': attribute type 6 has an invalid length. [ 2092.557142][T29269] input: syz1 as /devices/virtual/input/input181 [ 2093.320857][T29277] xt_hashlimit: max too large, truncated to 1048576 [ 2093.483680][T29277] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2096.203999][T29283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2096.234903][T29283] EXT4-fs (loop3): 1 truncate cleaned up [ 2096.240911][T29283] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2096.396612][T29293] hub 8-0:1.0: USB hub found [ 2096.410136][T29293] hub 8-0:1.0: 1 port detected [ 2097.236198][T29296] exfat: Unknown parameter 'fsmagic' [ 2097.568594][T29296] xt_hashlimit: max too large, truncated to 1048576 [ 2097.748386][T29296] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2100.229109][T29310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2100.238264][T29310] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2102.293484][T29327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2102.319382][T29327] EXT4-fs (loop2): 1 truncate cleaned up [ 2102.325162][T29327] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2104.156394][T29341] overlayfs: failed to resolve './file0': -2 [ 2104.523429][T29342] overlayfs: failed to resolve './file0': -2 [ 2104.532424][T29340] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2104.544416][T29340] EXT4-fs (loop0): 1 truncate cleaned up [ 2104.550323][T29340] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2104.838539][T29355] hub 8-0:1.0: USB hub found [ 2104.858878][T29355] hub 8-0:1.0: 1 port detected [ 2104.900406][T29359] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2107.094853][T29382] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2107.320397][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop0 [ 2110.073305][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop0 [ 2110.120522][T29396] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2110.134011][T29405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2110.145838][T29405] EXT4-fs (loop2): 1 truncate cleaned up [ 2110.151536][T29405] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2110.184291][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop0 [ 2110.592534][T29409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2110.601593][T29409] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2110.680363][T29422] overlayfs: failed to resolve './file0': -2 [ 2111.396465][T29428] netlink: 'syz.0.7220': attribute type 6 has an invalid length. [ 2111.412820][T29428] input: syz1 as /devices/virtual/input/input183 [ 2111.746771][T29440] hub 8-0:1.0: USB hub found [ 2111.768833][T29440] hub 8-0:1.0: 1 port detected [ 2112.055782][T29443] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2112.065439][T29443] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2112.329444][T29442] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7227: Invalid block bitmap block 0 in block_group 0 [ 2112.766396][T29442] Quota error (device loop4): write_blk: dquota write failed [ 2112.815157][T29442] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2112.829693][T29442] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7227: Failed to acquire dquot type 0 [ 2112.841374][T29442] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7227: Freeing blocks not in datazone - block = 0, count = 4096 [ 2112.866711][T29442] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7227: Invalid inode bitmap blk 0 in block_group 0 [ 2112.880130][T25437] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2112.899401][T25437] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 2112.911586][T29442] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2113.015676][T29442] EXT4-fs (loop4): 1 orphan inode deleted [ 2113.030117][T29442] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2113.171099][T29457] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2113.189776][T29458] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2113.288186][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop2 [ 2113.292090][T29456] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2113.301062][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop2 [ 2113.437848][T29465] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2113.446652][T29465] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2113.799038][T29466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2113.808729][T29466] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2117.327663][T29483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2117.351536][T29483] EXT4-fs (loop2): 1 truncate cleaned up [ 2117.357215][T29483] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2117.697870][T29487] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2117.847791][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop3 [ 2117.898698][T29494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2117.908185][T29494] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2118.022815][T29509] netlink: 'syz.3.7239': attribute type 6 has an invalid length. [ 2118.054583][T29509] input: syz1 as /devices/virtual/input/input185 [ 2118.514108][T29511] exfat: Unknown parameter 'fsmagic' [ 2118.522475][T29511] xt_hashlimit: max too large, truncated to 1048576 [ 2118.650484][T29505] exfat: Unknown parameter 'fsmagic' [ 2118.907176][T29505] xt_hashlimit: max too large, truncated to 1048576 [ 2118.948765][T29505] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2119.322117][T29524] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.7244: Invalid block bitmap block 0 in block_group 0 [ 2119.368598][T29524] Quota error (device loop2): write_blk: dquota write failed [ 2119.412469][T29524] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2119.885178][T29524] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.7244: Failed to acquire dquot type 0 [ 2119.910356][T29532] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2119.926185][T29524] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.7244: Freeing blocks not in datazone - block = 0, count = 4096 [ 2121.058758][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop1 [ 2121.101721][T29524] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7244: Invalid inode bitmap blk 0 in block_group 0 [ 2121.117635][T29524] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 2121.127644][T11344] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 2121.148588][T29541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2121.171578][T11344] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 2121.197216][T29541] EXT4-fs (loop0): 1 truncate cleaned up [ 2121.203078][T29541] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2121.636307][T29542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2121.658793][T29542] EXT4-fs (loop3): 1 truncate cleaned up [ 2121.664530][T29542] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2121.887216][T29524] EXT4-fs (loop2): 1 orphan inode deleted [ 2121.906696][T29524] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2122.924522][T29565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7253'. [ 2122.984112][T29562] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2122.993250][T29562] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2123.065392][T29560] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.7252: Invalid block bitmap block 0 in block_group 0 [ 2123.093219][T29572] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2123.110528][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop2 [ 2123.124399][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop2 [ 2123.131674][T29560] Quota error (device loop1): write_blk: dquota write failed [ 2123.142262][T29578] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2123.225347][T29560] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2123.297807][T29582] netlink: 'syz.2.7255': attribute type 6 has an invalid length. [ 2123.319180][T29582] input: syz1 as /devices/virtual/input/input187 [ 2123.521200][T29560] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.7252: Failed to acquire dquot type 0 [ 2123.600649][T29560] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.7252: Freeing blocks not in datazone - block = 0, count = 4096 [ 2123.621858][T29581] exfat: Unknown parameter 'fsmagic' [ 2123.663199][T29560] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.7252: Invalid inode bitmap blk 0 in block_group 0 [ 2123.690665][T29581] xt_hashlimit: max too large, truncated to 1048576 [ 2123.726359][T25448] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 2123.787803][T29581] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2123.806906][T25448] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 2123.844375][T29560] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 2123.875487][T29560] EXT4-fs (loop1): 1 orphan inode deleted [ 2123.895530][T29560] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2124.359187][T29560] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2124.368229][T29560] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2124.904379][T29592] hub 8-0:1.0: USB hub found [ 2124.910055][T29592] hub 8-0:1.0: 1 port detected [ 2125.428138][T29593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2125.486590][T29593] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2127.406689][T29626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2127.440450][T29623] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2127.503818][T29618] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.7264: Invalid block bitmap block 0 in block_group 0 [ 2127.535290][T29626] EXT4-fs (loop3): 1 truncate cleaned up [ 2127.541079][T29626] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2128.128072][T29618] Quota error (device loop4): write_blk: dquota write failed [ 2128.150250][T29618] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2128.191116][T29618] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.7264: Failed to acquire dquot type 0 [ 2128.238525][T29618] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.7264: Freeing blocks not in datazone - block = 0, count = 4096 [ 2128.280423][T29618] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7264: Invalid inode bitmap blk 0 in block_group 0 [ 2128.297603][T29618] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2128.375843][T29638] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2128.707470][T11344] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2128.720574][T29618] EXT4-fs (loop4): 1 orphan inode deleted [ 2128.726510][T11344] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 2128.738668][T29618] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2129.243540][T29642] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7268'. [ 2133.975748][T29653] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 2135.262033][T29677] exfat: Unknown parameter 'fsmagic' [ 2135.411814][T29684] exfat: Unknown parameter 'fsmagic' [ 2135.460615][T29677] xt_hashlimit: max too large, truncated to 1048576 [ 2135.512106][T29684] xt_hashlimit: max too large, truncated to 1048576 [ 2135.679936][T29684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2135.742213][T29685] exfat: Unknown parameter 'fsmagic' [ 2135.856472][T29677] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2135.942022][T29681] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2135.965948][T29685] xt_hashlimit: max too large, truncated to 1048576 [ 2136.263477][T29685] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2136.884366][T29702] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7280'. [ 2138.480647][T29707] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2139.019291][T29705] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2139.028411][T29705] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2139.265503][T29717] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2139.705484][T29713] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2139.716385][ T3605] udevd[3605]: incorrect ext4 checksum on /dev/loop3 [ 2141.122894][T29739] netlink: 'syz.3.7283': attribute type 6 has an invalid length. [ 2141.154051][T29739] input: syz1 as /devices/virtual/input/input190 [ 2142.719439][T29741] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2142.970993][T29741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e11c, mo2=0002] [ 2142.979835][T29741] System zones: 1-12 [ 2142.991480][T29741] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2143.158726][T29741] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7285: bg 0: block 361: padding at end of block bitmap is not set [ 2143.186663][T29741] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 2143.231609][T29741] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.7285: invalid indirect mapped block 12 (level 1) [ 2143.251621][T29741] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.7285: invalid indirect mapped block 2 (level 2) [ 2143.268174][T29741] EXT4-fs (loop4): 1 truncate cleaned up [ 2143.273879][T29741] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,nodelalloc,lazytime,jqfmt=vfsv0,errors=continue [ 2143.295240][T29741] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 5: comm syz.4.7285: lblock 0 mapped to illegal pblock 5 (length 1) [ 2143.315833][T29741] EXT4-fs warning (device loop4): dx_probe:796: inode #2: lblock 0: comm syz.4.7285: error -117 reading directory block [ 2143.981684][T29751] exfat: Unknown parameter 'fsmagic' [ 2144.105311][T29751] xt_hashlimit: max too large, truncated to 1048576 [ 2144.231434][T29751] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 2144.565094][T29763] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7293'. [ 2145.714654][T29759] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2146.710760][T29775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2146.735178][T29775] EXT4-fs (loop4): 1 truncate cleaned up [ 2146.740894][T29775] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2146.784775][ T3599] udevd[3599]: incorrect ext4 checksum on /dev/loop2 [ 2147.760607][T29791] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2148.778308][T29790] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.7298: Invalid block bitmap block 0 in block_group 0 [ 2148.792240][T29790] Quota error (device loop0): write_blk: dquota write failed [ 2148.799673][T29790] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2148.809766][T29790] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.7298: Failed to acquire dquot type 0 [ 2148.821613][T29790] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.7298: Freeing blocks not in datazone - block = 0, count = 4096 [ 2148.835346][T29790] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7298: Invalid inode bitmap blk 0 in block_group 0 [ 2148.848466][T29790] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 2148.857208][T29790] EXT4-fs (loop0): 1 orphan inode deleted [ 2148.867321][T29790] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2148.885420][T29790] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2148.900310][ T301] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 2148.922828][ T301] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 2149.954539][T29806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2149.966846][T29806] EXT4-fs (loop2): 1 truncate cleaned up [ 2149.972587][T29806] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2150.695828][T29820] exfat: Unknown parameter 'fsmagic' [ 2150.709267][T29820] xt_hashlimit: max too large, truncated to 1048576 [ 2152.280384][T29810] EXT4-fs: failed to create workqueue [ 2152.285966][T29810] EXT4-fs (loop1): mount failed [ 2152.384125][T29828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2152.405654][T29828] EXT4-fs (loop3): 1 truncate cleaned up [ 2152.411388][T29828] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 2152.509343][T29838] device pim6reg1 entered promiscuous mode [ 2152.984138][T29862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=29862 comm=syz.0.7318 [ 2153.031267][T29859] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2153.041437][T29859] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2153.054796][ T24] audit: type=1400 audit(1755615950.990:221): avc: denied { create } for pid=29858 comm="syz.1.7317" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 2153.076383][T29859] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.7317: bg 0: block 64: padding at end of block bitmap is not set [ 2153.116478][ T24] audit: type=1400 audit(1755615951.050:222): avc: denied { write } for pid=29873 comm="syz.3.7324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2153.136724][ T24] audit: type=1400 audit(1755615951.050:223): avc: denied { write } for pid=29872 comm="syz.0.7322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2153.174883][ T24] audit: type=1326 audit(1755615951.110:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.1.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83434a7be9 code=0x7ffc0000 [ 2153.243321][ T24] audit: type=1326 audit(1755615951.110:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.0.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff62fdbe9 code=0x7ffc0000 [ 2153.273730][ T24] audit: type=1326 audit(1755615951.110:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.1.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83434a7be9 code=0x7ffc0000 [ 2153.313041][ T24] audit: type=1326 audit(1755615951.110:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.1.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f83434a7be9 code=0x7ffc0000 [ 2153.379986][T29906] 9pnet: p9_errstr2errno: server reported unknown error [ 2153.394511][T29889] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 2153.415051][T29889] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2153.459151][T29889] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 15) [ 2153.473749][T29889] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 2153.486386][T29889] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2153.486386][T29889] [ 2153.499505][T29889] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2153.525274][T29889] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.559583][T29889] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.578343][T29888] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.593183][T29888] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.607943][T29913] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.611889][T29912] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2153.623103][T29913] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.645788][T29913] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.661434][T29912] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2153.672505][T29920] device pim6reg1 entered promiscuous mode [ 2153.679576][T29889] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 1: comm syz.1.7327: lblock 1 mapped to illegal pblock 1 (length 3) [ 2153.700219][T29917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2153.712227][T29917] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.7337: invalid indirect mapped block 4294967295 (level 0) [ 2153.726727][T29917] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.7337: invalid indirect mapped block 4294967295 (level 1) [ 2153.731231][T29912] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 2153.741649][T29917] EXT4-fs (loop2): 1 orphan inode deleted [ 2153.760084][T29917] EXT4-fs (loop2): 1 truncate cleaned up [ 2153.766267][T29912] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.7336: mark_inode_dirty error [ 2153.770834][T29917] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2153.800852][T29910] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2153.811780][T29912] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 2153.823082][T29917] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.2.7337: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 2153.850727][T29912] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.7336: mark_inode_dirty error [ 2153.903055][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 2153.903067][ T24] audit: type=1400 audit(1755615951.840:251): avc: denied { rmdir } for pid=29911 comm="syz.3.7336" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2153.966279][T29933] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7342'. [ 2153.967477][ T24] audit: type=1400 audit(1755615951.900:252): avc: denied { ioctl } for pid=29932 comm="syz.4.7342" path="socket:[106866]" dev="sockfs" ino=106866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2154.056732][ T24] audit: type=1400 audit(1755615951.990:253): avc: denied { mounton } for pid=29937 