last executing test programs: 1.73182734s ago: executing program 2 (id=750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) syslog(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 1.73160624s ago: executing program 3 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000840010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="80530000000000002000128008000100677470001400028005000600090000000800040001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_emit_ethernet(0x5a, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r10, 0x1, 0x30, 0x0, &(0x7f0000000340)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}]}, 0x2c}}, 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) 1.688639833s ago: executing program 0 (id=752): r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.627938019s ago: executing program 0 (id=753): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 1.626554039s ago: executing program 2 (id=754): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) io_uring_enter(r2, 0x239a, 0x0, 0x4, 0x0, 0x44) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000680)={0xa, 0x4e1d, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x105}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.611861831s ago: executing program 0 (id=755): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 1.540376017s ago: executing program 2 (id=758): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, 0x0) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000900)=ANY=[], 0xe) 1.529551428s ago: executing program 3 (id=759): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.494315861s ago: executing program 0 (id=760): fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) close(r0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="200140001600000000bd7000fddbdf25fe8000000000000000e8ffffff00003de000000200000000000000000000002255010000004e004e2304004e2100030a00b0a087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x120}, 0x1, 0x0, 0x0, 0x2}, 0x880) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) exit(0x6) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/88, 0x58, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.493700191s ago: executing program 3 (id=761): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.266149422s ago: executing program 3 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x18) sendfile(r1, r1, &(0x7f00000001c0)=0x4, 0x84e2) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x310000, 0x1000, 0x101, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) 1.217927437s ago: executing program 1 (id=763): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010100f6ffffffb702000008000000b70300000000000885000000a00000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xc, &(0x7f00000007c0)=""/12, 0x41000, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000900)='snd_soc_dapm_path\x00', r1, 0x0, 0x5}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100e3d61bbffedbdf25070000001400018008000100", @ANYRES32=r9, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000700)={[&(0x7f0000000400)='\x00', &(0x7f00000005c0)='kfree\x00', &(0x7f0000000600)='syzkaller\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00']}, &(0x7f00000008c0)={[&(0x7f0000000740)='\x00', &(0x7f0000000780)='\x00', &(0x7f0000000800)='(\x00', &(0x7f0000000840)='bridge_slave_0\x00', &(0x7f0000000880)='kfree\x00']}, 0x1000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25110000001800018014000201040000767469300000000000000000003c0001801400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000280001801400020064766d7270310000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000000000020000180140002006970366772653000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="0c0001800800030002000000"], 0xbc}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 1.066676621s ago: executing program 1 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000008181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0xbc3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd700000000000150000000c"], 0x38}}, 0x40000) 962.55335ms ago: executing program 1 (id=766): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 919.410454ms ago: executing program 1 (id=767): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xd, 0x0, &(0x7f0000001080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0xf9, &(0x7f0000000100), &(0x7f00000001c0)=""/249, 0x2b, 0x0, 0x57, 0x6c, &(0x7f00000002c0)="95591e2c110cdf25d05561c9e64888ff7d4bd4d5bb9ab8e6581b0e2f605320dc60c765232701e849b0d2f7497064c7a368fde9d43bd7996b72b83f90556879f927e5b587d80a85dbcba3716ce89a906211e04194b209b4", &(0x7f0000000340)="23ed7248aec34fa15e0cf1579cd73d9fd23bbcbbed36a3e05d8c295ff5ec1a97af5eab7cd11b755d233c2e0170a11ea13e066376d3462c055e1e19a56645cf41b3b2a669fe100a78a6be694b7763a44ceba91716afaa8c7ba6bc17137630a9dfe0453d58777e5a45adc36913", 0x2, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0xfffffffffffffe29) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") 644.62859ms ago: executing program 2 (id=770): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nombcache}, {@data_ordered}, {@nodiscard}, {@nomblk_io_submit}, {@grpquota}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00B\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000400"/28], 0x50) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x420, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x248, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 637.13388ms ago: executing program 0 (id=771): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='itimer_state\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 592.827775ms ago: executing program 4 (id=772): r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 460.285287ms ago: executing program 4 (id=773): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000001c000000b7040000080000008500009500000000000000000000000062122e701156c2912502349fda6f43216b208b2bf02e92c4029e63e1d610ac85e3aae1b11d4bbd529f1fcdb2f0d737ad7fa1c7384f8f8e8fe20741b200aef3e4ecfeb708"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfda0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xa9, "d4d0856f21378a50511f00ddfb6ebd1ce77e4fcd00f4eeae52971d36fd62ced2cd9b6fa262095ee27e4b49b78d7c80e485f03e8daed5a29e8f863bf94a96aee08e0f16cf6cadd8695125c7bfad6b66bc038055db9132c6d3a616e85990ed8e8ca5f9666b8d9f3475fd1175a1e527ac748f48cdcf22f612df1f03c8a277d051558e89d9737229a55cbb205969f45c91793f4631bca9d479f0e683c682ee87623b61202117d54121272a"}, &(0x7f00000001c0)=0xb1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r3, 0x4, 0x7, [0xfffb, 0xfbff, 0x81, 0x9, 0x481, 0x5, 0x86a0]}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 417.414241ms ago: executing program 4 (id=774): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 307.126371ms ago: executing program 2 (id=775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/230, 0xe6}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f00000009c0)=""/118, 0x76}, {&(0x7f0000000a40)=""/67, 0x43}], 0x5, &(0x7f0000000b40)=""/66, 0x42}, 0xae7a70666071c22a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xf1c38fa000000000}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0xf}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4087, 0xff7}], 0x3}, 0x3}], 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x29cc02, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 271.282385ms ago: executing program 3 (id=776): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000480)='\x00!', 0x2}], 0x1, 0x10001, 0x6) 222.030269ms ago: executing program 4 (id=777): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 205.41229ms ago: executing program 4 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 88.733502ms ago: executing program 3 (id=779): socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0) r2 = memfd_create(&(0x7f0000000080), 0x0) splice(r0, 0x0, r2, 0x0, 0x408cd, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 54.341435ms ago: executing program 4 (id=780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, 0x0) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000900)=ANY=[], 0xe) 47.247935ms ago: executing program 1 (id=781): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/151, 0x97}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000740)=""/254, 0xfe}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018000900000000000000edff1b140000fe000001000000000a00120002"], 0x30}}, 0x80) 24.599797ms ago: executing program 0 (id=782): fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) close(r0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="200140001600000000bd7000fddbdf25fe8000000000000000e8ffffff00003de000000200000000000000000000002255010000004e004e2304004e2100030a00b0a087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x120}, 0x1, 0x0, 0x0, 0x2}, 0x880) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) exit(0x6) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/88, 0x58, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 22.914648ms ago: executing program 1 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xffff, @private=0xa0101fc}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0xd, 0x8000000000000000, 0x8, 0x2}}], 0x58}, 0x0) 0s ago: executing program 2 (id=784): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010100}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@dioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r8, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010015fdaf5e1ded1661a4c3f2732a00000000000000000000000a14000000240001"], 0x28}}, 0x20008844) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") kernel console output (not intermixed with test programs): [ 61.300248][ T4470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.313216][ T4470] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 61.385114][ T4474] netlink: 'syz.4.299': attribute type 29 has an invalid length. [ 61.418989][ T4475] loop0: detected capacity change from 0 to 128 [ 61.436162][ T4475] EXT4-fs: test_dummy_encryption option not supported [ 61.450583][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop0 [ 61.577991][ T4493] loop2: detected capacity change from 0 to 512 [ 61.618069][ T4493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.652446][ T4493] EXT4-fs (loop2): 1 truncate cleaned up [ 61.711837][ T4508] loop4: detected capacity change from 0 to 512 [ 61.727364][ T4511] loop1: detected capacity change from 0 to 512 [ 61.737096][ T4508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.753804][ T4511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.768150][ T4508] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 61.787714][ T4511] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 61.817432][ T4493] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 61.839965][ T4508] loop4: detected capacity change from 0 to 128 [ 61.857048][ T4511] EXT4-fs: test_dummy_encryption option not supported [ 61.857828][ T4493] SELinux: failed to load policy [ 61.871290][ T4508] EXT4-fs: test_dummy_encryption option not supported [ 61.880993][ T4140] udevd[4140]: incorrect ext4 checksum on /dev/loop1 [ 61.887889][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop4 [ 62.103015][ T4526] dvmrp1: entered allmulticast mode [ 62.152773][ T4526] dvmrp1: left allmulticast mode [ 62.205325][ T4531] isofs_fill_super: get root inode failed [ 62.247340][ T4531] netlink: 'syz.4.313': attribute type 33 has an invalid length. [ 62.255186][ T4531] __nla_validate_parse: 1 callbacks suppressed [ 62.255200][ T4531] netlink: 152 bytes leftover after parsing attributes in process `syz.4.313'. [ 62.311353][ T4533] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.314: invalid indirect mapped block 4294967295 (level 1) [ 62.332595][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 62.399291][ T4533] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.314: invalid indirect mapped block 4294967295 (level 1) [ 62.454417][ T4533] EXT4-fs (loop2): 2 truncates cleaned up [ 62.584656][ T4546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.616721][ T4546] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 62.796752][ T4546] EXT4-fs: test_dummy_encryption option not supported [ 62.834968][ T4558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.866985][ T4140] udevd[4140]: incorrect ext4 checksum on /dev/loop0 [ 62.887139][ T4558] EXT4-fs (loop2): 1 truncate cleaned up [ 63.050010][ T4558] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 63.062415][ T4558] SELinux: failed to load policy [ 63.149598][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 63.195500][ T4582] FAULT_INJECTION: forcing a failure. [ 63.195500][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 63.208205][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.2.327 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.208239][ T4582] Tainted: [W]=WARN [ 63.208266][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.208281][ T4582] Call Trace: [ 63.208288][ T4582] [ 63.208297][ T4582] __dump_stack+0x1d/0x30 [ 63.208323][ T4582] dump_stack_lvl+0x95/0xd0 [ 63.208344][ T4582] dump_stack+0x15/0x1b [ 63.208414][ T4582] should_fail_ex+0x265/0x280 [ 63.208436][ T4582] should_failslab+0x8c/0xb0 [ 63.208460][ T4582] kmem_cache_alloc_noprof+0x69/0x4b0 [ 63.208513][ T4582] ? skb_clone+0x151/0x1f0 [ 63.208622][ T4582] skb_clone+0x151/0x1f0 [ 63.208656][ T4582] __netlink_deliver_tap+0x2c9/0x500 [ 63.208769][ T4582] netlink_unicast+0x66b/0x690 [ 63.208806][ T4582] netlink_sendmsg+0x58b/0x6b0 [ 63.208919][ T4582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.208982][ T4582] __sock_sendmsg+0x145/0x180 [ 63.209006][ T4582] ____sys_sendmsg+0x31e/0x4a0 [ 63.209045][ T4582] ___sys_sendmsg+0x17b/0x1d0 [ 63.209096][ T4582] __x64_sys_sendmsg+0xd4/0x160 [ 63.209157][ T4582] x64_sys_call+0x17ba/0x3000 [ 63.209187][ T4582] do_syscall_64+0xca/0x2b0 [ 63.209222][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.209263][ T4582] RIP: 0033:0x7fe3b40bf749 [ 63.209281][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.209300][ T4582] RSP: 002b:00007fe3b2b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.209386][ T4582] RAX: ffffffffffffffda RBX: 00007fe3b4315fa0 RCX: 00007fe3b40bf749 [ 63.209401][ T4582] RDX: 000000000404c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 63.209416][ T4582] RBP: 00007fe3b2b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.209431][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.209442][ T4582] R13: 00007fe3b4316038 R14: 00007fe3b4315fa0 R15: 00007ffd5af68d08 [ 63.209461][ T4582] [ 63.457607][ T4592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'. [ 63.466640][ T4592] netem: unknown loss type 13 [ 63.471454][ T4592] netem: change failed [ 63.477963][ T4594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.496037][ T4594] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 63.535918][ T4600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.333'. [ 63.566013][ T4592] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.575545][ T4594] EXT4-fs: test_dummy_encryption option not supported [ 63.592243][ T4592] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.646033][ T4592] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.329: corrupted inode contents [ 63.684665][ T4592] EXT4-fs (loop2): Remounting filesystem read-only [ 63.699157][ T4592] EXT4-fs (loop2): 1 truncate cleaned up [ 63.705236][ T1651] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.715792][ T1651] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.778461][ T4612] EXT4-fs: Ignoring removed orlov option [ 63.795222][ T1651] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.864025][ T4604] Set syz1 is full, maxelem 65536 reached [ 63.870182][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 63.948879][ T4624] EXT4-fs: Ignoring removed bh option [ 63.972767][ T4612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'. [ 63.973132][ T4624] EXT4-fs: inline encryption not supported [ 63.975348][ T4624] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.975947][ T4624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 63.976667][ T4624] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.336: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.976915][ T4624] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.336: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.977678][ T4624] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.336: Failed to acquire dquot type 0 [ 63.978229][ T4624] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 63.978794][ T4624] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.336: mark_inode_dirty error [ 63.979136][ T4624] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 63.979169][ T4624] EXT4-fs (loop1): 1 orphan inode deleted [ 63.980453][ T4612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'. [ 63.995155][ T12] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.995332][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 64.005601][ T4624] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.336: Invalid inode table block 1 in block_group 0 [ 64.166062][ T4624] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 64.166970][ T4624] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.336: mark_inode_dirty error [ 64.211745][ T4638] lo speed is unknown, defaulting to 1000 [ 64.219954][ T4638] lo speed is unknown, defaulting to 1000 [ 64.220219][ T4638] lo speed is unknown, defaulting to 1000 [ 64.220614][ T4638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.221086][ T4638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.244969][ T4638] lo speed is unknown, defaulting to 1000 [ 64.246360][ T4638] lo speed is unknown, defaulting to 1000 [ 64.300310][ T4638] lo speed is unknown, defaulting to 1000 [ 64.301346][ T4638] lo speed is unknown, defaulting to 1000 [ 64.313971][ T4638] lo speed is unknown, defaulting to 1000 [ 64.381311][ T4646] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 64.391632][ T4646] sctp: [Deprecated]: syz.2.342 (pid 4646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.391632][ T4646] Use struct sctp_sack_info instead [ 64.408390][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 64.465269][ T4653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.473818][ T4652] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.494453][ T4653] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 64.525957][ T4652] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.551482][ T4658] EXT4-fs: Ignoring removed bh option [ 64.566564][ T4658] EXT4-fs: inline encryption not supported [ 64.584643][ T4658] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.598917][ T4658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 64.608927][ T4652] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.622657][ T4658] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.347: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.643594][ T4664] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.348: iget: bad extra_isize 90 (inode size 256) [ 64.660003][ T4664] EXT4-fs (loop3): Remounting filesystem read-only [ 64.666876][ T4658] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.347: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.674902][ T4664] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 64.689892][ T4668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.700556][ T4664] EXT4-fs (loop3): 1 orphan inode deleted [ 64.707295][ T4652] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.720230][ T4668] EXT4-fs (loop0): 1 truncate cleaned up [ 64.726263][ T4658] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.347: Failed to acquire dquot type 0 [ 64.750944][ T4658] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 64.765055][ T4664] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.348: Failed to acquire dquot type 1 [ 64.777673][ T4658] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.347: mark_inode_dirty error [ 64.790788][ T4664] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.348: Failed to acquire dquot type 1 [ 64.803417][ T4658] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 64.815186][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.819729][ T4658] EXT4-fs (loop4): 1 orphan inode deleted [ 64.829736][ T4664] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.348: bg 0: block 248: padding at end of block bitmap is not set [ 64.845266][ T2254] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.863314][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.877469][ T4664] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 64.886730][ T4664] __quota_error: 576 callbacks suppressed [ 64.886743][ T4664] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 64.902586][ T4664] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 64.902878][ T2254] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 64.912532][ T4664] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.348: Failed to acquire dquot type 1 [ 64.921085][ T2254] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 64.934933][ T4664] EXT4-fs (loop3): 1 orphan inode deleted [ 64.950879][ T4664] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.964706][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.974436][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975758][ T4668] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 64.993115][ T4668] SELinux: failed to load policy [ 65.037962][ T4680] set_capacity_and_notify: 17 callbacks suppressed [ 65.037980][ T4680] loop1: detected capacity change from 0 to 512 [ 65.055266][ T4680] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.352: iget: bad extra_isize 90 (inode size 256) [ 65.072859][ T4680] EXT4-fs (loop1): Remounting filesystem read-only [ 65.087043][ T4680] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 65.109976][ T4680] EXT4-fs (loop1): 1 orphan inode deleted [ 65.118087][ T4683] lo speed is unknown, defaulting to 1000 [ 65.141771][ T4680] loop1: detected capacity change from 0 to 512 [ 65.160632][ T4680] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 65.170720][ T4680] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.174160][ T4688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4688 comm=syz.0.354 [ 65.180672][ T4680] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.352: Failed to acquire dquot type 1 [ 65.225632][ T29] audit: type=1326 audit(1767057692.834:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 65.255139][ T4680] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 65.264261][ T29] audit: type=1326 audit(1767057692.854:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 65.265267][ T4680] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.288661][ T29] audit: type=1326 audit(1767057692.854:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 65.298482][ T4680] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.352: Failed to acquire dquot type 1 [ 65.300397][ T4680] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.352: bg 0: block 248: padding at end of block bitmap is not set [ 65.336655][ T4691] loop0: detected capacity change from 0 to 128 [ 65.348147][ T4680] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 65.372317][ T4691] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.422498][ T3319] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.435824][ T4680] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.352: Failed to acquire dquot type 1 [ 65.464775][ T3319] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 65.474373][ T4680] EXT4-fs (loop1): 1 orphan inode deleted [ 65.482562][ T4680] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.496829][ T3319] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 65.578859][ T4705] loop4: detected capacity change from 0 to 512 [ 65.605908][ T4705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.629245][ T4705] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 65.662324][ T4705] loop4: detected capacity change from 0 to 128 [ 65.669219][ T4705] EXT4-fs: test_dummy_encryption option not supported [ 65.798845][ T4716] loop4: detected capacity change from 0 to 1024 [ 65.829644][ T4716] EXT4-fs: Ignoring removed orlov option [ 65.873760][ T4716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.362'. [ 66.034766][ T10] Process accounting resumed [ 66.201695][ T4732] loop4: detected capacity change from 0 to 1024 [ 66.227994][ T4732] EXT4-fs: Ignoring removed nobh option [ 66.254804][ T4732] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 66.314789][ T4739] loop3: detected capacity change from 0 to 512 [ 66.329605][ T4739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.359132][ T4739] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 66.470005][ T4739] loop3: detected capacity change from 0 to 128 [ 66.494724][ T4739] EXT4-fs: test_dummy_encryption option not supported [ 66.511195][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop3 [ 66.670245][ T4753] loop1: detected capacity change from 0 to 1024 [ 66.695043][ T4753] EXT4-fs: Ignoring removed orlov option [ 66.757756][ T4758] EXT4-fs: Ignoring removed bh option [ 66.774735][ T4758] EXT4-fs: inline encryption not supported [ 66.775127][ T4758] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.776123][ T4758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 66.783357][ T4758] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.377: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.783449][ T4758] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.377: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.783614][ T4758] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.377: Failed to acquire dquot type 0 [ 66.783728][ T4758] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 66.783799][ T4758] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.377: mark_inode_dirty error [ 66.783942][ T4758] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 66.783975][ T4758] EXT4-fs (loop3): 1 orphan inode deleted [ 66.784958][ T124] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.785045][ T124] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 66.791799][ T4758] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.377: Invalid inode table block 1 in block_group 0 [ 66.791952][ T4758] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 66.792009][ T4758] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.377: mark_inode_dirty error [ 66.807922][ T4765] netlink: 'syz.1.378': attribute type 29 has an invalid length. [ 66.952982][ T4769] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.964100][ T4769] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.024940][ T4769] Symlink component flag not implemented [ 67.030716][ T4769] Symlink component flag not implemented [ 67.037128][ T4769] Symlink component flag not implemented (7) [ 67.043144][ T4769] Symlink component flag not implemented (116) [ 67.080759][ T4772] siw: device registration error -23 [ 67.139305][ T4777] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.382: iget: bad extra_isize 90 (inode size 256) [ 67.152973][ T4777] EXT4-fs (loop0): Remounting filesystem read-only [ 67.159852][ T4777] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 67.169018][ T4777] EXT4-fs (loop0): 1 orphan inode deleted [ 67.201055][ T4781] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.266360][ T4781] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.326054][ T4781] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.376116][ T4781] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.432296][ T2044] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.443619][ T2044] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.455659][ T2044] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.467571][ T2044] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526122][ T4786] __nla_validate_parse: 4 callbacks suppressed [ 67.526183][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 67.559580][ T4788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'. [ 67.598131][ T4793] EXT4-fs: Ignoring