last executing test programs: 1.775116085s ago: executing program 0 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 1.736536169s ago: executing program 0 (id=1566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000900)={[{@errors_remount}, {@data_ordered}, {@jqfmt_vfsv1}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./file\x00', 0x0) 1.675659923s ago: executing program 0 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000640)="00214717a70700555b73362b8f5e887219e19b255acfacddaf65e15ff7d3", 0x1e}], 0x1, 0x7, 0x7) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000100", @ANYRES16=r2, @ANYBLOB="000429bd7000fbdbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000a001a000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x40c1}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYBLOB], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='xprtrdma_mrs_zap\x00', r11}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 1.133364368s ago: executing program 3 (id=1574): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x8000, 0x10, 0x4, 0x1, {{0xe, 0x4, 0x1, 0x20, 0x38, 0x64, 0x0, 0xfd, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@remote, 0x8}, {@remote, 0xd}, {@multicast2, 0x1}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x22, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb69d}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @generic={0x0, 0x9, 0x7, 0x7, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x79, &(0x7f00000006c0)=""/121, 0x40f00, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x2, 0x8001, 0xffff}, 0x10, 0x1fcb9, r0, 0x2, &(0x7f0000000880)=[r3, r1, 0x1, r2, r1, r1, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a80)=[{0x3, 0x5, 0x6, 0x6}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0x58cf}, 0x94) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 735.77823ms ago: executing program 4 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000072000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) 721.589031ms ago: executing program 4 (id=1588): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x1001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x14, 0x30, 0xffff, 0x3}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) sendto$inet6(r3, &(0x7f00000001c0)="12339d48aee4c99e3be56d957109a766a5034a15a12a", 0x16, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x100000, @private0, 0x7}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = dup(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) acct(0xfffffffffffffffe) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0xf, 0x6, 0x10, 0xce, 0x0, 0x2, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2009, 0x3, @perf_bp={&(0x7f0000000280), 0xc}, 0x6040, 0x10, 0x71, 0x5, 0x4, 0x1000, 0x5, 0x0, 0x6, 0x0, 0x9}, r5, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x1, 0x0, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) signalfd4(r4, &(0x7f0000000440)={[0x3]}, 0x8, 0x80800) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 680.119274ms ago: executing program 2 (id=1589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) 658.796066ms ago: executing program 0 (id=1590): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r2, &(0x7f00000000c0)='#', 0x1, 0x709d) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0x59e7, 0x100000004}) 610.944241ms ago: executing program 2 (id=1591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) 596.041161ms ago: executing program 2 (id=1592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x10) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map, 0xffffffffffffffff, 0x7, 0x201c}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x4c}}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000001, 0x59}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x933}]}}]}, 0x40}}, 0x0) 565.829744ms ago: executing program 1 (id=1593): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 531.797107ms ago: executing program 3 (id=1594): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x2, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48810}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@sysvgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x490e7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="c00000000101010200000000000000000100000a080015400000000264000d8014000500fe8000000000000000000000000000aa08000200ffffffff08000200ffffffff08000100ac1414391401040000000000000000000000ffff640101020800010064010102080002007f000001080002000a0101010800010000000000180002801400018008000100e000000208000200640101022800018006000340000200001400018008000100ac1e010108000200ac1414bb0600034000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20044801}, 0x40000) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 240.21056ms ago: executing program 3 (id=1600): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r2, &(0x7f00000000c0)='#', 0x1, 0x709d) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0x59e7, 0x100000004}) 121.82463ms ago: executing program 4 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 97.816572ms ago: executing program 3 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c61737400000000040002"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 53.183086ms ago: executing program 1 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 14.911279ms ago: executing program 3 (id=1604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) tkill(0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 0s ago: executing program 4 (id=1605): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000007c0)={{0x94, 0x46}, 0x1, 0x7, 0x9, {0x6f, 0x5}, 0x2, 0x2000005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0000fdffffffffffffff00"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e010100000000000000000000e700fe80000000000000000000000000009f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/314], 0x184}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x3, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000007140)={'veth0\x00', &(0x7f0000007040)=@ethtool_eeprom={0x43, 0x400, 0x8}}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000400000140600fe880000000000000000000000000001fe8000000000000000000000000000aa4e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'/17], 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000004000000800460000f839c4498c639b0638f194ec46cf3b340000000000019078ac1e0001ac1414aa440474f003009078030000004503000000"], 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): irty error [ 109.402448][ T6879] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1002: Failed to acquire dquot type 0 [ 109.445874][ T6879] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1002: corrupted inode contents [ 109.460336][ T6879] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1002: mark_inode_dirty error [ 109.472567][ T6879] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1002: corrupted inode contents [ 109.522935][ T6879] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1002: mark_inode_dirty error [ 109.554711][ T6879] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1002: corrupted inode contents [ 109.567752][ T6879] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 109.577454][ T6879] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1002: corrupted inode contents [ 109.590477][ T6879] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1002: mark_inode_dirty error [ 109.602311][ T6879] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 109.612356][ T6879] EXT4-fs (loop2): 1 truncate cleaned up [ 109.618905][ T6879] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.701493][ T6906] loop1: detected capacity change from 0 to 1024 [ 109.733688][ T6910] IPv6: Can't replace route, no match found [ 109.967237][ T6931] loop3: detected capacity change from 0 to 128 [ 110.007503][ T6906] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1005: Allocating blocks 497-513 which overlap fs metadata [ 110.074360][ T6936] loop0: detected capacity change from 0 to 764 [ 110.082535][ T6936] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 110.151943][ T6938] loop3: detected capacity change from 0 to 512 [ 110.170375][ T6938] EXT4-fs (loop3): too many log groups per flexible block group [ 110.178088][ T6938] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 110.187562][ T6941] Illegal XDP return value 4294967274 on prog (id 554) dev N/A, expect packet loss! [ 110.227466][ T6938] EXT4-fs (loop3): mount failed [ 110.297633][ T6952] loop3: detected capacity change from 0 to 1024 [ 110.317626][ T6954] 9p: Unknown access argument Hny: -22 [ 110.317803][ T6952] EXT4-fs: Ignoring removed bh option [ 110.348032][ T6952] SELinux: policydb version 0 does not match my version range 15-35 [ 110.358144][ T6952] SELinux: failed to load policy [ 110.373898][ T6952] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 110.416732][ T6963] loop1: detected capacity change from 0 to 512 [ 110.434212][ T6963] EXT4-fs: Ignoring removed nobh option [ 110.482999][ T6963] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1030: corrupted inode contents [ 110.501665][ T6963] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #3: comm syz.1.1030: mark_inode_dirty error [ 110.536982][ T6963] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1030: corrupted inode contents [ 110.552886][ T6963] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1030: mark_inode_dirty error [ 110.566719][ T6963] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1030: Failed to acquire dquot type 0 [ 110.594290][ T6981] loop0: detected capacity change from 0 to 512 [ 110.603323][ T6981] EXT4-fs: Ignoring removed nobh option [ 110.611664][ T6963] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1030: corrupted inode contents [ 110.619457][ T6983] 9p: Unknown access argument Hny: -22 [ 110.624481][ T6963] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #16: comm syz.1.1030: mark_inode_dirty error [ 110.640987][ T6963] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1030: corrupted inode contents [ 110.641888][ T6981] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1037: corrupted inode contents [ 110.653344][ T6963] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1030: mark_inode_dirty error [ 110.665778][ T6981] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1037: mark_inode_dirty error [ 110.677186][ T6963] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1030: corrupted inode contents [ 110.688653][ T6981] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1037: corrupted inode contents [ 110.700227][ T6963] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 110.712735][ T6981] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1037: mark_inode_dirty error [ 110.722447][ T6963] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1030: corrupted inode contents [ 110.743429][ T6963] EXT4-fs error (device loop1): ext4_truncate:4592: inode #16: comm syz.1.1030: mark_inode_dirty error [ 110.755126][ T6963] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 110.769203][ T6963] EXT4-fs (loop1): 1 truncate cleaned up [ 110.777176][ T6963] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.795273][ T6981] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1037: Failed to acquire dquot type 0 [ 110.802307][ T6987] hub 6-0:1.0: USB hub found [ 110.808227][ T6981] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1037: corrupted inode contents [ 110.811549][ T6987] hub 6-0:1.0: 8 ports detected [ 110.824437][ T6981] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1037: mark_inode_dirty error [ 110.832805][ T6989] loop3: detected capacity change from 0 to 1024 [ 110.840313][ T6981] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1037: corrupted inode contents [ 110.862704][ T6989] EXT4-fs: Ignoring removed bh option [ 110.880461][ T6981] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1037: mark_inode_dirty error [ 110.893905][ T6991] IPv6: Can't replace route, no match found [ 110.898982][ T6981] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1037: corrupted inode contents [ 110.908373][ T6992] loop2: detected capacity change from 0 to 512 [ 110.918080][ T6981] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 110.932354][ T6992] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.944022][ T6989] SELinux: policydb version 0 does not match my version range 15-35 [ 110.952682][ T6989] SELinux: failed to load policy [ 110.953778][ T6981] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1037: corrupted inode contents [ 110.970120][ T6981] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1037: mark_inode_dirty error [ 110.986524][ T6981] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 110.997048][ T6989] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 111.082359][ T6981] EXT4-fs (loop0): 1 truncate cleaned up [ 111.100692][ T6981] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.177922][ T7015] syz.2.1049 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.212712][ T7020] loop2: detected capacity change from 0 to 512 [ 111.221067][ T7018] loop1: detected capacity change from 0 to 764 [ 111.229040][ T7018] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 111.267853][ T7027] IPv6: Can't replace route, no match found [ 111.270784][ T7020] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1051: Failed to acquire dquot type 1 [ 111.287894][ T7025] loop0: detected capacity change from 0 to 512 [ 111.288662][ T7020] EXT4-fs (loop2): 1 truncate cleaned up [ 111.308594][ T7025] EXT4-fs: Ignoring removed nobh option [ 111.318281][ T7020] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.335364][ T7025] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1052: corrupted inode contents [ 111.358245][ T7025] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1052: mark_inode_dirty error [ 111.371245][ T7025] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1052: corrupted inode contents [ 111.377346][ T7034] loop4: detected capacity change from 0 to 1024 [ 111.389876][ T7034] EXT4-fs: Ignoring removed bh option [ 111.422010][ T7034] SELinux: policydb version 0 does