comm="syz.3.7343" path="/proc/1040/cgroup" dev="proc" ino=106441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2154.141775][ T24] audit: type=1400 audit(1755615952.080:254): avc: denied { connect } for pid=29944 comm="syz.0.7348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2154.184998][ T24] audit: type=1400 audit(1755615952.080:255): avc: denied { write } for pid=29944 comm="syz.0.7348" path="socket:[106888]" dev="sockfs" ino=106888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2154.210900][T29950] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7350'. [ 2154.286204][ T24] audit: type=1400 audit(1755615952.220:256): avc: denied { create } for pid=29954 comm="syz.4.7353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2154.323493][ T24] audit: type=1400 audit(1755615952.250:257): avc: denied { map } for pid=29954 comm="syz.4.7353" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2154.378720][T29952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2154.394651][T29952] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2154.441444][T29968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7358'. [ 2154.455082][ T24] audit: type=1400 audit(1755615952.390:258): avc: denied { setopt } for pid=29967 comm="syz.3.7358" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2154.477518][T29968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7358'. [ 2154.500368][ T24] audit: type=1400 audit(1755615952.440:259): avc: denied { create } for pid=29969 comm="syz.2.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2154.522997][ T24] audit: type=1400 audit(1755615952.460:260): avc: denied { connect } for pid=29969 comm="syz.2.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2154.919092][T30014] SELinux: failed to load policy [ 2154.959356][T30032] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2154.976134][T30040] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 2154.977596][T30032] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2155.001599][T30032] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 2155.014255][T30032] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2155.014255][T30032] [ 2155.024225][T30032] EXT4-fs (loop1): Total free blocks count 0 [ 2155.030542][T30032] EXT4-fs (loop1): Free/Dirty block details [ 2155.036599][T30032] EXT4-fs (loop1): free_blocks=2415919104 [ 2155.044026][T30032] EXT4-fs (loop1): dirty_blocks=64 [ 2155.049295][T30032] EXT4-fs (loop1): Block reservation details [ 2155.055588][T30032] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 2155.075700][T30031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2155.090289][T30031] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2155.090289][T30031] [ 2155.133697][T30052] SELinux: policydb version 0 does not match my version range 15-33 [ 2155.155821][T30052] SELinux: failed to load policy [ 2155.179330][T30056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.7395: inode #1: comm syz.1.7395: iget: illegal inode # [ 2155.197906][T30056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7395: error while reading EA inode 1 err=-117 [ 2155.218140][T30056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.7395: inode #1: comm syz.1.7395: iget: illegal inode # [ 2155.239521][T30056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7395: error while reading EA inode 1 err=-117 [ 2155.253884][T30056] EXT4-fs (loop1): 1 orphan inode deleted [ 2155.259652][T30056] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 2155.407600][T30069] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2155.422166][T30069] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2155.591575][T30095] SELinux: Context Ü is not valid (left unmapped). [ 2155.734228][T30107] process 'syz.0.7418' launched './file0' with NULL argv: empty string added [ 2155.928064][T30120] tmpfs: Unsupported parameter 'mpol' [ 2155.970832][T30122] SELinux: failed to load policy [ 2155.977397][T30111] FAT-fs (loop4): Directory bread(block 32) failed [ 2155.984095][T30111] FAT-fs (loop4): Directory bread(block 33) failed [ 2155.991100][T30111] FAT-fs (loop4): Directory bread(block 34) failed [ 2155.997860][T30111] FAT-fs (loop4): Directory bread(block 35) failed [ 2156.005264][T30111] FAT-fs (loop4): Directory bread(block 36) failed [ 2156.011995][T30111] FAT-fs (loop4): Directory bread(block 37) failed [ 2156.018733][T30111] FAT-fs (loop4): Directory bread(block 38) failed [ 2156.025653][T30111] FAT-fs (loop4): Directory bread(block 39) failed [ 2156.032499][T30111] FAT-fs (loop4): Directory bread(block 40) failed [ 2156.039324][T30111] FAT-fs (loop4): Directory bread(block 41) failed [ 2156.073616][T30111] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2156.092819][T30111] FAT-fs (loop4): Filesystem has been set read-only [ 2156.114159][T30111] attempt to access beyond end of device [ 2156.114159][T30111] loop4: rw=2049, want=4220, limit=128 [ 2156.126321][T30136] syz.2.7431[30136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2156.126408][T30136] syz.2.7431[30136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2156.211463][T30140] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,,errors=continue [ 2156.243995][T30140] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2156.264122][T30149] SELinux: policydb version 0 does not match my version range 15-33 [ 2156.272877][T30149] SELinux: failed to load policy [ 2156.362899][T30140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7432'. [ 2156.373600][T30140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7432'. [ 2156.392276][T30162] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2156.413749][T30162] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue [ 2156.423878][T30162] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2156.479077][T30162] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 2156.495412][T30165] EXT4-fs (loop2): Ignoring removed bh option [ 2156.502141][T30162] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #2: comm syz.4.7441: mark_inode_dirty error [ 2156.530430][T30162] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 2156.544826][T30165] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue [ 2156.586401][T30184] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 2156.625579][T30184] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #2: comm syz.4.7441: mark_inode_dirty error [ 2156.637792][T30184] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 2156.646506][T30184] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.7441: mark_inode_dirty error [ 2156.658498][T30184] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 2156.666937][T30184] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #2: comm syz.4.7441: mark_inode_dirty error [ 2156.858195][T30208] FAT-fs (loop1): Directory bread(block 32) failed [ 2156.898151][T30208] FAT-fs (loop1): Directory bread(block 33) failed [ 2156.937144][T30208] FAT-fs (loop1): Directory bread(block 34) failed [ 