last executing test programs: 14.005858178s ago: executing program 4 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0xa, 0xf94}, {0x9, 0x9}, {0x5, 0x7}, {0x9}]}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xe149, 0x9}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x3}]}}, &(0x7f00000002c0)=""/22, 0x92, 0x16, 0x0, 0xfffffffb}, 0x28) mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0xe0930000) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 6.68897674s ago: executing program 1 (id=1182): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 6.463332754s ago: executing program 1 (id=1184): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000200)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x145142, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0xf}, {0x8, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 5.581987352s ago: executing program 3 (id=1189): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) read(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.367713196s ago: executing program 1 (id=1190): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="582687beace4af22be6556595501d2fcace2eec56bc4cda4027309b8743f0f4dbf237c09954324dd8bd8ef7f7d039bb579d8cde8b70d467902569a6b01babe627f684430b43d", 0x46}, {&(0x7f0000000580)="a3d41ef14ccbbb9c6e88fd56376b25cebde77a63b749cca2d5d52d0ade1ab80620920de3f6a81b83f986893a0c538a872f5d86b4c89c9386797f119dceb23d39911d59c8e9873400e731230a1867d5eddb644b2dd832b76a03fdab3637e824e7aba72413b4196c35ca0f72d2304e8e5a10de4fa5d7aeec720b23995a1cc33487659c0e08dc324494c76124198606bb53c89688b1eca3e760cac260921f03f45c6d949dd9f5ca9a", 0xa7}, {&(0x7f0000000640)="3a313910018fcec1cbe77674cd04b0a6f4d7ecd583ef22135608f35db3a5c7d71f164f15fd4d29b32dbe31064b610efb068a851bfdc0ecc9183d1160915108e29318c68d939fc041f78d9356e46722f0c507ec4a869ad16bd0f93601309207b92d0d0b2ff6f22678cec3c7769abaa016ccf7a5a680a9e14a0fdca7672cf7ab86fcd4e8110dcf740318bea859c927f21692e1db17efdbf661765bab37f1051a0a445335700f97e6e8944620a24f046b95ccaf97fa633d0555566752", 0xbb}, {&(0x7f0000000700)="14584d7dacd6817fa955a076530f7a7b374ccd92731cddb8542484959a1b8dbd21b9f6ddaed22f35b4c6b415074b147b4f1df4408dd5af2031ab4214668e8f39483a80f76abfe405de3cf459354b24e417e715b3f610859b830ab88fce2efb24b4636cd6f7f3f10646d1104244e02bdd3f6f2a788749f4341b4a0197bf46c2ddd46a63346dd1dcbf1cfeda922081ce50597f034791ac2116c2", 0x99}], 0x4, &(0x7f0000000340)=[{0x18, 0x117, 0x9, "f70a6a1102b84b"}], 0x18}}, {{&(0x7f0000000ac0)=@ll={0x11, 0xd, 0x0, 0x1, 0x25, 0x6, @multicast}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b40)="76626330190eb65a4a4bbe81b7bd17b26c05d9e011dc3ebe8d68ec031bbcc921247fb80eb11e952b6f42632b9865dda111b739971f6e927402c187d9e6fea30c15dad94c31", 0x45}, {&(0x7f0000000bc0)="3c3257c590eb", 0x6}, {&(0x7f0000000c00)="0d8f9e9d3b4bfbad73270ca763c38b847cd91a461ef99336f471b7e08ea78fac024fa872a181eff389b94501846a9579d3b0903ebba006474ebe89992c7b57a255d9ec748975f33f6389b07f439cbdcaa3fb", 0x52}, {&(0x7f0000000c80)="a78d9f34fc8337622d4a53bad7cf5dba074f0b93b03c58923bf0d78e7293f325fa443e1f25d870f1f61a1dc11af516fe23212e39dcb527ba7b160f773efed5e1253178aff008acc20a95bdcbd7d0af7e462f3207cde2cd8c665d27b68114713ec6f592bae2bae9aeefeab1465b9a3149a0be137858cab0aeb03e2b3ac8a057ac97dfd4596091aa9b66ab6c335c5f75dd1540b26b164c3ca53451a42975e1f0e896848a94a363f1", 0xa7}, {&(0x7f0000000d40)="6e8b3585842334bc1081858c359f83f2a9e654af40ed40b6907922bf070ba0c8e0dbe42b0d9cb70eeb83711d8d610e51e54d79a2b7ed1db93cc01c2d61de3dbebafe684babcb79c2c03e2b6c5bc9612f1e566be1388804c41033a316862e63ce690cb7627ccbe1f0c81f2c67421c670c8747130d1b819f1e362046a74ddd2dbffb8f1e41c1ef49afa8abf51dcb62f73deb2d045fd641dc6391", 0x99}], 0x5, &(0x7f0000001040)=[{0x10, 0x0, 0x7f95}, {0x90, 0x1, 0x22a76437, "ce9fae354f5e8feea228e84436d90a06d5f1447e5550c2e0b85afcb3fea7188ca0bb84798b15f89e09fabef80a5e647a28404556ea26db538f18452c8249549c2d8af6ceaa0f13d98bf4452545cf40c48a8b5f5834cbb80a1b50fcd1bc4f933b7d7f07cf023d494d52f0f783c6658c7fabcd1f7c7d3d7cd02dc44799ea96"}, {0x80, 0xff, 0x8, "031f081ee498114a61207ac39a032c05eb5298934b997a4cd2b6f41803bc57678ab33dadf5081d8384b23838404b7949b9e84a4227fe80765e17e439d70df5eaac140fd6f086af9c7192a8f065482bb773a792ac205cfc62f690fe66348e4a46ba9992c41a78e84b351cc7"}, {0x110, 0x104, 0x9, "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"}, {0x40, 0x107, 0x5, "8f60096a42c5f2bf7b1586dcee7d5bffa2382914591df578833d517804fa7a06bf851e8ada09d49b991a47b4f4bf0687"}], 0x270}}], 0x2, 0x0) readv(r0, &(0x7f00000016c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) syz_open_pts(r0, 0x42) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000013c0)={0x2, &(0x7f0000000080)=[{0x5, 0x8}, {0x8, 0x8001}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, 0x0, 0x52) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r8, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 4.717679718s ago: executing program 0 (id=1197): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) read(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.717035279s ago: executing program 3 (id=1198): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b76", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 4.684895739s ago: executing program 3 (id=1199): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000200)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x145142, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0xf}, {0x8, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 4.545123392s ago: executing program 4 (id=1200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 4.408100905s ago: executing program 4 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x7, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0xa, 0xf94}, {0x9, 0x9}, {0xb, 0x2}, {0x5, 0x7}, {0x9}]}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xe149, 0x9}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x3}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000002c0)=""/22, 0x9f, 0x16, 0x0, 0xfffffffb}, 0x28) mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0xe0930000) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x6, 0x5004) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) ioctl$TIOCOUTQ(r8, 0x5411, 0x0) unshare(0x62040200) 4.194749919s ago: executing program 1 (id=1202): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000000090000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xffffffffffffffcd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.046904222s ago: executing program 1 (id=1203): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x5, 0xfff9}}}, 0x24}}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0xf00) socket(0x10, 0x3, 0x0) 3.831387626s ago: executing program 0 (id=1204): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000000090000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xffffffffffffffcd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.739914027s ago: executing program 0 (id=1206): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 3.650307289s ago: executing program 3 (id=1207): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000200)=0x7, 0x4) open(0x0, 0x145142, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0xf}, {0x8, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.558864091s ago: executing program 0 (id=1208): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) unshare(0x22020400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000000)={0x4, {{0xa, 0x4e23, 0x5, @mcast1, 0x5}}}, 0x88) 3.409322784s ago: executing program 4 (id=1209): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91108f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") readv(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r4 = syz_open_pts(r1, 0x42) r5 = dup3(r4, r1, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x8, 0x5}, {0x5, 0x8}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x52) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 3.336345235s ago: executing program 0 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=""/22, 0x0, 0x16, 0x0, 0xfffffffb}, 0x28) mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0xe0930000) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 784.699105ms ago: executing program 2 (id=1211): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x145000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x5b, 0x3}, 0x8) 748.431296ms ago: executing program 1 (id=1212): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91108f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") readv(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r4 = syz_open_pts(r1, 0x42) r5 = dup3(r4, r1, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x8, 0x5}, {0x5, 0x8}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x52) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 726.428126ms ago: executing program 3 (id=1213): socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001009a"], 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x64000600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 651.472578ms ago: executing program 2 (id=1214): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 547.49759ms ago: executing program 0 (id=1215): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) read(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 355.831983ms ago: executing program 2 (id=1216): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000000090000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xffffffffffffffcd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 235.479686ms ago: executing program 2 (id=1217): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) 164.400027ms ago: executing program 2 (id=1218): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 97.643339ms ago: executing program 3 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x3, 0x0) 77.010509ms ago: executing program 4 (id=1220): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) unshare(0x22020400) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000000)={0x4, {{0xa, 0x4e23, 0x5, @mcast1, 0x5}}}, 0x88) 60.360289ms ago: executing program 2 (id=1221): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0xd695bb75570cde87, 0x6, 0x2, 0x3, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast2, @private=0xa010100}}}}) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f00000004c0)="34a6411589054ceecb065a01c9eb78ffc3720f30e96310c2034fcb62871e4ef6e8b0e29e7147eeb3875f50349e231dbfa247412cd843d6f0322ebae2a2e865b5fd4f5cc170358d8e925c1ad971", 0x4d) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x9, &(0x7f0000000440)=[{0x0, 0x3, 0x5, 0x2}, {0x4, 0x7, 0x7, 0x2}, {0x8, 0xf4, 0x5, 0x10}, {0x8, 0x0, 0xf, 0x3}, {0x70b, 0x8, 0x17, 0x7}, {0x1, 0x14, 0x7f, 0x9}, {0x9, 0x2, 0xc3, 0x6e}, {0x7f, 0x80, 0x0, 0x4}, {0xfff8, 0xc, 0x4, 0x8}]}, 0x10) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x4, 0x1, 0x9, 0x2, 0x0, 0xfffffffffffffffa, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0x10}, 0x108914, 0x6, 0x9, 0x2, 0xfffffffffffffffc, 0xc6b, 0x4, 0x0, 0x30000, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000040)=0x81, 0x7, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r6 = socket$caif_stream(0x25, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) writev(r6, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a"], 0x38}}, 0x0) 0s ago: executing program 4 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): `syz.3.818'. [ 171.630422][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.673742][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.707223][ T6111] ref_ctr_offset mismatch. inode: 0x3a6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 171.904688][ T6125] loop2: detected capacity change from 0 to 1024 [ 171.953514][ T29] audit: type=1326 audit(1758846437.915:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 171.976895][ T6125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.980092][ T6125] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.985645][ T29] audit: type=1326 audit(1758846437.915:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 172.107298][ T6125] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.827: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.147418][ T29] audit: type=1326 audit(1758846437.985:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 172.170918][ T29] audit: type=1326 audit(1758846437.985:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 172.201765][ T6125] EXT4-fs (loop2): 1 orphan inode deleted [ 172.218672][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.528188][ T6147] loop3: detected capacity change from 0 to 1024 [ 172.552070][ T6147] EXT4-fs: Ignoring removed bh option [ 172.594235][ T6147] EXT4-fs: inline encryption not supported [ 172.699037][ T6151] ref_ctr_offset mismatch. inode: 0x3e7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 173.219129][ T6147] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.393508][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.469438][ T6155] loop0: detected capacity change from 0 to 512 [ 174.350951][ T6147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 174.537380][ T6147] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.834: lblock 2 mapped to illegal pblock 2 (length 1) [ 174.545715][ T6155] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.838: EA inode hash validation failed [ 174.621064][ T6164] loop1: detected capacity change from 0 to 512 [ 174.662551][ T6155] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.838: corrupted inode contents [ 174.725144][ T6147] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.834: lblock 0 mapped to illegal pblock 48 (length 1) [ 174.771780][ T6167] netlink: 'syz.2.840': attribute type 10 has an invalid length. [ 174.821440][ T6155] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.838: mark_inode_dirty error [ 174.855540][ T6147] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.834: Failed to acquire dquot type 0 [ 174.904510][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.840'. [ 174.957064][ T6147] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 174.982322][ T6155] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.838: corrupted inode contents [ 175.003064][ T6147] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.834: mark_inode_dirty error [ 175.036233][ T6155] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.838: mark_inode_dirty error [ 175.061503][ T6147] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 175.100157][ T6147] EXT4-fs (loop3): 1 orphan inode deleted [ 175.110842][ T6155] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.838: mark inode dirty (error -117) [ 175.125817][ T170] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.162577][ T6147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.243095][ T6155] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 175.261717][ T170] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 175.330250][ T6155] EXT4-fs (loop0): 1 orphan inode deleted [ 175.350219][ T6147] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.411044][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.573901][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.586717][ T6164] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.786278][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.116098][ T6186] ref_ctr_offset mismatch. inode: 0x34b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 176.168380][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.429617][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 176.429633][ T29] audit: type=1400 audit(1758846442.385:3653): avc: denied { execute } for pid=6187 comm="syz.3.850" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.735125][ T6198] loop0: detected capacity change from 0 to 512 [ 176.755684][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.770369][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.783086][ T6198] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.910362][ T29] audit: type=1326 audit(1758846442.635:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 176.980846][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 177.074245][ T29] audit: type=1326 audit(1758846442.905:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.097731][ T29] audit: type=1326 audit(1758846442.905:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.121281][ T29] audit: type=1326 audit(1758846442.905:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.144726][ T29] audit: type=1326 audit(1758846442.905:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.168305][ T29] audit: type=1326 audit(1758846442.905:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.191675][ T29] audit: type=1326 audit(1758846442.905:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.215347][ T29] audit: type=1326 audit(1758846442.905:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.238868][ T29] audit: type=1326 audit(1758846442.905:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 177.380029][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 178.381141][ T6229] loop2: detected capacity change from 0 to 512 [ 178.395517][ T6226] loop1: detected capacity change from 0 to 1024 [ 178.414210][ T6229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.426829][ T6229] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.558010][ T6226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.600519][ T6226] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.653503][ T6226] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.863: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.713011][ T6226] EXT4-fs (loop1): 1 orphan inode deleted [ 178.745485][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.778356][ T6237] ref_ctr_offset mismatch. inode: 0x3d9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 178.793696][ T6226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.815209][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.861715][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 178.881128][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 178.903205][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 178.920423][ T6243] loop4: detected capacity change from 0 to 512 [ 178.927197][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 178.957059][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.977919][ T6243] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 179.018019][ T6243] EXT4-fs (loop4): invalid journal inode [ 179.034819][ T6243] EXT4-fs (loop4): can't get journal size [ 179.089582][ T6248] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 179.127136][ T6243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 179.147359][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'. [ 179.192404][ T6243] System zones: 1-12, 13-13 [ 179.218281][ T6243] EXT4-fs (loop4): 1 truncate cleaned up [ 179.234667][ T6251] loop0: detected capacity change from 0 to 512 [ 179.248337][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.261028][ T6251] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.261314][ T6243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.470033][ T6270] loop3: detected capacity change from 0 to 1024 [ 179.488990][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 179.499810][ T6270] EXT4-fs: Ignoring removed bh option [ 179.505340][ T6270] EXT4-fs: inline encryption not supported [ 179.533739][ T6270] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.560036][ T6273] loop1: detected capacity change from 0 to 1024 [ 179.572344][ T6270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 179.579091][ T6273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.582199][ T6270] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.876: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.603471][ T6273] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.639652][ T6273] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.880: Freeing blocks not in datazone - block = 0, count = 4096 [ 179.654822][ T6270] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.876: lblock 0 mapped to illegal pblock 48 (length 1) [ 179.669107][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 179.670138][ T6270] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.876: Failed to acquire dquot type 0 [ 179.680044][ T6273] EXT4-fs (loop1): 1 orphan inode deleted [ 179.695419][ T6270] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 179.706786][ T6273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.707861][ T6270] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.876: mark_inode_dirty error [ 179.737100][ T6270] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 179.737455][ T6273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.747349][ T6270] EXT4-fs (loop3): 1 orphan inode deleted [ 179.748083][ T6270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.774657][ T37] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.796687][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 179.823970][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.904268][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.936774][ T6270] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 180.016770][ T6286] loop2: detected capacity change from 0 to 1024 [ 180.050059][ T6286] EXT4-fs: Ignoring removed bh option [ 180.064345][ T6286] EXT4-fs: inline encryption not supported [ 180.080595][ T6286] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.087071][ T6292] syzkaller0: entered promiscuous mode [ 180.096422][ T6292] syzkaller0: entered allmulticast mode [ 180.117494][ T6286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 180.131977][ T6286] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.884: lblock 2 mapped to illegal pblock 2 (length 1) [ 180.190683][ T6286] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.884: lblock 0 mapped to illegal pblock 48 (length 1) [ 180.213285][ T6286] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.884: Failed to acquire dquot type 0 [ 180.236384][ T6286] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 180.250071][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.262807][ T6286] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.884: mark_inode_dirty error [ 180.324532][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 180.342834][ T6286] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 180.378061][ T6286] EXT4-fs (loop2): 1 orphan inode deleted [ 180.384935][ T6286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.400368][ T2058] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.418704][ T2058] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 180.457188][ T6310] loop0: detected capacity change from 0 to 512 [ 180.479261][ T6286] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.884: lblock 0 mapped to illegal pblock 48 (length 1) [ 180.497438][ T6310] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 180.519802][ T6310] EXT4-fs (loop0): invalid journal inode [ 180.529061][ T6313] program syz.3.898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.544972][ T6310] EXT4-fs (loop0): can't get journal size [ 180.557818][ T6313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 180.576325][ T6310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 180.592286][ T6310] System zones: 1-12, 13-13 [ 180.600654][ T6310] EXT4-fs (loop0): 1 truncate cleaned up [ 180.610457][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.814566][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.020587][ T6334] loop1: detected capacity change from 0 to 512 [ 181.201780][ T6334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.214511][ T6334] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.306945][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.726288][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 181.726305][ T29] audit: type=1326 audit(1758846447.675:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 181.756221][ T29] audit: type=1326 audit(1758846447.685:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 181.779691][ T29] audit: type=1326 audit(1758846447.685:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 181.803050][ T29] audit: type=1326 audit(1758846447.685:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 181.826488][ T29] audit: type=1326 audit(1758846447.685:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 181.849907][ T29] audit: type=1326 audit(1758846447.685:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 181.898618][ T6348] loop0: detected capacity change from 0 to 1024 [ 181.932628][ T6348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.969600][ T6348] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.094412][ T6348] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.910: Freeing blocks not in datazone - block = 0, count = 4096 [ 182.137506][ T6348] EXT4-fs (loop0): 1 orphan inode deleted [ 182.150551][ T6348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.284822][ T29] audit: type=1326 audit(1758846447.835:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 182.308305][ T29] audit: type=1326 audit(1758846447.835:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 182.331686][ T29] audit: type=1326 audit(1758846447.835:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 182.355111][ T29] audit: type=1326 audit(1758846447.835:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 182.505522][ T6359] syzkaller0: entered promiscuous mode [ 182.511163][ T6359] syzkaller0: entered allmulticast mode [ 182.520356][ T6360] __nla_validate_parse: 1 callbacks suppressed [ 182.520369][ T6360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.915'. [ 182.592439][ T6362] loop2: detected capacity change from 0 to 512 [ 182.636159][ T6362] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 