last executing test programs: 19.816029954s ago: executing program 0 (id=1652): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x28, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 15.889249202s ago: executing program 0 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) 14.827726239s ago: executing program 0 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x9, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x20000000000001cd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 14.702125712s ago: executing program 0 (id=1664): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x1000801, &(0x7f0000000340)=ANY=[@ANYBLOB="5075df5258", @ANYRES8, @ANYRESDEC], 0x0, 0x1da, &(0x7f0000000600)="$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") chdir(0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x1) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r2, &(0x7f00000001c0)='m', 0x1, 0x1}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) fcntl$setstatus(r5, 0x4, 0x2400) write(r4, &(0x7f0000000040), 0xffffff4a) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, r0, 0x2) 12.897105887s ago: executing program 0 (id=1670): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000400)=ANY=[@ANYBLOB="7a78de0db8c2cebf94b0542f37aff106967729ea2a27082625e46be99348a196ab7f366b4c4466d9e4d2ead7f5dcfc4739ffa61b2ea593d3247d1738dda7a0a11ce6d77cb9e907037bdf8431e1972d7d031697b34498b5e397a3214bf6a40cfd17ce4386139e96a1af20b5a501deef280d97e46165e4d7d31c583e9de11a71156558", @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff80cc03df2bac890645000078006400000029907800000000e00000010000000000649078200200000000000000000000bfd8a5dd3cf41bea4201001100005efefd7f1afca8f60ffc0e896f38da0000000b3d22b336984ffb47476e10c3ae64b1bb3b2195c4b058706558a70864bef1f0"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_setup(0xc, &(0x7f0000000140)=0x0) r4 = socket(0x10, 0x803, 0x0) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, 0x0, 0x0, 0x34}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) fsopen(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000891) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000000000000007200000000000009500000008000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 4.332054231s ago: executing program 3 (id=1701): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = semget(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000380)=""/246) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) mincore(&(0x7f0000a31000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/62) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 3.154367201s ago: executing program 3 (id=1702): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x1000801, &(0x7f0000000340)=ANY=[@ANYBLOB="5075df5258", @ANYRES8, @ANYRESDEC], 0x0, 0x1da, &(0x7f0000000600)="$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") chdir(0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x1) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) 3.037217144s ago: executing program 2 (id=1703): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x4000400) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2.748074411s ago: executing program 3 (id=1707): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 2.670354453s ago: executing program 3 (id=1709): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 2.653912093s ago: executing program 1 (id=1710): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.501229387s ago: executing program 1 (id=1713): mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000372000/0x2000)=nil) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$KVM_DIRTY_RING(&(0x7f0000ffc000/0x1000)=nil, 0x12f000, 0x3000004, 0x12, r0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x5, 0x0) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, 0x0, 0x0, 0x0) 2.134287586s ago: executing program 2 (id=1715): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b031200e2ff020002004788a04fa13bb1000011000088", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x120}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000000)={[{@i_version}, {@nobarrier}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8001) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x816084, &(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="74b2d836103d4e01d334c8e1ae4b339e11495f61b1ebc861f2d6f9b7fd1d18124a1d5b7d139360c3540aaff671c30bef3676646a060f9a62f854d64141b7d5695bdfc4e0c4ff294c0785ac0a0927f36b7e799328a7305ab15c79f20745b4730103ef72136209072454", @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRESOCT=r2, @ANYRES8], 0x2, 0x55e, &(0x7f0000001080)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) 2.051940728s ago: executing program 4 (id=1716): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 1.9790774s ago: executing program 4 (id=1717): timerfd_create(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.881830083s ago: executing program 4 (id=1718): r0 = syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") fallocate(r0, 0x2, 0x100000000, 0xe68) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x18ad414) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x100) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) stat(&(0x7f000001ff40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) mount$9p_rdma(&(0x7f000001fd00), &(0x7f000001fd40)='./file0\x00', &(0x7f000001fd80), 0x208880, &(0x7f000001fe80)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) 1.795997995s ago: executing program 3 (id=1719): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000015c0)="784116f2", 0x4178}], 0x1}, 0xa4}], 0x4000000000002cf, 0x0) 1.691933978s ago: executing program 2 (id=1720): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000005, 0x40010, 0xffffffffffffffff, 0xa2a6d000) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 1.492018873s ago: executing program 3 (id=1721): socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) keyctl$session_to_parent(0x12) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x200000, 0x62) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.385845775s ago: executing program 1 (id=1722): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 1.19682089s ago: executing program 1 (id=1723): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000000c00)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x37c, &(0x7f0000000880)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r1, 0x0, 0x4f) 1.091349983s ago: executing program 2 (id=1724): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0feffff7a0af0ff1100000079a4f0ff00000000b706000011000000ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000063000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130e6f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2ab050087ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d9649fcdce86a7f8b928a15cfec14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f43b17d0a4d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b5747932000574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f40700003fc5ffff006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda26a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc9d227b6b88295b65909d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000010749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d9b7b574a247f1d2fe45bed3b03b3b7bb431a2994a9973c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205378c9fbea532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d395811bc13d30053a97ad3055fe49b8dba30f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273463fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2845b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200000000000000000000000000000000f5f6005918fa97c1571b49b0455fd4855a2e0d4fee8c50d5bf93a61a2c852ce8eac060ab1fa761179cb33aa961ce5d2741e31a22a10e4cee7c0b93e092345a93becd8109750cab2aec6edf6b621d9bc301e37b055c16921a713d1c381ea1ca3955da38db227e1cef4811"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 945.645586ms ago: executing program 2 (id=1725): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(r2, &(0x7f0000004700)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r3, r2, r2, r0]}}], 0x78, 0x20000101}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f00000040c0), 0x0, &(0x7f0000004140)=ANY=[], 0xd8}}], 0x3, 0x0) 533.725926ms ago: executing program 4 (id=1726): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}]}}) 384.07565ms ago: executing program 4 (id=1727): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 383.60676ms ago: executing program 1 (id=1728): timerfd_create(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 313.832082ms ago: executing program 4 (id=1729): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 273.679473ms ago: executing program 1 (id=1730): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000100)=0x3) 120.936297ms ago: executing program 0 (id=1731): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7d194d5e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) fcntl$dupfd(r0, 0x406, r0) r1 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x22) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) socket(0x1, 0x5, 0x0) r5 = socket$inet6(0xa, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x4000801, 0x4, 0x4}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 0s ago: executing program 2 (id=1732): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) write$sndseq(r0, &(0x7f0000000240)=[{0x8, 0x5, 0x2e, 0x3, @tick=0x6, {0x4, 0x5}, {0x6, 0x1}, @quote={{0x39, 0x1}, 0x2, &(0x7f0000000140)={0x4, 0x7, 0x7f, 0x4, @time={0xffff1504, 0x9a1}, {0x1, 0x6}, {0xc, 0x7}, @time=@tick=0x2}}}, {0x8, 0x8, 0x8, 0x8, @tick=0x90000, {0xff, 0x8}, {0x9d, 0x60}, @time=@tick=0x4}, {0x9, 0x43, 0x9, 0x0, @time={0x800, 0xe87b}, {0x0, 0x4}, {0x6, 0x7f}, @connect={{0x1, 0x1}, {0x7, 0x8}}}, {0x5, 0x4, 0xe, 0x0, @time={0x4, 0x9}, {0x7f, 0x8}, {0x4, 0x5}, @queue={0x4, {0xfffffffe, 0xffffffff}}}, {0x4a, 0xc6, 0x85, 0xe1, @time={0x401, 0x7}, {0x5, 0x2}, {0xf6, 0xb7}, @ext={0x0, &(0x7f0000000180)}}, {0xff, 0xf8, 0x4, 0x0, @tick=0x900, {0x7f, 0xa}, {0xb, 0x6}, @raw32={[0x4, 0x3, 0x8e]}}], 0xa8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xe7) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:00/driver\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000180)='unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='00:00', 0x5) kernel console output (not intermixed with test programs): 04] [ 251.858528][ T7902] erofs: (device loop3): mounted with root inode @ nid 36. [ 252.029506][ T7904] loop2: detected capacity change from 0 to 512 [ 253.070901][ T7904] EXT4-fs (loop2): Ignoring removed nobh option [ 253.078666][ T7904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 253.085788][ T7904] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.982: corrupted inode contents [ 253.099867][ T7904] EXT4-fs (loop2): Remounting filesystem read-only [ 253.106507][ T7904] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 253.119106][ T7904] EXT4-fs (loop2): Remounting filesystem read-only [ 253.125740][ T7904] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.982: corrupted inode contents [ 253.137931][ T7904] EXT4-fs (loop2): Remounting filesystem read-only [ 253.144513][ T7904] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.982: mark_inode_dirty error [ 253.156076][ T7904] EXT4-fs (loop2): Remounting filesystem read-only [ 253.162655][ T7904] EXT4-fs (loop2): 1 orphan inode deleted [ 253.168537][ T7904] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 254.416254][ T7920] loop3: detected capacity change from 0 to 512 [ 254.487200][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 255.714818][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721144][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.951484][ T7930] bond1: (slave gre0): The slave device specified does not support setting the MAC address [ 255.995442][ T7940] loop2: detected capacity change from 0 to 64 [ 256.131971][ T7930] bond1: (slave gre0): Error -95 calling set_mac_address [ 256.395405][ T7945] netlink: 76 bytes leftover after parsing attributes in process `syz.4.994'. [ 256.404982][ T7940] hfs: unable to parse mount options [ 256.429470][ T7944] loop4: detected capacity change from 0 to 512 [ 256.567955][ T7940] loop2: detected capacity change from 0 to 512 [ 256.576847][ T7955] loop1: detected capacity change from 0 to 4096 [ 257.615248][ T7944] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.670769][ T7963] device syzkaller0 entered promiscuous mode [ 257.680687][ T7940] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 258.931376][ T7967] loop0: detected capacity change from 0 to 512 [ 258.952343][ T7955] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.971415][ T7940] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.992: corrupted inode contents [ 259.000296][ T7955] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 259.035911][ T7940] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #11: comm syz.2.992: mark_inode_dirty error [ 259.100573][ T7940] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.992: invalid indirect mapped block 1 (level 1) [ 260.328783][ T7976] loop4: detected capacity change from 0 to 512 [ 260.359378][ T7940] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.992: corrupted inode contents [ 260.390585][ T7980] loop3: detected capacity change from 0 to 512 [ 260.405732][ T7940] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 260.419225][ T7940] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.992: corrupted inode contents [ 260.431798][ T7940] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.992: mark_inode_dirty error [ 260.460746][ T7940] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 261.714287][ T7980] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.737919][ T7940] EXT4-fs (loop2): 1 truncate cleaned up [ 261.762249][ T7940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.774192][ T7980] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.998140][ T7989] device syzkaller0 entered promiscuous mode [ 264.311569][ T8016] loop2: detected capacity change from 0 to 16 [ 264.359020][ T8016] erofs: (device loop2): mounted with root inode @ nid 36. [ 264.534788][ T8013] device syzkaller0 entered promiscuous mode [ 264.701653][ T8034] loop1: detected capacity change from 0 to 64 [ 267.138072][ T8035] loop3: detected capacity change from 0 to 512 [ 267.176396][ T8034] hfs: unable to parse mount options [ 267.183895][ T8040] < [ 268.562956][ T8054] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1023'. [ 269.760303][ T8069] loop1: detected capacity change from 0 to 16 [ 269.798213][ T8065] device syzkaller0 entered promiscuous mode [ 269.814457][ T8070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1025'. [ 269.832916][ T8061] loop0: detected capacity change from 0 to 512 [ 269.851692][ T8069] erofs: (device loop1): mounted with root inode @ nid 36. [ 269.883319][ T8076] device syzkaller0 entered promiscuous mode [ 269.925623][ T8061] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.071648][ T8084] loop4: detected capacity change from 0 to 64 [ 272.055022][ T8084] hfs: unable to parse mount options [ 272.531756][ T8091] loop2: detected capacity change from 0 to 512 [ 272.683485][ T8084] loop4: detected capacity change from 0 to 512 [ 273.673125][ T8084] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 273.743675][ T8113] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1041'. [ 273.779338][ T8115] loop2: detected capacity change from 0 to 512 [ 273.798323][ T8084] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.1034: corrupted inode contents [ 273.837438][ T8084] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #11: comm syz.4.1034: mark_inode_dirty error [ 273.852322][ T8120] device syzkaller0 entered promiscuous mode [ 273.870609][ T8084] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1034: invalid indirect mapped block 1 (level 1) [ 275.072894][ T8121] device syzkaller0 entered promiscuous mode [ 275.118624][ T8122] loop0: detected capacity change from 0 to 16 [ 275.131860][ T8084] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.1034: corrupted inode contents [ 275.155304][ T8084] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 275.196650][ T8084] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.1034: corrupted inode contents [ 275.213101][ T8122] erofs: (device loop0): mounted with root inode @ nid 36. [ 275.224244][ T8084] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.1034: mark_inode_dirty error [ 275.250974][ T8127] device syzkaller0 entered promiscuous mode [ 275.286084][ T8084] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 275.352180][ T8084] EXT4-fs (loop4): 1 truncate cleaned up [ 275.367819][ T8131] FAULT_INJECTION: forcing a failure. [ 275.367819][ T8131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.381211][ T8131] CPU: 0 PID: 8131 Comm: syz.3.1048 Not tainted syzkaller #0 [ 275.388568][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.398620][ T8131] Call Trace: [ 275.401886][ T8131] [ 275.404807][ T8131] dump_stack_lvl+0x188/0x250 [ 275.409484][ T8131] ? show_regs_print_info+0x20/0x20 [ 275.414659][ T8131] ? load_image+0x410/0x410 [ 275.419165][ T8131] ? uncharge_page+0x490/0x490 [ 275.423903][ T8131] should_fail+0x383/0x4b0 [ 275.428315][ T8131] prepare_alloc_pages+0x1e3/0x5b0 [ 275.433607][ T8131] __alloc_pages+0x11b/0x480 [ 275.438176][ T8131] ? zone_statistics+0x170/0x170 [ 275.443105][ T8131] ? rcu_lock_acquire+0x30/0x30 [ 275.447940][ T8131] ? alloc_pages+0x452/0x560 [ 275.452529][ T8131] __get_free_pages+0x8/0x30 [ 275.457096][ T8131] __tlb_remove_page_size+0x1f2/0x3f0 [ 275.462449][ T8131] unmap_page_range+0xfcf/0x2410 [ 275.467397][ T8131] unmap_vmas+0x131/0x250 [ 275.471735][ T8131] ? unmap_page_range+0x2410/0x2410 [ 275.476910][ T8131] ? __mutex_lock_common+0x435/0x2400 [ 275.482273][ T8131] ? exit_mm_release+0x16/0x30 [ 275.487029][ T8131] exit_mmap+0x3b9/0x640 [ 275.491278][ T8131] ? vm_brk+0x20/0x20 [ 275.495256][ T8131] ? uprobe_clear_state+0x2f6/0x460 [ 275.500447][ T8131] __mmput+0x115/0x390 [ 275.504503][ T8131] exit_mm+0x632/0x7b0 [ 275.508566][ T8131] ? perf_pmu_migrate_context+0xb70/0xb70 [ 275.514281][ T8131] ? do_exit+0x2110/0x2110 [ 275.518671][ T8131] ? __ia32_sys_timer_delete+0x40/0x40 [ 275.524107][ T8131] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 275.529552][ T8131] ? tty_audit_exit+0x149/0x1f0 [ 275.534422][ T8131] do_exit+0x5b8/0x2110 [ 275.538579][ T8131] ? put_task_struct+0x80/0x80 [ 275.543321][ T8131] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 275.549301][ T8131] ? _raw_spin_lock_irq+0xb7/0xf0 [ 275.554338][ T8131] do_group_exit+0x12c/0x2f0 [ 275.558921][ T8131] ? lockdep_hardirqs_on+0x94/0x140 [ 275.564103][ T8131] get_signal+0x7eb/0x12e0 [ 275.568519][ T8131] arch_do_signal_or_restart+0xe6/0x12a0 [ 275.574156][ T8131] ? futex_exit_release+0x1c0/0x1c0 [ 275.579332][ T8131] ? get_sigframe_size+0x10/0x10 [ 275.584242][ T8131] ? __context_tracking_exit+0x4c/0x80 [ 275.589683][ T8131] ? exit_to_user_mode_loop+0x3b/0x130 [ 275.595126][ T8131] exit_to_user_mode_loop+0x9e/0x130 [ 275.600394][ T8131] exit_to_user_mode_prepare+0xee/0x180 [ 275.605920][ T8131] syscall_exit_to_user_mode+0x16/0x40 [ 275.611377][ T8131] do_syscall_64+0x58/0xa0 [ 275.615786][ T8131] ? clear_bhb_loop+0x30/0x80 [ 275.620462][ T8131] ? clear_bhb_loop+0x30/0x80 [ 275.625123][ T8131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.631013][ T8131] RIP: 0033:0x7f336209f1d9 [ 275.635411][ T8131] Code: Unable to access opcode bytes at RIP 0x7f336209f1af. [ 275.642769][ T8131] RSP: 002b:00007f33602f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.651157][ T8131] RAX: 0000000000000001 RBX: 00007f3362326fa8 RCX: 00007f336209f1d9 [ 275.659118][ T8131] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3362326fac [ 275.667084][ T8131] RBP: 00007f3362326fa0 R08: 0012cf6c32eead94 R09: 0000000000000000 [ 275.675074][ T8131] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 275.683026][ T8131] R13: 00007f3362327038 R14: 00007ffc7a319bd0 R15: 00007ffc7a319cb8 [ 275.690985][ T8131] [ 275.716205][ T8084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.780036][ T8138] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 277.029262][ T8145] FAULT_INJECTION: forcing a failure. [ 277.029262][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 277.106723][ T8145] CPU: 0 PID: 8145 Comm: syz.4.1052 Not tainted syzkaller #0 [ 277.114124][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.124185][ T8145] Call Trace: [ 277.127472][ T8145] [ 277.130403][ T8145] dump_stack_lvl+0x188/0x250 [ 277.135093][ T8145] ? show_regs_print_info+0x20/0x20 [ 277.140294][ T8145] ? load_image+0x410/0x410 [ 277.144781][ T8145] ? __might_sleep+0xf0/0xf0 [ 277.149349][ T8145] ? __lock_acquire+0x7d40/0x7d40 [ 277.154349][ T8145] should_fail+0x383/0x4b0 [ 277.158745][ T8145] should_failslab+0x5/0x20 [ 277.163225][ T8145] slab_pre_alloc_hook+0x51/0xc0 [ 277.168145][ T8145] __kmalloc_node+0x6d/0x3a0 [ 277.172737][ T8145] ? kvmalloc_node+0x84/0x130 [ 277.177410][ T8145] kvmalloc_node+0x84/0x130 [ 277.181909][ T8145] listxattr+0x4c/0x2e0 [ 277.186043][ T8145] __x64_sys_flistxattr+0x128/0x1a0 [ 277.191226][ T8145] do_syscall_64+0x4c/0xa0 [ 277.195619][ T8145] ? clear_bhb_loop+0x30/0x80 [ 277.200291][ T8145] ? clear_bhb_loop+0x30/0x80 [ 277.204944][ T8145] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.210812][ T8145] RIP: 0033:0x7ff117de41d9 [ 277.215222][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.234819][ T8145] RSP: 002b:00007ff11603c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 277.243215][ T8145] RAX: ffffffffffffffda RBX: 00007ff11806bfa0 RCX: 00007ff117de41d9 [ 277.251179][ T8145] RDX: 000000000000001a RSI: 00002000000000c0 RDI: 0000000000000004 [ 277.259132][ T8145] RBP: 00007ff117e7b888 R08: 0000000000000000 R09: 0000000000000000 [ 277.267083][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.275048][ T8145] R13: 00007ff11806c038 R14: 00007ff11806bfa0 R15: 00007ffcd2edf998 [ 277.283015][ T8145] [ 277.288266][ T8152] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1056'. [ 277.310980][ T8155] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1055'. [ 277.325102][ T8147] loop2: detected capacity change from 0 to 512 [ 277.380648][ T8157] device syzkaller0 entered promiscuous mode [ 277.421353][ T8147] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.583134][ T8161] device syzkaller0 entered promiscuous mode [ 277.664811][ T8141] loop1: detected capacity change from 0 to 40427 [ 278.846688][ T8165] loop2: detected capacity change from 0 to 16 [ 278.873810][ T8165] erofs: (device loop2): mounted with root inode @ nid 36. [ 278.931140][ T8141] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 278.946471][ T8141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 278.961725][ T8170] loop4: detected capacity change from 0 to 64 [ 279.020508][ T8171] device syzkaller0 entered promiscuous mode [ 279.027104][ T8141] F2FS-fs (loop1): invalid crc value [ 279.066095][ T8141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.054032][ T8170] hfs: unable to parse mount options [ 280.335441][ T8179] loop0: detected capacity change from 0 to 512 [ 280.397983][ T8170] loop4: detected capacity change from 0 to 512 [ 281.659522][ T8170] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 281.689229][ T8170] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.1062: corrupted inode contents [ 281.724651][ T8193] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1068'. [ 281.838888][ T8198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.846878][ T8198] IPv6: NLM_F_CREATE should be set when creating new route [ 281.874493][ T8170] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #11: comm syz.4.1062: mark_inode_dirty error [ 281.896624][ T8170] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1062: invalid indirect mapped block 1 (level 1) [ 281.910658][ T8196] device syzkaller0 entered promiscuous mode [ 281.953300][ T8200] device syzkaller0 entered promiscuous mode [ 281.972976][ T8170] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.1062: corrupted inode contents [ 282.035572][ T8170] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 282.169251][ T8170] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.1062: corrupted inode contents [ 283.213327][ T8170] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.1062: mark_inode_dirty error [ 283.264332][ T8220] device syzkaller0 entered promiscuous mode [ 283.277250][ T8170] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 283.316534][ T8170] EXT4-fs (loop4): 1 truncate cleaned up [ 283.332407][ T8170] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.509622][ T8227] loop3: detected capacity change from 0 to 512 [ 285.849553][ T8239] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1083'. [ 285.897090][ T8234] loop2: detected capacity change from 0 to 512 [ 285.944295][ T8246] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1084'. [ 286.006943][ T8248] device syzkaller0 entered promiscuous mode [ 286.031558][ T8234] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.392381][ T8264] device syzkaller0 entered promiscuous mode [ 287.482079][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 287.491529][ T8272] loop1: detected capacity change from 0 to 64 [ 287.514745][ T8271] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8274] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8271] [ 287.533487][ T8271] binder: 8270:8271 ioctl c0306201 0 returned -14 [ 287.540754][ T8271] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8274] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8271] [ 287.559701][ T8271] loop2: detected capacity change from 0 to 512 [ 287.607973][ T8272] hfs: unable to parse mount options [ 287.634852][ T8271] EXT4-fs (loop2): Ignoring removed nobh option [ 287.643546][ T8271] EXT4-fs (loop2): orphan cleanup on readonly fs [ 287.650215][ T8271] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1092: corrupted inode contents [ 287.682621][ T8271] EXT4-fs (loop2): Remounting filesystem read-only [ 287.689306][ T8271] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 288.891737][ T8278] loop0: detected capacity change from 0 to 512 [ 288.905395][ T8271] EXT4-fs (loop2): Remounting filesystem read-only [ 288.911955][ T8271] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1092: corrupted inode contents [ 288.924241][ T8271] EXT4-fs (loop2): Remounting filesystem read-only [ 288.930818][ T8271] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.1092: mark_inode_dirty error [ 288.942897][ T8271] EXT4-fs (loop2): Remounting filesystem read-only [ 288.949551][ T8271] EXT4-fs (loop2): 1 orphan inode deleted [ 288.955349][ T8271] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 288.985367][ T8272] loop1: detected capacity change from 0 to 512 [ 289.047391][ T8282] device syzkaller0 entered promiscuous mode [ 289.161631][ T8272] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 289.199180][ T8272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.1093: corrupted inode contents [ 289.220372][ T8288] device syzkaller0 entered promiscuous mode [ 290.424557][ T8272] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #11: comm syz.1.1093: mark_inode_dirty error [ 290.446594][ T8295] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1098'. [ 290.473325][ T8272] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1093: invalid indirect mapped block 1 (level 1) [ 290.660386][ T8272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.1093: corrupted inode contents [ 291.705378][ T8272] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 291.803041][ T8272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.1093: corrupted inode contents [ 291.837858][ T8317] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8320] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8317] [ 291.855336][ T8317] binder: 8315:8317 ioctl c0306201 0 returned -14 [ 291.862360][ T8317] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8320] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8317] [ 291.880257][ T8317] loop0: detected capacity change from 0 to 512 [ 291.907121][ T8272] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.1093: mark_inode_dirty error [ 291.931968][ T8319] device syzkaller0 entered promiscuous mode [ 291.949779][ T8272] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 291.974294][ T8317] EXT4-fs (loop0): Ignoring removed nobh option [ 292.001432][ T8317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 292.011832][ T8317] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1106: corrupted inode contents [ 292.029960][ T8317] EXT4-fs (loop0): Remounting filesystem read-only [ 292.037114][ T8317] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 292.046119][ T8272] EXT4-fs (loop1): 1 truncate cleaned up [ 292.051790][ T8317] EXT4-fs (loop0): Remounting filesystem read-only [ 292.058440][ T8317] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1106: corrupted inode contents [ 292.070868][ T8317] EXT4-fs (loop0): Remounting filesystem read-only [ 292.077453][ T8317] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1106: mark_inode_dirty error [ 292.089165][ T8317] EXT4-fs (loop0): Remounting filesystem read-only [ 292.095820][ T8317] EXT4-fs (loop0): 1 orphan inode deleted [ 292.101561][ T8317] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 292.158587][ T8272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.694739][ T8331] loop1: detected capacity change from 0 to 164 [ 292.718162][ T8332] loop3: detected capacity change from 0 to 512 [ 292.809028][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 292.818336][ T8332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.866957][ T8332] EXT4-fs (loop3): 1 truncate cleaned up [ 292.879919][ T8332] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 292.963704][ T8313] loop4: detected capacity change from 0 to 40427 [ 294.091506][ T8313] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 294.340185][ T8313] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 294.373749][ T8340] device syzkaller0 entered promiscuous mode [ 294.385142][ T8313] F2FS-fs (loop4): invalid crc value [ 294.481165][ T8313] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.820053][ T8364] loop1: detected capacity change from 0 to 64 [ 295.834845][ T8363] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8367] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8363] [ 295.850591][ T8363] binder: 8361:8363 ioctl c0306201 0 returned -14 [ 295.859386][ T8363] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8367] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8363] [ 295.880222][ T8363] loop0: detected capacity change from 0 to 512 [ 295.939424][ T8364] hfs: unable to parse mount options [ 295.945812][ T8363] EXT4-fs (loop0): Ignoring removed nobh option [ 296.010912][ T8363] EXT4-fs (loop0): orphan cleanup on readonly fs [ 296.020588][ T8363] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1119: corrupted inode contents [ 296.057959][ T8363] EXT4-fs (loop0): Remounting