2156.945473][T30208] FAT-fs (loop1): Directory bread(block 35) failed [ 2156.952297][T30208] FAT-fs (loop1): Directory bread(block 36) failed [ 2156.958821][T30208] FAT-fs (loop1): Directory bread(block 37) failed [ 2156.965537][T30208] FAT-fs (loop1): Directory bread(block 38) failed [ 2156.972313][T30208] FAT-fs (loop1): Directory bread(block 39) failed [ 2156.979337][T30208] FAT-fs (loop1): Directory bread(block 40) failed [ 2156.986005][T30208] FAT-fs (loop1): Directory bread(block 41) failed [ 2156.995781][T30214] Alternate GPT is invalid, using primary GPT. [ 2157.007882][T30214] loop4: p1 p2 p3 [ 2157.060253][T30208] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2157.069122][T30208] FAT-fs (loop1): Filesystem has been set read-only [ 2157.078401][T30208] attempt to access beyond end of device [ 2157.078401][T30208] loop1: rw=2049, want=4220, limit=128 [ 2157.218255][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 2157.230662][ T3605] udevd[3605]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 2157.230680][T22347] udevd[22347]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 2157.303710][ T3603] udevd[3603]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 2157.314581][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 2157.326253][T22347] udevd[22347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 2157.479159][T30262] device pim6reg1 entered promiscuous mode [ 2157.497562][T30268] IPv4: Oversized IP packet from 127.202.26.0 [ 2157.530332][T30270] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 2157.661904][T30285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.7492: inode #1: comm syz.4.7492: iget: illegal inode # [ 2157.683218][T30285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.7492: error while reading EA inode 1 err=-117 [ 2157.696997][T30285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.7492: inode #1: comm syz.4.7492: iget: illegal inode # [ 2157.725649][T30285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.7492: error while reading EA inode 1 err=-117 [ 2157.755844][T30285] EXT4-fs (loop4): 1 orphan inode deleted [ 2157.771085][T30285] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 2157.800997][T30287] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2157.801050][T30291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.7496: bg 0: block 16: invalid block bitmap [ 2157.813622][T30287] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2157.822692][T30291] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 2157.842169][T30291] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.7496: invalid indirect mapped block 5 (level 0) [ 2157.857058][T30291] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.7496: invalid indirect mapped block 4294967295 (level 1) [ 2157.871550][T30291] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.7496: invalid indirect mapped block 4294967295 (level 2) [ 2157.891552][T30291] EXT4-fs (loop2): 1 truncate cleaned up [ 2157.897218][T30291] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2158.047260][T30312] tipc: Started in network mode [ 2158.062986][T30312] tipc: Own node identity ac14140f, cluster identity 4711 [ 2158.070444][T30312] tipc: New replicast peer: 255.255.255.255 [ 2158.089201][T30312] tipc: Enabled bearer , priority 10 [ 2158.171597][T30319] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2158.793721][T30369] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2158.807360][T30369] EXT4-fs (loop0): 1 truncate cleaned up [ 2158.813531][T30369] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,noload,,errors=continue [ 2158.919494][ T24] kauditd_printk_skb: 144 callbacks suppressed [ 2158.919504][ T24] audit: type=1400 audit(1755615956.850:405): avc: denied { unmount } for pid=25362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2159.218821][T28351] tipc: 32-bit node address hash set to f1414ac [ 2159.308285][ T24] audit: type=1326 audit(1755615957.240:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca41545be9 code=0x7ffc0000 [ 2159.359133][ T24] audit: type=1326 audit(1755615957.270:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fca41545be9 code=0x7ffc0000 [ 2159.383801][ T24] audit: type=1326 audit(1755615957.270:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca41545be9 code=0x7ffc0000 [ 2159.444266][ T24] audit: type=1400 audit(1755615957.380:409): avc: denied { create } for pid=30453 comm="syz.0.7562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2159.465912][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7562'. [ 2159.485837][ T24] audit: type=1400 audit(1755615957.400:410): avc: denied { ioctl } for pid=30453 comm="syz.0.7562" path="socket:[108687]" dev="sockfs" ino=108687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2159.541175][ T24] audit: type=1400 audit(1755615957.450:411): avc: denied { create } for pid=30451 comm="+}[@" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2159.583836][ T24] audit: type=1400 audit(1755615957.450:412): avc: denied { mounton } for pid=30451 comm="+}[@" path="/387/file0" dev="tmpfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2159.607866][ T24] audit: type=1326 audit(1755615957.520:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30470 comm="syz.4.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1856ebe9 code=0x7ffc0000 [ 2159.609757][T30475] device pim6reg1 entered promiscuous mode [ 2159.643136][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7572'. [ 2159.652249][T30472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.660248][T30472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.667480][ T24] audit: type=1326 audit(1755615957.520:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30470 comm="syz.4.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1856ebe9 code=0x7ffc0000 [ 2159.841662][T30496] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 2159.869562][T30496] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2159.925826][T11344] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 15) [ 2159.940682][T11344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 2159.953396][T11344] EXT4-fs (loop3): This should not happen!! Data will be lost [ 2159.953396][T11344] [ 2159.954205][T30512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2159.985652][T30512] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2160.063372][T30531] device pim6reg1 entered promiscuous mode [ 2160.190439][T30561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7612'. [ 2160.215799][T30566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7615'. [ 2160.230432][T30564] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 2160.265483][T30575] device pim6reg1 entered promiscuous mode [ 2160.281874][T30577] Module has invalid ELF structures [ 2160.364366][T30588] SELinux: failed to load policy [ 2160.520574][T30611] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.7630'. [ 