182.654867][ T6362] EXT4-fs (loop2): invalid journal inode [ 182.669692][ T6362] EXT4-fs (loop2): can't get journal size [ 182.681748][ T6362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 182.689963][ T6362] System zones: 1-12, 13-13 [ 182.695303][ T6362] EXT4-fs (loop2): 1 truncate cleaned up [ 182.740886][ T6365] netlink: 464 bytes leftover after parsing attributes in process `syz.3.918'. [ 182.756970][ T6362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.166225][ T6348] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.178687][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.190793][ T6374] loop4: detected capacity change from 0 to 1024 [ 183.253073][ T6374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.286161][ T6374] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.332990][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.927'. [ 183.347807][ T6374] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.922: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.368359][ T6386] loop3: detected capacity change from 0 to 1024 [ 183.382269][ T6374] EXT4-fs (loop4): 1 orphan inode deleted [ 183.391446][ T6386] EXT4-fs: Ignoring removed bh option [ 183.395764][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.410054][ T6386] EXT4-fs: inline encryption not supported [ 183.449876][ T6386] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.460502][ T6388] loop1: detected capacity change from 0 to 1024 [ 183.468972][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.488491][ T6386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 183.490481][ T6388] EXT4-fs: Ignoring removed bh option [ 183.516794][ T6388] EXT4-fs: inline encryption not supported [ 183.525785][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.546753][ T6388] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.548160][ T6386] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.925: lblock 2 mapped to illegal pblock 2 (length 1) [ 183.593602][ T6388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 183.603896][ T6393] netlink: 464 bytes leftover after parsing attributes in process `syz.2.929'. [ 183.629705][ T6388] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.926: lblock 2 mapped to illegal pblock 2 (length 1) [ 183.644067][ T6386] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.925: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.663332][ T6386] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.925: Failed to acquire dquot type 0 [ 183.674979][ T6388] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.926: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.711846][ T6386] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 183.725182][ T6388] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.926: Failed to acquire dquot type 0 [ 183.737706][ T6399] loop2: detected capacity change from 0 to 2048 [ 183.746962][ T6401] netlink: 'syz.4.933': attribute type 10 has an invalid length. [ 183.782502][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.933'. [ 183.794101][ T6399] loop2: p2 p3 p7 [ 183.812183][ T6403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 183.815473][ T6386] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.925: mark_inode_dirty error [ 183.836146][ T6388] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 183.863570][ T6388] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.926: mark_inode_dirty error [ 183.875725][ T6386] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 183.886890][ T6386] EXT4-fs (loop3): 1 orphan inode deleted [ 183.893396][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.910080][ T2058] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.919603][ T6388] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 183.929625][ T2058] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 183.952735][ T6388] EXT4-fs (loop1): 1 orphan inode deleted [ 183.959233][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.972293][ T2058] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.049961][ T2058] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 184.088255][ T6386] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 184.156724][ T6418] loop4: detected capacity change from 0 to 512 [ 184.195741][ T6388] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.926: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.234122][ T6418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.246790][ T6418] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.314337][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.434496][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.938'. [ 184.446717][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.753133][ T6430] loop1: detected capacity change from 0 to 1024 [ 184.776516][ T6430] EXT4-fs: Ignoring removed bh option [ 184.808547][ T6430] EXT4-fs: inline encryption not supported [ 184.835383][ T6430] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.884116][ T6430] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 184.915166][ T6430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.939: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.946137][ T6430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.939: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.980078][ T6430] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.939: Failed to acquire dquot type 0 [ 185.001934][ T6430] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 185.029676][ T6430] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.939: mark_inode_dirty error [ 185.054009][ T6430] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 185.074891][ T6430] EXT4-fs (loop1): 1 orphan inode deleted [ 185.091772][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.202517][ T6434] netlink: 464 bytes leftover after parsing attributes in process `syz.2.942'. [ 185.721218][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.369168][ T6443] loop2: detected capacity change from 0 to 512 [ 186.410954][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.423651][ T6443] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.538841][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 186.667516][ T6430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.939: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.682736][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.758342][ T6450] loop3: detected capacity change from 0 to 1024 [ 186.772581][ T6450] EXT4-fs: Ignoring removed bh option [ 186.797562][ T6450] EXT4-fs: inline encryption not supported [ 186.814667][ T6450] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.826453][ T6450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 186.836447][ T6450] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.948: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.860761][ T6450] __quota_error: 140 callbacks suppressed [ 186.860780][ T6450] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 186.880623][ T6450] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.948: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.901386][ T6450] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 186.910495][ T6450] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.948: Failed to acquire dquot type 0 [ 186.922336][ T6450] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 186.932310][ T6450] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.948: mark_inode_dirty error [ 186.948883][ T6450] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 186.959220][ T6450] EXT4-fs (loop3): 1 orphan inode deleted [ 186.965456][ T6450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.174988][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'. [ 187.263993][ T6455] loop0: detected capacity change from 0 to 2048 [ 187.809783][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.817922][ T6455] loop0: p2 p3 p7 [ 187.824223][ T51] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 187.836139][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 187.855587][ T6450] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 187.868428][ T29] audit: type=1326 audit(1758846453.835:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 187.896670][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.909414][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.965903][ T29] audit: type=1326 audit(1758846453.835:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 187.989454][ T29] audit: type=1326 audit(1758846453.835:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 188.012965][ T29] audit: type=1326 audit(1758846453.835:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 188.036377][ T29] audit: type=1326 audit(1758846453.835:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 188.059811][ T29] audit: type=1326 audit(1758846453.835:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 188.083333][ T29] audit: type=1326 audit(1758846453.835:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dc22eec9 code=0x7ffc0000 [ 188.106746][ T6461] netlink: 'syz.1.949': attribute type 10 has an invalid length. [ 188.189437][ T6465] netlink: 464 bytes leftover after parsing attributes in process `syz.3.953'. [ 188.227448][ T6466] loop2: detected capacity change from 0 to 1024 [ 188.234608][ T6466] EXT4-fs: Ignoring removed bh option [ 188.240497][ T6466] EXT4-fs: inline encryption not supported [ 188.254210][ T6469] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 188.262109][ T6469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.954'. [ 188.274723][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 188.302412][ T6466] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.342765][ T6466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 188.472961][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.952: lblock 2 mapped to illegal pblock 2 (length 1) [ 188.502758][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.952: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.544284][ T6480] program syz.1.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.553743][ T6480] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 188.575288][ T6481] loop3: detected capacity change from 0 to 512 [ 188.590349][ T6466] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.952: Failed to acquire dquot type 0 [ 188.628302][ T6466] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 188.676671][ T6481] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.733046][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 188.779656][ T6466] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.952: mark_inode_dirty error [ 188.804021][ T6491] loop4: detected capacity change from 0 to 1024 [ 188.897584][ T6491] EXT4-fs: Ignoring removed bh option [ 188.903407][ T6491] EXT4-fs: inline encryption not supported [ 188.938822][ T6466] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 189.006760][ T6491] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.050189][ T6466] EXT4-fs (loop2): 1 orphan inode deleted [ 189.069067][ T6491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 189.113176][ T6491] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.959: lblock 2 mapped to illegal pblock 2 (length 1) [ 189.133863][ T6491] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.959: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.149125][ T6491] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.959: Failed to acquire dquot type 0 [ 189.225988][ T6491] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 189.247593][ T6491] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.959: mark_inode_dirty error [ 189.262211][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 189.276208][ T6491] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 189.295460][ T6491] EXT4-fs (loop4): 1 orphan inode deleted [ 189.389592][ T6501] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 189.413400][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'. [ 189.472760][ T170] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.487396][ T170] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 189.516133][ T170] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.557695][ T170] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 189.601358][ T6491] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.959: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.616555][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.952: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.638028][ T6505] netlink: 464 bytes leftover after parsing attributes in process `syz.0.965'. [ 189.874151][ T6509] loop0: detected capacity change from 0 to 512 [ 189.905081][ T6509] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 189.914162][ T6509] EXT4-fs (loop0): invalid journal inode [ 189.920185][ T6509] EXT4-fs (loop0): can't get journal size [ 