not match my version range 15-35 [ 111.423016][ T7025] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1052: mark_inode_dirty error [ 111.430168][ T7034] SELinux: failed to load policy [ 111.447856][ T7034] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 111.470888][ T7025] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1052: Failed to acquire dquot type 0 [ 111.533185][ T7025] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1052: corrupted inode contents [ 111.629826][ T7025] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1052: mark_inode_dirty error [ 111.644251][ T7047] 9p: Unknown access argument Hny: -22 [ 111.651233][ T7025] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1052: corrupted inode contents [ 111.665507][ T7025] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1052: mark_inode_dirty error [ 111.680126][ T7050] IPv6: Can't replace route, no match found [ 111.705903][ T7025] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1052: corrupted inode contents [ 111.744525][ T7025] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 111.765796][ T7025] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1052: corrupted inode contents [ 111.787940][ T7025] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1052: mark_inode_dirty error [ 111.800388][ T7025] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 111.810701][ T7025] EXT4-fs (loop0): 1 truncate cleaned up [ 111.817011][ T7025] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.900559][ T7065] IPv6: Can't replace route, no match found [ 111.913491][ T7068] IPv6: Can't replace route, no match found [ 111.991042][ T7079] loop2: detected capacity change from 0 to 512 [ 112.000464][ T7070] loop0: detected capacity change from 0 to 1024 [ 112.007207][ T7070] EXT4-fs: Ignoring removed bh option [ 112.028295][ T7082] loop4: detected capacity change from 0 to 1024 [ 112.059737][ T7085] loop3: detected capacity change from 0 to 2048 [ 112.069746][ T7070] SELinux: policydb version 0 does not match my version range 15-35 [ 112.089599][ T7070] SELinux: failed to load policy [ 112.113652][ T4071] loop3: p4 < > [ 112.117338][ T7070] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000. [ 112.150621][ T7085] loop3: p4 < > [ 112.185045][ T7092] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1063: Allocating blocks 497-513 which overlap fs metadata [ 112.278402][ T7100] loop0: detected capacity change from 0 to 512 [ 112.285589][ T7100] EXT4-fs: Ignoring removed nobh option [ 112.331250][ T7100] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1075: corrupted inode contents [ 112.346339][ T7107] IPv6: Can't replace route, no match found [ 112.376983][ T7109] IPv6: Can't replace route, no match found [ 112.386598][ T7100] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1075: mark_inode_dirty error [ 112.406550][ T4064] udevd[4064]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 112.430672][ T7116] IPv6: Can't replace route, no match found [ 112.451646][ T7114] loop3: detected capacity change from 0 to 128 [ 112.459443][ T7100] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1075: corrupted inode contents [ 112.476964][ T7100] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1075: mark_inode_dirty error [ 112.549883][ T7100] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1075: Failed to acquire dquot type 0 [ 112.584648][ T7100] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1075: corrupted inode contents [ 112.597127][ T7100] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1075: mark_inode_dirty error [ 112.639363][ T7100] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1075: corrupted inode contents [ 112.670578][ T7100] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1075: mark_inode_dirty error [ 112.682514][ T7100] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1075: corrupted inode contents [ 112.702018][ T7100] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 112.731681][ T7100] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1075: corrupted inode contents [ 112.750679][ T7100] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1075: mark_inode_dirty error [ 112.812334][ T7100] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 112.849721][ T7100] EXT4-fs (loop0): 1 truncate cleaned up [ 112.856661][ T7100] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.065956][ T7141] __nla_validate_parse: 16 callbacks suppressed [ 113.065967][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'. [ 113.095070][ T7145] loop1: detected capacity change from 0 to 512 [ 113.121457][ T7145] EXT4-fs (loop1): too many log groups per flexible block group [ 113.129183][ T7145] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 113.136128][ T7145] EXT4-fs (loop1): mount failed [ 113.153975][ T29] kauditd_printk_skb: 859 callbacks suppressed [ 113.154059][ T29] audit: type=1400 audit(1753984285.903:6213): avc: denied { ioctl } for pid=7144 comm="syz.1.1091" path="socket:[48290]" dev="sockfs" ino=48290 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.154099][ T29] audit: type=1400 audit(1753984285.903:6214): avc: denied { bind } for pid=7144 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.210952][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1089'. [ 113.215268][ T7153] loop4: detected capacity change from 0 to 1024 [ 113.240477][ T29] audit: type=1400 audit(1753984285.983:6215): avc: denied { create } for pid=7144 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.393909][ T7163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1092'. [ 113.435599][ T7153] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1089: Allocating blocks 497-513 which overlap fs metadata [ 113.461941][ T29] audit: type=1326 audit(1753984286.213:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.485497][ T29] audit: type=1326 audit(1753984286.213:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.508971][ T29] audit: type=1326 audit(1753984286.213:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.548930][ T7172] loop3: detected capacity change from 0 to 512 [ 113.584786][ T29] audit: type=1326 audit(1753984286.263:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.608266][ T29] audit: type=1326 audit(1753984286.293:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.631774][ T29] audit: type=1326 audit(1753984286.293:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.655194][ T29] audit: type=1326 audit(1753984286.293:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 113.783492][ T7183] IPv6: Can't replace route, no match found [ 113.916203][ T7195] 9p: Unknown access argument Hny: -22 [ 114.012254][ T7203] IPv6: Can't replace route, no match found [ 114.133327][ T7209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1107'. [ 114.144216][ T7211] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1109'. [ 114.153457][ T7209] loop4: detected capacity change from 0 to 1024 [ 114.396165][ T7220] IPv6: Can't replace route, no match found [ 114.408103][ T7222] loop1: detected capacity change from 0 to 128 [ 114.437865][ T7224] IPv6: Can't replace route, no match found [ 114.503583][ T7209] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1107: Allocating blocks 497-513 which overlap fs metadata [ 114.563214][ T7234] IPv6: Can't replace route, no match found [ 114.681528][ T7245] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1121'. [ 114.854359][ T7255] loop4: detected capacity change from 0 to 1024 [ 114.943213][ T7255] EXT4-fs: Ignoring removed bh option [ 115.051967][ T7255] SELinux: policydb version 0 does not match my version range 15-35 [ 115.104909][ T7255] SELinux: failed to load policy [ 115.126343][ T7261] EXT4-fs: Ignoring removed orlov option [ 115.153139][ T7261] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.1124: Abort forced by user [ 115.187572][ T7261] EXT4-fs (loop4): Remounting filesystem read-only [ 115.194216][ T7261] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 115.291745][ T7266] loop4: detected capacity change from 0 to 1024 [ 115.323169][ T7266] EXT4-fs: Ignoring removed bh option [ 115.394814][ T7266] SELinux: policydb version 0 does not match my version range 15-35 [ 115.403294][ T7266] SELinux: failed to load policy [ 115.408976][ T7266] EXT4-fs: Ignoring removed orlov option [ 115.420853][ T7266] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.1127: Abort forced by user [ 115.456025][ T7277] IPv6: Can't replace route, no match found [ 115.500344][ T7266] EXT4-fs (loop4): Remounting filesystem read-only [ 115.506953][ T7266] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 115.630631][ T7283] IPv6: Can't replace route, no match found [ 115.707151][ T7285] syzkaller0: entered promiscuous mode [ 115.712784][ T7285] syzkaller0: entered allmulticast mode [ 115.892883][ T7292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1135'. [ 115.940294][ T7291] pim6reg1: entered promiscuous mode [ 115.945707][ T7291] pim6reg1: entered allmulticast mode [ 116.029753][ T7294] loop4: detected capacity change from 0 to 128 [ 116.334082][ T7312] IPv6: Can't replace route, no match found [ 116.397773][ T7308] loop3: detected capacity change from 0 to 1024 [ 116.454345][ T7308] ext3: Unknown parameter 'fsuuid' [ 116.731518][ T7329] loop0: detected capacity change from 0 to 1024 [ 116.752622][ T7335] IPv6: Can't replace route, no match found [ 116.818304][ T7329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.853276][ T7329] EXT4-fs: Mount option(s) incompatible with ext2 [ 116.871396][ T7337] loop2: detected capacity change from 0 to 128 [ 117.023069][ T7345] loop2: detected capacity change from 0 to 1024 [ 117.044015][ T7350] loop1: detected capacity change from 0 to 1024 [ 117.048304][ T7345] EXT4-fs: Ignoring removed bh option [ 117.059984][ T7351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1155'. [ 117.063074][ T7350] EXT4-fs: Ignoring removed bh option [ 117.078920][ T7351] loop3: detected capacity change from 0 to 1024 [ 117.126364][ T7345] SELinux: policydb version 0 does not match my version range 15-35 [ 117.177995][ T7345] SELinux: failed to load policy [ 117.199169][ T7357] EXT4-fs: Ignoring removed orlov option [ 117.207492][ T7357] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.1157: Abort forced by user [ 117.222615][ T7350] SELinux: policydb version 0 does not match my version range 15-35 [ 117.230929][ T7350] SELinux: failed to load policy [ 117.238131][ T7350] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 117.279683][ T7357] EXT4-fs (loop2): Remounting filesystem read-only [ 117.286241][ T7357] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-001000000000. [ 117.371598][ T7368] IPv6: Can't replace route, no match found [ 117.390014][ T7372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1161'. [ 117.458992][ T7351] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1155: Allocating blocks 497-513 which overlap fs metadata [ 117.485551][ T7377] loop0: detected capacity change from 0 to 128 [ 117.543693][ T7382] loop2: detected capacity change from 0 to 2048 [ 117.610215][ T7382] loop2: p4 < > [ 117.671440][ T7387] 9p: Unknown access argument Hny: -22 [ 117.708853][ T7390] loop1: detected capacity change from 0 to 1024 [ 117.731942][ T7390] EXT4-fs: Ignoring removed bh option [ 117.841182][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.849903][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.956675][ T7390] SELinux: policydb version 0 does not match my version range 15-35 [ 118.028150][ T7402] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 118.091268][ T7404] loop2: detected capacity change from 0 to 512 [ 118.098069][ T7390] SELinux: failed to load policy [ 118.141082][ T7404] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.181220][ T7404] FAULT_INJECTION: forcing a failure. [ 118.181220][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 118.193882][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.2.1174 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 118.193910][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.193921][ T7404] Call Trace: [ 118.193928][ T7404] [ 118.193935][ T7404] __dump_stack+0x1d/0x30 [ 118.194028][ T7404] dump_stack_lvl+0xe8/0x140 [ 118.194046][ T7404] dump_stack+0x15/0x1b [ 118.194060][ T7404] should_fail_ex+0x265/0x280 [ 118.194119][ T7404] ? alloc_pipe_info+0xae/0x350 [ 118.194144][ T7404] should_failslab+0x8c/0xb0 [ 118.194244][ T7404] __kmalloc_cache_noprof+0x4c/0x320 [ 118.194278][ T7404] alloc_pipe_info+0xae/0x350 [ 118.194298][ T7404] splice_direct_to_actor+0x592/0x680 [ 118.194346][ T7404] ? kstrtouint_from_user+0x9f/0xf0 [ 118.194416][ T7404] ? __pfx_direct_splice_actor+0x10/0x10 [ 118.194464][ T7404] ? __rcu_read_unlock+0x4f/0x70 [ 118.194484][ T7404] ? get_pid_task+0x96/0xd0 [ 118.194506][ T7404] ? avc_policy_seqno+0x15/0x30 [ 118.194527][ T7404] ? selinux_file_permission+0x1e4/0x320 [ 118.194558][ T7404] do_splice_direct+0xda/0x150 [ 118.194632][ T7404] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 118.194657][ T7404] do_sendfile+0x380/0x650 [ 118.194731][ T7404] __x64_sys_sendfile64+0x105/0x150 [ 118.194758][ T7404] x64_sys_call+0x2bb0/0x2ff0 [ 118.194785][ T7404] do_syscall_64+0xd2/0x200 [ 118.194821][ T7404] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.194843][ T7404] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 118.194873][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.194896][ T7404] RIP: 0033:0x7fbdc6d7eb69 [ 118.194913][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.194979][ T7404] RSP: 002b:00007fbdc53df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 118.194998][ T7404] RAX: ffffffffffffffda RBX: 00007fbdc6fa5fa0 RCX: 00007fbdc6d7eb69 [ 118.195012][ T7404] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 118.195024][ T7404] RBP: 00007fbdc53df090 R08: 0000000000000000 R09: 0000000000000000 [ 118.195036][ T7404] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 118.195084][ T7404] R13: 0000000000000000 R14: 00007fbdc6fa5fa0 R15: 00007ffee417f5c8 [ 118.195102][ T7404] [ 118.282287][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1179'. [ 