2160.535187][T30611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7630'. [ 2160.545661][T30611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=30611 comm=syz.2.7630 [ 2160.631603][T30625] device pim6reg1 entered promiscuous mode [ 2160.877804][T30654] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.7655: inode #1: comm syz.0.7655: iget: illegal inode # [ 2160.900904][T30654] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.7655: error while reading EA inode 1 err=-117 [ 2160.923039][T30654] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.7655: inode #1: comm syz.0.7655: iget: illegal inode # [ 2160.936537][T30654] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.7655: error while reading EA inode 1 err=-117 [ 2160.949313][T30654] EXT4-fs (loop0): 1 orphan inode deleted [ 2160.955872][T30654] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 2161.324877][T30679] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2161.343134][T30670] 9pnet: Could not find request transport: rdma [ 2161.369579][T30676] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2161.381312][T30679] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2161.391917][T30679] JBD2: no valid journal superblock found [ 2161.397655][T30679] EXT4-fs (loop1): error loading journal [ 2161.424630][T30676] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 2161.449557][T30676] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #15: comm syz.3.7663: mark_inode_dirty error [ 2161.464739][T30676] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 2161.473670][T30676] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #15: comm syz.3.7663: mark_inode_dirty error [ 2161.487714][T30676] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 2161.496701][T30676] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #15: comm syz.3.7663: mark_inode_dirty error [ 2161.508323][T30676] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 2161.516844][T30676] EXT4-fs error (device loop3): ext4_truncate:4390: inode #15: comm syz.3.7663: mark_inode_dirty error [ 2161.528432][T30676] EXT4-fs error (device loop3) in ext4_setattr:5707: error 27 [ 2161.683261][T30699] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2161.693947][T30699] EXT4-fs (loop0): shut down requested (2) [ 2161.704711][T30699] EXT4-fs (loop0): re-mounted. Opts: (null) [ 2161.896754][T30733] mmap: syz.0.7686 (30733) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 2161.912888][T30733] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7686'. [ 2162.030979][T30733] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.7686: Invalid block bitmap block 0 in block_group 0 [ 2162.062883][T30733] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.7686: Failed to acquire dquot type 0 [ 2162.077490][T30733] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.7686: Freeing blocks not in datazone - block = 0, count = 4096 [ 2162.092103][T30733] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7686: Invalid inode bitmap blk 0 in block_group 0 [ 2162.105318][T11344] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 2162.105397][T30733] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 2162.128234][T30733] EXT4-fs (loop0): 1 orphan inode deleted [ 2162.143127][T30733] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2162.156230][T30752] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 2162.157087][T30752] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2162.190109][T30752] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 2162.205013][T30752] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 2162.225475][T30752] EXT4-fs (loop2): 1 truncate cleaned up [ 2162.232462][T30752] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue [ 2162.286246][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7705'. [ 2162.335506][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7705'. [ 2162.453528][T30790] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7709: error while reading EA inode 32 err=-116 [ 2162.473085][T30790] EXT4-fs (loop1): Remounting filesystem read-only [ 2162.481207][T30790] EXT4-fs error (device loop1): ext4_evict_inode:294: comm syz.1.7709: couldn't truncate inode 15 (err -30) [ 2162.493234][T30790] EXT4-fs (loop1): 1 orphan inode deleted [ 2162.498951][T30790] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,discard,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,data_err=ignore, [ 2162.534942][T30802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7714: bg 0: block 248: padding at end of block bitmap is not set [ 2162.549832][T30802] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.7714: Failed to acquire dquot type 1 [ 2162.562032][T30802] EXT4-fs (loop0): 1 truncate cleaned up [ 2162.567887][T30802] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2162.576990][T30802] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2162.652086][T30805] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2162.668710][T30805] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2162.681422][T30805] JBD2: no valid journal superblock found [ 2162.687268][T30805] EXT4-fs (loop2): error loading journal [ 2162.892461][T30835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7731'. [ 2162.927284][T30835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30835 comm=syz.2.7731 [ 2163.101764][T30869] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2163.123516][T30869] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noauto_da_alloc,quota,stripe=0x0000000000000000,jqfmt=vfsold,,errors=continue [ 2163.145434][T30869] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2163.423215][T30882] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2163.432647][T30882] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2164.212538][ T24] kauditd_printk_skb: 180 callbacks suppressed [ 2164.212551][ T24] audit: type=1326 audit(1755615962.130:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30868 comm="syz.3.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fca41545be9 code=0x7ffc0000 [ 2164.243710][ T24] audit: type=1400 audit(1755615962.130:590): avc: denied { remove_name } for pid=30868 comm="syz.3.7746" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2164.266690][ T24] audit: type=1400 audit(1755615962.130:591): avc: denied { unlink } for pid=30868 comm="syz.3.7746" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2164.289033][ T24] audit: type=1326 audit(1755615962.130:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30868 comm="syz.3.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca41545be9 code=0x7ffc0000 [ 2164.313356][ T24] audit: type=1326 audit(1755615962.130:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30868 comm="syz.3.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca41545be9 code=0x7ffc0000 [ 2164.336889][T27083] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 2164.348309][ T24] audit: type=1400 audit(1755615962.180:594): avc: denied { unmount } for pid=23478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2164.360148][T30893] netlink: 'syz.0.7752': attribute type 27 has an invalid length. [ 2164.385150][ T24] audit: type=1400 audit(1755615962.320:595): avc: denied { bind } for pid=30895 comm="syz.2.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2164.405662][ T24] audit: type=1400 audit(1755615962.320:596): avc: denied { setopt } for pid=30895 comm="syz.2.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2164.426813][ T24] audit: type=1400 audit(1755615962.320:597): avc: denied { ioctl } for pid=30895 comm="syz.2.7755" path="socket:[109375]" dev="sockfs" ino=109375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2164.488189][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.499142][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.508625][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.520114][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.529044][T30906] loop9: unable to read partition table [ 2164.536371][ T24] audit: type=1326 audit(1755615962.470:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30901 comm="syz.0.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff62fdbe9 code=0x7ffc0000 [ 2164.559884][T30906] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 2164.559884][T30906] ) failed (rc=-5) [ 2164.573676][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.584789][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.593369][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.604464][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.612713][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.623711][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.631929][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.642999][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.651256][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.662163][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2164.680090][T27083] usb 2-1: device descriptor read/64, error -71 [ 2164.737207][T30925] __nla_validate_parse: 1 callbacks suppressed [ 2164.737216][T30925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7769'. [ 2164.859525][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7780'. [ 2164.871949][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7780'. [ 2164.881415][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7780'. [ 2164.885258][T30956] SELinux: ebitmap: truncated map [ 2164.890733][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7780'. [ 2164.898948][T30956] SELinux: failed to load policy [ 2165.004257][T30966] syz.3.7787 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2165.070298][T27083] usb 2-1: device descriptor read/64, error -71 [ 2165.299362][T30981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7793'. [ 2165.460040][T27083] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2165.481169][T30990] ================================================================== [ 2165.489286][T30990] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 2165.497423][T30990] Read of size 8 at addr ffff8881129227c0 by task syz.3.7797/30990 [ 2165.505565][T30990] [ 2165.507893][T30990] CPU: 1 PID: 30990 Comm: syz.3.7797 Not tainted 5.10.240-syzkaller #0 [ 2165.516282][T30990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2165.526604][T30990] Call Trace: [ 2165.529884][T30990] __dump_stack+0x21/0x24 [ 2165.534265][T30990] dump_stack_lvl+0x169/0x1d8 [ 2165.538949][T30990] ? show_regs_print_info+0x18/0x18 [ 2165.544130][T30990] ? thaw_kernel_threads+0x220/0x220 [ 2165.549482][T30990] print_address_description+0x7f/0x2c0 [ 2165.555015][T30990] ? tc_setup_flow_action+0x842/0x3280 [ 2165.560453][T30990] kasan_report+0xe2/0x130 [ 2165.564856][T30990] ? flow_action_cookie_create+0x28/0x90 [ 2165.570469][T30990] ? tc_setup_flow_action+0x842/0x3280 [ 2165.575914][T30990] __asan_report_load8_noabort+0x14/0x20 [ 2165.581541][T30990] tc_setup_flow_action+0x842/0x3280 [ 2165.586817][T30990] ? __kmalloc+0x1a7/0x330 [ 2165.591215][T30990] ? flow_rule_alloc+0x32/0x2c0 [ 2165.596047][T30990] mall_replace_hw_filter+0x293/0x810 [ 2165.601401][T30990] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 2165.607467][T30990] ? mall_set_parms+0x410/0x410 [ 2165.612424][T30990] ? tcf_exts_destroy+0xb0/0xb0 [ 2165.617261][T30990] ? pcpu_alloc+0xf8a/0x16b0 [ 2165.621844][T30990] ? mall_set_parms+0x19d/0x410 [ 2165.626694][T30990] mall_change+0x528/0x750 [ 2165.631092][T30990] ? __kasan_check_write+0x14/0x20 [ 2165.636189][T30990] ? mall_get+0xa0/0xa0 [ 2165.640329][T30990] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 2165.646215][T30990] ? nla_strcmp+0xf4/0x140 [ 2165.650614][T30990] tc_new_tfilter+0x13f6/0x1a10 [ 2165.655458][T30990] ? mall_get+0xa0/0xa0 [ 2165.659796][T30990] ? tcf_gate_entry_destructor+0x20/0x20 [ 2165.665427][T30990] ? perf_callchain_kernel+0x516/0x5c0 [ 2165.670879][T30990] ? security_capable+0x87/0xb0 [ 2165.675723][T30990] ? ns_capable+0x8c/0xf0 [ 2165.680056][T30990] ? netlink_net_capable+0x125/0x160 [ 2165.685333][T30990] ? tcf_gate_entry_destructor+0x20/0x20 [ 2165.690956][T30990] rtnetlink_rcv_msg+0x800/0xb90 [ 2165.695889][T30990] ? rtnetlink_bind+0x80/0x80 [ 2165.700563][T30990] ? arch_stack_walk+0xee/0x140 [ 2165.705394][T30990] ? stack_trace_save+0x98/0xe0 [ 2165.710313][T30990] ? stack_trace_snprint+0xf0/0xf0 [ 2165.715491][T30990] ? memcpy+0x56/0x70 [ 2165.719458][T30990] ? avc_has_perm+0x234/0x360 [ 2165.724218][T30990] ? __kasan_slab_alloc+0xbd/0xf0 [ 2165.729429][T30990] ? slab_post_alloc_hook+0x5d/0x2f0 [ 2165.734715][T30990] ? ___sys_sendmsg+0x1f0/0x260 [ 2165.739550][T30990] ? avc_has_perm_noaudit+0x240/0x240 [ 2165.744943][T30990] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 2165.750318][T30990] netlink_rcv_skb+0x1e0/0x430 [ 2165.755180][T30990] ? rtnetlink_bind+0x80/0x80 [ 2165.759858][T30990] ? netlink_ack+0xb80/0xb80 [ 2165.764525][T30990] ? __netlink_lookup+0x387/0x3b0 [ 2165.769560][T30990] rtnetlink_rcv+0x1c/0x20 [ 2165.773990][T30990] netlink_unicast+0x876/0xa40 [ 2165.778781][T30990] netlink_sendmsg+0x88d/0xb30 [ 2165.783571][T30990] ? netlink_getsockopt+0x530/0x530 [ 2165.788768][T30990] ? security_socket_sendmsg+0x82/0xa0 [ 2165.794217][T30990] ? netlink_getsockopt+0x530/0x530 [ 2165.799428][T30990] ____sys_sendmsg+0x5a2/0x8c0 [ 2165.804177][T30990] ? __sys_sendmsg_sock+0x40/0x40 [ 2165.809186][T30990] ? import_iovec+0x7c/0xb0 [ 2165.813667][T30990] ___sys_sendmsg+0x1f0/0x260 [ 2165.818321][T30990] ? __sys_sendmsg+0x250/0x250 [ 2165.823071][T30990] ? __fdget+0x1a1/0x230 [ 2165.827381][T30990] __x64_sys_sendmsg+0x1e2/0x2a0 [ 2165.833381][T30990] ? ___sys_sendmsg+0x260/0x260 [ 2165.838430][T30990] ? switch_fpu_return+0x197/0x340 [ 2165.843696][T30990] do_syscall_64+0x31/0x40 [ 2165.848221][T30990] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2165.854107][T30990] RIP: 0033:0x7fca41545be9 [ 2165.858591][T30990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2165.878278][T30990] RSP: 002b:00007fca3ffae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2165.886681][T30990] RAX: ffffffffffffffda RBX: 00007fca4176cfa0 RCX: 00007fca41545be9 [ 2165.894641][T30990] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 2165.902592][T30990] RBP: 00007fca415c8e19 R08: 0000000000000000 R09: 0000000000000000 [ 2165.910856][T30990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2165.918823][T30990] R13: 00007fca4176d038 R14: 00007fca4176cfa0 R15: 00007ffc7dc65d78 [ 2165.926904][T30990] [ 2165.929217][T30990] Allocated by task 30990: [ 2165.933620][T30990] __kasan_kmalloc+0xda/0x110 [ 2165.938277][T30990] __kmalloc+0x1a7/0x330 [ 2165.942500][T30990] tcf_idr_create+0x5f/0x790 [ 2165.947070][T30990] tcf_idr_create_from_flags+0x61/0x70 [ 2165.952507][T30990] tcf_gact_init+0x2b4/0x520 [ 2165.957098][T30990] tcf_action_init_1+0x3e1/0x670 [ 2165.962035][T30990] tcf_action_init+0x1e6/0x700 [ 2165.966901][T30990] tcf_exts_validate+0x215/0x510 [ 2165.971910][T30990] mall_set_parms+0x4b/0x410 [ 2165.976478][T30990] mall_change+0x45c/0x750 [ 2165.981056][T30990] tc_new_tfilter+0x13f6/0x1a10 [ 2165.985885][T30990] rtnetlink_rcv_msg+0x800/0xb90 [ 2165.990800][T30990] netlink_rcv_skb+0x1e0/0x430 [ 2165.995538][T30990] rtnetlink_rcv+0x1c/0x20 [ 2165.999933][T30990] netlink_unicast+0x876/0xa40 [ 2166.004668][T30990] netlink_sendmsg+0x88d/0xb30 [ 2166.009423][T30990] ____sys_sendmsg+0x5a2/0x8c0 [ 2166.014203][T30990] ___sys_sendmsg+0x1f0/0x260 [ 2166.018870][T30990] __x64_sys_sendmsg+0x1e2/0x2a0 [ 2166.023792][T30990] do_syscall_64+0x31/0x40 [ 2166.028188][T30990] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2166.034051][T30990] [ 2166.036357][T30990] Last potentially related work creation: [ 2166.042059][T30990] kasan_save_stack+0x3a/0x60 [ 2166.046712][T30990] __kasan_record_aux_stack+0xd2/0x100 [ 2166.052170][T30990] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2166.058063][T30990] call_rcu+0x10e/0x1050 [ 2166.062301][T30990] neigh_parms_release+0x1cb/0x200 [ 2166.067486][T30990] inetdev_event+0x81c/0x1030 [ 2166.072147][T30990] raw_notifier_call_chain+0x90/0x100 [ 2166.077496][T30990] unregister_netdevice_many+0xf8b/0x1980 [ 2166.083222][T30990] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 2166.088526][T30990] cleanup_net+0x5fb/0xb70 [ 2166.092952][T30990] process_one_work+0x6e1/0xba0 [ 2166.097778][T30990] worker_thread+0xa6a/0x13b0 [ 2166.102517][T30990] kthread+0x346/0x3d0 [ 2166.106560][T30990] ret_from_fork+0x1f/0x30 [ 2166.111030][T30990] [ 2166.113420][T30990] Second to last potentially related work creation: [ 2166.119996][T30990] kasan_save_stack+0x3a/0x60 [ 2166.124748][T30990] __kasan_record_aux_stack+0xd2/0x100 [ 2166.130184][T30990] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2166.135963][T30990] call_rcu+0x10e/0x1050 [ 2166.140189][T30990] neigh_parms_release+0x1cb/0x200 [ 2166.145273][T30990] inetdev_event+0x81c/0x1030 [ 2166.150012][T30990] raw_notifier_call_chain+0x90/0x100 [ 2166.155358][T30990] unregister_netdevice_many+0xf8b/0x1980 [ 2166.161053][T30990] ip_tunnel_delete_nets+0x343/0x390 [ 2166.166321][T30990] ipip_exit_batch_net+0x22/0x30 [ 2166.171252][T30990] cleanup_net+0x5fb/0xb70 [ 2166.175670][T30990] process_one_work+0x6e1/0xba0 [ 2166.180725][T30990] worker_thread+0xa6a/0x13b0 [ 2166.185398][T30990] kthread+0x346/0x3d0 [ 2166.189464][T30990] ret_from_fork+0x1f/0x30 [ 2166.193851][T30990] [ 2166.196245][T30990] The buggy address belongs to the object at ffff888112922700 [ 2166.196245][T30990] which belongs to the cache kmalloc-192 of size 192 [ 2166.210281][T30990] The buggy address is located 0 bytes to the right of [ 2166.210281][T30990] 192-byte region [ffff888112922700, ffff8881129227c0) [ 2166.223892][T30990] The buggy address belongs to the page: [ 2166.229526][T30990] page:ffffea00044a4880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112922 [ 2166.239776][T30990] flags: 0x4000000000000200(slab) [ 2166.244819][T30990] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043380 [ 2166.253402][T30990] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 2166.261983][T30990] page dumped because: kasan: bad access detected [ 2166.268377][T30990] page_owner tracks the page as allocated [ 2166.274093][T30990] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 94, ts 951493335391, free_ts 951489246468 [ 2166.290131][T30990] prep_new_page+0x179/0x180 [ 2166.294722][T30990] get_page_from_freelist+0x2235/0x23d0 [ 2166.300572][T30990] __alloc_pages_nodemask+0x268/0x5f0 [ 2166.305929][T30990] new_slab+0x84/0x3f0 [ 2166.309985][T30990] ___slab_alloc+0x2a6/0x450 [ 2166.314683][T30990] __slab_alloc+0x63/0xa0 [ 2166.319009][T30990] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 2166.324373][T30990] kernfs_fop_open+0x343/0xb30 [ 2166.329204][T30990] do_dentry_open+0x793/0x1090 [ 2166.334028][T30990] vfs_open+0x73/0x80 [ 2166.337987][T30990] path_openat+0x27ad/0x3160 [ 2166.342601][T30990] do_filp_open+0x1b3/0x3e0 [ 2166.347079][T30990] do_sys_openat2+0x14c/0x6d0 [ 2166.351730][T30990] __x64_sys_openat+0x136/0x160 [ 2166.356829][T30990] do_syscall_64+0x31/0x40 [ 2166.361224][T30990] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2166.367092][T30990] page last free stack trace: [ 2166.371749][T30990] free_unref_page_prepare+0x2b7/0x2d0 [ 2166.377419][T30990] free_unref_page_list+0x12e/0x9b0 [ 2166.382619][T30990] release_pages+0xe38/0xe80 [ 2166.387217][T30990] free_pages_and_swap_cache+0x86/0xa0 [ 2166.392673][T30990] tlb_finish_mmu+0x175/0x300 [ 2166.397365][T30990] exit_mmap+0x2fc/0x540 [ 2166.401619][T30990] __mmput+0x93/0x2f0 [ 2166.405601][T30990] mmput+0x4e/0x150 [ 2166.409423][T30990] do_exit+0x9ae/0x2480 [ 2166.414099][T30990] do_group_exit+0x141/0x310 [ 2166.418684][T30990] get_signal+0xf7d/0x12e0 [ 2166.423083][T30990] arch_do_signal_or_restart+0xbf/0x10f0 [ 2166.428698][T30990] exit_to_user_mode_loop+0xa2/0xe0 [ 2166.433880][T30990] syscall_exit_to_user_mode+0x68/0x90 [ 2166.439312][T30990] do_syscall_64+0x3d/0x40 [ 2166.443710][T30990] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2166.449678][T30990] [ 2166.451994][T30990] Memory state around the buggy address: [ 2166.457633][T30990] ffff888112922680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2166.465677][T30990] ffff888112922700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.473714][T30990] >ffff888112922780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 2166.481749][T30990] ^ [ 2166.487878][T30990] ffff888112922800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2166.495922][T30990] ffff888112922880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2166.504041][T30990] ================================================================== [ 2166.512075][T30990] Disabling lock debugging due to kernel taint