last executing test programs: 1.672738715s ago: executing program 1 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x3, 0x0, 0x18, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, &(0x7f00000000c0), 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x3, 0x1}, 0x10, 0x286c2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf5d}, 0x94) creat(&(0x7f0000000b80)='./file0\x00', 0x5) socket$unix(0x1, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) pipe2(&(0x7f0000001cc0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0x3}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.4799153s ago: executing program 1 (id=697): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x3c, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000000740)="cc", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) 1.358910901s ago: executing program 1 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) gettid() socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 1.333352752s ago: executing program 1 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x3, 0x0, 0x18, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, &(0x7f00000000c0), 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x3, 0x1}, 0x10, 0x286c2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf5d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000b80)='./file0\x00', 0x5) gettid() socket$unix(0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) pipe2(&(0x7f0000001cc0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.201726433s ago: executing program 0 (id=704): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) 1.125239109s ago: executing program 2 (id=706): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.11437819s ago: executing program 0 (id=707): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2004000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) 1.104796921s ago: executing program 2 (id=708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) 1.057792595s ago: executing program 0 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x142, 0x142, 0x5, [@datasec={0x6, 0x7, 0x0, 0xf, 0x2, [{0x5, 0x4}, {0x4, 0xfff, 0x80000000}, {0x4, 0x80000000}, {0x1, 0x4, 0x69c}, {0x4, 0x5, 0x75}, {0x1, 0x4, 0x5}, {0x4, 0x2c3}], "1a53"}, @volatile={0x6}, @fwd={0xa}, @union={0x3, 0x3, 0x0, 0x5, 0x0, 0x5, [{0x2, 0x2, 0x9}, {0x3, 0x4, 0x4}, {0x0, 0x4, 0x3}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0x10}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xe, 0x5}, {0xa, 0x2}, {0x10, 0x2}, {0xf, 0x3}, {0x2, 0x1}, {0xa, 0x1}, {0x10, 0x5}]}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/112, 0x161, 0x70, 0x0, 0x9e}, 0x28) 980.417521ms ago: executing program 0 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="640300000000072d000000002b00000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000800000000000000000411811ba0b87cfa0c9c0805cb7cc4ffcaca5d6ba0f3cf558d365a9e981e4b727e0642ec24fcb557a493443baf7923b4a32db33e0fa6fead4f182ef5c048c5353d071cc8f8c256f09c782842762ddf33103cb85b25151bbf5c1f5b5727b"], 0x48) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3b, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0xfffffffffffffc9e, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x86, &(0x7f0000002600)}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) r10 = socket$inet6_udp(0xa, 0x2, 0x0) timer_getoverrun(r5) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff6, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xfffffffd, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "0600000000000000b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6359186172ae22ed9616876e0ec13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789a3fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482cafffa6cf279ea06d0d17b9770d10d6978345f4fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a854d0b686963dcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}]}}]}, 0x14c}}, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'bridge_slave_1\x00', {0x1}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000", @ANYRES32], 0x4c}}, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f00000000c0)={'macvtap0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 667.437356ms ago: executing program 4 (id=716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r1 = socket$inet(0x2, 0x3, 0xfffffffc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r3, 0x8004b706, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0503000000000000000007000000040003"], 0x7c}}, 0x4000048) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) mount$bind(0x0, 0x0, 0x0, 0x2000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 602.676171ms ago: executing program 4 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) gettid() socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 570.950274ms ago: executing program 4 (id=719): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x7, 0x4) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0xf9, 0x5, 0x0, 0x0, 0x4, 0x10400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x3241c, 0xfffffffffffffff9, 0x800, 0x8, 0x100, 0x3, 0x800, 0x0, 0xc, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r1, 0x23cd) r2 = syz_io_uring_setup(0x7262, &(0x7f0000000100)={0x0, 0x712f, 0x200, 0x3, 0x72}, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, r2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000240)) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000280)=0x3, 0x4) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4040041) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c) sendmmsg$inet(r7, &(0x7f0000002340)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000500)="1dab1889d3d060286ba3bb122f99074d66793b183e7e24a7121fb6dc534e189d844e660f453b6c484af4962ce98979551450ad1adfde4941522cc7b556eb9d5494", 0x41}, {&(0x7f0000000580)="1856bc4e1c4f24e4f8a05f30d1037800ff2692b06bff52e10dcc029c518f3c3c7411af187f23ce12d6f1b5c4", 0x2c}, {&(0x7f00000005c0)="aae15a3fe55c76453ebed02e15a4f43d6e49d3e1b85ff7324d30158dbe663192024de4c0295f6e27fab13e252fdef49bb5759e0760cf9571ff543b46f33abf3812fc9f08654645563cba1be29abef5018d6200ec9541a07de3a9d3dc512014050a0875ad60ab3bbea341ac134f16a0913ad7", 0x72}], 0x3, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6b}}, @ip_tos_int={{0x14}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000700)="d7a5d7146c47163c0f6284735ba9c0bb7884b97ab6694e770909a5fe5bc8f4dfa32378a8390bfdfa2f2dbfc8cc49e9b7eaf94ded2b41378585d7f57e5d3bf54e1cd19a58fc7d9fe87ae24a4a957d3373945ef96dc9d631b2f4f2a038c379831ad1e169486f42085eeb1e26a89e93855ed6db3a00aaba364a0ad2ada769490e688debabf7d6cc0ae7c008deac56448e862e8d3d68cd083c93a0f6e04f0c129459d0ef5090b36ff1b0c42bf4612e3d2789cbca193fc5cc6bdb85f7dd53ec52105aeae803e596984ec6beb61e421bde8a12853d86ce04f3bc63aded8b005c1290b06b5d04879e9a7670bcc47f", 0xeb}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="89b0f6bbdffcc777b45fb1f8052e42d3a192a65de3448f15ae3aadc9c8e42c0e54dc22b294044dbce64d4b23f29669f150637e4d9aa20ec19fcf23ea9569a1006d69916b79cfadc00724528fbcac28b7d5b35d889dcacd0fd0a6dfd4b413c2ffd049f22ccffdc556097eda6ee1a1736d0783f0294b35c237fe9822a0773961c460ff87a04c22cddf2a294e64", 0x8c}, {&(0x7f00000018c0)="7ce753f2cf9098eb1bf962ad570c3e7e18beaeeb2471458141677af6a12e27db59126c1841ec7c270a12ed1dcdb51fbd951b6e021eff497592f17ace66e13fad5c76d44b15733529aeee699f5794062b348553ad39d2e1d78ac7bd472e81bd4b1eec1bdae342c886", 0x68}, {&(0x7f0000001940)="7dd84b8f3c700bcacde968c41c0b480dba40c1151d34be9e20a12b5c3dc0b260bd321c59695c5903d220454199a8342dd1c79461aa1b8aa55f7b2574bf099243b16f0387fc85653b5654c751697e1b6cf16faa81c6e585622889671e086675a9971607dd6b0c02cc06e826b147110cbc47c4a9d3367aa7c762289adf4cea78e92ce4525a659e0ec0fdc848807fda0087b81d72c6c9b798170a629f3c24b818a079bac7", 0xa3}, {&(0x7f0000001a00)="25d76a28b94e4bf3d2e45470", 0xc}], 0x6, &(0x7f0000001ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001b40)="c5af608711a1919d6a551124668c9009e0372671a313f56b645de8973e5a05ce209cd7f5", 0x24}, {&(0x7f0000001b80)="aab2b7347de348b1a8c7d606", 0xc}, {&(0x7f0000001bc0)="fff62220f84b3cbda4cdfa87ec8c2b3e44aeefaa0cd0a8d17f8f01b4ca96aef1af075d08a9ba53ffc5cfadadda45c7c223a80f27bed050035786b192aea1d121bfc334752d8009f73b219ccb8f595dd25eac1fc7b36b96082871cf1f72b762851a3740180d5095", 0x67}, {&(0x7f0000001c40)="862e95bdc527a1", 0x7}, {&(0x7f0000001c80)="b00d9fa82aea2db5c7f54bba8510a8d6e28a57ca7af62ce89b3238c30d1f7abc4cb6018d0e986b57421fa924714d8614c73620298383314dfd2bdd6b303667ef1553c0835f08f386", 0x48}, {&(0x7f0000001d00)="0983e827cf6bb1f30366ce756a9c67f9e43fa8931d9eee919c5a87e75e20334108d6cb1a7223ed2cdc2bae17509af177f028ccdad0ea302995660cb8d0584a6e19e930d0f22cce6d23ed48176d9fa8092e1dfe790ab854ff914a2191ff7a490bf9cead40273eabf07fd97647bc117c5791470a641f8f9e143805d65cc9af661ab7ae3a5c4424fd3d2a68891c755f185040807f94199ce4db7ee9221dd7fddaaaa93b5b37bf3664f29035eb2bbbc51cc6db4c5e4ccbeeb61d", 0xb8}], 0x6, &(0x7f0000001f40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000001f80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000002280)=[{&(0x7f0000001fc0)}, {&(0x7f0000002000)="dd5f0f736078cbd0d740b1d506d6af491641899a53482ce091b6f4f3450082daac752423e3f518a0cbb385cbf63e09b60a402b68e5b57ef70d68f77a01d9682f1de2dfb5909fd3fa646cd8e16bf9454e00d49652d85ae3d8bb19c9b1f65c8c37e3a5d2d433db9d8fc8b6503a1837f779997512c782c3e09bc04ab1993a8130e3235ef11e38bf45ba9912c407767ee5f1b161e7c7078b5c4730ed3322315ff90b0c5726d7c796d6a3db0cb28219167b449b214a132e64fa9882075e4d6941ce993c6eb63f7c67b8be40ad639f45b7", 0xce}, {&(0x7f0000002100)="f28785e5e751b76503a6d34c", 0xc}, {&(0x7f0000002140)="d5e114bd426852f595e0abe07fce5083dc47f71088c9ff8cd3a32bd3428dac24444ed5f9fc3fd5e40efaf9934d18dc4e76e68d2d71d9828424d6d2fcf697d52992213a5847946f6a8b8135cd6a8cbc935604066b2e4815a73edfec8aa25307b81c24f8d9a341f9a2f54b9260041e4fc7476e22603524b96fde3febc10488d14229aa7ed2ae101a1a3cadaafe9d22175254a9811f3280a78c45e6ffb4fd077f14fcf233087529cdf00c89badc5f987d5400a4786471292c7670dfb22ff268ac5cdbe4738f3f493e4e9f", 0xc9}, {&(0x7f0000002240)="f606bc84a79f72f425c1e36fec8ff653bccc8850b91e595de62a7c1a5f", 0x1d}], 0x5, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0xafb7}}], 0x18}}], 0x4, 0x4008041) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002480), r5) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x5c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x35e}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf98}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x80}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x41b}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002780)={0x0, 0xa0, &(0x7f00000026c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x8e6}, @in6={0xa, 0x4e23, 0xfffffc00, @rand_addr=' \x01\x00', 0x9}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x7f}, @in6={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, @in={0x2, 0x8, @private=0xa010101}]}, &(0x7f00000027c0)=0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000002800)={0x1, 0x5, 0x8}) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x3, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000002840)={{0x1, 0x1, 0x18, r1, {0x334a}}, './file0\x00'}) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000002880)) fcntl$getownex(r9, 0x10, &(0x7f00000028c0)) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000002900)='openpromfs\x00', 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000002940)=0x8, 0x4) 570.207684ms ago: executing program 3 (id=720): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xf8}}, {@minixdf}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 532.256957ms ago: executing program 4 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000020000800000008000300", @ANYBLOB="080006"], 0x24}}, 0x0) 531.554357ms ago: executing program 4 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000340)='Wz', 0x2}], 0x1, 0x48, 0x3) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 435.807924ms ago: executing program 1 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffe42, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x8e165bd}}]}}]}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='afs_cb_break\x00', r1}, 0x18) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) close(r5) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 373.43857ms ago: executing program 3 (id=724): mount$bind(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x181001c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe55b204000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f01ea23b77edf704bc2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350d3798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r4, 0x9, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000069c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006840)=[{{&(0x7f00000001c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f00000002c0)=""/154, 0x9a}], 0x2, &(0x7f00000004c0)=""/98, 0x62}, 0x7}, {{&(0x7f0000000540)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/110, 0x6e}], 0x1, &(0x7f0000000a00)=""/4096, 0x1000}, 0xf1b}, {{&(0x7f0000000640)=@ax25={{0x3, @default}, [@rose, @remote, @netrom, @bcast, @null, @rose, @remote, @null]}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f0000002a00)=""/35, 0x23}, {&(0x7f0000002a40)=""/106, 0x6a}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/101, 0x65}], 0x9, &(0x7f0000003c00)=""/237, 0xed}, 0xe}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d00)=""/190, 0xbe}, {&(0x7f0000003dc0)=""/28, 0x1c}, {&(0x7f0000003e00)=""/95, 0x5f}], 0x3}, 0xfffffff0}, {{&(0x7f0000003ec0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000003f40)=""/218, 0xda}, {&(0x7f0000004040)=""/138, 0x8a}, {&(0x7f0000004100)=""/193, 0xc1}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/86, 0x56}, {&(0x7f0000005280)=""/124, 0x7c}], 0x6, &(0x7f0000005380)=""/150, 0x96}, 0xa7cf}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005440)=""/14, 0xe}, {&(0x7f0000005480)=""/191, 0xbf}, {&(0x7f0000005540)=""/162, 0xa2}, {&(0x7f0000005600)=""/187, 0xbb}, {&(0x7f00000056c0)=""/193, 0xc1}], 0x5, &(0x7f0000005840)=""/4096, 0x1000}, 0x2}], 0x6, 0x40002000, &(0x7f0000006a00)={r5, r6+60000000}) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) 367.82836ms ago: executing program 2 (id=725): creat(&(0x7f0000000b80)='./file0\x00', 0x5) socket$unix(0x1, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe2(&(0x7f0000001cc0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 320.155564ms ago: executing program 2 (id=726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 249.597569ms ago: executing program 4 (id=727): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000002172b4ce359280e2004d020000000000000000"], 0x78) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() 249.110509ms ago: executing program 1 