filesystem read-only [ 296.064677][ T8363] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 296.076540][ T8363] EXT4-fs (loop0): Remounting filesystem read-only [ 296.083086][ T8363] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1119: corrupted inode contents [ 296.096126][ T8363] EXT4-fs (loop0): Remounting filesystem read-only [ 296.102648][ T8363] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1119: mark_inode_dirty error [ 296.114580][ T8363] EXT4-fs (loop0): Remounting filesystem read-only [ 296.121192][ T8363] EXT4-fs (loop0): 1 orphan inode deleted [ 296.127092][ T8363] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 296.262443][ T8383] loop1: detected capacity change from 0 to 128 [ 299.084002][ T8403] loop4: detected capacity change from 0 to 764 [ 299.227223][ T8398] loop0: detected capacity change from 0 to 512 [ 300.405226][ T8403] Symlink component flag not implemented [ 300.437850][ T8403] Symlink component flag not implemented [ 300.447108][ T8409] loop3: detected capacity change from 0 to 4096 [ 300.454298][ T8416] loop1: detected capacity change from 0 to 64 [ 300.631443][ T8409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.656393][ T8418] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8424] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8418] [ 300.670919][ T8418] binder: 8417:8418 ioctl c0306201 0 returned -14 [ 300.677824][ T8416] hfs: unable to parse mount options [ 300.692394][ T8418] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8424] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8418] [ 300.728789][ T8418] loop4: detected capacity change from 0 to 512 [ 300.736952][ T25] audit: type=1800 audit(1791511791.429:184): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 300.768336][ T25] audit: type=1804 audit(1791511791.459:185): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1133" name=2F6E6577726F6F742F3237332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop3" ino=15 res=1 errno=0 [ 300.812980][ T25] audit: type=1800 audit(1791511791.459:186): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 300.849132][ T8418] EXT4-fs (loop4): Ignoring removed nobh option [ 300.920421][ T8418] EXT4-fs (loop4): orphan cleanup on readonly fs [ 300.929602][ T8418] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1135: corrupted inode contents [ 300.962623][ T8418] EXT4-fs (loop4): Remounting filesystem read-only [ 300.969484][ T8418] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 300.978463][ T8418] EXT4-fs (loop4): Remounting filesystem read-only [ 300.985040][ T8418] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1135: corrupted inode contents [ 300.997662][ T8418] EXT4-fs (loop4): Remounting filesystem read-only [ 301.004174][ T8418] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.1135: mark_inode_dirty error [ 301.015867][ T8418] EXT4-fs (loop4): Remounting filesystem read-only [ 301.022435][ T8418] EXT4-fs (loop4): 1 orphan inode deleted [ 301.028272][ T8418] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 301.534168][ T25] audit: type=1326 audit(1791511792.219:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.1.1138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbee3c1d9 code=0x7ffc0000 [ 301.563448][ T25] audit: type=1326 audit(1791511792.219:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.1.1138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbee3c1d9 code=0x7ffc0000 [ 301.593234][ T25] audit: type=1326 audit(1791511792.229:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.1.1138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9fbee3c1d9 code=0x7ffc0000 [ 301.624555][ T25] audit: type=1326 audit(1791511792.229:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.1.1138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9fbee3c1d9 code=0x7ffc0000 [ 301.712958][ T8407] loop2: detected capacity change from 0 to 40427 [ 301.817570][ T8407] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 303.070844][ T8407] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 303.146901][ T8452] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1144'. [ 303.167804][ T8407] F2FS-fs (loop2): invalid crc value [ 303.187798][ T8407] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 304.465398][ T8458] loop4: detected capacity change from 0 to 512 [ 304.593207][ T8462] loop1: detected capacity change from 0 to 64 [ 304.729733][ T8462] hfs: unable to parse mount options [ 304.874992][ T8466] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8467] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8466] [ 304.903203][ T8466] binder: 8465:8466 ioctl c0306201 0 returned -14 [ 304.911381][ T8466] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8467] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8466] [ 304.927674][ T8466] loop4: detected capacity change from 0 to 512 [ 304.963475][ T8471] FAULT_INJECTION: forcing a failure. [ 304.963475][ T8471] name failslab, interval 1, probability 0, space 0, times 0 [ 305.031500][ T8471] CPU: 0 PID: 8471 Comm: syz.1.1151 Not tainted syzkaller #0 [ 305.038914][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.048977][ T8471] Call Trace: [ 305.052264][ T8471] [ 305.055200][ T8471] dump_stack_lvl+0x188/0x250 [ 305.059893][ T8471] ? show_regs_print_info+0x20/0x20 [ 305.065110][ T8471] ? load_image+0x410/0x410 [ 305.069604][ T8471] ? __might_sleep+0xf0/0xf0 [ 305.074183][ T8471] ? __lock_acquire+0x7d40/0x7d40 [ 305.079199][ T8471] should_fail+0x383/0x4b0 [ 305.083610][ T8471] should_failslab+0x5/0x20 [ 305.088098][ T8471] slab_pre_alloc_hook+0x51/0xc0 [ 305.093109][ T8471] __kmalloc_node+0x6d/0x3a0 [ 305.097683][ T8471] ? kvmalloc_node+0x84/0x130 [ 305.102348][ T8471] kvmalloc_node+0x84/0x130 [ 305.106835][ T8471] xt_alloc_table_info+0x37/0xa0 [ 305.111763][ T8471] do_ipt_set_ctl+0x868/0xd70 [ 305.116430][ T8471] ? nf_setsockopt+0x218/0x280 [ 305.121180][ T8471] ? ipt_unregister_table_exit+0x220/0x220 [ 305.126972][ T8471] ? __lock_acquire+0x7d40/0x7d40 [ 305.131982][ T8471] ? __mutex_lock_common+0x435/0x2400 [ 305.137347][ T8471] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 305.142986][ T8471] ? mutex_unlock+0x10/0x10 [ 305.147475][ T8471] ? __local_bh_enable_ip+0x136/0x1c0 [ 305.152832][ T8471] ? lockdep_hardirqs_on+0x94/0x140 [ 305.158020][ T8471] ? __local_bh_enable_ip+0x136/0x1c0 [ 305.163377][ T8471] nf_setsockopt+0x25f/0x280 [ 305.167965][ T8471] ip_setsockopt+0x29c3/0x31e0 [ 305.172722][ T8471] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 305.178090][ T8471] ? __might_sleep+0xf0/0xf0 [ 305.182676][ T8471] ? rcu_lock_release+0x9/0x20 [ 305.187428][ T8471] tcp_setsockopt+0x229/0x1e60 [ 305.192183][ T8471] ? aa_sk_perm+0x7dc/0x910 [ 305.196676][ T8471] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 305.202035][ T8471] ? aa_af_perm+0x340/0x340 [ 305.206523][ T8471] ? __fget_files+0x402/0x470 [ 305.211191][ T8471] ? aa_sock_opt_perm+0x74/0x100 [ 305.216115][ T8471] ? sock_common_setsockopt+0x32/0xb0 [ 305.221473][ T8471] ? sock_common_recvmsg+0x1c0/0x1c0 [ 305.226742][ T8471] __sys_setsockopt+0x2bf/0x3d0 [ 305.231590][ T8471] __x64_sys_setsockopt+0xb1/0xc0 [ 305.236618][ T8471] do_syscall_64+0x4c/0xa0 [ 305.241025][ T8471] ? clear_bhb_loop+0x30/0x80 [ 305.245691][ T8471] ? clear_bhb_loop+0x30/0x80 [ 305.250367][ T8471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.256257][ T8471] RIP: 0033:0x7f9fbee3c1d9 [ 305.260665][ T8471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.280346][ T8471] RSP: 002b:00007f9fbd094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.288748][ T8471] RAX: ffffffffffffffda RBX: 00007f9fbf0c3fa0 RCX: 00007f9fbee3c1d9 [ 305.296705][ T8471] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.304662][ T8471] RBP: 00007f9fbeed3888 R08: 00000000000002c0 R09: 0000000000000000 [ 305.312619][ T8471] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.320576][ T8471] R13: 00007f9fbf0c4038 R14: 00007f9fbf0c3fa0 R15: 00007fff6b3ac2d8 [ 305.328544][ T8471] [ 305.393547][ T8450] loop3: detected capacity change from 0 to 32768 [ 305.403445][ T8466] EXT4-fs (loop4): Ignoring removed nobh option [ 305.411209][ T8466] EXT4-fs (loop4): orphan cleanup on readonly fs [ 305.418285][ T8466] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1150: corrupted inode contents [ 305.431023][ T8466] EXT4-fs (loop4): Remounting filesystem read-only [ 305.437653][ T8466] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 305.448969][ T8466] EXT4-fs (loop4): Remounting filesystem read-only [ 305.455591][ T8466] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1150: corrupted inode contents [ 305.468243][ T8466] EXT4-fs (loop4): Remounting filesystem read-only [ 305.474851][ T8466] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.1150: mark_inode_dirty error [ 305.486737][ T8466] EXT4-fs (loop4): Remounting filesystem read-only [ 305.493305][ T8466] EXT4-fs (loop4): 1 orphan inode deleted [ 305.499101][ T8466] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 307.068612][ T8450] XFS (loop3): Mounting V5 Filesystem [ 307.299494][ T8487] loop2: detected capacity change from 0 to 16 [ 307.314602][ T8450] XFS (loop3): log mount failed [ 308.540264][ T8487] erofs: (device loop2): mounted with root inode @ nid 36. [ 308.551733][ T8497] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1158'. [ 308.577590][ T8493] loop4: detected capacity change from 0 to 512 [ 309.870811][ T8502] loop1: detected capacity change from 0 to 512 [ 309.890844][ T8493] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.961667][ T8505] loop0: detected capacity change from 0 to 64 [ 310.035502][ T8505] hfs: unable to parse mount options [ 310.125965][ T8505] loop0: detected capacity change from 0 to 512 [ 310.258694][ T8505] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 310.310575][ T8514] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8519] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8514] [ 310.332328][ T8514] binder: 8513:8514 ioctl c0306201 0 returned -14 [ 310.339289][ T8514] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8519] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8514] [ 310.360010][ T8514] loop1: detected capacity change from 0 to 512 [ 310.371767][ T8505] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1162: corrupted inode contents [ 310.409022][ T8514] EXT4-fs (loop1): Ignoring removed nobh option [ 310.424810][ T8505] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #11: comm syz.0.1162: mark_inode_dirty error [ 310.437687][ T8514] EXT4-fs (loop1): orphan cleanup on readonly fs [ 310.450542][ T8514] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1166: corrupted inode contents [ 310.471517][ T8514] EXT4-fs (loop1): Remounting filesystem read-only [ 310.478175][ T8514] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 310.487201][ T8514] EXT4-fs (loop1): Remounting filesystem read-only [ 310.493716][ T8514] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1166: corrupted inode contents [ 310.506115][ T8514] EXT4-fs (loop1): Remounting filesystem read-only [ 310.512615][ T8514] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.1166: mark_inode_dirty error [ 310.524357][ T8514] EXT4-fs (loop1): Remounting filesystem read-only [ 310.531005][ T8514] EXT4-fs (loop1): 1 orphan inode deleted [ 310.536886][ T8514] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 310.661374][ T8505] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1162: invalid indirect mapped block 1 (level 1) [ 310.722288][ T8505] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1162: corrupted inode contents [ 310.768257][ T8505] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 310.791023][ T8505] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.1162: corrupted inode contents [ 310.805712][ T8505] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.1162: mark_inode_dirty error [ 310.817892][ T8505] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 310.827335][ T8505] EXT4-fs (loop0): 1 truncate cleaned up [ 312.082822][ T8505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.253407][ T8543] loop3: detected capacity change from 0 to 16 [ 313.262139][ T8550] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1175'. [ 313.294630][ T8550] loop4: detected capacity change from 0 to 512 [ 313.337288][ T8543] erofs: (device loop3): mounted with root inode @ nid 36. [ 313.370093][ T8550] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.697806][ T8559] loop1: detected capacity change from 0 to 512 [ 314.824162][ T8562] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8566] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8562] [ 314.852726][ T8562] binder: 8558:8562 ioctl c0306201 0 returned -14 [ 314.859918][ T8562] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8566] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8562] [ 314.880131][ T8562] loop0: detected capacity change from 0 to 512 [ 314.986834][ T8562] EXT4-fs (loop0): Ignoring removed nobh option [ 315.005580][ T8562] EXT4-fs (loop0): orphan cleanup on readonly fs [ 315.013996][ T8562] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1180: corrupted inode contents [ 315.027149][ T8562] EXT4-fs (loop0): Remounting filesystem read-only [ 315.033686][ T8562] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 315.044268][ T8562] EXT4-fs (loop0): Remounting filesystem read-only [ 315.051188][ T8562] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1180: corrupted inode contents [ 315.063866][ T8562] EXT4-fs (loop0): Remounting filesystem read-only [ 315.070470][ T8562] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.1180: mark_inode_dirty error [ 315.082271][ T8562] EXT4-fs (loop0): Remounting filesystem read-only [ 315.088868][ T8562] EXT4-fs (loop0): 1 orphan inode deleted [ 315.094721][ T8562] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 315.142697][ T8570] WARNING! power/level is deprecated; use power/control instead [ 315.184820][ T8575] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1184'. [ 315.228532][ T8579] loop4: detected capacity change from 0 to 64 [ 315.306755][ T8548] loop2: detected capacity change from 0 to 32768 [ 316.513253][ T8579] hfs: unable to parse mount options [ 316.966927][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.969700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.973229][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.894224][ T8594] loop1: detected capacity change from 0 to 16 [ 317.902304][ T8595] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1190'. [ 317.957333][ T8594] erofs: (device loop1): mounted with root inode @ nid 36. [ 317.979429][ T8600] tmpfs: Unknown parameter 'noswap' [ 317.985623][ T8592] loop2: detected capacity change from 0 to 512 [ 319.087103][ T8592] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.403598][ T8610] loop3: detected capacity change from 0 to 512 [ 319.439169][ T8608] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8616] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8608] [ 319.456288][ T8608] binder: 8607:8608 ioctl c0306201 0 returned -14 [ 319.467049][ T8608] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8616] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8608] [ 319.481561][ T8618] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1198'. [ 319.497827][ T8608] loop4: detected capacity change from 0 to 512 [ 319.543340][ T8608] EXT4-fs (loop4): Ignoring removed nobh option [ 319.606292][ T8608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.614732][ T8608] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1196: corrupted inode contents [ 319.645379][ T8608] EXT4-fs (loop4): Remounting filesystem read-only [ 319.651922][ T8608] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 319.660930][ T8608] EXT4-fs (loop4): Remounting filesystem read-only [ 319.667534][ T8608] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1196: corrupted inode contents [ 319.679853][ T8608] EXT4-fs (loop4): Remounting filesystem read-only [ 319.686463][ T8608] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.1196: mark_inode_dirty error [ 319.698228][ T8608] EXT4-fs (loop4): Remounting filesystem read-only [ 319.704905][ T8608] EXT4-fs (loop4): 1 orphan inode deleted [ 319.710653][ T8608] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 319.787589][ T8627] loop0: detected capacity change from 0 to 512 [ 321.038154][ T8627] EXT4-fs (loop0): Ignoring removed nobh option [ 321.079498][ T8627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 321.179926][ T8627] EXT4-fs (loop0): 1 truncate cleaned up [ 321.192860][ T8627] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 321.742444][ T8637] loop4: detected capacity change from 0 to 512 [ 321.930622][ T8637] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 321.946872][ T8637] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.128744][ T8621] loop1: detected capacity change from 0 to 32768 [ 322.204219][ T8650] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1209'. [ 322.254165][ T8647] loop0: detected capacity change from 0 to 512 [ 322.276302][ T8626] loop2: detected capacity change from 0 to 32768 [ 322.332537][ T8621] XFS (loop1): Mounting V5 Filesystem [ 322.396908][ T8647] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.435389][ T25] audit: type=1326 audit(1791511813.129:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.446631][ T8665] FAULT_INJECTION: forcing a failure. [ 322.446631][ T8665] name fail_futex, interval 1, probability 0, space 0, times 0 [ 322.503644][ T8621] XFS (loop1): Ending clean mount [ 322.510427][ T8626] XFS (loop2): Mounting V5 Filesystem [ 322.584546][ T25] audit: type=1326 audit(1791511813.129:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.600473][ T8665] CPU: 0 PID: 8665 Comm: syz.3.1211 Not tainted syzkaller #0 [ 322.615990][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.626046][ T8665] Call Trace: [ 322.629318][ T8665] [ 322.632239][ T8665] dump_stack_lvl+0x188/0x250 [ 322.636908][ T8665] ? kasan_set_track+0x4b/0x70 [ 322.641660][ T8665] ? show_regs_print_info+0x20/0x20 [ 322.646845][ T8665] ? load_image+0x410/0x410 [ 322.651346][ T8665] should_fail+0x383/0x4b0 [ 322.655754][ T8665] get_futex_key+0x1a1/0x12d0 [ 322.660423][ T8665] ? futex_wait_restart+0x250/0x250 [ 322.665618][ T8665] futex_wake+0x101/0x540 [ 322.669942][ T8665] ? futex_wait+0x680/0x680 [ 322.674430][ T8665] ? kmem_cache_free+0x14c/0x210 [ 322.679360][ T8665] do_futex+0xd83/0x12b0 [ 322.683594][ T8665] ? __secure_computing+0x2f0/0x2f0 [ 322.688784][ T8665] ? futex_exit_release+0x1c0/0x1c0 [ 322.693974][ T8665] ? __context_tracking_exit+0x4c/0x80 [ 322.699421][ T8665] __se_sys_futex+0x389/0x420 [ 322.704088][ T8665] ? __x64_sys_futex+0xf0/0xf0 [ 322.708841][ T8665] ? __x64_sys_futex+0x1d/0xf0 [ 322.713594][ T8665] do_syscall_64+0x4c/0xa0 [ 322.717995][ T8665] ? clear_bhb_loop+0x30/0x80 [ 322.722659][ T8665] ? clear_bhb_loop+0x30/0x80 [ 322.727324][ T8665] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.733202][ T8665] RIP: 0033:0x7f336209f1d9 [ 322.737606][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.757197][ T8665] RSP: 002b:00007f33602f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 322.765599][ T8665] RAX: ffffffffffffffda RBX: 00007f3362326fa8 RCX: 00007f336209f1d9 [ 322.773554][ T8665] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3362326fac [ 322.781519][ T8665] RBP: 00007f3362326fa0 R08: 00182cb8b27dae58 R09: 0000000000000000 [ 322.789475][ T8665] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 322.797431][ T8665] R13: 00007f3362327038 R14: 00007ffc7a319bd0 R15: 00007ffc7a319cb8 [ 322.805398][ T8665] [ 322.820243][ T8626] XFS (loop2): Ending clean mount [ 322.833979][ T25] audit: type=1326 audit(1791511813.129:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.864523][ T25] audit: type=1326 audit(1791511813.129:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.894623][ T25] audit: type=1326 audit(1791511813.139:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.924585][ T25] audit: type=1326 audit(1791511813.139:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.949469][ T4192] XFS (loop2): Unmounting Filesystem [ 322.954166][ T25] audit: type=1326 audit(1791511813.139:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 322.984383][ T25] audit: type=1326 audit(1791511813.139:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 323.019791][ T25] audit: type=1326 audit(1791511813.139:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 323.046624][ T4186] XFS (loop1): Unmounting Filesystem [ 323.049436][ T25] audit: type=1326 audit(1791511813.139:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.3.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 323.105634][ T8675] loop0: detected capacity change from 0 to 512 [ 324.707046][ T8679] loop4: detected capacity change from 0 to 16 [ 324.843091][ T8679] erofs: (device loop4): mounted with root inode @ nid 36. [ 325.087126][ T8688] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1213'. [ 326.374502][ T8690] device syzkaller0 entered promiscuous mode [ 326.479797][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1220'. [ 326.608039][ T8707] device syzkaller0 entered promiscuous mode [ 327.824860][ T8710] overlayfs: overlapping lowerdir path [ 327.857587][ T8710] loop1: detected capacity change from 0 to 512 [ 328.341372][ T8722] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1226'. [ 328.360742][ T8723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1227'. [ 328.383203][ T8715] loop4: detected capacity change from 0 to 512 [ 328.511184][ T8715] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.995094][ T8740] device syzkaller0 entered promiscuous mode [ 331.249660][ T8750] overlayfs: overlapping lowerdir path [ 331.258888][ T8750] loop1: detected capacity change from 0 to 512 [ 331.271499][ T8757] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1238'. [ 332.522969][ T8763] overlayfs: overlapping lowerdir path [ 332.564954][ T8766] loop2: detected capacity change from 0 to 256 [ 332.579208][ T8768] loop4: detected capacity change from 0 to 512 [ 332.643077][ T8773] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1243'. [ 332.656365][ T8766] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.691300][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 332.705910][ T8773] loop3: detected capacity change from 0 to 512 [ 332.752800][ T8776] device syzkaller0 entered promiscuous mode [ 332.775293][ T8773] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.194359][ T8788] loop3: detected capacity change from 0 to 512 [ 334.307993][ T8788] EXT4-fs (loop3): Ignoring removed oldalloc option [ 334.325701][ T8788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 334.345986][ T8790] device syzkaller0 entered promiscuous mode [ 334.367681][ T8797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1252'. [ 334.377822][ T8788] EXT4-fs (loop3): 1 truncate cleaned up [ 334.412988][ T8788] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 335.765033][ T8812] overlayfs: overlapping lowerdir path [ 335.793091][ T8813] device syzkaller0 entered promiscuous mode [ 335.810168][ T8807] loop2: detected capacity change from 0 to 512 [ 337.008150][ T8818] overlayfs: overlapping lowerdir path [ 337.034464][ T8818] loop3: detected capacity change from 0 to 512 [ 337.057172][ T8820] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1259'. [ 337.082819][ T8822] loop4: detected capacity change from 0 to 512 [ 337.232425][ T8822] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.274373][ T8830] raw_sendmsg: syz.2.1262 forgot to set AF_INET. Fix it! [ 338.522210][ T8835] loop0: detected capacity change from 0 to 512 [ 338.578892][ T8839] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1265'. [ 338.672968][ T8835] EXT4-fs (loop0): Ignoring removed nobh option [ 338.693983][ T8835] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 338.706642][ T8835] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1264: attempt to clear invalid blocks 1 len 1 [ 338.738011][ T8843] device syzkaller0 entered promiscuous mode [ 338.745222][ T8835] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 338.769972][ T8847] device syzkaller0 entered promiscuous mode [ 338.786975][ T8835] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1264: invalid indirect mapped block 1819239214 (level 0) [ 338.827398][ T8835] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1264: invalid indirect mapped block 1819239214 (level 1) [ 338.875018][ T8835] EXT4-fs (loop0): 1 truncate cleaned up [ 338.895238][ T8835] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 341.426654][ T8861] overlayfs: overlapping lowerdir path [ 341.486383][ T8860] overlayfs: overlapping lowerdir path [ 341.495526][ T8869] loop1: detected capacity change from 0 to 512 [ 341.529001][ T8860] loop4: detected capacity change from 0 to 512 [ 341.684322][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 343.314915][ T8894] FAULT_INJECTION: forcing a failure. [ 343.314915][ T8894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.365364][ T8894] CPU: 0 PID: 8894 Comm: syz.2.1287 Not tainted syzkaller #0 [ 343.372743][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.382777][ T8894] Call Trace: [ 343.386056][ T8894] [ 343.388966][ T8894] dump_stack_lvl+0x188/0x250 [ 343.393623][ T8894] ? show_regs_print_info+0x20/0x20 [ 343.398795][ T8894] ? load_image+0x410/0x410 [ 343.403290][ T8894] ? __lock_acquire+0x7d40/0x7d40 [ 343.408289][ T8894] ? rds_cong_from_addr+0x51/0x360 [ 343.413377][ T8894] ? rds_cong_get_maps+0x4f/0xa0 [ 343.418300][ T8894] should_fail+0x383/0x4b0 [ 343.422716][ T8894] prepare_alloc_pages+0x1e3/0x5b0 [ 343.427809][ T8894] __alloc_pages+0x11b/0x480 [ 343.432375][ T8894] ? zone_statistics+0x170/0x170 [ 343.437302][ T8894] ? alloc_pages+0x452/0x560 [ 343.441893][ T8894] get_zeroed_page+0x13/0x30 [ 343.446460][ T8894] rds_cong_from_addr+0x10f/0x360 [ 343.451464][ T8894] rds_cong_get_maps+0x4f/0xa0 [ 343.456202][ T8894] __rds_conn_create+0x91d/0x1ea0 [ 343.461205][ T8894] ? rds_conn_create+0x50/0x50 [ 343.465950][ T8894] rds_conn_create_outgoing+0x3f/0x50 [ 343.471314][ T8894] rds_sendmsg+0xf56/0x1d70 [ 343.475801][ T8894] ? aa_sk_perm+0x7dc/0x910 [ 343.480282][ T8894] ? rds_send_sndbuf_remove+0x230/0x230 [ 343.485816][ T8894] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 343.492240][ T8894] ? aa_sock_msg_perm+0x94/0x150 [ 343.497170][ T8894] ? apparmor_socket_sendmsg+0x88/0x230 [ 343.502700][ T8894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 343.508595][ T8894] ? security_socket_sendmsg+0x7c/0xa0 [ 343.514152][ T8894] ? rds_send_sndbuf_remove+0x230/0x230 [ 343.519684][ T8894] ____sys_sendmsg+0x5be/0x8f0 [ 343.524445][ T8894] ? __sys_sendmsg_sock+0x30/0x30 [ 343.529456][ T8894] ? import_iovec+0x6f/0xa0 [ 343.533967][ T8894] ___sys_sendmsg+0x236/0x2e0 [ 343.538646][ T8894] ? __sys_sendmsg+0x290/0x290 [ 343.543397][ T8894] ? rds_bind+0x38d/0x870 [ 343.547720][ T8894] __se_sys_sendmsg+0x1b7/0x2a0 [ 343.552563][ T8894] ? __x64_sys_sendmsg+0x80/0x80 [ 343.557493][ T8894] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.563484][ T8894] ? lockdep_hardirqs_on+0x94/0x140 [ 343.568671][ T8894] do_syscall_64+0x4c/0xa0 [ 343.573071][ T8894] ? clear_bhb_loop+0x30/0x80 [ 343.577731][ T8894] ? clear_bhb_loop+0x30/0x80 [ 343.582413][ T8894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.588289][ T8894] RIP: 0033:0x7fea8fa8f1d9 [ 343.592689][ T8894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.612292][ T8894] RSP: 002b:00007fea8dce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.620689][ T8894] RAX: ffffffffffffffda RBX: 00007fea8fd16fa0 RCX: 00007fea8fa8f1d9 [ 343.628652][ T8894] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 343.636615][ T8894] RBP: 00007fea8fb26888 R08: 0000000000000000 R09: 0000000000000000 [ 343.644589][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.652547][ T8894] R13: 00007fea8fd17038 R14: 00007fea8fd16fa0 R15: 00007ffd17c40198 [ 343.660513][ T8894] [ 344.867469][ T8898] overlayfs: overlapping lowerdir path [ 344.887742][ T8898] loop1: detected capacity change from 0 to 512 [ 346.262541][ T8910] overlayfs: overlapping lowerdir path [ 346.281345][ T8910] loop3: detected capacity change from 0 to 512 [ 346.306066][ T8919] cgroup: noprefix used incorrectly [ 347.766252][ T8939] loop3: detected capacity change from 0 to 512 [ 347.772871][ T8938] loop0: detected capacity change from 0 to 512 [ 347.839347][ T8939] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 347.860228][ T8939] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.964487][ T8921] loop4: detected capacity change from 0 to 32768 [ 349.066350][ T8921] XFS (loop4): Mounting V5 Filesystem [ 349.546071][ T8965] overlayfs: overlapping lowerdir path [ 349.552256][ T8921] XFS (loop4): Ending clean mount [ 349.570727][ T8948] loop2: detected capacity change from 0 to 512 [ 349.600840][ T4185] XFS (loop4): Unmounting Filesystem [ 349.619460][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 349.619472][ T25] audit: type=1326 audit(1791511840.309:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.680492][ T25] audit: type=1326 audit(1791511840.309:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.710110][ T25] audit: type=1326 audit(1791511840.309:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.750495][ T25] audit: type=1326 audit(1791511840.309:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.780486][ T25] audit: type=1326 audit(1791511840.309:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.810188][ T25] audit: type=1326 audit(1791511840.309:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.840122][ T25] audit: type=1326 audit(1791511840.309:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.870668][ T25] audit: type=1326 audit(1791511840.309:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.900763][ T25] audit: type=1326 audit(1791511840.309:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 349.930694][ T25] audit: type=1326 audit(1791511840.309:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f336209f1d9 code=0x7ffc0000 [ 350.949309][ T8972] loop1: detected capacity change from 0 to 512 [ 350.994879][ T8972] configfs: Unknown parameter 'data_err' [ 352.852904][ T9003] loop0: detected capacity change from 0 to 512 [ 352.997438][ T9003] EXT4-fs (loop0): Ignoring removed nobh option [ 353.040775][ T9003] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 353.064837][ T9003] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 353.107789][ T9003] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.1318: inode has both inline data and extents flags [ 353.204911][ T9003] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1318: couldn't read orphan inode 13 (err -117) [ 353.275447][ T9003] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 353.373976][ T9003] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 354.704752][ T9016] overlayfs: overlapping lowerdir path [ 354.725184][ T9016] loop2: detected capacity change from 0 to 512 [ 354.753535][ T9021] loop0: detected capacity change from 0 to 256 [ 354.864906][ T9021] FAT-fs (loop0): Directory bread(block 64) failed [ 354.911316][ T9007] loop4: detected capacity change from 0 to 32768 [ 354.937443][ T9021] FAT-fs (loop0): Directory bread(block 65) failed [ 355.060157][ T9021] FAT-fs (loop0): Directory bread(block 66) failed [ 355.080037][ T9021] FAT-fs (loop0): Directory bread(block 67) failed [ 355.100034][ T9021] FAT-fs (loop0): Directory bread(block 68) failed [ 356.088458][ T9021] FAT-fs (loop0): Directory bread(block 69) failed [ 356.304785][ T9025] loop2: detected capacity change from 0 to 256 [ 356.321766][ T9021] FAT-fs (loop0): Directory bread(block 70) failed [ 356.336230][ T9021] FAT-fs (loop0): Directory bread(block 71) failed [ 356.371680][ T9021] FAT-fs (loop0): Directory bread(block 72) failed [ 356.398570][ T9021] FAT-fs (loop0): Directory bread(block 73) failed [ 356.428347][ T9025] overlayfs: filesystem on './file2' not supported [ 357.941789][ T9039] loop1: detected capacity change from 0 to 164 [ 358.014782][ T4407] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 358.121643][ T9042] loop4: detected capacity change from 0 to 8192 [ 358.263267][ T4407] usb 1-1: Using ep0 maxpacket: 32 [ 358.385955][ T4407] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 358.411607][ T4407] usb 1-1: config 0 has no interface number 0 [ 358.445926][ T4407] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 358.674849][ T4407] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 358.694094][ T4407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.753073][ T4407] usb 1-1: Product: syz [ 358.764977][ T4407] usb 1-1: Manufacturer: syz [ 358.798420][ T4407] usb 1-1: SerialNumber: syz [ 358.834954][ T4407] usb 1-1: config 0 descriptor?? [ 360.036026][ T4407] usb 1-1: can't set config #0, error -71 [ 360.059387][ T4407] usb 1-1: USB disconnect, device number 3 [ 360.069360][ T9069] loop4: detected capacity change from 0 to 164 [ 360.173262][ T9073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.280669][ T9079] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 360.331265][ T9058] loop1: detected capacity change from 0 to 32768 [ 360.340635][ T9082] loop4: detected capacity change from 0 to 1024 [ 360.348923][ T9083] FAULT_INJECTION: forcing a failure. [ 360.348923][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 360.374381][ T9083] CPU: 0 PID: 9083 Comm: syz.3.1347 Not tainted syzkaller #0 [ 360.381782][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.391903][ T9083] Call Trace: [ 360.395219][ T9083] [ 360.398230][ T9083] dump_stack_lvl+0x188/0x250 [ 360.403152][ T9083] ? show_regs_print_info+0x20/0x20 [ 360.408330][ T9083] ? load_image+0x410/0x410 [ 360.412813][ T9083] ? __might_sleep+0xf0/0xf0 [ 360.417470][ T9083] ? __lock_acquire+0x7d40/0x7d40 [ 360.422513][ T9083] should_fail+0x383/0x4b0 [ 360.426980][ T9083] should_failslab+0x5/0x20 [ 360.431542][ T9083] slab_pre_alloc_hook+0x51/0xc0 [ 360.436504][ T9083] __kmalloc+0x6b/0x340 [ 360.440640][ T9083] ? alloc_pipe_info+0x1f5/0x4a0 [ 360.445613][ T9083] alloc_pipe_info+0x1f5/0x4a0 [ 360.450356][ T9083] create_pipe_files+0x87/0x6b0 [ 360.455184][ T9083] __do_pipe_flags+0x46/0x1f0 [ 360.459839][ T9083] do_pipe2+0xa7/0x190 [ 360.463883][ T9083] ? pipe_fcntl+0x530/0x530 [ 360.468360][ T9083] ? lock_chain_count+0x20/0x20 [ 360.473189][ T9083] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.479134][ T9083] __x64_sys_pipe+0x36/0x40 [ 360.483634][ T9083] do_syscall_64+0x4c/0xa0 [ 360.488029][ T9083] ? clear_bhb_loop+0x30/0x80 [ 360.492759][ T9083] ? clear_bhb_loop+0x30/0x80 [ 360.497415][ T9083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.503299][ T9083] RIP: 0033:0x7f336209f1d9 [ 360.507729][ T9083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.527355][ T9083] RSP: 002b:00007f33602f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 360.535825][ T9083] RAX: ffffffffffffffda RBX: 00007f3362326fa0 RCX: 00007f336209f1d9 [ 360.543774][ T9083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.551719][ T9083] RBP: 00007f3362136888 R08: 0000000000000000 R09: 0000000000000000 [ 360.559666][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.567613][ T9083] R13: 00007f3362327038 R14: 00007f3362326fa0 R15: 00007ffc7a319cb8 [ 360.575583][ T9083] [ 360.579922][ T9082] EXT4-fs (loop4): Ignoring removed bh option [ 360.691526][ T9082] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,dioread_lock,barrier=0x0000000000000004,stripe=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 360.772596][ T9058] XFS (loop1): Mounting V5 Filesystem [ 360.828798][ T9082] EXT4-fs (loop4): shut down requested (1) [ 360.839557][ T9058] XFS (loop1): Ending clean mount [ 360.872149][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 360.872208][ T25] audit: type=1800 audit(1791511851.559:217): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1336" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 362.192338][ T9117] loop4: detected capacity change from 0 to 128 [ 362.217337][ T4186] XFS (loop1): Unmounting Filesystem [ 362.332154][ T9117] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,user_xattr,noinit_itable,errors=remount-ro,. Quota mode: none. [ 362.413708][ T9117] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 362.800523][ T9142] ip_tables: iptables: counters copy to user failed while replacing table [ 362.819778][ T9144] FAULT_INJECTION: forcing a failure. [ 362.819778][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 362.880142][ T9144] CPU: 0 PID: 9144 Comm: syz.2.1369 Not tainted syzkaller #0 [ 362.887552][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.897595][ T9144] Call Trace: [ 362.900869][ T9144] [ 362.903779][ T9144] dump_stack_lvl+0x188/0x250 [ 362.908438][ T9144] ? show_regs_print_info+0x20/0x20 [ 362.913617][ T9144] ? load_image+0x410/0x410 [ 362.918113][ T9144] ? __might_sleep+0xf0/0xf0 [ 362.922703][ T9144] ? __lock_acquire+0x7d40/0x7d40 [ 362.927708][ T9144] ? __might_fault+0xb7/0x110 [ 362.932434][ T9144] should_fail+0x383/0x4b0 [ 362.936842][ T9144] should_failslab+0x5/0x20 [ 362.941340][ T9144] slab_pre_alloc_hook+0x51/0xc0 [ 362.946256][ T9144] kmem_cache_alloc_trace+0x47/0x290 [ 362.951515][ T9144] ? bpf_prog_create_from_user+0x218/0x420 [ 362.957396][ T9144] bpf_prog_create_from_user+0x218/0x420 [ 362.963046][ T9144] ? seccomp_attach_filter+0xbb0/0xbb0 [ 362.968550][ T9144] do_seccomp+0x808/0x16a0 [ 362.972947][ T9144] ? __lock_acquire+0x7d40/0x7d40 [ 362.977956][ T9144] ? prctl_set_seccomp+0x60/0x60 [ 362.982908][ T9144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 362.988876][ T9144] ? lockdep_hardirqs_on+0x94/0x140 [ 362.994062][ T9144] do_syscall_64+0x4c/0xa0 [ 362.998461][ T9144] ? clear_bhb_loop+0x30/0x80 [ 363.003136][ T9144] ? clear_bhb_loop+0x30/0x80 [ 363.007793][ T9144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.013666][ T9144] RIP: 0033:0x7fea8fa8f1d9 [ 363.018061][ T9144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.037659][ T9144] RSP: 002b:00007fea8dce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 363.046061][ T9144] RAX: ffffffffffffffda RBX: 00007fea8fd16fa0 RCX: 00007fea8fa8f1d9 [ 363.054012][ T9144] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000001 [ 363.061965][ T9144] RBP: 00007fea8fb26888 R08: 0000000000000000 R09: 0000000000000000 [ 363.069924][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.077901][ T9144] R13: 00007fea8fd17038 R14: 00007fea8fd16fa0 R15: 00007ffd17c40198 [ 363.085904][ T9144] [ 364.658707][ T9173] x_tables: duplicate underflow at hook 2 [ 364.743215][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 364.784089][ T9185] loop1: detected capacity change from 0 to 512 [ 364.804909][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 366.084572][ T9185] EXT4-fs (loop1): Ignoring removed nobh option [ 366.109335][ T9185] EXT4-fs (loop1): orphan cleanup on readonly fs [ 366.135067][ T9185] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 366.165626][ T9185] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1385: attempt to clear invalid blocks 2 len 1 [ 366.254770][ T9185] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 366.282461][ T9193] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 366.327016][ T9185] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1385: invalid indirect mapped block 1819239214 (level 0) [ 366.376006][ T9185] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1385: invalid indirect mapped block 1819239214 (level 1) [ 366.445154][ T9185] EXT4-fs (loop1): 1 truncate cleaned up [ 366.467058][ T9185] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,nobh,barrier,sb=0x0000000000000001,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 366.519768][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 366.783197][ T9222] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.367169][ T9234] loop4: detected capacity change from 0 to 512 [ 368.383864][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.771851][ T9243] loop0: detected capacity change from 0 to 512 [ 368.887581][ T9243] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 368.920375][ T9243] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.991655][ T9243] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 369.022185][ T9206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.056226][ T9250] loop4: detected capacity change from 0 to 512 [ 369.068946][ T9206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.216923][ T9250] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1407: inode has both inline data and extents flags [ 369.260968][ T9250] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1407: couldn't read orphan inode 15 (err -117) [ 369.313749][ T9250] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 369.456951][ T9257] capability: warning: `syz.0.1410' uses deprecated v2 capabilities in a way that may be insecure [ 369.691841][ T9206] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.706660][ T9206] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.725844][ T9206] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.747545][ T9206] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.885497][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 370.007857][ T9271] FAULT_INJECTION: forcing a failure. [ 370.007857][ T9271] name failslab, interval 1, probability 0, space 0, times 0 [ 370.054593][ T9271] CPU: 0 PID: 9271 Comm: syz.2.1414 Not tainted syzkaller #0 [ 370.062006][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.072071][ T9271] Call Trace: [ 370.075356][ T9271] [ 370.078289][ T9271] dump_stack_lvl+0x188/0x250 [ 370.082951][ T9271] ? show_regs_print_info+0x20/0x20 [ 370.088143][ T9271] ? load_image+0x410/0x410 [ 370.092627][ T9271] ? __lock_acquire+0x7d40/0x7d40 [ 370.097633][ T9271] should_fail+0x383/0x4b0 [ 370.102040][ T9271] should_failslab+0x5/0x20 [ 370.106526][ T9271] slab_pre_alloc_hook+0x51/0xc0 [ 370.111461][ T9271] __kmalloc+0x6b/0x340 [ 370.115590][ T9271] ? process_preds+0x45e/0x3510 [ 370.120537][ T9271] process_preds+0x45e/0x3510 [ 370.125200][ T9271] ? create_filter_start+0x2c0/0x2c0 [ 370.130464][ T9271] ? create_filter_start+0x20f/0x2c0 [ 370.135727][ T9271] apply_event_filter+0x1a9/0x590 [ 370.140729][ T9271] event_filter_write+0xce/0x140 [ 370.145640][ T9271] ? event_filter_read+0x270/0x270 [ 370.150721][ T9271] vfs_write+0x304/0xd70 [ 370.155018][ T9271] ? file_end_write+0x250/0x250 [ 370.159873][ T9271] ? mutex_lock_nested+0x17/0x20 [ 370.164810][ T9271] ? __fdget_pos+0x2bf/0x370 [ 370.169482][ T9271] ? ksys_write+0x70/0x260 [ 370.173876][ T9271] ksys_write+0x153/0x260 [ 370.178183][ T9271] ? __ia32_sys_read+0x80/0x80 [ 370.182927][ T9271] ? lockdep_hardirqs_on+0x94/0x140 [ 370.188103][ T9271] do_syscall_64+0x4c/0xa0 [ 370.192499][ T9271] ? clear_bhb_loop+0x30/0x80 [ 370.197155][ T9271] ? clear_bhb_loop+0x30/0x80 [ 370.201807][ T9271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.207680][ T9271] RIP: 0033:0x7fea8fa8f1d9 [ 370.212092][ T9271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.231675][ T9271] RSP: 002b:00007fea8dce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.240065][ T9271] RAX: ffffffffffffffda RBX: 00007fea8fd16fa0 RCX: 00007fea8fa8f1d9 [ 370.248016][ T9271] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 370.255969][ T9271] RBP: 00007fea8fb26888 R08: 0000000000000000 R09: 0000000000000000 [ 370.263932][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.271898][ T9271] R13: 00007fea8fd17038 R14: 00007fea8fd16fa0 R15: 00007ffd17c40198 [ 370.279855][ T9271] [ 370.317524][ T9282] loop1: detected capacity change from 0 to 128 [ 370.334595][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 370.409955][ T9282] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 370.431206][ T9282] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.454746][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.480217][ T1108] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 370.511362][ T25] audit: type=1800 audit(1791511861.199:218): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1416" name="bus" dev="loop1" ino=13 res=0 errno=0 [ 371.794089][ T9294] loop4: detected capacity change from 0 to 512 [ 371.824641][ T1108] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 371.834812][ T9294] configfs: Unknown parameter 'data_err' [ 371.843936][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.862410][ T1108] usb 1-1: Product: syz [ 371.872945][ T1108] usb 1-1: Manufacturer: syz [ 371.880173][ T1108] usb 1-1: SerialNumber: syz [ 371.950966][ T9305] device syzkaller0 entered promiscuous mode [ 372.059915][ T9305] 0: reclassify loop, rule prio 0, protocol 700 [ 372.279352][ T9329] loop3: detected capacity change from 0 to 1024 [ 372.296233][ T9328] loop4: detected capacity change from 0 to 512 [ 372.314639][ T1108] usb 1-1: Can't get UAC3 power state for id 10 [ 372.377949][ T9328] EXT4-fs (loop4): Invalid want_extra_isize 1969 [ 372.394729][ T9329] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 372.406316][ T1108] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 372.427216][ T1108] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 372.442839][ T9329] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 372.493095][ T9329] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1432: Failed to acquire dquot type 0 [ 372.569485][ T9329] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 372.638318][ T9329] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.1432: corrupted inode contents [ 373.869794][ T1108] usb 1-1: USB disconnect, device number 4 [ 373.889322][ T9329] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #13: comm syz.3.1432: mark_inode_dirty error [ 373.904643][ T9351] loop2: detected capacity change from 0 to 512 [ 373.934044][ T9350] FAULT_INJECTION: forcing a failure. [ 373.934044][ T9350] name fail_futex, interval 1, probability 0, space 0, times 0 [ 373.947230][ T9351] configfs: Unknown parameter 'data_err' [ 373.984966][ T9350] CPU: 0 PID: 9350 Comm: syz.4.1439 Not tainted syzkaller #0 [ 373.992380][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.002510][ T9350] Call Trace: [ 374.005796][ T9350] [ 374.008733][ T9350] dump_stack_lvl+0x188/0x250 [ 374.013432][ T9350] ? show_regs_print_info+0x20/0x20 [ 374.018644][ T9350] ? load_image+0x410/0x410 [ 374.023156][ T9350] ? __lock_acquire+0x12df/0x7d40 [ 374.028182][ T9350] ? mark_lock+0x94/0x320 [ 374.032522][ T9350] should_fail+0x383/0x4b0 [ 374.036926][ T9350] get_futex_key+0x1a1/0x12d0 [ 374.041654][ T9350] ? futex_wait_restart+0x250/0x250 [ 374.046843][ T9350] futex_wake+0x101/0x540 [ 374.051154][ T9350] ? verify_lock_unused+0x140/0x140 [ 374.056338][ T9350] ? verify_lock_unused+0x140/0x140 [ 374.061521][ T9350] ? futex_wait+0x680/0x680 [ 374.066013][ T9350] do_futex+0xd83/0x12b0 [ 374.070246][ T9350] ? __might_sleep+0xf0/0xf0 [ 374.074824][ T9350] ? __might_fault+0xb7/0x110 [ 374.079498][ T9350] ? futex_exit_release+0x1c0/0x1c0 [ 374.084678][ T9350] ? __lock_acquire+0x7d40/0x7d40 [ 374.089693][ T9350] mm_release+0x278/0x3c0 [ 374.094088][ T9350] ? exit_mm_release+0x30/0x30 [ 374.098833][ T9350] ? lockdep_hardirqs_on+0x94/0x140 [ 374.104024][ T9350] exit_mm+0xaf/0x7b0 [ 374.108037][ T9350] ? perf_pmu_migrate_context+0xb70/0xb70 [ 374.113792][ T9350] ? do_exit+0x2110/0x2110 [ 374.118189][ T9350] ? rcu_is_watching+0x11/0xa0 [ 374.122970][ T9350] ? mm_trace_rss_stat+0x81/0x1c0 [ 374.127979][ T9350] ? sync_mm_rss+0x211/0x350 [ 374.132554][ T9350] do_exit+0x5b8/0x2110 [ 374.136698][ T9350] ? put_task_struct+0x80/0x80 [ 374.141442][ T9350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 374.147411][ T9350] ? _raw_spin_lock_irq+0xb7/0xf0 [ 374.152420][ T9350] do_group_exit+0x12c/0x2f0 [ 374.156990][ T9350] ? lockdep_hardirqs_on+0x94/0x140 [ 374.162176][ T9350] get_signal+0x7eb/0x12e0 [ 374.166664][ T9350] arch_do_signal_or_restart+0xe6/0x12a0 [ 374.172344][ T9350] ? futex_exit_release+0x1c0/0x1c0 [ 374.177527][ T9350] ? get_sigframe_size+0x10/0x10 [ 374.182452][ T9350] ? __context_tracking_exit+0x4c/0x80 [ 374.187897][ T9350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 374.193863][ T9350] ? exit_to_user_mode_loop+0x3b/0x130 [ 374.199417][ T9350] exit_to_user_mode_loop+0x9e/0x130 [ 374.204693][ T9350] exit_to_user_mode_prepare+0xee/0x180 [ 374.210246][ T9350] syscall_exit_to_user_mode+0x16/0x40 [ 374.215705][ T9350] do_syscall_64+0x58/0xa0 [ 374.220110][ T9350] ? clear_bhb_loop+0x30/0x80 [ 374.225165][ T9350] ? clear_bhb_loop+0x30/0x80 [ 374.229835][ T9350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.235713][ T9350] RIP: 0033:0x7ff117de41d9 [ 374.240115][ T9350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.259716][ T9350] RSP: 002b:00007ff11603c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 374.268125][ T9350] RAX: fffffffffffffe00 RBX: 00007ff11806bfa8 RCX: 00007ff117de41d9 [ 374.276083][ T9350] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff11806bfa8 [ 374.284038][ T9350] RBP: 00007ff11806bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 374.291993][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.299948][ T9350] R13: 00007ff11806c038 R14: 00007ffcd2edf8b0 R15: 00007ffcd2edf998 [ 374.307915][ T9350] [ 374.329591][ T9329] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.1432: corrupted inode contents [ 374.382896][ T9329] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #13: comm syz.3.1432: mark_inode_dirty error [ 374.402502][ T9360] device syzkaller0 entered promiscuous mode [ 374.432771][ T9329] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.1432: corrupted inode contents [ 374.481122][ T9360] 0: reclassify loop, rule prio 0, protocol 700 [ 374.489325][ T9329] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 374.550870][ T9329] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.1432: corrupted inode contents [ 374.592596][ T9329] EXT4-fs error (device loop3): ext4_truncate:4286: inode #13: comm syz.3.1432: mark_inode_dirty error [ 374.633965][ T9329] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 374.673833][ T9372] loop0: detected capacity change from 0 to 512 [ 374.682196][ T9329] EXT4-fs (loop3): 1 truncate cleaned up [ 374.698148][ T9329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 375.896644][ T9374] overlayfs: unrecognized mount option "/dev/kvm" or missing value [ 375.915943][ T9374] loop1: detected capacity change from 0 to 512 [ 375.964803][ T9374] configfs: Unknown parameter 'data_err' [ 376.031926][ T9372] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 376.119365][ T9380] loop3: detected capacity change from 0 to 512 [ 376.134612][ T9372] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.146893][ T9382] bond0: (slave geneve0): Error: Device can not be enslaved while up [ 376.458890][ T9386] loop2: detected capacity change from 0 to 2048 [ 376.658330][ T9386] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.862849][ T9397] overlayfs: missing 'lowerdir' [ 377.880063][ T9397] loop3: detected capacity change from 0 to 512 [ 377.899636][ T9386] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 377.934828][ T9397] configfs: Unknown parameter 'data_err' [ 377.965223][ T9386] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 378.034902][ T9386] EXT4-fs (loop2): This should not happen!! Data will be lost [ 378.034902][ T9386] [ 378.077141][ T9386] EXT4-fs (loop2): Total free blocks count 0 [ 378.155536][ T9402] FAULT_INJECTION: forcing a failure. [ 378.155536][ T9402] name failslab, interval 1, probability 0, space 0, times 0 [ 378.178822][ T9386] EXT4-fs (loop2): Free/Dirty block details [ 378.209592][ T9386] EXT4-fs (loop2): free_blocks=4096 [ 378.219531][ T9386] EXT4-fs (loop2): dirty_blocks=32 [ 378.234603][ T9402] CPU: 0 PID: 9402 Comm: syz.4.1455 Not tainted syzkaller #0 [ 378.242000][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.252038][ T9402] Call Trace: [ 378.255303][ T9402] [ 378.258212][ T9402] dump_stack_lvl+0x188/0x250 [ 378.262870][ T9402] ? show_regs_print_info+0x20/0x20 [ 378.268045][ T9402] ? load_image+0x410/0x410 [ 378.272530][ T9402] ? __lock_acquire+0x7d40/0x7d40 [ 378.277535][ T9402] should_fail+0x383/0x4b0 [ 378.281936][ T9402] should_failslab+0x5/0x20 [ 378.286422][ T9402] slab_pre_alloc_hook+0x51/0xc0 [ 378.291355][ T9402] ? cache_create_net+0x2b/0x250 [ 378.296365][ T9402] __kmalloc_track_caller+0x69/0x330 [ 378.301627][ T9402] ? cache_create_net+0x2b/0x250 [ 378.306554][ T9402] kmemdup+0x22/0x50 [ 378.310523][ T9402] cache_create_net+0x2b/0x250 [ 378.315267][ T9402] ? cache_register_net+0x42f/0x480 [ 378.320445][ T9402] nfsd_idmap_init+0xe4/0x1e0 [ 378.325178][ T9402] ? nfsd_init_net+0x34/0x1e0 [ 378.329937][ T9402] nfsd_init_net+0x47/0x1e0 [ 378.334441][ T9402] ops_init+0x360/0x5f0 [ 378.338666][ T9402] setup_net+0x39e/0xa10 [ 378.342904][ T9402] ? copy_net_ns+0x5b0/0x5b0 [ 378.347495][ T9402] ? copy_net_ns+0x324/0x5b0 [ 378.352091][ T9402] ? down_read_killable+0x1ce/0x340 [ 378.357273][ T9402] copy_net_ns+0x33e/0x5b0 [ 378.361668][ T9402] create_new_namespaces+0x3ce/0x700 [ 378.367043][ T9402] unshare_nsproxy_namespaces+0x116/0x160 [ 378.372763][ T9402] ksys_unshare+0x4f6/0x8e0 [ 378.377270][ T9402] ? __lock_acquire+0x7d40/0x7d40 [ 378.382277][ T9402] ? sighand_ctor+0x40/0x40 [ 378.386762][ T9402] ? lock_chain_count+0x20/0x20 [ 378.391599][ T9402] ? syscall_enter_from_user_mode+0x21/0x70 [ 378.397478][ T9402] __x64_sys_unshare+0x34/0x40 [ 378.402218][ T9402] do_syscall_64+0x4c/0xa0 [ 378.406612][ T9402] ? clear_bhb_loop+0x30/0x80 [ 378.411264][ T9402] ? clear_bhb_loop+0x30/0x80 [ 378.415917][ T9402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.421786][ T9402] RIP: 0033:0x7ff117de41d9 [ 378.426196][ T9402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.445782][ T9402] RSP: 002b:00007ff11603c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 378.454175][ T9402] RAX: ffffffffffffffda RBX: 00007ff11806bfa0 RCX: 00007ff117de41d9 [ 378.462128][ T9402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 378.470083][ T9402] RBP: 00007ff117e7b888 R08: 0000000000000000 R09: 0000000000000000 [ 378.478041][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.486011][ T9402] R13: 00007ff11806c038 R14: 00007ff11806bfa0 R15: 00007ffcd2edf998 [ 378.493973][ T9402] [ 378.499973][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.506834][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.523325][ T9386] EXT4-fs (loop2): Block reservation details [ 378.534544][ T9386] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 378.577254][ T9390] loop0: detected capacity change from 0 to 512 [ 378.608607][ T6453] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 378.626283][ T6453] EXT4-fs (loop2): This should not happen!! Data will be lost [ 378.626283][ T6453] [ 378.709573][ T9390] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 378.768662][ T9390] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,acl,,errors=continue. Quota mode: writeback. [ 378.802428][ T9390] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.985766][ T9419] overlayfs: unrecognized mount option "/dev/kvm" or missing value [ 380.005916][ T9419] loop2: detected capacity change from 0 to 512 [ 380.044767][ T9419] configfs: Unknown parameter 'data_err' [ 380.741813][ T9432] loop0: detected capacity change from 0 to 512 [ 381.881858][ T9431] overlayfs: missing 'lowerdir' [ 381.895253][ T9432] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 381.908360][ T9432] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.934298][ T9431] loop1: detected capacity change from 0 to 512 [ 381.974882][ T9431] configfs: Unknown parameter 'data_err' [ 382.224819][ T9442] loop2: detected capacity change from 0 to 128 [ 382.265635][ T9442] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 382.315204][ T9442] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 382.331318][ T9450] loop1: detected capacity change from 0 to 512 [ 383.639110][ T9456] overlayfs: unrecognized mount option "/dev/kvm" or missing value [ 383.666335][ T6450] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 383.685340][ T9456] loop0: detected capacity change from 0 to 512 [ 383.707280][ T9450] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1473: bg 0: block 104: invalid block bitmap [ 383.724827][ T9456] configfs: Unknown parameter 'data_err' [ 383.804896][ T9450] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 383.976411][ T9450] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1473: invalid indirect mapped block 1 (level 1) [ 384.055488][ T9450] EXT4-fs (loop1): 1 truncate cleaned up [ 384.105639][ T9450] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 385.409866][ T9477] overlayfs: missing 'lowerdir' [ 385.467160][ T9482] loop0: detected capacity change from 0 to 512 [ 385.506787][ T9482] configfs: Unknown parameter 'data_err' [ 385.724166][ T9490] loop0: detected capacity change from 0 to 512 [ 385.742023][ T9488] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1484'. [ 385.911744][ T9493] tipc: Enabled bearer , priority 0 [ 386.797074][ T9496] loop3: detected capacity change from 0 to 512 [ 387.075112][ T4405] tipc: Node number set to 1840693198 [ 389.055493][ T9490] EXT4-fs: error -4 creating inode table initialization thread [ 389.075447][ T9490] EXT4-fs (loop0): mount failed [ 389.377688][ T9496] EXT4-fs: error -4 creating inode table initialization thread [ 389.385446][ T9496] EXT4-fs (loop3): mount failed [ 389.411382][ T9494] device syzkaller0 entered promiscuous mode [ 390.691084][ T9504] loop4: detected capacity change from 0 to 512 [ 390.756783][ T9494] tipc: Resetting bearer [ 391.152721][ T9510] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 391.263579][ T9494] tipc: Disabling bearer [ 391.432485][ T9520] loop1: detected capacity change from 0 to 512 [ 392.674009][ T9525] overlayfs: unrecognized mount option "/dev/kvm" or missing value [ 392.733168][ T9527] loop4: detected capacity change from 0 to 512 [ 392.764874][ T9527] configfs: Unknown parameter 'data_err' [ 392.771228][ T9520] FAULT_INJECTION: forcing a failure. [ 392.771228][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 392.837682][ T9520] CPU: 0 PID: 9520 Comm: syz.1.1495 Not tainted syzkaller #0 [ 392.845094][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.855156][ T9520] Call Trace: [ 392.858461][ T9520] [ 392.861398][ T9520] dump_stack_lvl+0x188/0x250 [ 392.866092][ T9520] ? show_regs_print_info+0x20/0x20 [ 392.871305][ T9520] ? load_image+0x410/0x410 [ 392.875823][ T9520] ? __might_sleep+0xf0/0xf0 [ 392.880425][ T9520] ? __lock_acquire+0x7d40/0x7d40 [ 392.885486][ T9520] should_fail+0x383/0x4b0 [ 392.889897][ T9520] should_failslab+0x5/0x20 [ 392.894379][ T9520] slab_pre_alloc_hook+0x51/0xc0 [ 392.899310][ T9520] __kmalloc_node+0x6d/0x3a0 [ 392.903904][ T9520] ? kvmalloc_node+0x84/0x130 [ 392.908568][ T9520] kvmalloc_node+0x84/0x130 [ 392.913049][ T9520] __list_lru_init+0x4cb/0xac0 [ 392.917799][ T9520] alloc_super+0x7b6/0x970 [ 392.922198][ T9520] ? mount_bdev+0x3c0/0x3c0 [ 392.926677][ T9520] sget+0x1ce/0x450 [ 392.930487][ T9520] ? test_bdev_super+0x40/0x40 [ 392.935229][ T9520] mount_bdev+0xe7/0x3c0 [ 392.939449][ T9520] ? ext4_mount+0x40/0x40 [ 392.943855][ T9520] legacy_get_tree+0xe6/0x180 [ 392.948569][ T9520] ? ext4_errno_to_code+0x160/0x160 [ 392.953784][ T9520] vfs_get_tree+0x88/0x270 [ 392.958195][ T9520] do_new_mount+0x247/0xa40 [ 392.962689][ T9520] __se_sys_mount+0x2e3/0x3d0 [ 392.967359][ T9520] ? __x64_sys_mount+0xc0/0xc0 [ 392.972107][ T9520] ? lockdep_hardirqs_on+0x94/0x140 [ 392.977306][ T9520] ? __x64_sys_mount+0x1c/0xc0 [ 392.982056][ T9520] do_syscall_64+0x4c/0xa0 [ 392.986472][ T9520] ? clear_bhb_loop+0x30/0x80 [ 392.991131][ T9520] ? clear_bhb_loop+0x30/0x80 [ 392.995795][ T9520] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.001704][ T9520] RIP: 0033:0x7f9fbee3d44a [ 393.006111][ T9520] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.025719][ T9520] RSP: 002b:00007f9fbd093e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.034148][ T9520] RAX: ffffffffffffffda RBX: 00007f9fbd093ee0 RCX: 00007f9fbee3d44a [ 393.042110][ T9520] RDX: 0000200000000440 RSI: 0000200000000480 RDI: 00007f9fbd093ea0 [ 393.050112][ T9520] RBP: 0000200000000440 R08: 00007f9fbd093ee0 R09: 0000000000000000 [ 393.058091][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000480 [ 393.066063][ T9520] R13: 00007f9fbd093ea0 R14: 000000000000044b R15: 00002000000004c0 [ 393.074031][ T9520] [ 393.149946][ T9531] loop0: detected capacity change from 0 to 1024 [ 394.124626][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 394.508921][ T9543] FAULT_INJECTION: forcing a failure. [ 394.508921][ T9543] name failslab, interval 1, probability 0, space 0, times 0 [ 394.533572][ T9531] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 394.545170][ T9531] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 394.558025][ T9543] CPU: 0 PID: 9543 Comm: syz.4.1504 Not tainted syzkaller #0 [ 394.565425][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.575487][ T9543] Call Trace: [ 394.578773][ T9543] [ 394.581706][ T9543] dump_stack_lvl+0x188/0x250 [ 394.586398][ T9543] ? show_regs_print_info+0x20/0x20 [ 394.591610][ T9543] ? load_image+0x410/0x410 [ 394.596102][ T9543] ? __might_sleep+0xf0/0xf0 [ 394.600692][ T9543] ? __lock_acquire+0x7d40/0x7d40 [ 394.605697][ T9543] should_fail+0x383/0x4b0 [ 394.610097][ T9543] should_failslab+0x5/0x20 [ 394.614579][ T9543] slab_pre_alloc_hook+0x51/0xc0 [ 394.619533][ T9543] kmem_cache_alloc_trace+0x47/0x290 [ 394.624813][ T9543] ? proc_init_fs_context+0x53/0x330 [ 394.630168][ T9543] proc_init_fs_context+0x53/0x330 [ 394.635261][ T9543] alloc_fs_context+0x628/0x7d0 [ 394.640092][ T9543] __se_sys_fsopen+0x111/0x320 [ 394.644834][ T9543] do_syscall_64+0x4c/0xa0 [ 394.649228][ T9543] ? clear_bhb_loop+0x30/0x80 [ 394.653881][ T9543] ? clear_bhb_loop+0x30/0x80 [ 394.658534][ T9543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.664406][ T9543] RIP: 0033:0x7ff117de41d9 [ 394.668820][ T9543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.688428][ T9543] RSP: 002b:00007ff11603c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 394.696833][ T9543] RAX: ffffffffffffffda RBX: 00007ff11806bfa0 RCX: 00007ff117de41d9 [ 394.704786][ T9543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 394.712733][ T9543] RBP: 