118.337174][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 118.337189][ T29] audit: type=1326 audit(1753984291.083:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.504753][ T29] audit: type=1326 audit(1753984291.103:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.603694][ T29] audit: type=1400 audit(1753984291.343:6649): avc: denied { search } for pid=7427 comm="syz.2.1180" name="/" dev="configfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.625932][ T29] audit: type=1400 audit(1753984291.343:6650): avc: denied { search } for pid=7427 comm="syz.2.1180" name="/" dev="configfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.648343][ T29] audit: type=1400 audit(1753984291.343:6651): avc: denied { read open } for pid=7427 comm="syz.2.1180" path="/" dev="configfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.674717][ T7433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'. [ 118.708373][ T29] audit: type=1326 audit(1753984291.453:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.731853][ T29] audit: type=1326 audit(1753984291.453:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.755424][ T29] audit: type=1326 audit(1753984291.453:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.778836][ T29] audit: type=1326 audit(1753984291.453:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.802255][ T29] audit: type=1326 audit(1753984291.453:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac042feb69 code=0x7ffc0000 [ 118.851910][ T7442] loop2: detected capacity change from 0 to 1024 [ 118.862501][ T7442] EXT4-fs: Ignoring removed orlov option [ 119.011146][ T7448] loop2: detected capacity change from 0 to 128 [ 119.027670][ T7450] loop4: detected capacity change from 0 to 128 [ 119.039445][ T7450] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.169085][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1189'. [ 119.298167][ T7473] IPv6: Can't replace route, no match found [ 119.315215][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 119.383453][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 119.441945][ T7491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1200'. [ 119.514273][ T7498] loop4: detected capacity change from 0 to 512 [ 119.529775][ T7498] EXT4-fs: Ignoring removed nobh option [ 119.552397][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #3: comm syz.4.1205: corrupted inode contents [ 119.586345][ T7498] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #3: comm syz.4.1205: mark_inode_dirty error [ 119.611371][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #3: comm syz.4.1205: corrupted inode contents [ 119.666689][ T7503] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.667492][ T7498] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1205: mark_inode_dirty error [ 119.699956][ T7498] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1205: Failed to acquire dquot type 0 [ 119.740568][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1205: corrupted inode contents [ 119.761242][ T7503] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.790602][ T7498] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #16: comm syz.4.1205: mark_inode_dirty error [ 119.831817][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1205: corrupted inode contents [ 119.850614][ T7503] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.861915][ T7498] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1205: mark_inode_dirty error [ 119.875829][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1205: corrupted inode contents [ 119.906223][ T7498] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 119.928474][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1205: corrupted inode contents [ 119.943680][ T7498] EXT4-fs error (device loop4): ext4_truncate:4592: inode #16: comm syz.4.1205: mark_inode_dirty error [ 119.956495][ T7503] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.016690][ T384] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.043605][ T384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.053653][ T7498] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 120.054981][ T384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.072993][ T384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.083524][ T7498] EXT4-fs (loop4): 1 truncate cleaned up [ 120.093903][ T7498] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.106691][ T7508] FAULT_INJECTION: forcing a failure. [ 120.106691][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 120.119477][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.2.1207 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 120.119599][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.119612][ T7508] Call Trace: [ 120.119619][ T7508] [ 120.119626][ T7508] __dump_stack+0x1d/0x30 [ 120.119649][ T7508] dump_stack_lvl+0xe8/0x140 [ 120.119670][ T7508] dump_stack+0x15/0x1b [ 120.119688][ T7508] should_fail_ex+0x265/0x280 [ 120.119787][ T7508] should_failslab+0x8c/0xb0 [ 120.119893][ T7508] kmem_cache_alloc_noprof+0x50/0x310 [ 120.119920][ T7508] ? audit_log_start+0x365/0x6c0 [ 120.119954][ T7508] audit_log_start+0x365/0x6c0 [ 120.119988][ T7508] audit_seccomp+0x48/0x100 [ 120.120047][ T7508] ? __seccomp_filter+0x68c/0x10d0 [ 120.120072][ T7508] __seccomp_filter+0x69d/0x10d0 [ 120.120104][ T7508] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.120133][ T7508] ? vfs_write+0x75e/0x8e0 [ 120.120166][ T7508] ? __rcu_read_unlock+0x4f/0x70 [ 120.120185][ T7508] ? __fget_files+0x184/0x1c0 [ 120.120207][ T7508] __secure_computing+0x82/0x150 [ 120.120301][ T7508] syscall_trace_enter+0xcf/0x1e0 [ 120.120328][ T7508] do_syscall_64+0xac/0x200 [ 120.120360][ T7508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.120386][ T7508] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.120455][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.120475][ T7508] RIP: 0033:0x7fbdc6d7d4d0 [ 120.120488][ T7508] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 120.120505][ T7508] RSP: 002b:00007fbdc53def60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 120.120526][ T7508] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbdc6d7d4d0 [ 120.120540][ T7508] RDX: 0000000000000000 RSI: 00007fbdc6e01f09 RDI: 00000000ffffff9c [ 120.120624][ T7508] RBP: 00007fbdc6e01f09 R08: 0000000000000000 R09: 0000000000000000 [ 120.120637][ T7508] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 120.120651][ T7508] R13: 0000000000000000 R14: 00007fbdc6fa5fa0 R15: 00007ffee417f5c8 [ 120.120669][ T7508] [ 120.374538][ T7517] loop0: detected capacity change from 0 to 1024 [ 120.386096][ T7516] IPv6: Can't replace route, no match found [ 120.399181][ T7517] EXT4-fs: Ignoring removed orlov option [ 120.404959][ T7517] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.418434][ T7517] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.447704][ T7523] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1215'. [ 120.457118][ T7528] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1215'. [ 120.524823][ T7531] loop1: detected capacity change from 0 to 1024 [ 120.529426][ T7538] 9p: Unknown access argument Hny: -22 [ 120.535558][ T7531] EXT4-fs: Ignoring removed bh option [ 120.584121][ T7531] SELinux: policydb version 0 does not match my version range 15-35 [ 120.598286][ T7550] loop0: detected capacity change from 0 to 128 [ 120.598636][ T7531] SELinux: failed to load policy [ 120.606666][ T7550] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.627154][ T7531] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 120.698122][ T7559] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.723230][ T7555] IPv6: Can't replace route, no match found [ 120.751333][ T7559] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.798017][ T7562] bridge_slave_0: left allmulticast mode [ 120.803737][ T7562] bridge_slave_0: left promiscuous mode [ 120.809478][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.821120][ T7562] bridge_slave_1: left allmulticast mode [ 120.826904][ T7562] bridge_slave_1: left promiscuous mode [ 120.832705][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.843810][ T7562] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 120.851553][ T7562] bond_slave_0: left promiscuous mode [ 120.859066][ T7562] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 120.866999][ T7562] bond_slave_1: left promiscuous mode [ 120.876653][ T7562] team0: Port device team_slave_0 removed [ 120.886257][ T7562] team0: Port device team_slave_1 removed [ 120.893710][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.901143][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.911526][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.918941][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.960510][ T7559] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.000801][ T7559] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.067792][ T383] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.137693][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1234'. [ 121.412815][ T383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.463965][ T383] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.476771][ T7587] IPv6: Can't replace route, no match found [ 121.492251][ T383] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.531384][ T7589] loop0: detected capacity change from 0 to 1024 [ 121.538338][ T7589] EXT4-fs: Ignoring removed bh option [ 121.561501][ T7589] SELinux: policydb version 0 does not match my version range 15-35 [ 121.569857][ T7589] SELinux: failed to load policy [ 121.580471][ T7589] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000. [ 121.685511][ T7597] IPv6: Can't replace route, no match found [ 121.778228][ T7606] loop0: detected capacity change from 0 to 512 [ 121.841679][ T7610] loop2: detected capacity change from 0 to 128 [ 121.843886][ T7606] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.881769][ T7614] loop1: detected capacity change from 0 to 764 [ 121.947748][ T7617] loop0: detected capacity change from 0 to 128 [ 121.999251][ T7622] Symlink component flag not implemented [ 122.004972][ T7622] Symlink component flag not implemented [ 122.069346][ T7622] Symlink component flag not implemented (129) [ 122.075551][ T7622] Symlink component flag not implemented (6) [ 122.324668][ T7633] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1252'. [ 122.359836][ T7633] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 122.409155][ T7633] 0ªî{X¹¦: entered allmulticast mode [ 122.434309][ T7633] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 122.503500][ T7640] loop3: detected capacity change from 0 to 128 [ 122.517723][ T7640] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.538063][ T7648] loop0: detected capacity change from 0 to 128 [ 122.670534][ T7655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.721731][ T7655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.822521][ T7655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.871286][ T7668] FAULT_INJECTION: forcing a failure. [ 122.871286][ T7668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.884523][ T7668] CPU: 0 UID: 0 PID: 7668 Comm: syz.2.1264 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 122.884549][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.884561][ T7668] Call Trace: [ 122.884566][ T7668] [ 122.884575][ T7668] __dump_stack+0x1d/0x30 [ 122.884632][ T7668] dump_stack_lvl+0xe8/0x140 [ 122.884649][ T7668] dump_stack+0x15/0x1b [ 122.884673][ T7668] should_fail_ex+0x265/0x280 [ 122.884783][ T7668] should_fail+0xb/0x20 [ 122.884812][ T7668] should_fail_usercopy+0x1a/0x20 [ 122.884890][ T7668] _copy_to_user+0x20/0xa0 [ 122.884913][ T7668] simple_read_from_buffer+0xb5/0x130 [ 122.884950][ T7668] proc_fail_nth_read+0x10e/0x150 [ 122.884979][ T7668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.885005][ T7668] vfs_read+0x19d/0x6f0 [ 122.885100][ T7668] ? __rcu_read_unlock+0x4f/0x70 [ 122.885120][ T7668] ? __fget_files+0x184/0x1c0 [ 122.885140][ T7668] ? __sys_bind+0x223/0x2a0 [ 122.885163][ T7668] ksys_read+0xda/0x1a0 [ 122.885186][ T7668] __x64_sys_read+0x40/0x50 [ 122.885209][ T7668] x64_sys_call+0x27bc/0x2ff0 [ 122.885232][ T7668] do_syscall_64+0xd2/0x200 [ 122.885269][ T7668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.885296][ T7668] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.885330][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.885350][ T7668] RIP: 0033:0x7fbdc6d7d57c [ 122.885365][ T7668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.885385][ T7668] RSP: 002b:00007fbdc53df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.885465][ T7668] RAX: ffffffffffffffda RBX: 00007fbdc6fa5fa0 RCX: 00007fbdc6d7d57c [ 122.885480][ T7668] RDX: 000000000000000f RSI: 00007fbdc53df0a0 RDI: 0000000000000008 [ 122.885493][ T7668] RBP: 00007fbdc53df090 R08: 0000000000000000 R09: 0000000000000000 [ 122.885507][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.885571][ T7668] R13: 0000000000000000 R14: 00007fbdc6fa5fa0 R15: 00007ffee417f5c8 [ 122.885591][ T7668] [ 123.102655][ T7655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.134235][ T7673] loop2: detected capacity change from 0 to 512 [ 123.151972][ T7673] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.186763][ T384] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.201682][ T384] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.237771][ T384] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.246957][ T384] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.282472][ T7680] loop3: detected capacity change from 0 to 1024 [ 123.297398][ T7680] EXT4-fs: Ignoring removed bh option [ 123.340718][ T7680] SELinux: policydb version 0 does not match my version range 15-35 [ 123.349476][ T7680] SELinux: failed to load policy [ 123.359946][ T7680] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 123.377131][ T7686] loop2: detected capacity change from 0 to 512 [ 123.384271][ T7686] EXT4-fs: Ignoring removed nobh option [ 123.430595][ T7686] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1269: corrupted inode contents [ 123.451931][ T7686] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.1269: mark_inode_dirty error [ 123.499417][ T7686] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1269: corrupted inode contents [ 123.510650][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 123.510665][ T29] audit: type=1400 audit(1753984296.253:7146): avc: denied { accept } for pid=7691 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 123.519559][ T7686] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1269: mark_inode_dirty error [ 123.560584][ T7686] Quota error (device loop2): write_blk: dquota write failed [ 123.568001][ T7686] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 123.578912][ T7686] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1269: Failed to acquire dquot type 0 [ 123.596285][ T7686] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1269: corrupted inode contents [ 123.612063][ T7694] __nla_validate_parse: 1 callbacks suppressed [ 123.612080][ T7694] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1272'. [ 123.633346][ T7686] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1269: mark_inode_dirty error [ 123.646829][ T7686] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1269: corrupted inode contents [ 123.658868][ T29] audit: type=1326 audit(1753984296.383:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.661498][ T7686] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1269: mark_inode_dirty error [ 123.682310][ T29] audit: type=1326 audit(1753984296.383:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.682341][ T29] audit: type=1326 audit(1753984296.383:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.740400][ T29] audit: type=1326 audit(1753984296.383:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.763863][ T29] audit: type=1326 audit(1753984296.403:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.794075][ T7686] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1269: corrupted inode contents [ 123.806170][ T29] audit: type=1326 audit(1753984296.413:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.829630][ T29] audit: type=1326 audit(1753984296.453:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 123.853267][ T7686] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 123.861993][ T7686] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1269: corrupted inode contents [ 123.874099][ T7698] loop4: detected capacity change from 0 to 2048 [ 123.874973][ T7702] loop0: detected capacity change from 0 to 2048 [ 123.882705][ T7686] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1269: mark_inode_dirty error [ 123.898166][ T7686] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 123.907972][ T4064] loop4: p4 < > [ 123.913057][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1274'. [ 123.916767][ T7686] EXT4-fs (loop2): 1 truncate cleaned up [ 123.934070][ T7698] loop4: p4 < > [ 123.934840][ T7686] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.951082][ T7702] loop0: p1 < > p4 [ 123.956276][ T7702] loop0: p4 size 8388608 extends beyond EOD, truncated [ 123.970752][ T2990] loop4: p4 < > [ 123.987189][ T2990] loop0: p1 < > p4 [ 123.997635][ T2990] loop0: p4 size 8388608 extends beyond EOD, truncated [ 124.007655][ T7708] loop4: detected capacity change from 0 to 512 [ 124.015497][ T7708] EXT4-fs: Ignoring removed nobh option [ 124.061540][ T4064] udevd[4064]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 124.084811][ T7708] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #3: comm syz.4.1277: corrupted inode contents [ 124.086263][ T4062] udevd[4062]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 124.102400][ T7714] 9p: Unknown access argument Hny: -22 [ 124.108300][ T4072] udevd[4072]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.149375][ T7708] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #3: comm syz.4.1277: mark_inode_dirty error [ 124.164757][ T4064] udevd[4064]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 124.175251][ T7716] IPv6: Can't replace route, no match found [ 124.189842][ T7708] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #3: comm syz.4.1277: corrupted inode contents [ 124.230993][ T7708] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1277: mark_inode_dirty error [ 124.275021][ T7708] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1277: Failed to acquire dquot type 0 [ 124.310876][ T7708] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1277: corrupted inode contents [ 124.334385][ T7708] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #16: comm syz.4.1277: mark_inode_dirty error [ 124.369649][ T7708] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1277: corrupted inode contents [ 124.398439][ T7708] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1277: mark_inode_dirty error [ 124.423118][ T7708] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1277: corrupted inode contents [ 124.453383][ T7738] loop2: detected capacity change from 0 to 1024 [ 124.463911][ T7708] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 124.465073][ T7738] EXT4-fs: Ignoring removed bh option [ 124.478654][ T7708] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1277: corrupted inode contents [ 124.492015][ T7708] EXT4-fs error (device loop4): ext4_truncate:4592: inode #16: comm syz.4.1277: mark_inode_dirty error [ 124.518734][ T7708] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 124.549555][ T7738] SELinux: policydb version 0 does not match my version range 15-35 [ 124.557879][ T7738] SELinux: failed to load policy [ 124.568793][ T7708] EXT4-fs (loop4): 1 truncate cleaned up [ 124.575009][ T7738] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-001000000000. [ 124.579820][ T7708] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.613764][ T7746] loop1: detected capacity change from 0 to 1024 [ 124.620923][ T7746] EXT4-fs: Invalid want_extra_isize 0 [ 124.729022][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1293'. [ 124.805499][ T7761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1292'. [ 124.817996][ T7761] loop2: detected capacity change from 0 to 1024 [ 124.931824][ T7769] 9p: Unknown access argument Hny: -22 [ 124.947951][ T7768] loop4: detected capacity change from 0 to 1024 [ 124.963758][ T7768] EXT4-fs: Ignoring removed bh option [ 124.985220][ T7761] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1292: Allocating blocks 497-513 which overlap fs metadata [ 125.016911][ T7768] SELinux: policydb version 0 does not match my version range 15-35 [ 125.035996][ T7768] SELinux: failed to load policy [ 125.048074][ T7768] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 125.078825][ T7782] IPv6: Can't replace route, no match found [ 125.095693][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 125.253784][ T7796] IPv6: Can't replace route, no match found [ 125.295196][ T7798] Invalid ELF header magic: != ELF [ 125.316718][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1309'. [ 125.442003][ T7804] loop4: detected capacity change from 0 to 1024 [ 125.462075][ T7804] EXT4-fs: Ignoring removed bh option [ 125.532815][ T7804] SELinux: policydb version 0 does not match my version range 15-35 [ 125.541122][ T7804] SELinux: failed to load policy [ 125.547338][ T7804] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 125.607538][ T7809] 9p: Unknown access argument Hny: -22 [ 125.683363][ T7811] loop4: detected capacity change from 0 to 1024 [ 125.709936][ T7811] EXT4-fs: Ignoring removed bh option [ 125.742791][ T7817] openvswitch: netlink: Message has 6 unknown bytes. [ 125.756046][ T7811] SELinux: policydb version 0 does not match my version range 15-35 [ 125.764315][ T7811] SELinux: failed to load policy [ 125.770302][ T7811] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 125.847787][ T7822] loop4: detected capacity change from 0 to 512 [ 125.854383][ T7820] loop2: detected capacity change from 0 to 2048 [ 125.876570][ T7822] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 125.891061][ T4072] loop2: p4 < > [ 125.897657][ T7820] loop2: p4 < > [ 125.969965][ T4064] udevd[4064]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 126.052316][ T7832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1320'. [ 126.116535][ T7828] bond0: entered promiscuous mode [ 126.121675][ T7828] bond0: entered allmulticast mode [ 126.127141][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.136715][ T7828] bond0 (unregistering): Released all slaves [ 126.181901][ T7833] loop4: detected capacity change from 0 to 512 [ 126.199224][ T7833] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.226651][ T7833] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1316: Failed to acquire dquot type 1 [ 126.284773][ T7833] EXT4-fs (loop4): 1 truncate cleaned up [ 126.303626][ T7833] EXT4-fs mount: 98 callbacks suppressed [ 126.303644][ T7833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.346153][ T7841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.358472][ T7822] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 126.383064][ T7822] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 126.454500][ T7841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.467228][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.510576][ T7852] loop4: detected capacity change from 0 to 1024 [ 126.520954][ T7852] EXT4-fs: Ignoring removed bh option [ 126.528643][ T7841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.555790][ T7856] loop3: detected capacity change from 0 to 1024 [ 126.571506][ T7852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 126.575928][ T7856] EXT4-fs: Ignoring removed bh option [ 126.592978][ T7841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.619001][ T7852] SELinux: policydb version 0 does not match my version range 15-35 [ 126.628258][ T7852] SELinux: failed to load policy [ 126.628674][ T7856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 126.634882][ T7852] EXT4-fs: Ignoring removed orlov option [ 126.656607][ T7852] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.1323: Abort forced by user [ 126.658232][ T7856] SELinux: policydb version 0 does not match my version range 15-35 [ 126.685632][ T7856] SELinux: failed to load policy [ 126.694133][ T7852] EXT4-fs (loop4): Remounting filesystem read-only [ 126.700721][ T7852] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 126.711549][ T7856] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 126.738221][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 126.748929][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.781472][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.795276][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.804116][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 126.815137][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.837830][ T7863] FAULT_INJECTION: forcing a failure. [ 126.837830][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.850971][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.3.1327 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 126.850999][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.851009][ T7863] Call Trace: [ 126.851015][ T7863] [ 126.851021][ T7863] __dump_stack+0x1d/0x30 [ 126.851041][ T7863] dump_stack_lvl+0xe8/0x140 [ 126.851057][ T7863] dump_stack+0x15/0x1b [ 126.851140][ T7863] should_fail_ex+0x265/0x280 [ 126.851192][ T7863] should_fail+0xb/0x20 [ 126.851232][ T7863] should_fail_usercopy+0x1a/0x20 [ 126.851258][ T7863] _copy_from_user+0x1c/0xb0 [ 126.851277][ T7863] ___sys_sendmsg+0xc1/0x1d0 [ 126.851308][ T7863] __x64_sys_sendmsg+0xd4/0x160 [ 126.851356][ T7863] x64_sys_call+0x191e/0x2ff0 [ 126.851374][ T7863] do_syscall_64+0xd2/0x200 [ 126.851545][ T7863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.851639][ T7863] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.851664][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.851683][ T7863] RIP: 0033:0x7f0f494beb69 [ 126.851696][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.851727][ T7863] RSP: 002b:00007f0f47b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.851743][ T7863] RAX: ffffffffffffffda RBX: 00007f0f496e5fa0 RCX: 00007f0f494beb69 [ 126.851754][ T7863] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.851765][ T7863] RBP: 00007f0f47b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.851776][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.851786][ T7863] R13: 0000000000000000 R14: 00007f0f496e5fa0 R15: 00007ffd211f6ce8 [ 126.851801][ T7863] [ 127.197164][ T7883] loop4: detected capacity change from 0 to 512 [ 127.205095][ T7883] EXT4-fs: Ignoring removed nobh option [ 127.216726][ T7883] EXT4-fs: test_dummy_encryption option not supported [ 127.228345][ T7886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1334'. [ 127.288932][ T7893] 9p: Unknown access argument Hny: -22 [ 127.335353][ T7894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1335'. [ 127.349087][ T7894] loop3: detected capacity change from 0 to 1024 [ 127.351738][ T7895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1337'. [ 127.373365][ T7894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.470671][ T7904] loop1: detected capacity change from 0 to 1024 [ 127.504929][ T7904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 127.533686][ T7904] System zones: 0-1, 3-36 [ 127.538719][ T7894] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1335: Allocating blocks 497-513 which overlap fs metadata [ 127.598877][ T7904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.702467][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.752834][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.807661][ T7917] loop1: detected capacity change from 0 to 512 [ 127.909770][ T7917] EXT4-fs: Ignoring removed nobh option [ 127.967333][ T7917] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1344: corrupted inode contents [ 128.000359][ T7917] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #3: comm syz.1.1344: mark_inode_dirty error [ 128.045283][ T7917] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1344: corrupted inode contents [ 128.057614][ T7917] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1344: mark_inode_dirty error [ 128.069885][ T7917] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1344: Failed to acquire dquot type 0 [ 128.099971][ T7917] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1344: corrupted inode contents [ 128.152279][ T7931] loop0: detected capacity change from 0 to 512 [ 128.158864][ T7931] EXT4-fs: Ignoring removed nobh option [ 128.163080][ T7917] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #16: comm syz.1.1344: mark_inode_dirty error [ 128.230587][ T7917] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1344: corrupted inode contents [ 128.250429][ T7931] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1349: corrupted inode contents [ 128.274141][ T7917] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1344: mark_inode_dirty error [ 128.296198][ T7931] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1349: mark_inode_dirty error [ 128.320046][ T7917] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1344: corrupted inode contents [ 128.338198][ T7917] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 128.338228][ T7931] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1349: corrupted inode contents [ 128.359844][ T7917] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1344: corrupted inode contents [ 128.376831][ T7931] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1349: mark_inode_dirty error [ 128.398593][ T7917] EXT4-fs error (device loop1): ext4_truncate:4592: inode #16: comm syz.1.1344: mark_inode_dirty error [ 128.404360][ T7931] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1349: Failed to acquire dquot type 0 [ 128.424712][ T7931] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1349: corrupted inode contents [ 128.436780][ T7917] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 128.436991][ T7931] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1349: mark_inode_dirty error [ 128.452077][ T7937] loop3: detected capacity change from 0 to 1024 [ 128.458135][ T7931] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1349: corrupted inode contents [ 128.476314][ T7931] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1349: mark_inode_dirty error [ 128.488081][ T7931] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1349: corrupted inode contents [ 128.500814][ T7917] EXT4-fs (loop1): 1 truncate cleaned up [ 128.501524][ T7931] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 128.506917][ T7917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.515663][ T7931] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1349: corrupted inode contents [ 128.538513][ T7937] EXT4-fs: Ignoring removed bh option [ 128.557309][ T7931] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1349: mark_inode_dirty error [ 128.558329][ T7917] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.569636][ T7931] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 128.589959][ T7931] EXT4-fs (loop0): 1 truncate cleaned up [ 128.596029][ T7931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.608747][ T7931] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.621057][ T7937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 128.649430][ T29] kauditd_printk_skb: 872 callbacks suppressed [ 128.649444][ T29] audit: type=1326 audit(1753984301.393:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe8138d4d0 code=0x7ffc0000 [ 128.679122][ T29] audit: type=1326 audit(1753984301.393:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.702532][ T29] audit: type=1326 audit(1753984301.393:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.725932][ T29] audit: type=1326 audit(1753984301.393:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.749422][ T29] audit: type=1326 audit(1753984301.393:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.772974][ T29] audit: type=1326 audit(1753984301.393:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.796353][ T29] audit: type=1400 audit(1753984301.393:8022): avc: denied { write } for pid=7924 comm="syz.4.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.815696][ T29] audit: type=1326 audit(1753984301.393:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.839110][ T29] audit: type=1326 audit(1753984301.393:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.866765][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.876268][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.903622][ T29] audit: type=1326 audit(1753984301.403:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8138eb69 code=0x7ffc0000 [ 128.962226][ T7951] loop1: detected capacity change from 0 to 128 [ 128.972324][ T7953] loop4: detected capacity change from 0 to 128 [ 128.980839][ T7947] pim6reg1: entered promiscuous mode [ 128.986214][ T7947] pim6reg1: entered allmulticast mode [ 128.991969][ T7952] loop0: detected capacity change from 0 to 128 [ 128.992543][ T7937] SELinux: policydb version 0 does not match my version range 15-35 [ 129.006749][ T7937] SELinux: failed to load policy [ 129.049300][ T7951] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.068342][ T7951] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.092450][ T7937] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 129.132937][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 129.152998][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.190281][ T7969] loop2: detected capacity change from 0 to 128 [ 129.199684][ T7969] EXT4-fs: Ignoring removed nobh option [ 129.213122][ T7969] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.252753][ T7971] loop3: detected capacity change from 0 to 2048 [ 129.280008][ T7976] 9p: Unknown access argument Hny: -22 [ 129.285637][ T7969] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.309895][ T7971] loop3: p4 < > [ 129.319155][ T2990] loop3: p4 < > [ 129.368008][ T4064] udevd[4064]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 129.450405][ T4064] udevd[4064]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 129.477885][ T7992] loop1: detected capacity change from 0 to 1024 [ 129.484803][ T7969] __nla_validate_parse: 3 callbacks suppressed [ 129.484891][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1365'. [ 129.510456][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1365'. [ 129.526467][ T7998] loop3: detected capacity change from 0 to 1024 [ 129.535180][ T7992] EXT4-fs: Ignoring removed bh option [ 129.565052][ T7992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 129.580106][ T7998] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 129.612438][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.617337][ T7998] System zones: 0-1, 3-36 [ 129.627221][ T7998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.663276][ T7992] SELinux: policydb version 0 does not match my version range 15-35 [ 129.683284][ T7992] SELinux: failed to load policy [ 129.690185][ T7992] EXT4-fs: Ignoring removed orlov option [ 129.696128][ T7992] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1371: Abort forced by user [ 129.716620][ T7998] EXT4-fs error (device loop3): __ext4_iget:5374: inode #12: block 13: comm syz.3.1374: invalid block [ 129.758622][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 129.767660][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 129.778626][ T8008] EXT4-fs error (device loop3): __ext4_iget:5374: inode #12: block 13: comm syz.3.1374: invalid block [ 129.789978][ T7992] EXT4-fs (loop1): Remounting filesystem read-only [ 129.796475][ T7992] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 129.806522][ T7998] EXT4-fs error (device loop3): __ext4_iget:5374: inode #12: block 13: comm syz.3.1374: invalid block [ 129.840056][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 129.876573][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.929218][ T8021] loop1: detected capacity change from 0 to 128 [ 129.964480][ T8021] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.999323][ T8030] loop2: detected capacity change from 0 to 128 [ 130.010451][ T8021] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.074857][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.122210][ T8040] loop1: detected capacity change from 0 to 512 [ 130.141558][ T8038] loop2: detected capacity change from 0 to 512 [ 130.148173][ T8038] EXT4-fs: Ignoring removed nobh option [ 130.173895][ T8040] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 130.252009][ T8047] loop0: detected capacity change from 0 to 1024 [ 130.280801][ T8038] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1390: corrupted inode contents [ 130.296718][ T8047] EXT4-fs: inline encryption not supported [ 130.335944][ T8047] EXT4-fs: Ignoring removed bh option [ 130.352479][ T8038] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.1390: mark_inode_dirty error [ 130.390455][ T8047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.413352][ T8038] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1390: corrupted inode contents [ 130.451518][ T8038] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1390: mark_inode_dirty error [ 130.502447][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.521928][ T8038] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1390: Failed to acquire dquot type 0 [ 130.579561][ T8038] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1390: corrupted inode contents [ 130.618744][ T8052] loop1: detected capacity change from 0 to 512 [ 130.619676][ T8038] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1390: mark_inode_dirty error [ 130.638257][ T8038] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1390: corrupted inode contents [ 130.666542][ T8052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.677044][ T8059] loop0: detected capacity change from 0 to 512 [ 130.690391][ T8059] EXT4-fs: Ignoring removed nobh option [ 130.696104][ T8059] EXT4-fs: test_dummy_encryption option not supported [ 130.715074][ T8052] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1389: Failed to acquire dquot type 1 [ 130.744318][ T8038] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1390: mark_inode_dirty error [ 130.758802][ T8063] loop4: detected capacity change from 0 to 128 [ 130.765992][ T8038] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1390: corrupted inode contents [ 130.780521][ T8065] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.792586][ T8063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.802703][ T8038] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 130.804966][ T8052] EXT4-fs (loop1): 1 truncate cleaned up [ 130.819723][ T8052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.832202][ T8063] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.844210][ T8038] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1390: corrupted inode contents [ 130.847088][ T8070] loop0: detected capacity change from 0 to 128 [ 130.862341][ T8038] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1390: mark_inode_dirty error [ 130.874978][ T8065] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.885496][ T8038] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 130.896237][ T8070] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.909317][ T8038] EXT4-fs (loop2): 1 truncate cleaned up [ 130.915600][ T8038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.930966][ T8070] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.941941][ T8038] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.961744][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.982260][ T8065] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.005239][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.018782][ T8074] loop4: detected capacity change from 0 to 1024 [ 131.033630][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.046462][ T8076] loop1: detected capacity change from 0 to 128 [ 131.067157][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.077830][ T8065] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.088299][ T8074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 131.096921][ T8074] System zones: 0-1, 3-36 [ 131.129906][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.152223][ T8074] EXT4-fs error (device loop4): __ext4_iget:5374: inode #12: block 13: comm syz.4.1401: invalid block [ 131.171104][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.186539][ T8074] EXT4-fs error (device loop4): __ext4_iget:5374: inode #12: block 13: comm syz.4.1401: invalid block [ 131.203223][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.238246][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.276316][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.285893][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.297972][ T8092] loop2: detected capacity change from 0 to 2048 [ 131.312420][ T8096] loop3: detected capacity change from 0 to 512 [ 131.319214][ T8096] EXT4-fs: Ignoring removed nobh option [ 131.330913][ T8096] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #3: comm syz.3.1410: corrupted inode contents [ 131.343348][ T8098] loop4: detected capacity change from 0 to 2048 [ 131.343403][ T8096] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #3: comm syz.3.1410: mark_inode_dirty error [ 131.361601][ T8092] loop2: p4 < > [ 131.361720][ T8096] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #3: comm syz.3.1410: corrupted inode contents [ 131.377219][ T8096] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1410: mark_inode_dirty error [ 131.389050][ T8098] loop4: p4 < > [ 131.395574][ T8096] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1410: Failed to acquire dquot type 0 [ 131.407392][ T8096] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.1410: corrupted inode contents [ 131.420055][ T8096] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #16: comm syz.3.1410: mark_inode_dirty error [ 131.432030][ T8096] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.1410: corrupted inode contents [ 131.461677][ T8096] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1410: mark_inode_dirty error [ 131.480470][ T8102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8102 comm=syz.2.1411 [ 131.509898][ T8096] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.1410: corrupted inode contents [ 131.522098][ T8096] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 131.532433][ T8096] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.1410: corrupted inode contents [ 131.537301][ T8102] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1411'. [ 131.554954][ T8096] EXT4-fs error (device loop3): ext4_truncate:4592: inode #16: comm syz.3.1410: mark_inode_dirty error [ 131.555012][ T8102] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1411'. [ 131.584320][ T8096] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 131.594275][ T8096] EXT4-fs (loop3): 1 truncate cleaned up [ 131.600750][ T8096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.613648][ T8096] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.652898][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.685116][ T8118] syzkaller1: entered promiscuous mode [ 131.690899][ T8118] syzkaller1: entered allmulticast mode [ 131.806694][ T8120] loop1: detected capacity change from 0 to 512 [ 131.828030][ T8120] EXT4-fs: Ignoring removed nobh option [ 131.871640][ T8120] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1416: corrupted inode contents [ 131.898848][ T8120] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #3: comm syz.1.1416: mark_inode_dirty error [ 131.940793][ T8120] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1416: corrupted inode contents [ 131.983456][ T8120] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1416: mark_inode_dirty error [ 132.015240][ T8120] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1416: Failed to acquire dquot type 0 [ 132.051811][ T8120] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1416: corrupted inode contents [ 132.083650][ T8120] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #16: comm syz.1.1416: mark_inode_dirty error [ 132.107588][ T8120] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1416: corrupted inode contents [ 132.128562][ T8120] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1416: mark_inode_dirty error [ 132.144429][ T8120] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1416: corrupted inode contents [ 132.176343][ T8125] loop0: detected capacity change from 0 to 512 [ 132.184638][ T8120] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 132.193759][ T8125] EXT4-fs: Ignoring removed nobh option [ 132.200617][ T8127] IPv6: Can't replace route, no match found [ 132.206883][ T8120] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1416: corrupted inode contents [ 132.220718][ T8120] EXT4-fs error (device loop1): ext4_truncate:4592: inode #16: comm syz.1.1416: mark_inode_dirty error [ 132.238344][ T8120] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 132.242894][ T8129] loop4: detected capacity change from 0 to 512 [ 132.249075][ T8120] EXT4-fs (loop1): 1 truncate cleaned up [ 132.261838][ T8125] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1417: corrupted inode contents [ 132.269748][ T8129] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.280130][ T8129] EXT4-fs: Invalid want_extra_isize 3 [ 132.291003][ T8129] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 132.307873][ T8125] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1417: mark_inode_dirty error [ 132.319830][ T8120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.329383][ T8129] SELinux: failed to load policy [ 132.332431][ T8120] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.368211][ T8129] loop4: detected capacity change from 0 to 2048 [ 132.390956][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.400597][ T8125] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1417: corrupted inode contents [ 132.417357][ T8125] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1417: mark_inode_dirty error [ 132.432050][ T8129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.455158][ T8129] 9pnet_fd: Insufficient options for proto=fd [ 132.483122][ T8125] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1417: Failed to acquire dquot type 0 [ 132.500185][ T8125] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1417: corrupted inode contents [ 132.548611][ T8125] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1417: mark_inode_dirty error [ 132.561095][ T8125] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1417: corrupted inode contents [ 132.576584][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1422'. [ 132.585695][ T8125] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1417: mark_inode_dirty error [ 132.610642][ T8125] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1417: corrupted inode contents [ 132.647983][ T8125] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 132.661085][ T8125] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1417: corrupted inode contents [ 132.673133][ T8146] loop2: detected capacity change from 0 to 128 [ 132.673320][ T8125] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1417: mark_inode_dirty error [ 132.691991][ T8125] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 132.692729][ T8146] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.701690][ T8125] EXT4-fs (loop0): 1 truncate cleaned up [ 132.720686][ T8125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.723458][ T8146] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.733314][ T8125] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.805020][ T8149] loop1: detected capacity change from 0 to 1024 [ 132.805409][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.814828][ T8149] EXT4-fs: Ignoring removed bh option [ 132.845053][ T8149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 132.862376][ T8153] loop2: detected capacity change from 0 to 1024 [ 132.893805][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.903943][ T8153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 132.916123][ T8149] SELinux: policydb version 0 does not match my version range 15-35 [ 132.925573][ T8153] System zones: 0-1, 3-36 [ 132.938643][ T8153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.952754][ T8149] SELinux: failed to load policy [ 132.967387][ T8149] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 133.021540][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 133.054957][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.147241][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.204173][ T8175] IPv6: Can't replace route, no match found [ 133.231130][ T8177] loop0: detected capacity change from 0 to 1024 [ 133.278594][ T8177] EXT4-fs: Ignoring removed bh option [ 133.311116][ T8177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 133.376385][ T8177] SELinux: policydb version 0 does not match my version range 15-35 [ 133.405955][ T8177] SELinux: failed to load policy [ 133.431870][ T8177] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000. [ 133.451288][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1434'. [ 133.480810][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 133.522004][ T8191] IPv6: Can't replace route, no match found [ 133.583284][ T8195] loop0: detected capacity change from 0 to 512 [ 133.590588][ T8195] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 133.621350][ T8197] loop0: detected capacity change from 0 to 512 [ 133.651665][ T8197] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 133.686613][ T8199] loop2: detected capacity change from 0 to 1024 [ 133.694043][ T8197] loop0: detected capacity change from 0 to 512 [ 133.702199][ T8197] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.709124][ T8199] EXT4-fs: Ignoring removed bh option [ 133.715864][ T8197] __quota_error: 826 callbacks suppressed [ 133.715879][ T8197] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 133.732142][ T8197] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 133.741538][ T8197] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1439: Failed to acquire dquot type 1 [ 133.757566][ T8197] EXT4-fs (loop0): 1 truncate cleaned up [ 133.764036][ T8197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.778363][ T8199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 133.794441][ T8199] SELinux: policydb version 0 does not match my version range 15-35 [ 133.803024][ T8199] SELinux: failed to load policy [ 133.813578][ T8199] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-001000000000. [ 133.834143][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 133.857150][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.910997][ T8209] loop2: detected capacity change from 0 to 512 [ 133.934012][ T8209] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 133.965056][ T8209] loop2: detected capacity change from 0 to 512 [ 133.980875][ T29] audit: type=1326 audit(1753984306.733:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59035ceb69 code=0x7ffc0000 [ 134.004352][ T29] audit: type=1326 audit(1753984306.733:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59035ceb69 code=0x7ffc0000 [ 134.030354][ T8209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.030854][ T8213] loop1: detected capacity change from 0 to 1024 [ 134.037152][ T8209] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 134.053419][ T8209] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 134.062871][ T8209] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1441: Failed to acquire dquot type 1 [ 134.077191][ T29] audit: type=1326 audit(1753984306.733:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f59035ceb69 code=0x7ffc0000 [ 134.077571][ T8209] EXT4-fs (loop2): 1 truncate cleaned up [ 134.100841][ T29] audit: type=1326 audit(1753984306.733:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59035ceb69 code=0x7ffc0000 [ 134.129825][ T29] audit: type=1326 audit(1753984306.733:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59035ceb69 code=0x7ffc0000 [ 134.138510][ T8213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 134.153256][ T29] audit: type=1326 audit(1753984306.733:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f59035ceb69 code=0x7ffc0000 [ 134.161415][ T8213] System zones: 0-1, 3-36 [ 134.190042][ T8213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.196155][ T8209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.256789][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.277870][ T8219] 9p: Unknown access argument Hny: -22 [ 134.307369][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.368639][ T8229] IPv6: Can't replace route, no match found [ 134.386680][ T8226] loop1: detected capacity change from 0 to 128 [ 134.462527][ T8236] loop1: detected capacity change from 0 to 512 [ 134.489590][ T8236] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 134.518380][ T8236] loop1: detected capacity change from 0 to 512 [ 134.542606][ T8238] loop2: detected capacity change from 0 to 512 [ 134.549187][ T8236] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.569434][ T8238] EXT4-fs: Ignoring removed nobh option [ 134.569781][ T8236] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1453: Failed to acquire dquot type 1 [ 134.597033][ T8238] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1454: corrupted inode contents [ 134.612050][ T8238] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.1454: mark_inode_dirty error [ 134.630063][ T8249] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.641476][ T8236] EXT4-fs (loop1): 1 truncate cleaned up [ 134.643984][ T8247] loop0: detected capacity change from 0 to 2048 [ 134.647593][ T8236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.655177][ T8238] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1454: corrupted inode contents [ 134.677991][ T8238] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1454: mark_inode_dirty error [ 134.689704][ T8238] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1454: Failed to acquire dquot type 0 [ 134.702062][ T8247] loop0: p4 < > [ 134.702291][ T8238] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1454: corrupted inode contents [ 134.717902][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.720290][ T8238] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1454: mark_inode_dirty error [ 134.743146][ T8249] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.753571][ T8238] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1454: corrupted inode contents [ 134.767242][ T8238] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1454: mark_inode_dirty error [ 134.778866][ T8238] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1454: corrupted inode contents [ 134.791959][ T8238] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 134.801129][ T8238] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1454: corrupted inode contents [ 134.815205][ T8238] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1454: mark_inode_dirty error [ 134.826611][ T8238] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 134.835700][ T8253] loop1: detected capacity change from 0 to 1024 [ 134.843197][ T8238] EXT4-fs (loop2): 1 truncate cleaned up [ 134.849139][ T8255] loop0: detected capacity change from 0 to 128 [ 134.849653][ T8238] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.856307][ T8253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 134.874088][ T8253] System zones: 0-1, 3-36 [ 134.876308][ T8255] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.890056][ T8249] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.936439][ T8266] loop0: detected capacity change from 0 to 1024 [ 134.945650][ T8249] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.950763][ T8263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8263 comm=syz.2.1464 [ 134.959716][ T8266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 134.976465][ T8266] System zones: 0-1, 3-36 [ 135.007852][ T8273] loop1: detected capacity change from 0 to 1024 [ 135.015455][ T8273] EXT4-fs: Ignoring removed bh option [ 135.025183][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.043974][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.044319][ T8273] SELinux: policydb version 0 does not match my version range 15-35 [ 135.060355][ T8273] SELinux: failed to load policy [ 135.075668][ T8273] EXT4-fs: Ignoring removed