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x59b, &(0x7f0000002480)="$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") write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() 248.419869ms ago: executing program 3 (id=729): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2$9p(&(0x7f0000000140), 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x579, &(0x7f0000000680)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/49, 0x31) 223.674481ms ago: executing program 2 (id=730): pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r0, 0x5, 0x0, &(0x7f00000019c0), 0x0) io_submit(r0, 0x0, &(0x7f0000000300)) 190.670774ms ago: executing program 3 (id=731): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 170.765806ms ago: executing program 0 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000020000800000008000300", @ANYBLOB="080006"], 0x24}}, 0x0) 151.668908ms ago: executing program 3 (id=733): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x3c, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000000740)="cc", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) 125.573459ms ago: executing program 2 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x3, 0x0, 0x18, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, &(0x7f00000000c0), 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x3, 0x1}, 0x10, 0x286c2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf5d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000b80)='./file0\x00', 0x5) gettid() socket$unix(0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 125.097729ms ago: executing program 0 (id=735): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xf8}}, {@minixdf}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=736): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): nk: 100 bytes leftover after parsing attributes in process `syz.4.124'. [ 39.367100][ T3896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.408956][ T3896] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.443184][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.460700][ T3896] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.127: lblock 1 mapped to illegal pblock 1 (length 15) [ 39.533341][ T3896] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 39.545738][ T3896] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.545738][ T3896] [ 39.570895][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 39.670568][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.677993][ T3926] loop4: detected capacity change from 0 to 1024 [ 39.689528][ T3926] EXT4-fs: Ignoring removed orlov option [ 39.706066][ T3926] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 39.742000][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.750192][ T3930] loop1: detected capacity change from 0 to 512 [ 39.776466][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.791858][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 39.791946][ T29] audit: type=1400 audit(1754402004.479:520): avc: denied { create } for pid=3918 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.890065][ T3935] 9pnet_fd: Insufficient options for proto=fd [ 39.916903][ T3930] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.933967][ T3930] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.137: bg 0: block 248: padding at end of block bitmap is not set [ 39.989638][ T3930] Quota error (device loop1): write_blk: dquota write failed [ 39.997033][ T3930] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 40.006951][ T3930] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.137: Failed to acquire dquot type 1 [ 40.063788][ T3930] EXT4-fs (loop1): 1 truncate cleaned up [ 40.070167][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.099982][ T3941] loop0: detected capacity change from 0 to 512 [ 40.116484][ T3941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 40.126614][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.128433][ T3941] System zones: 1-12 [ 40.143249][ T3941] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.140: Directory hole found for htree index block 0 [ 40.183012][ T29] audit: type=1326 audit(1754402004.869:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.206308][ T29] audit: type=1326 audit(1754402004.869:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.254151][ T3941] EXT4-fs (loop0): Remounting filesystem read-only [ 40.262661][ T29] audit: type=1326 audit(1754402004.929:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.285915][ T29] audit: type=1326 audit(1754402004.929:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.286202][ T3941] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 40.309335][ T29] audit: type=1326 audit(1754402004.929:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.330830][ T3950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.142'. [ 40.340551][ T29] audit: type=1326 audit(1754402004.929:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.360794][ T3941] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 40.372604][ T29] audit: type=1326 audit(1754402004.929:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8635eb69 code=0x7ffc0000 [ 40.407922][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.465026][ T3941] ext4: Unknown parameter '' [ 40.566436][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.731478][ T3972] 9pnet_fd: Insufficient options for proto=fd [ 40.774620][ T3976] netlink: 44 bytes leftover after parsing attributes in process `syz.4.150'. [ 40.804782][ T3979] loop4: detected capacity change from 0 to 512 [ 40.831472][ T3979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 40.839876][ T3979] System zones: 1-12 [ 40.848984][ T3979] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.151: Directory hole found for htree index block 0 [ 40.881035][ T3974] loop3: detected capacity change from 0 to 512 [ 40.899886][ T3974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 40.929505][ T3979] EXT4-fs (loop4): Remounting filesystem read-only [ 40.936362][ T3974] System zones: 1-12 [ 40.946606][ T3974] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.149: Directory hole found for htree index block 0 [ 40.960627][ T3979] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 40.968809][ T3979] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 41.000092][ T3974] EXT4-fs (loop3): Remounting filesystem read-only [ 41.006616][ T3974] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 41.037056][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.078377][ T3974] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 41.096419][ T3974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.099711][ T3979] ext4: Unknown parameter '' [ 41.146029][ T3974] EXT4-fs (loop3): can't enable nombcache during remount [ 41.201944][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.289450][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.322038][ T3998] loop4: detected capacity change from 0 to 512 [ 41.340587][ T3998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 41.359725][ T3998] System zones: 1-12 [ 41.363912][ T3998] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.155: Directory hole found for htree index block 0 [ 41.425616][ T4008] loop3: detected capacity change from 0 to 2048 [ 41.440155][ T3998] EXT4-fs (loop4): Remounting filesystem read-only [ 41.450370][ T4011] loop2: detected capacity change from 0 to 512 [ 41.459538][ T3998] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 41.472171][ T3998] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 41.483970][ T3998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.525202][ T4011] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.543404][ T4011] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.160: bg 0: block 248: padding at end of block bitmap is not set [ 41.563996][ T3998] ext4: Unknown parameter '' [ 41.585150][ T4008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.650846][ T4011] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.160: Failed to acquire dquot type 1 [ 41.672519][ T4011] EXT4-fs (loop2): 1 truncate cleaned up [ 41.685855][ T4011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.710038][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.746553][ T4011] syz.2.160 (4011) used greatest stack depth: 9280 bytes left [ 41.912788][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.927685][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.938132][ T4025] 9pnet_fd: Insufficient options for proto=fd [ 41.996750][ T4030] validate_nla: 4 callbacks suppressed [ 41.996765][ T4030] netlink: 'syz.4.163': attribute type 4 has an invalid length. [ 42.019150][ T4032] FAULT_INJECTION: forcing a failure. [ 42.019150][ T4032] name failslab, interval 1, probability 0, space 0, times 1 [ 42.031781][ T4032] CPU: 0 UID: 0 PID: 4032 Comm: syz.0.167 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 42.031820][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.031891][ T4032] Call Trace: [ 42.031896][ T4032] [ 42.031903][ T4032] __dump_stack+0x1d/0x30 [ 42.031921][ T4032] dump_stack_lvl+0xe8/0x140 [ 42.031936][ T4032] dump_stack+0x15/0x1b [ 42.031952][ T4032] should_fail_ex+0x265/0x280 [ 42.032041][ T4032] should_failslab+0x8c/0xb0 [ 42.032062][ T4032] kmem_cache_alloc_noprof+0x50/0x310 [ 42.032084][ T4032] ? prepare_creds+0x37/0x4c0 [ 42.032146][ T4032] prepare_creds+0x37/0x4c0 [ 42.032167][ T4032] copy_creds+0x8f/0x3f0 [ 42.032187][ T4032] copy_process+0x658/0x2000 [ 42.032277][ T4032] ? kstrtouint+0x76/0xc0 [ 42.032305][ T4032] ? __rcu_read_unlock+0x4f/0x70 [ 42.032329][ T4032] kernel_clone+0x16c/0x5c0 [ 42.032358][ T4032] ? vfs_write+0x75e/0x8e0 [ 42.032378][ T4032] __x64_sys_clone+0xe6/0x120 [ 42.032405][ T4032] x64_sys_call+0x119c/0x2ff0 [ 42.032476][ T4032] do_syscall_64+0xd2/0x200 [ 42.032527][ T4032] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.032553][ T4032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.032575][ T4032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.032596][ T4032] RIP: 0033:0x7f9c0147eb69 [ 42.032655][ T4032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.032668][ T4032] RSP: 002b:00007f9bffadefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 42.032684][ T4032] RAX: ffffffffffffffda RBX: 00007f9c016a5fa0 RCX: 00007f9c0147eb69 [ 42.032696][ T4032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 42.032707][ T4032] RBP: 00007f9bffadf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.032717][ T4032] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 42.032727][ T4032] R13: 0000000000000000 R14: 00007f9c016a5fa0 R15: 00007ffdfd127f88 [ 42.032743][ T4032] [ 42.097757][ T4034] loop4: detected capacity change from 0 to 1024 [ 42.280513][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.343385][ T4042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.170'. [ 42.384103][ T4034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'. [ 42.393047][ T4034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'. [ 42.472184][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.499651][ T4056] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 42.530001][ T4055] loop3: detected capacity change from 0 to 512 [ 42.560767][ T4055] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.610591][ T4055] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.176: bg 0: block 248: padding at end of block bitmap is not set [ 42.662082][ T4055] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.176: Failed to acquire dquot type 1 [ 42.684166][ T4055] EXT4-fs (loop3): 1 truncate cleaned up [ 42.701602][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.726963][ T4070] loop2: detected capacity change from 0 to 1024 [ 42.764724][ T4070] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 42.776935][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.805228][ T4074] loop4: detected capacity change from 0 to 1024 [ 42.813468][ T4070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.826047][ T4074] EXT4-fs: Ignoring removed orlov option [ 42.863632][ T4074] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.906143][ T4074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.958784][ T4069] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.178: missing EA_INODE flag [ 42.984691][ T4069] EXT4-fs (loop2): Remounting filesystem read-only [ 43.052764][ T4095] loop4: detected capacity change from 0 to 512 [ 43.092752][ T4095] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.113407][ T4095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.187: bg 0: block 248: padding at end of block bitmap is not set [ 43.129464][ T4101] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 43.140937][ T4101] team0: Port device dummy0 added [ 43.164022][ T4095] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.187: Failed to acquire dquot type 1 [ 43.197142][ T4095] EXT4-fs (loop4): 1 truncate cleaned up [ 43.211976][ T4103] loop0: detected capacity change from 0 to 1024 [ 43.234199][ T4103] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.253060][ T4103] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.191: lblock 1 mapped to illegal pblock 1 (length 15) [ 43.276348][ T4107] FAULT_INJECTION: forcing a failure. [ 43.276348][ T4107] name failslab, interval 1, probability 0, space 0, times 0 [ 43.289074][ T4107] CPU: 0 UID: 0 PID: 4107 Comm: syz.4.192 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 43.289102][ T4107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.289120][ T4107] Call Trace: [ 43.289124][ T4107] [ 43.289130][ T4107] __dump_stack+0x1d/0x30 [ 43.289156][ T4107] dump_stack_lvl+0xe8/0x140 [ 43.289174][ T4107] dump_stack+0x15/0x1b [ 43.289190][ T4107] should_fail_ex+0x265/0x280 [ 43.289255][ T4107] should_failslab+0x8c/0xb0 [ 43.289280][ T4107] kmem_cache_alloc_noprof+0x50/0x310 [ 43.289305][ T4107] ? io_submit_one+0xb8/0x11d0 [ 43.289351][ T4107] io_submit_one+0xb8/0x11d0 [ 43.289390][ T4107] __se_sys_io_submit+0xfb/0x280 [ 43.289419][ T4107] __x64_sys_io_submit+0x43/0x50 [ 43.289437][ T4107] x64_sys_call+0x2d5d/0x2ff0 [ 43.289534][ T4107] do_syscall_64+0xd2/0x200 [ 43.289632][ T4107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.289695][ T4107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.289773][ T4107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.289792][ T4107] RIP: 0033:0x7f1f1755eb69 [ 43.289807][ T4107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.289861][ T4107] RSP: 002b:00007f1f15bbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 43.289877][ T4107] RAX: ffffffffffffffda RBX: 00007f1f17785fa0 RCX: 00007f1f1755eb69 [ 43.289887][ T4107] RDX: 0000200000001200 RSI: 0000000000000001 RDI: 00007f1f182c2000 [ 43.289898][ T4107] RBP: 00007f1f15bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 43.289909][ T4107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.289957][ T4107] R13: 0000000000000000 R14: 00007f1f17785fa0 R15: 00007ffd6be9ef68 [ 43.289973][ T4107] [ 43.294003][ T4103] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 43.392613][ T4109] loop3: detected capacity change from 0 to 512 [ 43.396070][ T4103] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.396070][ T4103] [ 43.592237][ T4114] 9pnet_fd: Insufficient options for proto=fd [ 43.665213][ T4109] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.719286][ T4130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.200'. [ 43.765125][ T4109] EXT4-fs warning (device loop3): ext4_empty_dir:3103: inode #12: comm syz.3.193: directory missing '..' [ 43.870295][ T4138] loop0: detected capacity change from 0 to 512 [ 43.932957][ T4138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 43.959437][ T4128] Set syz1 is full, maxelem 65536 reached [ 43.966871][ T4138] System zones: 1-12 [ 43.971474][ T4138] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.203: Directory hole found for htree index block 0 [ 43.984894][ T4138] EXT4-fs (loop0): Remounting filesystem read-only [ 43.991699][ T4138] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 44.000055][ T4138] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 44.024874][ T4138] ext4: Unknown parameter '' [ 44.218332][ T4151] loop0: detected capacity change from 0 to 512 [ 44.232011][ T4151] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.255649][ T4151] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.266894][ T4151] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.207: corrupted inode contents [ 44.279076][ T4151] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.207: mark_inode_dirty error [ 44.290551][ T4151] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.207: corrupted inode contents [ 44.305363][ T4151] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.207: mark_inode_dirty error [ 44.316840][ T4151] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.207: corrupted inode contents [ 44.329695][ T4151] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 44.338351][ T4151] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.207: corrupted inode contents [ 44.351435][ T4151] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.207: mark_inode_dirty error [ 44.362664][ T4151] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 44.373054][ T4151] EXT4-fs (loop0): 1 truncate cleaned up [ 44.379038][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 44.402611][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 44.506916][ T4165] 9pnet_fd: Insufficient options for proto=fd [ 44.553726][ T4171] loop2: detected capacity change from 0 to 512 [ 44.564362][ T4167] loop1: detected capacity change from 0 to 512 [ 44.589677][ T4167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 44.601926][ T4171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 44.615304][ T4167] System zones: 1-12 [ 44.618927][ T4171] System zones: 1-12 [ 44.620742][ T4167] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.215: Directory hole found for htree index block 0 [ 44.623748][ T4171] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.216: Directory hole found for htree index block 0 [ 44.650685][ T4167] EXT4-fs (loop1): Remounting filesystem read-only [ 44.650939][ T4171] EXT4-fs (loop2): Remounting filesystem read-only [ 44.664200][ T4171] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 44.665900][ T4167] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 44.672458][ T4171] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 44.685606][ T4171] ext4: Unknown parameter '' [ 44.705725][ T4167] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 44.731536][ T4167] ext4: Unknown parameter '' [ 44.761335][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 44.826578][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 44.826592][ T29] audit: type=1326 audit(1754402009.509:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 44.856077][ T29] audit: type=1326 audit(1754402009.509:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 44.904096][ T29] audit: type=1326 audit(1754402009.509:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 44.927355][ T29] audit: type=1326 audit(1754402009.509:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 44.950614][ T29] audit: type=1326 audit(1754402009.509:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 44.973987][ T29] audit: type=1326 audit(1754402009.509:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 44.997255][ T29] audit: type=1326 audit(1754402009.509:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 45.020488][ T29] audit: type=1326 audit(1754402009.509:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 45.043707][ T29] audit: type=1326 audit(1754402009.509:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 45.066907][ T29] audit: type=1326 audit(1754402009.509:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 45.152402][ T4192] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 45.168704][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 45.269953][ T1036] IPVS: starting estimator thread 0... [ 45.277216][ T4204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.224'. [ 45.353516][ T4211] loop3: detected capacity change from 0 to 1024 [ 45.359989][ T4206] IPVS: using max 2400 ests per chain, 120000 per kthread [ 45.377035][ T4211] EXT4-fs: Ignoring removed orlov option [ 45.393006][ T4211] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.487280][ T4215] loop3: detected capacity change from 0 to 512 [ 45.517074][ T4215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 45.537221][ T4215] System zones: 1-12 [ 45.546050][ T4215] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.229: Directory hole found for htree index block 0 [ 45.573577][ T4215] EXT4-fs (loop3): Remounting filesystem read-only [ 45.589569][ T4215] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 45.607047][ T4215] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 45.627061][ T4215] ext4: Unknown parameter '' [ 45.842015][ T4232] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 45.900255][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 46.116910][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 46.192906][ T4250] loop4: detected capacity change from 0 to 1024 [ 46.296300][ T4255] 9pnet_fd: Insufficient options for proto=fd [ 46.309734][ T4250] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.331177][ T4250] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.242: lblock 1 mapped to illegal pblock 1 (length 15) [ 46.352344][ T4258] loop2: detected capacity change from 0 to 2048 [ 46.355765][ T4250] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 46.371165][ T4250] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.371165][ T4250] [ 46.428279][ T4262] loop4: detected capacity change from 0 to 2048 [ 46.509984][ T4266] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 46.788420][ T4285] syz.2.255 uses obsolete (PF_INET,SOCK_PACKET) [ 46.910330][ T4291] 9pnet_fd: Insufficient options for proto=fd [ 46.974904][ T4294] loop3: detected capacity change from 0 to 1024 [ 47.005105][ T4296] loop2: detected capacity change from 0 to 2048 [ 47.019335][ T4294] EXT4-fs: Ignoring removed orlov option [ 47.035668][ T4294] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.210618][ T4303] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 47.237654][ T4305] netlink: 'wޣ': attribute type 10 has an invalid length. [ 47.269344][ T4305] netlink: 'wޣ': attribute type 10 has an invalid length. [ 47.395418][ T4315] loop0: detected capacity change from 0 to 2048 [ 47.511209][ T4317] loop3: detected capacity change from 0 to 1024 [ 47.534295][ T4317] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.550125][ T4324] loop4: detected capacity change from 0 to 512 [ 47.571486][ T4324] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.638681][ T4317] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.265: missing EA_INODE flag [ 47.650454][ T4324] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.658232][ T4324] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.266: corrupted inode contents [ 47.670245][ T4317] EXT4-fs (loop3): Remounting filesystem read-only [ 47.689158][ T4324] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.266: mark_inode_dirty error [ 47.757289][ T4324] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.266: corrupted inode contents [ 47.779766][ T4335] loop1: detected capacity change from 0 to 512 [ 47.796529][ T4335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 47.802345][ T4324] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.266: mark_inode_dirty error [ 47.819000][ T4335] System zones: 1-12 [ 47.823062][ T4335] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.268: Directory hole found for htree index block 0 [ 47.841118][ T4335] EXT4-fs (loop1): Remounting filesystem read-only [ 47.852504][ T4342] loop3: detected capacity change from 0 to 512 [ 47.867381][ T4335] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 47.906456][ T4324] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.266: corrupted inode contents [ 47.914521][ T4335] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 47.931111][ T4342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 47.939382][ T4324] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 47.943232][ T4342] System zones: 1-12 [ 47.948110][ T4324] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.266: corrupted inode contents [ 47.952525][ T4342] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.269: Directory hole found for htree index block 0 [ 47.977401][ T4342] EXT4-fs (loop3): Remounting filesystem read-only [ 47.984011][ T4324] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.266: mark_inode_dirty error [ 47.987424][ T4342] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 47.996601][ T4324] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 48.004391][ T4335] EXT4-fs (loop1): can't enable nombcache during remount [ 48.012509][ T4342] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 48.027527][ T4324] EXT4-fs (loop4): 1 truncate cleaned up [ 48.033522][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 48.087629][ T4342] EXT4-fs (loop3): can't enable nombcache during remount [ 48.117438][ T4347] loop2: detected capacity change from 0 to 1024 [ 48.133716][ T4347] EXT4-fs: Ignoring removed orlov option [ 48.140457][ T4345] loop1: detected capacity change from 0 to 2048 [ 48.147147][ T4347] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.244982][ T4358] netlink: 'wޣ': attribute type 10 has an invalid length. [ 48.254006][ T4358] syz_tun: entered promiscuous mode [ 48.268333][ T4357] loop3: detected capacity change from 0 to 1024 [ 48.269059][ T4358] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 48.278688][ T4357] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 48.302371][ T4364] __nla_validate_parse: 3 callbacks suppressed [ 48.302382][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 48.317635][ T4363] 9pnet_fd: Insufficient options for proto=fd [ 48.364047][ T4358] netlink: 'wޣ': attribute type 10 has an invalid length. [ 48.379350][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 48.390080][ T4358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.397763][ T4358] team0: Port device bond0 added [ 48.410465][ T4372] loop0: detected capacity change from 0 to 512 [ 48.425126][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 48.435164][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 48.444810][ T4357] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.272: missing EA_INODE flag [ 48.458562][ T4357] EXT4-fs (loop3): Remounting filesystem read-only [ 48.465850][ T4358] team0 (unregistering): Port device dummy0 removed [ 48.476361][ T4358] team0 (unregistering): Port device bond0 removed [ 48.593926][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 48.636599][ T4382] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 48.830665][ T4392] netlink: 44 bytes leftover after parsing attributes in process `syz.2.288'. [ 48.856839][ T4395] 9pnet_fd: Insufficient options for proto=fd [ 48.911553][ T4399] loop2: detected capacity change from 0 to 512 [ 48.939773][ T4399] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.960632][ T4399] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.976584][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.290: corrupted inode contents [ 49.010362][ T4399] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.290: mark_inode_dirty error [ 49.049260][ T4403] netlink: 'wޣ': attribute type 10 has an invalid length. [ 49.086072][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.290: corrupted inode contents [ 49.100837][ T4405] loop3: detected capacity change from 0 to 512 [ 49.118296][ T4403] netlink: 'wޣ': attribute type 10 has an invalid length. [ 49.133714][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 49.143549][ T4405] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.151258][ T4399] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.290: mark_inode_dirty error [ 49.167718][ T4405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.291: bg 0: block 248: padding at end of block bitmap is not set [ 49.183847][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.290: corrupted inode contents [ 49.185322][ T4405] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.291: Failed to acquire dquot type 1 [ 49.208598][ T4405] EXT4-fs (loop3): 1 truncate cleaned up [ 49.220666][ T4399] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 49.249383][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.290: corrupted inode contents [ 49.263088][ T4399] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.290: mark_inode_dirty error [ 49.288246][ T4399] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 49.349168][ T4399] EXT4-fs (loop2): 1 truncate cleaned up [ 49.355326][ T3424] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 49.405776][ T4427] loop3: detected capacity change from 0 to 1024 [ 49.416667][ T4425] loop4: detected capacity change from 0 to 2048 [ 49.458473][ T4427] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.474738][ T4427] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.301: lblock 1 mapped to illegal pblock 1 (length 15) [ 49.500218][ T4427] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 49.512794][ T4427] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.512794][ T4427] [ 49.532697][ T4435] loop2: detected capacity change from 0 to 512 [ 49.604557][ T4435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 49.648992][ T4435] System zones: 1-12 [ 49.653172][ T4435] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.302: Directory hole found for htree index block 0 [ 49.667638][ T4435] EXT4-fs (loop2): Remounting filesystem read-only [ 49.689843][ T4435] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 49.698131][ T4435] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 49.715391][ T4435] EXT4-fs (loop2): can't enable nombcache during remount [ 49.799529][ T4446] loop3: detected capacity change from 0 to 1024 [ 49.828490][ T4446] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.901184][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 49.919366][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 49.919380][ T29] audit: type=1326 audit(1754402014.579:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 49.921490][ T4446] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.304: lblock 1 mapped to illegal pblock 1 (length 15) [ 49.925606][ T29] audit: type=1326 audit(1754402014.579:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 49.989629][ T29] audit: type=1326 audit(1754402014.679:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 50.013065][ T29] audit: type=1326 audit(1754402014.679:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 50.036524][ T29] audit: type=1326 audit(1754402014.679:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 50.079138][ T4446] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 50.091547][ T4446] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.091547][ T4446] [ 50.108899][ T29] audit: type=1326 audit(1754402014.679:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 50.171106][ T4456] netlink: 'wޣ': attribute type 10 has an invalid length. [ 50.218305][ T29] audit: type=1326 audit(1754402014.899:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 50.219171][ T4456] netlink: 'wޣ': attribute type 10 has an invalid length. [ 50.241651][ T29] audit: type=1326 audit(1754402014.899:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 50.281197][ T4461] 9pnet_fd: Insufficient options for proto=fd [ 50.296673][ T29] audit: type=1326 audit(1754402014.939:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 50.320034][ T29] audit: type=1326 audit(1754402014.939:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 50.350564][ T4463] 9pnet_fd: Insufficient options for proto=fd [ 50.372812][ T4458] loop3: detected capacity change from 0 to 1024 [ 50.412489][ T4458] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.437533][ T4468] loop4: detected capacity change from 0 to 764 [ 50.450179][ T4458] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.309: missing EA_INODE flag [ 50.475169][ T4458] EXT4-fs (loop3): Remounting filesystem read-only [ 50.516859][ T4468] 9pnet_fd: Insufficient options for proto=fd [ 50.654021][ T4485] loop3: detected capacity change from 0 to 512 [ 50.701204][ T4489] loop1: detected capacity change from 0 to 512 [ 50.709237][ T4485] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.751756][ T4485] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.316: bg 0: block 248: padding at end of block bitmap is not set [ 50.780256][ T4492] 9pnet_fd: Insufficient options for proto=fd [ 50.812423][ T4489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 50.841025][ T4485] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.316: Failed to acquire dquot type 1 [ 50.864007][ T4489] System zones: 1-12 [ 50.868090][ T4489] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.313: Directory hole found for htree index block 0 [ 50.873365][ T4495] loop0: detected capacity change from 0 to 512 [ 50.899085][ T4485] EXT4-fs (loop3): 1 truncate cleaned up [ 50.905608][ T4495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 50.918489][ T4495] System zones: 1-12 [ 50.922594][ T4495] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.318: Directory hole found for htree index block 0 [ 50.935337][ T4495] EXT4-fs (loop0): Remounting filesystem read-only [ 50.942259][ T4489] EXT4-fs (loop1): Remounting filesystem read-only [ 50.948779][ T4495] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 50.957299][ T4495] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 50.975918][ T4489] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 50.978915][ T4495] EXT4-fs (loop0): can't enable nombcache during remount [ 51.008912][ T4489] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 51.022386][ T4499] loop3: detected capacity change from 0 to 512 [ 51.038282][ T4483] ext4: Unknown parameter '' [ 51.074351][ T4499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 51.086833][ T4502] loop0: detected capacity change from 0 to 2048 [ 51.114110][ T4499] System zones: 1-12 [ 51.158542][ T4499] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.319: Directory hole found for htree index block 0 [ 51.228939][ T4499] EXT4-fs (loop3): Remounting filesystem read-only [ 51.257184][ T4499] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 51.301081][ T4499] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 51.325399][ T4499] ext4: Unknown parameter '' [ 51.444100][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 51.457112][ T4522] loop4: detected capacity change from 0 to 512 [ 51.472605][ T4516] loop3: detected capacity change from 0 to 1024 [ 51.480788][ T4522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 51.483504][ T4521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.324'. [ 51.497996][ T4522] System zones: 1-12 [ 51.509205][ T4522] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.326: Directory hole found for htree index block 0 [ 51.527126][ T4516] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 51.548007][ T4522] EXT4-fs (loop4): Remounting filesystem read-only [ 51.554797][ T4522] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 51.563292][ T4522] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 51.581937][ T4530] loop1: detected capacity change from 0 to 512 [ 51.599786][ T4516] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.322: missing EA_INODE flag [ 51.612108][ T4516] EXT4-fs (loop3): Remounting filesystem read-only [ 51.623005][ T4522] EXT4-fs (loop4): can't enable nombcache during remount [ 51.683425][ T4544] 9pnet_fd: Insufficient options for proto=fd [ 51.714388][ T4539] loop2: detected capacity change from 0 to 512 [ 51.754623][ T4546] loop4: detected capacity change from 0 to 512 [ 51.764231][ T4546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 51.772505][ T4546] System zones: 1-12 [ 51.776892][ T4546] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.330: Directory hole found for htree index block 0 [ 51.789601][ T4539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 51.797578][ T4546] EXT4-fs (loop4): Remounting filesystem read-only [ 51.804499][ T4546] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 51.813067][ T4539] System zones: 1-12 [ 51.817275][ T4539] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.331: Directory hole found for htree index block 0 [ 51.829804][ T4546] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 51.841464][ T4539] EXT4-fs (loop2): Remounting filesystem read-only [ 51.857331][ T4539] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 51.870151][ T4539] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 51.870991][ T4552] loop3: detected capacity change from 0 to 1024 [ 51.879789][ T4539] ext4: Unknown parameter '' [ 51.891717][ T4546] EXT4-fs (loop4): can't enable nombcache during remount [ 51.908814][ T4552] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.933573][ T4552] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.334: lblock 1 mapped to illegal pblock 1 (length 15) [ 51.949145][ T4552] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 51.961642][ T4552] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.961642][ T4552] [ 52.052599][ T4563] loop2: detected capacity change from 0 to 1024 [ 52.109503][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 52.180331][ T4578] loop3: detected capacity change from 0 to 512 [ 52.199324][ T4578] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.228256][ T4576] loop4: detected capacity change from 0 to 1024 [ 52.234825][ T4578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.343: bg 0: block 248: padding at end of block bitmap is not set [ 52.256483][ T4576] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.270064][ T4578] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.343: Failed to acquire dquot type 1 [ 52.283902][ T4578] EXT4-fs (loop3): 1 truncate cleaned up [ 52.306189][ T4585] validate_nla: 6 callbacks suppressed [ 52.306202][ T4585] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 52.348588][ T4576] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.342: missing EA_INODE flag [ 52.378465][ T4576] EXT4-fs (loop4): Remounting filesystem read-only [ 52.392866][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 52.437459][ T4596] netlink: 'syz.3.348': attribute type 4 has an invalid length. [ 52.450988][ T4596] loop3: detected capacity change from 0 to 1024 [ 52.498782][ T4600] netlink: 'wޣ': attribute type 10 has an invalid length. [ 52.534218][ T4600] netlink: 'wޣ': attribute type 10 has an invalid length. [ 52.600746][ T1036] IPVS: starting estimator thread 0... [ 52.627922][ T4618] loop3: detected capacity change from 0 to 2048 [ 52.653822][ T4623] netlink: 'syz.4.358': attribute type 4 has an invalid length. [ 52.688934][ T4612] IPVS: using max 2832 ests per chain, 141600 per kthread [ 52.763424][ T4631] netlink: 'syz.4.361': attribute type 4 has an invalid length. [ 52.782897][ T4628] loop0: detected capacity change from 0 to 1024 [ 52.782912][ T4631] loop4: detected capacity change from 0 to 1024 [ 52.809027][ T4628] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.844114][ T4628] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.359: missing EA_INODE flag [ 52.862043][ T4628] EXT4-fs (loop0): Remounting filesystem read-only [ 52.904746][ T4645] 9pnet_fd: Insufficient options for proto=fd [ 53.057099][ T4662] loop0: detected capacity change from 0 to 2048 [ 53.127998][ T4670] 9pnet_fd: Insufficient options for proto=fd [ 53.134899][ T4668] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 53.148334][ T4668] loop2: detected capacity change from 0 to 1024 [ 53.219312][ T4676] loop0: detected capacity change from 0 to 1024 [ 53.226000][ T4676] EXT4-fs: Ignoring removed orlov option [ 53.233182][ T4676] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.273825][ T4678] loop2: detected capacity change from 0 to 1024 [ 53.285398][ T4678] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 53.315767][ T4678] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.376: missing EA_INODE flag [ 53.330346][ T4690] loop0: detected capacity change from 0 to 512 [ 53.330773][ T4678] EXT4-fs (loop2): Remounting filesystem read-only [ 53.343747][ T4690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 53.352445][ T4690] System zones: 1-12 [ 53.356748][ T4690] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.379: Directory hole found for htree index block 0 [ 53.369552][ T4690] EXT4-fs (loop0): Remounting filesystem read-only [ 53.376207][ T4690] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 53.384618][ T4690] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 53.394085][ T4690] ext4: Unknown parameter '' [ 53.426730][ T4695] loop2: detected capacity change from 0 to 2048 [ 53.445605][ T4697] loop0: detected capacity change from 0 to 1024 [ 53.470355][ T4697] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.504033][ T4697] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.381: lblock 1 mapped to illegal pblock 1 (length 15) [ 53.521997][ T4697] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 53.534394][ T4697] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.534394][ T4697] [ 53.711732][ T4706] loop0: detected capacity change from 0 to 2048 [ 53.808550][ T4711] __nla_validate_parse: 3 callbacks suppressed [ 53.808629][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 53.880799][ T4718] loop4: detected capacity change from 0 to 2048 [ 53.916082][ T4723] loop0: detected capacity change from 0 to 512 [ 53.945366][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 54.003949][ T4723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 54.021126][ T4732] netlink: 'syz.3.394': attribute type 10 has an invalid length. [ 54.060210][ T4723] System zones: 1-12 [ 54.067520][ T4723] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.392: Directory hole found for htree index block 0 [ 54.101085][ T4723] EXT4-fs (loop0): Remounting filesystem read-only [ 54.116575][ T4723] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 54.137401][ T4723] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 54.162334][ T4723] ext4: Unknown parameter '' [ 54.352937][ T4741] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 54.385356][ T4744] 9pnet_fd: Insufficient options for proto=fd [ 54.414080][ T4746] FAULT_INJECTION: forcing a failure. [ 54.414080][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 54.426767][ T4746] CPU: 0 UID: 0 PID: 4746 Comm: syz.1.400 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 54.426802][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.426812][ T4746] Call Trace: [ 54.426818][ T4746] [ 54.426824][ T4746] __dump_stack+0x1d/0x30 [ 54.426847][ T4746] dump_stack_lvl+0xe8/0x140 [ 54.426864][ T4746] dump_stack+0x15/0x1b [ 54.426879][ T4746] should_fail_ex+0x265/0x280 [ 54.426906][ T4746] should_failslab+0x8c/0xb0 [ 54.426929][ T4746] kmem_cache_alloc_noprof+0x50/0x310 [ 54.426949][ T4746] ? mas_alloc_nodes+0x265/0x520 [ 54.426968][ T4746] mas_alloc_nodes+0x265/0x520 [ 54.426988][ T4746] mas_preallocate+0x33e/0x520 [ 54.427008][ T4746] __split_vma+0x240/0x650 [ 54.427033][ T4746] ? mas_find+0x5d5/0x700 [ 54.427053][ T4746] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 54.427074][ T4746] mmap_region+0x53f/0x1630 [ 54.427096][ T4746] ? mntput_no_expire+0x6f/0x460 [ 54.427125][ T4746] ? mntput+0x4b/0x80 [ 54.427162][ T4746] do_mmap+0x9b3/0xbe0 [ 54.427193][ T4746] vm_mmap_pgoff+0x17a/0x2e0 [ 54.427219][ T4746] ksys_mmap_pgoff+0xc2/0x310 [ 54.427243][ T4746] ? __x64_sys_mmap+0x49/0x70 [ 54.427261][ T4746] x64_sys_call+0x14a3/0x2ff0 [ 54.427279][ T4746] do_syscall_64+0xd2/0x200 [ 54.427298][ T4746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.427317][ T4746] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.427336][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.427355][ T4746] RIP: 0033:0x7f7660abeb69 [ 54.427370][ T4746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.427386][ T4746] RSP: 002b:00007f765f127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.427404][ T4746] RAX: ffffffffffffffda RBX: 00007f7660ce5fa0 RCX: 00007f7660abeb69 [ 54.427414][ T4746] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 54.427424][ T4746] RBP: 00007f765f127090 R08: ffffffffffffffff R09: 0000000000000000 [ 54.427433][ T4746] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 54.427443][ T4746] R13: 0000000000000000 R14: 00007f7660ce5fa0 R15: 00007ffd9a24a498 [ 54.427457][ T4746] [ 54.826313][ T4758] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 54.841875][ T4761] loop4: detected capacity change from 0 to 512 [ 54.891851][ T4761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 54.909870][ T4761] System zones: 1-12 [ 54.914006][ T4761] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.406: Directory hole found for htree index block 0 [ 54.972307][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 54.980900][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 54.980915][ T29] audit: type=1326 audit(1754402019.669:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.002010][ T4761] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 55.034859][ T29] audit: type=1326 audit(1754402019.669:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.049006][ T4761] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 55.058245][ T29] audit: type=1326 audit(1754402019.669:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.142396][ T4761] ext4: Unknown parameter '' [ 55.184836][ T29] audit: type=1326 audit(1754402019.759:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.208220][ T29] audit: type=1326 audit(1754402019.759:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.231583][ T29] audit: type=1326 audit(1754402019.759:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.254910][ T29] audit: type=1326 audit(1754402019.759:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.278217][ T29] audit: type=1326 audit(1754402019.759:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 55.301602][ T29] audit: type=1326 audit(1754402019.759:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 56.040799][ T29] audit: type=1326 audit(1754402020.659:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 56.191828][ T4790] loop1: detected capacity change from 0 to 512 [ 56.278974][ T4790] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.352814][ T4790] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.501724][ T4790] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.415: corrupted inode contents [ 56.540358][ T4807] netlink: 44 bytes leftover after parsing attributes in process `syz.3.418'. [ 56.561220][ T4790] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.415: mark_inode_dirty error [ 56.625601][ T4790] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.415: corrupted inode contents [ 56.705342][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 56.728460][ T4790] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.415: mark_inode_dirty error [ 56.829127][ T4790] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.415: corrupted inode contents [ 56.880238][ T4790] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 56.957466][ T4790] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.415: corrupted inode contents [ 56.972512][ T4818] 9pnet_fd: Insufficient options for proto=fd [ 57.046599][ T4790] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.415: mark_inode_dirty error [ 57.115912][ T4824] loop2: detected capacity change from 0 to 1024 [ 57.123967][ T4790] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 57.145071][ T4824] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.163760][ T4824] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.427: lblock 1 mapped to illegal pblock 1 (length 15) [ 57.214209][ T4824] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 57.226648][ T4824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.226648][ T4824] [ 57.236675][ T4790] EXT4-fs (loop1): 1 truncate cleaned up [ 57.248301][ T3424] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 57.383656][ T3388] IPVS: starting estimator thread 0... [ 57.402105][ T4843] loop2: detected capacity change from 0 to 512 [ 57.417900][ T4843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 57.478979][ T4841] IPVS: using max 2736 ests per chain, 136800 per kthread [ 57.492381][ T4843] System zones: 1-12 [ 57.496515][ T4843] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.434: Directory hole found for htree index block 0 [ 57.552267][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 57.571685][ T4843] EXT4-fs (loop2): Remounting filesystem read-only [ 57.578267][ T4843] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 57.629856][ T4843] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 57.650299][ T4843] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 57.724717][ T4853] loop2: detected capacity change from 0 to 2048 [ 58.021190][ T4868] loop2: detected capacity change from 0 to 1024 [ 58.034125][ T4866] loop1: detected capacity change from 0 to 1024 [ 58.051102][ T4868] EXT4-fs: Ignoring removed orlov option [ 58.079371][ T4868] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.118930][ T4866] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 58.240313][ T4866] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.440: missing EA_INODE flag [ 58.252445][ T4866] EXT4-fs (loop1): Remounting filesystem read-only [ 58.343013][ T4885] loop4: detected capacity change from 0 to 512 [ 58.406160][ T3388] IPVS: starting estimator thread 0... [ 58.424921][ T4885] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.438598][ T4885] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.475875][ T4894] loop1: detected capacity change from 0 to 2048 [ 58.486732][ T4885] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 58.518635][ T4889] IPVS: using max 2736 ests per chain, 136800 per kthread [ 58.610533][ T4885] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.444: mark_inode_dirty error [ 58.660793][ T4885] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 58.692850][ T4885] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.444: mark_inode_dirty error [ 58.730404][ T4885] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 58.751172][ T4912] loop3: detected capacity change from 0 to 512 [ 58.820019][ T4885] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 58.889544][ T4916] 9pnet_fd: Insufficient options for proto=fd [ 58.890420][ T4885] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 58.929515][ T4885] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.444: mark_inode_dirty error [ 58.959008][ T4885] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 58.979262][ T4885] EXT4-fs (loop4): 1 truncate cleaned up [ 58.985155][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 59.030504][ T4918] loop0: detected capacity change from 0 to 1024 [ 59.085200][ T4918] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.099698][ T4922] validate_nla: 4 callbacks suppressed [ 59.099717][ T4922] netlink: 'wޣ': attribute type 10 has an invalid length. [ 59.113590][ T4922] netlink: 'wޣ': attribute type 10 has an invalid length. [ 59.151255][ T4918] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.456: lblock 1 mapped to illegal pblock 1 (length 15) [ 59.227541][ T4918] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 59.240025][ T4918] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.240025][ T4918] [ 59.335072][ T4930] loop1: detected capacity change from 0 to 128 [ 59.386947][ T4930] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.406540][ T4932] loop4: detected capacity change from 0 to 512 [ 59.431270][ T4932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 59.445505][ T4932] System zones: 1-12 [ 59.449791][ T4932] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.460: Directory hole found for htree index block 0 [ 59.463678][ T4932] EXT4-fs (loop4): Remounting filesystem read-only [ 59.475690][ T4932] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 59.484343][ T4932] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 59.495787][ T4932] ext4: Unknown parameter '' [ 59.565975][ T4946] netlink: 'syz.1.464': attribute type 4 has an invalid length. [ 59.599485][ T4944] loop4: detected capacity change from 0 to 2048 [ 59.621715][ T4946] loop1: detected capacity change from 0 to 1024 [ 59.649383][ T4952] loop3: detected capacity change from 0 to 512 [ 59.678470][ T4947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 59.703485][ T4952] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.722204][ T4952] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.753900][ T4952] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.465: corrupted inode contents [ 59.782783][ C0] hrtimer: interrupt took 29349 ns [ 59.805225][ T4952] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.465: mark_inode_dirty error [ 59.841262][ T4952] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.465: corrupted inode contents [ 59.872505][ T4952] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.465: mark_inode_dirty error [ 59.944555][ T4952] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.465: corrupted inode contents [ 59.980676][ T4952] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 60.023803][ T4952] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.465: corrupted inode contents [ 60.043387][ T4952] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.465: mark_inode_dirty error [ 60.086077][ T4952] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 60.097412][ T4952] EXT4-fs (loop3): 1 truncate cleaned up [ 60.104125][ T31] __quota_error: 221 callbacks suppressed [ 60.104139][ T31] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.104939][ T4964] 9pnet_fd: Insufficient options for proto=fd [ 60.109946][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 60.242202][ T4972] loop3: detected capacity change from 0 to 512 [ 60.320747][ T4972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 60.338952][ T4972] System zones: 1-12 [ 60.343024][ T4972] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.470: Directory hole found for htree index block 0 [ 60.357520][ T4972] EXT4-fs (loop3): Remounting filesystem read-only [ 60.387875][ T4972] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 60.408457][ T4983] loop0: detected capacity change from 0 to 512 [ 60.429272][ T4972] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 60.447243][ T4972] ext4: Unknown parameter '' [ 60.459529][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 60.501971][ T4983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 60.538954][ T4983] System zones: 1-12 [ 60.548364][ T4983] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.473: Directory hole found for htree index block 0 [ 60.573179][ T4983] EXT4-fs (loop0): Remounting filesystem read-only [ 60.580571][ T4983] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 60.592429][ T4983] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 60.612727][ T4998] loop3: detected capacity change from 0 to 1024 [ 60.622768][ T4996] loop2: detected capacity change from 0 to 2048 [ 60.631870][ T4983] ext4: Unknown parameter '' [ 60.639441][ T4998] EXT4-fs: Ignoring removed orlov option [ 60.646465][ T4998] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.768476][ T5004] loop0: detected capacity change from 0 to 2048 [ 60.848923][ T5011] netlink: 44 bytes leftover after parsing attributes in process `syz.3.480'. [ 60.969750][ T5017] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 61.052043][ T29] audit: type=1400 audit(1754402025.739:1686): avc: denied { getopt } for pid=5022 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.083513][ T5026] FAULT_INJECTION: forcing a failure. [ 61.083513][ T5026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.096765][ T5026] CPU: 1 UID: 0 PID: 5026 Comm: syz.0.487 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 61.096792][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.096817][ T5026] Call Trace: [ 61.096825][ T5026] [ 61.096834][ T5026] __dump_stack+0x1d/0x30 [ 61.096895][ T5026] dump_stack_lvl+0xe8/0x140 [ 61.096911][ T5026] dump_stack+0x15/0x1b [ 61.096924][ T5026] should_fail_ex+0x265/0x280 [ 61.096956][ T5026] should_fail+0xb/0x20 [ 61.097020][ T5026] should_fail_usercopy+0x1a/0x20 [ 61.097035][ T5026] _copy_from_user+0x1c/0xb0 [ 61.097058][ T5026] do_sock_getsockopt+0xf1/0x240 [ 61.097138][ T5026] __x64_sys_getsockopt+0x11e/0x1a0 [ 61.097187][ T5026] x64_sys_call+0x2bc6/0x2ff0 [ 61.097206][ T5026] do_syscall_64+0xd2/0x200 [ 61.097289][ T5026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.097358][ T5026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.097437][ T5026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.097481][ T5026] RIP: 0033:0x7f9c0147eb69 [ 61.097496][ T5026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.097512][ T5026] RSP: 002b:00007f9bffadf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 61.097586][ T5026] RAX: ffffffffffffffda RBX: 00007f9c016a5fa0 RCX: 00007f9c0147eb69 [ 61.097597][ T5026] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 61.097608][ T5026] RBP: 00007f9bffadf090 R08: 0000200000000300 R09: 0000000000000000 [ 61.097620][ T5026] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.097631][ T5026] R13: 0000000000000000 R14: 00007f9c016a5fa0 R15: 00007ffdfd127f88 [ 61.097648][ T5026] [ 61.334007][ T5031] loop4: detected capacity change from 0 to 1024 [ 61.363521][ T5029] loop0: detected capacity change from 0 to 512 [ 61.375873][ T5029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 61.384836][ T5029] System zones: 1-12 [ 61.390569][ T5031] EXT4-fs: Ignoring removed orlov option [ 61.404497][ T5029] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.489: Directory hole found for htree index block 0 [ 61.409530][ T5031] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.435190][ T5029] EXT4-fs (loop0): Remounting filesystem read-only [ 61.455014][ T5029] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 61.486549][ T5029] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 61.504715][ T5039] loop2: detected capacity change from 0 to 512 [ 61.512345][ T5029] ext4: Unknown parameter '' [ 61.562373][ T5039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 61.570570][ T5039] System zones: 1-12 [ 61.574835][ T5039] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.491: Directory hole found for htree index block 0 [ 61.588371][ T5039] EXT4-fs (loop2): Remounting filesystem read-only [ 61.595805][ T5039] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 61.604492][ T5039] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 61.636024][ T5039] EXT4-fs (loop2): can't enable nombcache during remount [ 61.645135][ T29] audit: type=1326 audit(1754402026.339:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1755eb69 code=0x7ffc0000 [ 61.668594][ T29] audit: type=1326 audit(1754402026.339:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1755eb69 code=0x7ffc0000 [ 61.700124][ T5047] loop1: detected capacity change from 0 to 1024 [ 61.726432][ T5057] loop0: detected capacity change from 0 to 512 [ 61.736965][ T5057] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.749724][ T5057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.496: bg 0: block 248: padding at end of block bitmap is not set [ 61.779376][ T5057] Quota error (device loop0): write_blk: dquota write failed [ 61.786824][ T5057] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 61.796870][ T5057] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.496: Failed to acquire dquot type 1 [ 61.808955][ T29] audit: type=1326 audit(1754402026.339:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f1755eb69 code=0x7ffc0000 [ 61.832338][ T29] audit: type=1326 audit(1754402026.379:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 61.855683][ T29] audit: type=1326 audit(1754402026.379:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 61.879060][ T29] audit: type=1326 audit(1754402026.409:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 61.879775][ T5047] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.905703][ T5057] EXT4-fs (loop0): 1 truncate cleaned up [ 61.944153][ T5065] FAULT_INJECTION: forcing a failure. [ 61.944153][ T5065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.957410][ T5065] CPU: 0 UID: 0 PID: 5065 Comm: syz.2.499 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 61.957438][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.957449][ T5065] Call Trace: [ 61.957456][ T5065] [ 61.957463][ T5065] __dump_stack+0x1d/0x30 [ 61.957537][ T5065] dump_stack_lvl+0xe8/0x140 [ 61.957552][ T5065] dump_stack+0x15/0x1b [ 61.957572][ T5065] should_fail_ex+0x265/0x280 [ 61.957599][ T5065] should_fail+0xb/0x20 [ 61.957621][ T5065] should_fail_usercopy+0x1a/0x20 [ 61.957656][ T5065] _copy_from_user+0x1c/0xb0 [ 61.957745][ T5065] sock_do_ioctl+0xe6/0x220 [ 61.957767][ T5065] sock_ioctl+0x41b/0x610 [ 61.957787][ T5065] ? __pfx_sock_ioctl+0x10/0x10 [ 61.957822][ T5065] __se_sys_ioctl+0xcb/0x140 [ 61.957861][ T5065] __x64_sys_ioctl+0x43/0x50 [ 61.957886][ T5065] x64_sys_call+0x1816/0x2ff0 [ 61.957902][ T5065] do_syscall_64+0xd2/0x200 [ 61.958001][ T5065] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.958023][ T5065] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.958120][ T5065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.958151][ T5065] RIP: 0033:0x7f208c95eb69 [ 61.958166][ T5065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.958181][ T5065] RSP: 002b:00007f208afbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.958196][ T5065] RAX: ffffffffffffffda RBX: 00007f208cb85fa0 RCX: 00007f208c95eb69 [ 61.958206][ T5065] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 61.958216][ T5065] RBP: 00007f208afbf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.958289][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.958301][ T5065] R13: 0000000000000000 R14: 00007f208cb85fa0 R15: 00007fffe2fd03f8 [ 61.958316][ T5065] [ 62.231349][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 62.248925][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.256359][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.269699][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.277103][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.321783][ T5047] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.492: missing EA_INODE flag [ 62.341245][ T5047] EXT4-fs (loop1): Remounting filesystem read-only [ 62.452955][ T5094] loop2: detected capacity change from 0 to 1024 [ 62.490182][ T5094] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.501508][ T5098] loop1: detected capacity change from 0 to 1024 [ 62.513799][ T5098] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 62.524625][ T5094] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.511: lblock 1 mapped to illegal pblock 1 (length 15) [ 62.541465][ T5094] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 62.553872][ T5094] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.553872][ T5094] [ 62.676508][ T5107] netlink: 124 bytes leftover after parsing attributes in process `syz.2.513'. [ 62.737612][ T5108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5108 comm=syz.2.513 [ 62.903132][ T5108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.947817][ T5108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.063163][ T5117] 9pnet_fd: Insufficient options for proto=fd [ 63.102728][ T5121] 9pnet_fd: Insufficient options for proto=fd [ 63.134902][ T5127] FAULT_INJECTION: forcing a failure. [ 63.134902][ T5127] name failslab, interval 1, probability 0, space 0, times 0 [ 63.147667][ T5127] CPU: 0 UID: 0 PID: 5127 Comm: syz.0.521 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 63.147695][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.147706][ T5127] Call Trace: [ 63.147721][ T5127] [ 63.147730][ T5127] __dump_stack+0x1d/0x30 [ 63.147841][ T5127] dump_stack_lvl+0xe8/0x140 [ 63.147857][ T5127] dump_stack+0x15/0x1b [ 63.147870][ T5127] should_fail_ex+0x265/0x280 [ 63.147965][ T5127] should_failslab+0x8c/0xb0 [ 63.148020][ T5127] __kmalloc_noprof+0xa5/0x3e0 [ 63.148045][ T5127] ? iovec_from_user+0x84/0x210 [ 63.148141][ T5127] ? mntput_no_expire+0x6f/0x460 [ 63.148166][ T5127] iovec_from_user+0x84/0x210 [ 63.148188][ T5127] __import_iovec+0xf3/0x540 [ 63.148272][ T5127] import_iovec+0x61/0x80 [ 63.148305][ T5127] ___sys_recvmsg+0x358/0x370 [ 63.148328][ T5127] do_recvmmsg+0x1ef/0x540 [ 63.148346][ T5127] ? fput+0x8f/0xc0 [ 63.148426][ T5127] __x64_sys_recvmmsg+0xe5/0x170 [ 63.148457][ T5127] x64_sys_call+0x27a6/0x2ff0 [ 63.148468][ T5127] do_syscall_64+0xd2/0x200 [ 63.148481][ T5127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.148494][ T5127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.148505][ T5127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.148535][ T5127] RIP: 0033:0x7f9c0147eb69 [ 63.148545][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.148554][ T5127] RSP: 002b:00007f9bffadf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 63.148646][ T5127] RAX: ffffffffffffffda RBX: 00007f9c016a5fa0 RCX: 00007f9c0147eb69 [ 63.148653][ T5127] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000003 [ 63.148662][ T5127] RBP: 00007f9bffadf090 R08: 0000000000000000 R09: 0000000000000000 [ 63.148673][ T5127] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 63.148684][ T5127] R13: 0000000000000000 R14: 00007f9c016a5fa0 R15: 00007ffdfd127f88 [ 63.148701][ T5127] [ 63.352239][ T5123] loop4: detected capacity change from 0 to 1024 [ 63.359768][ T5123] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 63.388390][ T5123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.519: missing EA_INODE flag [ 63.403953][ T5123] EXT4-fs (loop4): Remounting filesystem read-only [ 63.528234][ T5144] loop3: detected capacity change from 0 to 512 [ 63.554599][ T5144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 63.565494][ T5144] System zones: 1-12 [ 63.575696][ T5144] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.527: Directory hole found for htree index block 0 [ 63.603333][ T5146] loop4: detected capacity change from 0 to 1024 [ 63.625636][ T5146] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 63.647807][ T5144] EXT4-fs (loop3): Remounting filesystem read-only [ 63.670441][ T5144] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 63.717118][ T5152] loop2: detected capacity change from 0 to 2048 [ 63.723635][ T5144] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 63.745167][ T5146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.526: missing EA_INODE flag [ 63.762159][ T5146] EXT4-fs (loop4): Remounting filesystem read-only [ 63.782733][ T5144] EXT4-fs (loop3): can't enable nombcache during remount [ 63.914378][ T5169] loop3: detected capacity change from 0 to 512 [ 63.992511][ T5169] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.009786][ T5169] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.030538][ T5169] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.531: corrupted inode contents [ 64.049386][ T5176] netlink: 'wޣ': attribute type 10 has an invalid length. [ 64.056916][ T5169] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.531: mark_inode_dirty error [ 64.068526][ T5176] syz_tun: entered promiscuous mode [ 64.074913][ T5169] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.531: corrupted inode contents [ 64.101085][ T5169] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.531: mark_inode_dirty error [ 64.104635][ T5177] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 64.116268][ T5176] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 64.142052][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.149582][ T5169] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.531: corrupted inode contents [ 64.150054][ T5177] team0: Port device bond0 added [ 64.167445][ T5169] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 64.189326][ T5169] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.531: corrupted inode contents [ 64.215520][ T5169] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.531: mark_inode_dirty error [ 64.233791][ T5176] team0 (unregistering): Port device team_slave_0 removed [ 64.241543][ T5169] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 64.255382][ T5176] team0 (unregistering): Port device team_slave_1 removed [ 64.264202][ T5169] EXT4-fs (loop3): 1 truncate cleaned up [ 64.264306][ T5176] team0 (unregistering): Port device dummy0 removed [ 64.277129][ T3424] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 64.291693][ T5176] team0 (unregistering): Port device bond0 removed [ 64.471925][ T5188] loop3: detected capacity change from 0 to 1024 [ 64.499271][ T5188] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.551890][ T5200] loop1: detected capacity change from 0 to 1024 [ 64.596076][ T5200] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.607938][ T5188] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.537: missing EA_INODE flag [ 64.644200][ T5200] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.541: lblock 1 mapped to illegal pblock 1 (length 15) [ 64.662117][ T5211] netlink: 'wޣ': attribute type 10 has an invalid length. [ 64.673133][ T5211] netlink: 'wޣ': attribute type 10 has an invalid length. [ 64.682990][ T5188] EXT4-fs (loop3): Remounting filesystem read-only [ 64.728992][ T5200] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 64.741436][ T5200] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.741436][ T5200] [ 64.803844][ T5219] netlink: 'syz.3.545': attribute type 10 has an invalid length. [ 64.899541][ T5227] loop3: detected capacity change from 0 to 2048 [ 64.933031][ T5228] loop4: detected capacity change from 0 to 1024 [ 65.013225][ T5234] loop1: detected capacity change from 0 to 512 [ 65.025577][ T5228] EXT4-fs: Ignoring removed orlov option [ 65.062582][ T5234] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.103579][ T5228] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.151527][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 65.151542][ T29] audit: type=1326 audit(1754402029.839:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.168908][ T5234] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #17: comm BM6: corrupted in-inode xattr: invalid ea_ino [ 65.181137][ T29] audit: type=1326 audit(1754402029.839:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.225083][ T5234] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm BM6: couldn't read orphan inode 17 (err -117) [ 65.276761][ T29] audit: type=1326 audit(1754402029.949:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.300339][ T29] audit: type=1326 audit(1754402029.949:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.323666][ T29] audit: type=1326 audit(1754402029.949:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.347112][ T29] audit: type=1326 audit(1754402029.949:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.370523][ T29] audit: type=1400 audit(1754402029.949:1869): avc: denied { append } for pid=5233 comm=424DB836 name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.392428][ T29] audit: type=1326 audit(1754402029.959:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.415802][ T29] audit: type=1326 audit(1754402029.959:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.422092][ T5234] netlink: 8 bytes leftover after parsing attributes in process `BM6'. [ 65.439095][ T29] audit: type=1326 audit(1754402029.959:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9c0147eb69 code=0x7ffc0000 [ 65.486987][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.718027][ T5259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.559'. [ 66.032260][ T5268] loop2: detected capacity change from 0 to 1024 [ 66.054531][ T5268] EXT4-fs mount: 194 callbacks suppressed [ 66.054547][ T5268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.079262][ T5268] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.080537][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 66.115900][ T5268] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.562: lblock 1 mapped to illegal pblock 1 (length 15) [ 66.139042][ T4827] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.152266][ T5268] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 66.166234][ T5268] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.166234][ T5268] [ 66.191666][ T5274] loop1: detected capacity change from 0 to 1024 [ 66.216158][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.262577][ T5274] EXT4-fs: Ignoring removed orlov option [ 66.282004][ T5281] 9pnet_fd: Insufficient options for proto=fd [ 66.291719][ T5274] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 66.340454][ T5274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.411604][ T5289] wireguard0: entered promiscuous mode [ 66.417164][ T5289] wireguard0: entered allmulticast mode [ 66.424308][ T5292] loop4: detected capacity change from 0 to 512 [ 66.438263][ T5292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 66.449832][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.459688][ T5292] System zones: 1-12 [ 66.463710][ T5292] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.571: Directory hole found for htree index block 0 [ 66.494726][ T5300] loop2: detected capacity change from 0 to 512 [ 66.510582][ T5292] EXT4-fs (loop4): Remounting filesystem read-only [ 66.517916][ T5292] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 66.553270][ T5308] loop3: detected capacity change from 0 to 1024 [ 66.560573][ T5300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 66.568495][ T5300] System zones: 1-12 [ 66.573293][ T5308] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 66.606213][ T5292] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 66.614661][ T5300] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.572: Directory hole found for htree index block 0 [ 66.629320][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.658718][ T5292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.682450][ T5300] EXT4-fs (loop2): Remounting filesystem read-only [ 66.693948][ T5300] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 66.702985][ T5300] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 66.712525][ T5300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.712541][ T5308] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.574: missing EA_INODE flag [ 66.712712][ T5308] EXT4-fs (loop3): Remounting filesystem read-only [ 66.746809][ T5300] EXT4-fs (loop2): can't enable nombcache during remount [ 66.767417][ T5292] EXT4-fs (loop4): can't enable nombcache during remount [ 66.819501][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.841348][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.869064][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.884350][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 66.954121][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 66.963020][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 66.967814][ T5338] loop4: detected capacity change from 0 to 2048 [ 67.011605][ T5338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.085662][ T5342] loop1: detected capacity change from 0 to 512 [ 67.135155][ T5342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 67.145586][ T5342] System zones: 1-12 [ 67.152917][ T5342] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.582: Directory hole found for htree index block 0 [ 67.168158][ T5342] EXT4-fs (loop1): Remounting filesystem read-only [ 67.177830][ T5342] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 67.190076][ T5342] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 67.200738][ T5342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.246826][ T5342] EXT4-fs (loop1): can't enable nombcache during remount [ 67.320277][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.341400][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 67.431366][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.447676][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 67.463749][ T5373] lo speed is unknown, defaulting to 1000 [ 67.472536][ T5373] lo speed is unknown, defaulting to 1000 [ 67.499282][ T5373] lo speed is unknown, defaulting to 1000 [ 67.505492][ T5373] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.533916][ T5373] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.537926][ T5382] loop1: detected capacity change from 0 to 512 [ 67.557376][ T5373] lo speed is unknown, defaulting to 1000 [ 67.567985][ T5373] lo speed is unknown, defaulting to 1000 [ 67.588259][ T5382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 67.590260][ T5373] lo speed is unknown, defaulting to 1000 [ 67.602317][ T5382] System zones: 1-12 [ 67.606406][ T5382] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.598: Directory hole found for htree index block 0 [ 67.606514][ T5387] lo speed is unknown, defaulting to 1000 [ 67.625526][ T5382] EXT4-fs (loop1): Remounting filesystem read-only [ 67.634268][ T5373] lo speed is unknown, defaulting to 1000 [ 67.642667][ T5382] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 67.651775][ T5389] FAULT_INJECTION: forcing a failure. [ 67.651775][ T5389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.664847][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.4.600 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 67.665034][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.665046][ T5389] Call Trace: [ 67.665052][ T5389] [ 67.665058][ T5389] __dump_stack+0x1d/0x30 [ 67.665076][ T5389] dump_stack_lvl+0xe8/0x140 [ 67.665122][ T5389] dump_stack+0x15/0x1b [ 67.665158][ T5389] should_fail_ex+0x265/0x280 [ 67.665245][ T5389] should_fail+0xb/0x20 [ 67.665283][ T5389] should_fail_usercopy+0x1a/0x20 [ 67.665310][ T5389] _copy_from_user+0x1c/0xb0 [ 67.665335][ T5389] __sys_bpf+0x178/0x7b0 [ 67.665389][ T5389] __x64_sys_bpf+0x41/0x50 [ 67.665453][ T5389] x64_sys_call+0x2aea/0x2ff0 [ 67.665473][ T5389] do_syscall_64+0xd2/0x200 [ 67.665494][ T5389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.665533][ T5389] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.665549][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.665566][ T5389] RIP: 0033:0x7f1f1755eb69 [ 67.665578][ T5389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.665617][ T5389] RSP: 002b:00007f1f15b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.665636][ T5389] RAX: ffffffffffffffda RBX: 00007f1f17786080 RCX: 00007f1f1755eb69 [ 67.665648][ T5389] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000006 [ 67.665661][ T5389] RBP: 00007f1f15b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 67.665673][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.665698][ T5389] R13: 0000000000000000 R14: 00007f1f17786080 R15: 00007ffd6be9ef68 [ 67.665717][ T5389] [ 67.665900][ T5382] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 67.715060][ T5373] lo speed is unknown, defaulting to 1000 [ 67.728737][ T5382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.872611][ T5382] EXT4-fs (loop1): can't enable nombcache during remount [ 67.894777][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.930743][ T5397] loop2: detected capacity change from 0 to 1024 [ 67.947669][ T5397] EXT4-fs: Ignoring removed orlov option [ 67.967887][ T5397] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.995407][ T5405] loop1: detected capacity change from 0 to 1024 [ 68.020759][ T5407] 9pnet_fd: Insufficient options for proto=fd [ 68.028763][ T5405] EXT4-fs: Ignoring removed orlov option [ 68.039302][ T5397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.063925][ T5405] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.110225][ T5405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.130314][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.149357][ T5419] loop4: detected capacity change from 0 to 512 [ 68.163168][ T5421] loop0: detected capacity change from 0 to 512 [ 68.175847][ T5421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 68.188190][ T5419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.192273][ T5421] System zones: 1-12 [ 68.199177][ T5421] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.614: Directory hole found for htree index block 0 [ 68.212365][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.217078][ T5419] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.611: bg 0: block 248: padding at end of block bitmap is not set [ 68.227108][ T5424] loop3: detected capacity change from 0 to 2048 [ 68.243126][ T5421] EXT4-fs (loop0): Remounting filesystem read-only [ 68.268488][ T5421] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 68.280147][ T5419] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.611: Failed to acquire dquot type 1 [ 68.297320][ T5421] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 68.306409][ T5421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.307093][ T5424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.332869][ T5419] EXT4-fs (loop4): 1 truncate cleaned up [ 68.338680][ T5421] EXT4-fs (loop0): can't enable nombcache during remount [ 68.353610][ T5419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.367098][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.402495][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.463555][ T5441] loop0: detected capacity change from 0 to 2048 [ 68.472675][ T5444] 9pnet_fd: Insufficient options for proto=fd [ 68.504493][ T5441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.527665][ T5451] capability: warning: `syz.4.624' uses deprecated v2 capabilities in a way that may be insecure [ 68.578348][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.603050][ T5455] loop4: detected capacity change from 0 to 1024 [ 68.700481][ T5455] EXT4-fs: Ignoring removed orlov option [ 68.720877][ T5455] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.742991][ T5455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.792350][ T5464] 9pnet_fd: Insufficient options for proto=fd [ 68.804760][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.862822][ T5466] loop4: detected capacity change from 0 to 512 [ 68.871776][ T5466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 68.886589][ T5466] System zones: 1-12 [ 68.899049][ T5466] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.630: Directory hole found for htree index block 0 [ 68.932112][ T5466] EXT4-fs (loop4): Remounting filesystem read-only [ 68.958042][ T5466] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 68.968269][ T5466] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 68.977781][ T5466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.000516][ T5481] loop3: detected capacity change from 0 to 512 [ 69.023671][ T5466] EXT4-fs (loop4): can't enable nombcache during remount [ 69.030847][ T5481] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.039836][ T5481] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.048322][ T5481] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.634: corrupted inode contents [ 69.084797][ T5481] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.634: mark_inode_dirty error [ 69.108188][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.111573][ T5481] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.634: corrupted inode contents [ 69.130695][ T5481] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.634: mark_inode_dirty error [ 69.142136][ T5481] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.634: corrupted inode contents [ 69.199190][ T5481] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.217425][ T5488] loop4: detected capacity change from 0 to 2048 [ 69.224096][ T5481] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.634: corrupted inode contents [ 69.237670][ T5491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'. [ 69.246577][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 69.257507][ T5481] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.634: mark_inode_dirty error [ 69.273791][ T5481] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.291059][ T5481] EXT4-fs (loop3): 1 truncate cleaned up [ 69.297180][ T3424] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 69.330625][ T5488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.345309][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.345942][ T5481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.392149][ T5481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.478806][ T5503] lo speed is unknown, defaulting to 1000 [ 69.509812][ T5505] loop2: detected capacity change from 0 to 1024 [ 69.516648][ T5505] EXT4-fs: Ignoring removed orlov option [ 69.541746][ T5505] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 69.572333][ T5505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.611841][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.623196][ T5509] loop0: detected capacity change from 0 to 1024 [ 69.632295][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.662323][ T5509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.677613][ T5509] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.703943][ T5509] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.641: lblock 1 mapped to illegal pblock 1 (length 15) [ 69.720209][ T5520] loop3: detected capacity change from 0 to 512 [ 69.721375][ T5509] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 69.738916][ T5509] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.738916][ T5509] [ 69.754585][ T5518] loop2: detected capacity change from 0 to 512 [ 69.765329][ T5518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 69.779059][ T5520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 69.786988][ T5520] System zones: 1-12 [ 69.791930][ T5518] System zones: 1-12 [ 69.796041][ T5518] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.642: Directory hole found for htree index block 0 [ 69.800210][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.808725][ T5520] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.645: Directory hole found for htree index block 0 [ 69.825279][ T5530] loop4: detected capacity change from 0 to 2048 [ 69.832357][ T5518] EXT4-fs (loop2): Remounting filesystem read-only [ 69.842534][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 69.849397][ T5520] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 69.857668][ T5518] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 69.858592][ T5520] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 69.866106][ T5518] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 69.875549][ T5520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.896746][ T5530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.917555][ T5518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.931167][ T5520] EXT4-fs (loop3): can't enable nombcache during remount [ 69.950574][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.950765][ T5518] EXT4-fs (loop2): can't enable nombcache during remount [ 69.979968][ T5534] loop0: detected capacity change from 0 to 1024 [ 70.011976][ T5534] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 70.038978][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.095298][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.123175][ T5534] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.646: missing EA_INODE flag [ 70.136497][ T5548] loop3: detected capacity change from 0 to 1024 [ 70.144004][ T5534] EXT4-fs (loop0): Remounting filesystem read-only [ 70.167903][ T5548] EXT4-fs: Ignoring removed orlov option [ 70.175376][ T5548] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.208604][ T5548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.223053][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.309828][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.430341][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 70.430356][ T29] audit: type=1326 audit(1754402035.119:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 70.470672][ T5570] FAULT_INJECTION: forcing a failure. [ 70.470672][ T5570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.483758][ T5570] CPU: 0 UID: 0 PID: 5570 Comm: syz.3.659 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 70.483802][ T5570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.483812][ T5570] Call Trace: [ 70.483827][ T5570] [ 70.483834][ T5570] __dump_stack+0x1d/0x30 [ 70.483901][ T5570] dump_stack_lvl+0xe8/0x140 [ 70.483919][ T5570] dump_stack+0x15/0x1b [ 70.483935][ T5570] should_fail_ex+0x265/0x280 [ 70.484026][ T5570] should_fail+0xb/0x20 [ 70.484063][ T5570] should_fail_usercopy+0x1a/0x20 [ 70.484081][ T5570] _copy_to_user+0x20/0xa0 [ 70.484112][ T5570] simple_read_from_buffer+0xb5/0x130 [ 70.484130][ T5570] proc_fail_nth_read+0x10e/0x150 [ 70.484151][ T5570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.484175][ T5570] vfs_read+0x1a0/0x6f0 [ 70.484232][ T5570] ? __rcu_read_unlock+0x4f/0x70 [ 70.484248][ T5570] ? __rcu_read_unlock+0x4f/0x70 [ 70.484285][ T5570] ? __fget_files+0x184/0x1c0 [ 70.484309][ T5570] ksys_read+0xda/0x1a0 [ 70.484330][ T5570] __x64_sys_read+0x40/0x50 [ 70.484416][ T5570] x64_sys_call+0x27bc/0x2ff0 [ 70.484432][ T5570] do_syscall_64+0xd2/0x200 [ 70.484519][ T5570] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.484542][ T5570] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.484592][ T5570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.484612][ T5570] RIP: 0033:0x7f8b8635d57c [ 70.484628][ T5570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.484651][ T5570] RSP: 002b:00007f8b849c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.484749][ T5570] RAX: ffffffffffffffda RBX: 00007f8b86585fa0 RCX: 00007f8b8635d57c [ 70.484761][ T5570] RDX: 000000000000000f RSI: 00007f8b849c70a0 RDI: 0000000000000005 [ 70.484773][ T5570] RBP: 00007f8b849c7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.484785][ T5570] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 70.484797][ T5570] R13: 0000000000000000 R14: 00007f8b86585fa0 R15: 00007fffd9dcfc88 [ 70.484815][ T5570] [ 70.510229][ T29] audit: type=1326 audit(1754402035.119:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 70.589131][ T5573] loop2: detected capacity change from 0 to 512 [ 70.591808][ T29] audit: type=1326 audit(1754402035.119:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 70.746937][ T29] audit: type=1326 audit(1754402035.159:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208c95eb69 code=0x7ffc0000 [ 70.791002][ T5576] loop3: detected capacity change from 0 to 2048 [ 70.820204][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.834618][ T5573] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.849888][ T5573] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.866126][ T5573] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.660: corrupted inode contents [ 70.881277][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.899554][ T5573] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.660: mark_inode_dirty error [ 70.944207][ T29] audit: type=1326 audit(1754402035.629:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7660abeb69 code=0x7ffc0000 [ 70.973360][ T29] audit: type=1326 audit(1754402035.639:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7660abeb69 code=0x7ffc0000 [ 70.977531][ T5573] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.660: corrupted inode contents [ 70.996803][ T29] audit: type=1326 audit(1754402035.659:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f7660abeb69 code=0x7ffc0000 [ 71.031861][ T29] audit: type=1326 audit(1754402035.659:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7660abeb69 code=0x7ffc0000 [ 71.059485][ T29] audit: type=1326 audit(1754402035.659:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7660abeb69 code=0x7ffc0000 [ 71.082860][ T29] audit: type=1326 audit(1754402035.659:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7660abeb69 code=0x7ffc0000 [ 71.107378][ T5573] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.660: mark_inode_dirty error [ 71.134000][ T5573] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.660: corrupted inode contents [ 71.150647][ T5573] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 71.165059][ T5573] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.660: corrupted inode contents [ 71.185862][ T5573] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.660: mark_inode_dirty error [ 71.229145][ T5573] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 71.265724][ T5590] loop4: detected capacity change from 0 to 512 [ 71.273173][ T5595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.287396][ T5590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 71.298806][ T5595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.307307][ T5590] System zones: 1-12 [ 71.312449][ T5595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.322822][ T5573] EXT4-fs (loop2): 1 truncate cleaned up [ 71.331863][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 71.352158][ T5590] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.665: Directory hole found for htree index block 0 [ 71.364646][ T5595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.375189][ T5573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.388495][ T5573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.398782][ T5590] EXT4-fs (loop4): Remounting filesystem read-only [ 71.405351][ T5590] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 71.420347][ T5590] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 71.421430][ T5598] loop1: detected capacity change from 0 to 1024 [ 71.429402][ T5590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.436340][ T5598] EXT4-fs: Ignoring removed orlov option [ 71.462720][ T5598] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 71.476112][ T5590] ext4: Unknown parameter '' [ 71.498927][ T5598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.521925][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.527735][ T5604] loop2: detected capacity change from 0 to 256 [ 71.558661][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.582254][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.591339][ T5604] program syz.2.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.591670][ T5604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 71.642021][ T5611] loop3: detected capacity change from 0 to 512 [ 71.663313][ T5611] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.671287][ T5611] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.672: bg 0: block 248: padding at end of block bitmap is not set [ 71.686278][ T5611] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.672: Failed to acquire dquot type 1 [ 71.706494][ T5611] EXT4-fs (loop3): 1 truncate cleaned up [ 71.717993][ T5611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.738413][ T5609] PM: Enabling pm_trace changes system date and time during resume. [ 71.738413][ T5609] PM: Correct system time has to be restored manually after resume. [ 71.786347][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 71.803449][ T5620] loop9: detected capacity change from 0 to 7 [ 71.810403][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.818225][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.826111][ T3651] loop9: unable to read partition table [ 71.856486][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.876895][ T5620] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.886890][ T5620] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.894780][ T5620] loop9: unable to read partition table [ 71.920892][ T5620] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 71.920892][ T5620] ) failed (rc=-5) [ 71.934489][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.949148][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.967212][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.983975][ T5628] loop0: detected capacity change from 0 to 1024 [ 71.999568][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.018361][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.029982][ T5628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.048942][ T5628] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.107082][ T5628] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.678: lblock 1 mapped to illegal pblock 1 (length 15) [ 72.196360][ T5628] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 72.209204][ T5628] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.209204][ T5628] [ 72.288202][ T5636] loop1: detected capacity change from 0 to 1024 [ 72.296192][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.309402][ T5636] EXT4-fs: Ignoring removed orlov option [ 72.348887][ T5636] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.402915][ T5636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.438726][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.474177][ T5644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.683'. [ 72.546968][ T5650] loop1: detected capacity change from 0 to 1024 [ 72.620804][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 72.802023][ T5674] loop4: detected capacity change from 0 to 2048 [ 72.855737][ T5680] loop2: detected capacity change from 0 to 1024 [ 72.992295][ T5680] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.057415][ T5680] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.695: lblock 1 mapped to illegal pblock 1 (length 15) [ 73.075400][ T5688] loop1: detected capacity change from 0 to 512 [ 73.119492][ T5680] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 73.132491][ T5680] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.132491][ T5680] [ 73.296687][ T5701] loop3: detected capacity change from 0 to 512 [ 73.321763][ T5701] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.328205][ T5703] 9pnet_fd: Insufficient options for proto=fd [ 73.369264][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.519510][ T5714] loop3: detected capacity change from 0 to 1024 [ 73.527285][ T5714] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 73.553870][ T5714] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.709: missing EA_INODE flag [ 73.570046][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 73.601130][ T5725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.711'. [ 73.649456][ T5728] loop3: detected capacity change from 0 to 512 [ 73.674922][ T5728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 73.684734][ T5728] System zones: 1-12 [ 73.693827][ T5728] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.712: Directory hole found for htree index block 0 [ 73.708328][ T5728] EXT4-fs (loop3): Remounting filesystem read-only [ 73.715707][ T5728] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 73.726541][ T5728] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 73.753491][ T5728] ext4: Unknown parameter '' [ 73.775225][ T5734] loop4: detected capacity change from 0 to 1024 [ 73.782740][ T5734] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 73.867272][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 73.963983][ T5753] loop3: detected capacity change from 0 to 512 [ 73.977829][ T5753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 73.991911][ T5753] System zones: 1-12 [ 73.997444][ T5753] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.720: Directory hole found for htree index block 0 [ 74.013422][ T5753] EXT4-fs (loop3): Remounting filesystem read-only [ 74.023615][ T5753] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 74.052441][ T5753] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 74.065718][ T5753] EXT4-fs (loop3): can't enable nombcache during remount [ 74.079394][ T5757] loop4: detected capacity change from 0 to 1024 [ 74.086486][ T5757] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 74.103911][ T5762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 74.118228][ T5762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5762 comm=syz.1.723 [ 74.161133][ T5757] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.722: missing EA_INODE flag [ 74.181488][ T5772] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 74.189708][ T5757] EXT4-fs (loop4): Remounting filesystem read-only [ 74.208217][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 74.276657][ T5777] loop4: detected capacity change from 0 to 2048 [ 74.282778][ T5779] loop1: detected capacity change from 0 to 2048 [ 74.298472][ T5781] loop3: detected capacity change from 0 to 1024 [ 74.385375][ T5796] loop3: detected capacity change from 0 to 512 [ 74.405978][ T5799] loop0: detected capacity change from 0 to 512 [ 74.445276][ T5799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 74.455930][ T5799] System zones: 1-12 [ 74.460180][ T5799] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.735: Directory hole found for htree index block 0 [ 74.473823][ T5799] EXT4-fs (loop0): Remounting filesystem read-only [ 74.481045][ T5799] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 74.490091][ T5779] ================================================================== [ 74.498177][ T5779] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes [ 74.506171][ T5779] [ 74.508493][ T5779] read-write to 0xffff88811947a008 of 4 bytes by task 557 on cpu 0: [ 74.516466][ T5779] move_expired_inodes+0x17a/0x400 [ 74.521594][ T5779] queue_io+0xd9/0x2c0 [ 74.525694][ T5779] wb_writeback+0x226/0x5c0 [ 74.530213][ T5779] wb_workfn+0x194/0x910 [ 74.534458][ T5779] process_scheduled_works+0x4ce/0x9d0 [ 74.540009][ T5779] worker_thread+0x582/0x770 [ 74.544606][ T5779] kthread+0x486/0x510 [ 74.548675][ T5779] ret_from_fork+0xdd/0x150 [ 74.553175][ T5779] ret_from_fork_asm+0x1a/0x30 [ 74.557939][ T5779] [ 74.560258][ T5779] read to 0xffff88811947a008 of 4 bytes by task 5779 on cpu 1: [ 74.567802][ T5779] __mark_inode_dirty+0x18e/0x760 [ 74.572832][ T5779] mark_buffer_dirty+0x133/0x210 [ 74.577769][ T5779] block_write_end+0x12d/0x210 [ 74.582540][ T5779] ext4_write_end+0x134/0x720 [ 74.587218][ T5779] ext4_da_write_end+0x65/0x800 [ 74.592062][ T5779] generic_perform_write+0x312/0x490 [ 74.597338][ T5779] ext4_buffered_write_iter+0x1ee/0x3c0 [ 74.602885][ T5779] ext4_file_write_iter+0xdbf/0xf00 [ 74.608093][ T5779] iter_file_splice_write+0x5ef/0x970 [ 74.613462][ T5779] direct_splice_actor+0x153/0x2a0 [ 74.618572][ T5779] splice_direct_to_actor+0x30f/0x680 [ 74.624036][ T5779] do_splice_direct+0xda/0x150 [ 74.628802][ T5779] do_sendfile+0x380/0x650 [ 74.633227][ T5779] __x64_sys_sendfile64+0x105/0x150 [ 74.638436][ T5779] x64_sys_call+0x2bb0/0x2ff0 [ 74.643105][ T5779] do_syscall_64+0xd2/0x200 [ 74.647618][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.653506][ T5779] [ 74.655837][ T5779] value changed: 0x00000028 -> 0x0001002a [ 74.661547][ T5779] [ 74.663867][ T5779] Reported by Kernel Concurrency Sanitizer on: [ 74.670012][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.1.728 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 74.681989][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.692052][ T5779] ================================================================== [ 74.700330][ T5799] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 74.714241][ T5799] EXT4-fs (loop0): can't enable nombcache during remount