189.926523][ T6509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 189.934551][ T6509] System zones: 1-12, 13-13 [ 189.940046][ T6509] EXT4-fs (loop0): 1 truncate cleaned up [ 190.606277][ T6514] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 190.683379][ T6518] netlink: 'syz.3.970': attribute type 10 has an invalid length. [ 190.693508][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.968'. [ 190.790427][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.970'. [ 190.838328][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.972'. [ 191.001350][ T6535] loop4: detected capacity change from 0 to 1024 [ 191.022330][ T6535] EXT4-fs: Ignoring removed bh option [ 191.036106][ T6535] EXT4-fs: inline encryption not supported [ 191.056738][ T6535] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.171828][ T6541] loop3: detected capacity change from 0 to 512 [ 192.063169][ T6535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 192.087309][ T6535] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.977: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.999323][ T6535] __quota_error: 193 callbacks suppressed [ 193.999344][ T6535] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 194.015129][ T6541] EXT4-fs mount: 9 callbacks suppressed [ 194.015146][ T6541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.033956][ T6541] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.108118][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.195937][ T6535] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.977: lblock 0 mapped to illegal pblock 48 (length 1) [ 194.250787][ T29] audit: type=1326 audit(1758846460.205:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.274347][ T29] audit: type=1326 audit(1758846460.205:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.321762][ T6552] program syz.0.984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.346443][ T29] audit: type=1326 audit(1758846460.265:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.369880][ T29] audit: type=1326 audit(1758846460.265:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.375332][ T6535] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 194.394047][ T29] audit: type=1326 audit(1758846460.265:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.402800][ T6535] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.977: Failed to acquire dquot type 0 [ 194.426520][ T29] audit: type=1326 audit(1758846460.265:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.461067][ T29] audit: type=1326 audit(1758846460.265:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.484502][ T29] audit: type=1326 audit(1758846460.265:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 194.488981][ T6535] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 194.521187][ T6554] program syz.2.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.524950][ T6535] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.977: mark_inode_dirty error [ 194.536317][ T6552] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 194.553097][ T6554] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 194.575263][ T6554] __nla_validate_parse: 1 callbacks suppressed [ 194.575277][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 194.642162][ T6535] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 194.652608][ T6535] EXT4-fs (loop4): 1 orphan inode deleted [ 194.659455][ T6535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.672306][ T2919] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.731899][ T2919] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 194.783735][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 194.825055][ T6565] loop3: detected capacity change from 0 to 512 [ 194.962015][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.974808][ T6565] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.522112][ T6575] loop1: detected capacity change from 0 to 2048 [ 195.561884][ T6577] netlink: 464 bytes leftover after parsing attributes in process `syz.0.991'. [ 195.709937][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.731755][ T4004] loop1: p2 p3 p7 [ 195.736914][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.780464][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 195.800018][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 196.954682][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.989788][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.987'. [ 197.045061][ T4004] udevd[4004]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 197.049443][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 197.071758][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 197.091478][ T6599] netlink: 'syz.1.998': attribute type 10 has an invalid length. [ 197.104985][ T6600] loop2: detected capacity change from 0 to 1024 [ 197.124485][ T6597] netlink: 'syz.3.996': attribute type 10 has an invalid length. [ 197.131256][ T6600] EXT4-fs: Ignoring removed bh option [ 197.157460][ T6600] EXT4-fs: inline encryption not supported [ 197.165180][ T6600] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.194023][ T6600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 197.204346][ T6600] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.997: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.223096][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 197.248607][ T6600] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.997: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.291477][ T6597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.996'. [ 197.313338][ T6600] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.997: Failed to acquire dquot type 0 [ 197.357899][ T6600] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 197.406625][ T6600] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.997: mark_inode_dirty error [ 197.433739][ T6608] program syz.1.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.447008][ T6608] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 197.469745][ T6600] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 197.495977][ T6600] EXT4-fs (loop2): 1 orphan inode deleted [ 197.506929][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.523223][ T2919] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.556252][ T2919] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 197.586673][ T6600] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.997: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.602698][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 197.847773][ T6619] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1003'. [ 197.880691][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.242644][ T6632] loop2: detected capacity change from 0 to 512 [ 198.380464][ T6632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.393100][ T6632] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.416482][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'. [ 198.657718][ T6642] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 198.742631][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1011'. [ 201.053061][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 201.053080][ T29] audit: type=1400 audit(1758846466.995:4452): avc: denied { read } for pid=6645 comm="syz.0.1012" path="socket:[15086]" dev="sockfs" ino=15086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.083104][ T29] audit: type=1400 audit(1758846466.995:4453): avc: denied { getopt } for pid=6645 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.138801][ T6648] loop0: detected capacity change from 0 to 512 [ 201.186735][ T6650] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1015'. [ 201.232445][ T29] audit: type=1400 audit(1758846467.125:4454): avc: denied { mounton } for pid=6647 comm="syz.0.1014" path="/220/bus" dev="tmpfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 201.290035][ T6648] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.298985][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.311452][ T6648] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1014: bad orphan inode 13 [ 201.330778][ T6656] loop3: detected capacity change from 0 to 1024 [ 201.348565][ T6656] EXT4-fs: Ignoring removed bh option [ 201.354392][ T6648] ext4_test_bit(bit=12, block=18) = 1 [ 201.359831][ T6648] is_bad_inode(inode)=0 [ 201.363989][ T6648] NEXT_ORPHAN(inode)=2130706432 [ 201.368912][ T6648] max_ino=32 [ 201.372176][ T6648] i_nlink=1 [ 201.381776][ T6656] EXT4-fs: inline encryption not supported [ 201.437684][ T6648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.451003][ T6648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.590692][ T6656] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.625938][ T6656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 201.635308][ T29] audit: type=1326 audit(1758846467.595:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 201.653449][ T6656] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1016: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.709321][ T29] audit: type=1326 audit(1758846467.625:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 201.732816][ T29] audit: type=1326 audit(1758846467.625:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 201.756474][ T29] audit: type=1326 audit(1758846467.625:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 201.780041][ T29] audit: type=1326 audit(1758846467.625:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 201.812887][ T6667] loop4: detected capacity change from 0 to 512 [ 201.838400][ T6656] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 201.863654][ T6666] loop2: detected capacity change from 0 to 512 [ 201.898776][ T6656] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1016: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.981755][ T6666] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 202.018457][ T6666] EXT4-fs (loop2): invalid journal inode [ 202.024174][ T6666] EXT4-fs (loop2): can't get journal size [ 202.097776][ T6656] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 202.106712][ T6656] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1016: Failed to acquire dquot type 0 [ 202.238963][ T6667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.251620][ T6667] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.325846][ T6672] program syz.0.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.514651][ T6666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 202.529992][ T6672] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 202.546051][ T6656] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 202.565796][ T6666] System zones: 1-12, 13-13 [ 202.570859][ T6666] EXT4-fs (loop2): 1 truncate cleaned up [ 202.589692][ T6656] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1016: mark_inode_dirty error [ 202.604127][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.662274][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 202.697400][ T6656] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.750702][ T6656] EXT4-fs (loop3): 1 orphan inode deleted [ 202.758084][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 202.767284][ T170] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.794879][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.816119][ T170] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 202.913441][ T6680] loop1: detected capacity change from 0 to 2048 [ 202.926847][ T6656] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1016: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.007353][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.111787][ T4004] loop1: p2 p3 p7 [ 203.151334][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.286018][ T6680] loop1: p2 p3 p7 [ 203.547360][ T2991] loop1: p2 p3 p7 [ 203.852906][ T6693] loop3: detected capacity change from 0 to 512 [ 203.872745][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.962511][ T6693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.975161][ T6693] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.202277][ T6697] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1027'. [ 204.498243][ T6705] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 204.579836][ T6706] loop2: detected capacity change from 0 to 1024 [ 204.634793][ T6706] EXT4-fs: Ignoring removed bh option [ 204.718689][ T6706] EXT4-fs: inline encryption not supported [ 204.792153][ T6706] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.888113][ T6706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 204.898614][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'. [ 204.930955][ T6706] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1029: lblock 2 mapped to illegal pblock 2 (length 1) [ 204.998240][ T6706] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1029: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.067588][ T6706] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1029: Failed to acquire dquot type 0 [ 205.119657][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 205.138124][ T6706] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 205.176086][ T6706] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1029: mark_inode_dirty error [ 205.236738][ T6706] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 205.290035][ T6718] loop4: detected capacity change from 0 to 512 [ 205.298680][ T6706] EXT4-fs (loop2): 1 orphan inode deleted [ 205.315089][ T6706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.328047][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.368145][ T6720] loop0: detected capacity change from 0 to 1024 [ 205.375543][ T6718] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 205.411418][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 205.432656][ T6718] EXT4-fs (loop4): invalid journal inode [ 205.446382][ T6720] EXT4-fs: Ignoring removed bh option [ 205.482350][ T6718] EXT4-fs (loop4): can't get journal size [ 205.493673][ T6720] EXT4-fs: inline encryption not supported [ 205.521078][ T6718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 205.538278][ T6718] System zones: 1-12, 13-13 [ 205.543299][ T6718] EXT4-fs (loop4): 1 truncate cleaned up [ 205.552108][ T6718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.701844][ T6720] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.723503][ T6706] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1029: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.774464][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.793310][ T6720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 205.925479][ T6720] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1033: lblock 2 mapped to illegal pblock 2 (length 1) [ 205.999285][ T6720] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1033: lblock 0 mapped to illegal pblock 48 (length 1) [ 206.057356][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.068267][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 206.068283][ T29] audit: type=1326 audit(1758846472.035:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3665ceeec9 code=0x7ffc0000 [ 206.120225][ T6720] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 206.129076][ T6720] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1033: Failed to acquire dquot type 0 [ 206.177844][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.229240][ T6732] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1038'. [ 206.321920][ T6720] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 206.400785][ T29] audit: type=1326 audit(1758846472.065:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3665ceeec9 code=0x7ffc0000 [ 206.424381][ T29] audit: type=1326 audit(1758846472.185:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.448078][ T29] audit: type=1326 audit(1758846472.185:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.471572][ T29] audit: type=1326 audit(1758846472.205:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.495152][ T29] audit: type=1326 audit(1758846472.205:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.518705][ T29] audit: type=1326 audit(1758846472.205:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.542187][ T29] audit: type=1326 audit(1758846472.205:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.565717][ T29] audit: type=1326 audit(1758846472.215:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 206.654150][ T6720] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1033: mark_inode_dirty error [ 206.732418][ T6720] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 206.810647][ T6720] EXT4-fs (loop0): 1 orphan inode deleted [ 206.828343][ T6720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.857657][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 206.887253][ T6744] netlink: 'syz.4.1043': attribute type 10 has an invalid length. [ 206.917322][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 206.943256][ T6747] loop2: detected capacity change from 0 to 1024 [ 206.962354][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'. [ 206.979494][ T6747] EXT4-fs: Ignoring removed bh option [ 206.985046][ T6747] EXT4-fs: inline encryption not supported [ 206.991554][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1043'. [ 207.020441][ T6720] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 207.046986][ T6747] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.135763][ T6747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 207.178222][ T6747] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1042: lblock 2 mapped to illegal pblock 2 (length 1) [ 207.196038][ T6751] wireguard0: entered promiscuous mode [ 207.201585][ T6751] wireguard0: entered allmulticast mode [ 207.216011][ T6747] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1042: lblock 0 mapped to illegal pblock 48 (length 1) [ 207.235974][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.263766][ T6747] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1042: Failed to acquire dquot type 0 [ 207.360394][ T6758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6758 comm=syz.0.1047 [ 207.385893][ T6747] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 207.424315][ T6747] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1042: mark_inode_dirty error [ 207.572760][ T6747] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 208.064028][ T6763] loop4: detected capacity change from 0 to 512 [ 208.095317][ T6763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.108141][ T6763] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.174958][ T6747] EXT4-fs (loop2): 1 orphan inode deleted [ 208.191229][ T2759] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.288861][ T6771] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1051'. [ 208.313056][ T6747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.349502][ T2759] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 208.446888][ T6747] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 208.572458][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 208.586832][ T6782] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 208.693527][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 209.228977][ T6791] loop3: detected capacity change from 0 to 512 [ 210.156627][ T6791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.169590][ T6791] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.201939][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.282292][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.416716][ T6799] loop1: detected capacity change from 0 to 2048 [ 210.505294][ T3526] Alternate GPT is invalid, using primary GPT. [ 210.511824][ T3526] loop1: p2 p3 p7 [ 210.520602][ T6804] loop0: detected capacity change from 0 to 1024 [ 210.547691][ T6804] EXT4-fs: Ignoring removed bh option [ 210.561695][ T6804] EXT4-fs: inline encryption not supported [ 210.570868][ T6804] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.583528][ T6804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 210.593174][ T6804] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1063: lblock 2 mapped to illegal pblock 2 (length 1) [ 210.607836][ T6804] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1063: lblock 0 mapped to illegal pblock 48 (length 1) [ 210.622316][ T6804] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1063: Failed to acquire dquot type 0 [ 210.634306][ T6804] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 210.650583][ T6804] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1063: mark_inode_dirty error [ 210.662574][ T6804] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.676337][ T6804] EXT4-fs (loop0): 1 orphan inode deleted [ 210.682879][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.698492][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.713430][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 210.766602][ T6804] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1063: lblock 0 mapped to illegal pblock 48 (length 1) [ 211.167608][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.175502][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 211.178963][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 211.178980][ T29] audit: type=1326 audit(1758846477.135:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.216403][ T29] audit: type=1326 audit(1758846477.135:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.240200][ T29] audit: type=1326 audit(1758846477.135:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.263822][ T29] audit: type=1326 audit(1758846477.135:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.287334][ T29] audit: type=1326 audit(1758846477.135:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.310761][ T29] audit: type=1326 audit(1758846477.135:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.334217][ T29] audit: type=1326 audit(1758846477.135:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.357608][ T29] audit: type=1326 audit(1758846477.135:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.381044][ T29] audit: type=1326 audit(1758846477.135:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.404536][ T29] audit: type=1326 audit(1758846477.135:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 211.539712][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 211.553162][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 211.570445][ T4004] udevd[4004]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 211.634632][ T6816] program syz.3.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.735141][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.760875][ T6816] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.930095][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'. [ 211.990382][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 212.539138][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 212.986813][ T6849] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1077'. [ 214.145807][ T6854] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1079'. [ 214.430177][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 214.569923][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1082'. [ 215.735102][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 216.109297][ T6879] loop2: detected capacity change from 0 to 512 [ 218.375358][ T6883] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1088'. [ 218.450874][ T6885] netlink: 'syz.4.1089': attribute type 10 has an invalid length. [ 218.616478][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1089'. [ 218.650512][ T6879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.663148][ T6879] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.863058][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.900217][ T6899] dummy0: entered promiscuous mode [ 218.935969][ T6899] vlan2: entered promiscuous mode [ 218.957613][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 218.957630][ T29] audit: type=1326 audit(1758846484.925:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 218.972995][ T6905] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1093'. [ 219.001620][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 219.054376][ T29] audit: type=1326 audit(1758846484.925:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.078125][ T29] audit: type=1326 audit(1758846484.925:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.101580][ T29] audit: type=1326 audit(1758846484.925:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.125162][ T29] audit: type=1326 audit(1758846484.925:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.149151][ T29] audit: type=1326 audit(1758846484.925:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.172685][ T29] audit: type=1326 audit(1758846484.925:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.196171][ T29] audit: type=1326 audit(1758846484.925:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.219624][ T29] audit: type=1326 audit(1758846484.925:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.243087][ T29] audit: type=1326 audit(1758846484.925:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 219.308898][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1097'. [ 219.535350][ T6918] loop4: detected capacity change from 0 to 512 [ 219.546583][ T6918] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 219.582572][ T6918] EXT4-fs (loop4): invalid journal inode [ 219.602362][ T6918] EXT4-fs (loop4): can't get journal size [ 219.626912][ T6919] loop2: detected capacity change from 0 to 1024 [ 219.638190][ T6918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 219.648259][ T6919] EXT4-fs: Ignoring removed bh option [ 219.653873][ T6919] EXT4-fs: inline encryption not supported [ 219.680278][ T6918] System zones: 1-12, 13-13 [ 219.687645][ T6918] EXT4-fs (loop4): 1 truncate cleaned up [ 219.694402][ T6919] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.713422][ T6918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.793515][ T6919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 219.821315][ T6919] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1102: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.854682][ T6919] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1102: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.869377][ T6919] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1102: Failed to acquire dquot type 0 [ 219.885757][ T6928] loop1: detected capacity change from 0 to 1024 [ 219.892290][ T6919] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 219.918337][ T6928] EXT4-fs: Ignoring removed bh option [ 219.926554][ T6928] EXT4-fs: inline encryption not supported [ 219.958976][ T6929] loop3: detected capacity change from 0 to 512 [ 219.984637][ T6919] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1102: mark_inode_dirty error [ 220.027226][ T6919] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 220.040664][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.053224][ T6929] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.081215][ T6928] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.111712][ T6919] EXT4-fs (loop2): 1 orphan inode deleted [ 220.123335][ T6928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 220.135691][ T4407] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.175769][ T6919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.205753][ T6928] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1101: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.241802][ T4407] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 220.284139][ T6928] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1101: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.335010][ T6919] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1102: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.372457][ T6928] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1101: Failed to acquire dquot type 0 [ 220.404529][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.447531][ T6928] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 220.477889][ T6928] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1101: mark_inode_dirty error [ 220.514774][ T6928] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 220.572150][ T6928] EXT4-fs (loop1): 1 orphan inode deleted [ 220.597918][ T4407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.623699][ T6928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.646453][ T4407] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 220.672741][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.716814][ T6928] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1101: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.937445][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.104187][ T6939] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 221.203094][ T6944] loop1: detected capacity change from 0 to 1024 [ 221.248423][ T6944] EXT4-fs: Ignoring removed bh option [ 221.272928][ T6944] EXT4-fs: inline encryption not supported [ 221.398207][ T6944] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.014855][ T6946] loop2: detected capacity change from 0 to 512 [ 222.057470][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1107'. [ 222.083805][ T6944] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 222.102996][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.123753][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.136539][ T6946] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.183590][ T6944] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1106: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.213457][ T6944] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1106: lblock 0 mapped to illegal pblock 48 (length 1) [ 222.228146][ T6944] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1106: Failed to acquire dquot type 0 [ 222.242049][ T6944] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 222.252574][ T6944] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1106: mark_inode_dirty error [ 222.305640][ T6944] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 222.349981][ T6944] EXT4-fs (loop1): 1 orphan inode deleted [ 222.364159][ T6944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.376742][ T4407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.538935][ T4407] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 223.546940][ T6944] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1106: lblock 0 mapped to illegal pblock 48 (length 1) [ 223.771947][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.923640][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.066536][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 224.066551][ T29] audit: type=1326 audit(1758846490.035:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.110390][ T29] audit: type=1326 audit(1758846490.065:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.133986][ T29] audit: type=1326 audit(1758846490.065:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.157866][ T29] audit: type=1326 audit(1758846490.065:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21f4dcd710 code=0x7ffc0000 [ 224.182191][ T29] audit: type=1326 audit(1758846490.065:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.205691][ T29] audit: type=1326 audit(1758846490.065:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.229041][ T29] audit: type=1326 audit(1758846490.065:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.252531][ T29] audit: type=1326 audit(1758846490.065:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.276087][ T29] audit: type=1326 audit(1758846490.065:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.299533][ T29] audit: type=1326 audit(1758846490.075:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 224.370650][ T6966] program syz.2.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.392247][ T6968] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1113'. [ 224.416822][ T6966] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 224.436474][ T6969] loop3: detected capacity change from 0 to 1024 [ 224.475907][ T6969] EXT4-fs: Ignoring removed bh option [ 224.501917][ T6969] EXT4-fs: inline encryption not supported [ 224.544679][ T6973] program syz.1.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.563471][ T6969] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.618072][ T6969] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 224.628586][ T6973] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 224.689993][ T6969] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1109: lblock 2 mapped to illegal pblock 2 (length 1) [ 224.745229][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 224.834331][ T6969] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1109: lblock 0 mapped to illegal pblock 48 (length 1) [ 224.878782][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 224.917759][ T6969] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1109: Failed to acquire dquot type 0 [ 224.994310][ T6969] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 225.290013][ T6969] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1109: mark_inode_dirty error [ 225.338018][ T6969] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 225.356948][ T6969] EXT4-fs (loop3): 1 orphan inode deleted [ 225.376511][ T6969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.411372][ T2058] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.467306][ T6990] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 225.476564][ T2058] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 225.489119][ T6969] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1109: lblock 0 mapped to illegal pblock 48 (length 1) [ 225.541419][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1120'. [ 225.566409][ T6992] loop0: detected capacity change from 0 to 512 [ 225.665819][ T6996] loop4: detected capacity change from 0 to 2048 [ 225.972440][ T7004] loop1: detected capacity change from 0 to 1024 [ 226.011114][ T7004] EXT4-fs: Ignoring removed bh option [ 226.055518][ T7004] EXT4-fs: inline encryption not supported [ 226.135955][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.146130][ T7004] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.174944][ T3526] loop4: p2 p3 p7 [ 226.190234][ T6992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.203014][ T6992] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.264046][ T7004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 226.474748][ T6996] Alternate GPT is invalid, using primary GPT. [ 226.481171][ T6996] loop4: p2 p3 p7 [ 226.627527][ T7004] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1124: lblock 2 mapped to illegal pblock 2 (length 1) [ 226.716505][ T7013] loop3: detected capacity change from 0 to 1024 [ 226.723652][ T7004] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1124: lblock 0 mapped to illegal pblock 48 (length 1) [ 226.745153][ T7013] EXT4-fs: Ignoring removed bh option [ 226.772952][ T7013] EXT4-fs: inline encryption not supported [ 226.817662][ T7013] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.854963][ T7016] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 226.861528][ T7016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.869079][ T7016] vhci_hcd vhci_hcd.0: Device attached [ 226.889513][ T7004] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1124: Failed to acquire dquot type 0 [ 226.941755][ T7013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 226.951127][ T7004] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 226.973711][ T7017] vhci_hcd: connection closed [ 226.974078][ T4407] vhci_hcd: stop threads [ 226.983058][ T4407] vhci_hcd: release socket [ 226.987497][ T4407] vhci_hcd: disconnect device [ 226.995924][ T7013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1122: lblock 2 mapped to illegal pblock 2 (length 1) [ 227.015292][ T7004] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1124: mark_inode_dirty error [ 227.046268][ T7004] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 227.056786][ T7013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1122: lblock 0 mapped to illegal pblock 48 (length 1) [ 227.081749][ T7004] EXT4-fs (loop1): 1 orphan inode deleted [ 227.096021][ T4407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 227.110933][ T7004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.127707][ T7013] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1122: Failed to acquire dquot type 0 [ 227.156625][ T4407] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 227.298524][ T7013] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 227.317569][ T7013] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1122: mark_inode_dirty error [ 227.337185][ T4004] udevd[4004]: failed to send result of seq 13181 to main daemon: Transport endpoint is not connected [ 227.933027][ T7025] loop4: detected capacity change from 0 to 512 [ 227.977010][ T7025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.990057][ T7025] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.017385][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.027274][ T7004] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1124: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.041828][ T7013] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 228.061275][ T7013] EXT4-fs (loop3): 1 orphan inode deleted [ 228.068247][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.082998][ T4407] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.105585][ T4407] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 228.357446][ T7013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1122: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.386695][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.154263][ T7013] __quota_error: 72 callbacks suppressed [ 229.154286][ T7013] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 229.174023][ T4004] printk: udevd: 5 output lines suppressed due to ratelimiting [ 229.902837][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.914150][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.942737][ T7039] loop2: detected capacity change from 0 to 512 [ 229.960289][ T7040] loop1: detected capacity change from 0 to 1024 [ 229.968542][ T7040] EXT4-fs: Ignoring removed bh option [ 229.974156][ T7040] EXT4-fs: inline encryption not supported [ 229.980490][ T7040] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.993491][ T7039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.006044][ T7039] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.069620][ T7040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 230.096370][ T7040] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1132: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.122896][ T7040] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 230.131105][ T7040] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1132: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.145666][ T7040] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 230.154480][ T7040] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1132: Failed to acquire dquot type 0 [ 230.219552][ T7040] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 230.230208][ T7040] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1132: mark_inode_dirty error [ 230.245377][ T7040] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.255746][ T7040] EXT4-fs (loop1): 1 orphan inode deleted [ 230.264083][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.800955][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.815275][ T51] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 230.818913][ T29] audit: type=1326 audit(1758846496.785:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 230.824357][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 230.862112][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.873986][ T29] audit: type=1326 audit(1758846496.815:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 230.886059][ T7040] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1132: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.897624][ T29] audit: type=1326 audit(1758846496.815:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 230.935006][ T29] audit: type=1326 audit(1758846496.815:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 230.958592][ T29] audit: type=1326 audit(1758846496.815:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 230.982063][ T29] audit: type=1326 audit(1758846496.815:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f4dceec9 code=0x7ffc0000 [ 231.025585][ T7051] netlink: 'syz.3.1133': attribute type 10 has an invalid length. [ 231.070439][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 231.204697][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1138'. [ 231.222200][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.247143][ T7063] program syz.4.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.323574][ T7068] loop0: detected capacity change from 0 to 512 [ 231.332064][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 231.341273][ T7063] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 231.383609][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 231.460230][ T7074] loop1: detected capacity change from 0 to 2048 [ 231.475800][ T7068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.488922][ T7068] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.649557][ T7074] loop1: p2 p3 p7 [ 231.725102][ T7069] IPVS: Error joining to the multicast group [ 231.785262][ T7083] loop4: detected capacity change from 0 to 1024 [ 231.823359][ T7083] EXT4-fs: Ignoring removed bh option [ 231.837011][ T7085] program syz.2.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.861360][ T7083] EXT4-fs: inline encryption not supported [ 231.887046][ T7083] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.905448][ T7085] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 231.982733][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 232.149976][ T7083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 232.170815][ T7083] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1143: lblock 2 mapped to illegal pblock 2 (length 1) [ 233.370540][ T7083] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1143: lblock 0 mapped to illegal pblock 48 (length 1) [ 233.420413][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.576582][ T7083] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1143: Failed to acquire dquot type 0 [ 233.751209][ T7083] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 233.788896][ T7083] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1143: mark_inode_dirty error [ 234.686564][ T7107] loop3: detected capacity change from 0 to 1024 [ 234.705644][ T7083] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 234.766576][ T7109] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 234.777965][ T7083] EXT4-fs (loop4): 1 orphan inode deleted [ 234.784329][ T7107] EXT4-fs: Ignoring removed bh option [ 234.790564][ T7083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.915936][ T7107] EXT4-fs: inline encryption not supported [ 234.926472][ T4407] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.950723][ T7107] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 234.971682][ T7110] loop0: detected capacity change from 0 to 512 [ 234.988505][ T7110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.001036][ T7110] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.100942][ T4407] __quota_error: 85 callbacks suppressed [ 235.100960][ T4407] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 235.115164][ T4407] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 235.146041][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 235.157432][ T7107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 235.171548][ T7107] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1149: lblock 2 mapped to illegal pblock 2 (length 1) [ 235.251910][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.261731][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.273754][ T7107] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 235.283939][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 235.314751][ T7107] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1149: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.339311][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 235.370103][ T7107] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 235.378948][ T7107] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1149: Failed to acquire dquot type 0 [ 235.396274][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 235.428033][ T7107] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 235.439537][ T7107] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1149: mark_inode_dirty error [ 235.456398][ T7117] loop1: detected capacity change from 0 to 1024 [ 235.463355][ T7117] EXT4-fs: Ignoring removed bh option [ 235.475090][ T7107] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 235.485488][ T7117] EXT4-fs: inline encryption not supported [ 235.492051][ T7117] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.502559][ T7107] EXT4-fs (loop3): 1 orphan inode deleted [ 235.509130][ T7107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.533896][ T2058] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 235.572501][ T2058] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 235.581027][ T2058] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 235.598862][ T7117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 235.609199][ T7117] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1153: lblock 2 mapped to illegal pblock 2 (length 1) [ 235.623493][ T7117] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 235.631908][ T7117] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1153: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.676619][ T7117] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 235.685473][ T7117] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1153: Failed to acquire dquot type 0 [ 235.700203][ T7107] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1149: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.734033][ T7107] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 235.744350][ T7117] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 235.754638][ T7117] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1153: mark_inode_dirty error [ 235.766548][ T7117] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 235.777209][ T7117] EXT4-fs (loop1): 1 orphan inode deleted [ 235.783691][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.796328][ T4407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 235.815433][ T4407] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 235.823939][ T4407] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 235.879745][ T7117] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1153: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.896852][ T7117] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 235.976925][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.216258][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.378900][ T7131] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 236.519942][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1155'. [ 236.545416][ T7140] loop4: detected capacity change from 0 to 512 [ 236.552690][ T29] audit: type=1326 audit(1758846502.515:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 236.635246][ T7142] loop0: detected capacity change from 0 to 512 [ 236.751303][ T7142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.764017][ T7142] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.851730][ T7148] loop3: detected capacity change from 0 to 1024 [ 236.909780][ T7148] EXT4-fs: Ignoring removed bh option [ 236.911723][ T7140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.945461][ T7148] EXT4-fs: inline encryption not supported [ 236.952162][ T7148] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.003985][ T7148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 237.041314][ T7148] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1159: lblock 2 mapped to illegal pblock 2 (length 1) [ 237.075041][ T7140] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.115216][ T7148] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1159: lblock 0 mapped to illegal pblock 48 (length 1) [ 237.315604][ T7148] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1159: Failed to acquire dquot type 0 [ 237.327425][ T7148] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 238.119198][ T7157] loop1: detected capacity change from 0 to 2048 [ 238.136963][ T7148] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1159: mark_inode_dirty error [ 238.160951][ T7148] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 238.198670][ T7159] loop2: detected capacity change from 0 to 512 [ 239.144997][ T7148] EXT4-fs (loop3): 1 orphan inode deleted [ 239.161519][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.386135][ T4407] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 239.414759][ T7159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.427518][ T7159] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.494542][ T7157] loop1: p2 p3 p7 [ 239.506067][ T4407] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 239.684792][ T7148] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1159: lblock 0 mapped to illegal pblock 48 (length 1) [ 239.699590][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.761363][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.817049][ T7165] netlink: 'syz.0.1162': attribute type 10 has an invalid length. [ 239.842475][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'. [ 240.021971][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.050429][ T7171] loop0: detected capacity change from 0 to 2048 [ 240.092153][ T7172] loop2: detected capacity change from 0 to 512 [ 240.158882][ T7172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.171830][ T7172] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.252470][ T7171] loop0: p2 p3 p7 [ 240.661432][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 240.661449][ T29] audit: type=1400 audit(1758846506.525:5316): avc: denied { ioctl } for pid=7179 comm="syz.1.1166" path="socket:[17185]" dev="sockfs" ino=17185 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.949652][ T29] audit: type=1326 audit(1758846506.855:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 240.973482][ T29] audit: type=1326 audit(1758846506.855:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 240.997087][ T29] audit: type=1326 audit(1758846506.855:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.020582][ T29] audit: type=1326 audit(1758846506.855:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.044028][ T29] audit: type=1326 audit(1758846506.855:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.067505][ T29] audit: type=1326 audit(1758846506.855:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.090928][ T29] audit: type=1326 audit(1758846506.855:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.114510][ T29] audit: type=1326 audit(1758846506.865:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.137991][ T29] audit: type=1326 audit(1758846506.865:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34c41eec9 code=0x7ffc0000 [ 241.417109][ T7187] netlink: 'syz.3.1170': attribute type 10 has an invalid length. [ 241.638462][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1170'. [ 241.881449][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 242.038762][ T7198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 242.109479][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1173'. [ 242.121740][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.280534][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1177'. [ 242.334880][ T7209] program syz.3.1178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.370027][ T7209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.436592][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 242.517238][ T7223] program syz.3.