removed orlov option [ 67.620998][ T4793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.388'. [ 67.718967][ T4797] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.766459][ T4797] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.796814][ T4805] netlink: 664 bytes leftover after parsing attributes in process `+}[@'. [ 67.827335][ T4807] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.394: iget: bad extra_isize 90 (inode size 256) [ 67.846681][ T4807] EXT4-fs (loop2): Remounting filesystem read-only [ 67.857795][ T4807] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 67.867586][ T4807] EXT4-fs (loop2): 1 orphan inode deleted [ 67.874927][ T4810] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.395: iget: bad extra_isize 90 (inode size 256) [ 67.893533][ T4797] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.910275][ T4810] EXT4-fs (loop4): Remounting filesystem read-only [ 67.923870][ T4810] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 67.933343][ T4810] EXT4-fs (loop4): 1 orphan inode deleted [ 67.978602][ T4797] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.990368][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 68.006340][ T4810] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.395: Failed to acquire dquot type 1 [ 68.027243][ T4810] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.395: Failed to acquire dquot type 1 [ 68.028223][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 68.039232][ T4810] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.395: bg 0: block 248: padding at end of block bitmap is not set [ 68.061890][ T4810] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 68.070942][ T4810] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.395: Failed to acquire dquot type 1 [ 68.082437][ T4810] EXT4-fs (loop4): 1 orphan inode deleted [ 68.088847][ T4810] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.093590][ T4819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 68.138582][ T124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.158769][ T124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175439][ T124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.202743][ T124] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.223044][ T4822] EXT4-fs: Ignoring removed orlov option [ 68.230403][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 68.268262][ T4822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.399'. [ 68.281416][ T4826] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 68.289284][ T4826] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 68.297040][ T4826] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 68.327307][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 68.504657][ T4836] FAULT_INJECTION: forcing a failure. [ 68.504657][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 68.517387][ T4836] CPU: 0 UID: 0 PID: 4836 Comm: syz.4.404 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.517430][ T4836] Tainted: [W]=WARN [ 68.517436][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.517447][ T4836] Call Trace: [ 68.517452][ T4836] [ 68.517458][ T4836] __dump_stack+0x1d/0x30 [ 68.517544][ T4836] dump_stack_lvl+0x95/0xd0 [ 68.517568][ T4836] dump_stack+0x15/0x1b [ 68.517585][ T4836] should_fail_ex+0x265/0x280 [ 68.517606][ T4836] should_failslab+0x8c/0xb0 [ 68.517631][ T4836] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 68.517658][ T4836] ? __request_module+0x1df/0x3e0 [ 68.517684][ T4836] ? should_failslab+0x8c/0xb0 [ 68.517786][ T4836] kstrdup+0x3e/0xd0 [ 68.517891][ T4836] __request_module+0x1df/0x3e0 [ 68.517928][ T4836] ? capable+0x7c/0xb0 [ 68.518037][ T4836] dev_load+0x61/0xc0 [ 68.518073][ T4836] dev_ioctl+0x2d1/0x960 [ 68.518108][ T4836] sock_do_ioctl+0x197/0x220 [ 68.518162][ T4836] sock_ioctl+0x41b/0x610 [ 68.518192][ T4836] ? __pfx_sock_ioctl+0x10/0x10 [ 68.518289][ T4836] __se_sys_ioctl+0xce/0x140 [ 68.518394][ T4836] __x64_sys_ioctl+0x43/0x50 [ 68.518428][ T4836] x64_sys_call+0x14b0/0x3000 [ 68.518455][ T4836] do_syscall_64+0xca/0x2b0 [ 68.518489][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.518576][ T4836] RIP: 0033:0x7fbfd321f749 [ 68.518593][ T4836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.518611][ T4836] RSP: 002b:00007fbfd1c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.518629][ T4836] RAX: ffffffffffffffda RBX: 00007fbfd3475fa0 RCX: 00007fbfd321f749 [ 68.518648][ T4836] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 68.518659][ T4836] RBP: 00007fbfd1c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.518750][ T4836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.518763][ T4836] R13: 00007fbfd3476038 R14: 00007fbfd3475fa0 R15: 00007ffd47f85318 [ 68.518809][ T4836] [ 68.747948][ T4838] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 68.755671][ T4838] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 68.763416][ T4838] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 68.782258][ T4840] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.790494][ T4840] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.797584][ T4840] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.404: Failed to acquire dquot type 1 [ 68.809709][ T4840] EXT4-fs (loop4): Remounting filesystem read-only [ 68.831453][ T4840] EXT4-fs (loop4): 1 truncate cleaned up [ 68.864125][ T4836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=4836 comm=syz.4.404 [ 68.994890][ T4844] Set syz1 is full, maxelem 65536 reached [ 69.076184][ T4854] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.092000][ T4854] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.099680][ T4854] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.407: Failed to acquire dquot type 1 [ 69.111581][ T4854] EXT4-fs (loop4): Remounting filesystem read-only [ 69.118585][ T4854] EXT4-fs (loop4): 1 truncate cleaned up [ 69.131481][ T4848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=4848 comm=syz.4.407 [ 69.161828][ T4862] isofs_fill_super: get root inode failed [ 69.174916][ T4862] netlink: 'syz.2.412': attribute type 33 has an invalid length. [ 69.207534][ T4865] EXT4-fs: Ignoring removed orlov option [ 69.226432][ T4862] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.259069][ T4871] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.415: iget: bad extra_isize 90 (inode size 256) [ 69.276303][ T4871] EXT4-fs (loop3): Remounting filesystem read-only [ 69.285067][ T4871] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 69.294289][ T4871] EXT4-fs (loop3): 1 orphan inode deleted [ 69.305635][ T4871] EXT4-fs mount: 122 callbacks suppressed [ 69.305653][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.328308][ T4871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.356811][ T4874] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.369590][ T4874] EXT4-fs (loop4): 1 truncate cleaned up [ 69.378631][ T4874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.387491][ T4871] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.415: Failed to acquire dquot type 1 [ 69.419212][ T4871] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.415: Failed to acquire dquot type 1 [ 69.433806][ T4871] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.415: bg 0: block 248: padding at end of block bitmap is not set [ 69.448953][ T4871] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 69.469688][ T4880] EXT4-fs: Ignoring removed oldalloc option [ 69.476975][ T4871] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.415: Failed to acquire dquot type 1 [ 69.489832][ T4871] EXT4-fs (loop3): 1 orphan inode deleted [ 69.496194][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.508943][ T4871] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.520811][ T4880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.533439][ T4880] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.541774][ T4871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.583663][ T4874] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 69.599147][ T4874] SELinux: failed to load policy [ 69.626914][ T4885] dvmrp1: entered allmulticast mode [ 69.634066][ T4885] dvmrp1: left allmulticast mode [ 69.720565][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.983985][ T4896] EXT4-fs: Ignoring removed bh option [ 69.993836][ T4896] EXT4-fs: inline encryption not supported [ 69.999900][ T29] kauditd_printk_skb: 937 callbacks suppressed [ 69.999950][ T29] audit: type=1400 audit(1767057697.604:3757): avc: denied { write } for pid=4897 comm="syz.0.421" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.039575][ T4896] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.055833][ T4896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 70.065269][ T29] audit: type=1400 audit(1767057697.634:3758): avc: denied { ioctl } for pid=4897 comm="syz.0.421" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.111950][ T4896] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.422: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.147791][ T4896] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 70.167067][ T4896] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.422: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.196824][ T4896] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 70.205754][ T4896] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.422: Failed to acquire dquot type 0 [ 70.234756][ T4896] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 70.246041][ T4896] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.422: mark_inode_dirty error [ 70.270634][ T4896] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 70.284884][ T4896] EXT4-fs (loop4): 1 orphan inode deleted [ 70.291258][ T4896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.338345][ T4907] set_capacity_and_notify: 17 callbacks suppressed [ 70.338361][ T4907] loop0: detected capacity change from 0 to 512 [ 70.353978][ T2254] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.355475][ T4907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.381190][ T4907] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 70.389784][ T2254] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 70.398385][ T2254] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 70.427534][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.427934][ T4896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.446554][ T4896] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.422: Invalid inode table block 1 in block_group 0 [ 70.459552][ T4896] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 70.469725][ T4896] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.422: mark_inode_dirty error [ 70.500687][ T4908] loop0: detected capacity change from 0 to 128 [ 70.520102][ T4908] EXT4-fs: test_dummy_encryption option not supported [ 70.534108][ T4140] udevd[4140]: incorrect ext4 checksum on /dev/loop0 [ 70.537259][ T4912] loop2: detected capacity change from 0 to 1764 [ 70.556073][ T4912] isofs_fill_super: get root inode failed [ 70.562549][ T4912] netlink: 'syz.2.427': attribute type 33 has an invalid length. [ 70.621692][ T4912] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.661089][ T4901] pim6reg: entered allmulticast mode [ 70.668411][ T4901] pim6reg: left allmulticast mode [ 70.717778][ T4918] loop2: detected capacity change from 0 to 1764 [ 70.729589][ T4918] isofs_fill_super: get root inode failed [ 70.752393][ T4918] netlink: 'syz.2.428': attribute type 33 has an invalid length. [ 70.803436][ T4926] loop2: detected capacity change from 0 to 512 [ 70.817275][ T4926] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.431: iget: bad extra_isize 90 (inode size 256) [ 70.845687][ T4926] EXT4-fs (loop2): Remounting filesystem read-only [ 70.852391][ T4926] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 70.861630][ T4926] EXT4-fs (loop2): 1 orphan inode deleted [ 70.868197][ T4926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.878467][ T4934] loop4: detected capacity change from 0 to 512 [ 70.912043][ T4934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.433: iget: bad extra_isize 90 (inode size 256) [ 70.912469][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.937552][ T4934] EXT4-fs (loop4): Remounting filesystem read-only [ 70.960945][ T4934] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 70.981071][ T4934] EXT4-fs (loop4): 1 orphan inode deleted [ 70.988849][ T4934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.008357][ T4941] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 71.028582][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.046177][ T4941] loop1: detected capacity change from 0 to 512 [ 71.054402][ T29] audit: type=1326 audit(1767057698.654:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 71.086803][ T4941] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.435: iget: bad extra_isize 90 (inode size 256) [ 71.100333][ T29] audit: type=1326 audit(1767057698.664:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 71.123812][ T29] audit: type=1326 audit(1767057698.664:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 71.147176][ T4941] EXT4-fs (loop1): Remounting filesystem read-only [ 71.147195][ T29] audit: type=1326 audit(1767057698.664:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 71.157550][ T4941] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 71.177124][ T29] audit: type=1326 audit(1767057698.684:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 71.220005][ T4941] EXT4-fs (loop1): 1 orphan inode deleted [ 71.226591][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.247305][ T4941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.267699][ T4951] loop2: detected capacity change from 0 to 512 [ 71.282161][ T4951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.307849][ T4951] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 71.340248][ T4941] loop1: detected capacity change from 0 to 512 [ 71.360745][ T4951] loop2: detected capacity change from 0 to 128 [ 71.378805][ T4941] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.435: Failed to acquire dquot type 1 [ 71.390708][ T4951] EXT4-fs: test_dummy_encryption option not supported [ 71.399028][ T4941] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.435: Failed to acquire dquot type 1 [ 71.415622][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop2 [ 71.445834][ T4941] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.435: bg 0: block 248: padding at end of block bitmap is not set [ 71.463065][ T4941] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 71.487970][ T4941] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.435: Failed to acquire dquot type 1 [ 71.536927][ T4974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.558544][ T4974] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 71.567666][ T4941] EXT4-fs (loop1): 1 orphan inode deleted [ 71.574178][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.593332][ T4941] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.605388][ T4941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.781991][ T4985] EXT4-fs: test_dummy_encryption option not supported [ 71.797188][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop4 [ 72.007115][ T5015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.048739][ T5015] EXT4-fs (loop3): 1 truncate cleaned up [ 72.070912][ T5015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.206497][ T5015] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 72.228772][ T5032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.242391][ T5015] SELinux: failed to load policy [ 72.265273][ T5032] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 72.308329][ T5032] EXT4-fs: test_dummy_encryption option not supported [ 72.334265][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop0 [ 72.359612][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.408295][ T5039] dvmrp1: entered allmulticast mode [ 72.418528][ T5041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.434372][ T5039] dvmrp1: left allmulticast mode [ 72.439647][ T5041] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 72.556659][ T5041] EXT4-fs: test_dummy_encryption option not supported [ 72.565949][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop0 [ 72.704693][ T5057] EXT4-fs: Ignoring removed bh option [ 72.730954][ T5059] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 72.744480][ T5057] EXT4-fs: inline encryption not supported [ 72.760319][ T5057] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.796686][ T5059] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.468: iget: bad extra_isize 90 (inode size 256) [ 72.820912][ T5057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 72.829469][ T5059] EXT4-fs (loop3): Remounting filesystem read-only [ 72.839362][ T5057] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.467: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.854567][ T5059] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 72.872663][ T4972] syz.2.443 (4972) used greatest stack depth: 7304 bytes left [ 72.884207][ T5059] EXT4-fs (loop3): 1 orphan inode deleted [ 72.890670][ T5059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.902831][ T5057] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.467: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.917295][ T5057] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.467: Failed to acquire dquot type 0 [ 72.930217][ T5057] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 72.944698][ T5059] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.962155][ T5057] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.467: mark_inode_dirty error [ 72.978046][ T5057] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 73.017817][ T5057] EXT4-fs (loop0): 1 orphan inode deleted [ 73.023800][ T5069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.034600][ T2071] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.049658][ T5057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.070500][ T5069] EXT4-fs (loop1): 1 truncate cleaned up [ 73.080830][ T5069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.094931][ T5073] __nla_validate_parse: 14 callbacks suppressed [ 73.094944][ T5073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 73.112838][ T2071] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 73.113898][ T5059] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.468: Failed to acquire dquot type 1 [ 73.146765][ T5073] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 73.154547][ T5073] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 73.162259][ T5073] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 73.167460][ T5057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.171106][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 73.184652][ T5059] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.468: Failed to acquire dquot type 1 [ 73.215369][ T5059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.468: bg 0: block 248: padding at end of block bitmap is not set [ 73.233145][ T5059] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 73.242814][ T5059] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.468: Failed to acquire dquot type 1 [ 73.246226][ T5069] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 73.256864][ T5059] EXT4-fs (loop3): 1 orphan inode deleted [ 73.270677][ T5059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.286336][ T5059] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.298699][ T5057] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.467: Invalid inode table block 1 in block_group 0 [ 73.309692][ T5069] SELinux: failed to load policy [ 73.316698][ T5057] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 73.326955][ T5059] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.337487][ T5057] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.467: mark_inode_dirty error [ 73.356014][ T5079] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 73.391747][ T5081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 73.420321][ T5079] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.430737][ T3502] lo speed is unknown, defaulting to 1000 [ 73.441117][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.452170][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 73.462223][ T5079] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.477814][ T5079] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.473: Allocating blocks 41-42 which overlap fs metadata [ 73.503660][ T5079] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.473: Allocating blocks 41-42 which overlap fs metadata [ 73.525249][ T5079] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.473: Failed to acquire dquot type 1 [ 73.546435][ T5079] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 73.562489][ T5079] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.473: corrupted inode contents [ 73.574712][ T5089] 9p: Could not find request transport: eÖ Á´4Á=ë¢å¡äŽ³‡†¿'1 º‘ª½aVC"Mÿë50x0000000000000004 [ 73.576896][ T5079] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.473: mark_inode_dirty error [ 73.599286][ T5079] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.473: corrupted inode contents [ 73.614912][ T5079] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.473: mark_inode_dirty error [ 73.629833][ T5079] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.473: corrupted inode contents [ 73.643796][ T5079] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 73.656627][ T5079] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.473: corrupted inode contents [ 73.690605][ T5093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.694868][ T5079] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.473: mark_inode_dirty error [ 73.712861][ T5079] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 73.722451][ T5079] EXT4-fs (loop4): 1 truncate cleaned up [ 73.733613][ T5079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.746431][ T5093] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 73.790184][ T5093] EXT4-fs: test_dummy_encryption option not supported [ 73.809370][ T5106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.821852][ T5106] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 73.842036][ T5110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.867361][ T5110] EXT4-fs (loop0): 1 truncate cleaned up [ 73.883006][ T5110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.909192][ T5106] EXT4-fs: test_dummy_encryption option not supported [ 73.918081][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop2 [ 73.948237][ T5117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.979550][ T5120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'. [ 73.990669][ T5117] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 73.999236][ T5110] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 74.014055][ T5122] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.488: iget: bad extra_isize 90 (inode size 256) [ 74.027789][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 74.028471][ T5110] SELinux: failed to load policy [ 74.051820][ T5122] EXT4-fs (loop2): Remounting filesystem read-only [ 74.071481][ T5122] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 74.080560][ T5122] EXT4-fs (loop2): 1 orphan inode deleted [ 74.087065][ T5122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.122760][ T5122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.138654][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.182992][ T5117] EXT4-fs: test_dummy_encryption option not supported [ 74.190980][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop3 [ 74.198491][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.234170][ T5122] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.488: Failed to acquire dquot type 1 [ 74.262842][ T5122] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.488: Failed to acquire dquot type 1 [ 74.296287][ T5122] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.488: bg 0: block 248: padding at end of block bitmap is not set [ 74.339270][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 74.349959][ T5122] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 74.383079][ T5122] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.488: Failed to acquire dquot type 1 [ 74.408405][ T5122] EXT4-fs (loop2): 1 orphan inode deleted [ 74.414807][ T5122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.427560][ T5122] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.439117][ T5122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.450062][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 74.570554][ T5126] Set syz1 is full, maxelem 65536 reached [ 74.594487][ T5150] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.618263][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 74.636307][ T5150] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.656447][ T5157] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 74.670286][ T5157] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.686986][ T5157] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.694043][ T5157] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.501: Allocating blocks 41-42 which overlap fs metadata [ 74.711729][ T5157] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.501: Failed to acquire dquot type 1 [ 74.724016][ T5157] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 74.748784][ T5150] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.759846][ T5157] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.501: corrupted inode contents [ 74.772065][ T5157] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.501: mark_inode_dirty error [ 74.791530][ T5157] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.501: corrupted inode contents [ 74.806051][ T5170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.813973][ T5169] FAULT_INJECTION: forcing a failure. [ 74.813973][ T5169] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.827161][ T5169] CPU: 0 UID: 0 PID: 5169 Comm: syz.3.504 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.827195][ T5169] Tainted: [W]=WARN [ 74.827202][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.827216][ T5169] Call Trace: [ 74.827224][ T5169] [ 74.827232][ T5169] __dump_stack+0x1d/0x30 [ 74.827343][ T5169] dump_stack_lvl+0x95/0xd0 [ 74.827363][ T5169] dump_stack+0x15/0x1b [ 74.827381][ T5169] should_fail_ex+0x265/0x280 [ 74.827529][ T5169] should_fail+0xb/0x20 [ 74.827547][ T5169] should_fail_usercopy+0x1a/0x20 [ 74.827570][ T5169] strncpy_from_user+0x27/0x260 [ 74.827601][ T5169] getname_flags+0xae/0x3b0 [ 74.827707][ T5169] __x64_sys_mknod+0x40/0x60 [ 74.827723][ T5169] x64_sys_call+0x2755/0x3000 [ 74.827760][ T5169] do_syscall_64+0xca/0x2b0 [ 74.827791][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.827810][ T5169] RIP: 0033:0x7fea6fe5f749 [ 74.827823][ T5169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.827839][ T5169] RSP: 002b:00007fea6e8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 74.827962][ T5169] RAX: ffffffffffffffda RBX: 00007fea700b5fa0 RCX: 00007fea6fe5f749 [ 74.828047][ T5169] RDX: 0000000000000004 RSI: 0000000008001420 RDI: 0000200000000080 [ 74.828058][ T5169] RBP: 00007fea6e8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.828092][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.828102][ T5169] R13: 00007fea700b6038 R14: 00007fea700b5fa0 R15: 00007ffe1e19d8d8 [ 74.828119][ T5169] [ 74.830126][ T5157] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.501: mark_inode_dirty error [ 74.830209][ T5170] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 74.881618][ T5174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.940574][ T5157] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.501: corrupted inode contents [ 74.942160][ T5174] EXT4-fs: Ignoring removed nobh option [ 74.953325][ T5157] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 74.976566][ T5150] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.983926][ T5157] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.501: corrupted inode contents [ 75.067176][ T5174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.084200][ T5157] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.501: mark_inode_dirty error [ 75.099114][ T5157] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 75.104064][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 75.104102][ T29] audit: type=1400 audit(1767057702.704:3921): avc: denied { create } for pid=5173 comm="syz.1.506" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.110089][ T5157] EXT4-fs (loop4): 1 truncate cleaned up [ 75.141190][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.165657][ T2071] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.171401][ T5178] EXT4-fs: test_dummy_encryption option not supported [ 75.182393][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop2 [ 75.195283][ T29] audit: type=1326 audit(1767057702.804:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.225538][ T2071] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.260084][ T2071] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.268556][ T2071] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.276876][ T29] audit: type=1326 audit(1767057702.824:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.300320][ T29] audit: type=1326 audit(1767057702.824:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.323696][ T29] audit: type=1326 audit(1767057702.824:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.347178][ T29] audit: type=1326 audit(1767057702.824:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.370562][ T29] audit: type=1326 audit(1767057702.824:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.388143][ T5186] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.506: corrupted in-inode xattr: invalid ea_ino [ 75.394053][ T29] audit: type=1326 audit(1767057702.824:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.430684][ T29] audit: type=1326 audit(1767057702.824:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.454078][ T29] audit: type=1326 audit(1767057702.824:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 75.478982][ T5186] EXT4-fs (loop1): Remounting filesystem read-only [ 75.496320][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.511254][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.615615][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 75.687014][ T5205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.703568][ T5205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.780386][ T5193] Set syz1 is full, maxelem 65536 reached [ 75.831486][ T5212] netlink: 'syz.3.516': attribute type 20 has an invalid length. [ 75.846812][ T5214] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 75.869381][ T2254] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.869393][ T5212] netlink: 'syz.3.516': attribute type 20 has an invalid length. [ 75.899566][ T5214] set_capacity_and_notify: 25 callbacks suppressed [ 75.899589][ T5214] loop1: detected capacity change from 0 to 512 [ 75.903209][ T2254] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.925327][ T5214] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.935654][ T2254] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.973597][ T5224] loop4: detected capacity change from 0 to 512 [ 75.980710][ T2254] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.000443][ T5224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.007735][ T5214] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.017334][ T5224] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 76.031391][ T5214] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.519: Allocating blocks 41-42 which overlap fs metadata [ 76.075164][ T5224] loop4: detected capacity change from 0 to 128 [ 76.084461][ T5214] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.519: Failed to acquire dquot type 1 [ 76.096466][ T5224] EXT4-fs: test_dummy_encryption option not supported [ 76.107948][ T5214] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.109535][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop4 [ 76.130397][ T5229] SELinux: failed to load policy [ 76.137161][ T5214] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.519: corrupted inode contents [ 76.169272][ T5214] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.519: mark_inode_dirty error [ 76.200300][ T5214] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.519: corrupted inode contents [ 76.200475][ T5214] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.519: mark_inode_dirty error [ 76.200709][ T5214] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.519: corrupted inode contents [ 76.264626][ T5214] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 76.273402][ T5214] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.519: corrupted inode contents [ 76.286485][ T5214] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.519: mark_inode_dirty error [ 76.300462][ T5214] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 76.309919][ T5214] EXT4-fs (loop1): 1 truncate cleaned up [ 76.316252][ T5214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.316442][ T5237] loop2: detected capacity change from 0 to 1764 [ 76.344712][ T5237] isofs_fill_super: get root inode failed [ 76.352944][ T5237] netlink: 'syz.2.527': attribute type 33 has an invalid length. [ 76.363461][ T5237] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.409862][ C1] hrtimer: interrupt took 37253 ns [ 76.521790][ T5251] FAULT_INJECTION: forcing a failure. [ 76.521790][ T5251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.535099][ T5251] CPU: 1 UID: 0 PID: 5251 Comm: syz.2.530 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.535128][ T5251] Tainted: [W]=WARN [ 76.535135][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.535146][ T5251] Call Trace: [ 76.535153][ T5251] [ 76.535162][ T5251] __dump_stack+0x1d/0x30 [ 76.535254][ T5251] dump_stack_lvl+0x95/0xd0 [ 76.535278][ T5251] dump_stack+0x15/0x1b [ 76.535336][ T5251] should_fail_ex+0x265/0x280 [ 76.535363][ T5251] should_fail+0xb/0x20 [ 76.535387][ T5251] should_fail_usercopy+0x1a/0x20 [ 76.535489][ T5251] _copy_to_user+0x20/0xa0 [ 76.535522][ T5251] simple_read_from_buffer+0xb5/0x130 [ 76.535543][ T5251] proc_fail_nth_read+0x10e/0x150 [ 76.535583][ T5251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.535608][ T5251] vfs_read+0x1a8/0x770 [ 76.535623][ T5251] ? __rcu_read_unlock+0x4f/0x70 [ 76.535640][ T5251] ? __fget_files+0x184/0x1c0 [ 76.535732][ T5251] ? mutex_lock+0x58/0x90 [ 76.535756][ T5251] ksys_read+0xda/0x1a0 [ 76.535902][ T5251] __x64_sys_read+0x40/0x50 [ 76.535918][ T5251] x64_sys_call+0x2889/0x3000 [ 76.535939][ T5251] do_syscall_64+0xca/0x2b0 [ 76.535969][ T5251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.536045][ T5251] RIP: 0033:0x7fe3b40be15c [ 76.536060][ T5251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.536077][ T5251] RSP: 002b:00007fe3b29fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.536095][ T5251] RAX: ffffffffffffffda RBX: 00007fe3b4316090 RCX: 00007fe3b40be15c [ 76.536107][ T5251] RDX: 000000000000000f RSI: 00007fe3b29fd0a0 RDI: 000000000000000c [ 76.536133][ T5251] RBP: 00007fe3b29fd090 R08: 0000000000000000 R09: 0000000000000000 [ 76.536144][ T5251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.536156][ T5251] R13: 00007fe3b4316128 R14: 00007fe3b4316090 R15: 00007ffd5af68d08 [ 76.536174][ T5251] [ 76.536542][ T5249] loop0: detected capacity change from 0 to 512 [ 76.756689][ T5257] loop2: detected capacity change from 0 to 1024 [ 76.763465][ T5257] EXT4-fs: Ignoring removed bh option [ 76.773383][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.797160][ T5257] EXT4-fs: inline encryption not supported [ 76.810155][ T5249] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.532: iget: bad extra_isize 90 (inode size 256) [ 76.864924][ T5257] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.878460][ T5249] EXT4-fs (loop0): Remounting filesystem read-only [ 76.897087][ T5262] loop1: detected capacity change from 0 to 512 [ 76.905070][ T5257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 76.916563][ T5249] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 76.926767][ T5257] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.535: lblock 2 mapped to illegal pblock 2 (length 1) [ 76.956032][ T5249] EXT4-fs (loop0): 1 orphan inode deleted [ 76.962709][ T5249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.975836][ T5257] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.535: lblock 0 mapped to illegal pblock 48 (length 1) [ 76.990626][ T5249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.001647][ T5257] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.535: Failed to acquire dquot type 0 [ 77.016825][ T5269] loop3: detected capacity change from 0 to 512 [ 77.025347][ T5269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.032827][ T5257] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 77.042610][ T5269] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 77.062724][ T5257] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.535: mark_inode_dirty error [ 77.074914][ T5257] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 77.087655][ T5257] EXT4-fs (loop2): 1 orphan inode deleted [ 77.094038][ T5257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.108080][ T2044] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.130949][ T5262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.143598][ T5262] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.155191][ T2044] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 77.266439][ T5257] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.296063][ T5249] loop0: detected capacity change from 0 to 512 [ 77.308429][ T5269] loop3: detected capacity change from 0 to 128 [ 77.326087][ T5257] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.535: Invalid inode table block 1 in block_group 0 [ 77.345538][ T5269] EXT4-fs: test_dummy_encryption option not supported [ 77.360232][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop3 [ 77.376023][ T5257] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 77.377005][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.397548][ T5249] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.532: Failed to acquire dquot type 1 [ 77.409456][ T5257] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.535: mark_inode_dirty error [ 77.448005][ T5242] Set syz1 is full, maxelem 65536 reached [ 77.455001][ T5249] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.532: Failed to acquire dquot type 1 [ 77.507128][ T5249] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.532: bg 0: block 248: padding at end of block bitmap is not set [ 77.554578][ T5249] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 77.573349][ T5249] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.532: Failed to acquire dquot type 1 [ 77.585291][ T5249] EXT4-fs (loop0): 1 orphan inode deleted [ 77.592129][ T5249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.607523][ T5286] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 77.615213][ T5249] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.627763][ T5249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.649574][ T5286] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.681888][ T5286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.723270][ T5286] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.544: Allocating blocks 41-42 which overlap fs metadata [ 77.743157][ T5286] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.544: Allocating blocks 41-42 which overlap fs metadata [ 77.844950][ T5286] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.544: Failed to acquire dquot type 1 [ 77.863682][ T5300] lo speed is unknown, defaulting to 1000 [ 77.899195][ T5286] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 77.954448][ T5286] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.544: corrupted inode contents [ 77.972871][ T5309] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.990880][ T5286] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.544: mark_inode_dirty error [ 78.044846][ T5286] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.544: corrupted inode contents [ 78.058613][ T5309] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.082021][ T5286] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.544: mark_inode_dirty error [ 78.114043][ T5286] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.544: corrupted inode contents [ 78.133256][ T5286] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 78.152186][ T5309] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.171215][ T5286] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.544: corrupted inode contents [ 78.197396][ T5286] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.544: mark_inode_dirty error [ 78.212162][ T5286] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 78.227154][ T5309] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.244912][ T5286] EXT4-fs (loop1): 1 truncate cleaned up [ 78.255978][ T5286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.329330][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.347195][ T5316] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.359842][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.378732][ T5316] netlink: 'syz.3.556': attribute type 13 has an invalid length. [ 78.402806][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.475025][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.482348][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.506378][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.583351][ T5320] __nla_validate_parse: 11 callbacks suppressed [ 78.583368][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 78.600463][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.685732][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 78.694796][ T1651] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.703188][ T1651] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.776286][ T1651] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.784812][ T1651] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.823729][ T1651] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.832180][ T1651] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.846633][ T5327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'. [ 78.895578][ T124] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.903969][ T124] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.933815][ T124] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.979247][ T5337] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 79.021256][ T5339] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 79.066867][ T5337] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.562: iget: bad extra_isize 90 (inode size 256) [ 79.153224][ T5337] EXT4-fs (loop3): Remounting filesystem read-only [ 79.170328][ T5337] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 79.179476][ T5337] EXT4-fs (loop3): 1 orphan inode deleted [ 79.185488][ T5339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.563: iget: bad extra_isize 90 (inode size 256) [ 79.186432][ T5337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.256016][ T5312] Set syz1 is full, maxelem 65536 reached [ 79.262210][ T5339] EXT4-fs (loop4): Remounting filesystem read-only [ 79.262973][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.309896][ T5339] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 79.313973][ T5348] netlink: 'syz.0.566': attribute type 29 has an invalid length. [ 79.339262][ T5339] EXT4-fs (loop4): 1 orphan inode deleted [ 79.360826][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.376720][ T5348] netlink: 'syz.0.566': attribute type 29 has an invalid length. [ 79.397236][ T5348] netlink: 496 bytes leftover after parsing attributes in process `syz.0.566'. [ 79.411555][ T5339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.447313][ T5337] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.562: Failed to acquire dquot type 1 [ 79.484135][ T5337] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.562: Failed to acquire dquot type 1 [ 79.499722][ T5337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.562: bg 0: block 248: padding at end of block bitmap is not set [ 79.523244][ T5337] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 79.540240][ T5356] FAULT_INJECTION: forcing a failure. [ 79.540240][ T5356] name failslab, interval 1, probability 0, space 0, times 0 [ 79.552929][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.567 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.552970][ T5356] Tainted: [W]=WARN [ 79.553029][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.553046][ T5356] Call Trace: [ 79.553054][ T5356] [ 79.553114][ T5356] __dump_stack+0x1d/0x30 [ 79.553146][ T5356] dump_stack_lvl+0x95/0xd0 [ 79.553171][ T5356] dump_stack+0x15/0x1b [ 79.553197][ T5356] should_fail_ex+0x265/0x280 [ 79.553227][ T5356] should_failslab+0x8c/0xb0 [ 79.553338][ T5356] __kvmalloc_node_noprof+0x149/0x6b0 [ 79.553372][ T5356] ? vmemdup_user+0x2b/0xd0 [ 79.553442][ T5356] ? should_fail_usercopy+0x1a/0x20 [ 79.553477][ T5356] vmemdup_user+0x2b/0xd0 [ 79.553495][ T5356] path_setxattrat+0x1b6/0x310 [ 79.553543][ T5356] __x64_sys_fsetxattr+0x6b/0x80 [ 79.553663][ T5356] x64_sys_call+0x23c4/0x3000 [ 79.553693][ T5356] do_syscall_64+0xca/0x2b0 [ 79.553791][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.553824][ T5356] RIP: 0033:0x7fcf658cf749 [ 79.553863][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.553881][ T5356] RSP: 002b:00007fcf64316038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 79.553965][ T5356] RAX: ffffffffffffffda RBX: 00007fcf65b26090 RCX: 00007fcf658cf749 [ 79.553981][ T5356] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000006 [ 79.553996][ T5356] RBP: 00007fcf64316090 R08: 0000000000000002 R09: 0000000000000000 [ 79.554028][ T5356] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000000001 [ 79.554044][ T5356] R13: 00007fcf65b26128 R14: 00007fcf65b26090 R15: 00007ffd0b8ec078 [ 79.554068][ T5356] [ 79.591132][ T5339] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.563: Failed to acquire dquot type 1 [ 79.621358][ T5337] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.562: Failed to acquire dquot type 1 [ 79.758713][ T5339] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.563: Failed to acquire dquot type 1 [ 79.772587][ T5339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.563: bg 0: block 248: padding at end of block bitmap is not set [ 79.817633][ T5339] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 79.843577][ T5339] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.563: Failed to acquire dquot type 1 [ 79.854971][ T5337] EXT4-fs (loop3): 1 orphan inode deleted [ 79.861175][ T5337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.873919][ T5339] EXT4-fs (loop4): 1 orphan inode deleted [ 79.880179][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.892820][ T5337] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.903911][ T5339] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.915268][ T5339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.925311][ T5362] FAULT_INJECTION: forcing a failure. [ 79.925311][ T5362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.926021][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.938506][ T5362] CPU: 1 UID: 0 PID: 5362 Comm: syz.0.569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.938602][ T5362] Tainted: [W]=WARN [ 79.938633][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.938698][ T5362] Call Trace: [ 79.938718][ T5362] [ 79.938747][ T5362] __dump_stack+0x1d/0x30 [ 79.938828][ T5362] dump_stack_lvl+0x95/0xd0 [ 79.938952][ T5362] dump_stack+0x15/0x1b [ 79.939033][ T5362] should_fail_ex+0x265/0x280 [ 79.939113][ T5362] should_fail+0xb/0x20 [ 79.939175][ T5362] should_fail_usercopy+0x1a/0x20 [ 79.939334][ T5362] _copy_from_user+0x1c/0xb0 [ 79.939506][ T5362] __copy_msghdr+0x244/0x300 [ 79.939607][ T5362] ___sys_sendmsg+0x109/0x1d0 [ 79.939731][ T5362] __sys_sendmmsg+0x178/0x300 [ 79.939853][ T5362] __x64_sys_sendmmsg+0x57/0x70 [ 79.939941][ T5362] x64_sys_call+0x1e28/0x3000 [ 79.940112][ T5362] do_syscall_64+0xca/0x2b0 [ 79.940270][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.940340][ T5362] RIP: 0033:0x7fcf658cf749 [ 79.940423][ T5362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.940481][ T5362] RSP: 002b:00007fcf64337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.940528][ T5362] RAX: ffffffffffffffda RBX: 00007fcf65b25fa0 RCX: 00007fcf658cf749 [ 79.940540][ T5362] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 79.940610][ T5362] RBP: 00007fcf64337090 R08: 0000000000000000 R09: 0000000000000000 [ 79.940650][ T5362] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 79.940684][ T5362] R13: 00007fcf65b26038 R14: 00007fcf65b25fa0 R15: 00007ffd0b8ec078 [ 79.940748][ T5362] [ 80.062610][ T5366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.128932][ T5366] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 80.191048][ T5366] EXT4-fs: test_dummy_encryption option not supported [ 80.613730][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 80.613748][ T29] audit: type=1400 audit(1767057708.214:4162): avc: denied { write } for pid=5384 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.082080][ T5391] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.107589][ T5391] EXT4-fs (loop0): 1 truncate cleaned up [ 81.140746][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.205576][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'. [ 81.236170][ T5396] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 81.243849][ T5396] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 81.251546][ T5396] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 81.276284][ T29] audit: type=1400 audit(1767057708.884:4163): avc: denied { read append open } for pid=5390 comm="syz.0.579" path="/122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.291202][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 81.403235][ T29] audit: type=1400 audit(1767057709.004:4164): avc: denied { map } for pid=5390 comm="syz.0.579" path="/122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.449634][ T29] audit: type=1400 audit(1767057709.004:4165): avc: denied { write } for pid=5390 comm="syz.0.579" path="/122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.536330][ T5391] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 81.561552][ T5391] SELinux: failed to load policy [ 81.649285][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.812464][ T5407] set_capacity_and_notify: 8 callbacks suppressed [ 81.812484][ T5407] loop1: detected capacity change from 0 to 512 [ 81.844725][ T5407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.866235][ T5407] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 81.882588][ T5407] loop1: detected capacity change from 0 to 128 [ 81.907972][ T5407] EXT4-fs: test_dummy_encryption option not supported [ 81.917499][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop1 [ 81.938359][ T29] audit: type=1326 audit(1767057709.544:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 81.961900][ T29] audit: type=1326 audit(1767057709.544:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 82.081013][ T29] audit: type=1326 audit(1767057709.544:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 82.104439][ T29] audit: type=1326 audit(1767057709.544:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 82.127822][ T29] audit: type=1326 audit(1767057709.544:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 82.151302][ T29] audit: type=1326 audit(1767057709.624:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea6fe5f749 code=0x7ffc0000 [ 82.273301][ T5401] Set syz1 is full, maxelem 65536 reached [ 82.305344][ T5423] syzkaller0: entered promiscuous mode [ 82.310869][ T5423] syzkaller0: entered allmulticast mode [ 82.321178][ T5427] loop2: detected capacity change from 0 to 512 [ 82.328312][ T5427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.352911][ T5427] EXT4-fs (loop2): 1 truncate cleaned up [ 82.363566][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 82.374875][ T5427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.389636][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 82.402735][ T5429] lo speed is unknown, defaulting to 1000 [ 82.469544][ T5436] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 82.523103][ T5436] loop1: detected capacity change from 0 to 512 [ 82.604058][ T5427] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 82.658896][ T5436] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.595: iget: bad extra_isize 90 (inode size 256) [ 82.693888][ T5427] SELinux: failed to load policy [ 82.712776][ T5438] Set syz1 is full, maxelem 65536 reached [ 82.718829][ T5436] EXT4-fs (loop1): Remounting filesystem read-only [ 82.725651][ T5445] loop0: detected capacity change from 0 to 512 [ 82.732399][ T5445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.739766][ T5445] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 82.770020][ T5436] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 82.792355][ T5447] loop4: detected capacity change from 0 to 512 [ 82.831278][ T5447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.848128][ T5436] EXT4-fs (loop1): 1 orphan inode deleted [ 82.851306][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 82.865515][ T5447] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 82.879653][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.982891][ T5447] loop4: detected capacity change from 0 to 128 [ 82.994151][ T5447] EXT4-fs: test_dummy_encryption option not supported [ 83.018259][ T5457] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 83.025970][ T5457] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 83.033612][ T5457] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 83.038713][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 83.101867][ T5436] loop1: detected capacity change from 0 to 512 [ 83.126733][ T5436] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.595: Failed to acquire dquot type 1 [ 83.147884][ T5436] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.595: Failed to acquire dquot type 1 [ 83.167246][ T5436] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.595: bg 0: block 248: padding at end of block bitmap is not set [ 83.198025][ T5454] Set syz1 is full, maxelem 65536 reached [ 83.204064][ T5436] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 83.214872][ T5436] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.595: Failed to acquire dquot type 1 [ 83.235740][ T5466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.244925][ T5436] EXT4-fs (loop1): 1 orphan inode deleted [ 83.252698][ T5436] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.334630][ T5472] netlink: 'syz.0.607': attribute type 29 has an invalid length. [ 83.349686][ T5474] loop2: detected capacity change from 0 to 512 [ 83.362563][ T5476] loop1: detected capacity change from 0 to 512 [ 83.376368][ T5466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.445177][ T5466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.496299][ T5466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.509588][ T5484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.520763][ T5484] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 83.603844][ T2254] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.618370][ T5493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.651070][ T2254] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651151][ T2254] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651180][ T2254] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.674775][ T5493] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 83.748765][ T5498] __nla_validate_parse: 1 callbacks suppressed [ 83.748783][ T5498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.617'. [ 83.784980][ T5494] Set syz1 is full, maxelem 65536 reached [ 83.853454][ T5493] EXT4-fs: test_dummy_encryption option not supported [ 83.891943][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 83.915895][ T5503] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 83.923757][ T5503] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 83.931449][ T5503] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 83.941876][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 83.959559][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 83.992193][ T5512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'. [ 84.016631][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 84.036621][ T5515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.062634][ T5515] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 84.112657][ T5521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.135861][ T5521] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 84.198202][ T5527] EXT4-fs: test_dummy_encryption option not supported [ 84.217698][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop3 [ 84.225839][ T5532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.628'. [ 84.344611][ T5540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.393867][ T5540] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 84.495647][ T5543] EXT4-fs: test_dummy_encryption option not supported [ 84.510468][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop2 [ 84.553385][ T5538] Set syz1 is full, maxelem 65536 reached [ 84.557585][ T5548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 84.578318][ T5549] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 84.590480][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 84.608375][ T5549] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.635: iget: bad extra_isize 90 (inode size 256) [ 84.624044][ T5549] EXT4-fs (loop0): Remounting filesystem read-only [ 84.630722][ T5549] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 84.641210][ T5549] EXT4-fs (loop0): 1 orphan inode deleted [ 84.650937][ T5551] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 84.658686][ T5551] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 84.666414][ T5551] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 84.697891][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 84.735429][ T5559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.743703][ T5559] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 84.758156][ T5560] EXT4-fs: Ignoring removed bh option [ 84.763635][ T5560] EXT4-fs: inline encryption not supported [ 84.765830][ T5559] EXT4-fs: test_dummy_encryption option not supported [ 84.805193][ T5560] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.820975][ T5549] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.635: Failed to acquire dquot type 1 [ 84.834962][ T5560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 84.843123][ T5549] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.635: Failed to acquire dquot type 1 [ 84.848939][ T5560] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.639: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.893013][ T5560] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.639: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.907769][ T5560] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.639: Failed to acquire dquot type 0 [ 84.908463][ T5549] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.635: bg 0: block 248: padding at end of block bitmap is not set [ 84.933938][ T5560] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 84.963808][ T5568] isofs_fill_super: get root inode failed [ 84.969816][ T5560] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.639: mark_inode_dirty error [ 84.996883][ T5560] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 85.023300][ T5549] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 85.046383][ T5560] EXT4-fs (loop1): 1 orphan inode deleted [ 85.054876][ T5549] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.635: Failed to acquire dquot type 1 [ 85.066135][ T37] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.085800][ T5549] EXT4-fs (loop0): 1 orphan inode deleted [ 85.095609][ T5572] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 85.103304][ T5572] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 85.111131][ T5572] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 85.128443][ T37] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 85.145849][ T5560] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.639: Invalid inode table block 1 in block_group 0 [ 85.173821][ T5560] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 85.183534][ T5560] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.639: mark_inode_dirty error [ 85.349103][ T5588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.370865][ T5588] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 85.434182][ T5588] EXT4-fs: test_dummy_encryption option not supported [ 85.456014][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop2 [ 85.617219][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 85.617232][ T29] audit: type=1326 audit(85.597:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.692305][ T29] audit: type=1326 audit(85.637:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.715203][ T29] audit: type=1326 audit(85.637:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.737930][ T29] audit: type=1326 audit(85.637:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.760573][ T29] audit: type=1326 audit(85.637:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.783258][ T29] audit: type=1326 audit(85.637:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.805996][ T29] audit: type=1326 audit(85.637:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.828690][ T29] audit: type=1326 audit(85.637:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.851368][ T29] audit: type=1326 audit(85.637:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.874041][ T29] audit: type=1326 audit(85.637:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b40bf749 code=0x7ffc0000 [ 85.899814][ T5597] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 85.919499][ T5600] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.654: iget: bad extra_isize 90 (inode size 256) [ 85.958355][ T5600] EXT4-fs (loop1): Remounting filesystem read-only [ 85.974477][ T5600] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 86.027536][ T5600] EXT4-fs (loop1): 1 orphan inode deleted [ 86.038462][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.062303][ T5609] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 86.160619][ T5614] EXT4-fs: test_dummy_encryption option not supported [ 86.215604][ T3309] udevd[3309]: incorrect ext4 checksum on /dev/loop4 [ 86.223162][ T5597] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.654: Failed to acquire dquot type 1 [ 86.284684][ T5597] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.654: Failed to acquire dquot type 1 [ 86.354398][ T5597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.654: bg 0: block 248: padding at end of block bitmap is not set [ 86.379321][ T5624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.410003][ T5624] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 86.419475][ T5597] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 86.445793][ T5597] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.654: Failed to acquire dquot type 1 [ 86.516536][ T5597] EXT4-fs (loop1): 1 orphan inode deleted [ 86.525653][ T5624] EXT4-fs: test_dummy_encryption option not supported [ 86.565511][ T5589] Set syz1 is full, maxelem 65536 reached [ 86.662202][ T5637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.695499][ T5643] syzkaller0: entered promiscuous mode [ 86.701043][ T5643] syzkaller0: entered allmulticast mode [ 86.716379][ T5637] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 86.811286][ T5670] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.852000][ T5672] set_capacity_and_notify: 27 callbacks suppressed [ 86.852051][ T5672] loop3: detected capacity change from 0 to 128 [ 86.882198][ T5673] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.901304][ T5672] EXT4-fs: test_dummy_encryption option not supported [ 86.914524][ T5670] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.926915][ T5677] loop0: detected capacity change from 0 to 512 [ 86.933576][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop3 [ 86.957628][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.966260][ T5673] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.988676][ T5677] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 87.014181][ T5670] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.060989][ T5673] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.116514][ T5670] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.132473][ T5678] loop0: detected capacity change from 0 to 128 [ 87.142788][ T5678] EXT4-fs: test_dummy_encryption option not supported [ 87.155905][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop0 [ 87.185698][ T5673] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.234163][ T5683] loop3: detected capacity change from 0 to 512 [ 87.250344][ T5683] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.673: iget: bad extra_isize 90 (inode size 256) [ 87.273057][ T5683] EXT4-fs (loop3): Remounting filesystem read-only [ 87.282715][ T5683] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 87.291979][ T5683] EXT4-fs (loop3): 1 orphan inode deleted [ 87.327143][ T5683] loop3: detected capacity change from 0 to 512 [ 87.338522][ T2044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.363445][ T2044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.387390][ T2044] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.412946][ T2044] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.415789][ T5683] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.673: Failed to acquire dquot type 1 [ 87.459676][ T5683] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.673: Failed to acquire dquot type 1 [ 87.484964][ T2044] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.498220][ T2044] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.514883][ T5683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.673: bg 0: block 248: padding at end of block bitmap is not set [ 87.534496][ T2044] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.573138][ T2044] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.581811][ T5683] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 87.604703][ T5683] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.673: Failed to acquire dquot type 1 [ 87.666097][ T5683] EXT4-fs (loop3): 1 orphan inode deleted [ 87.811355][ T5707] loop3: detected capacity change from 0 to 512 [ 87.835771][ T5707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.857604][ T5705] syzkaller0: entered promiscuous mode [ 87.863207][ T5705] syzkaller0: entered allmulticast mode [ 87.869913][ T5707] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 88.003587][ T5707] loop3: detected capacity change from 0 to 128 [ 88.025632][ T5707] EXT4-fs: test_dummy_encryption option not supported [ 88.033053][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop3 [ 88.559787][ T5688] Set syz1 is full, maxelem 65536 reached [ 88.729630][ T5748] loop0: detected capacity change from 0 to 512 [ 88.736706][ T5748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.743691][ T5748] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 89.267966][ T5748] loop0: detected capacity change from 0 to 128 [ 89.274797][ T5748] EXT4-fs: test_dummy_encryption option not supported [ 89.287563][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop0 [ 89.382997][ T5763] __nla_validate_parse: 10 callbacks suppressed [ 89.383011][ T5763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.703'. [ 89.399336][ T5764] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 89.414905][ T5764] loop0: detected capacity change from 0 to 512 [ 89.451458][ T5764] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.470760][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 89.485122][ T5764] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.495591][ T5764] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.704: Allocating blocks 41-42 which overlap fs metadata [ 89.519818][ T5764] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.704: Failed to acquire dquot type 1 [ 89.534271][ T5764] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 89.551750][ T5764] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.704: corrupted inode contents [ 89.563796][ T5764] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.704: mark_inode_dirty error [ 89.577694][ T5764] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.704: corrupted inode contents [ 89.589950][ T5764] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.704: mark_inode_dirty error [ 89.617219][ T5764] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.704: corrupted inode contents [ 89.630150][ T5764] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 89.639658][ T5764] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.704: corrupted inode contents [ 89.651682][ T5764] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.704: mark_inode_dirty error [ 89.664925][ T5764] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 89.674103][ T5764] EXT4-fs (loop0): 1 truncate cleaned up [ 89.944908][ T5799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.718'. [ 89.984014][ T5804] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 90.001074][ T5804] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.720: iget: bad extra_isize 90 (inode size 256) [ 90.015184][ T5804] EXT4-fs (loop3): Remounting filesystem read-only [ 90.021867][ T5804] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 90.031086][ T5804] EXT4-fs (loop3): 1 orphan inode deleted [ 90.065673][ T5804] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.720: Failed to acquire dquot type 1 [ 90.077664][ T5804] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.720: Failed to acquire dquot type 1 [ 90.089487][ T5804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.720: bg 0: block 248: padding at end of block bitmap is not set [ 90.104250][ T5804] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 90.113397][ T5804] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.720: Failed to acquire dquot type 1 [ 90.125004][ T5804] EXT4-fs (loop3): 1 orphan inode deleted [ 90.165722][ T5812] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 90.189220][ T5812] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.722: iget: bad extra_isize 90 (inode size 256) [ 90.203031][ T5812] EXT4-fs (loop1): Remounting filesystem read-only [ 90.209986][ T5812] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 90.219371][ T5812] EXT4-fs (loop1): 1 orphan inode deleted [ 90.275912][ T5812] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.722: Failed to acquire dquot type 1 [ 90.287376][ T5812] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.722: Failed to acquire dquot type 1 [ 90.299061][ T5812] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.722: bg 0: block 248: padding at end of block bitmap is not set [ 90.313614][ T5812] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 90.323129][ T5812] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.722: Failed to acquire dquot type 1 [ 90.334730][ T5812] EXT4-fs (loop1): 1 orphan inode deleted [ 90.387877][ T5827] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 90.401259][ T5827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.421102][ T5827] bond1: (slave veth3): Enslaving as an active interface with a down link [ 90.426102][ T5830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.438783][ T5827] FAULT_INJECTION: forcing a failure. [ 90.438783][ T5827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.451983][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.3.725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.452018][ T5827] Tainted: [W]=WARN [ 90.452025][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.452037][ T5827] Call Trace: [ 90.452045][ T5827] [ 90.452129][ T5827] __dump_stack+0x1d/0x30 [ 90.452157][ T5827] dump_stack_lvl+0x95/0xd0 [ 90.452183][ T5827] dump_stack+0x15/0x1b [ 90.452242][ T5827] should_fail_ex+0x265/0x280 [ 90.452259][ T5830] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 90.452273][ T5827] should_fail+0xb/0x20 [ 90.452297][ T5827] should_fail_usercopy+0x1a/0x20 [ 90.452413][ T5827] _copy_from_iter+0xcf/0xe70 [ 90.452518][ T5827] ? __alloc_skb+0x396/0x4b0 [ 90.452591][ T5827] ? __alloc_skb+0x228/0x4b0 [ 90.452675][ T5827] netlink_sendmsg+0x471/0x6b0 [ 90.452819][ T5827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.452907][ T5827] __sock_sendmsg+0x145/0x180 [ 90.452996][ T5827] ____sys_sendmsg+0x31e/0x4a0 [ 90.453082][ T5827] ___sys_sendmsg+0x17b/0x1d0 [ 90.453215][ T5827] __x64_sys_sendmsg+0xd4/0x160 [ 90.453311][ T5827] x64_sys_call+0x17ba/0x3000 [ 90.453465][ T5827] do_syscall_64+0xca/0x2b0 [ 90.453581][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.453647][ T5827] RIP: 0033:0x7fea6fe5f749 [ 90.453728][ T5827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.453792][ T5827] RSP: 002b:00007fea6e8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.453862][ T5827] RAX: ffffffffffffffda RBX: 00007fea700b5fa0 RCX: 00007fea6fe5f749 [ 90.453917][ T5827] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 90.453953][ T5827] RBP: 00007fea6e8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.453982][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.454017][ T5827] R13: 00007fea700b6038 R14: 00007fea700b5fa0 R15: 00007ffe1e19d8d8 [ 90.454073][ T5827] [ 90.655358][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'. [ 90.710586][ T5830] EXT4-fs: test_dummy_encryption option not supported [ 90.741952][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 90.828517][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 90.828534][ T29] audit: type=1326 audit(90.807:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 90.857581][ T29] audit: type=1326 audit(90.807:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 90.880315][ T29] audit: type=1326 audit(90.807:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 90.903081][ T29] audit: type=1326 audit(90.807:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 90.949698][ T29] audit: type=1326 audit(90.907:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 90.972462][ T29] audit: type=1326 audit(90.917:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 90.995317][ T29] audit: type=1326 audit(90.917:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 91.017995][ T29] audit: type=1326 audit(90.917:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 91.040695][ T29] audit: type=1326 audit(90.917:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 91.063405][ T29] audit: type=1326 audit(90.917:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c9af749 code=0x7ffc0000 [ 91.208910][ T5876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 91.300296][ T5898] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 91.320667][ T5898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.345750][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 91.362511][ T5898] bond2: (slave veth5): Enslaving as an active interface with a down link [ 91.418542][ T5893] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 91.426352][ T5893] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 91.434042][ T5893] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 91.450961][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 91.485118][ T5917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.493284][ T5917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.511203][ T5917] EXT4-fs (loop2): 1 truncate cleaned up [ 91.520824][ T5917] EXT4-fs (loop2): shut down requested (1) [ 91.535436][ T5917] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 91.544479][ T5917] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 91.686966][ T5938] EXT4-fs: Ignoring removed bh option [ 91.687005][ T5938] EXT4-fs: inline encryption not supported [ 91.694613][ T5938] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.697293][ T5938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 91.704095][ T5938] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.760: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.704185][ T5938] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.760: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.704263][ T5938] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.760: Failed to acquire dquot type 0 [ 91.711655][ T5938] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 91.711760][ T5938] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.760: mark_inode_dirty error [ 91.711848][ T5938] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 91.711878][ T5938] EXT4-fs (loop0): 1 orphan inode deleted [ 91.712675][ T2044] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.717632][ T2044] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 91.834655][ T5938] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.760: Invalid inode table block 1 in block_group 0 [ 91.847640][ T5938] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 91.857432][ T5938] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.760: mark_inode_dirty error [ 92.013419][ T5951] vlan2: entered allmulticast mode [ 92.157519][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 92.417582][ T5967] set_capacity_and_notify: 10 callbacks suppressed [ 92.417600][ T5967] loop1: detected capacity change from 0 to 512 [ 92.468307][ T5967] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 92.481786][ T5967] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.495852][ T5967] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.767: Failed to acquire dquot type 1 [ 92.540490][ T5967] EXT4-fs (loop1): Remounting filesystem read-only [ 92.575682][ T5973] loop2: detected capacity change from 0 to 512 [ 92.581160][ T5967] EXT4-fs (loop1): 1 truncate cleaned up [ 92.601198][ T5973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.606664][ T5975] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.629378][ T5973] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 92.699200][ T5975] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.801339][ T5975] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.818363][ T5973] loop2: detected capacity change from 0 to 128 [ 92.832700][ T5973] EXT4-fs: test_dummy_encryption option not supported [ 92.844100][ T3622] udevd[3622]: incorrect ext4 checksum on /dev/loop2 [ 92.896824][ T5975] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.964515][ T5986] syzkaller0: entered promiscuous mode [ 92.970042][ T5986] syzkaller0: entered allmulticast mode [ 93.021070][ T5651] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.043357][ T5651] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.062828][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 93.084502][ T5651] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.092899][ T5651] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.180706][ T6004] loop1: detected capacity change from 0 to 512 [ 93.201797][ T6004] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.213401][ T6004] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 93.223560][ T6004] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.783: Corrupt directory, running e2fsck is recommended [ 93.223876][ T6005] loop0: detected capacity change from 0 to 1024 [ 93.243443][ T6007] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 93.243939][ T6005] EXT4-fs: Ignoring removed bh option [ 93.262780][ T6007] loop2: detected capacity change from 0 to 512 [ 93.267122][ T6005] EXT4-fs: inline encryption not supported [ 93.276026][ T6005] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.299586][ T6007] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.784: iget: bad extra_isize 90 (inode size 256) [ 93.313412][ T3008] ================================================================== [ 93.321545][ T3008] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 93.327764][ T6007] EXT4-fs (loop2): Remounting filesystem read-only [ 93.328614][ T3008] [ 93.328623][ T3008] read-write to 0xffff888107ae3f00 of 4 bytes by task 4140 on cpu 0: [ 93.335511][ T6007] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 93.337469][ T3008] d_delete+0x15a/0x180 [ 93.346573][ T6007] EXT4-fs (loop2): 1 orphan inode deleted [ 93.354473][ T3008] d_delete_notify+0x32/0x100 [ 93.354498][ T3008] vfs_unlink+0x32c/0x440 [ 93.354520][ T3008] do_unlinkat+0x1cd/0x4b0 [ 93.354540][ T3008] __x64_sys_unlink+0x2e/0x40 [ 93.381274][ T6004] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 93.382543][ T3008] x64_sys_call+0x2f48/0x3000 [ 93.390813][ T6004] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.783: corrupted in-inode xattr: invalid ea_ino [ 93.395211][ T3008] do_syscall_64+0xca/0x2b0 [ 93.410132][ T6004] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.783: couldn't read orphan inode 15 (err -117) [ 93.412940][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.426817][ T6005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.430556][ T3008] [ 93.430565][ T3008] read to 0xffff888107ae3f00 of 4 bytes by task 3008 on cpu 1: [ 93.430582][ T3008] step_into_slowpath+0x120/0x480 [ 93.441659][ T6005] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.782: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.448543][ T3008] path_lookupat+0x330/0x500 [ 93.448573][ T3008] filename_lookup+0x147/0x340 [ 93.453991][ T6005] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.782: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.467427][ T3008] do_readlinkat+0x7d/0x320 [ 93.467463][ T3008] __x64_sys_readlink+0x47/0x60 [ 93.467492][ T3008] x64_sys_call+0x2af1/0x3000 [ 93.467519][ T3008] do_syscall_64+0xca/0x2b0 [ 93.467554][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.467579][ T3008] [ 93.473738][ T6005] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.782: Failed to acquire dquot type 0 [ 93.476989][ T3008] value changed: 0x00300180 -> 0x00004080 [ 93.477004][ T3008] [ 93.477009][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 93.477028][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.477064][ T3008] Tainted: [W]=WARN [ 93.477073][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.567739][ T3008] ================================================================== [ 93.582795][ T6005] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.592570][ T6004] atomic_op ffff888136619928 conn xmit_atomic 0000000000000000 [ 93.594827][ T6005] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.782: mark_inode_dirty error [ 93.622855][ T6005] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 93.652303][ T6005] EXT4-fs (loop0): 1 orphan inode deleted [ 93.653327][ T6007] loop2: detected capacity change from 0 to 512 [ 93.659930][ T5649] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.679179][ T5649] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0 [ 93.692666][ T6005] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.782: Invalid inode table block 1 in block_group 0 [ 93.705695][ T6005] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.715246][ T6007] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.784: Failed to acquire dquot type 1 [ 93.717733][ T6005] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.782: mark_inode_dirty error [ 93.731891][ T6007] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.784: Failed to acquire dquot type 1 [ 93.749778][ T6007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.784: bg 0: block 248: padding at end of block bitmap is not set [ 93.764137][ T6007] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 93.773172][ T6007] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.784: Failed to acquire dquot type 1 [ 93.784664][ T6007] EXT4-fs (loop2): 1 orphan inode deleted