orlov option [ 135.081778][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.090243][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.106660][ T8273] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1466: Abort forced by user [ 135.127633][ T8273] EXT4-fs (loop1): Remounting filesystem read-only [ 135.134248][ T8273] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 135.155923][ T8284] IPv6: Can't replace route, no match found [ 135.189417][ T8285] pim6reg1: entered promiscuous mode [ 135.194761][ T8285] pim6reg1: entered allmulticast mode [ 135.291824][ T8293] loop0: detected capacity change from 0 to 128 [ 135.298309][ T8293] EXT4-fs: Ignoring removed nobh option [ 135.306265][ T8293] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.627939][ T8307] loop0: detected capacity change from 0 to 1024 [ 135.650139][ T8307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 135.668476][ T8307] System zones: 0-1, 3-36 [ 135.784681][ T8313] loop0: detected capacity change from 0 to 2048 [ 135.799782][ T8314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1480'. [ 135.823312][ T8317] loop3: detected capacity change from 0 to 128 [ 135.837869][ T8317] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.849994][ T8313] loop0: p4 < > [ 135.931026][ T8328] IPv6: Can't replace route, no match found [ 135.967793][ T8330] loop1: detected capacity change from 0 to 128 [ 136.043362][ T8340] loop1: detected capacity change from 0 to 1024 [ 136.059344][ T8340] EXT4-fs: Ignoring removed bh option [ 136.087026][ T8340] SELinux: policydb version 0 does not match my version range 15-35 [ 136.095447][ T8340] SELinux: failed to load policy [ 136.106232][ T8340] EXT4-fs: Ignoring removed orlov option [ 136.112903][ T8340] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1490: Abort forced by user [ 136.124046][ T8340] EXT4-fs (loop1): Remounting filesystem read-only [ 136.130613][ T8340] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000. [ 136.143738][ T8347] loop0: detected capacity change from 0 to 1024 [ 136.159844][ T8347] EXT4-fs: Ignoring removed bh option [ 136.187345][ T8346] SELinux: policydb version 0 does not match my version range 15-35 [ 136.213151][ T8346] SELinux: failed to load policy [ 136.230167][ T8355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1493'. [ 136.249104][ T8346] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000. [ 136.274054][ T8357] loop3: detected capacity change from 0 to 1024 [ 136.305767][ T8357] EXT4-fs: Ignoring removed bh option [ 136.317618][ T8359] loop0: detected capacity change from 0 to 512 [ 136.325346][ T8359] EXT4-fs: Ignoring removed nobh option [ 136.335334][ T8357] SELinux: policydb version 0 does not match my version range 15-35 [ 136.349189][ T8357] SELinux: failed to load policy [ 136.356547][ T8359] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1496: corrupted inode contents [ 136.377381][ T8357] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 136.385726][ T8359] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1496: mark_inode_dirty error [ 136.409908][ T8359] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1496: corrupted inode contents [ 136.421953][ T8365] loop2: detected capacity change from 0 to 2048 [ 136.423297][ T8359] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1496: mark_inode_dirty error [ 136.441341][ T8359] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1496: Failed to acquire dquot type 0 [ 136.459065][ T8359] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1496: corrupted inode contents [ 136.471481][ T8365] loop2: p4 < > [ 136.475464][ T8359] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1496: mark_inode_dirty error [ 136.494906][ T8359] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1496: corrupted inode contents [ 136.526069][ T8376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1500'. [ 136.537017][ T8359] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1496: mark_inode_dirty error [ 136.554851][ T8379] loop2: detected capacity change from 0 to 512 [ 136.561217][ T8359] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1496: corrupted inode contents [ 136.562802][ T8379] EXT4-fs: Ignoring removed nobh option [ 136.580845][ T8359] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 136.590383][ T8359] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1496: corrupted inode contents [ 136.603798][ T8379] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1503: corrupted inode contents [ 136.615929][ T8359] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1496: mark_inode_dirty error [ 136.627614][ T8359] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 136.636871][ T8379] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.1503: mark_inode_dirty error [ 136.649139][ T8379] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1503: corrupted inode contents [ 136.661510][ T8359] EXT4-fs (loop0): 1 truncate cleaned up [ 136.667564][ T8359] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.678571][ T8379] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1503: mark_inode_dirty error [ 136.723511][ T8387] loop3: detected capacity change from 0 to 2048 [ 136.730859][ T8379] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1503: Failed to acquire dquot type 0 [ 136.743977][ T8379] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1503: corrupted inode contents [ 136.757073][ T8391] loop1: detected capacity change from 0 to 128 [ 136.765649][ T8387] loop3: p4 < > [ 136.785910][ T8379] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1503: mark_inode_dirty error [ 136.789780][ T8391] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.815049][ T8379] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1503: corrupted inode contents [ 136.828862][ T8379] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1503: mark_inode_dirty error [ 136.841268][ T8379] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1503: corrupted inode contents [ 136.853405][ T8379] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 136.863393][ T8379] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1503: corrupted inode contents [ 136.879555][ T8379] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1503: mark_inode_dirty error [ 136.890866][ T8400] loop3: detected capacity change from 0 to 1024 [ 136.898409][ T8379] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 136.908218][ T8400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 136.913936][ T8379] EXT4-fs (loop2): 1 truncate cleaned up [ 136.916875][ T8400] System zones: 0-1, 3-36 [ 136.927527][ T8379] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.963193][ T8408] loop1: detected capacity change from 0 to 512 [ 136.970293][ T8408] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 137.015816][ T8411] loop3: detected capacity change from 0 to 128 [ 137.022684][ T8411] EXT4-fs: Ignoring removed nobh option [ 137.043321][ T8411] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.066591][ T8414] IPv6: Can't replace route, no match found [ 137.116750][ T8418] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.150838][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1515'. [ 137.160269][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1515'. [ 137.181952][ T8408] loop1: detected capacity change from 0 to 512 [ 137.192170][ T8408] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.198809][ T8408] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1514: Failed to acquire dquot type 1 [ 137.211691][ T8408] EXT4-fs (loop1): 1 truncate cleaned up [ 137.245907][ T8418] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.268394][ T8426] loop3: detected capacity change from 0 to 2048 [ 137.300620][ T8426] loop3: p4 < > [ 137.311704][ T8418] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.326027][ T8434] loop1: detected capacity change from 0 to 512 [ 137.333934][ T8434] EXT4-fs: Ignoring removed nobh option [ 137.352559][ T8438] loop2: detected capacity change from 0 to 512 [ 137.359201][ T8438] EXT4-fs: Ignoring removed nobh option [ 137.368975][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1523: corrupted inode contents [ 137.381931][ T8434] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #3: comm syz.1.1523: mark_inode_dirty error [ 137.382390][ T8418] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.393639][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1523: corrupted inode contents [ 137.415895][ T8434] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1523: mark_inode_dirty error [ 137.428520][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1526: corrupted inode contents [ 137.440564][ T8434] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1523: Failed to acquire dquot type 0 [ 137.450340][ T8438] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.1526: mark_inode_dirty error [ 137.464565][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1523: corrupted inode contents [ 137.464650][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1526: corrupted inode contents [ 137.481902][ T8448] loop3: detected capacity change from 0 to 1024 [ 137.490238][ T8438] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1526: mark_inode_dirty error [ 137.494655][ T8434] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #16: comm syz.1.1523: mark_inode_dirty error [ 137.507096][ T8448] EXT4-fs: Ignoring removed bh option [ 137.517515][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1523: corrupted inode contents [ 137.523298][ T8438] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1526: Failed to acquire dquot type 0 [ 137.535614][ T8434] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1523: mark_inode_dirty error [ 137.546689][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1526: corrupted inode contents [ 137.557824][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1523: corrupted inode contents [ 137.580549][ T3427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.582569][ T8438] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1526: mark_inode_dirty error [ 137.588801][ T3427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.588836][ T3427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.616634][ T8434] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 137.620220][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.625392][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1523: corrupted inode contents [ 137.645592][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1526: corrupted inode contents [ 137.657804][ T8438] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1526: mark_inode_dirty error [ 137.665913][ T8448] SELinux: policydb version 0 does not match my version range 15-35 [ 137.670855][ T8434] EXT4-fs error (device loop1): ext4_truncate:4592: inode #16: comm syz.1.1523: mark_inode_dirty error [ 137.678230][ T8448] SELinux: failed to load policy [ 137.688224][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1526: corrupted inode contents [ 137.705200][ T8438] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 137.708740][ T8434] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 137.714672][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1526: corrupted inode contents [ 137.732635][ T8434] EXT4-fs (loop1): 1 truncate cleaned up [ 137.735446][ T8438] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1526: mark_inode_dirty error [ 137.752780][ T8448] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 137.753165][ T8434] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.760871][ T8438] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 137.796401][ T8438] EXT4-fs (loop2): 1 truncate cleaned up [ 137.802534][ T8438] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.823666][ T8454] loop0: detected capacity change from 0 to 512 [ 137.835807][ T8458] loop1: detected capacity change from 0 to 512 [ 137.842924][ T8454] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 137.848782][ T8457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8457 comm=syz.3.1531 [ 137.852092][ T8458] EXT4-fs: Ignoring removed nobh option [ 137.872771][ T8457] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1531'. [ 137.883684][ T8457] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1531'. [ 137.895073][ T8458] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1533: corrupted inode contents [ 137.908059][ T8458] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #3: comm syz.1.1533: mark_inode_dirty error [ 137.920519][ T8458] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.1533: corrupted inode contents [ 137.933540][ T8458] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1533: mark_inode_dirty error [ 137.956454][ T8458] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1533: Failed to acquire dquot type 0 [ 137.984409][ T8458] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1533: corrupted inode contents [ 138.016701][ T8467] loop2: detected capacity change from 0 to 2048 [ 138.020132][ T8454] loop0: detected capacity change from 0 to 512 [ 138.023555][ T8458] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #16: comm syz.1.1533: mark_inode_dirty error [ 138.041737][ T8458] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1533: corrupted inode contents [ 138.042249][ T8454] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.054004][ T8458] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1533: mark_inode_dirty error [ 138.061303][ T8454] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1532: Failed to acquire dquot type 1 [ 138.071794][ T8458] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1533: corrupted inode contents [ 138.083828][ T8454] EXT4-fs (loop0): 1 truncate cleaned up [ 138.094844][ T8458] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 138.100536][ T8467] loop2: p4 < > [ 138.108855][ T8458] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1533: corrupted inode contents [ 138.129614][ T8458] EXT4-fs error (device loop1): ext4_truncate:4592: inode #16: comm syz.1.1533: mark_inode_dirty error [ 138.147643][ T8458] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 