last executing test programs: 2.94896648s ago: executing program 3 (id=3601): syz_read_part_table(0x104a, &(0x7f0000001080)="$eJzsz7EJAjEAheEXPc8DLc7ddB4zjwPYOooT2DmAmKCVrYjwfU0C7yeQ8GPXpCSL5Lb7uA/JOsk9m1atpoyv6X3JlCwv29T0OP0sNTk+szLPGXJOzZh9aXl7+XD69u8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B88AgAA//8oswgx") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095dc79733baa58985400000000000000d5b30500c2d40e3ebf55605548f4b1f7479d5e4f25e6d4b3c3d9431f6076ea8c272db023bff289adcd0c59c700b062cffa9979cdfabbe1eb"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getpriority(0x0, 0x0) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybIzuWkbZcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34udLNou8e7y0EKbXj/f3rxPNCYsTf0MUQlT9C8vL4eroo6uv/zf2B9WfG+HKaOlKWK6a5fD00hvf/+D1hQvVhotRdCqLl+3xk6e//OTgYP83X2Obo6Ojz6rZfIdpvTTbaS8r86zb3k7jrMzjjfX1xvs7W2W8lXXS8l45SLtxUqTtQV7EN5O7IYSNtThdvZfv9rY32500vpn8MG5ubNy51Wo01uMPV/tpuyjz3vsfrpbJTtbpZL3tYUy1+lbr7XCnOhE/ygbxIG134/jBo4P9tVlJVkHN8wS1ZgW1Gq1Ws9lqNddvb9y+02gs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtW7uIwws6Sv4y7xQAAACA71g0vMceDe/LXx32trJO2jgRcxTNLT0AAADgWzD8an+lvgEQwtUQnf7+DwAAAPx/+/u4c+YzdiGKQtlfisaPqvT33osO21WvfXhx9NHF6T0Otq5Fl+udDJv1hXopSa9Hb46C3hxHf1U3D57/rN8/Q5VHVBSL0bNvlkD4U7g2irl2f9TeH68ZzXZlK+ukq0ne+aAZ2u3LFwbp3uB3nz76fQhFcXTxi173chQePDrYX/35rw7uD3N5Vu3l2WH9C4lTP5Q4mctSmMjlt8fPPdYzvnvyyC8Ob8RUs/6i110ZjduYnP+F0eYXvsb8Pw9vjWLeWhm1Kyfnv1yN2Vw9Y/aTWTT7e+8t1YOdc+ZTWVwfxVy/OTyx3r1Zr1mcyKI1K4vW5PF/oWNxnMW7J7KYPBZrs7JY+4ZZAMzLg+kqdKr+n6q7L3CV+x/VvRqlKuEzq/svZo7yeXhnFPPOtYW6Il0MYeqK3ph1RW+cs66HcHYW/wg3/vbXEHbDjXHw82psNe6fT1TV6PDLaoMvT4/7h1FT/vvhzqWqs3T46/DG4ydPbz06/OTh/sP9T1uttfXGjxqN262wOJxG3ag9AJwhLb6KVgZ/jIoi6/+subHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vTTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gXf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBzqN9gdv8ru8U/Gq56cWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq734/qVPud77O+V7dy9dNaqt+ef2GQnhLDwCqShc87O8quRxmL93/ZF9xOFEGYHf6+KmedVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO9p8AAAD//0n5kWY=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0xffffffde, 0x9) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 2.229426539s ago: executing program 3 (id=3606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 2.053389923s ago: executing program 0 (id=3609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000001180)={{0x77359400}}, &(0x7f00000011c0)) 1.990885998s ago: executing program 0 (id=3610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00e4cb9ea3370b9d4756bc6c000000002300008070a6ffec", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000d80)='.\x00', 0x0, 0x2200020, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x800) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000f80)=ANY=[@ANYRES32=r3, @ANYBLOB="e00000027f0000010000000003", @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYBLOB="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"], 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @private=0xa010100}}}, 0x88) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.951296342s ago: executing program 1 (id=3611): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.909026115s ago: executing program 1 (id=3613): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@usrquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 1.870433028s ago: executing program 3 (id=3614): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.688146803s ago: executing program 2 (id=3615): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.588107601s ago: executing program 0 (id=3616): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.572293102s ago: executing program 1 (id=3617): syz_read_part_table(0x104a, &(0x7f0000001080)="$eJzsz7EJAjEAheEXPc8DLc7ddB4zjwPYOooT2DmAmKCVrYjwfU0C7yeQ8GPXpCSL5Lb7uA/JOsk9m1atpoyv6X3JlCwv29T0OP0sNTk+szLPGXJOzZh9aXl7+XD69u8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B88AgAA//8oswgx") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095dc79733baa58985400000000000000d5b30500c2d40e3ebf55605548f4b1f7479d5e4f25e6d4b3c3d9431f6076ea8c272db023bff289adcd0c59c700b062cffa9979cdfabbe1eb"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getpriority(0x0, 0x0) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0xffffffde, 0x9) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 1.545858544s ago: executing program 2 (id=3618): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a07"], 0xfe33) r7 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 910.079216ms ago: executing program 2 (id=3619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000860ad7a6680d1e99e1aaa8e3"], 0x3c}, 0x1, 0x0, 0x0, 0x4844}, 0x4008815) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 829.860692ms ago: executing program 2 (id=3620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) capget(&(0x7f00000008c0)={0x20080522}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r3, &(0x7f00000001c0), 0x59) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x0, 0x0, 0x8, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7, 0x29, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000200000000800040001000000", 0x24) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r7 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fchownat(r7, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x3) 819.726863ms ago: executing program 3 (id=3621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300), 0x0, 0xffffffff, 0x4) ioctl$TCFLSH(r2, 0x540b, 0x1) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x20003}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x43c, &(0x7f0000000d80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x2, 0x0) fallocate(r7, 0x3, 0x1020003, 0x5) 802.977634ms ago: executing program 2 (id=3622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000001180)={{0x77359400}}, &(0x7f00000011c0)) 717.041821ms ago: executing program 3 (id=3623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000007000000060000008c00000000000000", @ANYRES32, @ANYBLOB="008ce0cdc74e5613f180bd910c9523e9358f539414e1f26d1111373a00"/38, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff7ffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='sched_switch\x00', r2}, 0xffffffffffffff6a) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 716.592851ms ago: executing program 2 (id=3624): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32=r3, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32, @ANYBLOB='\x00'/28]) waitid$P_PIDFD(0x3, r1, &(0x7f0000000840), 0x1, &(0x7f0000000500)) 715.988012ms ago: executing program 0 (id=3625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 645.255897ms ago: executing program 4 (id=3626): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 644.761697ms ago: executing program 0 (id=3627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/bl5cUWxYCHFqTbpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBS1dmd7bdbHbTNc3uppnPByY7zzOz+zzfnX12npnJsxNAYU1mf9KIXRH3TiURE03LxqO+cDJf786v105nUxLV6uu/JJHkeY31k/xxe54YjYhvjkb8t7S63MUrV8/OVKp11yP2L527uH/xytV9C+dmzsydmTs/feCFg4emXpw+OL0hcW7PH48df+3Jj957+/n5byv7kjgcJ4ffnY2WODbKZEzGvTzE5vyhiDiUzbR5Xx43WyCEQivln8fhiPh/TESplqqbiIUPB1o5oKeqpYgqUFCJ9g8F1egHNI7tuzsOPtnjXkn/3D5SPwBaHf9Q/dxIjNaOjbbdSZqOjOrnNnZsQPlZGXev7f4sm2LFeYg/7m+doQ0op5PlGxHxRLv4k1rddtQizeJPV9QjiYipiBjJ6/fKI9QhaZrvxXmYtaw3/jQiDuePWf7RdZY/2ZLud/wAFNOtI/mOfDlLPdj/ZX2PRv8n2vR/xtvsu9Zj0Pu/zv2/xv5+tHaOPG3ph2V9lhPtX3K4NePHD4590qn85v5fNmXlN/qC/XD7RsTulvjfz4LN+z9Z/Emb7Z+tcupwd2W8+t3PxzotG3T81ZsRe9oe/zzolWZza1yf3D+/UJmbqv9tW8ZXX7/1Rafym+IfHdT239Yh/qbtn7Y+L3tPLnZZxpcnbp7rtCz7Hrlbvb7G9k9/Gknqx5sjec47M0tLl6YjRpLj+SpN+QfWrktjncZrZPHvfaZ9+1/x+b+x8nXGGl+ZXbj4xtk7nZat5/PfdDH5XrXLOnSSxT/78O2/qv1neR93Wcbvb15+qtOyteIfe5TAAAAAAAAAoIDS2jXYJC3fn0/Tcrk+XvZ/sS2tXFhcenb+wuXzsxF7a/8POZw2rnRP1NNJlp7O/x+2kT7Qkn4uInZGxKelsVq6fPpCZXbQwQMAAAAAAAAAAAAAAAAAAMAmsT0f/9+4T/Vvpfr4f6AgenmDOWBz67r9l3pbD6D/au1/1S2egCLQ/4fi0v6huLR/KC7tH4pL+4fi0v6huLR/KC7tHwAAAAC2pJ1P3/ohiYjll8ZqU2YkX2ZEEGxtw4OuADAwRvRDcd2/9K+zD4XTVf//z/zHAXtfHWAAknaZtc5Bde3Gf6vtMwEAAAAAAAAAAACAHtizq/P4f2ODYWsz7A+K6xHG//vpAHjM+el/KC7H+MDDRvGPdlpg/D8AAAAAAAAAAAAA9M14bUrScj4WeDzStFyO+HdE7IjhZH6hMjcVEf+JiO9Lw//K0tODrjQAAAAAAAAAAAAAAAAAAABsMYtXrp6dqVTmLjXP/LUqZ2vPNO6C2oeyXo5/+KxI+v+2jEXEwDdKz2aGmnKSiOVsy2+Kil1ajM1RjdrMgL+YAAAAAAAAAAAAAAAAAACggJrGHre3+/M+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/B/f97NzPoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx9PfAQAA//+BdkCC") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 449.156913ms ago: executing program 1 (id=3628): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 428.263245ms ago: executing program 4 (id=3629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 394.745157ms ago: executing program 4 (id=3630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = syz_io_uring_setup(0x1efc, 0x0, &(0x7f0000000500), &(0x7f0000000440)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_required={0x3, 0x1c}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109) 307.502164ms ago: executing program 1 (id=3631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000860ad7a6680d1e99e1aaa8e3"], 0x3c}, 0x1, 0x0, 0x0, 0x4844}, 0x4008815) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 280.825847ms ago: executing program 0 (id=3632): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 191.383104ms ago: executing program 1 (id=3633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 189.970894ms ago: executing program 4 (id=3634): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802) 174.204515ms ago: executing program 4 (id=3635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00e4cb9ea3370b9d4756bc6c000000002300008070a6ffec", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000d80)='.\x00', 0x0, 0x2200020, 0x0) 108.918611ms ago: executing program 3 (id=3636): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r7, 'id1\x00'}) sendmsg$key(r9, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x40}, 0x18) 0s ago: executing program 4 (id=3637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r3 = dup(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) write$binfmt_script(r3, &(0x7f0000000380)={'#! ', './file0'}, 0xb) kernel console output (not intermixed with test programs): cast mode [ 244.963049][T13851] bridge_slave_1: left promiscuous mode [ 244.969091][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.007580][T13856] loop0: detected capacity change from 0 to 1024 [ 245.014462][T13856] EXT4-fs: Ignoring removed nobh option [ 245.020272][T13856] EXT4-fs: Ignoring removed bh option [ 245.050492][T13851] bond0: (slave bond_slave_0): Releasing backup interface [ 245.058932][T13856] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.100615][T13851] bond0: (slave bond_slave_1): Releasing backup interface [ 245.151076][T13851] team0: Port device team_slave_0 removed [ 245.158596][ T29] audit: type=1326 audit(1755285750.204:14223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f479d98d84a code=0x7ffc0000 [ 245.202226][ T29] audit: type=1326 audit(1755285750.214:14224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479d98ebe9 code=0x7ffc0000 [ 245.226017][ T29] audit: type=1326 audit(1755285750.224:14225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.4.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479d98ebe9 code=0x7ffc0000 [ 245.241337][T13819] netlink: 'syz.4.3246': attribute type 27 has an invalid length. [ 245.261769][T13851] team0: Port device team_slave_1 removed [ 245.271217][T13851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.278736][T13851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.289023][T13851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.293453][T13864] loop1: detected capacity change from 0 to 1024 [ 245.296482][T13851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.311874][T13864] EXT4-fs: Ignoring removed bh option [ 245.318113][T13864] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 245.330677][T13864] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 245.340259][T13864] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3258: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.376799][T13864] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3258: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.394951][T13864] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3258: Failed to acquire dquot type 0 [ 245.420978][T13864] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 245.445302][T13864] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3258: mark_inode_dirty error [ 245.477450][T13872] loop0: detected capacity change from 0 to 512 [ 245.494409][T13872] EXT4-fs: Ignoring removed orlov option [ 245.512631][T13864] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 245.525372][T13872] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 245.538821][T13864] EXT4-fs (loop1): 1 orphan inode deleted [ 245.550053][T13872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 245.558803][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.581511][T13872] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3261: corrupted in-inode xattr: e_value size too large [ 245.588514][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 245.607224][T13879] loop2: detected capacity change from 0 to 1024 [ 245.613398][T13872] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3261: couldn't read orphan inode 15 (err -117) [ 245.615365][T13864] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3258: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.641153][T13879] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.642127][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.658735][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.662115][T13879] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3263: lblock 1 mapped to illegal pblock 1 (length 15) [ 245.687010][T13879] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 245.695381][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 245.699454][T13879] EXT4-fs (loop2): This should not happen!! Data will be lost [ 245.699454][T13879] [ 245.702666][T13879] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 245.781589][T13884] loop2: detected capacity change from 0 to 1024 [ 245.819711][T13819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.831446][T13888] loop1: detected capacity change from 0 to 512 [ 245.844121][T13884] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.858368][T13819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.866221][T13888] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 245.885766][T13884] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3265: lblock 1 mapped to illegal pblock 1 (length 15) [ 245.902302][T13888] EXT4-fs (loop1): orphan cleanup on readonly fs [ 245.908986][T13888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3266: Block bitmap for bg 0 marked uninitialized [ 245.923905][T13884] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 245.936509][T13884] EXT4-fs (loop2): This should not happen!! Data will be lost [ 245.936509][T13884] [ 245.948596][T13888] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 245.958492][T13888] EXT4-fs (loop1): 1 orphan inode deleted [ 245.960227][T13892] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3265: lblock 1 mapped to illegal pblock 1 (length 3) [ 245.995305][T13888] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 246.017107][ T6620] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.026131][ T6620] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.035037][ T6620] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.044230][ T6620] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.044785][T13884] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 246.053249][T13888] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 246.061557][T13884] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 246.077219][T13892] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3265: lblock 1 mapped to illegal pblock 1 (length 3) [ 246.080792][T13894] loop3: detected capacity change from 0 to 512 [ 246.160191][T13897] loop4: detected capacity change from 0 to 128 [ 246.170504][T13899] 9pnet_fd: Insufficient options for proto=fd [ 246.177752][T13894] EXT4-fs: Ignoring removed orlov option [ 246.190078][T13897] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.198222][T13897] FAT-fs (loop4): Filesystem has been set read-only [ 246.205733][T13894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.207394][T13897] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.212811][T13894] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 246.220452][T13897] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.301230][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'. [ 246.364073][T13910] loop1: detected capacity change from 0 to 1024 [ 246.370954][T13910] EXT4-fs: Ignoring removed nobh option [ 246.376842][T13910] EXT4-fs: Ignoring removed bh option [ 246.384897][T13911] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 246.392708][T13911] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3261'. [ 246.401749][T13911] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 246.425512][T13910] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.639859][T13926] loop0: detected capacity change from 0 to 1024 [ 246.647040][T13925] 9pnet_fd: Insufficient options for proto=fd [ 246.693582][T13926] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.706440][T13926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 246.740594][T13934] loop3: detected capacity change from 0 to 512 [ 246.746912][T13897] bio_check_eod: 43093 callbacks suppressed [ 246.746929][T13897] syz.4.3268: attempt to access beyond end of device [ 246.746929][T13897] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 246.747097][T13897] syz.4.3268: attempt to access beyond end of device [ 246.747097][T13897] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 246.781643][T13897] syz.4.3268: attempt to access beyond end of device [ 246.781643][T13897] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 246.795091][T13897] syz.4.3268: attempt to access beyond end of device [ 246.795091][T13897] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 246.803029][T13937] loop1: detected capacity change from 0 to 512 [ 246.808672][T13897] syz.4.3268: attempt to access beyond end of device [ 246.808672][T13897] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 246.819606][T13937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 246.828185][T13897] syz.4.3268: attempt to access beyond end of device [ 246.828185][T13897] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 246.851026][T13897] syz.4.3268: attempt to access beyond end of device [ 246.851026][T13897] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 246.851822][T13934] EXT4-fs: Ignoring removed orlov option [ 246.864366][T13897] buffer_io_error: 41409 callbacks suppressed [ 246.864384][T13897] Buffer I/O error on dev loop4, logical block 2068, async page read [ 246.873257][T13934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.876437][T13897] syz.4.3268: attempt to access beyond end of device [ 246.876437][T13897] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 246.888851][T13937] EXT4-fs (loop1): orphan cleanup on readonly fs [ 246.891058][T13897] Buffer I/O error on dev loop4, logical block 2069, async page read [ 246.891726][T13897] syz.4.3268: attempt to access beyond end of device [ 246.891726][T13897] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 246.920812][T13937] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3284: Block bitmap for bg 0 marked uninitialized [ 246.932071][T13897] Buffer I/O error on dev loop4, logical block 2070, async page read [ 246.953570][T13897] syz.4.3268: attempt to access beyond end of device [ 246.953570][T13897] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 246.965572][T13934] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 246.966831][T13897] Buffer I/O error on dev loop4, logical block 2071, async page read [ 246.981573][T13897] Buffer I/O error on dev loop4, logical block 2072, async page read [ 247.034659][T13937] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 247.047388][T13937] EXT4-fs (loop1): 1 orphan inode deleted [ 247.051312][T13949] loop0: detected capacity change from 0 to 512 [ 247.064594][T13943] loop2: detected capacity change from 0 to 1024 [ 247.071638][T13937] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 247.073966][T13943] EXT4-fs: Ignoring removed nobh option [ 247.081444][T13937] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 247.088753][T13943] EXT4-fs: Ignoring removed bh option [ 247.095654][T13949] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.128787][T13943] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.154108][T13957] loop1: detected capacity change from 0 to 1024 [ 247.161033][T13957] EXT4-fs: Ignoring removed nobh option [ 247.167914][T13957] EXT4-fs: Ignoring removed bh option [ 247.177547][T13959] loop4: detected capacity change from 0 to 1024 [ 247.184865][T13957] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.216860][T13965] loop2: detected capacity change from 0 to 512 [ 247.226747][T13964] loop0: detected capacity change from 0 to 512 [ 247.233416][T13964] EXT4-fs: Ignoring removed oldalloc option [ 247.242544][T13964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 247.244532][T13965] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 247.253832][T13959] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.277012][T13965] EXT4-fs (loop2): orphan cleanup on readonly fs [ 247.292178][T13964] EXT4-fs (loop0): 1 truncate cleaned up [ 247.298145][T13965] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3293: Block bitmap for bg 0 marked uninitialized [ 247.313170][T13965] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 247.320888][T13959] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.3292: lblock 1 mapped to illegal pblock 1 (length 15) [ 247.336703][T13959] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 247.349200][T13959] EXT4-fs (loop4): This should not happen!! Data will be lost [ 247.349200][T13959] [ 247.350148][T13965] EXT4-fs (loop2): 1 orphan inode deleted [ 247.361692][T13959] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 247.391058][T13965] EXT4-fs: Ignoring sb option on remount [ 247.396782][T13965] EXT4-fs: Ignoring removed orlov option [ 247.402673][T13965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.409670][T13965] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 247.418403][T13979] loop3: detected capacity change from 0 to 128 [ 247.424791][T13965] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 247.430028][T13979] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 247.442072][T13979] FAT-fs (loop3): Filesystem has been set read-only [ 247.442108][T13977] loop1: detected capacity change from 0 to 512 [ 247.450969][T13979] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 247.462889][T13979] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 247.464625][T13965] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 247.472303][T13977] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.489137][T13981] Buffer I/O error on dev loop3, logical block 2065, async page read [ 247.501842][T13977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.509725][T13981] Buffer I/O error on dev loop3, logical block 2066, async page read [ 247.523663][T13981] Buffer I/O error on dev loop3, logical block 2067, async page read [ 247.535561][T13981] Buffer I/O error on dev loop3, logical block 2068, async page read [ 247.543752][T13981] Buffer I/O error on dev loop3, logical block 2069, async page read [ 247.552388][T13977] EXT4-fs (loop1): 1 truncate cleaned up [ 247.574506][T13987] loop2: detected capacity change from 0 to 512 [ 247.588163][T13989] loop4: detected capacity change from 0 to 512 [ 247.633080][T13989] EXT4-fs: Ignoring removed orlov option [ 247.640874][T13987] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 247.651651][T13989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.689845][T13989] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 247.714667][T13987] EXT4-fs (loop2): orphan cleanup on readonly fs [ 247.725867][T13987] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3302: Block bitmap for bg 0 marked uninitialized [ 247.731829][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 247.774062][T13987] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 247.788570][T14000] loop4: detected capacity change from 0 to 512 [ 247.805320][T13987] EXT4-fs (loop2): 1 orphan inode deleted [ 247.815993][T14000] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.899137][T13987] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 247.949657][T13987] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 248.003551][T14009] loop0: detected capacity change from 0 to 512 [ 248.017103][T14009] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.024740][T14009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.067160][T14009] EXT4-fs (loop0): 1 truncate cleaned up [ 248.080472][T14014] loop2: detected capacity change from 0 to 512 [ 248.087950][T14014] EXT4-fs: Ignoring removed oldalloc option [ 248.094236][T14014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.111263][T14016] loop1: detected capacity change from 0 to 1024 [ 248.120058][T14014] EXT4-fs (loop2): 1 truncate cleaned up [ 248.173237][T14016] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.223230][T14016] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.3312: lblock 1 mapped to illegal pblock 1 (length 15) [ 248.249970][T14023] loop2: detected capacity change from 0 to 512 [ 248.259604][T14016] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 248.272122][T14016] EXT4-fs (loop1): This should not happen!! Data will be lost [ 248.272122][T14016] [ 248.288806][T14023] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 248.302850][T14016] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 248.320476][T14023] EXT4-fs (loop2): orphan cleanup on readonly fs [ 248.327412][T14023] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3313: Block bitmap for bg 0 marked uninitialized [ 248.346767][T14023] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 248.356878][T14023] EXT4-fs (loop2): 1 orphan inode deleted [ 248.387410][T14023] EXT4-fs: Ignoring sb option on remount [ 248.393126][T14023] EXT4-fs: Ignoring removed orlov option [ 248.419938][T14023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.423283][T14031] loop1: detected capacity change from 0 to 512 [ 248.426942][T14023] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 248.433496][T14031] EXT4-fs: Ignoring removed oldalloc option [ 248.447026][T14023] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 248.457577][T14023] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 248.466683][T14031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.496281][T14031] EXT4-fs (loop1): 1 truncate cleaned up [ 248.539013][T14036] loop2: detected capacity change from 0 to 1024 [ 248.545778][T14033] loop3: detected capacity change from 0 to 8192 [ 248.557827][T14036] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.580503][T14033] loop3: p1 p2 p3 p4[DM] [ 248.581320][T14036] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 15) [ 248.584899][T14033] loop3: p1 size 835331 extends beyond EOD, truncated [ 248.606455][T14036] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 248.607221][T14033] loop3: p2 size 16777223 extends beyond EOD, truncated [ 248.618925][T14036] EXT4-fs (loop2): This should not happen!! Data will be lost [ 248.618925][T14036] [ 248.621569][T14036] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 248.626628][T14033] loop3: p3 start 1052673 is beyond EOD, [ 248.635619][T14036] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 248.658437][T14033] truncated [ 248.661561][T14033] loop3: p4 size 262144 extends beyond EOD, truncated [ 248.686279][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.701050][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.716548][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.731319][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.746596][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.770133][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.795822][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.830067][T14041] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3318: lblock 1 mapped to illegal pblock 1 (length 3) [ 248.859322][T14043] loop4: detected capacity change from 0 to 512 [ 248.892926][T14043] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 248.929648][T14043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 248.936494][T14043] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3320: Block bitmap for bg 0 marked uninitialized [ 248.959780][T14043] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 248.982610][T14043] EXT4-fs (loop4): 1 orphan inode deleted [ 248.995489][T14048] loop2: detected capacity change from 0 to 512 [ 249.006885][T14048] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 249.017756][T14048] EXT4-fs (loop2): orphan cleanup on readonly fs [ 249.024335][T14048] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3322: Block bitmap for bg 0 marked uninitialized [ 249.038063][T14048] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 249.049781][T14048] EXT4-fs (loop2): 1 orphan inode deleted [ 249.071667][T14043] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 249.079298][T14033] netlink: 'syz.3.3317': attribute type 27 has an invalid length. [ 249.081064][T14048] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 249.081517][T14043] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 249.107666][T14048] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 249.140398][T14053] loop0: detected capacity change from 0 to 512 [ 249.178003][T14053] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 249.198371][T14058] loop2: detected capacity change from 0 to 1024 [ 249.218091][T14058] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.238303][T14058] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3325: lblock 1 mapped to illegal pblock 1 (length 15) [ 249.259315][T14058] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 249.272057][T14058] EXT4-fs (loop2): This should not happen!! Data will be lost [ 249.272057][T14058] [ 249.283080][T14058] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 249.330942][T14073] 9pnet_fd: Insufficient options for proto=fd [ 249.486705][ T6625] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.506918][ T6625] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.519553][ T6625] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.552078][T14088] loop4: detected capacity change from 0 to 512 [ 249.558988][T14088] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 249.571090][T14086] loop1: detected capacity change from 0 to 512 [ 249.580227][T14086] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.585418][ T6625] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.588824][T14086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.603041][T14088] EXT4-fs (loop4): orphan cleanup on readonly fs [ 249.613418][T14088] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3335: Block bitmap for bg 0 marked uninitialized [ 249.628819][T13248] EXT4-fs unmount: 170 callbacks suppressed [ 249.628833][T13248] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 249.644171][T14088] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 249.655211][T14086] EXT4-fs (loop1): 1 truncate cleaned up [ 249.661262][T14086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.676837][T14088] EXT4-fs (loop4): 1 orphan inode deleted [ 249.683164][T14088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 249.687191][T14098] loop3: detected capacity change from 0 to 512 [ 249.713219][T14100] loop0: detected capacity change from 0 to 512 [ 249.713566][T14098] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.720495][T14100] EXT4-fs: Ignoring removed orlov option [ 249.732394][T14088] EXT4-fs: Ignoring sb option on remount [ 249.738101][T14100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.743383][T14088] EXT4-fs: Ignoring removed orlov option [ 249.757584][T14088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.758576][T14100] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 249.764539][T14088] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 249.779652][T14088] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 249.789505][T14088] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 249.799871][T14098] __quota_error: 157 callbacks suppressed [ 249.799890][T14098] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 249.816071][T14098] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 249.854621][T14106] 9pnet_fd: Insufficient options for proto=fd [ 249.886372][T14098] netlink: 'syz.3.3340': attribute type 4 has an invalid length. [ 249.902057][T12539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.949536][T14111] loop4: detected capacity change from 0 to 512 [ 249.956469][T14111] EXT4-fs: Ignoring removed orlov option [ 249.962581][T14111] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 249.984291][T13074] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 250.003983][T14111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 250.014466][T14111] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3342: corrupted in-inode xattr: e_value size too large [ 250.031832][T14111] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3342: couldn't read orphan inode 15 (err -117) [ 250.048502][T14111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.085073][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 250.099154][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 250.160139][T14126] loop3: detected capacity change from 0 to 512 [ 250.167440][T14126] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.175231][T14126] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.197698][T14128] loop2: detected capacity change from 0 to 512 [ 250.204571][T14128] EXT4-fs: Ignoring removed oldalloc option [ 250.223019][T14126] EXT4-fs (loop3): 1 truncate cleaned up [ 250.229676][T14126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.242307][T14128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.259682][T14131] tmpfs: Unknown parameter '0x0000000000000006' [ 250.268601][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.295450][T14128] EXT4-fs (loop2): 1 truncate cleaned up [ 250.322339][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.336158][T14128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.356241][T14131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3352'. [ 250.588441][T13691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.588522][T12941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.607816][T14137] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 250.615735][T14137] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3342'. [ 250.624771][T14137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.670133][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.680120][T14141] loop2: detected capacity change from 0 to 1024 [ 250.696921][T14141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.711545][T14141] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.736223][T14141] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3353: lblock 1 mapped to illegal pblock 1 (length 15) [ 250.750770][T14151] 9pnet_fd: Insufficient options for proto=fd [ 250.751937][T14141] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 250.769469][T14141] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.769469][T14141] [ 250.780942][T14141] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 250.802087][T14141] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3353: lblock 1 mapped to illegal pblock 1 (length 3) [ 250.818855][T14141] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3353: lblock 1 mapped to illegal pblock 1 (length 3) [ 250.819074][T12539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.834517][T14141] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3353: lblock 1 mapped to illegal pblock 1 (length 3) [ 250.856618][T14141] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3353: lblock 1 mapped to illegal pblock 1 (length 3) [ 250.871201][T14141] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3353: lblock 1 mapped to illegal pblock 1 (length 3) [ 250.910483][T13691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.940316][T14162] loop3: detected capacity change from 0 to 512 [ 250.947234][T14162] EXT4-fs: Ignoring removed oldalloc option [ 250.951746][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 250.953644][T14162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.973272][T14162] EXT4-fs (loop3): 1 truncate cleaned up [ 250.979655][T14162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.996976][T14167] loop2: detected capacity change from 0 to 512 [ 251.003683][T14167] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.010421][T14167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.021912][T14167] EXT4-fs (loop2): 1 truncate cleaned up [ 251.022280][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.028385][T14167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.081934][T14172] loop3: detected capacity change from 0 to 512 [ 251.088695][T14172] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.095590][T14172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.117226][T14172] EXT4-fs (loop3): 1 truncate cleaned up [ 251.123783][T14172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.301538][T13691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.326244][T14181] loop0: detected capacity change from 0 to 1024 [ 251.340016][T14183] loop2: detected capacity change from 0 to 512 [ 251.347989][T14183] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.354980][T14183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.357331][T14181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.377174][T14181] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.389521][T14183] EXT4-fs (loop2): 1 truncate cleaned up [ 251.395617][T14183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.400824][T14181] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 251.449353][T14188] loop1: detected capacity change from 0 to 512 [ 251.451510][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.456316][T14188] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.472126][T14188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.483316][T14188] EXT4-fs (loop1): 1 truncate cleaned up [ 251.489491][T14188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.518424][T14191] netlink: 'syz.3.3370': attribute type 27 has an invalid length. [ 251.533167][T13248] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.686928][T14207] loop3: detected capacity change from 0 to 1024 [ 251.703443][T14207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.727053][T14207] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.747826][T14207] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.3376: lblock 1 mapped to illegal pblock 1 (length 15) [ 251.764580][T14207] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 251.777087][T14207] EXT4-fs (loop3): This should not happen!! Data will be lost [ 251.777087][T14207] [ 251.798698][T14213] loop4: detected capacity change from 0 to 512 [ 251.806069][T14213] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.813789][T14213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 251.834881][T14207] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 251.853189][T14213] EXT4-fs (loop4): 1 truncate cleaned up [ 251.863506][T14213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.907857][T14217] loop0: detected capacity change from 0 to 512 [ 251.921569][T14217] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 251.932259][T14217] EXT4-fs (loop0): orphan cleanup on readonly fs [ 251.939590][T14217] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3380: Block bitmap for bg 0 marked uninitialized [ 251.960276][T14217] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 251.971126][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.981064][T14217] EXT4-fs (loop0): 1 orphan inode deleted [ 251.991749][T14217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.026772][T14217] EXT4-fs: Ignoring sb option on remount [ 252.032471][T14217] EXT4-fs: Ignoring removed orlov option [ 252.039228][T14217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.046348][T14217] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 252.056236][T14217] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 252.066402][T14217] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 252.134183][T13248] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.215345][T14226] loop0: detected capacity change from 0 to 512 [ 252.222015][T14226] EXT4-fs: Ignoring removed oldalloc option [ 252.234571][T14226] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.236386][T13691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.246278][T14226] EXT4-fs (loop0): 1 truncate cleaned up [ 252.260301][T14226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.326856][T13248] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.387668][T12539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.398981][T12941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.422416][T14239] loop4: detected capacity change from 0 to 1024 [ 252.429071][T14239] EXT4-fs: Ignoring removed bh option [ 252.435020][T14239] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.447035][T14239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 252.456062][T14239] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3387: lblock 2 mapped to illegal pblock 2 (length 1) [ 252.471642][T14239] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 252.479825][T14239] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3387: lblock 0 mapped to illegal pblock 48 (length 1) [ 252.494396][T14239] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 252.503240][T14239] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3387: Failed to acquire dquot type 0 [ 252.515184][T14239] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 252.515875][T14244] loop2: detected capacity change from 0 to 1024 [ 252.524913][T14239] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3387: mark_inode_dirty error [ 252.531652][T14244] EXT4-fs: Ignoring removed bh option [ 252.544150][T14239] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 252.548489][T14244] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.558262][T14239] EXT4-fs (loop4): 1 orphan inode deleted [ 252.570922][T14244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 252.574934][T14239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.583751][T14244] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3390: lblock 2 mapped to illegal pblock 2 (length 1) [ 252.606630][ T6620] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.609309][T14244] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 252.627887][ T6620] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 252.631968][T14244] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3390: lblock 0 mapped to illegal pblock 48 (length 1) [ 252.639918][ T6620] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 252.666527][T14244] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 252.675416][T14244] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3390: Failed to acquire dquot type 0 [ 252.687519][T14244] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 252.688612][T14239] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3387: lblock 0 mapped to illegal pblock 48 (length 1) [ 252.697333][T14244] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3390: mark_inode_dirty error [ 252.711404][T14239] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 252.724709][T14244] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 252.742540][T14244] EXT4-fs (loop2): 1 orphan inode deleted [ 252.748728][T14244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.769507][ T6620] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.784103][ T6620] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 252.792695][ T6620] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 252.805275][T14244] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3390: lblock 0 mapped to illegal pblock 48 (length 1) [ 252.806745][T12539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.829712][T14244] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 252.839321][ T29] audit: type=1326 audit(1755285757.884:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14246 comm="syz.3.3392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e2173ebe9 code=0x0 [ 252.877115][T13691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.906474][T14250] loop3: detected capacity change from 0 to 128 [ 252.914914][T14250] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 252.922791][T14250] FAT-fs (loop3): Filesystem has been set read-only [ 252.933464][T14252] loop2: detected capacity change from 0 to 256 [ 252.940595][T14250] bio_check_eod: 23730 callbacks suppressed [ 252.940611][T14250] syz.3.3392: attempt to access beyond end of device [ 252.940611][T14250] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 252.960814][T14250] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 252.968718][T14250] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 252.979887][T14253] syz.3.3392: attempt to access beyond end of device [ 252.979887][T14253] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 252.993249][T14253] buffer_io_error: 23723 callbacks suppressed [ 252.993263][T14253] Buffer I/O error on dev loop3, logical block 2065, async page read [ 253.009456][T14253] syz.3.3392: attempt to access beyond end of device [ 253.009456][T14253] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 253.022783][T14253] Buffer I/O error on dev loop3, logical block 2066, async page read [ 253.031311][T14253] syz.3.3392: attempt to access beyond end of device [ 253.031311][T14253] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 253.044642][T14253] Buffer I/O error on dev loop3, logical block 2067, async page read [ 253.052824][T14253] syz.3.3392: attempt to access beyond end of device [ 253.052824][T14253] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 253.066152][T14253] Buffer I/O error on dev loop3, logical block 2068, async page read [ 253.074407][T14253] syz.3.3392: attempt to access beyond end of device [ 253.074407][T14253] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 253.087911][T14253] Buffer I/O error on dev loop3, logical block 2069, async page read [ 253.106651][T14253] syz.3.3392: attempt to access beyond end of device [ 253.106651][T14253] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 253.119979][T14253] Buffer I/O error on dev loop3, logical block 2070, async page read [ 253.128251][T14253] syz.3.3392: attempt to access beyond end of device [ 253.128251][T14253] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 253.141594][T14253] Buffer I/O error on dev loop3, logical block 2071, async page read [ 253.151716][T14253] syz.3.3392: attempt to access beyond end of device [ 253.151716][T14253] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 253.165170][T14253] Buffer I/O error on dev loop3, logical block 2072, async page read [ 253.173538][T14250] syz.3.3392: attempt to access beyond end of device [ 253.173538][T14250] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 253.186809][T14250] Buffer I/O error on dev loop3, logical block 2065, async page read [ 253.195168][T14250] Buffer I/O error on dev loop3, logical block 2066, async page read [ 253.200150][T14259] loop2: detected capacity change from 0 to 1024 [ 253.217112][T14259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.235871][T14259] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.298495][T14266] loop1: detected capacity change from 0 to 512 [ 253.309965][T14266] EXT4-fs: Ignoring removed oldalloc option [ 253.326245][T14259] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3395: lblock 1 mapped to illegal pblock 1 (length 15) [ 253.345495][T14266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.383632][T14259] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 253.396075][T14259] EXT4-fs (loop2): This should not happen!! Data will be lost [ 253.396075][T14259] [ 253.412278][T14266] EXT4-fs (loop1): 1 truncate cleaned up [ 253.418466][T14266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.441518][T14259] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 253.470673][T14273] loop0: detected capacity change from 0 to 128 [ 253.502139][T14273] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 253.510193][T14273] FAT-fs (loop0): Filesystem has been set read-only [ 253.517069][T14273] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 253.524902][T14273] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 253.542133][T12941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.563073][T13691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.626991][T14280] loop1: detected capacity change from 0 to 512 [ 253.656621][T14280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.697419][T14280] EXT4-fs (loop1): 1 truncate cleaned up [ 253.703499][T14280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.792534][T14284] loop3: detected capacity change from 0 to 512 [ 253.815021][T14284] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.846258][T14284] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.908696][T12941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.923678][T14284] netlink: 'syz.3.3403': attribute type 4 has an invalid length. [ 254.028028][T13074] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 254.260383][T14303] loop0: detected capacity change from 0 to 512 [ 254.286518][T14303] EXT4-fs: Ignoring removed oldalloc option [ 254.292777][T14303] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.296677][T14309] loop3: detected capacity change from 0 to 512 [ 254.310152][T14309] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 254.313294][T14303] EXT4-fs (loop0): 1 truncate cleaned up [ 254.321951][T14309] EXT4-fs (loop3): orphan cleanup on readonly fs [ 254.327104][T14303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.332283][T14309] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3414: Block bitmap for bg 0 marked uninitialized [ 254.357822][T14309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 254.371679][T14307] syzkaller0: entered promiscuous mode [ 254.377258][T14307] syzkaller0: entered allmulticast mode [ 254.379063][T14309] EXT4-fs (loop3): 1 orphan inode deleted [ 254.389088][T14309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 254.400000][T13248] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.417581][T14309] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 254.432319][T14309] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 254.457013][T14317] loop2: detected capacity change from 0 to 512 [ 254.464536][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.477226][T14317] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.494444][T14321] loop0: detected capacity change from 0 to 512 [ 254.501599][T14321] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.510414][T14321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.521903][T14321] EXT4-fs (loop0): 1 truncate cleaned up [ 254.528062][T14321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.531146][T14317] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 254.570955][T14325] netlink: 'syz.2.3417': attribute type 4 has an invalid length. [ 254.638550][T14330] loop3: detected capacity change from 0 to 1024 [ 254.657847][T14330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.683061][T14330] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.695339][T14328] loop4: detected capacity change from 0 to 128 [ 254.714029][T14328] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 254.721896][T14328] FAT-fs (loop4): Filesystem has been set read-only [ 254.727469][T14330] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.3420: lblock 1 mapped to illegal pblock 1 (length 15) [ 254.742609][T14328] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 254.746561][T14330] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 254.750545][T14328] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 254.770991][T14330] EXT4-fs (loop3): This should not happen!! Data will be lost [ 254.770991][T14330] [ 254.781662][T13691] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 254.798463][T14330] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 254.896950][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.963885][T14344] tmpfs: Unknown parameter '0x0000000000000006' [ 254.977527][T14345] loop3: detected capacity change from 0 to 512 [ 254.999118][T14344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.017652][T14345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 255.025382][T14344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.037214][T14344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3426'. [ 255.047661][T14345] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.061059][T14345] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3425: Block bitmap for bg 0 marked uninitialized [ 255.097315][T14345] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 255.115993][T14345] EXT4-fs (loop3): 1 orphan inode deleted [ 255.127422][T14345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.152855][T14345] EXT4-fs: Ignoring sb option on remount [ 255.158574][T14345] EXT4-fs: Ignoring removed orlov option [ 255.164339][T14345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.171115][T14345] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 255.179181][T14345] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 255.196865][T14345] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 255.310204][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.421169][T13248] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.544882][T14361] syzkaller0: entered promiscuous mode [ 255.550445][T14361] syzkaller0: entered allmulticast mode [ 255.569971][T14367] loop3: detected capacity change from 0 to 1024 [ 255.597727][T14367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.616085][T14367] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.627648][T14369] loop1: detected capacity change from 0 to 512 [ 255.642187][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 255.642205][ T29] audit: type=1326 audit(1755285760.694:14527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14372 comm="syz.0.3437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f072ddeebe9 code=0x0 [ 255.676943][T14367] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.3435: lblock 1 mapped to illegal pblock 1 (length 15) [ 255.692233][T14369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 255.703110][T14367] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 255.715579][T14367] EXT4-fs (loop3): This should not happen!! Data will be lost [ 255.715579][T14367] [ 255.727040][T14369] EXT4-fs (loop1): 1 truncate cleaned up [ 255.733272][T14369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.798503][T13074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.863518][T14378] loop3: detected capacity change from 0 to 512 [ 255.886718][T14375] loop0: detected capacity change from 0 to 128 [ 255.897930][T14378] EXT4-fs: Ignoring removed orlov option [ 255.911021][T14378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.920348][T14375] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 255.928286][T14375] FAT-fs (loop0): Filesystem has been set read-only [ 255.935069][ T29] audit: type=1326 audit(1755285760.984:14528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 255.958791][ T29] audit: type=1326 audit(1755285760.984:14529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 255.966798][T14378] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 255.982590][ T29] audit: type=1326 audit(1755285760.984:14530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 256.012830][ T29] audit: type=1326 audit(1755285760.984:14531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 256.036548][ T29] audit: type=1326 audit(1755285760.984:14532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 256.060279][ T29] audit: type=1326 audit(1755285760.984:14533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 256.060380][T14375] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 256.083943][ T29] audit: type=1326 audit(1755285760.984:14534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 256.083997][ T29] audit: type=1326 audit(1755285760.984:14535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0f18ebe9 code=0x7ffc0000 [ 256.139098][T14375] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 256.178098][T12941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.187504][ T29] audit: type=1326 audit(1755285761.044:14536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479d98ebe9 code=0x7ffc0000 [ 256.228167][T14394] loop1: detected capacity change from 0 to 1024 [ 256.245087][T14383] loop4: detected capacity change from 0 to 128 [ 256.266582][T14398] tmpfs: Unknown parameter '0x0000000000000006' [ 256.274882][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.283481][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.291837][T14394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.317332][T14398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3447'. [ 256.330962][T14394] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.359516][T14383] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 256.367460][T14383] FAT-fs (loop4): Filesystem has been set read-only [ 256.385492][T14383] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 256.393508][T14383] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 256.424609][T14405] loop3: detected capacity change from 0 to 512 [ 256.439441][T14394] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.3444: lblock 1 mapped to illegal pblock 1 (length 15) [ 256.466471][T14405] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 256.481295][T14394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 256.493728][T14394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 256.493728][T14394] [ 256.503886][T14405] EXT4-fs (loop3): orphan cleanup on readonly fs [ 256.515018][T14405] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3449: Block bitmap for bg 0 marked uninitialized [ 256.545074][T14405] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 256.559332][T14394] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 256.580162][T14405] EXT4-fs (loop3): 1 orphan inode deleted [ 256.599152][T14405] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 256.621946][T14409] syzkaller0: entered promiscuous mode [ 256.627842][T14409] syzkaller0: entered allmulticast mode [ 256.638113][T14405] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 256.685055][T14413] loop3: detected capacity change from 0 to 512 [ 256.691853][T14413] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.698750][T14413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 256.710072][T14413] EXT4-fs (loop3): 1 truncate cleaned up [ 256.876410][T14428] loop1: detected capacity change from 0 to 512 [ 256.883208][T14428] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.890128][T14428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 256.902795][T14428] EXT4-fs (loop1): 1 truncate cleaned up [ 256.980303][T14436] loop4: detected capacity change from 0 to 512 [ 257.048363][T14436] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.066322][T14443] tmpfs: Unknown parameter '0x0000000000000006' [ 257.075085][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.083718][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.092336][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3463'. [ 257.160214][T14447] loop0: detected capacity change from 0 to 128 [ 257.167347][T14436] netlink: 'syz.4.3461': attribute type 4 has an invalid length. [ 257.173199][T14447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 257.182986][T14447] FAT-fs (loop0): Filesystem has been set read-only [ 257.190055][T14447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 257.198059][T14447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 257.597944][T14462] loop4: detected capacity change from 0 to 1024 [ 257.629603][T14462] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.650963][T14468] loop3: detected capacity change from 0 to 512 [ 257.670447][T14468] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 257.674005][T14462] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.3471: lblock 1 mapped to illegal pblock 1 (length 15) [ 257.695000][T14462] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 257.707406][T14462] EXT4-fs (loop4): This should not happen!! Data will be lost [ 257.707406][T14462] [ 257.717366][T14468] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.728427][T14468] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3473: Block bitmap for bg 0 marked uninitialized [ 257.745093][T14468] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 257.757897][T14468] EXT4-fs (loop3): 1 orphan inode deleted [ 257.771495][T14468] EXT4-fs: Ignoring sb option on remount [ 257.777393][T14468] EXT4-fs: Ignoring removed orlov option [ 257.783343][T14468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.790237][T14468] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 257.800413][T14468] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 257.818802][T14473] loop4: detected capacity change from 0 to 1024 [ 257.826575][T14468] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 257.826929][T14473] EXT4-fs: Ignoring removed bh option [ 257.840906][T14473] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 257.866687][T14473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 257.882071][T14476] loop3: detected capacity change from 0 to 512 [ 257.888969][T14476] EXT4-fs: Ignoring removed orlov option [ 257.894759][T14476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.903679][T14473] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3475: lblock 2 mapped to illegal pblock 2 (length 1) [ 257.920802][T14476] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 257.943754][T14473] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3475: lblock 0 mapped to illegal pblock 48 (length 1) [ 257.945227][T14447] bio_check_eod: 76945 callbacks suppressed [ 257.945246][T14447] syz.0.3464: attempt to access beyond end of device [ 257.945246][T14447] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 257.971985][T14473] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3475: Failed to acquire dquot type 0 [ 257.979178][T14447] syz.0.3464: attempt to access beyond end of device [ 257.979178][T14447] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 258.001843][T14447] buffer_io_error: 75712 callbacks suppressed [ 258.001861][T14447] Buffer I/O error on dev loop0, logical block 2067, async page read [ 258.008272][T14478] loop3: detected capacity change from 0 to 512 [ 258.016313][T14447] syz.0.3464: attempt to access beyond end of device [ 258.016313][T14447] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 258.025805][T14478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.035862][T14447] Buffer I/O error on dev loop0, logical block 2068, async page read [ 258.035916][T14447] syz.0.3464: attempt to access beyond end of device [ 258.035916][T14447] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 258.053783][T14447] Buffer I/O error on dev loop0, logical block 2069, async page read [ 258.053816][T14447] syz.0.3464: attempt to access beyond end of device [ 258.053816][T14447] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 258.069111][T14473] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 258.075211][T14447] Buffer I/O error on dev loop0, logical block 2070, async page read [ 258.089984][T14473] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3475: mark_inode_dirty error [ 258.097920][T14447] syz.0.3464: attempt to access beyond end of device [ 258.097920][T14447] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 258.108073][T14478] EXT4-fs (loop3): 1 truncate cleaned up [ 258.117200][T14447] Buffer I/O error on dev loop0, logical block 2071, async page read [ 258.117287][T14447] syz.0.3464: attempt to access beyond end of device [ 258.117287][T14447] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 258.157436][T14447] Buffer I/O error on dev loop0, logical block 2072, async page read [ 258.166806][T14473] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 258.177201][T14473] EXT4-fs (loop4): 1 orphan inode deleted [ 258.208528][ T6620] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.227636][ T6620] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 258.247896][T14473] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3475: lblock 0 mapped to illegal pblock 48 (length 1) [ 258.274179][T14485] loop0: detected capacity change from 0 to 1024 [ 258.297888][T14485] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.324684][T14485] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.3480: lblock 1 mapped to illegal pblock 1 (length 15) [ 258.325017][T14490] loop3: detected capacity change from 0 to 512 [ 258.340230][T14485] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 258.357627][T14485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 258.357627][T14485] [ 258.358241][T14490] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.385015][T14490] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.399043][T14490] EXT4-fs (loop3): 1 truncate cleaned up [ 258.457143][T14496] loop0: detected capacity change from 0 to 512 [ 258.466751][T14496] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 258.479761][T14496] EXT4-fs (loop0): orphan cleanup on readonly fs [ 258.490523][T14500] loop1: detected capacity change from 0 to 512 [ 258.497374][T14500] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.504147][T14500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.509139][T14496] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3483: Block bitmap for bg 0 marked uninitialized [ 258.528678][T14496] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 258.540211][T14502] loop4: detected capacity change from 0 to 512 [ 258.545981][T14500] EXT4-fs (loop1): 1 truncate cleaned up [ 258.548128][T14502] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.553404][T14496] EXT4-fs (loop0): 1 orphan inode deleted [ 258.570018][T14502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.580667][T14496] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 258.592182][T14502] EXT4-fs (loop4): 1 truncate cleaned up [ 258.592889][T14496] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 258.658696][T14508] loop2: detected capacity change from 0 to 128 [ 258.679485][T14508] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 258.687393][T14508] FAT-fs (loop2): Filesystem has been set read-only [ 258.695397][T14508] syz.2.3487: attempt to access beyond end of device [ 258.695397][T14508] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 258.789200][T14508] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 258.797122][T14508] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 258.806601][T14519] syz.2.3487: attempt to access beyond end of device [ 258.806601][T14519] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 258.819882][T14519] Buffer I/O error on dev loop2, logical block 2065, async page read [ 258.834176][T14519] syz.2.3487: attempt to access beyond end of device [ 258.834176][T14519] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 258.847476][T14519] Buffer I/O error on dev loop2, logical block 2066, async page read [ 258.855919][T14519] Buffer I/O error on dev loop2, logical block 2067, async page read [ 258.864025][T14519] Buffer I/O error on dev loop2, logical block 2068, async page read [ 259.194777][T14525] loop0: detected capacity change from 0 to 1024 [ 259.204879][T14525] EXT4-fs: Ignoring removed bh option [ 259.211676][T14525] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.325570][T14525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 259.341750][T14525] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3492: lblock 2 mapped to illegal pblock 2 (length 1) [ 259.367360][T14530] loop1: detected capacity change from 0 to 512 [ 259.376557][T14531] tmpfs: Unknown parameter '0x0000000000000006' [ 259.383168][T14525] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3492: lblock 0 mapped to illegal pblock 48 (length 1) [ 259.401699][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.411414][T14525] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3492: Failed to acquire dquot type 0 [ 259.424783][T14525] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 259.434314][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.434627][T14525] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3492: mark_inode_dirty error [ 259.445974][T14531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3493'. [ 259.470920][T14530] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 259.497793][T14530] netlink: 'syz.1.3494': attribute type 4 has an invalid length. [ 259.507523][T14525] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 259.517983][T14525] EXT4-fs (loop0): 1 orphan inode deleted [ 259.533323][ T6625] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.548021][ T6625] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 259.560069][T14525] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3492: lblock 0 mapped to illegal pblock 48 (length 1) [ 259.594739][T14543] loop1: detected capacity change from 0 to 512 [ 259.601837][T14543] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 259.612281][T14543] EXT4-fs (loop1): orphan cleanup on readonly fs [ 259.618914][T14543] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3499: Block bitmap for bg 0 marked uninitialized [ 259.632213][T14543] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 259.641236][T14543] EXT4-fs (loop1): 1 orphan inode deleted [ 259.650314][T14543] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 259.659865][T14543] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 259.673292][T14546] loop0: detected capacity change from 0 to 512 [ 259.680237][T14546] EXT4-fs: Ignoring removed oldalloc option [ 259.686795][T14546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 259.698263][T14546] EXT4-fs (loop0): 1 truncate cleaned up [ 259.728099][T14549] loop1: detected capacity change from 0 to 512 [ 259.734828][T14549] EXT4-fs: Ignoring removed orlov option [ 259.740623][T14549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.747712][T14549] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 259.771693][T14555] loop0: detected capacity change from 0 to 512 [ 259.778444][T14555] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.778874][T14557] loop1: detected capacity change from 0 to 1024 [ 259.785462][T14555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 259.801977][T14555] EXT4-fs (loop0): 1 truncate cleaned up [ 259.810234][T14557] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.828876][T14557] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.3505: lblock 1 mapped to illegal pblock 1 (length 15) [ 259.843399][T14557] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 259.855825][T14557] EXT4-fs (loop1): This should not happen!! Data will be lost [ 259.855825][T14557] [ 259.866538][T14557] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 259.908018][T14564] loop1: detected capacity change from 0 to 512 [ 259.915313][T14564] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.927768][T14564] EXT4-fs (loop1): 1 truncate cleaned up [ 260.124407][T14575] loop3: detected capacity change from 0 to 1024 [ 260.135227][T14575] EXT4-fs: Ignoring removed bh option [ 260.142404][T14573] loop1: detected capacity change from 0 to 128 [ 260.150708][T14575] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 260.164830][T14575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 260.165007][T14573] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 260.175274][T14575] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3510: lblock 2 mapped to illegal pblock 2 (length 1) [ 260.180889][T14573] FAT-fs (loop1): Filesystem has been set read-only [ 260.201666][T14573] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 260.209534][T14573] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 260.218276][T14575] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3510: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.233002][T14575] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3510: Failed to acquire dquot type 0 [ 260.244844][T14575] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 260.254722][T14575] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3510: mark_inode_dirty error [ 260.266921][T14575] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 260.277367][T14575] EXT4-fs (loop3): 1 orphan inode deleted [ 260.307593][ T6625] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 260.352871][ T6625] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 260.366052][T14575] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3510: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.380332][T14579] loop2: detected capacity change from 0 to 512 [ 260.413368][T14582] loop4: detected capacity change from 0 to 512 [ 260.421559][T14579] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 260.425776][T14582] EXT4-fs: Ignoring removed oldalloc option [ 260.465518][T14582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.477289][T14579] netlink: 'syz.2.3511': attribute type 4 has an invalid length. [ 260.491164][T14586] loop3: detected capacity change from 0 to 512 [ 260.498845][T14582] EXT4-fs (loop4): 1 truncate cleaned up [ 260.637709][T14586] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 260.662434][T14586] EXT4-fs (loop3): orphan cleanup on readonly fs [ 260.676219][T14586] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3513: Block bitmap for bg 0 marked uninitialized [ 260.694148][T14591] loop4: detected capacity change from 0 to 512 [ 260.701843][T14586] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 260.707306][T14591] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 260.727840][T14586] EXT4-fs (loop3): 1 orphan inode deleted [ 260.744397][T14591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 260.754094][T14591] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3514: Block bitmap for bg 0 marked uninitialized [ 260.787683][T14586] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 260.801423][T14586] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 260.814727][T14591] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 260.825204][T14599] tmpfs: Unknown parameter '0x0000000000000006' [ 260.844064][T14599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.874241][T14599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.882219][T14591] EXT4-fs (loop4): 1 orphan inode deleted [ 260.892046][T14599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3518'. [ 260.908821][T14591] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 260.920676][T14591] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 260.963881][T14605] syzkaller0: entered promiscuous mode [ 260.969469][T14605] syzkaller0: entered allmulticast mode [ 261.026247][T14609] loop0: detected capacity change from 0 to 1024 [ 261.032995][T14609] EXT4-fs: Ignoring removed bh option [ 261.038867][T14609] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 261.050108][T14609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 261.059039][T14609] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3523: lblock 2 mapped to illegal pblock 2 (length 1) [ 261.073130][T14609] __quota_error: 133 callbacks suppressed [ 261.073144][T14609] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 261.087041][T14609] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3523: lblock 0 mapped to illegal pblock 48 (length 1) [ 261.102952][T14609] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 261.111868][T14609] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3523: Failed to acquire dquot type 0 [ 261.124872][T14609] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 261.134951][T14609] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3523: mark_inode_dirty error [ 261.147311][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3524'. [ 261.147668][T14609] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 261.168047][T14609] EXT4-fs (loop0): 1 orphan inode deleted [ 261.181978][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 261.198202][ T31] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 261.206705][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 261.234443][T14609] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3523: lblock 0 mapped to illegal pblock 48 (length 1) [ 261.250597][T14609] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 261.268929][T14614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14614 comm=syz.1.3524 [ 261.304872][T14616] loop1: detected capacity change from 0 to 512 [ 261.311591][T14616] EXT4-fs: Ignoring removed orlov option [ 261.317848][T14616] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 261.328157][T14616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 261.336389][T14616] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3526: corrupted in-inode xattr: e_value size too large [ 261.342013][T14619] loop0: detected capacity change from 0 to 512 [ 261.351246][T14616] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3526: couldn't read orphan inode 15 (err -117) [ 261.369258][T14619] EXT4-fs: Ignoring removed oldalloc option [ 261.376077][T14619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.387319][T14619] EXT4-fs (loop0): 1 truncate cleaned up [ 261.400469][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'. [ 261.441976][T14623] loop3: detected capacity change from 0 to 1024 [ 261.477964][T14623] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.530706][T14623] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.3528: lblock 1 mapped to illegal pblock 1 (length 15) [ 261.551661][T14623] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 261.564159][T14623] EXT4-fs (loop3): This should not happen!! Data will be lost [ 261.564159][T14623] [ 261.575342][T14632] loop0: detected capacity change from 0 to 512 [ 261.582387][T14632] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 261.595503][T14632] EXT4-fs (loop0): orphan cleanup on readonly fs [ 261.602105][T14632] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3531: Block bitmap for bg 0 marked uninitialized [ 261.628343][T14634] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.3528: lblock 1 mapped to illegal pblock 1 (length 3) [ 261.648761][T14632] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 261.660196][T14623] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 261.679667][T14636] loop2: detected capacity change from 0 to 512 [ 261.688255][T14636] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.695682][T14632] EXT4-fs (loop0): 1 orphan inode deleted [ 261.704600][T14632] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 261.715360][T14636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 261.715564][T14634] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.3528: lblock 1 mapped to illegal pblock 1 (length 3) [ 261.727687][T14632] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 261.740307][T14634] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.3528: lblock 1 mapped to illegal pblock 1 (length 3) [ 261.763431][T14636] EXT4-fs (loop2): 1 truncate cleaned up [ 261.770267][T14638] C: renamed from team_slave_0 [ 261.775604][T14634] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.3528: lblock 1 mapped to illegal pblock 1 (length 3) [ 261.791982][T14638] netlink: 'syz.1.3526': attribute type 1 has an invalid length. [ 261.799880][T14638] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3526'. [ 261.808947][T14638] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.846522][T14642] loop0: detected capacity change from 0 to 512 [ 261.854801][T14642] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 261.867676][T14645] loop4: detected capacity change from 0 to 512 [ 261.874347][T14645] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.881524][T14645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.891927][T14642] EXT4-fs (loop0): orphan cleanup on readonly fs [ 261.929121][ T29] audit: type=1326 audit(1755285766.954:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 261.952946][ T29] audit: type=1326 audit(1755285766.954:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 261.957373][T14642] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3533: Block bitmap for bg 0 marked uninitialized [ 261.976658][ T29] audit: type=1326 audit(1755285766.954:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 262.013346][ T29] audit: type=1326 audit(1755285766.954:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 262.036964][ T29] audit: type=1326 audit(1755285766.954:14659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 262.060580][ T29] audit: type=1326 audit(1755285766.954:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 262.085847][T14645] EXT4-fs (loop4): 1 truncate cleaned up [ 262.091616][T14642] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 262.104855][T14642] EXT4-fs (loop0): 1 orphan inode deleted [ 262.112780][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3536'. [ 262.130881][T14642] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 262.159676][T14642] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 262.231766][T14664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14664 comm=syz.3.3536 [ 262.303154][T14658] syzkaller0: entered promiscuous mode [ 262.308797][T14658] syzkaller0: entered allmulticast mode [ 262.379826][T14675] loop2: detected capacity change from 0 to 1024 [ 262.417670][T14675] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.442546][T14675] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3544: lblock 1 mapped to illegal pblock 1 (length 15) [ 262.466148][T14675] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 262.478639][T14675] EXT4-fs (loop2): This should not happen!! Data will be lost [ 262.478639][T14675] [ 262.490420][T14675] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 262.507884][T14680] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3544: lblock 1 mapped to illegal pblock 1 (length 3) [ 262.523556][T14680] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3544: lblock 1 mapped to illegal pblock 1 (length 3) [ 262.538210][T14680] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3544: lblock 1 mapped to illegal pblock 1 (length 3) [ 262.553494][T14680] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3544: lblock 1 mapped to illegal pblock 1 (length 3) [ 262.570559][T14680] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3544: lblock 1 mapped to illegal pblock 1 (length 3) [ 262.590056][T14686] loop1: detected capacity change from 0 to 512 [ 262.596668][T14686] EXT4-fs: Ignoring removed orlov option [ 262.602648][T14686] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 262.613011][T14686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 262.621678][T14686] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3548: corrupted in-inode xattr: e_value size too large [ 262.626788][T14689] loop2: detected capacity change from 0 to 512 [ 262.636741][T14686] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3548: couldn't read orphan inode 15 (err -117) [ 262.642905][T14689] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 262.665030][T14689] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.672347][T14689] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3549: Block bitmap for bg 0 marked uninitialized [ 262.687216][T14689] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 262.697895][T14689] EXT4-fs (loop2): 1 orphan inode deleted [ 262.709109][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 262.720402][T14689] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 262.730351][T14689] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 262.763062][T14694] loop4: detected capacity change from 0 to 512 [ 262.776053][T14694] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.782958][T14694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.798852][T14696] loop2: detected capacity change from 0 to 512 [ 262.805588][T14696] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.808264][T14694] EXT4-fs (loop4): 1 truncate cleaned up [ 262.819132][T14696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.844670][T14696] EXT4-fs (loop2): 1 truncate cleaned up [ 263.095255][T14702] netlink: 'syz.1.3548': attribute type 1 has an invalid length. [ 263.103105][T14702] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3548'. [ 263.112212][T14702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.350218][T14705] loop3: detected capacity change from 0 to 512 [ 263.357833][T14705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 263.369897][T14705] EXT4-fs (loop3): 1 truncate cleaned up [ 263.420760][T14708] loop0: detected capacity change from 0 to 1024 [ 263.436731][T14708] EXT4-fs: Ignoring removed bh option [ 263.443829][T14708] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.484269][T14708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 