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.555994][ T7223] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.703520][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 242.736051][ T7229] program syz.1.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.745500][ T7229] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.900310][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 243.446090][ T7246] loop2: detected capacity change from 0 to 1024 [ 243.453154][ T7246] EXT4-fs: Ignoring removed bh option [ 243.459509][ T7246] EXT4-fs: inline encryption not supported [ 243.475720][ T7246] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.499664][ T7246] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1187: lblock 2 mapped to illegal pblock 2 (length 1) [ 243.594174][ T7246] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1187: lblock 0 mapped to illegal pblock 48 (length 1) [ 243.662620][ T7246] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1187: Failed to acquire dquot type 0 [ 243.707201][ T7246] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 243.742222][ T7246] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1187: mark_inode_dirty error [ 243.782794][ T7246] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 243.807063][ T7246] EXT4-fs (loop2): 1 orphan inode deleted [ 243.822091][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.844853][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 243.869979][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 243.971911][ T7255] loop0: detected capacity change from 0 to 512 [ 243.980254][ T7255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.990038][ T7255] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.997370][ T7255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1191: bg 0: block 248: padding at end of block bitmap is not set [ 244.012314][ T7255] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1191: Failed to acquire dquot type 1 [ 244.028102][ T7255] EXT4-fs (loop0): 1 truncate cleaned up [ 244.034752][ T7255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.049553][ T7255] syz.0.1191 (7255) used greatest stack depth: 9280 bytes left [ 244.069398][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.116252][ T7260] program syz.0.1193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.125699][ T7260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.217571][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.239168][ T3308] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 244.258453][ T3308] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 244.268382][ T3308] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 244.322593][ T7266] loop2: detected capacity change from 0 to 2048 [ 244.382690][ T7266] loop2: p2 p3 p7 [ 244.485662][ T7275] program syz.3.1199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.495148][ T7275] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.595747][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 244.616958][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.935057][ T7287] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 244.959735][ T7285] loop4: detected capacity change from 0 to 512 [ 244.984588][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 244.999255][ T7285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.011960][ T7285] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.194071][ T7293] loop1: detected capacity change from 0 to 1024 [ 245.216389][ T7293] EXT4-fs: Ignoring removed bh option [ 245.232468][ T7293] EXT4-fs: inline encryption not supported [ 245.254159][ T7293] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 245.272630][ T7293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 245.303337][ T7293] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1203: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.347836][ T7296] netlink: 'syz.0.1204': attribute type 10 has an invalid length. [ 245.358581][ T7293] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1203: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.390072][ T7293] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1203: Failed to acquire dquot type 0 [ 245.416451][ T7293] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 245.428989][ T7293] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1203: mark_inode_dirty error [ 245.442737][ T7293] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 245.454880][ T7293] EXT4-fs (loop1): 1 orphan inode deleted [ 245.461221][ T7293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.519658][ T7303] program syz.3.1207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.529670][ T7303] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 245.547232][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.563948][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 245.578322][ T7293] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1203: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.734747][ T7293] __quota_error: 266 callbacks suppressed [ 245.734767][ T7293] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 245.963182][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.310256][ T7314] loop0: detected capacity change from 0 to 512 [ 246.673581][ T7317] loop4: detected capacity change from 0 to 2048 [ 248.379920][ T7314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.393412][ T7314] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.413055][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.438385][ T7317] loop4: p2 p3 p7 [ 248.519305][ T7329] loop1: detected capacity change from 0 to 2048 [ 248.525793][ T29] audit: type=1326 audit(1758846514.485:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.557386][ T29] audit: type=1326 audit(1758846514.495:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.581126][ T29] audit: type=1326 audit(1758846514.495:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.604739][ T29] audit: type=1326 audit(1758846514.495:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.628223][ T29] audit: type=1326 audit(1758846514.495:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.651714][ T29] audit: type=1326 audit(1758846514.495:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.675180][ T29] audit: type=1326 audit(1758846514.495:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.698725][ T29] audit: type=1326 audit(1758846514.495:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.722277][ T29] audit: type=1326 audit(1758846514.495:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017fcfeec9 code=0x7ffc0000 [ 248.749003][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.803347][ T7329] loop1: p2 p3 p7 [ 248.815369][ T7336] netlink: 'syz.2.1216': attribute type 10 has an invalid length. [ 248.834108][ T7336] __nla_validate_parse: 1 callbacks suppressed [ 248.834124][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1216'. [ 249.145654][ T7352] loop3: detected capacity change from 0 to 1024 [ 249.154851][ T7352] EXT4-fs: Ignoring removed bh option [ 249.161182][ T7352] EXT4-fs: inline encryption not supported [ 249.168202][ T7352] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 249.178601][ T7352] ================================================================== [ 249.186681][ T7352] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 249.194420][ T7352] [ 249.196744][ T7352] write to 0xffffffff86a20c48 of 8 bytes by task 7348 on cpu 1: [ 249.204376][ T7352] console_flush_all+0x35a/0x730 [ 249.209316][ T7352] console_unlock+0xa1/0x330 [ 249.213930][ T7352] vprintk_emit+0x388/0x650 [ 249.218431][ T7352] vprintk_default+0x26/0x30 [ 249.223012][ T7352] vprintk+0x1d/0x30 [ 249.226904][ T7352] _printk+0x79/0xa0 [ 249.230802][ T7352] caif_disconnect_client+0x13d/0x150 [ 249.236223][ T7352] caif_release+0xec/0x250 [ 249.240671][ T7352] sock_close+0x68/0x150 [ 249.244916][ T7352] __fput+0x298/0x650 [ 249.248904][ T7352] ____fput+0x1c/0x30 [ 249.252905][ T7352] task_work_run+0x12e/0x1a0 [ 249.257496][ T7352] exit_to_user_mode_loop+0xe4/0x100 [ 249.262795][ T7352] do_syscall_64+0x1d6/0x200 [ 249.267396][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.273290][ T7352] [ 249.275613][ T7352] read to 0xffffffff86a20c48 of 8 bytes by task 7352 on cpu 0: [ 249.283146][ T7352] console_flush_all+0x563/0x730 [ 249.288113][ T7352] console_unlock+0xa1/0x330 [ 249.292714][ T7352] vprintk_emit+0x388/0x650 [ 249.297207][ T7352] vprintk_default+0x26/0x30 [ 249.301787][ T7352] vprintk+0x1d/0x30 [ 249.305675][ T7352] _printk+0x79/0xa0 [ 249.309572][ T7352] __ext4_msg+0x18f/0x1a0 [ 249.313918][ T7352] ext4_fill_super+0x1eaf/0x35d0 [ 249.318862][ T7352] get_tree_bdev_flags+0x291/0x300 [ 249.323966][ T7352] get_tree_bdev+0x1f/0x30 [ 249.328373][ T7352] ext4_get_tree+0x1c/0x30 [ 249.332800][ T7352] vfs_get_tree+0x54/0x1d0 [ 249.337233][ T7352] do_new_mount+0x207/0x5e0 [ 249.341828][ T7352] path_mount+0x4a4/0xb20 [ 249.346176][ T7352] __se_sys_mount+0x28f/0x2e0 [ 249.350881][ T7352] __x64_sys_mount+0x67/0x80 [ 249.355486][ T7352] x64_sys_call+0x2b4d/0x2ff0 [ 249.360184][ T7352] do_syscall_64+0xd2/0x200 [ 249.364717][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.370623][ T7352] [ 249.372959][ T7352] value changed: 0x000000000000151b -> 0x000000000000151c [ 249.380073][ T7352] [ 249.382403][ T7352] Reported by Kernel Concurrency Sanitizer on: [ 249.388563][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.3.1219 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.398298][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.408382][ T7352] ================================================================== [ 249.424743][ T7352] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 249.437388][ T7353] loop4: detected capacity change from 0 to 1024 [ 249.450826][ T7352] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1219: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.468244][ T7353] EXT4-fs: Ignoring removed bh option [ 249.473929][ T7353] EXT4-fs: inline encryption not supported [ 249.480413][ T7353] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 249.491041][ T7352] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1219: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.512156][ T7353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 249.520565][ T7352] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1219: Failed to acquire dquot type 0 [ 249.534698][ T7353] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1222: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.549232][ T7352] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 249.558919][ T7352] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1219: mark_inode_dirty error [ 249.570505][ T7353] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1222: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.576182][ T7352] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 249.595118][ T7353] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1222: Failed to acquire dquot type 0 [ 249.595170][ T7352] EXT4-fs (loop3): 1 orphan inode deleted [ 249.595974][ T7352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.624888][ T170] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.630641][ T7353] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 249.649610][ T170] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 249.650473][ T7353] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1222: mark_inode_dirty error [ 249.672700][ T7353] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 249.683092][ T7353] EXT4-fs (loop4): 1 orphan inode deleted [ 249.689689][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.702350][ T170] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.720322][ T170] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 249.732689][ T7353] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1222: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.734988][ T7352] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1219: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.923883][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.973026][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.