last executing test programs: 29.700901928s ago: executing program 4 (id=963): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, &(0x7f00000002c0)=""/124, &(0x7f0000001600)=""/4096, &(0x7f0000000580)=""/180, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000640)={0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 29.138886518s ago: executing program 4 (id=967): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 25.301845641s ago: executing program 4 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") 23.600609859s ago: executing program 4 (id=977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9536000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4000, 0x2}}, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0xffffff7f}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) 23.099379828s ago: executing program 4 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x10}, 0x18) shutdown(0xffffffffffffffff, 0x1) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000002a80)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x100, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'veth0_to_hsr\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2ce6988195517a0556c50ac0c0747468ee05f0e0ec4dff80056ea20de6fd"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@empty, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="78817b2fbef4"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'batadv_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendfile(r5, r4, 0x0, 0x80000000) 21.927732177s ago: executing program 2 (id=982): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) syz_open_dev$tty20(0xc, 0x4, 0x0) io_setup(0x200, &(0x7f0000000140)) creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 20.282641474s ago: executing program 4 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = socket(0x1e, 0x805, 0x0) timer_create(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close(r7) pipe2$9p(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r8, 0x1) 16.832404261s ago: executing program 2 (id=999): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.841317964s ago: executing program 3 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) shutdown(0xffffffffffffffff, 0x1) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r5, r4, 0x0, 0x80000000) 11.635715898s ago: executing program 2 (id=1004): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000", @ANYRES32=0x1, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x24000804) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r5}, 0x10) 7.22885481s ago: executing program 1 (id=1009): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000a00), &(0x7f0000000040)=""/38}, 0x20) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) lseek(0xffffffffffffffff, 0xffffffffffffa937, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000900)=""/212, 0xd4}], 0x1, 0xa2, 0x0) 7.22838962s ago: executing program 2 (id=1010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.137259882s ago: executing program 3 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 7.120081722s ago: executing program 2 (id=1013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, 0x0, 0x0, 0x0) 7.084690603s ago: executing program 2 (id=1014): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "0b835c48b984765a004892c7e0d76e19ac9ea17e54c65f7b026ba58e23172c78f57177459a93d486a1ee3acc92607eedc803eede5b654819d65153302b98255a", 0x27}, 0x48, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.659977916s ago: executing program 1 (id=1015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9536000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4000, 0x2}}, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x7}, {0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0xffffff7f}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40101288, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x4c09, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000500)={0x0, @rand_addr, @remote}, &(0x7f0000000640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 5.048614146s ago: executing program 32 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = socket(0x1e, 0x805, 0x0) timer_create(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close(r7) pipe2$9p(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r8, 0x1) 3.718394968s ago: executing program 3 (id=1017): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) 3.710115889s ago: executing program 0 (id=1018): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000001100), 0x1, 0x793, &(0x7f0000001600)="$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") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.555532341s ago: executing program 3 (id=1019): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x80002, 0x4) syz_mount_image$fuse(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000840)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000002600)={0x2}) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) 2.98388314s ago: executing program 1 (id=1020): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="62c5def7c4266d09c06ab58fff4e7c409edecd3e09ed2cafd6fba51d8ff9f7a9e5132910ae8154"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58}, 0x10) 2.467807659s ago: executing program 1 (id=1021): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(0x0, 0xf62) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2.455213629s ago: executing program 3 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e21, @remote}, {0x1, @multicast}, 0x64, {0x2, 0x4e24, @rand_addr=0x64010101}, 'veth0_to_team\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r5}, 0x18) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) 1.983284837s ago: executing program 0 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$eJzs3MtvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcOgEDiABISHMoxJGlV6jaoCRKtKigIlSOqxB1xROIv4AQXBJyQuMIdVapQLy2cjNbeTRzHdprEiQP+fKRtZ3Ynmfl6duKZnTgBDKyR7J8kYndE/BYRw43s0gIjjf/u3Loy9detK1NJ1Gpv/pnUy92+dWWqKFp83a4iU45IP03iYJt65y5dPjdZrc5czPNj8+ffG5u7dPmZs+cnz8ycmbkwcfLk8WPjz52YeLYncWZx3T7w4eyh/a++ff31qVPX3/npm6SIvyWOBS+sq8qRbhcfr9XW9c23mj1N6aTcx4awKqXGMI2h+vgfjlIsdt5wvPJJXxsHbKharVa7r/PlqzXgPyyJfrcA6I/ijT5b/xbHJk09toSbLzYWQFncd/KjcaUcaV5mqGV920sjEXHq6t9fZkd0eg4BANBD32Xzn6fbzf/SaH4u9P98D6USEfdExN6IOBER+yLi3oh62fsj4oFV1t+6SbJ8/pPeWFNgdymb/z2f720tnf8Vs7+olPLcnnr8Q8nps9WZo/lrciSGtmf58S51fP/yr593utY8/8uOrP5iLpi340Z5e4+CbePmxxEHyu3iTxZ2ApKI2B8RB9ZYx9knvz7U6drK8XfRg32m2lcRTzT6/2q0xF9Iuu9Pjv0vqjNHx4q7Yrmff7n2Rqf61xV/D2T9v7Pt/V/Ev6eSNO/Xzq2+jmu/f9ZxTbOW+396cn5yW/LWknMfTM7PXxyP2Ja8Vs9Xms9PtJSbWCyfxX/kcPvxvzcWX4mDEZHdxA9GxEMR8XB+/pGIeDQiDneJ/8eXHnt37fFvrCz+6a79Hy39v5jYFq1n2idK5374dkmlldXEn/X/8XrqSH4m6/+V4rqbdq3tbgYAAIB/nzQidkeSji6k03R0tPE7/PtiZ1qdnZt/6vTs+xemG58RqMRQWjzpGm56HjqeL+uL/ERL/lj+3PiL0o56fnRqtjrd7+BhwO3qMP4zf5T63TpgwyX9bgDQNz6vCYPL+IfBZfzD4Goz/nf0ox3A5mv3/v9RH9oBbL6W8W/bDwaI9T8MrrL1Pgws7/8wkOZ2xMofkpeQWJaIdEs0o0ui+BuXW6U9WyuRRkS3Mv3+yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAb/wQAAP//F5XoQw==") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.711069092s ago: executing program 0 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, 0x0) 1.632094603s ago: executing program 0 (id=1025): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r3, 0x1, 0x0, @void}, 0x10) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) 1.562714604s ago: executing program 0 (id=1026): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = add_key$user(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.523652015s ago: executing program 3 (id=1027): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000001100), 0x1, 0x793, &(0x7f0000001600)="$eJzs3MFLXNcaAPDvXp0YE/PGB2/x3ibvQQIJhIwaN8nq+TZvFwgEuk1FRxGvTnDGVG0gprtCIY2bthRKu++y20JI/4DuSqCF7gulTe2i7WbKHUdt4owZ45hJ098PrnPOveee73z3Xo/3gncC+Mv6T/4jiRiKiGsRUWyuTyPiWKN0PGJ9q93m49tT+ZJEvX79hyTfLTbrxZ2+kubnyWjsEv+MiIeFiAtv7Y1bXV2bn8yy8lKzPlJbuDlSXV27OLcwOVueLS+OjV8ZvTw+fnl0vGu5nn3tyuD9L/+/sfHVZ7V7p/svJjHRyDuauXUt0B9sHZNCTDy1fvEogvVQ0kGb/oM0BgDgSOT3+X3Ne7NCFKNv9y5tr302AQAAAC+v+kC9U7923BIAAAB4ySTR6xEAAAAAR2v7/wC23+09qvdg2/n+fxEx3Cp+f+Md4ojjUYiIE5vJE68fJFu7waGs342IBxMtrr/Dv6Q8ulsc7E6PdNuDfP6ZaDX/pDvzT7SYf/q3vzvhkNrPf7vx+9rMf9c6jPH5R/8qtI1/t7ry9ulW8ZOd+Emb+K93GP/exjv3222rfxJxruXfn+SJWPt8P8TIzFzW6ldrZ7gPfzv/qH3+ESf2xE+SRtRk//xvdpj/m5s/za/vE//8mf3P/1b8gSf2y6+Jd5vjSCPifvMzr288FePMwtdf7I2crG/Hn25z/Fue//G+nR4+7jD/bz8dWOmwKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEUSVraKadpqRRxMiL+ESfSrFKtXZipLC9O59sihqOQzsxl5dGIKG7Vk7w+1ijv1i/l5cHd+nhE/P2bwa2gc1m5NFXJpnudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtORsRQJGkpItKI+LmYpqVSr0cFAAAAdN1wrwcAAAAAHDnP/wAAAPDqe97n/6TL4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeadeuXs2X+ubj21N5ffrW6vJ85dbF6XJ1vrSwPFWaqizdLM1WKrNZuTRVWXhWf2lEjF2J5ZWRWrlaG6murt1YqCwv1m7MLUzOlm+UCy8kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5qqLEkA6WISBvlNC2VIk5FxHAUkpm5rDwaEX+LiEfFwkBeH+v1oAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi66ura/GSWlZf+3IX6i0inLyK612FfdKGfSCJeklPQovBB86zs1yZZj+j5UNPmQA/Tz8GujTvPOCy9Lvy7R/MRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9VV1dm5/MsvJStdcjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLfS75KIyJdzxbNDT289lvxSjMGt8hsfXn9vZbJWWxrL1/9YbGyPiNr7zfWXIuJUc8c7LzYLAAAAeMX99yCNt5/Tt5/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOlVdXZufzLLy0hEW4m6vswQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7H7wEAAP//YEa3Uw==") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 1.468744026s ago: executing program 1 (id=1028): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, &(0x7f00000002c0)=""/124, &(0x7f0000001600)=""/4096, &(0x7f0000000580)=""/180, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000640)={0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 186.271466ms ago: executing program 5 (id=1016): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2003050, &(0x7f0000000580)={[{@errors_remount}, {@nomblk_io_submit}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}], [{@uid_eq}, {@fowner_lt}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x34, 0x36, 0x30, 0x33, 0x39, 0x35, 0x32], 0x2d, [0x66, 0x63, 0x0, 0x34], 0x2d, [0x31, 0x62, 0x33, 0x32], 0x2d, [0x39, 0x65, 0x34, 0x34], 0x2d, [0x35, 0x61, 0x39, 0x61, 0x62, 0x63, 0x33, 0x31]}}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt}]}, 0xd, 0x4dc, &(0x7f0000001280)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) 143.147317ms ago: executing program 0 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 1 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) kernel console output (not intermixed with test programs): moved by 3.5 [ 239.198942][ T2586] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 239.198942][ T2586] [ 239.285429][ T2586] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.372235][ T2586] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 239.426710][ T2596] loop3: detected capacity change from 0 to 2048 [ 239.546688][ T2596] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.596069][ T2596] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.276897][ T30] audit: type=1326 audit(1743899851.665:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 240.325119][ T30] audit: type=1326 audit(1743899851.665:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 240.348797][ T30] audit: type=1326 audit(1743899851.665:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 240.373820][ T30] audit: type=1326 audit(1743899851.665:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 240.398283][ T30] audit: type=1326 audit(1743899851.665:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 240.912888][ T30] audit: type=1326 audit(1743899851.665:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 240.945517][ T30] audit: type=1326 audit(1743899851.665:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0dc7ecb1a3 code=0x7ffc0000 [ 240.968906][ T30] audit: type=1326 audit(1743899851.665:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0dc7ec9c1f code=0x7ffc0000 [ 241.286123][ T30] audit: type=1326 audit(1743899851.675:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0dc7ecb1f7 code=0x7ffc0000 [ 241.728791][ T30] audit: type=1326 audit(1743899851.675:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dc7ec9ad0 code=0x7ffc0000 [ 242.886562][ T2558] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 242.983993][ T2627] loop0: detected capacity change from 0 to 512 [ 243.180001][ T2627] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 243.246157][ T2627] EXT4-fs (loop0): invalid journal inode [ 243.251669][ T2627] EXT4-fs (loop0): can't get journal size [ 243.292569][ T2627] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.551: corrupted in-inode xattr [ 243.304845][ T2627] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.551: couldn't read orphan inode 15 (err -117) [ 243.317456][ T2627] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 243.329490][ T2632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'. [ 244.023638][ T2654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.558'. [ 245.222788][ T2666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.904329][ T2677] loop3: detected capacity change from 0 to 1024 [ 246.011108][ T2680] loop2: detected capacity change from 0 to 512 [ 246.059204][ T2680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.080579][ T2677] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 246.080579][ T2677] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 246.080579][ T2677] [ 246.103618][ T2677] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.127427][ T2677] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 246.320053][ T2687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.778826][ T2694] loop0: detected capacity change from 0 to 2048 [ 246.842176][ T2696] loop4: detected capacity change from 0 to 512 [ 246.872378][ T2696] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.920919][ T2694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.931620][ T2694] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.181630][ T2708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.928379][ T2683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 249.042326][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 249.042414][ T30] audit: type=1326 audit(1743899860.435:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2693 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 249.187369][ T2720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'. [ 249.500274][ T2716] loop3: detected capacity change from 0 to 512 [ 249.550360][ T30] audit: type=1326 audit(1743899860.435:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2693 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 250.852860][ T2716] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.574: casefold flag without casefold feature [ 250.866312][ T2716] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.574: couldn't read orphan inode 15 (err -117) [ 250.878898][ T2716] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 251.118804][ T2746] loop2: detected capacity change from 0 to 256 [ 253.418361][ T2750] loop4: detected capacity change from 0 to 512 [ 253.656380][ T2750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.559708][ T2764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.877613][ T2770] loop3: detected capacity change from 0 to 512 [ 254.884548][ T2771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2771 comm=syz.2.586 [ 254.894144][ T30] audit: type=1400 audit(1743899866.285:332): avc: denied { setopt } for pid=2772 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.943496][ T30] audit: type=1400 audit(1743899866.315:333): avc: denied { write } for pid=2772 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.977810][ T2770] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.169430][ T2783] loop2: detected capacity change from 0 to 512 [ 255.306149][ T2783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.564212][ T2785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.608316][ T2783] EXT4-fs (loop2): 1 truncate cleaned up [ 255.613794][ T2783] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 255.936953][ T2800] loop4: detected capacity change from 0 to 512 [ 256.255634][ T2800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 256.301129][ T2800] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.594: bg 0: block 248: padding at end of block bitmap is not set [ 256.332005][ T2800] Quota error (device loop4): write_blk: dquota write failed [ 256.339834][ T2800] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 256.349890][ T2800] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.594: Failed to acquire dquot type 1 [ 256.388104][ T2800] EXT4-fs (loop4): 1 truncate cleaned up [ 256.413296][ T2800] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 257.386937][ T2804] loop0: detected capacity change from 0 to 128 [ 257.464868][ T2804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.499980][ T2804] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.812432][ T2810] syz.2.597[2810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.812613][ T2810] syz.2.597[2810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.829267][ T2810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2810 comm=syz.2.597 [ 258.049017][ T2811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.596'. [ 260.974010][ T2828] overlayfs: unrecognized mount option "/" or missing value [ 261.258354][ T2833] loop3: detected capacity change from 0 to 512 [ 261.549148][ T2833] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.560483][ T2833] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.111561][ T2837] loop2: detected capacity change from 0 to 2048 [ 262.207479][ T2837] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.238312][ T2837] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.785563][ T30] audit: type=1326 audit(1743899875.085:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c7902169 code=0x7ffc0000 [ 264.083759][ T2855] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 264.169601][ T30] audit: type=1326 audit(1743899875.085:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c7902169 code=0x7ffc0000 [ 264.808039][ T2865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2865 comm=syz.1.610 [ 264.923480][ T2867] loop4: detected capacity change from 0 to 512 [ 265.042317][ T2869] incfs: Options parsing error. -22 [ 265.124370][ T2869] incfs: mount failed -22 [ 265.130897][ T2867] EXT4-fs (loop4): 1 orphan inode deleted [ 265.136913][ T2867] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.147936][ T2867] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.718651][ T2880] loop3: detected capacity change from 0 to 2048 [ 265.797266][ T2880] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 265.807942][ T2880] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.816120][ T301] Bluetooth: hci0: command 0x1003 tx timeout [ 266.835304][ T1392] Bluetooth: hci0: sending frame failed (-49) [ 267.923270][ T2905] syz.2.617[2905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.923651][ T2905] syz.2.617[2905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.975893][ T2905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2905 comm=syz.2.617 [ 269.556527][ T2917] loop1: detected capacity change from 0 to 512 [ 269.621747][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 269.627858][ T1392] Bluetooth: hci0: sending frame failed (-49) [ 269.650703][ T2917] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.748868][ T2923] loop2: detected capacity change from 0 to 512 [ 270.014477][ T2925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.216438][ T2760] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 270.618717][ T2923] EXT4-fs (loop2): orphan cleanup on readonly fs [ 270.628225][ T2923] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.623: bg 0: block 248: padding at end of block bitmap is not set [ 270.643359][ T2923] Quota error (device loop2): write_blk: dquota write failed [ 270.650838][ T2923] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 270.660692][ T2923] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.623: Failed to acquire dquot type 1 [ 270.676742][ T2923] EXT4-fs (loop2): 1 truncate cleaned up [ 270.685456][ T2923] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 271.705221][ T301] Bluetooth: hci0: command 0x1009 tx timeout [ 271.710049][ T2934] loop3: detected capacity change from 0 to 512 [ 271.785653][ T2934] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.857767][ T2939] loop2: detected capacity change from 0 to 512 [ 271.944954][ T2939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.955900][ T2939] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.109606][ T2944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.754182][ T2948] loop2: detected capacity change from 0 to 512 [ 272.870154][ T2948] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.881090][ T2948] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.189910][ T2962] loop4: detected capacity change from 0 to 512 [ 273.240696][ T2962] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.630: casefold flag without casefold feature [ 273.253455][ T2962] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.630: couldn't read orphan inode 15 (err -117) [ 273.265924][ T2962] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 275.116024][ T2986] syz.3.636[2986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.116212][ T2986] syz.3.636[2986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.365517][ T2987] syz.2.637[2987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.379094][ T2987] syz.2.637[2987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.325373][ T2986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2986 comm=syz.3.636 [ 276.842374][ T2985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2985 comm=syz.2.637 [ 278.035660][ T2992] loop4: detected capacity change from 0 to 512 [ 278.091160][ T2992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.107315][ T2999] loop2: detected capacity change from 0 to 512 [ 278.119074][ T2996] loop0: detected capacity change from 0 to 1024 [ 278.145575][ T2999] EXT4-fs (loop2): orphan cleanup on readonly fs [ 278.152645][ T2999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.640: bg 0: block 248: padding at end of block bitmap is not set [ 278.167532][ T2999] Quota error (device loop2): write_blk: dquota write failed [ 278.174766][ T2999] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 278.214284][ T2999] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.640: Failed to acquire dquot type 1 [ 279.117728][ T3007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.265252][ T3008] loop1: detected capacity change from 0 to 512 [ 279.381686][ T2999] EXT4-fs (loop2): 1 truncate cleaned up [ 279.391317][ T2999] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 279.471603][ T3008] EXT4-fs (loop1): orphan cleanup on readonly fs [ 279.481876][ T3008] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.643: bg 0: block 248: padding at end of block bitmap is not set [ 279.498620][ T3008] Quota error (device loop1): write_blk: dquota write failed [ 279.506149][ T3008] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 279.516074][ T3008] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.643: Failed to acquire dquot type 1 [ 279.606352][ T3008] EXT4-fs (loop1): 1 truncate cleaned up [ 279.613002][ T3008] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 279.905002][ T2996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.155702][ T30] audit: type=1400 audit(1743899891.545:336): avc: denied { read write } for pid=2995 comm="syz.0.642" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.629793][ T30] audit: type=1400 audit(1743899891.545:337): avc: denied { open } for pid=2995 comm="syz.0.642" path="/116/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.670563][ T30] audit: type=1326 audit(1743899891.625:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3013 comm="syz.3.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 281.399375][ T3018] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 281.414347][ T3018] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 281.426503][ T3018] EXT4-fs (loop0): This should not happen!! Data will be lost [ 281.426503][ T3018] [ 281.435954][ T3018] EXT4-fs (loop0): Total free blocks count 0 [ 281.441730][ T3018] EXT4-fs (loop0): Free/Dirty block details [ 281.447493][ T3018] EXT4-fs (loop0): free_blocks=68451041280 [ 281.453124][ T3018] EXT4-fs (loop0): dirty_blocks=32 [ 281.458111][ T3018] EXT4-fs (loop0): Block reservation details [ 281.463868][ T3018] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 281.834672][ T30] audit: type=1326 audit(1743899891.625:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3013 comm="syz.3.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 281.883055][ T3027] loop4: detected capacity change from 0 to 512 [ 282.015559][ T3027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.024888][ T3027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.646: bg 0: block 248: padding at end of block bitmap is not set [ 282.041093][ T3027] Quota error (device loop4): write_blk: dquota write failed [ 282.048562][ T3027] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 282.058569][ T3027] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.646: Failed to acquire dquot type 1 [ 282.072536][ T3027] EXT4-fs (loop4): 1 truncate cleaned up [ 282.079436][ T3027] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 282.936555][ T3032] incfs: Options parsing error. -22 [ 282.967926][ T3032] incfs: mount failed -22 [ 285.308967][ T3067] loop4: detected capacity change from 0 to 512 [ 285.442678][ T3067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 285.453801][ T3067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.656: bg 0: block 248: padding at end of block bitmap is not set [ 285.472616][ T3067] __quota_error: 12 callbacks suppressed [ 285.472645][ T3067] Quota error (device loop4): write_blk: dquota write failed [ 285.485497][ T3067] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 285.495315][ T3067] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.656: Failed to acquire dquot type 1 [ 285.506980][ T3067] EXT4-fs (loop4): 1 truncate cleaned up [ 285.513085][ T3067] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 285.704872][ T3070] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 285.876300][ T3072] loop0: detected capacity change from 0 to 512 [ 287.743247][ T3089] loop2: detected capacity change from 0 to 512 [ 287.751643][ T1497] Bluetooth: hci0: command 0x1003 tx timeout [ 287.757737][ T1392] Bluetooth: hci0: sending frame failed (-49) [ 287.800977][ T3089] EXT4-fs (loop2): orphan cleanup on readonly fs [ 287.807994][ T3089] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.663: bg 0: block 248: padding at end of block bitmap is not set [ 287.822578][ T3089] Quota error (device loop2): write_blk: dquota write failed [ 287.829875][ T3089] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 287.839547][ T3089] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.663: Failed to acquire dquot type 1 [ 287.852144][ T3089] EXT4-fs (loop2): 1 truncate cleaned up [ 287.857868][ T3089] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 288.086410][ T3097] loop0: detected capacity change from 0 to 512 [ 288.204079][ T3097] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.477340][ T3108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.638752][ T30] audit: type=1326 audit(1743899901.035:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3117 comm="syz.0.670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac8c722169 code=0x0 [ 289.785262][ T1497] Bluetooth: hci0: command 0x1001 tx timeout [ 289.795492][ T1392] Bluetooth: hci0: sending frame failed (-49) [ 289.807080][ T3125] loop2: detected capacity change from 0 to 512 [ 289.865382][ T3125] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.062258][ T3132] loop3: detected capacity change from 0 to 512 [ 290.073302][ T3133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.162542][ T3132] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.186294][ T3132] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.673: bg 0: block 248: padding at end of block bitmap is not set [ 290.326101][ T3132] Quota error (device loop3): write_blk: dquota write failed [ 290.333601][ T3132] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 290.343506][ T3132] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.673: Failed to acquire dquot type 1 [ 290.357681][ T3132] EXT4-fs (loop3): 1 truncate cleaned up [ 290.365661][ T3132] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 291.471336][ T3147] loop3: detected capacity change from 0 to 2048 [ 291.586087][ T3153] loop0: detected capacity change from 0 to 512 [ 291.712707][ T3147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.735512][ T3153] EXT4-fs (loop0): orphan cleanup on readonly fs [ 291.744839][ T3153] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.679: bg 0: block 248: padding at end of block bitmap is not set [ 291.759920][ T3153] Quota error (device loop0): write_blk: dquota write failed [ 291.767312][ T3153] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 291.777203][ T3153] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.679: Failed to acquire dquot type 1 [ 291.790937][ T3153] EXT4-fs (loop0): 1 truncate cleaned up [ 291.797265][ T3153] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 291.866500][ T1123] Bluetooth: hci0: command 0x1009 tx timeout [ 291.874366][ T3147] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.272400][ T30] audit: type=1326 audit(1743899904.975:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3146 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 294.301873][ T3103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 294.316731][ T30] audit: type=1326 audit(1743899904.975:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3146 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 294.328092][ T3161] loop4: detected capacity change from 0 to 2048 [ 294.386940][ T3161] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.397605][ T3161] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.464558][ T3166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 294.499171][ T3169] loop2: detected capacity change from 0 to 512 [ 295.481938][ T3169] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.682: casefold flag without casefold feature [ 295.496109][ T3169] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.682: couldn't read orphan inode 15 (err -117) [ 295.508510][ T3169] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 295.510575][ T3177] loop0: detected capacity change from 0 to 512 [ 295.531767][ T3179] loop3: detected capacity change from 0 to 128 [ 295.635024][ T3177] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 295.645583][ T3177] EXT4-fs (loop0): invalid journal inode [ 295.651088][ T3177] EXT4-fs (loop0): can't get journal size [ 296.313949][ T3177] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.684: corrupted in-inode xattr [ 296.326144][ T3177] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.684: couldn't read orphan inode 15 (err -117) [ 296.340026][ T3177] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 296.356075][ T3186] loop1: detected capacity change from 0 to 512 [ 297.296108][ T3186] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.457066][ T3200] loop2: detected capacity change from 0 to 1024 [ 297.563130][ T3202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.826626][ T3200] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.710469][ T3209] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 298.725334][ T3209] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 298.737442][ T3209] EXT4-fs (loop2): This should not happen!! Data will be lost [ 298.737442][ T3209] [ 298.746897][ T3209] EXT4-fs (loop2): Total free blocks count 0 [ 298.752674][ T3209] EXT4-fs (loop2): Free/Dirty block details [ 298.758432][ T3209] EXT4-fs (loop2): free_blocks=68451041280 [ 298.764052][ T3209] EXT4-fs (loop2): dirty_blocks=32 [ 298.769020][ T3209] EXT4-fs (loop2): Block reservation details [ 298.774806][ T3209] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 298.986155][ T30] audit: type=1326 audit(1743899910.385:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 299.094337][ T3220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.693'. [ 299.133531][ T30] audit: type=1326 audit(1743899910.385:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 299.306930][ T30] audit: type=1326 audit(1743899910.385:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 299.346852][ T30] audit: type=1326 audit(1743899910.385:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 299.406395][ T30] audit: type=1326 audit(1743899910.705:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 299.463196][ T30] audit: type=1326 audit(1743899910.705:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 300.365237][ T30] audit: type=1326 audit(1743899910.785:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 301.035104][ T30] audit: type=1326 audit(1743899910.785:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 301.080970][ T3237] loop0: detected capacity change from 0 to 2048 [ 301.112289][ T30] audit: type=1326 audit(1743899910.785:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 301.165262][ T30] audit: type=1326 audit(1743899910.785:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 301.495744][ T3237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.526568][ T3237] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.784704][ T3250] loop3: detected capacity change from 0 to 512 [ 302.232335][ T3253] loop2: detected capacity change from 0 to 512 [ 302.239951][ T3250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 302.285313][ T3250] EXT4-fs (loop3): 1 truncate cleaned up [ 302.290791][ T3250] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 302.349307][ T3253] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.399826][ T3260] loop1: detected capacity change from 0 to 512 [ 302.483209][ T3260] EXT4-fs (loop1): orphan cleanup on readonly fs [ 302.490203][ T3260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.703: bg 0: block 248: padding at end of block bitmap is not set [ 302.506115][ T3260] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.703: Failed to acquire dquot type 1 [ 302.517879][ T3260] EXT4-fs (loop1): 1 truncate cleaned up [ 302.523583][ T3260] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 303.283730][ T3266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.002422][ T3276] loop0: detected capacity change from 0 to 512 [ 304.014939][ T3277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.706'. [ 306.162688][ T3290] loop3: detected capacity change from 0 to 512 [ 306.174420][ T3276] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 306.305983][ T3290] EXT4-fs (loop3): orphan cleanup on readonly fs [ 306.315086][ T3290] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.710: bg 0: block 248: padding at end of block bitmap is not set [ 306.330822][ T3290] __quota_error: 18 callbacks suppressed [ 306.330850][ T3290] Quota error (device loop3): write_blk: dquota write failed [ 306.343664][ T3290] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 306.353470][ T3290] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.710: Failed to acquire dquot type 1 [ 306.367410][ T3290] EXT4-fs (loop3): 1 truncate cleaned up [ 306.374028][ T3290] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 306.786955][ T30] audit: type=1400 audit(1743899918.165:381): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 306.802530][ T3276] EXT4-fs (loop0): invalid journal inode [ 306.814997][ T3276] EXT4-fs (loop0): can't get journal size [ 307.112559][ T3276] EXT4-fs: error -4 creating inode table initialization thread [ 307.605401][ T3276] EXT4-fs (loop0): mount failed [ 307.613211][ T3297] overlayfs: unrecognized mount option "/" or missing value [ 307.963355][ T3317] loop2: detected capacity change from 0 to 512 [ 308.126594][ T3317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.138069][ T3317] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.776743][ T30] audit: type=1400 audit(1743899920.175:382): avc: denied { audit_read } for pid=3309 comm="syz.3.715" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.807757][ T3327] loop0: detected capacity change from 0 to 512 [ 308.943555][ T3329] loop4: detected capacity change from 0 to 512 [ 309.057462][ T3329] EXT4-fs (loop4): orphan cleanup on readonly fs [ 309.068489][ T3329] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.718: bg 0: block 248: padding at end of block bitmap is not set [ 309.083580][ T3329] Quota error (device loop4): write_blk: dquota write failed [ 309.091057][ T3329] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 309.101082][ T3329] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.718: Failed to acquire dquot type 1 [ 309.115079][ T3329] EXT4-fs (loop4): 1 truncate cleaned up [ 309.121666][ T3329] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 309.346799][ T3327] EXT4-fs (loop0): orphan cleanup on readonly fs [ 309.357551][ T3327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.719: bg 0: block 248: padding at end of block bitmap is not set [ 309.373052][ T3327] Quota error (device loop0): write_blk: dquota write failed [ 309.380490][ T3327] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 309.390342][ T3327] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.719: Failed to acquire dquot type 1 [ 309.404256][ T3327] EXT4-fs (loop0): 1 truncate cleaned up [ 309.411463][ T3327] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 309.826963][ T3336] loop3: detected capacity change from 0 to 2048 [ 309.878115][ T3338] loop1: detected capacity change from 0 to 512 [ 309.935087][ T3336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 309.950940][ T3336] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.001604][ T3338] EXT4-fs (loop1): orphan cleanup on readonly fs [ 310.011474][ T3338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.721: bg 0: block 248: padding at end of block bitmap is not set [ 310.088843][ T3338] Quota error (device loop1): write_blk: dquota write failed [ 310.116884][ T3338] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 310.130708][ T3338] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.721: Failed to acquire dquot type 1 [ 310.271498][ T3338] EXT4-fs (loop1): 1 truncate cleaned up [ 311.167687][ T3338] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 312.689864][ T3371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.728'. [ 312.909458][ T3375] loop0: detected capacity change from 0 to 512 [ 313.095489][ T3375] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.693847][ T3388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.959435][ T3394] loop2: detected capacity change from 0 to 512 [ 314.040986][ T3394] EXT4-fs (loop2): orphan cleanup on readonly fs [ 314.047995][ T3394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.733: bg 0: block 248: padding at end of block bitmap is not set [ 314.062560][ T3394] __quota_error: 2 callbacks suppressed [ 314.062576][ T3394] Quota error (device loop2): write_blk: dquota write failed [ 314.075232][ T3394] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 314.084912][ T3394] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.733: Failed to acquire dquot type 1 [ 314.097799][ T3394] EXT4-fs (loop2): 1 truncate cleaned up [ 314.104476][ T3394] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 314.180441][ T3399] loop0: detected capacity change from 0 to 512 [ 314.264321][ T3403] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 314.281282][ T3399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.522921][ T3406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.824362][ T3408] loop2: detected capacity change from 0 to 512 [ 314.897536][ T3408] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.738: casefold flag without casefold feature [ 314.919266][ T3408] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.738: couldn't read orphan inode 15 (err -117) [ 314.943201][ T3408] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 317.387263][ T866] Bluetooth: hci0: command 0x1003 tx timeout [ 317.394222][ T1392] Bluetooth: hci0: sending frame failed (-49) [ 318.514067][ T3434] syz.1.743[3434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.514169][ T3434] syz.1.743[3434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.715867][ T3434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3434 comm=syz.1.743 [ 320.814566][ T3435] loop0: detected capacity change from 0 to 512 [ 321.031693][ T3435] EXT4-fs (loop0): orphan cleanup on readonly fs [ 