263.509983][T14708] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3554: lblock 2 mapped to illegal pblock 2 (length 1) [ 263.535960][T14708] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3554: lblock 0 mapped to illegal pblock 48 (length 1) [ 263.560237][T14708] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3554: Failed to acquire dquot type 0 [ 263.603656][T14708] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 263.641073][T14708] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3554: mark_inode_dirty error [ 263.693229][T14717] loop1: detected capacity change from 0 to 512 [ 263.699651][T14708] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 263.727288][T14708] EXT4-fs (loop0): 1 orphan inode deleted [ 263.745497][ T6620] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.761052][ T6620] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 263.790688][T14708] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3554: lblock 0 mapped to illegal pblock 48 (length 1) [ 263.805005][T14717] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 263.825574][T14719] syzkaller0: entered promiscuous mode [ 263.831124][T14719] syzkaller0: entered allmulticast mode [ 263.844131][T14722] netlink: 'syz.1.3557': attribute type 4 has an invalid length. [ 263.907338][T14726] loop0: detected capacity change from 0 to 1024 [ 263.957873][T14726] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.982574][T14726] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.3559: lblock 1 mapped to illegal pblock 1 (length 15) [ 264.008471][T14730] loop2: detected capacity change from 0 to 512 [ 264.015073][T14730] EXT4-fs: Ignoring removed oldalloc option [ 264.032439][T14726] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 264.044893][T14726] EXT4-fs (loop0): This should not happen!! Data will be lost [ 264.044893][T14726] [ 264.071140][T14730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 264.090025][T14733] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3559: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.108991][T14730] EXT4-fs (loop2): 1 truncate cleaned up [ 264.154957][T14726] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 264.179028][T14733] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3559: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.194093][T14733] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3559: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.211069][T14733] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3559: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.230972][T14733] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3559: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.290545][T14747] loop3: detected capacity change from 0 to 512 [ 264.298885][T14747] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.305749][T14749] loop0: detected capacity change from 0 to 512 [ 264.306099][T14747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.312779][T14749] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 264.325171][T14747] EXT4-fs (loop3): 1 truncate cleaned up [ 264.340134][T14749] EXT4-fs (loop0): orphan cleanup on readonly fs [ 264.347015][T14749] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3569: Block bitmap for bg 0 marked uninitialized [ 264.360974][T14749] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 264.370369][T14749] EXT4-fs (loop0): 1 orphan inode deleted [ 264.380894][T14749] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 264.382675][T14753] loop2: detected capacity change from 0 to 512 [ 264.397349][T14753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 264.407386][T14749] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 264.427709][T14753] EXT4-fs (loop2): 1 truncate cleaned up [ 264.474122][T14760] loop0: detected capacity change from 0 to 512 [ 264.547042][T14760] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.573819][T14760] netlink: 'syz.0.3572': attribute type 4 has an invalid length. [ 264.597957][T14765] loop2: detected capacity change from 0 to 512 [ 264.612646][T14765] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 264.626925][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.634870][T14765] EXT4-fs (loop2): orphan cleanup on readonly fs [ 264.636161][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.644464][T14765] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3573: Block bitmap for bg 0 marked uninitialized [ 264.651319][T14767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3574'. [ 264.676341][T14765] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 264.686538][T14765] EXT4-fs (loop2): 1 orphan inode deleted [ 264.700008][T14765] EXT4-fs: Ignoring sb option on remount [ 264.705865][T14765] EXT4-fs: Ignoring removed orlov option [ 264.714226][T14765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.721015][T14765] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 264.730300][T14765] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 264.739978][T14765] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 264.740020][T14774] loop0: detected capacity change from 0 to 512 [ 264.755126][T14774] EXT4-fs: Ignoring removed orlov option [ 264.760849][T14774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.768060][T14774] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 264.800369][T14778] loop0: detected capacity change from 0 to 1024 [ 264.817804][T14778] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.838068][T14778] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.3579: lblock 1 mapped to illegal pblock 1 (length 15) [ 264.839514][T14781] loop2: detected capacity change from 0 to 512 [ 264.852693][T14778] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 264.871174][T14778] EXT4-fs (loop0): This should not happen!! Data will be lost [ 264.871174][T14778] [ 264.884414][T14778] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 264.886257][T14781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 264.927762][T14778] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3579: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.949537][T14778] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3579: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.968685][T14778] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3579: lblock 1 mapped to illegal pblock 1 (length 3) [ 264.987500][T14787] loop1: detected capacity change from 0 to 512 [ 264.995769][T14778] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3579: lblock 1 mapped to illegal pblock 1 (length 3) [ 265.010230][T14787] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 265.036563][T14788] loop4: detected capacity change from 0 to 128 [ 265.043690][T14787] EXT4-fs (loop1): orphan cleanup on readonly fs [ 265.050375][T14778] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.3579: lblock 1 mapped to illegal pblock 1 (length 3) [ 265.064646][T14781] EXT4-fs (loop2): 1 truncate cleaned up [ 265.071112][T14787] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3581: Block bitmap for bg 0 marked uninitialized [ 265.086515][T14788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.094357][T14788] FAT-fs (loop4): Filesystem has been set read-only [ 265.103567][T14787] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 265.112782][T14788] bio_check_eod: 82866 callbacks suppressed [ 265.112795][T14788] syz.4.3580: attempt to access beyond end of device [ 265.112795][T14788] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.142082][T14788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.149960][T14788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.155851][T14787] EXT4-fs (loop1): 1 orphan inode deleted [ 265.170227][T14788] syz.4.3580: attempt to access beyond end of device [ 265.170227][T14788] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.184013][T14787] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 265.184572][T14788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.201359][T14788] syz.4.3580: attempt to access beyond end of device [ 265.201359][T14788] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.202473][T14787] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 265.215348][T14788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.223523][T14791] syz.4.3580: attempt to access beyond end of device [ 265.223523][T14791] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 265.231270][T14788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.252504][T14791] buffer_io_error: 82524 callbacks suppressed [ 265.252521][T14791] Buffer I/O error on dev loop4, logical block 2065, async page read [ 265.287767][T14793] loop3: detected capacity change from 0 to 512 [ 265.294362][T14791] syz.4.3580: attempt to access beyond end of device [ 265.294362][T14791] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 265.307728][T14791] Buffer I/O error on dev loop4, logical block 2066, async page read [ 265.317504][T14791] syz.4.3580: attempt to access beyond end of device [ 265.317504][T14791] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 265.318207][T14793] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 265.330836][T14791] Buffer I/O error on dev loop4, logical block 2067, async page read [ 265.349488][T14791] syz.4.3580: attempt to access beyond end of device [ 265.349488][T14791] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 265.357896][T14793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 265.362800][T14791] Buffer I/O error on dev loop4, logical block 2068, async page read [ 265.362964][T14791] syz.4.3580: attempt to access beyond end of device [ 265.362964][T14791] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 265.385492][T14793] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3582: Block bitmap for bg 0 marked uninitialized [ 265.390895][T14791] Buffer I/O error on dev loop4, logical block 2069, async page read [ 265.407003][T14793] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 265.425415][T14791] syz.4.3580: attempt to access beyond end of device [ 265.425415][T14791] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 265.438705][T14791] Buffer I/O error on dev loop4, logical block 2070, async page read [ 265.447515][T14791] syz.4.3580: attempt to access beyond end of device [ 265.447515][T14791] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 265.448080][T14793] EXT4-fs (loop3): 1 orphan inode deleted [ 265.460782][T14791] Buffer I/O error on dev loop4, logical block 2071, async page read [ 265.460814][T14791] Buffer I/O error on dev loop4, logical block 2072, async page read [ 265.485200][T14791] Buffer I/O error on dev loop4, logical block 2065, async page read [ 265.505866][T14791] Buffer I/O error on dev loop4, logical block 2066, async page read [ 265.547044][T14793] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 265.565792][T14793] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 265.669863][T14811] loop1: detected capacity change from 0 to 512 [ 265.683448][T14808] syzkaller0: entered promiscuous mode [ 265.688997][T14808] syzkaller0: entered allmulticast mode [ 265.698200][T14811] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 265.709605][T14811] EXT4-fs (loop1): orphan cleanup on readonly fs [ 265.715943][T14813] loop3: detected capacity change from 0 to 512 [ 265.727616][T14811] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3588: Block bitmap for bg 0 marked uninitialized [ 265.745556][T14813] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.752358][T14813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.762422][T14811] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 265.771763][T14811] EXT4-fs (loop1): 1 orphan inode deleted [ 265.787123][T14813] EXT4-fs (loop3): 1 truncate cleaned up [ 265.812732][T14811] EXT4-fs: Ignoring sb option on remount [ 265.818486][T14811] EXT4-fs: Ignoring removed orlov option [ 265.824283][T14811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.834404][T14811] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 265.854052][T14811] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 265.871273][T14811] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 265.951429][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.959925][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.968676][T14822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3593'. [ 266.098806][T14830] loop3: detected capacity change from 0 to 512 [ 266.106023][T14830] EXT4-fs: Ignoring removed oldalloc option [ 266.112260][T14830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 266.123264][T14830] EXT4-fs (loop3): 1 truncate cleaned up [ 266.307318][T14841] loop3: detected capacity change from 0 to 8192 [ 266.355424][T14841] loop3: p1 p2 p3 p4[DM] [ 266.360046][T14841] loop3: p1 size 835331 extends beyond EOD, truncated [ 266.369369][T14841] loop3: p2 size 16777223 extends beyond EOD, truncated [ 266.377043][T14841] loop3: p3 start 1052673 is beyond EOD, truncated [ 266.383652][T14841] loop3: p4 size 262144 extends beyond EOD, truncated [ 266.395252][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 266.395269][ T29] audit: type=1326 audit(1755285771.444:14663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.469742][ T29] audit: type=1326 audit(1755285771.454:14664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.493414][ T29] audit: type=1326 audit(1755285771.454:14665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.517027][ T29] audit: type=1326 audit(1755285771.454:14666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.540764][ T29] audit: type=1326 audit(1755285771.454:14667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.564394][ T29] audit: type=1326 audit(1755285771.454:14668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.588010][ T29] audit: type=1326 audit(1755285771.464:14669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.611619][ T29] audit: type=1326 audit(1755285771.464:14670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.635273][ T29] audit: type=1326 audit(1755285771.464:14671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.658873][ T29] audit: type=1326 audit(1755285771.474:14672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2173ebe9 code=0x7ffc0000 [ 266.704248][T14844] loop0: detected capacity change from 0 to 512 [ 266.713358][T14844] EXT4-fs: Ignoring