00007ff117e7b888 R08: 0000000000000000 R09: 0000000000000000 [ 394.720686][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.728637][ T9543] R13: 00007ff11806c038 R14: 00007ff11806bfa0 R15: 00007ffcd2edf998 [ 394.736603][ T9543] [ 394.852324][ T9531] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 394.890924][ T9555] loop2: detected capacity change from 0 to 512 [ 394.898387][ T9531] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1499: couldn't read orphan inode 11 (err -117) [ 394.959509][ T9531] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 395.050915][ T9531] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1499: Invalid block bitmap block 0 in block_group 0 [ 395.083169][ T9531] Quota error (device loop0): write_blk: dquota write failed [ 395.101602][ T9531] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 395.122297][ T9531] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1499: Failed to acquire dquot type 0 [ 395.160078][ T9531] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1499: Invalid inode table block 8589934593 in block_group 0 [ 395.240080][ T6443] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:106: Invalid inode table block 8589934593 in block_group 0 [ 396.448301][ T9561] overlayfs: unrecognized mount option "/dev/kvm" or missing value [ 396.498211][ T9561] loop2: detected capacity change from 0 to 512 [ 396.564894][ T9561] configfs: Unknown parameter 'data_err' [ 396.874110][ T9587] loop2: detected capacity change from 0 to 512 [ 396.998033][ T9587] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 398.071300][ T9587] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.090525][ T9587] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.1517: bad orphan inode 15 [ 398.245797][ T9597] loop1: detected capacity change from 0 to 512 [ 398.252467][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1520'. [ 398.293637][ T9587] ext4_test_bit(bit=14, block=18) = 1 [ 398.316930][ T9587] is_bad_inode(inode)=0 [ 398.321097][ T9587] NEXT_ORPHAN(inode)=1023 [ 398.335776][ T9587] max_ino=32 [ 398.339005][ T9587] i_nlink=0 [ 398.367390][ T9587] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2928: inode #15: comm syz.2.1517: corrupted xattr block 19 [ 398.429915][ T9587] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 398.514165][ T9587] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.555092][ T9608] ip_tables: iptables: counters copy to user failed while replacing table [ 399.910618][ T9587] lo speed is unknown, defaulting to 1000 [ 399.934385][ T9587] lo speed is unknown, defaulting to 1000 [ 400.018627][ T9587] lo speed is unknown, defaulting to 1000 [ 401.859563][ T9625] overlayfs: unrecognized mount option "/dev/kvm" or missing value [ 401.873514][ T9625] loop1: detected capacity change from 0 to 512 [ 401.914790][ T9625] configfs: Unknown parameter 'data_err' [ 403.418402][ T7] lo speed is unknown, defaulting to 1000 [ 403.429832][ T9587] infiniband syz0: set down [ 403.455923][ T9587] infiniband syz0: added lo [ 404.760919][ T9641] loop3: detected capacity change from 0 to 512 [ 404.837584][ T9587] infiniband syz0: Couldn't open port 1 [ 405.030106][ T9650] FAULT_INJECTION: forcing a failure. [ 405.030106][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 405.069251][ T9652] device syzkaller0 entered promiscuous mode [ 405.097462][ T9587] RDS/IB: syz0: added [ 405.105774][ T9650] CPU: 0 PID: 9650 Comm: syz.1.1535 Not tainted syzkaller #0 [ 405.113151][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.123187][ T9650] Call Trace: [ 405.126475][ T9650] [ 405.129388][ T9650] dump_stack_lvl+0x188/0x250 [ 405.134049][ T9650] ? show_regs_print_info+0x20/0x20 [ 405.139226][ T9650] ? load_image+0x410/0x410 [ 405.143708][ T9650] ? __might_sleep+0xf0/0xf0 [ 405.148279][ T9650] ? __lock_acquire+0x7d40/0x7d40 [ 405.153291][ T9650] should_fail+0x383/0x4b0 [ 405.157705][ T9650] should_failslab+0x5/0x20 [ 405.162207][ T9650] slab_pre_alloc_hook+0x51/0xc0 [ 405.167129][ T9650] ? copy_signal+0x50/0x610 [ 405.171611][ T9650] kmem_cache_alloc+0x3d/0x280 [ 405.176374][ T9650] copy_signal+0x50/0x610 [ 405.180701][ T9650] copy_process+0x1747/0x3e70 [ 405.185371][ T9650] ? __pidfd_prepare+0x140/0x140 [ 405.190288][ T9650] ? verify_lock_unused+0x140/0x140 [ 405.195484][ T9650] kernel_clone+0x23f/0x990 [ 405.199968][ T9650] ? create_io_thread+0x180/0x180 [ 405.205006][ T9650] __x64_sys_clone+0x19a/0x210 [ 405.209782][ T9650] ? __ia32_sys_vfork+0x130/0x130 [ 405.214817][ T9650] ? lockdep_hardirqs_on+0x94/0x140 [ 405.219998][ T9650] do_syscall_64+0x4c/0xa0 [ 405.224392][ T9650] ? clear_bhb_loop+0x30/0x80 [ 405.229060][ T9650] ? clear_bhb_loop+0x30/0x80 [ 405.233713][ T9650] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.239608][ T9650] RIP: 0033:0x7f9fbee3c1d9 [ 405.244025][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.263613][ T9650] RSP: 002b:00007f9fbd093fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 405.272013][ T9650] RAX: ffffffffffffffda RBX: 00007f9fbf0c3fa0 RCX: 00007f9fbee3c1d9 [ 405.279992][ T9650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.287949][ T9650] RBP: 00007f9fbeed3888 R08: 0000000000000000 R09: 0000000000000000 [ 405.295899][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.303866][ T9650] R13: 00007f9fbf0c4038 R14: 00007f9fbf0c3fa0 R15: 00007fff6b3ac2d8 [ 405.311857][ T9650] [ 405.325426][ T9587] smc: adding ib device syz0 with port count 1 [ 405.358804][ T9587] smc: ib device syz0 port 1 has pnetid [ 405.368433][ T9643] kvm [9640]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0x40000000000005ab [ 405.407017][ T9580] lo speed is unknown, defaulting to 1000 [ 405.416720][ T9587] lo speed is unknown, defaulting to 1000 [ 405.572236][ T9662] loop3: detected capacity change from 0 to 128 [ 406.813990][ T9666] loop4: detected capacity change from 0 to 512 [ 406.853734][ T9587] lo speed is unknown, defaulting to 1000 [ 407.101522][ T9587] lo speed is unknown, defaulting to 1000 [ 407.114886][ T9670] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 407.146103][ T9670] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 408.395771][ T9680] loop4: detected capacity change from 0 to 512 [ 408.423973][ T9677] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 408.442724][ T9677] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 408.469552][ T9683] device syzkaller0 entered promiscuous mode [ 408.497967][ T9587] lo speed is unknown, defaulting to 1000 [ 408.678357][ T9687] FAULT_INJECTION: forcing a failure. [ 408.678357][ T9687] name failslab, interval 1, probability 0, space 0, times 0 [ 408.720964][ T9687] CPU: 0 PID: 9687 Comm: syz.0.1548 Not tainted syzkaller #0 [ 408.728363][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.738408][ T9687] Call Trace: [ 408.741678][ T9687] [ 408.744596][ T9687] dump_stack_lvl+0x188/0x250 [ 408.749288][ T9687] ? show_regs_print_info+0x20/0x20 [ 408.754477][ T9687] ? load_image+0x410/0x410 [ 408.758985][ T9687] ? __might_sleep+0xf0/0xf0 [ 408.763572][ T9687] ? __lock_acquire+0x7d40/0x7d40 [ 408.768600][ T9687] should_fail+0x383/0x4b0 [ 408.773115][ T9687] should_failslab+0x5/0x20 [ 408.777647][ T9687] slab_pre_alloc_hook+0x51/0xc0 [ 408.782580][ T9687] ? __kernfs_new_node+0xa8/0x6b0 [ 408.787681][ T9687] __kmalloc_track_caller+0x69/0x330 [ 408.792953][ T9687] ? __kernfs_new_node+0xa8/0x6b0 [ 408.797962][ T9687] ? lockdep_lock+0x1f0/0x1f0 [ 408.802624][ T9687] kstrdup_const+0x51/0x90 [ 408.807023][ T9687] __kernfs_new_node+0xa8/0x6b0 [ 408.811861][ T9687] ? kernfs_new_node+0x250/0x250 [ 408.816797][ T9687] ? make_kgid+0x1c4/0x650 [ 408.821311][ T9687] ? from_kuid_munged+0x6e0/0x6e0 [ 408.826348][ T9687] kernfs_new_node+0x148/0x250 [ 408.831123][ T9687] kernfs_create_dir_ns+0x40/0x120 [ 408.836221][ T9687] sysfs_create_dir_ns+0x12c/0x290 [ 408.841315][ T9687] ? sysfs_warn_dup+0xa0/0xa0 [ 408.845970][ T9687] ? do_raw_spin_unlock+0x11d/0x230 [ 408.851151][ T9687] kobject_add_internal+0x5ba/0xcd0 [ 408.856427][ T9687] kobject_add+0x160/0x230 [ 408.860845][ T9687] ? kobject_init+0x1c0/0x1c0 [ 408.865515][ T9687] ? get_device_parent+0x288/0x3e0 [ 408.870732][ T9687] device_add+0x470/0x1050 [ 408.875169][ T9687] netdev_register_kobject+0x184/0x320 [ 408.880692][ T9687] register_netdevice+0x10e8/0x1720 [ 408.885974][ T9687] ? netif_stacked_transfer_operstate+0x200/0x200 [ 408.892418][ T9687] register_vlan_dev+0x3a0/0x820 [ 408.897474][ T9687] register_vlan_device+0x383/0x4a0 [ 408.903067][ T9687] ? vlan_ioctl_handler+0x5d0/0x5d0 [ 408.908287][ T9687] vlan_ioctl_handler+0x224/0x5d0 [ 408.913321][ T9687] ? rcu_lock_release+0x20/0x20 [ 408.918179][ T9687] ? rcu_lock_release+0x20/0x20 [ 408.923031][ T9687] sock_ioctl+0x23b/0x700 [ 408.927458][ T9687] ? sock_poll+0x420/0x420 [ 408.931872][ T9687] ? bpf_lsm_file_ioctl+0x5/0x10 [ 408.936878][ T9687] ? security_file_ioctl+0x7c/0xa0 [ 408.942050][ T9687] ? sock_poll+0x420/0x420 [ 408.946459][ T9687] __se_sys_ioctl+0xfa/0x170 [ 408.951056][ T9687] do_syscall_64+0x4c/0xa0 [ 408.955462][ T9687] ? clear_bhb_loop+0x30/0x80 [ 408.960130][ T9687] ? clear_bhb_loop+0x30/0x80 [ 408.964797][ T9687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.970681][ T9687] RIP: 0033:0x7f4e716811d9 [ 408.975083][ T9687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.994681][ T9687] RSP: 002b:00007f4e6f8d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.003087][ T9687] RAX: ffffffffffffffda RBX: 00007f4e71908fa0 RCX: 00007f4e716811d9 [ 409.011051][ T9687] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000004 [ 409.019015][ T9687] RBP: 00007f4e71718888 R08: 0000000000000000 R09: 0000000000000000 [ 409.026971][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.034930][ T9687] R13: 00007f4e71909038 R14: 00007f4e71908fa0 R15: 00007ffeb780ccf8 [ 409.042903][ T9687] [ 409.048183][ T9694] ip_tables: iptables: counters copy to user failed while replacing table [ 409.082891][ T9687] kobject_add_internal failed for veth1.768 (error: -12 parent: net) [ 409.097496][ T9587] lo speed is unknown, defaulting to 1000 [ 409.169804][ T9697] loop3: detected capacity change from 0 to 16 [ 409.276770][ T9697] erofs: (device loop3): mounted with root inode @ nid 36. [ 409.313896][ T9699] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.330320][ T9697] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 409.367748][ T9697] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 410.945790][ T9724] loop2: detected capacity change from 0 to 512 [ 416.353043][ T9782] device syzkaller0 entered promiscuous mode [ 417.564568][ T9775] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 420.928206][ T9775] usb 1-1: device not accepting address 5, error -71 [ 422.069640][ T9825] loop0: detected capacity change from 0 to 128 [ 422.278968][ T9821] loop1: detected capacity change from 0 to 512 [ 422.397470][ T9830] device syzkaller0 entered promiscuous mode [ 424.619191][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 424.629905][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1596'. [ 424.723617][ T9846] loop2: detected capacity change from 0 to 1024 [ 424.830662][ T9853] loop1: detected capacity change from 0 to 512 [ 424.841949][ T9854] loop0: detected capacity change from 0 to 512 [ 424.935381][ T9853] EXT4-fs (loop1): Ignoring removed oldalloc option [ 424.942571][ T9846] EXT4-fs (loop2): Ignoring removed orlov option [ 424.953981][ T9853] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 424.989820][ T9853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 425.000500][ T9854] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 425.020360][ T9846] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nogrpid,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 425.049181][ T9854] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 425.058572][ T9853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 425.077884][ T9853] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.1604: bad orphan inode 267 [ 425.094601][ T9854] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.1603: iget: bad i_size value: 12154757448730 [ 425.115942][ T9853] EXT4-fs (loop1): Remounting filesystem read-only [ 425.135899][ T9854] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1603: couldn't read orphan inode 13 (err -117) [ 425.154590][ T9775] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 425.162921][ T9853] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 425.203050][ T9854] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 427.062007][ T9867] loop2: detected capacity change from 0 to 164 [ 427.072439][ T9855] loop4: detected capacity change from 0 to 40427 [ 428.504674][ T9775] usb 4-1: device descriptor read/all, error -71 [ 430.981667][ T9891] device syzkaller0 entered promiscuous mode [ 431.190725][ T9901] loop0: detected capacity change from 0 to 256 [ 431.265220][ T9901] exfat: Deprecated parameter 'namecase' [ 431.270932][ T9901] exfat: Deprecated parameter 'namecase' [ 431.515153][ T9901] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 431.721643][ T9878] loop1: detected capacity change from 0 to 32768 [ 433.062037][ T9878] XFS (loop1): Mounting V5 Filesystem [ 433.197542][ T9878] XFS (loop1): log mount failed [ 435.746189][ T9925] loop0: detected capacity change from 0 to 512 [ 435.834945][ T9580] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 436.116045][ T9938] device syzkaller0 entered promiscuous mode [ 436.205260][ T9580] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 436.212864][ T9580] usb 4-1: can't read configurations, error -71 [ 436.307337][ T9946] loop0: detected capacity change from 0 to 4096 [ 437.536518][ T9949] loop2: detected capacity change from 0 to 256 [ 437.654492][ T9949] exfat: Unknown parameter '00000000000000000000000' [ 437.661293][ T9946] EXT4-fs (loop0): Ignoring removed nobh option [ 437.704891][ T9946] EXT4-fs (loop0): Test dummy encryption mode enabled [ 437.732169][ T9946] EXT4-fs (loop0): Ignoring removed bh option [ 437.738466][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 437.754902][ T9949] loop2: detected capacity change from 0 to 2048 [ 437.823123][ T9949] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.840258][ T9946] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 439.847127][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.853446][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.070147][ T1108] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 441.087992][ T1108] usb 2-1: can't read configurations, error -71 [ 444.262237][ T9976] loop2: detected capacity change from 0 to 512 [ 444.411916][ T9981] loop3: detected capacity change from 0 to 1024 [ 445.350819][ T9981] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 445.398719][ T9981] EXT4-fs (loop3): invalid journal inode [ 445.425612][ T9991] loop0: detected capacity change from 0 to 512 [ 445.434684][ T9981] EXT4-fs (loop3): can't get journal size [ 445.464229][ T9981] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 445.551926][ T9991] EXT4-fs (loop0): Ignoring removed nobh option [ 445.616504][ T9991] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1645: invalid indirect mapped block 256 (level 2) [ 445.638796][ T9996] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 445.654233][ T9981] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.1642: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 445.705214][ T9991] EXT4-fs (loop0): 2 truncates cleaned up [ 445.710971][ T9991] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 445.781455][ T9981] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 73: comm syz.3.1642: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 445.825457][T10000] device syzkaller0 entered promiscuous mode [ 447.238274][ T9990] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1645: bg 0: block 5: invalid block bitmap [ 447.255044][ T9990] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 447.267849][ T9990] EXT4-fs (loop0): This should not happen!! Data will be lost [ 447.267849][ T9990] [ 447.277583][ T9990] EXT4-fs (loop0): Total free blocks count 0 [ 447.283556][ T9990] EXT4-fs (loop0): Free/Dirty block details [ 447.289600][ T9990] EXT4-fs (loop0): free_blocks=0 [ 447.294663][ T9990] EXT4-fs (loop0): dirty_blocks=33 [ 447.299772][ T9990] EXT4-fs (loop0): Block reservation details [ 447.305821][ T9990] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 452.502487][T10038] loop4: detected capacity change from 0 to 1024 [ 452.579954][T10043] loop1: detected capacity change from 0 to 512 [ 452.597630][T10046] loop0: detected capacity change from 0 to 16 [ 452.637786][T10046] erofs: Unknown parameter 'PußRXÿ18446744073709551615' [ 452.654662][T10043] EXT4-fs (loop1): Ignoring removed nobh option [ 452.661423][T10038] EXT4-fs (loop4): inline encryption not supported [ 452.671189][T10038] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.721130][T10043] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1663: invalid indirect mapped block 256 (level 2) [ 452.765130][T10043] EXT4-fs (loop1): 2 truncates cleaned up [ 452.770889][T10043] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 452.801519][T10038] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.1661: lblock 2 mapped to illegal pblock 2 (length 1) [ 452.864792][T10038] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 452.891450][T10038] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1661: Invalid inode table block 1 in block_group 0 [ 452.932596][T10042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1663: bg 0: block 5: invalid block bitmap [ 452.963503][T10038] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 452.983055][T10042] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 453.007014][T10038] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.1661: mark_inode_dirty error [ 453.032802][T10042] EXT4-fs (loop1): This should not happen!! Data will be lost [ 453.032802][T10042] [ 453.052132][T10038] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 453.067153][T10042] EXT4-fs (loop1): Total free blocks count 0 [ 453.079880][T10038] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1661: Failed to acquire dquot type 0 [ 454.057091][T10042] EXT4-fs (loop1): Free/Dirty block details [ 454.073412][T10042] EXT4-fs (loop1): free_blocks=0 [ 454.083423][T10042] EXT4-fs (loop1): dirty_blocks=33 [ 454.089131][T10038] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 454.323082][T10042] EXT4-fs (loop1): Block reservation details [ 454.343320][T10042] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 454.349522][T10038] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.1661: mark_inode_dirty error [ 454.376406][T10067] loop0: detected capacity change from 0 to 128 [ 454.394106][T10038] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 454.411156][T10047] loop2: detected capacity change from 0 to 32768 [ 454.447076][T10038] EXT4-fs (loop4): 1 orphan inode deleted [ 454.453225][T10038] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: none. [ 454.453431][ T6446] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:109: lblock 1 mapped to illegal pblock 1 (length 1) [ 454.473037][T10067] FAT-fs (loop0): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 454.533268][T10038] input: syz0 as /devices/virtual/input/input5 [ 454.607813][T10047] XFS (loop2): Mounting V5 Filesystem [ 454.714761][ T6446] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 454.723334][ T6446] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:109: Failed to release dquot type 0 [ 454.756162][T10047] XFS (loop2): Ending clean mount [ 454.844222][T10047] 9pnet_virtio: no channels available for device 127.0.0.1 [ 454.962047][ T4192] XFS (loop2): Unmounting Filesystem [ 454.989314][ T4185] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.056439][ T4185] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 455.101806][ T4185] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 455.307910][T10099] device syzkaller0 entered promiscuous mode [ 455.472237][T10104] loop4: detected capacity change from 0 to 16 [ 456.718812][T10109] loop1: detected capacity change from 0 to 512 [ 456.744969][T10104] erofs: Unknown parameter 'PußRXÿ18446744073709551615' [ 458.061017][T10109] EXT4-fs (loop1): Ignoring removed nobh option [ 458.084622][T10109] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1682: invalid indirect mapped block 256 (level 2) [ 458.124093][T10113] loop2: detected capacity change from 0 to 512 [ 458.191313][T10109] EXT4-fs (loop1): 2 truncates cleaned up [ 458.207723][T10109] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 458.252800][T10113] EXT4-fs (loop2): Test dummy encryption mode enabled [ 458.301767][T10113] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 458.371474][T10107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1682: bg 0: block 5: invalid block bitmap [ 458.415414][T10107] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 458.540804][T10107] EXT4-fs (loop1): This should not happen!! Data will be lost [ 458.540804][T10107] [ 458.677241][T10107] EXT4-fs (loop1): Total free blocks count 0 [ 458.696142][T10107] EXT4-fs (loop1): Free/Dirty block details [ 458.715511][T10107] EXT4-fs (loop1): free_blocks=0 [ 459.908796][T10143] kernel profiling enabled (shift: 63) [ 459.995039][T10107] EXT4-fs (loop1): dirty_blocks=33 [ 460.003758][T10143] profiling shift: 63 too large [ 460.013178][T10107] EXT4-fs (loop1): Block reservation details [ 460.031018][T10107] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 460.110114][T10157] loop2: detected capacity change from 0 to 128 [ 462.068436][T10169] loop4: detected capacity change from 0 to 512 [ 464.073778][T10169] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 464.187174][T10169] UDF-fs: Scanning with blocksize 512 failed [ 464.208778][T10169] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 464.248104][T10169] UDF-fs: Scanning with blocksize 1024 failed [ 464.260245][ T25] audit: type=1326 audit(1791511954.949:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.2.1703" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea8fa8f1d9 code=0x0 [ 464.333830][T10169] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 464.350260][T10169] UDF-fs: Scanning with blocksize 2048 failed [ 464.377981][T10169] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 464.420248][T10169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.754268][T10203] loop4: detected capacity change from 0 to 4096 [ 464.779790][T10205] loop1: detected capacity change from 0 to 512 [ 464.838506][T10205] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 464.869876][T10203] EXT4-fs (loop4): Test dummy encryption mode enabled [ 464.883537][T10203] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3 [ 464.916036][T10205] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,usrjquota=./file0,,errors=continue. Quota mode: writeback. [ 464.949765][T10205] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.029826][T10210] loop4: detected capacity change from 0 to 128 [ 465.058040][T10210] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ0x000000000000ee00 rodir" or missing value [ 465.219202][T10213] loop2: detected capacity change from 0 to 2048 [ 465.399557][T10213] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobarrier,,errors=continue. Quota mode: none. [ 466.097945][T10232] loop1: detected capacity change from 0 to 512 [ 466.235516][T10232] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 466.271122][T10232] ext4 filesystem being mounted at /335/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.467082][T10232] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.1723: dir seems corrupt? Run e2fsck -D. [ 466.470000][T10045] udevd[10045]: incorrect ext4 checksum on /dev/loop1 [ 466.729837][T10232] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1723: Directory index failed checksum [ 466.755020][T10242] 9pnet: Insufficient options for proto=fd [ 467.334675][T10254] [ 467.337008][T10254] ====================================================== [ 467.344006][T10254] WARNING: possible circular locking dependency detected [ 467.351072][T10254] syzkaller #0 Not tainted [ 467.355470][T10254] ------------------------------------------------------ [ 467.362460][T10254] syz.2.1732/10254 is trying to acquire lock: [ 467.368495][T10254] ffff888026349008 (kn->active#647){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100 [ 467.378304][T10254] [ 467.378304][T10254] but task is already holding lock: [ 467.385642][T10254] ffff8880264f85b8 (&rtc->ops_lock){+.+.}-{3:3}, at: devm_rtc_unregister_device+0x1c/0x70 [ 467.395649][T10254] [ 467.395649][T10254] which lock already depends on the new lock. [ 467.395649][T10254] [ 467.406042][T10254] [ 467.406042][T10254] the existing dependency chain (in reverse order) is: [ 467.415061][T10254] [ 467.415061][T10254] -> #1 (&rtc->ops_lock){+.+.}-{3:3}: [ 467.422606][T10254] __mutex_lock_common+0x1e5/0x2400 [ 467.428308][T10254] mutex_lock_interruptible_nested+0x17/0x20 [ 467.434803][T10254] rtc_read_time+0x25/0x1f0 [ 467.439804][T10254] wakealarm_store+0xd4/0x390 [ 467.444982][T10254] kernfs_fop_write_iter+0x3a8/0x500 [ 467.450792][T10254] vfs_write+0x748/0xd70 [ 467.455547][T10254] ksys_write+0x153/0x260 [ 467.460373][T10254] do_syscall_64+0x4c/0xa0 [ 467.465289][T10254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.471683][T10254] [ 467.471683][T10254] -> #0 (kn->active#647){++++}-{0:0}: [ 467.479215][T10254] __lock_acquire+0x38f7/0x7d40 [ 467.484586][T10254] lock_acquire+0x19f/0x400 [ 467.489587][T10254] __kernfs_remove+0x5da/0xcb0 [ 467.494857][T10254] kernfs_remove_by_name_ns+0x91/0x100 [ 467.500928][T10254] sysfs_remove_group+0xfd/0x290 [ 467.506494][T10254] sysfs_remove_groups+0x50/0xa0 [ 467.511947][T10254] device_remove_attrs+0xc2/0x140 [ 467.517478][T10254] device_del+0x637/0xa80 [ 467.522325][T10254] cdev_device_del+0x23/0xf0 [ 467.527439][T10254] devm_rtc_unregister_device+0x33/0x70 [ 467.533494][T10254] devres_release_all+0x1a1/0x230 [ 467.539094][T10254] device_release_driver_internal+0x496/0x710 [ 467.545691][T10254] unbind_store+0x2e2/0x300 [ 467.550724][T10254] kernfs_fop_write_iter+0x3a8/0x500 [ 467.556523][T10254] vfs_write+0x748/0xd70 [ 467.561272][T10254] ksys_write+0x153/0x260 [ 467.566104][T10254] do_syscall_64+0x4c/0xa0 [ 467.571029][T10254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.577431][T10254] [ 467.577431][T10254] other info that might help us debug this: [ 467.577431][T10254] [ 467.587642][T10254] Possible unsafe locking scenario: [ 467.587642][T10254] [ 467.595080][T10254] CPU0 CPU1 [ 467.600467][T10254] ---- ---- [ 467.605839][T10254] lock(&rtc->ops_lock); [ 467.610168][T10254] lock(kn->active#647); [ 467.617011][T10254] lock(&rtc->ops_lock); [ 467.623845][T10254] lock(kn->active#647); [ 467.628159][T10254] [ 467.628159][T10254] *** DEADLOCK *** [ 467.628159][T10254] [ 467.636369][T10254] 5 locks held by syz.2.1732/10254: [ 467.641568][T10254] #0: ffff888029c45c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 467.650764][T10254] #1: ffff8880568de460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 467.659619][T10254] #2: ffff8880261ad488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 467.669331][T10254] #3: ffff888141bd4178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa1/0x710 [ 467.679828][T10254] #4: ffff8880264f85b8 (&rtc->ops_lock){+.+.}-{3:3}, at: devm_rtc_unregister_device+0x1c/0x70 [ 467.690151][T10254] [ 467.690151][T10254] stack backtrace: [ 467.696018][T10254] CPU: 0 PID: 10254 Comm: syz.2.1732 Not tainted syzkaller #0 [ 467.703455][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.713496][T10254] Call Trace: [ 467.716762][T10254] [ 467.719677][T10254] dump_stack_lvl+0x188/0x250 [ 467.724338][T10254] ? load_image+0x410/0x410 [ 467.728818][T10254] ? show_regs_print_info+0x20/0x20 [ 467.734000][T10254] ? print_circular_bug+0x12b/0x1a0 [ 467.739178][T10254] check_noncircular+0x2f8/0x400 [ 467.744096][T10254] ? print_deadlock_bug+0x5d0/0x5d0 [ 467.749272][T10254] ? lockdep_lock+0xf1/0x1f0 [ 467.753844][T10254] ? mark_lock+0x286/0x320 [ 467.758238][T10254] ? _find_first_zero_bit+0xd1/0xf0 [ 467.763436][T10254] __lock_acquire+0x38f7/0x7d40 [ 467.768278][T10254] ? __lock_acquire+0x13b3/0x7d40 [ 467.773287][T10254] ? verify_lock_unused+0x140/0x140 [ 467.778466][T10254] ? kasan_set_free_info+0x1f/0x40 [ 467.783631][T10254] ? cdev_device_del+0x23/0xf0 [ 467.788381][T10254] lock_acquire+0x19f/0x400 [ 467.792885][T10254] ? kernfs_remove_by_name_ns+0x91/0x100 [ 467.798499][T10254] ? rwsem_write_trylock+0x135/0x1c0 [ 467.803771][T10254] ? read_lock_is_recursive+0x10/0x10 [ 467.809123][T10254] ? up_write+0x1b6/0x410 [ 467.813428][T10254] __kernfs_remove+0x5da/0xcb0 [ 467.818174][T10254] ? kernfs_remove_by_name_ns+0x91/0x100 [ 467.823785][T10254] ? kernfs_next_descendant_post+0x200/0x200 [ 467.829745][T10254] kernfs_remove_by_name_ns+0x91/0x100 [ 467.835184][T10254] sysfs_remove_group+0xfd/0x290 [ 467.840100][T10254] sysfs_remove_groups+0x50/0xa0 [ 467.845021][T10254] device_remove_attrs+0xc2/0x140 [ 467.850045][T10254] device_del+0x637/0xa80 [ 467.854355][T10254] ? kill_device+0x160/0x160 [ 467.858923][T10254] ? rcu_is_watching+0x11/0xa0 [ 467.863663][T10254] ? kmem_cache_free+0x14c/0x210 [ 467.868583][T10254] cdev_device_del+0x23/0xf0 [ 467.873155][T10254] devm_rtc_unregister_device+0x33/0x70 [ 467.878682][T10254] devres_release_all+0x1a1/0x230 [ 467.883686][T10254] ? devres_release+0x90/0x90 [ 467.888437][T10254] ? cmos_pnp_probe+0x150/0x150 [ 467.893278][T10254] ? mutex_lock_nested+0x17/0x20 [ 467.898213][T10254] ? pnp_device_remove+0x195/0x250 [ 467.903443][T10254] ? pnp_device_probe+0x470/0x470 [ 467.908471][T10254] device_release_driver_internal+0x496/0x710 [ 467.914525][T10254] unbind_store+0x2e2/0x300 [ 467.919014][T10254] ? uevent_store+0x70/0x70 [ 467.923518][T10254] ? sysfs_kf_write+0x183/0x2a0 [ 467.928350][T10254] ? sysfs_kf_read+0x350/0x350 [ 467.933118][T10254] kernfs_fop_write_iter+0x3a8/0x500 [ 467.938387][T10254] vfs_write+0x748/0xd70 [ 467.942639][T10254] ? file_end_write+0x250/0x250 [ 467.947476][T10254] ? mutex_lock_nested+0x17/0x20 [ 467.952398][T10254] ? __fdget_pos+0x2bf/0x370 [ 467.956970][T10254] ? ksys_write+0x70/0x260 [ 467.961384][T10254] ksys_write+0x153/0x260 [ 467.965713][T10254] ? __ia32_sys_read+0x80/0x80 [ 467.970474][T10254] ? lockdep_hardirqs_on+0x94/0x140 [ 467.975655][T10254] do_syscall_64+0x4c/0xa0 [ 467.980053][T10254] ? clear_bhb_loop+0x30/0x80 [ 467.984721][T10254] ? clear_bhb_loop+0x30/0x80 [ 467.989379][T10254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.995266][T10254] RIP: 0033:0x7fea8fa8f1d9 [ 467.999685][T10254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.019291][T10254] RSP: 002b:00007fea8dce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.027687][T10254] RAX: ffffffffffffffda RBX: 00007fea8fd16fa0 RCX: 00007fea8fa8f1d9 [ 468.035639][T10254] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 468.043593][T10254] RBP: 00007fea8fb26888 R08: 0000000000000000 R09: 0000000000000000 [ 468.051550][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.059507][T10254] R13: 00007fea8fd17038 R14: 00007fea8fd16fa0 R15: 00007ffd17c40198 [ 468.067467][T10254]