last executing test programs: 3.799777363s ago: executing program 3 (id=651): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000850000/0x1000)=nil, 0x1000) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002480)={0xf, {"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", 0x1000}}, 0x1006) io_setup(0x1e21b041, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x4, r1, 0x0, 0x0, 0x9}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, 0xffffffffffffffff, 0xfffffffffffffffe}]) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="6012a0af", @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x24040011) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001940)={[{@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@bh}, {@abort}, {@journal_path={'journal_path', 0x3d, './file0'}}, {}]}, 0x6, 0x610, &(0x7f0000001e40)="$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") r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='attr/sockcreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$incfs(r1, &(0x7f0000001040)='.log\x00', 0x0, 0xa5) close_range(r4, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) bind(r5, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x8, 0x40, "bda721597bacc3e6613f6047bb264886a8365abd10bc472a9fb416e8b816296e9f3dd1fa8561d8baa16c1bf9da9d50ee62575d08b56ea1e30bd257ccfcb09c", 0x6}, 0x80) 2.932347773s ago: executing program 3 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1], 0x2ac}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) time(&(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x401, 0xe) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) socket$inet_mptcp(0x2, 0x1, 0x106) 2.217044701s ago: executing program 1 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10040003}, 0x8880) 2.204813372s ago: executing program 1 (id=666): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000008500000063000000850000007600000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', r5, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000380)={0x2, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000580)={0x100000000, r3, 'id1\x00'}) 2.032273976s ago: executing program 3 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8, 0x700, 0x10001, 0x4, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@cipso={0x86, 0x44, 0x2, [{0x2, 0xb, "5491818dc571d07a71"}, {0x7, 0xb, "c7d4832d8717b50f93"}, {0x6, 0xa, "d05292391b052d93"}, {0x6, 0x12, "b96ac2d03927e0f64d37804cf1d43ef9"}, {0x6, 0xc, "0dd43e1d67a4d931193d"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x9, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x10, 0x20, 0x3}}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3b}]}}]}, 0xa4}}, 0x0) 2.031821466s ago: executing program 3 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a300000000005"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xed28}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 1.894927407s ago: executing program 2 (id=671): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0xc, 0x0, 0x0, 0xc, 0x5}, @fwd={0x2}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f00000003c0)=""/141, 0x36, 0x8d, 0x1, 0x6, 0x10000, @value=r5}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x4, 0x1, 0x8400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', r4, 0x40, 0x8, 0xb1, 0x5, {{0x1e, 0x4, 0x1, 0x17, 0x78, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x25, 0x0, [{0x0, 0x12, "f9a140fca755db74b633b4f8c61bf246"}, {0x7, 0xd, "df054306951727ab94c484"}]}, @generic={0x44, 0xd, "84037f3d304a51a6dec5d5"}, @generic={0x88, 0xc, "02a98ce53873ca087812"}, @ssrr={0x89, 0x7, 0xdb, [@multicast2]}, @rr={0x7, 0x17, 0xf4, [@dev={0xac, 0x14, 0x14, 0x1d}, @loopback, @multicast1, @local, @multicast2]}, @ssrr={0x89, 0x7, 0x91, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x1, 0x0}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xd, 0x6, 0x2c6, 0x2, 0x500, r7, 0xffffff2b, '\x00', r9, r6, 0x4, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @exit], &(0x7f0000000800)='syzkaller\x00', 0x7fff, 0xf1, &(0x7f0000000940)=""/241, 0x1f00, 0x1, '\x00', r9, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x8, 0x8b}, 0x10, r10, r8, 0x8, &(0x7f0000000b00)=[r7, r11, r7, r7], &(0x7f0000000b40)=[{0x3, 0x2, 0xb, 0xc}, {0x4, 0x1, 0x9, 0x7}, {0x2, 0x4, 0xe, 0x3}, {0x3, 0x4, 0x8, 0x9}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x3, 0xb, 0x6}, {0x1, 0x3, 0xe, 0xb}, {0x0, 0x5, 0xe, 0x8}], 0x10, 0x9}, 0x94) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="ede4b8d9cab815b1520b102e02f91e11679fb94748e9d71c79b7fa6dc346b33e2230333873bb084b3431a4f6d22b99c820dc3eabaa007d203165bf5b0e607858d8680db1fd289d0a251a3300e088379f5fe4c8b8e0181526bcabb101091b04d8c86e22cf32930dec6342b727bbb1b5b238c0151359b260609b0018a5129ea6a2ac2d13e27d14ee91245da79756396a13118c84e90c79e4e6919bc0a34d11b83c49712d864f6d58317bad3a190ad91ee3428d4a47ce9d9c39cdb06e557e1879c6", 0xc0}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xf0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.73190159s ago: executing program 2 (id=673): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010029bd7000fbdbdf000008000100e0000001b11739f94b48b73ce3febd64f057fc1ec79ff3af921becab2f4f8858d3788d5f7f6e6e2b6bb8cacef8d3ea8a82e7d46bb50f0ef2174dbcf8dec79ea4b780c5bf010a19f49ac28c15e2c52556f1cb00"], 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x4100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x7, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0xfffffffd, 0x0, 0xffffffff}, 0x0, 0x4, 0x4, 0x9, 0x80000001, 0x8, 0x4, 0xfc, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x4100000000000000) 1.691481593s ago: executing program 4 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="04fa9af1890c8afc8502b93c2b90cb27debd5b31598fc8b5f59ff202eb6f7754cf43851001191bbff2796c9284991573f6969b4e4c28c259b3ec272342ca961e5a5e540570b7d7431b44c8631c39bd965bd498b2587d1b41b5c97515165bb76d69a69b22c589f88056c5aa6bc6a3b6b1a8c0aafcccf613001cb16ac6e5d70ba90671585c545518cf7068ce5cb89b61758be246d4e0e29e5fb650239a42e0596f87f110201a", @ANYRESOCT=r4], 0x0, 0xd, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x1, 0x4, {{0xc, 0x4, 0x0, 0x24, 0x30, 0x64, 0x0, 0x1, 0x0, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "c97dbdc5"}, @lsrr={0x83, 0x7, 0x93, [@remote]}, @ra={0x94, 0x4}, @end]}}}}}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r6}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt(r5, 0x4, 0x6, &(0x7f0000000780)="2d0ca41a8f8e4b490fb6423c7731ffec941180bb68c652573d9d947159f26040e4704221df75c0b169f4a577e25435c5f9bf62cc9d23e8d79846fd21527e25181f01044d455eebec4951352da6698b730bb11ad03f921e9011656c808bbb97a610d47caf7b36781ca9dbaa58c05b4ff70848b465fbe4db7da18475226d52545ddd261199992fb9269e3accb1c1282cfb2bf6711c962dbb3cfb61ef387227de570647773f8000fe971b22a222909818c1b3be0584ef55e0", 0xb7) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x3f8, 0x200, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$inet(0x2, 0x800, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x10, 0x0, 0x4, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.635170998s ago: executing program 2 (id=676): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={r1}) 1.566445703s ago: executing program 2 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1], 0x2ac}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) time(&(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x401, 0xe) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) socket$inet_mptcp(0x2, 0x1, 0x106) 1.435586324s ago: executing program 0 (id=678): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000003e00)={0x2, 0xee47, @multicast1}, 0x10) 1.268854978s ago: executing program 0 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="40000000002200002c0012800c0001006d6163766c616e001c00028006000200a4"], 0x58}}, 0x0) (fail_nth: 4) 1.210431932s ago: executing program 1 (id=680): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=r2, @ANYRES32=r3], 0x58}}, 0x0) 972.037962ms ago: executing program 0 (id=681): pivot_root(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000006c0)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") 963.517452ms ago: executing program 3 (id=682): r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 894.832838ms ago: executing program 1 (id=683): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) 894.071918ms ago: executing program 1 (id=684): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0xc, 0x0, 0x0, 0xc, 0x5}, @fwd={0x2}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f00000003c0)=""/141, 0x36, 0x8d, 0x1, 0x6, 0x10000, @value=r5}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x4, 0x1, 0x8400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', r4, 0x40, 0x8, 0xb1, 0x5, {{0x1e, 0x4, 0x1, 0x17, 0x78, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x25, 0x0, [{0x0, 0x12, "f9a140fca755db74b633b4f8c61bf246"}, {0x7, 0xd, "df054306951727ab94c484"}]}, @generic={0x44, 0xd, "84037f3d304a51a6dec5d5"}, @generic={0x88, 0xc, "02a98ce53873ca087812"}, @ssrr={0x89, 0x7, 0xdb, [@multicast2]}, @rr={0x7, 0x17, 0xf4, [@dev={0xac, 0x14, 0x14, 0x1d}, @loopback, @multicast1, @local, @multicast2]}, @ssrr={0x89, 0x7, 0x91, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x1, 0x0}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xd, 0x6, 0x2c6, 0x2, 0x500, r7, 0xffffff2b, '\x00', r9, r6, 0x4, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @exit], &(0x7f0000000800)='syzkaller\x00', 0x7fff, 0xf1, &(0x7f0000000940)=""/241, 0x1f00, 0x1, '\x00', r9, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x8, 0x8b}, 0x10, r10, r8, 0x8, &(0x7f0000000b00)=[r7, r11, r7, r7], &(0x7f0000000b40)=[{0x3, 0x2, 0xb, 0xc}, {0x4, 0x1, 0x9, 0x7}, {0x2, 0x4, 0xe, 0x3}, {0x3, 0x4, 0x8, 0x9}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x3, 0xb, 0x6}, {0x1, 0x3, 0xe, 0xb}, {0x0, 0x5, 0xe, 0x8}], 0x10, 0x9}, 0x94) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="ede4b8d9cab815b1520b102e02f91e11679fb94748e9d71c79b7fa6dc346b33e2230333873bb084b3431a4f6d22b99c820dc3eabaa007d203165bf5b0e607858d8680db1fd289d0a251a3300e088379f5fe4c8b8e0181526bcabb101091b04d8c86e22cf32930dec6342b727bbb1b5b238c0151359b260609b0018a5129ea6a2ac2d13e27d14ee91245da79756396a13118c84e90c79e4e6919bc0a34d11b83c49712d864f6d58317bad3a190ad91ee3428d4a47ce9d9c39cdb06e557e1879c6", 0xc0}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xf0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 882.539659ms ago: executing program 0 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 879.988409ms ago: executing program 4 (id=686): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) pwritev2(r0, &(0x7f00000007c0)=[{&(0x7f0000000240)="f1f045af8c24fcf63491570c2b0e8a9c68ce7b97bf446b6bfadb844259d36545ca33d47b8997f6f43097b87a1bf1fc20ce443f2f8d7c88d4748ebc83a3a51b5db1843c1949", 0x45}, {&(0x7f0000000c80)="080646d0e2834e267e3edb97f4562cb1501b4e2f304e473d1de599f21228bafc6221546996660d0b7f693e34e3fb5901fa9a107b0c9481e1008b7b998730ddd52388696a029ee5c1b73c34f544b0e6245861", 0x52}], 0x2, 0x7c00, 0x0, 0x3) syz_clone3(&(0x7f00000008c0)={0x222025080, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), {0x7}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f0000000800)=""/180, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r0}}, 0x58) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) (async) pwritev2(r0, &(0x7f00000007c0)=[{&(0x7f0000000240)="f1f045af8c24fcf63491570c2b0e8a9c68ce7b97bf446b6bfadb844259d36545ca33d47b8997f6f43097b87a1bf1fc20ce443f2f8d7c88d4748ebc83a3a51b5db1843c1949", 0x45}, {&(0x7f0000000c80)="080646d0e2834e267e3edb97f4562cb1501b4e2f304e473d1de599f21228bafc6221546996660d0b7f693e34e3fb5901fa9a107b0c9481e1008b7b998730ddd52388696a029ee5c1b73c34f544b0e6245861", 0x52}], 0x2, 0x7c00, 0x0, 0x3) (async) syz_clone3(&(0x7f00000008c0)={0x222025080, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), {0x7}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f0000000800)=""/180, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r0}}, 0x58) (async) 856.133051ms ago: executing program 0 (id=687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000400)='block_rq_remap\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)={@local, @private}, &(0x7f0000000180)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000440)='ext4_ext_load_extent\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x1b) socket$igmp6(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000009060102fc00000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e000000205000700ff000000060004404e2200000500030006"], 0x50}, 0x1, 0x0, 0x0, 0x10040003}, 0x8880) unshare(0x2040400) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15", 0x2}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000100000022abd70000000000000000000", @ANYRESHEX=r8, @ANYBLOB="00000000000000001800128c08000100767469000c00028008000500ac1414aafce00300b9522462fbdbceb093654ed41542e8c4d5acef1ae5cc3eba11c22cc77a17ada2761d1203d680167e5c401de2f99159d945befe6a794569fde372142a33173d625f7f2f58fe6d2c6fb908949f5da5f1b35ee2b3016d674a2fc71a62632ead95737a1b97a851da4c721b84e3464d0c9700bc3e9007e6456ad4736145ea8b54ffd56de3165c2e3ce27daaa080455e369bbbe128c1dc5d92f79bbf0a4b6d2fd985a18415bab7e8cd3e62bb4a5b8de0b3f9f1b10fc3a1e0d1d8974f30ae46c73eac227b1e34c8b371907ffad9f7a2", @ANYRES32=0x0, @ANYRES16=r1], 0x40}}, 0x0) 822.410974ms ago: executing program 4 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semget(0x0, 0x2, 0x8b) 821.864174ms ago: executing program 4 (id=689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (fail_nth: 1) 568.804974ms ago: executing program 3 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = open(0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0) 494.39793ms ago: executing program 2 (id=691): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000009b84cd60a1b2f16fb5"], 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_read_part_table(0x637, &(0x7f0000000000)="$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") r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x50b, 0x9, 0xc, 0x2}}, 0x120) splice(r3, 0x0, r5, 0x0, 0x120, 0x0) r6 = fsmount(r0, 0x200000000000000, 0x0) openat$cgroup(r6, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0607e8b73267ce735d70aa19950d960ea6b7c8bf0c3ad0056b627dba2aba2ec9b1dc1440193959451c4a3f61b8202e436f115b4b9730c39ba66e58526a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) iopl(0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r7, &(0x7f0000000680)="b9171a1f58faf31ce7be3d94b6df3e922d2f110e68aa7d231996f9c2189436b8e1426fe7667bcbb18b92203795af5a2419d1f8992b866dacfa1f222fbf", &(0x7f0000000740)=""/48}, 0x20) signalfd(r6, &(0x7f00000000c0)={[0x4]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 481.658311ms ago: executing program 4 (id=692): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0xfe59) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r5, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 361.658661ms ago: executing program 1 (id=693): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x40, &(0x7f0000000d40)={[{@auto_da_alloc}, {@nodioread_nolock}, {@nobarrier}, {@sysvgroups}, {@jqfmt_vfsold}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000a00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) pipe2(0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) read(r3, &(0x7f0000000800)=""/201, 0xc9) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x891) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0xc9, 0x1) 354.029161ms ago: executing program 4 (id=694): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000a40)={0x31a254700, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0)=0x0, &(0x7f0000000340), {0x38}, &(0x7f0000000ac0)=""/37, 0x25, &(0x7f0000001c40)=""/192, &(0x7f0000000b00)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000bc0)={{r1}, "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"}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000001c00)=ANY=[@ANYRESDEC], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000080000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0xc, &(0x7f0000001bc0)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c000180080001006475700008000340000001"], 0xc8}}, 0x20050800) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @local, 0x3}, 0x1c) getsockopt$inet6_tcp_int(r10, 0x6, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0xfffffffffffffffd, 0x1, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0xe, r8, 0x0) 274.365538ms ago: executing program 2 (id=695): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a000000040000009c0000000b", @ANYBLOB="183f1da559c5c418ae40784854c40602436f34bafec533fed93dc06dca582f41dd4133f242eb3e6ad5edc76d2e602792826d527918739c1cab3d1592f1bcb4a1f7831b0324bf22f4513e852c637a9fcc7c39283ada61d3192110f5de959543e5b0f92008a7f6c6947d2c7c1d0b8b47a854298cdfe09fe86387044b54388a6a8708b72feaf0de6c3a59b3d8915087a8b93aa380e76c32f58899b93be21c9a63a080374658148114806cdd595cad53c3bb2b08cc9ec33c9b21b1c31eb9dfc39013d84c3f24aeca3ce39614", @ANYRES16=r0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x1, &(0x7f0000000340)=0x0) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x58a, r1, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0xb1, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000008000000010000008000910e81f836a975449e1d7e9efd447a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x64000600) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7cf52f51a9e898ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, 0x0, 0x2000, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x3d2c}, 0x8) kernel console output (not intermixed with test programs): 1.023796][ T4758] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.363: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.038729][ T4757] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.363: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.054695][ T4758] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.363: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.093374][ T4780] loop4: detected capacity change from 0 to 1024 [ 61.110304][ T4780] EXT4-fs: Ignoring removed orlov option [ 61.147499][ T4780] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 61.469241][ T4784] FAULT_INJECTION: forcing a failure. [ 61.469241][ T4784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.482783][ T4784] CPU: 1 UID: 0 PID: 4784 Comm: syz.1.372 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 61.482811][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.482873][ T4784] Call Trace: [ 61.482879][ T4784] [ 61.482888][ T4784] __dump_stack+0x1d/0x30 [ 61.482909][ T4784] dump_stack_lvl+0xe8/0x140 [ 61.482976][ T4784] dump_stack+0x15/0x1b [ 61.482990][ T4784] should_fail_ex+0x265/0x280 [ 61.483076][ T4784] should_fail+0xb/0x20 [ 61.483094][ T4784] should_fail_usercopy+0x1a/0x20 [ 61.483114][ T4784] _copy_from_iter+0xcf/0xe40 [ 61.483135][ T4784] ? alloc_pages_mpol+0x201/0x250 [ 61.483238][ T4784] copy_page_from_iter+0x178/0x2a0 [ 61.483264][ T4784] tun_get_user+0x679/0x2680 [ 61.483293][ T4784] ? ref_tracker_alloc+0x1f2/0x2f0 [ 61.483314][ T4784] tun_chr_write_iter+0x15e/0x210 [ 61.483457][ T4784] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 61.483485][ T4784] vfs_write+0x527/0x960 [ 61.483509][ T4784] ksys_write+0xda/0x1a0 [ 61.483603][ T4784] __x64_sys_write+0x40/0x50 [ 61.483692][ T4784] x64_sys_call+0x27fe/0x2ff0 [ 61.483713][ T4784] do_syscall_64+0xd2/0x200 [ 61.483736][ T4784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.483755][ T4784] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.483857][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.483878][ T4784] RIP: 0033:0x7fb3f4fad69f [ 61.483894][ T4784] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 61.483911][ T4784] RSP: 002b:00007fb3f3a0f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 61.483931][ T4784] RAX: ffffffffffffffda RBX: 00007fb3f51d5fa0 RCX: 00007fb3f4fad69f [ 61.483945][ T4784] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 61.484021][ T4784] RBP: 00007fb3f3a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.484034][ T4784] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 61.484047][ T4784] R13: 00007fb3f51d6038 R14: 00007fb3f51d5fa0 R15: 00007ffc628db548 [ 61.484067][ T4784] [ 61.527964][ T29] audit: type=1326 audit(1755131813.848:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 61.719477][ T29] audit: type=1326 audit(1755131813.848:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 61.756543][ T29] audit: type=1326 audit(1755131813.928:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 61.779818][ T29] audit: type=1326 audit(1755131813.928:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 61.803303][ T29] audit: type=1326 audit(1755131813.928:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 61.837367][ T4780] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.370: bg 0: block 88: padding at end of block bitmap is not set [ 62.020359][ T4804] loop1: detected capacity change from 0 to 512 [ 62.044738][ T4804] EXT4-fs: Ignoring removed nobh option [ 62.233413][ T4804] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.376: corrupted inode contents [ 62.285260][ T4804] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.376: mark_inode_dirty error [ 62.329679][ T4816] loop2: detected capacity change from 0 to 1024 [ 62.346601][ T4804] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.376: corrupted inode contents [ 62.379519][ T4804] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.376: mark_inode_dirty error [ 62.391016][ T4816] EXT4-fs: Ignoring removed orlov option [ 62.418207][ T4804] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.376: Failed to acquire dquot type 0 [ 62.486894][ T4804] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.376: corrupted inode contents [ 62.537811][ T4821] loop3: detected capacity change from 0 to 1024 [ 62.560933][ T4821] EXT4-fs: Ignoring removed orlov option [ 62.579273][ T4816] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.580717][ T4804] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.376: mark_inode_dirty error [ 62.609598][ T4804] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.376: corrupted inode contents [ 62.622891][ T4804] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.376: mark_inode_dirty error [ 62.634605][ T4804] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.376: corrupted inode contents [ 62.653995][ T4821] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.685198][ T4804] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 62.775836][ T4804] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.376: corrupted inode contents [ 62.792786][ T4821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.382: bg 0: block 88: padding at end of block bitmap is not set [ 62.817619][ T4804] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.376: mark_inode_dirty error [ 62.878823][ T4804] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 62.909081][ T4804] EXT4-fs (loop1): 1 truncate cleaned up [ 62.916873][ T4804] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.940021][ T4831] loop4: detected capacity change from 0 to 1024 [ 62.950146][ T4831] ext3: Unknown parameter 'audit' [ 62.953709][ T4834] loop3: detected capacity change from 0 to 1024 [ 63.002376][ T4834] EXT4-fs: Ignoring removed orlov option [ 63.017767][ T4816] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.380: bg 0: block 88: padding at end of block bitmap is not set [ 63.036383][ T4834] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 63.093386][ T4834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.384: bg 0: block 88: padding at end of block bitmap is not set [ 63.298822][ T4849] loop0: detected capacity change from 0 to 1024 [ 63.342248][ T4851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 63.359533][ T4851] loop1: detected capacity change from 0 to 512 [ 63.377862][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 63.717254][ T4813] syz.2.380 (4813) used greatest stack depth: 6144 bytes left [ 63.735410][ T4849] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.756203][ T4851] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.764322][ T4858] loop4: detected capacity change from 0 to 1024 [ 63.769510][ T4851] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.774002][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 13) [ 63.792125][ T4851] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.794693][ T4858] EXT4-fs: Ignoring removed orlov option [ 63.812592][ T4864] netlink: 96 bytes leftover after parsing attributes in process `syz.2.393'. [ 63.813556][ T4849] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 63.834053][ T4849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.834053][ T4849] [ 63.844401][ T4851] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 63.852548][ T4851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.389: bg 0: block 40: padding at end of block bitmap is not set [ 63.866871][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.881080][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.896164][ T4851] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.896385][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.922596][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.929990][ T4851] EXT4-fs (loop1): 1 truncate cleaned up [ 63.943724][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.957986][ T4866] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.982247][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.008962][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.023885][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.430262][ T4891] hub 9-0:1.0: USB hub found [ 64.435025][ T4891] hub 9-0:1.0: 8 ports detected [ 64.488181][ T4882] SELinux: failed to load policy [ 64.506031][ T4889] can0: slcan on ttyS3. [ 65.071555][ T4905] hub 9-0:1.0: USB hub found [ 65.076282][ T4905] hub 9-0:1.0: 8 ports detected [ 65.084990][ T4887] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 65.120496][ T4895] can0 (unregistered): slcan off ttyS3. [ 65.214238][ T4889] can0: slcan on ttyS3. [ 65.248133][ T4915] loop2: detected capacity change from 0 to 1024 [ 65.277104][ T4914] loop1: detected capacity change from 0 to 512 [ 65.285065][ T4915] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.288268][ T4914] EXT4-fs: Ignoring removed nobh option [ 65.327841][ T4915] 9pnet_fd: Insufficient options for proto=fd [ 65.371533][ T4914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.400: corrupted inode contents [ 65.385867][ T4915] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 13) [ 65.412887][ T4915] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 65.425262][ T4915] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.425262][ T4915] [ 65.459083][ T4914] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.400: mark_inode_dirty error [ 65.478266][ T4942] loop0: detected capacity change from 0 to 1024 [ 65.486181][ T4942] EXT4-fs: Ignoring removed nobh option [ 65.491785][ T4942] EXT4-fs: Ignoring removed nobh option [ 65.498154][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.512838][ T4942] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 65.526898][ T4914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.400: corrupted inode contents [ 65.527715][ T4942] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.407: inode #4294967295: comm syz.0.407: iget: illegal inode # [ 65.554952][ T4942] EXT4-fs (loop0): no journal found [ 65.560269][ T4942] EXT4-fs (loop0): can't get journal size [ 65.566478][ T4914] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.400: mark_inode_dirty error [ 65.569268][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.594212][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.608357][ T4914] __quota_error: 121 callbacks suppressed [ 65.608370][ T4914] Quota error (device loop1): write_blk: dquota write failed [ 65.612625][ T4942] EXT4-fs (loop0): failed to initialize system zone (-22) [ 65.623823][ T4914] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.629041][ T4857] can0 (unregistered): slcan off ttyS3. [ 65.640877][ T4914] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.400: Failed to acquire dquot type 0 [ 65.655624][ T4942] EXT4-fs (loop0): mount failed [ 65.661097][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.675256][ T4914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.400: corrupted inode contents [ 65.689471][ T4914] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.400: mark_inode_dirty error [ 65.702367][ T4914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.400: corrupted inode contents [ 65.714314][ T4961] netlink: 'syz.3.411': attribute type 13 has an invalid length. [ 65.714805][ T4914] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.400: mark_inode_dirty error [ 65.722082][ T4961] netlink: 'syz.3.411': attribute type 17 has an invalid length. [ 65.734235][ T4914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.400: corrupted inode contents [ 65.750175][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.767105][ T4914] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 65.780135][ T4961] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 65.796281][ T4914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.400: corrupted inode contents [ 65.808314][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.809077][ T3306] EXT4-fs unmount: 108 callbacks suppressed [ 65.809090][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.838006][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.841285][ T4914] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.400: mark_inode_dirty error [ 65.852287][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.863769][ T29] audit: type=1326 audit(1755131818.188:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 65.900242][ T29] audit: type=1326 audit(1755131818.188:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 65.901538][ T4933] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 65.949488][ T29] audit: type=1326 audit(1755131818.248:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 65.972814][ T29] audit: type=1326 audit(1755131818.248:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 65.996250][ T29] audit: type=1326 audit(1755131818.248:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 65.996692][ T4914] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 66.019623][ T29] audit: type=1326 audit(1755131818.248:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 66.051784][ T29] audit: type=1326 audit(1755131818.248:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 66.075086][ T29] audit: type=1326 audit(1755131818.248:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 66.116348][ T4914] EXT4-fs (loop1): 1 truncate cleaned up [ 66.125184][ T4966] wg2: entered promiscuous mode [ 66.125202][ T4966] wg2: entered allmulticast mode [ 66.135697][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.135758][ T4914] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.178924][ T4964] loop3: detected capacity change from 0 to 1024 [ 66.185749][ T4964] EXT4-fs: Ignoring removed bh option [ 66.195544][ T4964] EXT4-fs (loop3): Invalid log block size: 7733248 [ 66.202108][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.332203][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.370191][ T4981] netlink: 96 bytes leftover after parsing attributes in process `syz.4.419'. [ 66.482768][ T4994] hub 9-0:1.0: USB hub found [ 66.487643][ T4994] hub 9-0:1.0: 8 ports detected [ 66.670537][ T4992] loop1: detected capacity change from 0 to 512 [ 66.687885][ T4995] loop4: detected capacity change from 0 to 1024 [ 66.706334][ T4992] EXT4-fs: Ignoring removed nobh option [ 66.722659][ T4995] ext3: Unknown parameter 'audit' [ 66.797738][ T4992] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.421: corrupted inode contents [ 66.815898][ T4992] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.421: mark_inode_dirty error [ 66.841730][ T4992] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.421: corrupted inode contents [ 66.854871][ T4992] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.421: mark_inode_dirty error [ 66.868442][ T4992] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.421: Failed to acquire dquot type 0 [ 66.882109][ T4992] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.421: corrupted inode contents [ 66.895192][ T4992] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.421: mark_inode_dirty error [ 66.907931][ T4992] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.421: corrupted inode contents [ 66.920889][ T4992] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.421: mark_inode_dirty error [ 66.933867][ T4992] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.421: corrupted inode contents [ 66.958806][ T4992] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 66.972477][ T4992] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.421: corrupted inode contents [ 66.987479][ T4992] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.421: mark_inode_dirty error [ 67.123644][ T4992] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 67.141464][ T5011] netlink: 'syz.2.424': attribute type 13 has an invalid length. [ 67.149260][ T5011] netlink: 'syz.2.424': attribute type 17 has an invalid length. [ 67.164859][ T4992] EXT4-fs (loop1): 1 truncate cleaned up [ 67.185534][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.241954][ T4992] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.289151][ T5011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.457890][ T5015] loop4: detected capacity change from 0 to 1024 [ 67.560781][ T5015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.578622][ T5025] FAULT_INJECTION: forcing a failure. [ 67.578622][ T5025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.582708][ T5024] loop2: detected capacity change from 0 to 1024 [ 67.591719][ T5025] CPU: 0 UID: 0 PID: 5025 Comm: syz.0.426 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 67.591785][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.591797][ T5025] Call Trace: [ 67.591879][ T5025] [ 67.591886][ T5025] __dump_stack+0x1d/0x30 [ 67.591957][ T5025] dump_stack_lvl+0xe8/0x140 [ 67.591975][ T5025] dump_stack+0x15/0x1b [ 67.591991][ T5025] should_fail_ex+0x265/0x280 [ 67.592083][ T5025] should_fail+0xb/0x20 [ 67.592099][ T5025] should_fail_usercopy+0x1a/0x20 [ 67.592120][ T5025] _copy_from_user+0x1c/0xb0 [ 67.592159][ T5025] ___sys_sendmsg+0xc1/0x1d0 [ 67.592187][ T5025] __x64_sys_sendmsg+0xd4/0x160 [ 67.592260][ T5025] x64_sys_call+0x191e/0x2ff0 [ 67.592306][ T5025] do_syscall_64+0xd2/0x200 [ 67.592330][ T5025] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.592352][ T5025] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.592375][ T5025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.592475][ T5025] RIP: 0033:0x7ff9d89eebe9 [ 67.592489][ T5025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.592506][ T5025] RSP: 002b:00007ff9d7457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.592526][ T5025] RAX: ffffffffffffffda RBX: 00007ff9d8c15fa0 RCX: 00007ff9d89eebe9 [ 67.592538][ T5025] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 67.592550][ T5025] RBP: 00007ff9d7457090 R08: 0000000000000000 R09: 0000000000000000 [ 67.592584][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.592596][ T5025] R13: 00007ff9d8c16038 R14: 00007ff9d8c15fa0 R15: 00007ffe093af778 [ 67.592612][ T5025] [ 67.616687][ T5015] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 67.787893][ T5015] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.807447][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.819653][ T5024] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.831703][ T5015] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 67.843892][ T5015] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.843892][ T5015] [ 67.853619][ T5015] EXT4-fs (loop4): Total free blocks count 0 [ 67.859656][ T5015] EXT4-fs (loop4): Free/Dirty block details [ 67.865597][ T5015] EXT4-fs (loop4): free_blocks=20480 [ 67.870952][ T5015] EXT4-fs (loop4): dirty_blocks=16 [ 67.876063][ T5015] EXT4-fs (loop4): Block reservation details [ 67.882075][ T5015] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 67.902029][ T5024] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 13) [ 67.926489][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.941707][ T5039] loop0: detected capacity change from 0 to 1024 [ 67.952930][ T5024] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 67.964105][ T5039] EXT4-fs: Ignoring removed orlov option [ 67.965404][ T5024] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.965404][ T5024] [ 67.992725][ T5040] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.028035][ T5039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.049685][ T5022] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.064977][ T5022] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.079308][ T5022] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.094780][ T5024] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.108823][ T5039] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 68.117175][ T5024] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.131517][ T5051] loop3: detected capacity change from 0 to 1024 [ 68.152683][ T5040] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.167269][ T5051] EXT4-fs: Ignoring removed oldalloc option [ 68.174445][ T5051] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 68.225093][ T5022] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.251865][ T5022] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.271373][ T5051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.287932][ T5052] loop1: detected capacity change from 0 to 1024 [ 68.295899][ T5052] ext3: Unknown parameter 'audit' [ 68.403684][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.449752][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.487240][ T5060] loop2: detected capacity change from 0 to 1024 [ 68.500794][ T5060] EXT4-fs: Ignoring removed oldalloc option [ 68.521829][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.532685][ T5060] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 68.573661][ T5060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.776780][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.947978][ T5085] loop1: detected capacity change from 0 to 512 [ 68.984218][ T5085] EXT4-fs: Ignoring removed nobh option [ 69.041064][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.445: corrupted inode contents [ 69.072999][ T5083] loop4: detected capacity change from 0 to 512 [ 69.084825][ T5085] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.445: mark_inode_dirty error [ 69.088450][ T5083] EXT4-fs: Ignoring removed nobh option [ 69.126655][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.445: corrupted inode contents [ 69.145214][ T5085] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.445: mark_inode_dirty error [ 69.148298][ T5083] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.444: corrupted inode contents [ 69.156995][ T5085] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.445: Failed to acquire dquot type 0 [ 69.184305][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.193834][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.445: corrupted inode contents [ 69.196112][ T5083] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.444: mark_inode_dirty error [ 69.226356][ T5083] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.444: corrupted inode contents [ 69.239460][ T5083] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.444: mark_inode_dirty error [ 69.260880][ T5085] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.445: mark_inode_dirty error [ 69.261084][ T5083] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.444: Failed to acquire dquot type 0 [ 69.296803][ T5096] loop2: detected capacity change from 0 to 1024 [ 69.307849][ T5083] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 69.310404][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.445: corrupted inode contents [ 69.349998][ T5085] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.445: mark_inode_dirty error [ 69.362964][ T5096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.378107][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.445: corrupted inode contents [ 69.402831][ T5083] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.444: mark_inode_dirty error [ 69.402875][ T5085] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 69.403508][ T5096] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.435842][ T5083] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 69.436107][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.445: corrupted inode contents [ 69.448160][ T5085] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.445: mark_inode_dirty error [ 69.449081][ T5085] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 69.449500][ T5085] EXT4-fs (loop1): 1 truncate cleaned up [ 69.449881][ T5085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.449983][ T5085] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.467583][ T5096] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 13) [ 69.492921][ T5083] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.444: mark_inode_dirty error [ 69.506888][ T5096] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 69.552654][ T5096] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.552654][ T5096] [ 69.563156][ T5108] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.573016][ T5083] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 69.588349][ T5108] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.606215][ T5108] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.619821][ T5083] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 69.633454][ T5096] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.635182][ T5083] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.444: corrupted inode contents [ 69.648934][ T5095] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.674616][ T5108] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.697363][ T5083] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.444: mark_inode_dirty error [ 69.708766][ T5095] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.728259][ T5083] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 69.745721][ T5117] loop3: detected capacity change from 0 to 1024 [ 69.752868][ T5117] EXT4-fs: Ignoring removed orlov option [ 69.758967][ T5095] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.776710][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.776713][ T5083] EXT4-fs (loop4): 1 truncate cleaned up [ 69.800086][ T5096] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.449: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.847574][ T5083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.905314][ T5117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.918856][ T5118] loop0: detected capacity change from 0 to 1024 [ 69.990999][ T5083] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.058295][ T5118] ext3: Unknown parameter 'audit' [ 70.064043][ T5117] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 70.101490][ T5131] loop1: detected capacity change from 0 to 1024 [ 70.119211][ T5131] EXT4-fs: Ignoring removed orlov option [ 70.137625][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.154289][ T5131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.216751][ T5131] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 70.236753][ T5139] loop2: detected capacity change from 0 to 512 [ 70.260486][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.273927][ T5139] EXT4-fs: Ignoring removed nobh option [ 70.307579][ T5117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.454: bg 0: block 88: padding at end of block bitmap is not set [ 70.344730][ T5139] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.460: corrupted inode contents [ 70.360651][ T5139] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.460: mark_inode_dirty error [ 70.375757][ T5139] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.460: corrupted inode contents [ 70.387786][ T5139] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.460: mark_inode_dirty error [ 70.399369][ T5139] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.460: Failed to acquire dquot type 0 [ 70.411032][ T5139] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.460: corrupted inode contents [ 70.423091][ T5139] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.460: mark_inode_dirty error [ 70.444774][ T5139] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.460: corrupted inode contents [ 70.460164][ T5139] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.460: mark_inode_dirty error [ 70.473118][ T5139] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.460: corrupted inode contents [ 70.491353][ T5139] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 70.501199][ T5139] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.460: corrupted inode contents [ 70.513532][ T5139] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.460: mark_inode_dirty error [ 70.526485][ T5139] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 70.535781][ T5139] EXT4-fs (loop2): 1 truncate cleaned up [ 70.542416][ T5139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.555346][ T5139] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.672611][ T5152] netlink: 96 bytes leftover after parsing attributes in process `syz.0.462'. [ 70.688795][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 70.688809][ T29] audit: type=1326 audit(1755131823.008:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.801363][ T29] audit: type=1326 audit(1755131823.038:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.825336][ T29] audit: type=1326 audit(1755131823.038:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.848666][ T29] audit: type=1326 audit(1755131823.048:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.871948][ T29] audit: type=1326 audit(1755131823.048:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.895317][ T29] audit: type=1326 audit(1755131823.048:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.918756][ T29] audit: type=1326 audit(1755131823.048:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.942061][ T29] audit: type=1326 audit(1755131823.118:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.965594][ T29] audit: type=1326 audit(1755131823.118:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 70.990922][ T29] audit: type=1326 audit(1755131823.238:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 71.017173][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.029037][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.055328][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.101398][ T5168] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 71.127608][ T5168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.185931][ T5175] loop3: detected capacity change from 0 to 1024 [ 71.193989][ T5175] EXT4-fs: Ignoring removed orlov option [ 71.199698][ T5175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.209389][ T5168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.236783][ T5178] loop0: detected capacity change from 0 to 1024 [ 71.248362][ T5178] EXT4-fs: Ignoring removed oldalloc option [ 71.255389][ T5178] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 71.265990][ T5175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.292072][ T5178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.307574][ T5168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.328165][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.339989][ T5187] loop4: detected capacity change from 0 to 512 [ 71.355800][ T5187] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.366737][ T5168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.377409][ T5187] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.378653][ T5191] loop0: detected capacity change from 0 to 1024 [ 71.390305][ T5187] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.392838][ T5191] EXT4-fs: Ignoring removed orlov option [ 71.405187][ T5187] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 71.418682][ T5187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.471: bg 0: block 40: padding at end of block bitmap is not set [ 71.425416][ T5191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.432996][ T5187] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.455458][ T5187] EXT4-fs (loop4): 1 truncate cleaned up [ 71.462798][ T5187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.496096][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.511156][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.520071][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.528662][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.537842][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.584218][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.601630][ T5196] can0: slcan on ttyS3. [ 71.660236][ T5196] can0 (unregistered): slcan off ttyS3. [ 71.668217][ T5201] can0: slcan on ttyS3. [ 71.698257][ T5203] loop3: detected capacity change from 0 to 1024 [ 71.729012][ T5203] EXT4-fs: Ignoring removed orlov option [ 71.800825][ T5203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.840034][ T5220] loop4: detected capacity change from 0 to 512 [ 71.865921][ T5220] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.878942][ T5220] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.886077][ T5220] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.903973][ T5220] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 71.910864][ T5190] can0 (unregistered): slcan off ttyS3. [ 71.962235][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.990715][ T5220] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.477: bg 0: block 40: padding at end of block bitmap is not set [ 72.004923][ T5203] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 72.025497][ T5234] loop2: detected capacity change from 0 to 512 [ 72.032526][ T5234] EXT4-fs: Ignoring removed nobh option [ 72.051430][ T5234] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.480: corrupted inode contents [ 72.068904][ T5234] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.480: mark_inode_dirty error [ 72.087145][ T5220] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 72.105125][ T5234] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.480: corrupted inode contents [ 72.126462][ T5220] EXT4-fs (loop4): 1 truncate cleaned up [ 72.143172][ T5220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.160765][ T5234] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.480: mark_inode_dirty error [ 72.162336][ T5246] can0: slcan on ttyS3. [ 72.189718][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.247967][ T5234] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.480: Failed to acquire dquot type 0 [ 72.260758][ T5246] can0 (unregistered): slcan off ttyS3. [ 72.273387][ T5246] capability: warning: `syz.0.483' uses 32-bit capabilities (legacy support in use) [ 72.282731][ T5234] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.480: corrupted inode contents [ 72.297445][ T5203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.474: bg 0: block 88: padding at end of block bitmap is not set [ 72.304291][ T5234] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.480: mark_inode_dirty error [ 72.323922][ T5254] loop4: detected capacity change from 0 to 512 [ 72.331194][ T5234] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.480: corrupted inode contents [ 72.332937][ T5254] EXT4-fs: Ignoring removed nobh option [ 72.372054][ T5234] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.480: mark_inode_dirty error [ 72.389096][ T5234] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.480: corrupted inode contents [ 72.403436][ T5234] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 72.413164][ T5234] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.480: corrupted inode contents [ 72.425364][ T5234] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.480: mark_inode_dirty error [ 72.426583][ T5254] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.485: corrupted inode contents [ 72.449486][ T5234] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 72.463871][ T5234] EXT4-fs (loop2): 1 truncate cleaned up [ 72.473666][ T5254] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.485: mark_inode_dirty error [ 72.488457][ T5234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.503339][ T5254] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.485: corrupted inode contents [ 72.515403][ T5234] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.527951][ T5254] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.485: mark_inode_dirty error [ 72.581024][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.591519][ T5254] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.485: Failed to acquire dquot type 0 [ 72.608139][ T5254] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.485: corrupted inode contents [ 72.621913][ T5254] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.485: mark_inode_dirty error [ 72.646100][ T5254] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.485: corrupted inode contents [ 72.658280][ T5254] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.485: mark_inode_dirty error [ 72.671529][ T5254] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.485: corrupted inode contents [ 72.683499][ T5254] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 72.711139][ T5254] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.485: corrupted inode contents [ 72.726934][ T5254] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.485: mark_inode_dirty error [ 72.821476][ T5282] loop1: detected capacity change from 0 to 1024 [ 72.827133][ T5254] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 72.828264][ T5282] ext3: Unknown parameter 'audit' [ 72.837408][ T5254] EXT4-fs (loop4): 1 truncate cleaned up [ 72.852311][ T5254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.865752][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.865896][ T5254] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.985248][ T5289] loop2: detected capacity change from 0 to 1024 [ 73.003273][ T5289] EXT4-fs: Ignoring removed bh option [ 73.042843][ T5289] EXT4-fs (loop2): Invalid log block size: 7733248 [ 73.112604][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.503084][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 73.651514][ T5301] loop0: detected capacity change from 0 to 1024 [ 73.688201][ T5301] EXT4-fs: Ignoring removed orlov option [ 73.732468][ T5303] netlink: 'syz.1.497': attribute type 13 has an invalid length. [ 73.740252][ T5303] netlink: 'syz.1.497': attribute type 17 has an invalid length. [ 73.813815][ T5303] 0ªX¹¦À: left allmulticast mode [ 73.818787][ T5303] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 73.843920][ T5301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.884488][ T5309] loop2: detected capacity change from 0 to 1024 [ 73.891777][ T5309] EXT4-fs: inline encryption not supported [ 73.898949][ T5309] EXT4-fs: Ignoring removed bh option [ 73.904639][ T5309] ext3: Unknown parameter 'noacl' [ 73.930786][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.959195][ T5313] loop3: detected capacity change from 0 to 1024 [ 73.969194][ T5317] loop1: detected capacity change from 0 to 1024 [ 73.978024][ T5317] EXT4-fs: Ignoring removed bh option [ 74.001524][ T5313] EXT4-fs: Ignoring removed orlov option [ 74.031258][ T5317] EXT4-fs (loop1): Invalid log block size: 7733248 [ 74.048268][ T5313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.109283][ T5328] loop2: detected capacity change from 0 to 1024 [ 74.122561][ T5327] loop0: detected capacity change from 0 to 1024 [ 74.131932][ T5313] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 74.141165][ T5327] EXT4-fs: Ignoring removed orlov option [ 74.160812][ T5328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.196184][ T5327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.227285][ T5328] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.243001][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 13) [ 74.258336][ T5328] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 74.258612][ T5313] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.501: bg 0: block 88: padding at end of block bitmap is not set [ 74.270752][ T5328] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.270752][ T5328] [ 74.285933][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.305166][ T5327] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 74.317905][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.342846][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.377703][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.393304][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.402742][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.434827][ T5327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.502: bg 0: block 88: padding at end of block bitmap is not set [ 74.449213][ T5326] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.465593][ T5326] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.481204][ T5328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.495438][ T5338] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.507: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.987887][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.018608][ T5352] netlink: 'syz.3.511': attribute type 13 has an invalid length. [ 75.026485][ T5352] netlink: 'syz.3.511': attribute type 17 has an invalid length. [ 75.193172][ T5361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 75.202489][ T5352] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 75.219053][ T5356] netlink: 96 bytes leftover after parsing attributes in process `syz.2.510'. [ 75.263705][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.416294][ T5371] loop2: detected capacity change from 0 to 1024 [ 75.423118][ T5371] EXT4-fs: Ignoring removed orlov option [ 75.468719][ T5380] loop0: detected capacity change from 0 to 512 [ 75.470163][ T5371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.481130][ T5382] loop3: detected capacity change from 0 to 512 [ 75.488515][ T5380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.495164][ T5382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.511559][ T5371] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 75.513254][ T5382] EXT4-fs (loop3): 1 truncate cleaned up [ 75.525702][ T5382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.548509][ T5380] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.556469][ T5380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 75.567178][ T5380] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 75.576730][ T5380] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 75.582268][ T5371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.518: bg 0: block 88: padding at end of block bitmap is not set [ 75.586671][ T5380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.614871][ T5380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 75.633897][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.691235][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.765491][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.797480][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 75.797493][ T29] audit: type=1326 audit(1755131828.118:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.802281][ T5390] loop0: detected capacity change from 0 to 512 [ 75.803824][ T29] audit: type=1326 audit(1755131828.118:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.831405][ T5390] EXT4-fs: Ignoring removed nobh option [ 75.833299][ T29] audit: type=1326 audit(1755131828.118:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.885367][ T29] audit: type=1326 audit(1755131828.118:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.908884][ T29] audit: type=1326 audit(1755131828.118:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.932276][ T29] audit: type=1326 audit(1755131828.118:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.955651][ T29] audit: type=1326 audit(1755131828.118:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 75.979033][ T29] audit: type=1326 audit(1755131828.118:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 76.002324][ T29] audit: type=1326 audit(1755131828.118:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 76.008997][ T5399] netlink: 'syz.1.528': attribute type 13 has an invalid length. [ 76.025696][ T29] audit: type=1326 audit(1755131828.118:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d89eebe9 code=0x7ffc0000 [ 76.056913][ T5399] netlink: 'syz.1.528': attribute type 17 has an invalid length. [ 76.073505][ T5390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.524: corrupted inode contents [ 76.085670][ T5390] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.524: mark_inode_dirty error [ 76.097975][ T5390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.524: corrupted inode contents [ 76.109714][ T5399] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 76.125652][ T5390] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.524: mark_inode_dirty error [ 76.137956][ T5390] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.524: Failed to acquire dquot type 0 [ 76.165023][ T5390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.524: corrupted inode contents [ 76.179131][ T5390] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.524: mark_inode_dirty error [ 76.198534][ T5390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.524: corrupted inode contents [ 76.225454][ T5390] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.524: mark_inode_dirty error [ 76.257277][ T5390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.524: corrupted inode contents [ 76.272802][ T5415] loop2: detected capacity change from 0 to 512 [ 76.281768][ T5415] EXT4-fs: Ignoring removed nobh option [ 76.289164][ T5390] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 76.301767][ T5390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.524: corrupted inode contents [ 76.313829][ T5390] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.524: mark_inode_dirty error [ 76.326417][ T5390] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 76.416800][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 76.442873][ T5390] EXT4-fs (loop0): 1 truncate cleaned up [ 76.449880][ T5390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.192941][ T5415] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.533: corrupted inode contents [ 77.204339][ T5390] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.227644][ T5415] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.533: mark_inode_dirty error [ 77.248161][ T5415] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.533: corrupted inode contents [ 77.248742][ T5434] netlink: 96 bytes leftover after parsing attributes in process `syz.3.538'. [ 77.272010][ T5390] netlink: 88 bytes leftover after parsing attributes in process `syz.0.524'. [ 77.280977][ T5415] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.533: mark_inode_dirty error [ 77.340519][ T5442] netlink: 'syz.3.542': attribute type 13 has an invalid length. [ 77.348284][ T5442] netlink: 'syz.3.542': attribute type 17 has an invalid length. [ 77.348802][ T5415] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.533: Failed to acquire dquot type 0 [ 77.367562][ T5442] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 77.416709][ T5415] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.533: corrupted inode contents [ 77.438444][ T5415] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.533: mark_inode_dirty error [ 77.455361][ T5453] loop1: detected capacity change from 0 to 1024 [ 77.468157][ T5415] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.533: corrupted inode contents [ 77.492772][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.518822][ T5456] loop4: detected capacity change from 0 to 512 [ 77.521490][ T5415] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.533: mark_inode_dirty error [ 77.536975][ T5453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.537407][ T5415] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.533: corrupted inode contents [ 77.561358][ T5453] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.568177][ T5415] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 77.576828][ T5453] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 13) [ 77.594775][ T5415] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.533: corrupted inode contents [ 77.608334][ T5456] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.610899][ T5453] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 77.616489][ T5456] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.628602][ T5453] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.628602][ T5453] [ 77.638370][ T5415] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.533: mark_inode_dirty error [ 77.646681][ T5456] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.679124][ T5415] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 77.703991][ T5415] EXT4-fs (loop2): 1 truncate cleaned up [ 77.711114][ T5453] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.725533][ T5415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.738198][ T5456] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 77.759950][ T5415] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.769393][ T5456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.546: bg 0: block 40: padding at end of block bitmap is not set [ 77.785613][ T5453] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.839673][ T5456] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 77.850214][ T5467] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.880052][ T5452] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.894980][ T5456] EXT4-fs (loop4): 1 truncate cleaned up [ 77.931764][ T5456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.949034][ T5411] netlink: 88 bytes leftover after parsing attributes in process `syz.2.533'. [ 77.958650][ T5452] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.024247][ T5452] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.079045][ T5453] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.113041][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.141960][ T5467] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.171147][ T5453] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.547: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.178825][ T5463] Set syz1 is full, maxelem 65536 reached [ 78.268957][ T5476] netlink: 96 bytes leftover after parsing attributes in process `syz.4.551'. [ 78.455188][ T5489] netlink: 'syz.3.556': attribute type 13 has an invalid length. [ 78.463072][ T5489] netlink: 'syz.3.556': attribute type 17 has an invalid length. [ 78.599067][ T5489] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.382434][ T5511] loop3: detected capacity change from 0 to 512 [ 79.432298][ T5513] loop2: detected capacity change from 0 to 2048 [ 79.439016][ T5517] netlink: 96 bytes leftover after parsing attributes in process `syz.0.564'. [ 79.448174][ T5511] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.476314][ T5511] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.495534][ T5511] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.502117][ T5520] loop2: p1 < > p4 [ 79.510673][ T5511] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 79.522874][ T5511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.560: bg 0: block 40: padding at end of block bitmap is not set [ 79.537547][ T5511] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.547632][ T5511] EXT4-fs (loop3): 1 truncate cleaned up [ 79.547951][ T5520] loop2: p4 size 8388608 extends beyond EOD, truncated [ 79.605892][ T5513] loop2: p1 < > p4 [ 79.616597][ T5513] loop2: p4 size 8388608 extends beyond EOD, truncated [ 79.706619][ T5533] loop1: detected capacity change from 0 to 512 [ 79.736561][ T5539] loop0: detected capacity change from 0 to 1024 [ 79.752162][ T5533] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.767776][ T5533] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.776438][ T5533] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.781006][ T5539] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.818161][ T5533] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 79.834932][ T5542] loop2: detected capacity change from 0 to 1024 [ 79.882438][ T5533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.567: bg 0: block 40: padding at end of block bitmap is not set [ 79.899223][ T5539] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 13) [ 79.925773][ T5533] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.935825][ T5542] EXT4-fs: Ignoring removed orlov option [ 79.947416][ T5539] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 79.959848][ T5539] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.959848][ T5539] [ 79.975394][ T5533] EXT4-fs (loop1): 1 truncate cleaned up [ 79.995614][ T5549] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.032230][ T5542] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.050703][ T5539] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.067031][ T5553] loop1: detected capacity change from 0 to 1024 [ 80.100540][ T5553] EXT4-fs: Ignoring removed orlov option [ 80.108779][ T5549] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.154576][ T5538] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.200286][ T5538] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.220163][ T5549] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.247511][ T5542] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.570: bg 0: block 88: padding at end of block bitmap is not set [ 80.263311][ T5538] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.291825][ T5549] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.346715][ T5539] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.571: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.434669][ T5560] loop1: detected capacity change from 0 to 512 [ 80.460384][ T5560] EXT4-fs: Ignoring removed nobh option [ 80.516827][ T5560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.574: corrupted inode contents [ 80.560742][ T5560] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.574: mark_inode_dirty error [ 80.617747][ T5560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.574: corrupted inode contents [ 80.679265][ T5560] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.574: mark_inode_dirty error [ 80.702327][ T5560] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.574: Failed to acquire dquot type 0 [ 80.714006][ T5560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.574: corrupted inode contents [ 80.735662][ T5560] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.574: mark_inode_dirty error [ 80.754481][ T5560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.574: corrupted inode contents [ 80.789256][ T5573] loop0: detected capacity change from 0 to 512 [ 80.820519][ T5573] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.829841][ T5560] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.574: mark_inode_dirty error [ 80.842566][ T5573] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.852840][ T5579] netlink: 96 bytes leftover after parsing attributes in process `syz.2.579'. [ 80.861550][ T5573] __quota_error: 155 callbacks suppressed [ 80.861564][ T5573] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 80.861958][ T5560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.574: corrupted inode contents [ 80.893819][ T5573] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.948222][ T5560] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 80.958361][ T5573] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 80.981131][ T5585] dummy0: entered promiscuous mode [ 80.995928][ T5560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.574: corrupted inode contents [ 81.007970][ T5573] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.577: bg 0: block 40: padding at end of block bitmap is not set [ 81.019903][ T5565] Set syz1 is full, maxelem 65536 reached [ 81.028640][ T5585] bond0: entered promiscuous mode [ 81.033778][ T5585] bond_slave_0: entered promiscuous mode [ 81.038692][ T5560] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.574: mark_inode_dirty error [ 81.039499][ T5585] bond_slave_1: entered promiscuous mode [ 81.057217][ T5585] hsr1: entered allmulticast mode [ 81.060393][ T5573] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 81.062371][ T5585] dummy0: entered allmulticast mode [ 81.076227][ T5585] bond0: entered allmulticast mode [ 81.080420][ T5560] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 81.081388][ T5585] bond_slave_0: entered allmulticast mode [ 81.095913][ T5585] bond_slave_1: entered allmulticast mode [ 81.097435][ T5573] EXT4-fs (loop0): 1 truncate cleaned up [ 81.115864][ T5560] EXT4-fs (loop1): 1 truncate cleaned up [ 81.136256][ T5588] loop2: detected capacity change from 0 to 1024 [ 81.143121][ T5560] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.154794][ T5588] EXT4-fs: Ignoring removed orlov option [ 81.178361][ T29] audit: type=1326 audit(1755131833.478:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3f4fad550 code=0x7ffc0000 [ 81.201880][ T29] audit: type=1326 audit(1755131833.478:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb3f4fad937 code=0x7ffc0000 [ 81.225335][ T29] audit: type=1326 audit(1755131833.478:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3f4fad550 code=0x7ffc0000 [ 81.248754][ T29] audit: type=1326 audit(1755131833.478:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f4faebe9 code=0x7ffc0000 [ 81.272155][ T29] audit: type=1326 audit(1755131833.478:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f4faebe9 code=0x7ffc0000 [ 81.326845][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 81.345283][ T5597] loop3: detected capacity change from 0 to 1024 [ 81.360243][ T5597] EXT4-fs: Ignoring removed oldalloc option [ 81.380158][ T5597] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 81.415589][ T5588] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.415589][ T29] audit: type=1326 audit(1755131833.528:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb3f4faebe9 code=0x7ffc0000 [ 81.447059][ T29] audit: type=1326 audit(1755131833.618:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f4faebe9 code=0x7ffc0000 [ 81.470403][ T29] audit: type=1326 audit(1755131833.618:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f4faebe9 code=0x7ffc0000 [ 81.493829][ T29] audit: type=1326 audit(1755131833.648:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb3f4faebe9 code=0x7ffc0000 [ 81.535863][ T5604] loop4: detected capacity change from 0 to 1024 [ 81.576938][ T5604] EXT4-fs: Ignoring removed orlov option [ 81.578494][ T5611] FAULT_INJECTION: forcing a failure. [ 81.578494][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 81.595261][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.1.589 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 81.595357][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.595368][ T5611] Call Trace: [ 81.595375][ T5611] [ 81.595382][ T5611] __dump_stack+0x1d/0x30 [ 81.595402][ T5611] dump_stack_lvl+0xe8/0x140 [ 81.595440][ T5611] dump_stack+0x15/0x1b [ 81.595455][ T5611] should_fail_ex+0x265/0x280 [ 81.595474][ T5611] should_failslab+0x8c/0xb0 [ 81.595561][ T5611] kmem_cache_alloc_node_noprof+0x57/0x320 [ 81.595587][ T5611] ? __alloc_skb+0x101/0x320 [ 81.595615][ T5611] __alloc_skb+0x101/0x320 [ 81.595720][ T5611] netlink_alloc_large_skb+0xba/0xf0 [ 81.595749][ T5611] netlink_sendmsg+0x3cf/0x6b0 [ 81.595797][ T5611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.595815][ T5611] __sock_sendmsg+0x145/0x180 [ 81.595913][ T5611] ____sys_sendmsg+0x31e/0x4e0 [ 81.595934][ T5611] ___sys_sendmsg+0x17b/0x1d0 [ 81.596017][ T5611] __x64_sys_sendmsg+0xd4/0x160 [ 81.596038][ T5611] x64_sys_call+0x191e/0x2ff0 [ 81.596062][ T5611] do_syscall_64+0xd2/0x200 [ 81.596083][ T5611] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.596124][ T5611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.596146][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.596166][ T5611] RIP: 0033:0x7fb3f4faebe9 [ 81.596188][ T5611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.596270][ T5611] RSP: 002b:00007fb3f3a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.596320][ T5611] RAX: ffffffffffffffda RBX: 00007fb3f51d5fa0 RCX: 00007fb3f4faebe9 [ 81.596332][ T5611] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 81.596343][ T5611] RBP: 00007fb3f3a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.596354][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.596365][ T5611] R13: 00007fb3f51d6038 R14: 00007fb3f51d5fa0 R15: 00007ffc628db548 [ 81.596380][ T5611] [ 81.806507][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 81.934304][ T5588] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.583: bg 0: block 88: padding at end of block bitmap is not set [ 81.968146][ T5604] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.471247][ T5604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.588: bg 0: block 88: padding at end of block bitmap is not set [ 82.489573][ T5630] loop1: detected capacity change from 0 to 512 [ 82.553841][ T5630] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.571223][ T5630] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.578767][ T5632] loop3: detected capacity change from 0 to 512 [ 82.587862][ T5632] EXT4-fs: Ignoring removed nobh option [ 82.596281][ T5630] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.633693][ T5630] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 82.645485][ T5632] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.595: corrupted inode contents [ 82.658452][ T5630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.594: bg 0: block 40: padding at end of block bitmap is not set [ 82.681534][ T5632] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.595: mark_inode_dirty error [ 82.700962][ T5630] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 82.725179][ T5632] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.595: corrupted inode contents [ 82.737681][ T5630] EXT4-fs (loop1): 1 truncate cleaned up [ 82.752946][ T5632] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.595: mark_inode_dirty error [ 82.768509][ T5632] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.595: Failed to acquire dquot type 0 [ 82.782516][ T5632] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.595: corrupted inode contents [ 82.796031][ T5632] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.595: mark_inode_dirty error [ 82.809991][ T5632] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.595: corrupted inode contents [ 82.840010][ T5632] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.595: mark_inode_dirty error [ 82.881538][ T5632] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.595: corrupted inode contents [ 82.920633][ T5632] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 82.990905][ T5632] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.595: corrupted inode contents [ 83.011185][ T5632] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.595: mark_inode_dirty error [ 83.022780][ T5643] loop1: detected capacity change from 0 to 1024 [ 83.023554][ T5632] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 83.039865][ T5643] EXT4-fs: Ignoring removed orlov option [ 83.041970][ T5632] EXT4-fs (loop3): 1 truncate cleaned up [ 83.054281][ T5632] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.247051][ T5643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.460041][ T5659] netlink: 'syz.4.600': attribute type 13 has an invalid length. [ 83.467909][ T5659] netlink: 'syz.4.600': attribute type 17 has an invalid length. [ 83.517015][ T5661] loop2: detected capacity change from 0 to 1024 [ 83.533689][ T5661] EXT4-fs: Ignoring removed orlov option [ 83.549073][ T5659] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.698023][ T5674] loop3: detected capacity change from 0 to 1024 [ 83.716143][ T5674] EXT4-fs: Ignoring removed orlov option [ 83.731665][ T5674] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.862102][ T5681] lo speed is unknown, defaulting to 1000 [ 83.914769][ T5681] lo speed is unknown, defaulting to 1000 [ 83.963320][ T5681] lo speed is unknown, defaulting to 1000 [ 84.019052][ T5674] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.606: bg 0: block 88: padding at end of block bitmap is not set [ 84.034941][ T5681] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.079628][ T5681] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.134581][ T5643] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.597: bg 0: block 88: padding at end of block bitmap is not set [ 84.149281][ T5681] lo speed is unknown, defaulting to 1000 [ 84.170121][ T5681] lo speed is unknown, defaulting to 1000 [ 84.176507][ T5681] lo speed is unknown, defaulting to 1000 [ 84.185833][ T5681] lo speed is unknown, defaulting to 1000 [ 84.207928][ T5681] lo speed is unknown, defaulting to 1000 [ 84.264380][ T5696] loop0: detected capacity change from 0 to 512 [ 84.266681][ T5698] loop3: detected capacity change from 0 to 1024 [ 84.268916][ T5698] EXT4-fs: Ignoring removed bh option [ 84.269708][ T5698] EXT4-fs (loop3): Invalid log block size: 7733248 [ 84.276546][ T5696] EXT4-fs: Ignoring removed nobh option [ 84.304538][ T5696] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.610: corrupted inode contents [ 84.304643][ T5696] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.610: mark_inode_dirty error [ 84.305013][ T5696] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.610: corrupted inode contents [ 84.305161][ T5696] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.610: mark_inode_dirty error [ 84.305448][ T5696] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.610: Failed to acquire dquot type 0 [ 84.305760][ T5696] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.610: corrupted inode contents [ 84.305847][ T5696] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.610: mark_inode_dirty error [ 84.305957][ T5696] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.610: corrupted inode contents [ 84.306034][ T5696] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.610: mark_inode_dirty error [ 84.306243][ T5696] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.610: corrupted inode contents [ 84.306373][ T5696] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 84.306451][ T5696] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.610: corrupted inode contents [ 84.306662][ T5696] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.610: mark_inode_dirty error [ 84.306731][ T5696] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 84.307039][ T5696] EXT4-fs (loop0): 1 truncate cleaned up [ 84.307359][ T5696] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.567733][ T5729] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.602092][ T5737] loop2: detected capacity change from 0 to 512 [ 84.675623][ T5737] EXT4-fs: Ignoring removed nobh option [ 84.681873][ T5742] loop4: detected capacity change from 0 to 1024 [ 84.685405][ T5742] EXT4-fs: Ignoring removed orlov option [ 84.703537][ T5737] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.614: corrupted inode contents [ 84.719735][ T5737] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.614: mark_inode_dirty error [ 84.733958][ T5737] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.614: corrupted inode contents [ 84.746499][ T5737] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.614: mark_inode_dirty error [ 84.759012][ T5737] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.614: Failed to acquire dquot type 0 [ 84.771998][ T5737] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.614: corrupted inode contents [ 84.784307][ T5737] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.614: mark_inode_dirty error [ 84.804822][ T5737] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.614: corrupted inode contents [ 84.816888][ T5737] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.614: mark_inode_dirty error [ 84.829471][ T5737] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.614: corrupted inode contents [ 84.849210][ T5737] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 84.877921][ T5752] loop1: detected capacity change from 0 to 512 [ 84.892885][ T5752] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.902795][ T5752] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 84.940793][ T5737] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.614: corrupted inode contents [ 84.953317][ T5737] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.614: mark_inode_dirty error [ 84.976468][ T5737] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 84.986840][ T5737] EXT4-fs (loop2): 1 truncate cleaned up [ 84.993750][ T5737] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.018399][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 85.122959][ T5759] loop1: detected capacity change from 0 to 1024 [ 85.180146][ T5759] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.297222][ T5759] 9pnet_fd: Insufficient options for proto=fd [ 85.379213][ T5772] syz.3.625 uses obsolete (PF_INET,SOCK_PACKET) [ 85.399266][ T5772] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 85.424455][ T5772] team0: Device dummy0 failed to register rx_handler [ 85.436619][ T5772] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 85.597002][ T5783] lo speed is unknown, defaulting to 1000 [ 85.635593][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 85.644892][ T5783] 8021q: VLANs not supported on sit0 [ 85.824679][ T5789] loop3: detected capacity change from 0 to 512 [ 85.881854][ T5792] loop2: detected capacity change from 0 to 1024 [ 85.903198][ T5789] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.942455][ T5792] EXT4-fs: Ignoring removed orlov option [ 85.964998][ T5789] EXT4-fs (loop3): 1 truncate cleaned up [ 85.988995][ T5799] loop4: detected capacity change from 0 to 512 [ 86.021864][ T5799] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 86.055766][ T5799] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.063396][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 86.063407][ T29] audit: type=1326 audit(1755131838.328:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca03dfebe9 code=0x7ffc0000 [ 86.092968][ T29] audit: type=1326 audit(1755131838.328:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca03dfebe9 code=0x7ffc0000 [ 86.116395][ T29] audit: type=1326 audit(1755131838.328:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fca03dfebe9 code=0x7ffc0000 [ 86.139705][ T29] audit: type=1326 audit(1755131838.328:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca03dfebe9 code=0x7ffc0000 [ 86.162986][ T29] audit: type=1326 audit(1755131838.328:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca03dfebe9 code=0x7ffc0000 [ 86.186301][ T29] audit: type=1326 audit(1755131838.328:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca03e00b07 code=0x7ffc0000 [ 86.209667][ T29] audit: type=1326 audit(1755131838.328:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fca03e00a7c code=0x7ffc0000 [ 86.232856][ T29] audit: type=1326 audit(1755131838.328:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fca03e009b4 code=0x7ffc0000 [ 86.256130][ T29] audit: type=1326 audit(1755131838.328:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fca03e009b4 code=0x7ffc0000 [ 86.279647][ T29] audit: type=1326 audit(1755131838.328:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca03dfd84a code=0x7ffc0000 [ 86.332349][ T5799] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.347537][ T5799] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 86.355281][ T5799] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.633: bg 0: block 40: padding at end of block bitmap is not set [ 86.371039][ T5799] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 86.380113][ T5799] EXT4-fs (loop4): 1 truncate cleaned up [ 86.442567][ T5804] loop0: detected capacity change from 0 to 2048 [ 86.480283][ T3284] loop0: p1 < > p4 [ 86.485628][ T3284] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.507181][ T5814] loop1: detected capacity change from 0 to 1024 [ 86.515180][ T5804] loop0: p1 < > p4 [ 86.522792][ T5804] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.533041][ T5815] loop3: detected capacity change from 0 to 512 [ 86.548326][ T5814] EXT4-fs: Ignoring removed orlov option [ 86.593303][ T5815] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.606861][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 86.610219][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 86.621569][ T5815] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.639490][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 86.640508][ T5821] loop0: detected capacity change from 0 to 512 [ 86.656197][ T5815] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.658083][ T5821] EXT4-fs: Ignoring removed nobh option [ 86.671939][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 86.688630][ T5815] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 86.695478][ T5814] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.719913][ T5821] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.640: corrupted inode contents [ 86.742804][ T5821] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.640: mark_inode_dirty error [ 86.755057][ T5815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.634: bg 0: block 40: padding at end of block bitmap is not set [ 86.770957][ T5814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.639: bg 0: block 88: padding at end of block bitmap is not set [ 86.801113][ T5815] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 86.817720][ T5821] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.640: corrupted inode contents [ 86.836306][ T5815] EXT4-fs (loop3): 1 truncate cleaned up [ 86.842043][ T5821] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.640: mark_inode_dirty error [ 86.934236][ T5828] loop4: detected capacity change from 0 to 1024 [ 86.951301][ T5821] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.640: Failed to acquire dquot type 0 [ 87.035527][ T5828] EXT4-fs: Ignoring removed orlov option [ 87.054511][ T5821] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.640: corrupted inode contents [ 87.086098][ T5839] loop3: detected capacity change from 0 to 1024 [ 87.110221][ T5843] loop1: detected capacity change from 0 to 128 [ 87.136712][ T5843] syz.1.646: attempt to access beyond end of device [ 87.136712][ T5843] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 87.181135][ T5841] syz.1.646: attempt to access beyond end of device [ 87.181135][ T5841] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 87.194559][ T5841] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 87.221905][ T5821] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.640: mark_inode_dirty error [ 87.273849][ T5821] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.640: corrupted inode contents [ 87.309587][ T5821] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.640: mark_inode_dirty error [ 87.338004][ T5839] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.355251][ T5821] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.640: corrupted inode contents [ 87.370504][ T5839] 9pnet_fd: Insufficient options for proto=fd [ 87.385366][ T5839] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 13) [ 87.422245][ T5821] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 87.439210][ T5839] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 87.451657][ T5839] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.451657][ T5839] [ 87.462650][ T5821] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.640: corrupted inode contents [ 87.485194][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.499322][ T5821] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.640: mark_inode_dirty error [ 87.510921][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.525257][ T5821] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 87.534392][ T5828] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 87.534591][ T5821] EXT4-fs (loop0): 1 truncate cleaned up [ 87.548376][ T5821] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.550081][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.585108][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.601157][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.624709][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.644323][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.688369][ T5855] loop1: detected capacity change from 0 to 1024 [ 87.730404][ T5855] EXT4-fs: Ignoring removed oldalloc option [ 87.749070][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.830530][ T5849] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.645: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.862050][ T5855] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 88.019957][ T5827] syz.4.641 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 88.034159][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.4.641 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 88.034190][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.034203][ T5827] Call Trace: [ 88.034209][ T5827] [ 88.034217][ T5827] __dump_stack+0x1d/0x30 [ 88.034256][ T5827] dump_stack_lvl+0xe8/0x140 [ 88.034275][ T5827] dump_stack+0x15/0x1b [ 88.034323][ T5827] dump_header+0x81/0x220 [ 88.034354][ T5827] oom_kill_process+0x342/0x400 [ 88.034446][ T5827] out_of_memory+0x979/0xb80 [ 88.034478][ T5827] try_charge_memcg+0x5e6/0x9e0 [ 88.034506][ T5827] obj_cgroup_charge_pages+0xa6/0x150 [ 88.034537][ T5827] __memcg_kmem_charge_page+0x9f/0x170 [ 88.034610][ T5827] __alloc_frozen_pages_noprof+0x188/0x360 [ 88.034686][ T5827] alloc_pages_mpol+0xb3/0x250 [ 88.034717][ T5827] alloc_pages_noprof+0x90/0x130 [ 88.034748][ T5827] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 88.034809][ T5827] __kvmalloc_node_noprof+0x30f/0x4e0 [ 88.034845][ T5827] ? ip_set_alloc+0x1f/0x30 [ 88.034875][ T5827] ? ip_set_alloc+0x1f/0x30 [ 88.034902][ T5827] ? __kmalloc_cache_noprof+0x189/0x320 [ 88.034984][ T5827] ip_set_alloc+0x1f/0x30 [ 88.035012][ T5827] hash_netiface_create+0x282/0x740 [ 88.035047][ T5827] ? __pfx_hash_netiface_create+0x10/0x10 [ 88.035082][ T5827] ip_set_create+0x3cc/0x960 [ 88.035108][ T5827] ? __nla_parse+0x40/0x60 [ 88.035152][ T5827] nfnetlink_rcv_msg+0x4c6/0x590 [ 88.035194][ T5827] netlink_rcv_skb+0x120/0x220 [ 88.035214][ T5827] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.035338][ T5827] nfnetlink_rcv+0x16b/0x1690 [ 88.035366][ T5827] ? nlmon_xmit+0x4f/0x60 [ 88.035432][ T5827] ? consume_skb+0x49/0x150 [ 88.035463][ T5827] ? nlmon_xmit+0x4f/0x60 [ 88.035487][ T5827] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 88.035517][ T5827] ? __dev_queue_xmit+0x1200/0x2000 [ 88.035538][ T5827] ? __dev_queue_xmit+0x182/0x2000 [ 88.035560][ T5827] ? ref_tracker_free+0x37d/0x3e0 [ 88.035643][ T5827] ? __netlink_deliver_tap+0x4dc/0x500 [ 88.035733][ T5827] netlink_unicast+0x5c0/0x690 [ 88.035846][ T5827] netlink_sendmsg+0x58b/0x6b0 [ 88.035869][ T5827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.035891][ T5827] __sock_sendmsg+0x145/0x180 [ 88.035980][ T5827] ____sys_sendmsg+0x31e/0x4e0 [ 88.036047][ T5827] ___sys_sendmsg+0x17b/0x1d0 [ 88.036078][ T5827] __x64_sys_sendmsg+0xd4/0x160 [ 88.036128][ T5827] x64_sys_call+0x191e/0x2ff0 [ 88.036150][ T5827] do_syscall_64+0xd2/0x200 [ 88.036200][ T5827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.036224][ T5827] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.036248][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.036269][ T5827] RIP: 0033:0x7fd4a182ebe9 [ 88.036284][ T5827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.036301][ T5827] RSP: 002b:00007fd4a028f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.036444][ T5827] RAX: ffffffffffffffda RBX: 00007fd4a1a55fa0 RCX: 00007fd4a182ebe9 [ 88.036457][ T5827] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 88.036470][ T5827] RBP: 00007fd4a18b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.036483][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.036496][ T5827] R13: 00007fd4a1a56038 R14: 00007fd4a1a55fa0 R15: 00007fffd019edb8 [ 88.036514][ T5827] [ 88.036521][ T5827] memory: usage 307200kB, limit 307200kB, failcnt 3249 [ 88.116977][ T5875] lo speed is unknown, defaulting to 1000 [ 88.121357][ T5827] memory+swap: usage 316100kB, limit 9007199254740988kB, failcnt 0 [ 88.151036][ T5873] loop3: detected capacity change from 0 to 1024 [ 88.151428][ T5827] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 88.176663][ T5873] EXT4-fs: Ignoring removed bh option [ 88.181067][ T5827] Memory cgroup stats for [ 88.187755][ T5873] EXT4-fs (loop3): Invalid log block size: 7733248 [ 88.191202][ T5827] /syz4: [ 88.416983][ T5827] cache 12288 [ 88.423190][ T5827] rss 0 [ 88.423199][ T5827] shmem 0 [ 88.423205][ T5827] mapped_file 0 [ 88.423212][ T5827] dirty 0 [ 88.423218][ T5827] writeback 0 [ 88.423225][ T5827] workingset_refault_anon 366 [ 88.443549][ T5827] workingset_refault_file 3050 [ 88.443559][ T5827] swap 9113600 [ 88.443565][ T5827] swapcached 20480 [ 88.443606][ T5827] pgpgin 67819 [ 88.443614][ T5827] pgpgout 67802 [ 88.443621][ T5827] pgfault 75780 [ 88.465873][ T5827] pgmajfault 197 [ 88.465883][ T5827] inactive_anon 20480 [ 88.465888][ T5827] active_anon 0 [ 88.465893][ T5827] inactive_file 45056 [ 88.465900][ T5827] active_file 4096 [ 88.465907][ T5827] unevictable 0 [ 88.465915][ T5827] hierarchical_memory_limit 314572800 [ 88.465923][ T5827] hierarchical_memsw_limit 9223372036854771712 [ 88.465982][ T5827] total_cache 12288 [ 88.465988][ T5827] total_rss 0 [ 88.465994][ T5827] total_shmem 0 [ 88.510392][ T5827] total_mapped_file 0 [ 88.510402][ T5827] total_dirty 0 [ 88.510408][ T5827] total_writeback 0 [ 88.510414][ T5827] total_workingset_refault_anon 366 [ 88.510421][ T5827] total_workingset_refault_file 3050 [ 88.510428][ T5827] total_swap 9113600 [ 88.510434][ T5827] total_swapcached 20480 [ 88.510441][ T5827] total_pgpgin 67819 [ 88.510447][ T5827] total_pgpgout 67802 [ 88.510459][ T5827] total_pgfault 75780 [ 88.510467][ T5827] total_pgmajfault 197 [ 88.510479][ T5827] total_inactive_anon 20480 [ 88.510485][ T5827] total_active_anon 0 [ 88.510491][ T5827] total_inactive_file 45056 [ 88.510500][ T5827] total_active_file 4096 [ 88.510508][ T5827] total_unevictable 0 [ 88.510517][ T5827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.641,pid=5826,uid=0 [ 88.510671][ T5827] Memory cgroup out of memory: Killed process 5826 (syz.4.641) total-vm:95944kB, anon-rss:1072kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 88.928892][ T5944] pim6reg1: entered promiscuous mode [ 88.934297][ T5944] pim6reg1: entered allmulticast mode [ 88.971881][ T5947] loop1: detected capacity change from 0 to 2048 [ 89.010361][ T3292] loop1: p1 < > p4 [ 89.014948][ T3292] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.033338][ T5954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5954 comm=syz.2.659 [ 89.063466][ T5954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5954 comm=syz.2.659 [ 89.153001][ T5964] loop0: detected capacity change from 0 to 1024 [ 89.173843][ T5964] EXT4-fs: Ignoring removed oldalloc option [ 89.189115][ T5964] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.385511][ T5947] loop1: p1 < > p4 [ 89.393616][ T5947] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.501040][ T5979] can0: slcan on ttyS3. [ 89.550051][ T5979] can0 (unregistered): slcan off ttyS3. [ 89.597264][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 89.821255][ T5996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5996 comm=syz.3.668 [ 89.861268][ T6000] loop2: detected capacity change from 0 to 512 [ 89.870921][ T6000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.881076][ T6000] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 89.958364][ T6004] loop2: detected capacity change from 0 to 512 [ 89.970441][ T6004] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.978927][ T6004] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.985912][ T6004] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.000767][ T6004] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 90.007828][ T6004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.671: bg 0: block 40: padding at end of block bitmap is not set [ 90.022995][ T6004] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 90.034126][ T6004] EXT4-fs (loop2): 1 truncate cleaned up [ 90.086409][ T6010] loop2: detected capacity change from 0 to 2048 [ 90.110690][ T3284] loop2: p1 < > p4 [ 90.116460][ T3284] loop2: p4 size 8388608 extends beyond EOD, truncated [ 90.126005][ T6010] loop2: p1 < > p4 [ 90.130653][ T6010] loop2: p4 size 8388608 extends beyond EOD, truncated [ 90.132503][ T6014] can0: slcan on ttyS3. [ 90.190892][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.191023][ T6014] can0 (unregistered): slcan off ttyS3. [ 90.206760][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 90.304176][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.315035][ T6014] can0: slcan on ttyS3. [ 90.380060][ T6014] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 90.575779][ T6059] FAULT_INJECTION: forcing a failure. [ 90.575779][ T6059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.588907][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.0.679 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 90.588936][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.588949][ T6059] Call Trace: [ 90.588956][ T6059] [ 90.588964][ T6059] __dump_stack+0x1d/0x30 [ 90.588986][ T6059] dump_stack_lvl+0xe8/0x140 [ 90.589003][ T6059] dump_stack+0x15/0x1b [ 90.589017][ T6059] should_fail_ex+0x265/0x280 [ 90.589098][ T6059] should_fail+0xb/0x20 [ 90.589116][ T6059] should_fail_usercopy+0x1a/0x20 [ 90.589138][ T6059] _copy_from_iter+0xcf/0xe40 [ 90.589158][ T6059] ? __build_skb_around+0x1a0/0x200 [ 90.589196][ T6059] ? __alloc_skb+0x223/0x320 [ 90.589322][ T6059] netlink_sendmsg+0x471/0x6b0 [ 90.589341][ T6059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.589469][ T6059] __sock_sendmsg+0x145/0x180 [ 90.589507][ T6059] ____sys_sendmsg+0x31e/0x4e0 [ 90.589537][ T6059] ___sys_sendmsg+0x17b/0x1d0 [ 90.589598][ T6059] __x64_sys_sendmsg+0xd4/0x160 [ 90.589628][ T6059] x64_sys_call+0x191e/0x2ff0 [ 90.589647][ T6059] do_syscall_64+0xd2/0x200 [ 90.589685][ T6059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.589710][ T6059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.589765][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.589783][ T6059] RIP: 0033:0x7ff9d89eebe9 [ 90.589800][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.589814][ T6059] RSP: 002b:00007ff9d7457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.589830][ T6059] RAX: ffffffffffffffda RBX: 00007ff9d8c15fa0 RCX: 00007ff9d89eebe9 [ 90.589840][ T6059] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 90.589864][ T6059] RBP: 00007ff9d7457090 R08: 0000000000000000 R09: 0000000000000000 [ 90.589950][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.589960][ T6059] R13: 00007ff9d8c16038 R14: 00007ff9d8c15fa0 R15: 00007ffe093af778 [ 90.589975][ T6059] [ 90.836212][ T6060] netlink: 56 bytes leftover after parsing attributes in process `syz.1.680'. [ 90.836972][ T6062] loop0: detected capacity change from 0 to 512 [ 90.857172][ T6062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.867062][ T6062] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 90.880082][ T6013] can0 (unregistered): slcan off ttyS3. [ 90.967259][ T6081] loop1: detected capacity change from 0 to 512 [ 90.978991][ T6083] FAULT_INJECTION: forcing a failure. [ 90.978991][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.992174][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.4.689 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 90.992260][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.992272][ T6083] Call Trace: [ 90.992279][ T6083] [ 90.992287][ T6083] __dump_stack+0x1d/0x30 [ 90.992307][ T6083] dump_stack_lvl+0xe8/0x140 [ 90.992323][ T6083] dump_stack+0x15/0x1b [ 90.992338][ T6083] should_fail_ex+0x265/0x280 [ 90.992366][ T6083] should_fail+0xb/0x20 [ 90.992443][ T6083] should_fail_usercopy+0x1a/0x20 [ 90.992464][ T6083] _copy_from_user+0x1c/0xb0 [ 90.992567][ T6083] proc_submiturb+0x43/0xa0 [ 90.992591][ T6083] usbdev_ioctl+0xcc2/0x1710 [ 90.992615][ T6083] ? __pfx_usbdev_ioctl+0x10/0x10 [ 90.992636][ T6083] __se_sys_ioctl+0xcb/0x140 [ 90.992733][ T6083] __x64_sys_ioctl+0x43/0x50 [ 90.992758][ T6083] x64_sys_call+0x1816/0x2ff0 [ 90.992776][ T6083] do_syscall_64+0xd2/0x200 [ 90.992796][ T6083] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.992867][ T6083] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.992903][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.992919][ T6083] RIP: 0033:0x7fd4a182ebe9 [ 90.992932][ T6083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.992946][ T6083] RSP: 002b:00007fd4a028f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.992962][ T6083] RAX: ffffffffffffffda RBX: 00007fd4a1a55fa0 RCX: 00007fd4a182ebe9 [ 90.992972][ T6083] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000006 [ 90.993044][ T6083] RBP: 00007fd4a028f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.993055][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.993065][ T6083] R13: 00007fd4a1a56038 R14: 00007fd4a1a55fa0 R15: 00007fffd019edb8 [ 90.993080][ T6083] [ 91.184982][ T6081] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.193123][ T6081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.199753][ T6081] __quota_error: 156 callbacks suppressed [ 91.199764][ T6081] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 91.259596][ T29] audit: type=1400 audit(1755131843.558:2595): avc: denied { watch watch_reads } for pid=6087 comm="syz.3.690" path="/137" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.261124][ T6081] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.318138][ T6081] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 91.331555][ T6081] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.684: bg 0: block 40: padding at end of block bitmap is not set [ 91.349969][ T6081] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 91.358881][ T6092] loop2: detected capacity change from 0 to 2048 [ 91.365725][ T6081] EXT4-fs (loop1): 1 truncate cleaned up [ 91.411270][ T6092] loop2: p1 < > p3 [ 91.415635][ T6092] loop2: p3 size 134217728 extends beyond EOD, truncated [ 91.463680][ T6098] loop1: detected capacity change from 0 to 1024 [ 91.484378][ T6098] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.489969][ T6102] loop2: detected capacity change from 0 to 1024 [ 91.494864][ T29] audit: type=1326 audit(1755131843.808:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.524595][ T29] audit: type=1326 audit(1755131843.808:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.548027][ T29] audit: type=1326 audit(1755131843.808:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.556744][ T6098] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 13) [ 91.571410][ T29] audit: type=1326 audit(1755131843.808:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.586368][ T6102] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.608633][ T29] audit: type=1326 audit(1755131843.808:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.619500][ T6102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.642744][ T29] audit: type=1326 audit(1755131843.808:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.671416][ T6096] loop4: detected capacity change from 0 to 512 [ 91.675529][ T29] audit: type=1326 audit(1755131843.808:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.675568][ T29] audit: type=1326 audit(1755131843.808:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f85b64bebe9 code=0x7ffc0000 [ 91.696552][ T6102] JBD2: no valid journal superblock found [ 91.730334][ T6096] EXT4-fs: Ignoring removed nobh option [ 91.734168][ T6102] EXT4-fs (loop2): Could not load journal inode [ 91.746651][ T6098] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 91.759034][ T6098] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.759034][ T6098] [ 91.771416][ T6104] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.787803][ T6105] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.808031][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.694: corrupted inode contents [ 91.820338][ T6102] FAULT_INJECTION: forcing a failure. [ 91.820338][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 91.829373][ T6096] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.694: mark_inode_dirty error [ 91.832988][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.2.695 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 91.833145][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.833157][ T6102] Call Trace: [ 91.833163][ T6102] [ 91.833169][ T6102] __dump_stack+0x1d/0x30 [ 91.833189][ T6102] dump_stack_lvl+0xe8/0x140 [ 91.833207][ T6102] dump_stack+0x15/0x1b [ 91.833228][ T6102] should_fail_ex+0x265/0x280 [ 91.833249][ T6102] should_failslab+0x8c/0xb0 [ 91.833272][ T6102] kmem_cache_alloc_noprof+0x50/0x310 [ 91.833297][ T6102] ? audit_log_start+0x365/0x6c0 [ 91.833376][ T6102] audit_log_start+0x365/0x6c0 [ 91.833406][ T6102] audit_seccomp+0x48/0x100 [ 91.833429][ T6102] ? __seccomp_filter+0x68c/0x10d0 [ 91.833449][ T6102] __seccomp_filter+0x69d/0x10d0 [ 91.833471][ T6102] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.833528][ T6102] ? vfs_write+0x7e8/0x960 [ 91.833545][ T6102] ? __rcu_read_unlock+0x4f/0x70 [ 91.833563][ T6102] ? __fget_files+0x184/0x1c0 [ 91.833587][ T6102] __secure_computing+0x82/0x150 [ 91.833653][ T6102] syscall_trace_enter+0xcf/0x1e0 [ 91.833721][ T6102] do_syscall_64+0xac/0x200 [ 91.833745][ T6102] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.833767][ T6102] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.833801][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.833820][ T6102] RIP: 0033:0x7f85b64bebe9 [ 91.833836][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.833852][ T6102] RSP: 002b:00007f85b4f27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.833879][ T6102] RAX: ffffffffffffffda RBX: 00007f85b66e5fa0 RCX: 00007f85b64bebe9 [ 91.833892][ T6102] RDX: 0000000000004001 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 91.833904][ T6102] RBP: 00007f85b4f27090 R08: 0000000000000000 R09: 0000000000000000 [ 91.833923][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.833935][ T6102] R13: 00007f85b66e6038 R14: 00007f85b66e5fa0 R15: 00007fff306adcb8 [ 91.833953][ T6102] [ 91.840905][ T6102] random: crng reseeded on system resumption [ 92.069870][ T6104] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.071748][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.694: corrupted inode contents [ 92.097724][ T6097] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.097745][ T6096] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.694: mark_inode_dirty error [ 92.097853][ T6097] ================================================================== [ 92.097881][ T6097] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 92.097921][ T6097] [ 92.097926][ T6097] write to 0xffffffff88e3c140 of 1 bytes by task 6096 on cpu 1: [ 92.097941][ T6097] vsnprintf+0x2ce/0x890 [ 92.097968][ T6097] vscnprintf+0x41/0x90 [ 92.097981][ T6097] printk_sprint+0x30/0x2d0 [ 92.097993][ T6097] vprintk_store+0x599/0x860 [ 92.098020][ T6097] vprintk_emit+0x178/0x650 [ 92.098036][ T6097] vprintk_default+0x26/0x30 [ 92.098054][ T6097] vprintk+0x1d/0x30 [ 92.098072][ T6097] _printk+0x79/0xa0 [ 92.098096][ T6097] __ext4_error_inode+0x2ca/0x3f0 [ 92.098125][ T6097] __ext4_mark_inode_dirty+0xbd/0x3f0 [ 92.098150][ T6097] __ext4_ext_dirty+0xdb/0x1f0 [ 92.098170][ T6097] ext4_ext_insert_extent+0x13db/0x29b0 [ 92.098190][ T6097] ext4_ext_map_blocks+0x10b8/0x38a0 [ 92.098219][ T6097] ext4_map_blocks+0x5ee/0xd00 [ 92.098243][ T6097] ext4_getblk+0x114/0x510 [ 92.098266][ T6097] ext4_bread+0x28/0x110 [ 92.098288][ T6097] ext4_quota_write+0x167/0x360 [ 92.098303][ T6097] get_free_dqblk+0x20b/0x340 [ 92.098332][ T6097] do_insert_tree+0x19a/0x9b0 [ 92.098360][ T6097] do_insert_tree+0x753/0x9b0 [ 92.098388][ T6097] do_insert_tree+0x753/0x9b0 [ 92.098418][ T6097] do_insert_tree+0x753/0x9b0 [ 92.098445][ T6097] qtree_write_dquot+0x2cb/0x300 [ 92.098475][ T6097] v2_write_dquot+0xda/0x140 [ 92.098503][ T6097] dquot_acquire+0x1c3/0x2b0 [ 92.098524][ T6097] ext4_acquire_dquot+0x15f/0x200 [ 92.098543][ T6097] dqget+0x535/0x8d0 [ 92.098564][ T6097] __dquot_initialize+0x27f/0x7c0 [ 92.098590][ T6097] dquot_initialize+0x1a/0x30 [ 92.098615][ T6097] ext4_process_orphan+0x32/0x1c0 [ 92.098636][ T6097] ext4_orphan_cleanup+0x6a8/0xa00 [ 92.098656][ T6097] ext4_fill_super+0x3171/0x34e0 [ 92.098685][ T6097] get_tree_bdev_flags+0x28e/0x300 [ 92.098708][ T6097] get_tree_bdev+0x1f/0x30 [ 92.098729][ T6097] ext4_get_tree+0x1c/0x30 [ 92.098757][ T6097] vfs_get_tree+0x57/0x1d0 [ 92.098774][ T6097] do_new_mount+0x207/0x5e0 [ 92.098795][ T6097] path_mount+0x4a4/0xb20 [ 92.098815][ T6097] __se_sys_mount+0x28f/0x2e0 [ 92.098837][ T6097] __x64_sys_mount+0x67/0x80 [ 92.098858][ T6097] x64_sys_call+0x2b4d/0x2ff0 [ 92.098878][ T6097] do_syscall_64+0xd2/0x200 [ 92.098903][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.098925][ T6097] [ 92.098932][ T6097] read to 0xffffffff88e3c140 of 8 bytes by task 6097 on cpu 0: [ 92.098949][ T6097] data_push_tail+0xfd/0x420 [ 92.098976][ T6097] data_alloc+0xbf/0x2b0 [ 92.098998][ T6097] prb_reserve+0x808/0xaf0 [ 92.099023][ T6097] vprintk_store+0x56d/0x860 [ 92.099053][ T6097] vprintk_emit+0x178/0x650 [ 92.099071][ T6097] vprintk_default+0x26/0x30 [ 92.099089][ T6097] vprintk+0x1d/0x30 [ 92.099110][ T6097] _printk+0x79/0xa0 [ 92.099133][ T6097] __ext4_error_inode+0x30f/0x3f0 [ 92.099161][ T6097] ext4_map_blocks+0xa14/0xd00 [ 92.099181][ T6097] ext4_mpage_readpages+0x652/0xf10 [ 92.099206][ T6097] ext4_read_folio+0xc0/0x190 [ 92.099231][ T6097] filemap_read_folio+0x2e/0x110 [ 92.099248][ T6097] filemap_fault+0x56a/0xb40 [ 92.099265][ T6097] __do_fault+0xb9/0x200 [ 92.099286][ T6097] handle_mm_fault+0xd69/0x2c20 [ 92.099306][ T6097] do_user_addr_fault+0x636/0x1090 [ 92.099335][ T6097] exc_page_fault+0x62/0xa0 [ 92.099352][ T6097] asm_exc_page_fault+0x26/0x30 [ 92.099370][ T6097] [ 92.099375][ T6097] value changed: 0x00000000ffffe74c -> 0x646f6e69203a3630 [ 92.099387][ T6097] [ 92.099392][ T6097] Reported by Kernel Concurrency Sanitizer on: [ 92.099403][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.1.693 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 92.099429][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.099441][ T6097] ================================================================== [ 92.174214][ T6112] lo speed is unknown, defaulting to 1000 [ 92.178780][ T6097] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.201372][ T6096] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.694: Failed to acquire dquot type 0 [ 92.250373][ T6104] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.460593][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 92.493489][ T6104] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.494793][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 92.494873][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.494885][ T3304] Call Trace: [ 92.494892][ T3304] [ 92.494900][ T3304] __dump_stack+0x1d/0x30 [ 92.494921][ T3304] dump_stack_lvl+0xe8/0x140 [ 92.494939][ T3304] dump_stack+0x15/0x1b [ 92.494955][ T3304] dump_header+0x81/0x220 [ 92.495040][ T3304] oom_kill_process+0x342/0x400 [ 92.495070][ T3304] out_of_memory+0x979/0xb80 [ 92.495100][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 92.495125][ T3304] charge_memcg+0x51/0xc0 [ 92.495143][ T3304] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 92.495212][ T3304] __read_swap_cache_async+0x1df/0x350 [ 92.495245][ T3304] swap_cluster_readahead+0x277/0x3e0 [ 92.495277][ T3304] swapin_readahead+0xde/0x6f0 [ 92.495327][ T3304] ? __filemap_get_folio+0x4f7/0x6b0 [ 92.495359][ T3304] ? swap_cache_get_folio+0x77/0x200 [ 92.495463][ T3304] do_swap_page+0x301/0x2430 [ 92.495484][ T3304] ? finish_task_switch+0xad/0x2b0 [ 92.495505][ T3304] ? __pfx_default_wake_function+0x10/0x10 [ 92.495527][ T3304] handle_mm_fault+0x9a5/0x2c20 [ 92.495621][ T3304] do_user_addr_fault+0x636/0x1090 [ 92.495650][ T3304] ? fpregs_restore_userregs+0xe2/0x1d0 [ 92.495677][ T3304] ? switch_fpu_return+0xe/0x20 [ 92.495709][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.495733][ T3304] exc_page_fault+0x62/0xa0 [ 92.495753][ T3304] asm_exc_page_fault+0x26/0x30 [ 92.495773][ T3304] RIP: 0033:0x7fca03e31465 [ 92.495801][ T3304] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 92.495817][ T3304] RSP: 002b:00007ffdfc566b68 EFLAGS: 00010246 [ 92.495833][ T3304] RAX: 0000000000000000 RBX: 000000000000016e RCX: 00007fca03e31463 [ 92.495849][ T3304] RDX: 00007ffdfc566b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.495870][ T3304] RBP: 00007ffdfc566bec R08: 000000001833f195 R09: 0000000000000000 [ 92.495882][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 92.495895][ T3304] R13: 00000000000927c0 R14: 000000000001683b R15: 00007ffdfc566c40 [ 92.495912][ T3304] [ 92.496341][ T3304] memory: usage 307056kB, limit 307200kB, failcnt 475 [ 92.502884][ T6104] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.508471][ T3304] memory+swap: usage 307264kB, limit 9007199254740988kB, failcnt 0 [ 92.523620][ T6097] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.693: lblock 3 mapped to illegal pblock 3 (length 1) [ 92.533499][ T3304] kmem: usage 307000kB, limit 9007199254740988kB, failcnt 0 [ 92.533514][ T3304] Memory cgroup stats for /syz3: [ 92.575818][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.694: corrupted inode contents [ 92.585896][ T3304] cache 0 [ 92.621336][ T6096] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.694: mark_inode_dirty error [ 92.623967][ T3304] rss 0 [ 92.623974][ T3304] shmem 0 [ 92.624042][ T3304] mapped_file 0 [ 92.624049][ T3304] dirty 0 [ 92.624056][ T3304] writeback 0 [ 92.624063][ T3304] workingset_refault_anon 192 [ 92.624070][ T3304] workingset_refault_file 1711 [ 92.624078][ T3304] swap 212992 [ 92.624085][ T3304] swapcached 0 [ 92.624091][ T3304] pgpgin 69970 [ 92.624166][ T3304] pgpgout 69962 [ 92.624199][ T3304] pgfault 75071 [ 92.624205][ T3304] pgmajfault 148 [ 92.630485][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.694: corrupted inode contents [ 92.633648][ T3304] inactive_anon 0 [ 92.633656][ T3304] active_anon 0 [ 92.633663][ T3304] inactive_file 20480 [ 92.633670][ T3304] active_file 12288 [ 92.633678][ T3304] unevictable 0 [ 92.633685][ T3304] hierarchical_memory_limit 314572800 [ 92.633694][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 92.633702][ T3304] total_cache 0 [ 92.633708][ T3304] total_rss 0 [ 92.633714][ T3304] total_shmem 0 [ 92.633720][ T3304] total_mapped_file 0 [ 92.633792][ T3304] total_dirty 0 [ 92.633798][ T3304] total_writeback 0 [ 92.633827][ T3304] total_workingset_refault_anon 192 [ 92.633833][ T3304] total_workingset_refault_file 1711 [ 92.633840][ T3304] total_swap 212992 [ 92.633847][ T3304] total_swapcached 0 [ 92.633854][ T3304] total_pgpgin 69970 [ 92.633862][ T3304] total_pgpgout 69962 [ 92.633869][ T3304] total_pgfault 75071 [ 92.633876][ T3304] total_pgmajfault 148 [ 92.638944][ T6096] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.694: mark_inode_dirty error [ 92.644257][ T3304] total_inactive_anon 0 [ 92.644267][ T3304] total_active_anon 0 [ 92.644274][ T3304] total_inactive_file 20480 [ 92.644281][ T3304] total_active_file 12288 [ 92.644289][ T3304] total_unevictable 0 [ 92.644297][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.690,pid=6087,uid=0 [ 92.644403][ T3304] Memory cgroup out of memory: Killed process 6087 (syz.3.690) total-vm:93764kB, anon-rss:944kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 93.105478][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.694: corrupted inode contents [ 93.127621][ T6096] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 93.137671][ T6096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.694: corrupted inode contents [ 93.153413][ T6096] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.694: mark_inode_dirty error [ 93.166157][ T6096] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 93.178396][ T6096] EXT4-fs (loop4): 1 truncate cleaned up [ 93.188810][ T6096] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)