321.040785][ T3435] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.742: bg 0: block 248: padding at end of block bitmap is not set [ 321.056629][ T3435] Quota error (device loop0): write_blk: dquota write failed [ 321.064005][ T3435] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 321.073876][ T3435] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.742: Failed to acquire dquot type 1 [ 321.087900][ T3435] EXT4-fs (loop0): 1 truncate cleaned up [ 321.094445][ T3435] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 321.322669][ T3442] loop4: detected capacity change from 0 to 2048 [ 321.492001][ T3442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.522796][ T3442] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.606181][ T866] Bluetooth: hci0: command 0x1001 tx timeout [ 321.612043][ T1392] Bluetooth: hci0: sending frame failed (-49) [ 321.988600][ T3454] loop1: detected capacity change from 0 to 512 [ 322.086850][ T30] audit: type=1326 audit(1743899933.465:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.245703][ T30] audit: type=1326 audit(1743899933.465:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.270561][ T30] audit: type=1326 audit(1743899933.465:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.301749][ T30] audit: type=1326 audit(1743899933.465:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.395772][ T30] audit: type=1326 audit(1743899933.475:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.425776][ T3454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.436996][ T3454] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.455081][ T30] audit: type=1326 audit(1743899933.475:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.479528][ T30] audit: type=1326 audit(1743899933.475:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.502771][ T30] audit: type=1326 audit(1743899933.475:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 322.699271][ T3468] loop2: detected capacity change from 0 to 512 [ 322.824686][ T3468] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.089536][ T3468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.751: bg 0: block 248: padding at end of block bitmap is not set [ 323.105068][ T3468] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.751: Failed to acquire dquot type 1 [ 323.118403][ T3468] EXT4-fs (loop2): 1 truncate cleaned up [ 323.126049][ T3468] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 323.535604][ T3468] syz.2.751 (3468) used greatest stack depth: 19544 bytes left [ 323.625232][ T1497] Bluetooth: hci0: command 0x1009 tx timeout [ 324.888944][ T3495] loop3: detected capacity change from 0 to 512 [ 324.963028][ T3495] EXT4-fs (loop3): orphan cleanup on readonly fs [ 324.972677][ T3495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.756: bg 0: block 248: padding at end of block bitmap is not set [ 325.099884][ T3495] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.756: Failed to acquire dquot type 1 [ 325.112262][ T3497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3497 comm=syz.1.758 [ 325.127782][ T3495] EXT4-fs (loop3): 1 truncate cleaned up [ 325.134177][ T3495] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 327.743166][ T3510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.761'. [ 328.431114][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 328.431131][ T30] audit: type=1326 audit(1743899939.135:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1e2a87169 code=0x0 [ 328.494724][ T3517] loop4: detected capacity change from 0 to 512 [ 330.321808][ T3531] loop1: detected capacity change from 0 to 512 [ 330.419895][ T3532] loop2: detected capacity change from 0 to 512 [ 330.579965][ T30] audit: type=1326 audit(1743899940.725:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 334.370561][ T3532] EXT4-fs: failed to create workqueue [ 334.375796][ T3532] EXT4-fs (loop2): mount failed [ 334.383283][ T3531] EXT4-fs: failed to create workqueue [ 334.388516][ T3531] EXT4-fs (loop1): mount failed [ 334.439466][ T30] audit: type=1326 audit(1743899940.725:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 334.472070][ T30] audit: type=1326 audit(1743899940.795:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 334.497855][ T30] audit: type=1326 audit(1743899940.795:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 335.802047][ T3546] loop0: detected capacity change from 0 to 512 [ 335.843331][ T3543] loop3: detected capacity change from 0 to 256 [ 336.036652][ T30] audit: type=1326 audit(1743899940.795:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 336.090417][ T3550] loop1: detected capacity change from 0 to 512 [ 336.100010][ T3552] loop4: detected capacity change from 0 to 1024 [ 336.109774][ T3553] loop2: detected capacity change from 0 to 128 [ 336.135022][ T3550] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.159653][ T3546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 336.169266][ T3546] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.769: bg 0: block 248: padding at end of block bitmap is not set [ 336.185049][ T3546] Quota error (device loop0): write_blk: dquota write failed [ 336.192466][ T3546] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 336.202301][ T3546] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.769: Failed to acquire dquot type 1 [ 336.587139][ T3546] EXT4-fs (loop0): 1 truncate cleaned up [ 336.594555][ T3546] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 336.998614][ T3553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.018260][ T3553] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 337.173469][ T3552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.023880][ T3564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.934442][ T3552] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 338.955364][ T3552] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 339.271797][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 339.280852][ T3570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.771'. [ 339.296207][ T3552] EXT4-fs (loop4): This should not happen!! Data will be lost [ 339.296207][ T3552] [ 339.314148][ T3573] loop3: detected capacity change from 0 to 128 [ 339.325371][ T3552] EXT4-fs (loop4): Total free blocks count 0 [ 339.333304][ T3552] EXT4-fs (loop4): Free/Dirty block details [ 339.345995][ T3575] loop1: detected capacity change from 0 to 512 [ 339.355685][ T3552] EXT4-fs (loop4): free_blocks=68451041280 [ 339.358981][ T3575] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 339.361460][ T3552] EXT4-fs (loop4): dirty_blocks=32 [ 339.383452][ T3575] EXT4-fs (loop1): invalid journal inode [ 339.389193][ T3575] EXT4-fs (loop1): can't get journal size [ 339.425430][ T3552] EXT4-fs (loop4): Block reservation details [ 339.431265][ T3552] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 339.490107][ T3575] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.775: corrupted in-inode xattr [ 339.502335][ T3575] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.775: couldn't read orphan inode 15 (err -117) [ 339.514386][ T3575] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 340.258465][ T3590] loop4: detected capacity change from 0 to 512 [ 340.293406][ T3590] EXT4-fs (loop4): orphan cleanup on readonly fs [ 340.300413][ T3590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.779: bg 0: block 248: padding at end of block bitmap is not set [ 340.315051][ T3590] Quota error (device loop4): write_blk: dquota write failed [ 340.322316][ T3590] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 340.332039][ T3590] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.779: Failed to acquire dquot type 1 [ 340.343890][ T3590] EXT4-fs (loop4): 1 truncate cleaned up [ 340.349018][ T3596] loop1: detected capacity change from 0 to 512 [ 340.349720][ T3590] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 340.368186][ T3597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3597 comm=syz.3.781 [ 340.465489][ T3596] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.474136][ T3601] loop4: detected capacity change from 0 to 1024 [ 340.484066][ T3603] overlayfs: unrecognized mount option "/" or missing value [ 340.495310][ T3605] fuse: Bad value for 'fd' [ 340.664345][ T3601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.385912][ T3618] loop3: detected capacity change from 0 to 512 [ 341.883591][ T3600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 341.898322][ T3600] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 341.910491][ T3600] EXT4-fs (loop4): This should not happen!! Data will be lost [ 341.910491][ T3600] [ 341.919947][ T3600] EXT4-fs (loop4): Total free blocks count 0 [ 341.925756][ T3600] EXT4-fs (loop4): Free/Dirty block details [ 341.931473][ T3600] EXT4-fs (loop4): free_blocks=68451041280 [ 341.937134][ T3600] EXT4-fs (loop4): dirty_blocks=32 [ 341.942066][ T3600] EXT4-fs (loop4): Block reservation details [ 341.947914][ T3600] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 342.091922][ T3618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.103496][ T3618] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.847781][ T3622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.871797][ T3628] loop2: detected capacity change from 0 to 128 [ 342.931769][ T3631] loop4: detected capacity change from 0 to 512 [ 343.026236][ T3628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.048193][ T3628] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 343.086057][ T3631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.267677][ T3641] loop0: detected capacity change from 0 to 1024 [ 343.288887][ T3642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.326786][ T3641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.876541][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 343.885504][ T3646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.788'. [ 344.089924][ T3640] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 344.143930][ T3649] loop3: detected capacity change from 0 to 512 [ 344.155290][ T3640] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 344.187064][ T3651] loop4: detected capacity change from 0 to 2048 [ 344.195635][ T3640] EXT4-fs (loop0): This should not happen!! Data will be lost [ 344.195635][ T3640] [ 344.205100][ T3640] EXT4-fs (loop0): Total free blocks count 0 [ 344.211416][ T3640] EXT4-fs (loop0): Free/Dirty block details [ 344.217727][ T3640] EXT4-fs (loop0): free_blocks=68451041280 [ 344.227503][ T3640] EXT4-fs (loop0): dirty_blocks=32 [ 344.244747][ T3649] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.793: casefold flag without casefold feature [ 344.245031][ T3640] EXT4-fs (loop0): Block reservation details [ 344.262988][ T3640] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 344.271566][ T3649] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.793: couldn't read orphan inode 15 (err -117) [ 344.284106][ T3649] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 344.307048][ T3651] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.308443][ T3658] loop1: detected capacity change from 0 to 512 [ 344.317905][ T3651] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.420634][ T3662] loop2: detected capacity change from 0 to 512 [ 348.075521][ T3662] EXT4-fs: failed to create workqueue [ 348.080756][ T3662] EXT4-fs (loop2): mount failed [ 348.197663][ T3673] loop1: detected capacity change from 0 to 2048 [ 348.342068][ T3677] overlayfs: unrecognized mount option "/" or missing value [ 349.349624][ T3681] loop0: detected capacity change from 0 to 512 [ 351.355511][ T30] audit: type=1326 audit(1743899959.905:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 351.421091][ T3673] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 351.566068][ T3681] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.577364][ T3681] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.965391][ T30] audit: type=1326 audit(1743899959.905:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 351.978536][ T3689] loop3: detected capacity change from 0 to 512 [ 351.994916][ T30] audit: type=1326 audit(1743899959.925:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.018651][ T30] audit: type=1326 audit(1743899959.935:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.041970][ T30] audit: type=1326 audit(1743899959.935:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.065509][ T30] audit: type=1326 audit(1743899959.945:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.089390][ T30] audit: type=1326 audit(1743899959.965:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.115417][ T3692] loop4: detected capacity change from 0 to 512 [ 352.121790][ T30] audit: type=1326 audit(1743899959.965:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.124956][ T3689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.152391][ T30] audit: type=1326 audit(1743899960.045:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.178475][ T30] audit: type=1326 audit(1743899960.045:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 352.206963][ T3698] loop0: detected capacity change from 0 to 512 [ 352.225753][ T3700] loop1: detected capacity change from 0 to 512 [ 352.249024][ T3698] EXT4-fs (loop0): orphan cleanup on readonly fs [ 352.256233][ T3698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.805: bg 0: block 248: padding at end of block bitmap is not set [ 352.256880][ T3692] EXT4-fs (loop4): orphan cleanup on readonly fs [ 352.278215][ T3698] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.805: Failed to acquire dquot type 1 [ 352.278545][ T3692] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.800: bg 0: block 248: padding at end of block bitmap is not set [ 352.306263][ T3692] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.800: Failed to acquire dquot type 1 [ 352.335358][ T3698] EXT4-fs (loop0): 1 truncate cleaned up [ 352.342925][ T3698] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 352.380375][ T3704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.464481][ T3692] EXT4-fs (loop4): 1 truncate cleaned up [ 352.623888][ T3692] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 352.652983][ T3708] loop2: detected capacity change from 0 to 512 [ 352.672099][ T3700] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.748487][ T3708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.216519][ T3715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.539658][ T3717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.868760][ T3721] loop4: detected capacity change from 0 to 4096 [ 353.968829][ T3721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.982175][ T3721] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 354.101201][ T3730] loop3: detected capacity change from 0 to 512 [ 354.273660][ T3730] EXT4-fs (loop3): orphan cleanup on readonly fs [ 354.284582][ T3730] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.813: bg 0: block 248: padding at end of block bitmap is not set [ 354.299923][ T3730] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.813: Failed to acquire dquot type 1 [ 356.649411][ T3738] loop2: detected capacity change from 0 to 512 [ 357.045670][ T3730] EXT4-fs (loop3): 1 truncate cleaned up [ 357.054733][ T3730] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 358.057056][ T3738] EXT4-fs (loop2): orphan cleanup on readonly fs [ 358.064052][ T3738] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.814: bg 0: block 248: padding at end of block bitmap is not set [ 358.079331][ T3738] __quota_error: 13 callbacks suppressed [ 358.079349][ T3738] Quota error (device loop2): write_blk: dquota write failed [ 358.092069][ T3738] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 358.101789][ T3738] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.814: Failed to acquire dquot type 1 [ 358.102197][ T3744] loop0: detected capacity change from 0 to 2048 [ 358.136074][ T3738] EXT4-fs (loop2): 1 truncate cleaned up [ 358.142065][ T3738] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 358.146848][ T3748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3748 comm=syz.4.815 [ 358.280852][ T3744] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.291776][ T3744] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.327495][ T3755] loop3: detected capacity change from 0 to 1024 [ 358.392889][ T30] audit: type=1326 audit(1743899969.785:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59549cd169 code=0x0 [ 358.468495][ T3755] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.425284][ T30] audit: type=1326 audit(1743899971.765:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 360.455813][ T3751] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 360.660884][ T3754] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 360.698989][ T3754] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 360.712863][ T3774] loop4: detected capacity change from 0 to 512 [ 360.729610][ T30] audit: type=1326 audit(1743899971.765:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 360.753470][ T3754] EXT4-fs (loop3): This should not happen!! Data will be lost [ 360.753470][ T3754] [ 360.763155][ T3754] EXT4-fs (loop3): Total free blocks count 0 [ 360.767357][ T3777] loop1: detected capacity change from 0 to 512 [ 360.775400][ T3754] EXT4-fs (loop3): Free/Dirty block details [ 360.781268][ T3754] EXT4-fs (loop3): free_blocks=68451041280 [ 360.787194][ T3754] EXT4-fs (loop3): dirty_blocks=32 [ 360.792176][ T3754] EXT4-fs (loop3): Block reservation details [ 360.798044][ T3754] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 360.808011][ T3776] loop2: detected capacity change from 0 to 512 [ 360.815244][ T3777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.819824][ T3774] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.873223][ T3776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 360.880997][ T3776] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.822: bg 0: block 248: padding at end of block bitmap is not set [ 360.895467][ T3776] Quota error (device loop2): write_blk: dquota write failed [ 360.910559][ T3776] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 360.920357][ T3776] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.822: Failed to acquire dquot type 1 [ 360.932040][ T3776] EXT4-fs (loop2): 1 truncate cleaned up [ 360.938091][ T3776] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 361.031545][ T3781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.093223][ T3785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.905516][ T3793] loop0: detected capacity change from 0 to 256 [ 362.843489][ T3796] loop3: detected capacity change from 0 to 128 [ 363.663098][ T3812] loop4: detected capacity change from 0 to 512 [ 363.878289][ T3812] EXT4-fs (loop4): orphan cleanup on readonly fs [ 364.063320][ T3812] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.831: bg 0: block 248: padding at end of block bitmap is not set [ 364.136941][ T3812] Quota error (device loop4): write_blk: dquota write failed [ 364.144379][ T3812] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 364.154412][ T3812] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.831: Failed to acquire dquot type 1 [ 364.172878][ T3812] EXT4-fs (loop4): 1 truncate cleaned up [ 364.179845][ T3812] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 364.742096][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'. [ 364.777142][ T3822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3822 comm=syz.3.834 [ 365.139248][ T3820] loop0: detected capacity change from 0 to 4096 [ 365.326024][ T3820] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 365.353287][ T3820] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 365.379590][ T3835] loop3: detected capacity change from 0 to 512 [ 365.532574][ T3839] loop0: detected capacity change from 0 to 512 [ 365.722738][ T3835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.738744][ T3839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 365.752370][ T3839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.839: bg 0: block 248: padding at end of block bitmap is not set [ 365.767915][ T3839] Quota error (device loop0): write_blk: dquota write failed [ 365.775636][ T3839] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 365.785519][ T3839] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.839: Failed to acquire dquot type 1 [ 365.798042][ T3839] EXT4-fs (loop0): 1 truncate cleaned up [ 365.803998][ T3839] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 365.838665][ T3845] loop2: detected capacity change from 0 to 512 [ 365.911231][ T3845] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.481329][ T3847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.493846][ T3850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.608908][ T30] audit: type=1400 audit(1743899979.005:419): avc: denied { write } for pid=3860 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.628848][ T3864] overlayfs: unrecognized mount option "/" or missing value [ 367.660203][ T3866] loop0: detected capacity change from 0 to 128 [ 368.808675][ T30] audit: type=1400 audit(1743899980.205:420): avc: denied { read } for pid=3860 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.924983][ T3877] loop4: detected capacity change from 0 to 512 [ 369.080644][ T3866] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 369.119453][ T3877] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 369.130911][ T3877] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.134048][ T3866] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.226032][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 371.235490][ T3891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.847'. [ 372.125537][ T3900] loop1: detected capacity change from 0 to 512 [ 372.504972][ T3902] loop4: detected capacity change from 0 to 2048 [ 372.538086][ T3900] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.547360][ T3907] loop3: detected capacity change from 0 to 512 [ 372.576792][ T3902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.587394][ T3902] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.630862][ T3912] loop0: detected capacity change from 0 to 512 [ 373.002828][ T3917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.467785][ T3916] loop2: detected capacity change from 0 to 2048 [ 373.475582][ T3912] EXT4-fs (loop0): orphan cleanup on readonly fs [ 373.482634][ T3912] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.854: bg 0: block 248: padding at end of block bitmap is not set [ 373.497080][ T3912] Quota error (device loop0): write_blk: dquota write failed [ 373.505209][ T3912] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 373.515016][ T3912] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.854: Failed to acquire dquot type 1 [ 373.560281][ T3912] EXT4-fs (loop0): 1 truncate cleaned up [ 373.566059][ T3912] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 373.581147][ T3921] loop3: detected capacity change from 0 to 512 [ 373.606705][ T3916] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 373.869124][ T3916] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.936824][ T3929] loop1: detected capacity change from 0 to 4096 [ 373.947887][ T3921] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.858: casefold flag without casefold feature [ 373.973514][ T3921] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.858: couldn't read orphan inode 15 (err -117) [ 373.998871][ T3921] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 374.017344][ T3933] loop0: detected capacity change from 0 to 1024 [ 374.023123][ T3929] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 374.040502][ T3929] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 374.051650][ T3933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.168265][ T30] audit: type=1326 audit(1743899985.555:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c7902169 code=0x7ffc0000 [ 374.309591][ T30] audit: type=1326 audit(1743899985.555:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c7902169 code=0x7ffc0000 [ 374.383903][ T3932] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 374.402477][ T3932] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 374.415498][ T3932] EXT4-fs (loop0): This should not happen!! Data will be lost [ 374.415498][ T3932] [ 374.425040][ T3932] EXT4-fs (loop0): Total free blocks count 0 [ 374.430769][ T3944] loop3: detected capacity change from 0 to 1024 [ 374.442796][ T3932] EXT4-fs (loop0): Free/Dirty block details [ 374.448785][ T3932] EXT4-fs (loop0): free_blocks=68451041280 [ 374.454468][ T3932] EXT4-fs (loop0): dirty_blocks=32 [ 374.459527][ T3932] EXT4-fs (loop0): Block reservation details [ 374.465588][ T3932] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 374.467522][ T3944] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.502794][ T3943] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 374.518565][ T3943] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 374.590894][ T3952] loop1: detected capacity change from 0 to 512 [ 374.617531][ T3943] EXT4-fs (loop3): This should not happen!! Data will be lost [ 374.617531][ T3943] [ 374.709844][ T3952] EXT4-fs (loop1): orphan cleanup on readonly fs [ 374.720347][ T3952] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.865: bg 0: block 248: padding at end of block bitmap is not set [ 374.736620][ T3952] Quota error (device loop1): write_blk: dquota write failed [ 374.743993][ T3952] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 374.753857][ T3952] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.865: Failed to acquire dquot type 1 [ 374.768457][ T3952] EXT4-fs (loop1): 1 truncate cleaned up [ 374.775029][ T3952] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 375.206932][ T3943] EXT4-fs (loop3): Total free blocks count 0 [ 375.229735][ T3955] loop0: detected capacity change from 0 to 512 [ 375.270839][ T3943] EXT4-fs (loop3): Free/Dirty block details [ 375.395490][ T3943] EXT4-fs (loop3): free_blocks=68451041280 [ 375.411333][ T3943] EXT4-fs (loop3): dirty_blocks=32 [ 375.421421][ T3943] EXT4-fs (loop3): Block reservation details [ 375.431508][ T3943] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 375.445906][ T3955] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.662677][ T3963] loop4: detected capacity change from 0 to 512 [ 375.698056][ T3967] loop2: detected capacity change from 0 to 1024 [ 375.711203][ T3970] loop3: detected capacity change from 0 to 512 [ 375.736201][ T3967] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 375.736201][ T3967] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 375.736201][ T3967] [ 375.754365][ T3967] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.770923][ T3971] loop1: detected capacity change from 0 to 512 [ 375.785922][ T3970] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.799362][ T3963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.828505][ T3971] EXT4-fs (loop1): orphan cleanup on readonly fs [ 375.835672][ T3971] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.871: bg 0: block 248: padding at end of block bitmap is not set [ 375.850064][ T3971] Quota error (device loop1): write_blk: dquota write failed [ 375.857372][ T3971] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 375.867170][ T3971] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.871: Failed to acquire dquot type 1 [ 375.879121][ T3971] EXT4-fs (loop1): 1 truncate cleaned up [ 375.884816][ T3971] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 375.923376][ T3964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.195175][ T3978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.538598][ T3980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.647041][ T3967] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 377.986532][ T30] audit: type=1326 audit(1743899989.385:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.3.878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dc7ecb169 code=0x0 [ 378.280534][ T4009] loop2: detected capacity change from 0 to 2048 [ 378.405044][ T4009] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 378.416244][ T30] audit: type=1400 audit(1743899989.815:424): avc: denied { write } for pid=3994 comm="syz.4.877" name="event2" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 378.417275][ T4009] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.568082][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 378.568137][ T30] audit: type=1326 audit(1743899989.895:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 378.773342][ T30] audit: type=1326 audit(1743899989.895:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 378.822267][ T30] audit: type=1326 audit(1743899989.905:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 378.892174][ T30] audit: type=1326 audit(1743899989.905:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 378.948633][ T30] audit: type=1326 audit(1743899989.905:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 378.972335][ T30] audit: type=1326 audit(1743899989.905:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 378.995490][ T30] audit: type=1326 audit(1743899989.915:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 379.027048][ T30] audit: type=1326 audit(1743899989.915:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 379.111885][ T4024] loop3: detected capacity change from 0 to 512 [ 379.344898][ T30] audit: type=1326 audit(1743899989.945:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 379.414917][ T4027] loop1: detected capacity change from 0 to 512 [ 379.425207][ T4024] EXT4-fs (loop3): orphan cleanup on readonly fs [ 379.425219][ T30] audit: type=1326 audit(1743899989.945:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 379.432316][ T4024] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.883: bg 0: block 248: padding at end of block bitmap is not set [ 379.468961][ T4024] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.883: Failed to acquire dquot type 1 [ 379.480895][ T4024] EXT4-fs (loop3): 1 truncate cleaned up [ 379.486642][ T4024] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 379.593871][ T4027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.203892][ T4034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.920323][ T3905] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 380.962719][ T4037] loop0: detected capacity change from 0 to 512 [ 381.046506][ T4041] loop2: detected capacity change from 0 to 512 [ 381.077520][ T4037] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.190809][ T4049] loop3: detected capacity change from 0 to 256 [ 381.288828][ T4050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.807058][ T4046] loop1: detected capacity change from 0 to 4096 [ 383.669716][ T4056] loop0: detected capacity change from 0 to 512 [ 383.686517][ T4046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 383.836013][ T4046] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 384.543437][ T4056] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 384.555828][ T4056] EXT4-fs (loop0): invalid journal inode [ 384.566997][ T4056] EXT4-fs (loop0): can't get journal size [ 384.927673][ T4056] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.891: corrupted in-inode xattr [ 385.023216][ T4056] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.891: couldn't read orphan inode 15 (err -117) [ 385.035495][ T4056] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 386.853082][ T4084] loop2: detected capacity change from 0 to 512 [ 386.859458][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 386.859475][ T30] audit: type=1326 audit(1743899996.845:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 386.890499][ T30] audit: type=1326 audit(1743899996.845:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 386.913669][ T30] audit: type=1326 audit(1743899996.865:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 386.950062][ T30] audit: type=1326 audit(1743899996.865:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 386.950352][ T4084] EXT4-fs (loop2): orphan cleanup on readonly fs [ 387.012248][ T4084] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.896: bg 0: block 248: padding at end of block bitmap is not set [ 387.071423][ T4084] Quota error (device loop2): write_blk: dquota write failed [ 387.071658][ T30] audit: type=1326 audit(1743899996.865:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 387.078686][ T4084] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 387.111695][ T4084] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.896: Failed to acquire dquot type 1 [ 387.153084][ T30] audit: type=1326 audit(1743899996.885:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 387.214893][ T4098] loop3: detected capacity change from 0 to 512 [ 387.238743][ T4097] loop0: detected capacity change from 0 to 512 [ 387.247434][ T4084] EXT4-fs (loop2): 1 truncate cleaned up [ 387.260710][ T4084] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 387.476176][ T4095] loop4: detected capacity change from 0 to 512 [ 387.678560][ T4103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.902'. [ 387.727502][ T30] audit: type=1326 audit(1743899996.905:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59549cd169 code=0x7ffc0000 [ 388.124102][ T4098] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.471347][ T4097] EXT4-fs (loop0): orphan cleanup on readonly fs [ 388.480836][ T4097] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.898: bg 0: block 248: padding at end of block bitmap is not set [ 388.495953][ T4097] Quota error (device loop0): write_blk: dquota write failed [ 388.503368][ T4097] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.898: Failed to acquire dquot type 1 [ 388.518327][ T4097] EXT4-fs (loop0): 1 truncate cleaned up [ 388.526698][ T4097] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 388.570325][ T4098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.901: bg 0: block 248: padding at end of block bitmap is not set [ 388.588118][ T4098] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.901: Failed to acquire dquot type 1 [ 388.605877][ T4098] EXT4-fs (loop3): 1 truncate cleaned up [ 388.613101][ T4098] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 389.237649][ T4095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.274877][ T4117] loop0: detected capacity change from 0 to 128 [ 389.955009][ T4120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 390.238141][ T4116] loop3: detected capacity change from 0 to 4096 [ 390.296255][ T4123] overlayfs: unrecognized mount option "/" or missing value [ 390.321240][ T4126] loop2: detected capacity change from 0 to 1024 [ 390.344800][ T4116] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 390.358342][ T4116] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 390.516527][ T4126] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.648317][ T4136] loop1: detected capacity change from 0 to 512 [ 390.858228][ T4125] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 390.873265][ T4125] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 390.886911][ T4125] EXT4-fs (loop2): This should not happen!! Data will be lost [ 390.886911][ T4125] [ 390.905213][ T4125] EXT4-fs (loop2): Total free blocks count 0 [ 390.914097][ T4136] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 390.925164][ T4136] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.936324][ T4125] EXT4-fs (loop2): Free/Dirty block details [ 390.948767][ T4125] EXT4-fs (loop2): free_blocks=68451041280 [ 390.954506][ T4125] EXT4-fs (loop2): dirty_blocks=32 [ 390.960035][ T4125] EXT4-fs (loop2): Block reservation details [ 390.966174][ T4125] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 391.605266][ T4149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.912'. [ 391.879876][ T4150] loop2: detected capacity change from 0 to 512 [ 392.182773][ T4150] EXT4-fs (loop2): orphan cleanup on readonly fs [ 392.191752][ T4150] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.913: bg 0: block 248: padding at end of block bitmap is not set [ 392.207532][ T4150] __quota_error: 7 callbacks suppressed [ 392.207560][ T4150] Quota error (device loop2): write_blk: dquota write failed [ 392.220371][ T4150] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 392.230258][ T4150] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.913: Failed to acquire dquot type 1 [ 392.244181][ T4150] EXT4-fs (loop2): 1 truncate cleaned up [ 392.250793][ T4150] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 392.961413][ T4158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.915'. [ 393.685453][ T4164] loop3: detected capacity change from 0 to 512 [ 393.775088][ T30] audit: type=1326 audit(1743900004.755:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 393.926344][ T4164] EXT4-fs (loop3): orphan cleanup on readonly fs [ 393.936465][ T4164] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.917: bg 0: block 248: padding at end of block bitmap is not set [ 393.951548][ T4164] Quota error (device loop3): write_blk: dquota write failed [ 393.959000][ T4164] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 393.968826][ T4164] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.917: Failed to acquire dquot type 1 [ 393.982224][ T4164] EXT4-fs (loop3): 1 truncate cleaned up [ 393.988795][ T4164] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 394.377716][ T4176] loop1: detected capacity change from 0 to 512 [ 394.412124][ T30] audit: type=1326 audit(1743900004.755:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 395.056966][ T30] audit: type=1326 audit(1743900004.765:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 395.080593][ T30] audit: type=1326 audit(1743900004.765:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 395.156127][ T4176] EXT4-fs (loop1): orphan cleanup on readonly fs [ 395.266050][ T4176] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.916: bg 0: block 248: padding at end of block bitmap is not set [ 395.280441][ T4176] Quota error (device loop1): write_blk: dquota write failed [ 395.287747][ T4176] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 395.297532][ T4176] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.916: Failed to acquire dquot type 1 [ 395.313776][ T4176] EXT4-fs (loop1): 1 truncate cleaned up [ 395.319684][ T4176] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 395.356015][ T4183] loop4: detected capacity change from 0 to 512 [ 395.528495][ T4189] loop1: detected capacity change from 0 to 512 [ 395.590504][ T4183] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.045072][ T4194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.150972][ T4189] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.721019][ T4203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.228861][ T4202] loop0: detected capacity change from 0 to 512 [ 397.419279][ T4202] EXT4-fs (loop0): orphan cleanup on readonly fs [ 397.429678][ T4202] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.924: bg 0: block 248: padding at end of block bitmap is not set [ 397.447378][ T4202] __quota_error: 10 callbacks suppressed [ 397.447406][ T4202] Quota error (device loop0): write_blk: dquota write failed [ 397.460479][ T4202] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 397.470330][ T4202] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.924: Failed to acquire dquot type 1 [ 397.484450][ T4202] EXT4-fs (loop0): 1 truncate cleaned up [ 397.490983][ T4202] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 398.374617][ T4207] loop3: detected capacity change from 0 to 2048 [ 398.472871][ T4207] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.486719][ T4207] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.897518][ T30] audit: type=1326 audit(1743900010.275:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 399.920746][ T4191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 399.937406][ T30] audit: type=1326 audit(1743900010.295:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 399.960891][ T30] audit: type=1326 audit(1743900010.325:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 399.984229][ T30] audit: type=1326 audit(1743900010.325:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 400.021979][ T4226] loop4: detected capacity change from 0 to 512 [ 400.028407][ T30] audit: type=1326 audit(1743900010.335:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 400.072309][ T30] audit: type=1326 audit(1743900010.355:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 400.095906][ T30] audit: type=1326 audit(1743900010.375:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 400.150829][ T30] audit: type=1326 audit(1743900010.375:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e2a87169 code=0x7ffc0000 [ 400.425575][ T4230] syz.0.928[4230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.425659][ T4230] syz.0.928[4230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.692960][ T4230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4230 comm=syz.0.928 [ 402.981697][ T4245] loop2: detected capacity change from 0 to 512 [ 403.199695][ T4245] EXT4-fs (loop2): orphan cleanup on readonly fs [ 403.212954][ T4245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.934: bg 0: block 248: padding at end of block bitmap is not set [ 403.237741][ T4245] __quota_error: 6 callbacks suppressed [ 403.237771][ T4245] Quota error (device loop2): write_blk: dquota write failed [ 403.250673][ T4245] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 403.260569][ T4245] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.934: Failed to acquire dquot type 1 [ 403.278899][ T4245] EXT4-fs (loop2): 1 truncate cleaned up [ 403.286858][ T4245] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 403.561625][ T4251] overlayfs: unrecognized mount option "/" or missing value [ 403.706852][ T4250] loop4: detected capacity change from 0 to 512 [ 403.862971][ T4254] loop3: detected capacity change from 0 to 512 [ 408.136704][ T4262] loop0: detected capacity change from 0 to 128 [ 408.163415][ T4264] loop4: detected capacity change from 0 to 512 [ 408.831949][ T4260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.939'. [ 409.178961][ T4264] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.943: casefold flag without casefold feature [ 409.191584][ T4264] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.943: couldn't read orphan inode 15 (err -117) [ 409.313185][ T4264] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 409.496885][ T4280] loop2: detected capacity change from 0 to 128 [ 411.333161][ T4293] loop3: detected capacity change from 0 to 512 [ 411.348147][ T4291] loop4: detected capacity change from 0 to 512 [ 411.376842][ T4293] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 411.384638][ T4291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 412.303430][ T4300] loop0: detected capacity change from 0 to 512 [ 412.557782][ T4300] EXT4-fs (loop0): orphan cleanup on readonly fs [ 412.568264][ T4300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.948: bg 0: block 248: padding at end of block bitmap is not set [ 412.583526][ T4300] Quota error (device loop0): write_blk: dquota write failed [ 412.590915][ T4300] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 412.600760][ T4300] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.948: Failed to acquire dquot type 1 [ 412.614275][ T4300] EXT4-fs (loop0): 1 truncate cleaned up [ 412.620828][ T4300] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 413.975512][ T4319] loop2: detected capacity change from 0 to 2048 [ 415.186843][ T4291] EXT4-fs (loop4): 1 truncate cleaned up [ 415.200497][ T4291] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 415.790281][ T4335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.957'. [ 415.858557][ T4319] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.194488][ T4319] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.281099][ T4341] loop1: detected capacity change from 0 to 1024 [ 416.376467][ T4341] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.470230][ T4348] loop3: detected capacity change from 0 to 512 [ 416.491365][ T4341] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 416.788742][ T4341] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 416.837276][ T4341] EXT4-fs (loop1): This should not happen!! Data will be lost [ 416.837276][ T4341] [ 416.929451][ T4341] EXT4-fs (loop1): Total free blocks count 0 [ 416.935731][ T4341] EXT4-fs (loop1): Free/Dirty block details [ 416.936480][ T4348] EXT4-fs (loop3): 1 orphan inode deleted [ 416.941844][ T4341] EXT4-fs (loop1): free_blocks=68451041280 [ 416.947116][ T4348] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.947211][ T4348] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.308335][ T4341] EXT4-fs (loop1): dirty_blocks=16 [ 417.313319][ T4341] EXT4-fs (loop1): Block reservation details [ 417.321317][ T4341] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 417.674865][ T4371] loop1: detected capacity change from 0 to 2048 [ 417.928372][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.941112][ T4371] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.200922][ T4385] loop2: detected capacity change from 0 to 512 [ 419.257447][ T866] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 420.676985][ T4314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 420.752183][ T4385] EXT4-fs (loop2): orphan cleanup on readonly fs [ 420.761600][ T4385] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.968: bg 0: block 248: padding at end of block bitmap is not set [ 420.777195][ T4385] Quota error (device loop2): write_blk: dquota write failed [ 420.784543][ T4385] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 420.794367][ T4385] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.968: Failed to acquire dquot type 1 [ 420.807864][ T4385] EXT4-fs (loop2): 1 truncate cleaned up [ 420.814475][ T4385] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 422.071211][ T4399] loop4: detected capacity change from 0 to 256 [ 422.992513][ T4404] loop0: detected capacity change from 0 to 512 [ 423.053449][ T4404] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 423.118682][ T4404] EXT4-fs (loop0): 1 truncate cleaned up [ 423.127948][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 423.190270][ T866] usb 5-1: device not accepting address 4, error -71 [ 423.458208][ T30] audit: type=1400 audit(1743900034.855:484): avc: denied { create } for pid=4394 comm="syz.2.973" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.494005][ T30] audit: type=1400 audit(1743900034.875:485): avc: denied { write } for pid=4394 comm="syz.2.973" name="file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.522727][ T30] audit: type=1400 audit(1743900034.875:486): avc: denied { open } for pid=4394 comm="syz.2.973" path="/205/file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.579844][ T30] audit: type=1400 audit(1743900034.875:487): avc: denied { ioctl } for pid=4394 comm="syz.2.973" path="/205/file0" dev="tmpfs" ino=1172 ioctlcmd=0x4c09 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.590569][ T4416] loop0: detected capacity change from 0 to 128 [ 423.626152][ T4418] loop3: detected capacity change from 0 to 512 [ 423.651838][ T30] audit: type=1400 audit(1743900035.045:488): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.742088][ T4418] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 423.752947][ T4418] EXT4-fs (loop3): invalid journal inode [ 423.776021][ T4418] EXT4-fs (loop3): can't get journal size [ 423.777158][ T4416] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 423.794284][ T4416] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 423.797493][ T4418] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.978: corrupted in-inode xattr [ 423.849246][ T4418] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.978: couldn't read orphan inode 15 (err -117) [ 423.885568][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 424.740268][ T4428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.979'. [ 425.106373][ T4433] loop4: detected capacity change from 0 to 512 [ 425.298149][ T4433] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.309464][ T4433] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.408641][ T4438] loop2: detected capacity change from 0 to 512 [ 425.451055][ T4439] loop1: detected capacity change from 0 to 512 [ 425.590597][ T4442] loop0: detected capacity change from 0 to 4096 [ 425.641994][ T4446] loop3: detected capacity change from 0 to 2048 [ 425.652976][ T4439] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 425.664738][ T4438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 425.676558][ T4442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.796380][ T4442] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 426.099037][ T4450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.685082][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 426.704305][ T4446] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.386030][ T30] audit: type=1326 audit(1743900038.735:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 427.610493][ T30] audit: type=1326 audit(1743900038.735:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 427.655516][ T30] audit: type=1326 audit(1743900038.735:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0dc7ecb169 code=0x7ffc0000 [ 427.734208][ T30] audit: type=1326 audit(1743900038.735:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0dc7ecb1a3 code=0x7ffc0000 [ 427.765169][ T30] audit: type=1326 audit(1743900038.735:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0dc7ec9c1f code=0x7ffc0000 [ 427.798293][ T30] audit: type=1326 audit(1743900038.745:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0dc7ecb1f7 code=0x7ffc0000 [ 427.842013][ T30] audit: type=1326 audit(1743900038.745:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dc7ec9ad0 code=0x7ffc0000 [ 427.898404][ T30] audit: type=1326 audit(1743900038.745:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dc7ecad6b code=0x7ffc0000 [ 427.945202][ T30] audit: type=1326 audit(1743900038.745:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dc7ecad6b code=0x7ffc0000 [ 427.979094][ T4438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.026360][ T30] audit: type=1326 audit(1743900038.745:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0dc7efda25 code=0x7ffc0000 [ 428.703690][ T4482] loop3: detected capacity change from 0 to 512 [ 429.018497][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.029935][ T4482] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.811496][ T4487] loop1: detected capacity change from 0 to 2048 [ 429.877722][ T4487] loop1: p2 < > p3 p4 < > [ 429.882046][ T4487] loop1: partition table partially beyond EOD, truncated [ 429.912950][ T4487] loop1: p2 start 4294902784 is beyond EOD, truncated [ 429.942585][ T4487] loop1: p3 start 3724543488 is beyond EOD, truncated [ 430.197129][ T481] udevd[481]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 430.250228][ T4498] loop0: detected capacity change from 0 to 512 [ 430.543531][ T481] udevd[481]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 430.636641][ T4498] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 430.743919][ T4507] loop1: detected capacity change from 0 to 512 [ 431.092544][ T4510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.124513][ T4509] loop2: detected capacity change from 0 to 512 [ 433.448121][ T4507] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 433.986277][ T4509] EXT4-fs: failed to create workqueue [ 433.991493][ T4509] EXT4-fs (loop2): mount failed [ 434.642135][ T4518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1001'. [ 435.215468][ T4523] overlayfs: unrecognized mount option "/" or missing value [ 435.223266][ T4522] loop0: detected capacity change from 0 to 128 [ 436.591099][ T4533] loop3: detected capacity change from 0 to 512 [ 437.994736][ T4533] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.006189][ T4533] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.893039][ T4558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4558 comm=syz.2.1010 [ 440.034456][ T4563] loop0: detected capacity change from 0 to 512 [ 441.464224][ T4563] EXT4-fs (loop0): orphan cleanup on readonly fs [ 441.473651][ T4563] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1011: bg 0: block 248: padding at end of block bitmap is not set [ 441.489890][ T4563] __quota_error: 5 callbacks suppressed [ 441.489915][ T4563] Quota error (device loop0): write_blk: dquota write failed [ 441.502677][ T4563] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 441.512488][ T4563] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.1011: Failed to acquire dquot type 1 [ 441.526503][ T4563] EXT4-fs (loop0): 1 truncate cleaned up [ 441.534839][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 443.340634][ T4581] loop3: detected capacity change from 0 to 1024 [ 443.342220][ T4579] loop2: detected capacity change from 0 to 512 [ 443.404640][ T4584] loop0: detected capacity change from 0 to 2048 [ 443.440186][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.464547][ T4581] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 443.465479][ T4579] EXT4-fs (loop2): orphan cleanup on readonly fs [ 443.512807][ T4584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.536370][ T4584] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.536634][ T4579] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1014: bg 0: block 248: padding at end of block bitmap is not set [ 443.561926][ T4579] Quota error (device loop2): write_blk: dquota write failed [ 443.575663][ T4579] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 443.688574][ T4579] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.1014: Failed to acquire dquot type 1 [ 443.726952][ T4579] EXT4-fs (loop2): 1 truncate cleaned up [ 443.748555][ T4579] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 443.881039][ T30] audit: type=1326 audit(1743900055.255:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 444.106755][ T30] audit: type=1326 audit(1743900055.265:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c722169 code=0x7ffc0000 [ 444.217928][ T4588] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.245167][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.255738][ T4586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 444.271760][ T4588] device bridge_slave_0 entered promiscuous mode [ 444.280294][ T4588] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.287217][ T4588] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.309408][ T4588] device bridge_slave_1 entered promiscuous mode [ 445.125254][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.132814][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.161375][ T4613] loop0: detected capacity change from 0 to 512 [ 445.171158][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.181636][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.191195][ T700] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.198089][ T700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.205360][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.213588][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.221890][ T700] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.226962][ T4613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 445.228772][ T700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.247736][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1021'. [ 445.262189][ T4613] EXT4-fs (loop0): 1 truncate cleaned up [ 445.270574][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 445.283182][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.308766][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.317170][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.350807][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.359650][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.373552][ T4588] device veth0_vlan entered promiscuous mode [ 445.404030][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.431749][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.538545][ T4588] device veth1_macvtap entered promiscuous mode [ 445.545173][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.552513][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.554013][ T4623] loop3: detected capacity change from 0 to 2048 [ 445.560514][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.582937][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.593182][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 445.650035][ T4626] loop0: detected capacity change from 0 to 512 [ 445.682222][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.765292][ T4626] EXT4-fs (loop0): orphan cleanup on readonly fs [ 445.774547][ T4626] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1026: bg 0: block 248: padding at end of block bitmap is not set [ 445.791004][ T4626] Quota error (device loop0): write_blk: dquota write failed [ 445.798400][ T4626] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 445.808249][ T4626] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.1026: Failed to acquire dquot type 1 [ 445.822417][ T4626] EXT4-fs (loop0): 1 truncate cleaned up [ 445.829521][ T4626] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 446.289201][ T4623] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.334997][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.725531][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.743911][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.762366][ T4623] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.910119][ T4636] loop5: detected capacity change from 0 to 512 [ 447.011696][ T8] device bridge_slave_1 left promiscuous mode [ 447.026027][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.927682][ T4646] loop0: detected capacity change from 0 to 512 [ 450.253805][ T4615] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 450.297043][ T4646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 450.304041][ T4646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1029: bg 0: block 248: padding at end of block bitmap is not set [ 450.318823][ T4646] Quota error (device loop0): write_blk: dquota write failed [ 450.326107][ T4646] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 450.335826][ T4646] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.1029: Failed to acquire dquot type 1 [ 450.397077][ T700] ================================================================== [ 450.404975][ T700] BUG: KASAN: use-after-free in l2tp_session_delete+0x24/0x4e0 [ 450.412364][ T700] Write of size 8 at addr ffff88812acd5408 by task kworker/u4:6/700 [ 450.420167][ T700] [ 450.422348][ T700] CPU: 1 PID: 700 Comm: kworker/u4:6 Not tainted 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 450.432245][ T700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.436173][ T8] device bridge_slave_0 left promiscuous mode [ 450.442136][ T700] Workqueue: l2tp l2tp_tunnel_del_work [ 450.453342][ T700] Call Trace: [ 450.456455][ T700] [ 450.459245][ T700] dump_stack_lvl+0x151/0x1c0 [ 450.463748][ T700] ? io_uring_drop_tctx_refs+0x190/0x190 [ 450.465232][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.469213][ T700] ? panic+0x760/0x760 [ 450.469237][ T700] print_address_description+0x87/0x3b0 [ 450.485357][ T700] ? __kasan_check_read+0x11/0x20 [ 450.490223][ T700] kasan_report+0x179/0x1c0 [ 450.494560][ T700] ? schedule_preempt_disabled+0x20/0x20 [ 450.500029][ T700] ? l2tp_session_delete+0x24/0x4e0 [ 450.505062][ T700] ? l2tp_session_delete+0x24/0x4e0 [ 450.510100][ T700] kasan_check_range+0x293/0x2a0 [ 450.514871][ T700] __kasan_check_write+0x14/0x20 [ 450.519642][ T700] l2tp_session_delete+0x24/0x4e0 [ 450.524504][ T700] l2tp_tunnel_del_work+0x19d/0x380 [ 450.529536][ T700] process_one_work+0x6bb/0xc10 [ 450.534224][ T700] worker_thread+0xad5/0x12a0 [ 450.538732][ T700] ? _raw_spin_lock+0x1b0/0x1b0 [ 450.543431][ T700] kthread+0x421/0x510 [ 450.547333][ T700] ? worker_clr_flags+0x180/0x180 [ 450.552186][ T700] ? kthread_blkcg+0xd0/0xd0 [ 450.556610][ T700] ret_from_fork+0x1f/0x30 [ 450.560870][ T700] [ 450.563727][ T700] [ 450.565899][ T700] Allocated by task 4644: [ 450.570062][ T700] ____kasan_kmalloc+0xdb/0x110 [ 450.574747][ T700] __kasan_kmalloc+0x9/0x10 [ 450.579090][ T700] __kmalloc+0x13f/0x2c0 [ 450.583167][ T700] l2tp_session_create+0x38/0xb60 [ 450.588030][ T700] pppol2tp_connect+0xc5d/0x1690 [ 450.592803][ T700] __sys_connect+0x38b/0x410 [ 450.597229][ T700] __x64_sys_connect+0x7a/0x90 [ 450.601826][ T700] x64_sys_call+0x14e/0x9a0 [ 450.606167][ T700] do_syscall_64+0x3b/0xb0 [ 450.610420][ T700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.616149][ T700] [ 450.618317][ T700] Freed by task 13: [ 450.621966][ T700] kasan_set_track+0x4b/0x70 [ 450.626391][ T700] kasan_set_free_info+0x23/0x40 [ 450.631164][ T700] ____kasan_slab_free+0x126/0x160 [ 450.636111][ T700] __kasan_slab_free+0x11/0x20 [ 450.640716][ T700] slab_free_freelist_hook+0xbd/0x190 [ 450.645918][ T700] kfree+0xcc/0x270 [ 450.649575][ T700] l2tp_session_dec_refcount+0xa9/0x1b0 [ 450.654943][ T700] pppol2tp_session_destruct+0xaf/0xf0 [ 450.660238][ T700] __sk_destruct+0x56/0x5b0 [ 450.664581][ T700] __sk_free+0x36c/0x470 [ 450.668666][ T700] sk_free+0x51/0x80 [ 450.672392][ T700] pppol2tp_put_sk+0x77/0xb0 [ 450.676818][ T700] rcu_do_batch+0x57a/0xc10 [ 450.681154][ T700] rcu_core+0x517/0x1020 [ 450.685237][ T700] rcu_core_si+0x9/0x10 [ 450.689228][ T700] handle_softirqs+0x25e/0x5c0 [ 450.693828][ T700] run_ksoftirqd+0x28/0x40 [ 450.698089][ T700] smpboot_thread_fn+0x466/0x8d0 [ 450.702857][ T700] kthread+0x421/0x510 [ 450.706760][ T700] ret_from_fork+0x1f/0x30 [ 450.711013][ T700] [ 450.713182][ T700] Last potentially related work creation: [ 450.718749][ T700] kasan_save_stack+0x3b/0x60 [ 450.723249][ T700] __kasan_record_aux_stack+0xd3/0xf0 [ 450.728468][ T700] kasan_record_aux_stack_noalloc+0xb/0x10 [ 450.734099][ T700] call_rcu+0x123/0x10b0 [ 450.738180][ T700] pppol2tp_release+0x20f/0x2d0 [ 450.742867][ T700] sock_close+0xdf/0x270 [ 450.746947][ T700] __fput+0x228/0x8c0 [ 450.750763][ T700] ____fput+0x15/0x20 [ 450.754581][ T700] task_work_run+0x129/0x190 [ 450.759010][ T700] exit_to_user_mode_loop+0xc4/0xe0 [ 450.764043][ T700] exit_to_user_mode_prepare+0x5a/0xa0 [ 450.769339][ T700] syscall_exit_to_user_mode+0x26/0x160 [ 450.774719][ T700] do_syscall_64+0x47/0xb0 [ 450.778971][ T700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.784700][ T700] [ 450.786871][ T700] Second to last potentially related work creation: [ 450.793294][ T700] kasan_save_stack+0x3b/0x60 [ 450.797806][ T700] __kasan_record_aux_stack+0xd3/0xf0 [ 450.803012][ T700] kasan_record_aux_stack_noalloc+0xb/0x10 [ 450.808655][ T700] call_rcu+0x123/0x10b0 [ 450.812734][ T700] replace+0x19b/0x4b0 [ 450.816641][ T700] resize+0xbaf/0x1d60 [ 450.820596][ T700] fib_insert_alias+0xb20/0x1060 [ 450.825319][ T700] fib_trie_unmerge+0x2f6/0x1380 [ 450.830091][ T700] fib_unmerge+0xc4/0x370 [ 450.834257][ T700] fib4_rule_configure+0x114/0xb30 [ 450.839204][ T700] fib_nl_newrule+0x14a9/0x1f60 [ 450.843898][ T700] rtnetlink_rcv_msg+0x951/0xc40 [ 450.848666][ T700] netlink_rcv_skb+0x1cf/0x410 [ 450.853264][ T700] rtnetlink_rcv+0x1c/0x20 [ 450.857521][ T700] netlink_unicast+0x8df/0xac0 [ 450.862120][ T700] netlink_sendmsg+0xa0a/0xd20 [ 450.866720][ T700] ____sys_sendmsg+0x59e/0x8f0 [ 450.871319][ T700] ___sys_sendmsg+0x252/0x2e0 [ 450.875832][ T700] __se_sys_sendmsg+0x19a/0x260 [ 450.880517][ T700] __x64_sys_sendmsg+0x7b/0x90 [ 450.885126][ T700] x64_sys_call+0x16a/0x9a0 [ 450.889465][ T700] do_syscall_64+0x3b/0xb0 [ 450.893710][ T700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.899440][ T700] [ 450.901608][ T700] The buggy address belongs to the object at ffff88812acd5400 [ 450.901608][ T700] which belongs to the cache kmalloc-512 of size 512 [ 450.915496][ T700] The buggy address is located 8 bytes inside of [ 450.915496][ T700] 512-byte region [ffff88812acd5400, ffff88812acd5600) [ 450.928428][ T700] The buggy address belongs to the page: [ 450.933992][ T700] page:ffffea0004ab3500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12acd4 [ 450.944051][ T700] head:ffffea0004ab3500 order:2 compound_mapcount:0 compound_pincount:0 [ 450.952212][ T700] flags: 0x4000000000010200(slab|head|zone=1) [ 450.958118][ T700] raw: 4000000000010200 0000000000000000 0000000500000001 ffff888100042f00 [ 450.966537][ T700] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 450.974951][ T700] page dumped because: kasan: bad access detected [ 450.981207][ T700] page_owner tracks the page as allocated [ 450.986842][ T700] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 292, ts 28448473847, free_ts 0 [ 451.006194][ T700] post_alloc_hook+0x1a3/0x1b0 [ 451.010794][ T700] prep_new_page+0x1b/0x110 [ 451.015139][ T700] get_page_from_freelist+0x3550/0x35d0 [ 451.020516][ T700] __alloc_pages+0x27e/0x8f0 [ 451.024939][ T700] new_slab+0x9a/0x4e0 [ 451.028867][ T700] ___slab_alloc+0x39e/0x830 [ 451.033276][ T700] __slab_alloc+0x4a/0x90 [ 451.037441][ T700] __kmalloc_track_caller+0x171/0x2c0 [ 451.042648][ T700] __alloc_skb+0x10c/0x550 [ 451.046899][ T700] netlink_ack+0x33c/0xb10 [ 451.051151][ T700] netlink_rcv_skb+0x24c/0x410 [ 451.055753][ T700] rtnetlink_rcv+0x1c/0x20 [ 451.060008][ T700] netlink_unicast+0x8df/0xac0 [ 451.064628][ T700] netlink_sendmsg+0xa0a/0xd20 [ 451.069210][ T700] __sys_sendto+0x564/0x720 [ 451.073552][ T700] __x64_sys_sendto+0xe5/0x100 [ 451.078148][ T700] page_owner free stack trace missing [ 451.083352][ T700] [ 451.085520][ T700] Memory state around the buggy address: [ 451.090994][ T700] ffff88812acd5300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.098893][ T700] ffff88812acd5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.106790][ T700] >ffff88812acd5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.114684][ T700] ^ [ 451.118854][ T700] ffff88812acd5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.126754][ T700] ffff88812acd5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.134647][ T700] ================================================================== [ 451.142547][ T700] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.150103][ T4646] EXT4-fs (loop0): 1 truncate cleaned up [ 451.155995][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 451.169825][ T8] device veth1_macvtap left promiscuous mode [ 451.250432][ T8] device veth0_vlan left promiscuous mode [ 451.648768][ T289] syz-executor (289) used greatest stack depth: 19520 bytes left [ 452.906353][ T8] device bridge_slave_1 left promiscuous mode [ 452.912282][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.919672][ T8] device bridge_slave_0 left promiscuous mode [ 452.925620][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.933131][ T8] device bridge_slave_1 left promiscuous mode [ 452.939110][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.946276][ T8] device bridge_slave_0 left promiscuous mode [ 452.952179][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.959921][ T8] device bridge_slave_1 left promiscuous mode [ 452.965917][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.973001][ T8] device bridge_slave_0 left promiscuous mode [ 452.978975][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.986472][ T8] device bridge_slave_1 left promiscuous mode [ 452.992390][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.999712][ T8] device bridge_slave_0 left promiscuous mode [ 453.005714][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.013256][ T8] device bridge_slave_1 left promiscuous mode [ 453.019231][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.026435][ T8] device bridge_slave_0 left promiscuous mode [ 453.032343][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.041131][ T8] device veth0_vlan left promiscuous mode [ 453.046980][ T8] device veth1_macvtap left promiscuous mode [ 453.052780][ T8] device veth0_vlan left promiscuous mode [ 453.058614][ T8] device veth0_vlan left promiscuous mode [ 453.064416][ T8] device veth0_vlan left promiscuous mode [ 453.070240][ T8] device veth1_macvtap left promiscuous mode [ 453.076243][ T8] device veth0_vlan left promiscuous mode