removed orlov option [ 266.724457][T14841] netlink: 'syz.3.3601': attribute type 27 has an invalid length. [ 266.730961][T14844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.744919][T14844] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 266.785057][T14849] loop0: detected capacity change from 0 to 512 [ 266.801929][T14849] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 266.821137][T14850] loop4: detected capacity change from 0 to 512 [ 266.831503][T14849] EXT4-fs (loop0): orphan cleanup on readonly fs [ 266.842985][T14849] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3604: Block bitmap for bg 0 marked uninitialized [ 266.859632][T14850] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.885589][T14849] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 266.920088][T14849] EXT4-fs (loop0): 1 orphan inode deleted [ 266.927416][T14850] EXT4-fs (loop4): 1 truncate cleaned up [ 266.937788][T14856] loop3: detected capacity change from 0 to 512 [ 266.938174][T14854] syzkaller0: entered promiscuous mode [ 266.949744][T14854] syzkaller0: entered allmulticast mode [ 266.961514][T14856] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 266.974961][T14849] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 267.005452][T14856] EXT4-fs (loop3): orphan cleanup on readonly fs [ 267.017417][T14856] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3606: Block bitmap for bg 0 marked uninitialized [ 267.034810][T14861] loop1: detected capacity change from 0 to 512 [ 267.043395][T14849] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 267.055078][T14861] EXT4-fs: Ignoring removed oldalloc option [ 267.071147][T14861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.082357][T14856] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 267.099799][T14856] EXT4-fs (loop3): 1 orphan inode deleted [ 267.107813][T14861] EXT4-fs (loop1): 1 truncate cleaned up [ 267.113575][T14856] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 267.167685][T14866] loop0: detected capacity change from 0 to 512 [ 267.170073][T14856] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 267.223381][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3612'. [ 267.245819][T14866] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 267.288050][T14876] loop1: detected capacity change from 0 to 512 [ 267.362994][T14876] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 267.390151][T14877] netlink: 'syz.0.3610': attribute type 4 has an invalid length. [ 267.409553][T14871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14871 comm=syz.2.3612 [ 267.450278][T14876] EXT4-fs (loop1): orphan cleanup on readonly fs [ 267.459114][T14876] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3613: Block bitmap for bg 0 marked uninitialized [ 267.479397][T14876] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 267.488627][T14876] EXT4-fs (loop1): 1 orphan inode deleted [ 267.505004][T14876] EXT4-fs: Ignoring sb option on remount [ 267.510821][T14876] EXT4-fs: Ignoring removed orlov option [ 267.518287][T14876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.524928][T14876] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 267.533225][T14876] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 267.547947][T14876] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 267.610826][T14888] tmpfs: Unknown parameter '0x0000000000000006' [ 267.629347][T14886] loop1: detected capacity change from 0 to 8192 [ 267.637488][T14845] syz.4.3603 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 267.648525][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.4.3603 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 267.648563][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.648580][T14845] Call Trace: [ 267.648595][T14845] [ 267.648604][T14845] __dump_stack+0x1d/0x30 [ 267.648630][T14845] dump_stack_lvl+0xe8/0x140 [ 267.648684][T14845] dump_stack+0x15/0x1b [ 267.648706][T14845] dump_header+0x81/0x220 [ 267.648749][T14845] oom_kill_process+0x342/0x400 [ 267.648791][T14845] out_of_memory+0x979/0xb80 [ 267.648834][T14845] try_charge_memcg+0x5e6/0x9e0 [ 267.648942][T14845] charge_memcg+0x51/0xc0 [ 267.648967][T14845] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 267.648997][T14845] __read_swap_cache_async+0x1df/0x350 [ 267.649044][T14845] swap_cluster_readahead+0x277/0x3e0 [ 267.649175][T14845] swapin_readahead+0xde/0x6f0 [ 267.649220][T14845] ? __filemap_get_folio+0x4f7/0x6b0 [ 267.649331][T14845] ? swap_cache_get_folio+0x77/0x200 [ 267.649407][T14845] do_swap_page+0x301/0x2430 [ 267.649441][T14845] ? css_rstat_updated+0xb7/0x240 [ 267.649480][T14845] ? __pfx_default_wake_function+0x10/0x10 [ 267.649505][T14845] handle_mm_fault+0x9a5/0x2c20 [ 267.649539][T14845] do_user_addr_fault+0x636/0x1090 [ 267.649644][T14845] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 267.649740][T14845] exc_page_fault+0x62/0xa0 [ 267.649829][T14845] asm_exc_page_fault+0x26/0x30 [ 267.649855][T14845] RIP: 0033:0x7f479d9b6980 [ 267.649876][T14845] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 267.649899][T14845] RSP: 002b:00007ffd169cd248 EFLAGS: 00010206 [ 267.649967][T14845] RAX: 00000000fffffffa RBX: 00007f479dbb5fa0 RCX: 0000000000000000 [ 267.650022][T14845] RDX: 00007ffd169cd290 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.650038][T14845] RBP: 00007f479dbb7da0 R08: 000000001f83fca2 R09: 7fffffffffffffff [ 267.650054][T14845] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000041532 [ 267.650070][T14845] R13: 00007f479dbb6090 R14: ffffffffffffffff R15: 00007ffd169cd3d0 [ 267.650095][T14845] [ 267.650103][T14845] memory: usage 307200kB, limit 307200kB, failcnt 873 [ 267.662007][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.662630][T14845] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 267.673015][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.676049][T14845] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 267.681740][T14888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3618'. [ 267.683369][T14845] Memory cgroup stats for /syz4: [ 267.912646][T14845] cache 4096 [ 267.920854][T14845] rss 0 [ 267.923675][T14845] shmem 0 [ 267.926684][T14845] mapped_file 0 [ 267.930225][T14845] dirty 0 [ 267.933183][T14845] writeback 4096 [ 267.936783][T14845] workingset_refault_anon 205 [ 267.941507][T14845] workingset_refault_file 1575 [ 267.946302][T14845] swap 475136 [ 267.949595][T14845] swapcached 8192 [ 267.953255][T14845] pgpgin 137539 [ 267.956763][T14845] pgpgout 137530 [ 267.960321][T14845] pgfault 172210 [ 267.963875][T14845] pgmajfault 126 [ 267.967530][T14845] inactive_anon 8192 [ 267.971508][T14845] active_anon 0 [ 267.975048][T14845] inactive_file 28672 [ 267.979049][T14845] active_file 0 [ 267.982567][T14845] unevictable 0 [ 267.986064][T14845] hierarchical_memory_limit 314572800 [ 267.991486][T14845] hierarchical_memsw_limit 9223372036854771712 [ 267.997674][T14845] total_cache 4096 [ 268.001412][T14845] total_rss 0 [ 268.004786][T14845] total_shmem 0 [ 268.008272][T14845] total_mapped_file 0 [ 268.012288][T14845] total_dirty 0 [ 268.015778][T14845] total_writeback 4096 [ 268.019937][T14845] total_workingset_refault_anon 205 [ 268.025163][T14845] total_workingset_refault_file 1575 [ 268.030475][T14845] total_swap 475136 [ 268.034347][T14845] total_swapcached 8192 [ 268.038543][T14845] total_pgpgin 137539 [ 268.042581][T14845] total_pgpgout 137530 [ 268.046677][T14845] total_pgfault 172210 [ 268.050753][T14845] total_pgmajfault 126 [ 268.054826][T14845] total_inactive_anon 8192 [ 268.057038][T14886] loop1: p1 p2 p3 p4[DM] [ 268.059272][T14845] total_active_anon 0 [ 268.067588][T14845] total_inactive_file 28672 [ 268.072100][T14845] total_active_file 0 [ 268.076107][T14845] total_unevictable 0 [ 268.076870][T14886] loop1: p1 size 835331 extends beyond EOD, [ 268.080088][T14845] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0 [ 268.086125][T14886] truncated [ 268.086175][T14845] ,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3603,pid=14845,uid=0 [ 268.099169][T14886] loop1: p2 size 16777223 extends beyond EOD, truncated [ 268.106237][T14845] Memory cgroup out of memory: Killed process 14845 (syz.4.3603) total-vm:93896kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 268.131036][T14886] loop1: p3 start 1052673 is beyond EOD, truncated [ 268.137683][T14886] loop1: p4 size 262144 extends beyond EOD, truncated [ 268.345205][T14896] loop3: detected capacity change from 0 to 512 [ 268.351890][T14896] EXT4-fs: Ignoring removed oldalloc option [ 268.358171][T14896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.371030][T14896] EXT4-fs (loop3): 1 truncate cleaned up [ 268.391140][T14886] netlink: 'syz.1.3617': attribute type 27 has an invalid length. [ 268.438163][T14904] loop2: detected capacity change from 0 to 512 [ 268.456139][T14904] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.463100][T14904] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.480771][T14904] EXT4-fs (loop2): 1 truncate cleaned up [ 268.489216][T14908] loop0: detected capacity change from 0 to 1024 [ 268.496003][T14908] EXT4-fs: Ignoring removed bh option [ 268.502331][T14908] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.519932][T14908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 268.548451][T14908] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3627: lblock 2 mapped to illegal pblock 2 (length 1) [ 268.563175][T14908] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3627: lblock 0 mapped to illegal pblock 48 (length 1) [ 268.578380][T14908] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3627: Failed to acquire dquot type 0 [ 268.654813][T14917] syzkaller0: entered promiscuous mode [ 268.660406][T14917] syzkaller0: entered allmulticast mode [ 268.666986][ T6622] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.676040][T14908] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 268.683459][ T6622] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.686318][T14908] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3627: mark_inode_dirty error [ 268.707466][ T6622] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.718869][ T6622] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.728090][T14908] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 268.739331][T14908] EXT4-fs (loop0): 1 orphan inode deleted [ 268.756199][ T6625] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.771240][ T6625] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 268.787246][T14927] bridge_slave_0: left allmulticast mode [ 268.792920][T14927] bridge_slave_0: left promiscuous mode [ 268.798686][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.818096][T14927] bridge_slave_1: left allmulticast mode [ 268.823788][T14927] bridge_slave_1: left promiscuous mode [ 268.829483][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.837565][T14908] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3627: lblock 0 mapped to illegal pblock 48 (length 1) [ 268.865918][T14927] bond0: (slave bond_slave_0): Releasing backup interface [ 268.874171][T14927] bond0: (slave bond_slave_1): Releasing backup interface [ 268.883641][T14927] team0: Port device C removed [ 268.891246][T14927] team0: Port device team_slave_1 removed [ 268.898850][T14927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.919785][T14927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.029811][T14940] loop4: detected capacity change from 0 to 512 [ 269.115776][T14940] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.147151][T14916] ================================================================== [ 269.155292][T14916] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 269.163582][T14916] [ 269.165908][T14916] write to 0xffff888119560b3c of 4 bytes by task 14904 on cpu 1: [ 269.173628][T14916] xas_set_mark+0x12b/0x140 [ 269.178162][T14916] __folio_start_writeback+0x1dd/0x440 [ 269.183656][T14916] ext4_bio_write_folio+0x5ad/0x9f0 [ 269.188878][T14916] mpage_process_page_bufs+0x4a1/0x620 [ 269.194346][T14916] mpage_prepare_extent_to_map+0x786/0xc00 [ 269.200182][T14916] ext4_do_writepages+0xa05/0x2750 [ 269.205329][T14916] ext4_writepages+0x176/0x300 [ 269.210125][T14916] do_writepages+0x1c6/0x310 [ 269.214750][T14916] file_write_and_wait_range+0x156/0x2c0 [ 269.220452][T14916] generic_buffers_fsync_noflush+0x45/0x120 [ 269.226376][T14916] ext4_sync_file+0x1ab/0x690 [ 269.231083][T14916] vfs_fsync_range+0x10a/0x130 [ 269.235871][T14916] ext4_buffered_write_iter+0x34f/0x3c0 [ 269.241459][T14916] ext4_file_write_iter+0xdbf/0xf00 [ 269.246683][T14916] iter_file_splice_write+0x669/0x9e0 [ 269.252076][T14916] direct_splice_actor+0x156/0x2a0 [ 269.257202][T14916] splice_direct_to_actor+0x312/0x680 [ 269.262592][T14916] do_splice_direct+0xda/0x150 [ 269.267375][T14916] do_sendfile+0x380/0x650 [ 269.271835][T14916] __x64_sys_sendfile64+0x105/0x150 [ 269.277073][T14916] x64_sys_call+0x2bb0/0x2ff0 [ 269.281773][T14916] do_syscall_64+0xd2/0x200 [ 269.286314][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.292223][T14916] [ 269.294560][T14916] read to 0xffff888119560b3c of 4 bytes by task 14916 on cpu 0: [ 269.302199][T14916] filemap_write_and_wait_range+0xfc/0x340 [ 269.308038][T14916] filemap_invalidate_pages+0xa4/0x1a0 [ 269.313514][T14916] kiocb_invalidate_pages+0x6e/0x80 [ 269.318730][T14916] __iomap_dio_rw+0x5d4/0x1250 [ 269.323516][T14916] iomap_dio_rw+0x40/0x90 [ 269.327856][T14916] ext4_file_write_iter+0xad9/0xf00 [ 269.333094][T14916] iter_file_splice_write+0x669/0x9e0 [ 269.338584][T14916] direct_splice_actor+0x156/0x2a0 [ 269.343724][T14916] splice_direct_to_actor+0x312/0x680 [ 269.349116][T14916] do_splice_direct+0xda/0x150 [ 269.353915][T14916] do_sendfile+0x380/0x650 [ 269.358373][T14916] __x64_sys_sendfile64+0x105/0x150 [ 269.363605][T14916] x64_sys_call+0x2bb0/0x2ff0 [ 269.368303][T14916] do_syscall_64+0xd2/0x200 [ 269.372855][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.378778][T14916] [ 269.381108][T14916] value changed: 0x0a000021 -> 0x04000021 [ 269.386837][T14916] [ 269.389186][T14916] Reported by Kernel Concurrency Sanitizer on: [ 269.395351][T14916] CPU: 0 UID: 0 PID: 14916 Comm: syz.2.3624 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 269.407888][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.417958][T14916] ==================================================================