138.157537][ T8458] EXT4-fs (loop1): 1 truncate cleaned up [ 138.169291][ T8458] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.210862][ T8471] loop0: detected capacity change from 0 to 2048 [ 138.230450][ T8473] loop2: detected capacity change from 0 to 2048 [ 138.249813][ T8471] loop0: p4 < > [ 138.271846][ T8473] loop2: p4 < > [ 138.326607][ T8487] loop2: detected capacity change from 0 to 128 [ 138.334429][ T8487] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.405408][ T8499] loop0: detected capacity change from 0 to 512 [ 138.420603][ T8499] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 138.560149][ T8507] 9pnet_fd: Insufficient options for proto=fd [ 138.576125][ T8499] loop0: detected capacity change from 0 to 512 [ 138.596225][ T8499] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.609486][ T8499] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1547: Failed to acquire dquot type 1 [ 138.613747][ T8511] loop2: detected capacity change from 0 to 1024 [ 138.629023][ T8511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 138.638155][ T8511] System zones: 0-1, 3-36 [ 138.638178][ T8499] EXT4-fs (loop0): 1 truncate cleaned up [ 138.648210][ T8511] [ 138.750751][ T29] kauditd_printk_skb: 1033 callbacks suppressed [ 138.750848][ T29] audit: type=1326 audit(1753984311.493:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6d7eb69 code=0x7ffc0000 [ 138.780711][ T29] audit: type=1326 audit(1753984311.493:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fbdc6d7eb69 code=0x7ffc0000 [ 138.804138][ T29] audit: type=1326 audit(1753984311.493:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6d7eb69 code=0x7ffc0000 [ 138.860794][ T29] audit: type=1326 audit(1753984311.613:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 138.884361][ T29] audit: type=1326 audit(1753984311.613:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 138.921689][ T8526] loop0: detected capacity change from 0 to 1024 [ 138.926680][ T29] audit: type=1326 audit(1753984311.663:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 138.951507][ T29] audit: type=1326 audit(1753984311.663:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 138.952735][ T8526] EXT4-fs: Ignoring removed bh option [ 138.975049][ T29] audit: type=1326 audit(1753984311.663:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 138.975078][ T29] audit: type=1326 audit(1753984311.663:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 138.975111][ T29] audit: type=1326 audit(1753984311.663:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f494beb69 code=0x7ffc0000 [ 139.073273][ T8526] SELinux: policydb version 0 does not match my version range 15-35 [ 139.084171][ T8526] SELinux: failed to load policy [ 139.089783][ T8526] EXT4-fs: Ignoring removed orlov option [ 139.091339][ T8531] loop3: detected capacity change from 0 to 128 [ 139.134975][ T8536] loop2: detected capacity change from 0 to 512 [ 139.141290][ T8526] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.1556: Abort forced by user [ 139.153849][ T8526] EXT4-fs (loop0): Remounting filesystem read-only [ 139.154353][ T8531] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.160413][ T8526] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000. [ 139.179006][ T8536] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 139.212730][ T8538] 9pnet_fd: Insufficient options for proto=fd [ 139.257194][ T8542] loop3: detected capacity change from 0 to 1024 [ 139.283655][ T8552] loop0: detected capacity change from 0 to 512 [ 139.291107][ T8552] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 139.313814][ T8542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 139.338013][ T8542] System zones: 0-1, 3-36 [ 139.355970][ T8559] loop2: detected capacity change from 0 to 512 [ 139.364211][ T8559] EXT4-fs: Ignoring removed nobh option [ 139.383832][ T8559] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1568: corrupted inode contents [ 139.399127][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1562'. [ 139.412040][ T8563] loop0: detected capacity change from 0 to 128 [ 139.426444][ T8562] loop4: detected capacity change from 0 to 1024 [ 139.469598][ T8563] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.480133][ T8559] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.1568: mark_inode_dirty error [ 139.553835][ T8559] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.1568: corrupted inode contents [ 139.569562][ T8573] loop3: detected capacity change from 0 to 128 [ 139.599580][ T8573] EXT4-fs: Ignoring removed nobh option [ 139.613577][ T8562] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1562: Allocating blocks 497-513 which overlap fs metadata [ 139.645138][ T8559] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1568: mark_inode_dirty error [ 139.645265][ T8573] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.678945][ T8559] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1568: Failed to acquire dquot type 0 [ 139.700249][ T8559] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1568: corrupted inode contents [ 139.713576][ T8559] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.1568: mark_inode_dirty error [ 139.747088][ T8559] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1568: corrupted inode contents [ 139.759203][ T8559] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1568: mark_inode_dirty error [ 139.772392][ T8559] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1568: corrupted inode contents [ 139.789494][ T8559] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 139.796482][ T8576] 9pnet_fd: Insufficient options for proto=fd [ 139.804260][ T8578] loop4: detected capacity change from 0 to 1024 [ 139.811618][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'. [ 139.820669][ T8559] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.1568: corrupted inode contents [ 139.833582][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 139.878256][ T8578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 139.888223][ T8578] System zones: 0-1, 3-36 [ 139.902807][ T8559] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.1568: mark_inode_dirty error [ 139.918717][ T8559] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 139.928143][ T8559] EXT4-fs (loop2): 1 truncate cleaned up [ 139.935424][ T8559] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.964900][ T8587] loop3: detected capacity change from 0 to 1024 [ 139.971747][ T8587] EXT4-fs: Ignoring removed bh option [ 140.007245][ T8593] IPv6: Can't replace route, no match found [ 140.046896][ T8598] loop4: detected capacity change from 0 to 1024 [ 140.056508][ T8598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 140.079729][ T8598] System zones: 0-1, 3-36 [ 140.094553][ T8587] SELinux: policydb version 0 does not match my version range 15-35 [ 140.102855][ T8587] SELinux: failed to load policy [ 140.108619][ T8587] EXT4-fs: Ignoring removed orlov option [ 140.115740][ T8587] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.1574: Abort forced by user [ 140.127441][ T8587] EXT4-fs (loop3): Remounting filesystem read-only [ 140.134085][ T8587] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 140.229072][ T8616] loop1: detected capacity change from 0 to 1024 [ 140.354262][ T8616] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1581: Allocating blocks 497-513 which overlap fs metadata [ 140.377758][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.438114][ T8634] loop0: detected capacity change from 0 to 128 [ 140.455311][ T8634] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.455910][ T8639] loop1: detected capacity change from 0 to 128 [ 140.473541][ T8639] EXT4-fs: Ignoring removed nobh option [ 140.482318][ T8639] ext4 filesystem being mounted at /338/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.497468][ T8636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8636 comm=syz.2.1592 [ 140.513358][ T8642] loop3: detected capacity change from 0 to 1024 [ 140.521660][ T8642] EXT4-fs: Ignoring removed bh option [ 140.547204][ T8646] loop1: detected capacity change from 0 to 512 [ 140.554986][ T8646] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 140.587319][ T8642] SELinux: policydb version 0 does not match my version range 15-35 [ 140.598133][ T8642] SELinux: failed to load policy [ 140.604714][ T8642] EXT4-fs: Ignoring removed orlov option [ 140.612223][ T8642] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.1594: Abort forced by user [ 140.631357][ T8642] EXT4-fs (loop3): Remounting filesystem read-only [ 140.637919][ T8642] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 140.656306][ T8655] loop0: detected capacity change from 0 to 512 [ 140.663932][ T8655] EXT4-fs: Ignoring removed nobh option [ 140.696879][ T8658] sch_tbf: burst 19870 is lower than device lo mtu (65550) ! [ 140.704730][ T8655] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1597: corrupted inode contents [ 140.717924][ T8655] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.1597: mark_inode_dirty error [ 140.738351][ T8658] loop4: detected capacity change from 0 to 512 [ 140.756047][ T8655] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1597: corrupted inode contents [ 140.778141][ T8658] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.788921][ T8646] loop1: detected capacity change from 0 to 512 [ 140.796270][ T8655] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1597: mark_inode_dirty error [ 140.798183][ T8664] loop3: detected capacity change from 0 to 128 [ 140.809740][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1597: Failed to acquire dquot type 0 [ 140.825746][ T8646] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.832793][ T8646] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1596: Failed to acquire dquot type 1 [ 140.840332][ T8655] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1597: corrupted inode contents [ 140.857136][ T8664] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.859695][ T8646] EXT4-fs (loop1): 1 truncate cleaned up [ 140.874951][ T8655] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1597: mark_inode_dirty error [ 140.898943][ T8655] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1597: corrupted inode contents [ 140.923249][ T8655] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1597: mark_inode_dirty error [ 140.940268][ T8655] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1597: corrupted inode contents [ 140.960512][ T8668] __nla_validate_parse: 4 callbacks suppressed [ 140.960605][ T8655] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 140.960625][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 140.960765][ T8655] ================================================================== [ 140.966838][ T8655] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 140.966876][ T8655] [ 140.966883][ T8655] write to 0xffffffff88e2fecc of 53 bytes by task 8668 on cpu 1: [ 140.966903][ T8655] vsnprintf+0x2ce/0x890 [ 140.966924][ T8655] vscnprintf+0x41/0x90 [ 140.966944][ T8655] printk_sprint+0x30/0x2d0 [ 140.966976][ T8655] vprintk_store+0x599/0x860 [ 140.967007][ T8655] vprintk_emit+0x178/0x650 [ 140.967024][ T8655] vprintk_default+0x26/0x30 [ 140.967041][ T8655] vprintk+0x1d/0x30 [ 140.967064][ T8655] _printk+0x79/0xa0 [ 140.967091][ T8655] __nla_validate_parse+0x1738/0x1d00 [ 140.967129][ T8655] __nla_parse+0x40/0x60 [ 140.967164][ T8655] nfnetlink_rcv+0xb57/0x1690 [ 140.967201][ T8655] netlink_unicast+0x5c0/0x690 [ 140.967220][ T8655] netlink_sendmsg+0x58b/0x6b0 [ 140.967243][ T8655] __sock_sendmsg+0x145/0x180 [ 140.967273][ T8655] ____sys_sendmsg+0x31e/0x4e0 [ 140.967301][ T8655] ___sys_sendmsg+0x17b/0x1d0 [ 140.967327][ T8655] __x64_sys_sendmsg+0xd4/0x160 [ 140.967352][ T8655] x64_sys_call+0x191e/0x2ff0 [ 140.967373][ T8655] do_syscall_64+0xd2/0x200 [ 140.967404][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.967429][ T8655] [ 140.967436][ T8655] read to 0xffffffff88e2fee0 of 8 bytes by task 8655 on cpu 0: [ 140.967454][ T8655] data_push_tail+0xfd/0x420 [ 140.967484][ T8655] data_alloc+0xbf/0x2b0 [ 140.967510][ T8655] prb_reserve+0x808/0xaf0 [ 140.967537][ T8655] vprintk_store+0x56d/0x860 [ 140.967567][ T8655] vprintk_emit+0x178/0x650 [ 140.967585][ T8655] vprintk_default+0x26/0x30 [ 140.967609][ T8655] vprintk+0x1d/0x30 [ 140.967632][ T8655] _printk+0x79/0xa0 [ 140.967669][ T8655] __ext4_std_error+0x346/0x370 [ 140.967700][ T8655] ext4_orphan_del+0x689/0x710 [ 140.967731][ T8655] ext4_truncate+0x88d/0xad0 [ 140.967758][ T8655] ext4_process_orphan+0x110/0x1c0 [ 140.967788][ T8655] ext4_orphan_cleanup+0x6a8/0xa00 [ 140.967819][ T8655] ext4_fill_super+0x3171/0x34e0 [ 140.967851][ T8655] get_tree_bdev_flags+0x291/0x300 [ 140.967874][ T8655] get_tree_bdev+0x1f/0x30 [ 140.967893][ T8655] ext4_get_tree+0x1c/0x30 [ 140.967921][ T8655] vfs_get_tree+0x54/0x1d0 [ 140.967942][ T8655] do_new_mount+0x207/0x5e0 [ 140.967961][ T8655] path_mount+0x4a4/0xb20 [ 140.967981][ T8655] __se_sys_mount+0x28f/0x2e0 [ 140.968002][ T8655] __x64_sys_mount+0x67/0x80 [ 140.968020][ T8655] x64_sys_call+0x2b4d/0x2ff0 [ 140.968040][ T8655] do_syscall_64+0xd2/0x200 [ 140.968068][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.968087][ T8655] [ 140.968091][ T8655] value changed: 0x00000000ffffea4f -> 0x20676e6973726170 [ 140.968103][ T8655] [ 140.968108][ T8655] Reported by Kernel Concurrency Sanitizer on: [ 140.968119][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.0.1597 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 140.968145][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.968157][ T8655] ================================================================== [ 141.019469][ T8673] IPv6: Can't replace route, no match found [ 141.035135][ T8655] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1597: corrupted inode contents [ 141.297008][ T8655] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1597: mark_inode_dirty error [ 141.308532][ T8655] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 141.323085][ T8655] EXT4-fs (loop0): 1 truncate cleaned up [ 141.329341][ T8655] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff)