last executing test programs: 1.342550591s ago: executing program 3 (id=1129): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000300)=""/168, 0xa8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffdaf, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.036401946s ago: executing program 3 (id=1139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, r3, 0x0) 932.647987ms ago: executing program 4 (id=1142): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff04, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) creat(&(0x7f00000002c0)='./bus\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 864.885658ms ago: executing program 4 (id=1144): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff04, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) creat(&(0x7f00000002c0)='./bus\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 849.950448ms ago: executing program 3 (id=1145): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="8520000005000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100003bfffffffea7bfa400000000000007040000f0ffffffc0020000080000001823", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000acd5c0ff0800000018620000020000000000000002000000183a00000100000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x9c, &(0x7f00000003c0)=""/156, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x7, 0x5}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000001480)=[{0x0, 0x4, 0xc, 0xa}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='alloc_extent_state\x00', r7}, 0x18) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x3, 0x6) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="ff4f4f85b0c3417ce2b4c2e5f15bf545f55e8ccc2f7644abc6163fef32e4965edaea27db8b6a5aee487a3d815fa408b2e0a8a33c1b30cf7a12a3e7a57066a0b9c5f2c37d551a45a01b237ec874ba3e4fcdbfb7c42559675e3f142f5eb5a1c085f0de4eb3f8f3a2a94478a99764da6527af244139ea9bf3f52ed06d90e51cee2c853ecf34dca0efa975af0c97083d12a862dab5ed", 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@noload}, {@barrier_val={'barrier', 0x3d, 0xff2}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 756.12523ms ago: executing program 4 (id=1147): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 713.33267ms ago: executing program 1 (id=1150): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) 620.812081ms ago: executing program 1 (id=1151): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(0xffffffffffffffff) unshare(0x2040600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="36ee2cc70c", 0x5}], 0x1}, 0x4800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003800)=@newtfilter={0x34, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r0, {0x10, 0x4}, {0x7, 0xb}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0x0) 615.972661ms ago: executing program 0 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 572.985262ms ago: executing program 0 (id=1154): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000580)="6d242315b24d6d59ac04051e773ec95b42064f8cf2e155943c756da2d2581277263c552e5910f973ecef98dc2b5e5b57f0a3f9b235f55b43faeb0e3fd0af8af676248265b4f2da2a2e5a8a047ce3179b42b0445b4bbaf5ef4b395701578e793bf74baaa17d744aff5bce54e022904433e3f208d333a417a8ff9e20e0168d7c736150f1e5e7bef897cc13266e8cccd70d643573b8defc4f3e90c5baa526f0c366010221b333d171d1e6746bc0806c8d8670a27b405b81be3fe98c85d68fdb641581931e51c4d2db0c94739bce9b5b8c5a9030e8fd180c9bcf2d7b119e7274266d725c68", 0xe3}, 0x1, 0x0, 0x0, 0x81d4fe40d7ea2e85}, 0x24008044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000300)={[{@nouid32}, {@discard}]}, 0x5, 0x722, &(0x7f0000002640)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu<02||!') 509.522983ms ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 448.082034ms ago: executing program 1 (id=1157): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff04, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) creat(&(0x7f00000002c0)='./bus\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 426.488634ms ago: executing program 4 (id=1158): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000300)={[{@nouid32}, {@discard}]}, 0x5, 0x722, &(0x7f0000002640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu<02||!') 408.846694ms ago: executing program 0 (id=1159): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x200008, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0xd}, 0x1002, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xf7, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 401.861025ms ago: executing program 2 (id=1160): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 387.636475ms ago: executing program 1 (id=1161): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="8520000005000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100003bfffffffea7bfa400000000000007040000f0ffffffc0020000080000001823", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000acd5c0ff0800000018620000020000000000000002000000183a00000100000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x9c, &(0x7f00000003c0)=""/156, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x7, 0x5}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000001480)=[{0x0, 0x4, 0xc, 0xa}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='alloc_extent_state\x00', r7}, 0x18) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x3, 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0xc880) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x3, 0x6) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="ff4f4f85b0c3417ce2b4c2e5f15bf545f55e8ccc2f7644abc6163fef32e4965edaea27db8b6a5aee487a3d815fa408b2e0a8a33c1b30cf7a12a3e7a57066a0b9c5f2c37d551a45a01b237ec874ba3e4fcdbfb7c42559675e3f142f5eb5a1c085f0de4eb3f8f3a2a94478a99764da6527af244139ea9bf3f52ed06d90e51cee2c853ecf34dca0efa975af0c97083d12a862dab5ed", 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@noload}, {@barrier_val={'barrier', 0x3d, 0xff2}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 361.082485ms ago: executing program 3 (id=1162): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 344.011405ms ago: executing program 2 (id=1163): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 296.386586ms ago: executing program 2 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 256.692586ms ago: executing program 0 (id=1165): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000c3000000f10000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x81}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x3, @remote}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 256.355666ms ago: executing program 3 (id=1166): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff04, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) creat(&(0x7f00000002c0)='./bus\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 238.257897ms ago: executing program 2 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 196.629788ms ago: executing program 2 (id=1168): symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@grpid}, {@errors_remount}, {@dioread_nolock}, {@delalloc}, {@jqfmt_vfsv1}]}, 0xf5, 0x485, &(0x7f0000000f40)="$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") sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 132.791989ms ago: executing program 3 (id=1169): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000580)="6d242315b24d6d59ac04051e773ec95b42064f8cf2e155943c756da2d2581277263c552e5910f973ecef98dc2b5e5b57f0a3f9b235f55b43faeb0e3fd0af8af676248265b4f2da2a2e5a8a047ce3179b42b0445b4bbaf5ef4b395701578e793bf74baaa17d744aff5bce54e022904433e3f208d333a417a8ff9e20e0168d7c736150f1e5e7bef897cc13266e8cccd70d643573b8defc4f3e90c5baa526f0c366010221b333d171d1e6746bc0806c8d8670a27b405b81be3fe98c85d68fdb641581931e51c4d2db0c94739bce9b5b8c5a9030e8fd180c9bcf2d7b119e7274266d725c68", 0xe3}, 0x1, 0x0, 0x0, 0x81d4fe40d7ea2e85}, 0x24008044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000300)={[{@nouid32}, {@discard}]}, 0x5, 0x722, &(0x7f0000002640)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu<02||!') 132.451049ms ago: executing program 0 (id=1170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) 77.102039ms ago: executing program 4 (id=1171): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r1, r2, 0x0) 70.268369ms ago: executing program 0 (id=1172): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 57.934189ms ago: executing program 4 (id=1173): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="8520000005000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100003bfffffffea7bfa400000000000007040000f0ffffffc0020000080000001823", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000acd5c0ff0800000018620000020000000000000002000000183a00000100000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x9c, &(0x7f00000003c0)=""/156, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x7, 0x5}, 0x10, 0x0, r2, 0x1, 0x0, &(0x7f0000001480)=[{0x0, 0x4, 0xc, 0xa}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='alloc_extent_state\x00', r6}, 0x18) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x3, 0x6) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="ff4f4f85b0c3417ce2b4c2e5f15bf545f55e8ccc2f7644abc6163fef32e4965edaea27db8b6a5aee487a3d815fa408b2e0a8a33c1b30cf7a12a3e7a57066a0b9c5f2c37d551a45a01b237ec874ba3e4fcdbfb7c42559675e3f142f5eb5a1c085f0de4eb3f8f3a2a94478a99764da6527af244139ea9bf3f52ed06d90e51cee2c853ecf34dca0efa975af0c97083d12a862dab5ed", 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@noload}, {@barrier_val={'barrier', 0x3d, 0xff2}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 335.8µs ago: executing program 1 (id=1174): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) 0s ago: executing program 2 (id=1175): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000580)="6d242315b24d6d59ac04051e773ec95b42064f8cf2e155943c756da2d2581277263c552e5910f973ecef98dc2b5e5b57f0a3f9b235f55b43faeb0e3fd0af8af676248265b4f2da2a2e5a8a047ce3179b42b0445b4bbaf5ef4b395701578e793bf74baaa17d744aff5bce54e022904433e3f208d333a417a8ff9e20e0168d7c736150f1e5e7bef897cc13266e8cccd70d643573b8defc4f3e90c5baa526f0c366010221b333d171d1e6746bc0806c8d8670a27b405b81be3fe98c85d68fdb641581931e51c4d2db0c94739bce9b5b8c5a9030e8fd180c9bcf2d7b119e7274266d725c68", 0xe3}, 0x1, 0x0, 0x0, 0x81d4fe40d7ea2e85}, 0x24008044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000300)={[{@nouid32}, {@discard}]}, 0x5, 0x722, &(0x7f0000002640)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu<02||!') kernel console output (not intermixed with test programs): from 0 to 256 [ 44.177608][ T4096] FAT-fs (loop2): bogus number of FAT sectors [ 44.183828][ T4096] FAT-fs (loop2): Can't find a valid FAT filesystem [ 44.184890][ T4097] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 44.219256][ T4096] loop2: detected capacity change from 0 to 2048 [ 44.240102][ T4096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.261270][ T4096] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 44.357007][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.431380][ T4115] netlink: 92 bytes leftover after parsing attributes in process `syz.3.148'. [ 44.498978][ T4120] netlink: 596 bytes leftover after parsing attributes in process `syz.0.151'. [ 44.567161][ T4125] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 44.750720][ T4138] loop2: detected capacity change from 0 to 256 [ 44.758837][ T4138] FAT-fs (loop2): bogus number of FAT sectors [ 44.765544][ T4138] FAT-fs (loop2): Can't find a valid FAT filesystem [ 44.784495][ T4138] loop2: detected capacity change from 0 to 2048 [ 44.799409][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.816600][ T4138] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 44.869611][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.990110][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 45.037903][ T4151] loop2: detected capacity change from 0 to 512 [ 45.050218][ T4151] EXT4-fs: Ignoring removed orlov option [ 45.065779][ T4151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.084615][ T4151] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.102035][ T4151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.163: bg 0: block 248: padding at end of block bitmap is not set [ 45.120251][ T4151] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.163: Failed to acquire dquot type 1 [ 45.133719][ T4151] EXT4-fs (loop2): 1 truncate cleaned up [ 45.149362][ T4151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.211015][ T4167] loop1: detected capacity change from 0 to 256 [ 45.229063][ T4167] FAT-fs (loop1): bogus number of FAT sectors [ 45.235624][ T4167] FAT-fs (loop1): Can't find a valid FAT filesystem [ 45.274671][ T4167] loop1: detected capacity change from 0 to 2048 [ 45.339357][ T4167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.375244][ T4167] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 45.452059][ T4180] loop4: detected capacity change from 0 to 128 [ 45.461268][ T4180] EXT4-fs: Ignoring removed nobh option [ 45.473216][ T4180] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.493605][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.503709][ T4180] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.518434][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 45.545665][ T4188] loop3: detected capacity change from 0 to 512 [ 45.564450][ T4188] EXT4-fs: Ignoring removed orlov option [ 45.592467][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.606980][ T4188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.623755][ T4192] FAULT_INJECTION: forcing a failure. [ 45.623755][ T4192] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.637097][ T4192] CPU: 0 UID: 0 PID: 4192 Comm: syz.1.178 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 45.637133][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.637154][ T4192] Call Trace: [ 45.637163][ T4192] [ 45.637254][ T4192] __dump_stack+0x1d/0x30 [ 45.637283][ T4192] dump_stack_lvl+0xe8/0x140 [ 45.637316][ T4192] dump_stack+0x15/0x1b [ 45.637358][ T4192] should_fail_ex+0x265/0x280 [ 45.637386][ T4192] should_fail_alloc_page+0xf2/0x100 [ 45.637421][ T4192] __alloc_frozen_pages_noprof+0xff/0x360 [ 45.637454][ T4192] alloc_pages_mpol+0xb3/0x250 [ 45.637525][ T4192] alloc_pages_noprof+0x90/0x130 [ 45.637567][ T4192] pte_alloc_one+0x2d/0x120 [ 45.637596][ T4192] __pte_alloc+0x32/0x2b0 [ 45.637635][ T4192] ? mas_state_walk+0x574/0x650 [ 45.637702][ T4192] handle_mm_fault+0x1c16/0x2be0 [ 45.637734][ T4192] ? mas_walk+0xf2/0x120 [ 45.637774][ T4192] do_user_addr_fault+0x636/0x1090 [ 45.637854][ T4192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.637890][ T4192] exc_page_fault+0x62/0xa0 [ 45.637925][ T4192] asm_exc_page_fault+0x26/0x30 [ 45.637980][ T4192] RIP: 0033:0x7f0375ce0d66 [ 45.638154][ T4192] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 45.638177][ T4192] RSP: 002b:00007f03744864a0 EFLAGS: 00010246 [ 45.638196][ T4192] RAX: 0000000000000001 RBX: 00007f0374486540 RCX: 0000000000000101 [ 45.638211][ T4192] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f03744865e0 [ 45.638226][ T4192] RBP: 0000000000000102 R08: 00007f036c067000 R09: 0000000000000000 [ 45.638322][ T4192] R10: 0000000000000000 R11: 00007f0374486550 R12: 0000000000000001 [ 45.638338][ T4192] R13: 00007f0375ebbfc0 R14: 0000000000000000 R15: 00007f03744865e0 [ 45.638361][ T4192] [ 45.638373][ T4192] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 45.639055][ T4188] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.711162][ T4192] loop1: detected capacity change from 0 to 512 [ 45.745767][ T4188] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.179: bg 0: block 248: padding at end of block bitmap is not set [ 45.780894][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.793302][ T4188] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.179: Failed to acquire dquot type 1 [ 45.831503][ T4204] loop2: detected capacity change from 0 to 512 [ 45.888505][ T4188] EXT4-fs (loop3): 1 truncate cleaned up [ 45.889422][ T4204] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 45.904169][ T4204] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 45.905635][ T4188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.933482][ T4206] netlink: 596 bytes leftover after parsing attributes in process `syz.4.184'. [ 45.963569][ T4192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.979228][ T4192] ext4 filesystem being mounted at /syzcgroup/cpu/syz1/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 46.001417][ T4192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.021795][ T4212] netlink: 92 bytes leftover after parsing attributes in process `syz.2.187'. [ 46.096812][ T4213] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 46.209489][ T4222] loop1: detected capacity change from 0 to 512 [ 46.232459][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 46.250030][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.268094][ T4222] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.288405][ T4224] loop2: detected capacity change from 0 to 512 [ 46.297138][ T4224] EXT4-fs: Ignoring removed orlov option [ 46.322492][ T4224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.333213][ T4224] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.351350][ T4224] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.192: bg 0: block 248: padding at end of block bitmap is not set [ 46.367243][ T4224] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.192: Failed to acquire dquot type 1 [ 46.380912][ T4224] EXT4-fs (loop2): 1 truncate cleaned up [ 46.382178][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.397462][ T4224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.438864][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.495640][ T4233] random: crng reseeded on system resumption [ 46.577296][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.613332][ T4239] loop1: detected capacity change from 0 to 512 [ 46.623102][ T4239] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.194: bad orphan inode 11 [ 46.633424][ T4239] ext4_test_bit(bit=10, block=4) = 1 [ 46.638910][ T4239] is_bad_inode(inode)=0 [ 46.643087][ T4239] NEXT_ORPHAN(inode)=2080374784 [ 46.648149][ T4239] max_ino=32 [ 46.651369][ T4239] i_nlink=0 [ 46.655093][ T4239] EXT4-fs (loop1): 1 truncate cleaned up [ 46.663174][ T4241] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 46.663871][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.848145][ T4244] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 47.062835][ T4246] loop0: detected capacity change from 0 to 2048 [ 47.079411][ T4246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.092171][ T4246] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.335228][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.513946][ T3772] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set [ 47.530902][ T3772] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 47.543751][ T3772] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.543751][ T3772] [ 47.611376][ T3772] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 47.624840][ T3772] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.624840][ T3772] [ 47.634983][ T3772] EXT4-fs (loop0): Total free blocks count 0 [ 47.641595][ T3772] EXT4-fs (loop0): Free/Dirty block details [ 47.648034][ T3772] EXT4-fs (loop0): free_blocks=0 [ 47.653552][ T3772] EXT4-fs (loop0): dirty_blocks=2048 [ 47.659431][ T3772] EXT4-fs (loop0): Block reservation details [ 47.714775][ T4269] loop4: detected capacity change from 0 to 512 [ 47.736813][ T4269] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 47.757822][ T4269] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 47.820850][ T29] kauditd_printk_skb: 1104 callbacks suppressed [ 47.820868][ T29] audit: type=1326 audit(1748936145.615:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 47.837921][ T4276] loop4: detected capacity change from 0 to 512 [ 47.870592][ T29] audit: type=1326 audit(1748936145.655:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 47.894122][ T29] audit: type=1326 audit(1748936145.655:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 47.917700][ T29] audit: type=1326 audit(1748936145.655:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 47.941131][ T29] audit: type=1326 audit(1748936145.655:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 47.964576][ T29] audit: type=1326 audit(1748936145.655:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 47.987958][ T29] audit: type=1326 audit(1748936145.655:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 48.011603][ T29] audit: type=1326 audit(1748936145.655:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 48.017261][ T4276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.034988][ T29] audit: type=1326 audit(1748936145.655:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 48.051497][ T4276] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.070840][ T29] audit: type=1326 audit(1748936145.655:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 48.187226][ T4290] loop0: detected capacity change from 0 to 256 [ 48.196222][ T4286] loop1: detected capacity change from 0 to 512 [ 48.202624][ T4290] FAT-fs (loop0): bogus number of FAT sectors [ 48.208873][ T4290] FAT-fs (loop0): Can't find a valid FAT filesystem [ 48.216215][ T4286] EXT4-fs: Ignoring removed orlov option [ 48.227461][ T4286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.243288][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.252820][ T4290] loop0: detected capacity change from 0 to 2048 [ 48.257409][ T4286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.271436][ T4286] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.213: bg 0: block 248: padding at end of block bitmap is not set [ 48.312094][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.335513][ T4286] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.213: Failed to acquire dquot type 1 [ 48.369550][ T4286] EXT4-fs (loop1): 1 truncate cleaned up [ 48.387452][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.394172][ T4297] loop4: detected capacity change from 0 to 512 [ 48.419025][ T4297] EXT4-fs: Ignoring removed orlov option [ 48.436648][ T4297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.448002][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.448586][ T4297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.464411][ T4297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.217: bg 0: block 248: padding at end of block bitmap is not set [ 48.483276][ T4297] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.217: Failed to acquire dquot type 1 [ 48.500978][ T4304] loop2: detected capacity change from 0 to 512 [ 48.511753][ T4297] EXT4-fs (loop4): 1 truncate cleaned up [ 48.520371][ T4297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.546660][ T4304] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 48.566020][ T4304] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 48.619399][ T4309] loop0: detected capacity change from 0 to 512 [ 48.628101][ T4309] EXT4-fs: Ignoring removed orlov option [ 48.643357][ T4309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.656436][ T4309] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.667063][ T4309] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.221: bg 0: block 248: padding at end of block bitmap is not set [ 48.711237][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.715620][ T4309] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.221: Failed to acquire dquot type 1 [ 48.732689][ T4312] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 48.739156][ T4309] EXT4-fs (loop0): 1 truncate cleaned up [ 48.760733][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.791759][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.007638][ T4336] __nla_validate_parse: 10 callbacks suppressed [ 49.007659][ T4336] netlink: 596 bytes leftover after parsing attributes in process `syz.2.233'. [ 49.042234][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.056805][ T4336] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 49.109485][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 49.121683][ T4349] netlink: 92 bytes leftover after parsing attributes in process `syz.1.237'. [ 49.142512][ T4342] loop4: detected capacity change from 0 to 512 [ 49.153212][ T4342] EXT4-fs: Ignoring removed orlov option [ 49.170357][ T4342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.180559][ T4342] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.188922][ T4342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.236: bg 0: block 248: padding at end of block bitmap is not set [ 49.203606][ T4342] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.236: Failed to acquire dquot type 1 [ 49.216649][ T4342] EXT4-fs (loop4): 1 truncate cleaned up [ 49.223031][ T4342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.352302][ T4363] loop0: detected capacity change from 0 to 256 [ 49.367458][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.384567][ T4363] FAT-fs (loop0): bogus number of FAT sectors [ 49.390802][ T4363] FAT-fs (loop0): Can't find a valid FAT filesystem [ 49.472188][ T4372] netlink: 596 bytes leftover after parsing attributes in process `syz.2.248'. [ 49.481429][ T4374] loop1: detected capacity change from 0 to 128 [ 49.496421][ T4374] EXT4-fs: Ignoring removed nobh option [ 49.516567][ T4372] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 49.533617][ T4374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.546952][ T4374] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.578514][ T4382] netlink: 92 bytes leftover after parsing attributes in process `syz.0.252'. [ 49.669093][ T4388] loop2: detected capacity change from 0 to 128 [ 49.680406][ T4388] EXT4-fs: Ignoring removed nobh option [ 49.711644][ T4388] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.727209][ T4388] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.825027][ T4406] netlink: 596 bytes leftover after parsing attributes in process `syz.0.263'. [ 49.862935][ T4399] loop1: detected capacity change from 0 to 128 [ 49.886648][ T4406] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 49.941910][ T4415] netlink: 92 bytes leftover after parsing attributes in process `syz.2.266'. [ 50.039142][ T4433] FAULT_INJECTION: forcing a failure. [ 50.039142][ T4433] name failslab, interval 1, probability 0, space 0, times 1 [ 50.051877][ T4433] CPU: 0 UID: 0 PID: 4433 Comm: syz.0.273 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 50.051910][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.051927][ T4433] Call Trace: [ 50.051936][ T4433] [ 50.051946][ T4433] __dump_stack+0x1d/0x30 [ 50.051970][ T4433] dump_stack_lvl+0xe8/0x140 [ 50.052027][ T4433] dump_stack+0x15/0x1b [ 50.052049][ T4433] should_fail_ex+0x265/0x280 [ 50.052077][ T4433] should_failslab+0x8c/0xb0 [ 50.052110][ T4433] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 50.052141][ T4433] ? shmem_alloc_inode+0x34/0x50 [ 50.052176][ T4433] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 50.052200][ T4433] shmem_alloc_inode+0x34/0x50 [ 50.052220][ T4433] alloc_inode+0x3d/0x170 [ 50.052261][ T4433] new_inode+0x1d/0xe0 [ 50.052286][ T4433] shmem_get_inode+0x244/0x750 [ 50.052310][ T4433] __shmem_file_setup+0x122/0x1f0 [ 50.052356][ T4433] shmem_file_setup+0x3b/0x50 [ 50.052406][ T4433] __se_sys_memfd_create+0x2c3/0x590 [ 50.052434][ T4433] __x64_sys_memfd_create+0x31/0x40 [ 50.052461][ T4433] x64_sys_call+0x122f/0x2fb0 [ 50.052582][ T4433] do_syscall_64+0xd2/0x200 [ 50.052613][ T4433] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.052640][ T4433] ? clear_bhb_loop+0x40/0x90 [ 50.052737][ T4433] ? clear_bhb_loop+0x40/0x90 [ 50.052759][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.052792][ T4433] RIP: 0033:0x7fa82c41e969 [ 50.052811][ T4433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.052864][ T4433] RSP: 002b:00007fa82aa86e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 50.052885][ T4433] RAX: ffffffffffffffda RBX: 0000000000000208 RCX: 00007fa82c41e969 [ 50.052897][ T4433] RDX: 00007fa82aa86ef0 RSI: 0000000000000000 RDI: 00007fa82c4a1444 [ 50.052909][ T4433] RBP: 0000200000000740 R08: 00007fa82aa86bb7 R09: 00007fa82aa86e40 [ 50.052931][ T4433] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 50.052946][ T4433] R13: 00007fa82aa86ef0 R14: 00007fa82aa86eb0 R15: 0000200000000640 [ 50.052977][ T4433] [ 50.411803][ T4455] loop0: detected capacity change from 0 to 512 [ 50.439535][ T4455] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 50.480675][ T4461] vlan2: entered allmulticast mode [ 50.485888][ T4461] bond0: entered allmulticast mode [ 50.491170][ T4461] bond_slave_0: entered allmulticast mode [ 50.497073][ T4461] bond_slave_1: entered allmulticast mode [ 50.503984][ T4455] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 50.504932][ T4460] syz.2.286 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.532670][ T4466] netlink: 92 bytes leftover after parsing attributes in process `syz.3.289'. [ 50.602905][ T4472] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 50.694076][ T4482] loop4: detected capacity change from 0 to 256 [ 50.752975][ T4491] loop1: detected capacity change from 0 to 128 [ 50.768049][ T4491] EXT4-fs: Ignoring removed nobh option [ 50.790515][ T4491] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.819169][ T4497] loop4: detected capacity change from 0 to 512 [ 50.846985][ T4497] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 50.860259][ T4497] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 50.939452][ T4511] loop1: detected capacity change from 0 to 256 [ 51.071331][ T4529] FAULT_INJECTION: forcing a failure. [ 51.071331][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 51.084254][ T4529] CPU: 1 UID: 0 PID: 4529 Comm: syz.1.314 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 51.084285][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.084302][ T4529] Call Trace: [ 51.084309][ T4529] [ 51.084334][ T4529] __dump_stack+0x1d/0x30 [ 51.084431][ T4529] dump_stack_lvl+0xe8/0x140 [ 51.084452][ T4529] dump_stack+0x15/0x1b [ 51.084469][ T4529] should_fail_ex+0x265/0x280 [ 51.084494][ T4529] should_failslab+0x8c/0xb0 [ 51.084539][ T4529] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 51.084580][ T4529] ? shmem_alloc_inode+0x34/0x50 [ 51.084675][ T4529] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 51.084704][ T4529] shmem_alloc_inode+0x34/0x50 [ 51.084726][ T4529] alloc_inode+0x3d/0x170 [ 51.084748][ T4529] new_inode+0x1d/0xe0 [ 51.084846][ T4529] shmem_get_inode+0x244/0x750 [ 51.084878][ T4529] __shmem_file_setup+0x122/0x1f0 [ 51.084929][ T4529] shmem_file_setup+0x3b/0x50 [ 51.084975][ T4529] __se_sys_memfd_create+0x2c3/0x590 [ 51.084999][ T4529] __x64_sys_memfd_create+0x31/0x40 [ 51.085061][ T4529] x64_sys_call+0x122f/0x2fb0 [ 51.085083][ T4529] do_syscall_64+0xd2/0x200 [ 51.085116][ T4529] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.085149][ T4529] ? clear_bhb_loop+0x40/0x90 [ 51.085217][ T4529] ? clear_bhb_loop+0x40/0x90 [ 51.085331][ T4529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.085374][ T4529] RIP: 0033:0x7f0375e1e969 [ 51.085391][ T4529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.085415][ T4529] RSP: 002b:00007f0374486e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 51.085450][ T4529] RAX: ffffffffffffffda RBX: 0000000000000208 RCX: 00007f0375e1e969 [ 51.085462][ T4529] RDX: 00007f0374486ef0 RSI: 0000000000000000 RDI: 00007f0375ea1444 [ 51.085474][ T4529] RBP: 0000200000000740 R08: 00007f0374486bb7 R09: 00007f0374486e40 [ 51.085488][ T4529] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 51.085504][ T4529] R13: 00007f0374486ef0 R14: 00007f0374486eb0 R15: 0000200000000640 [ 51.085562][ T4529] [ 51.358103][ T4540] loop0: detected capacity change from 0 to 512 [ 51.372419][ T4540] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 51.395569][ T4540] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 51.448583][ T4550] loop0: detected capacity change from 0 to 128 [ 51.455183][ T4550] EXT4-fs: Ignoring removed nobh option [ 51.467296][ T4551] lo speed is unknown, defaulting to 1000 [ 51.493746][ T4551] lo speed is unknown, defaulting to 1000 [ 51.519526][ T4550] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.542638][ T4551] lo speed is unknown, defaulting to 1000 [ 51.549274][ T4551] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.558603][ T4551] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.569474][ T4559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 51.582630][ T4551] lo speed is unknown, defaulting to 1000 [ 51.595323][ T4551] lo speed is unknown, defaulting to 1000 [ 51.601890][ T4551] lo speed is unknown, defaulting to 1000 [ 51.608547][ T4551] lo speed is unknown, defaulting to 1000 [ 51.628442][ T4564] loop1: detected capacity change from 0 to 128 [ 51.651001][ T4566] loop4: detected capacity change from 0 to 256 [ 51.655789][ T4564] EXT4-fs: Ignoring removed nobh option [ 51.668365][ T4564] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.671327][ T4551] lo speed is unknown, defaulting to 1000 [ 51.731195][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.738450][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.752929][ T4571] bridge0: entered allmulticast mode [ 51.796068][ T4577] loop1: detected capacity change from 0 to 512 [ 51.802704][ T4573] loop4: detected capacity change from 0 to 128 [ 51.820390][ T4577] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 51.852305][ T4577] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 51.879512][ T4573] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.912135][ T4573] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.061634][ T4596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'. [ 52.102420][ T4600] loop1: detected capacity change from 0 to 128 [ 52.111417][ T4600] EXT4-fs: Ignoring removed nobh option [ 52.121064][ T4600] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.256386][ T4613] loop4: detected capacity change from 0 to 512 [ 52.263852][ T4613] EXT4-fs: Ignoring removed orlov option [ 52.271156][ T4613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.281172][ T4613] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.289177][ T4613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.350: bg 0: block 248: padding at end of block bitmap is not set [ 52.304127][ T4613] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.350: Failed to acquire dquot type 1 [ 52.325035][ T4613] EXT4-fs (loop4): 1 truncate cleaned up [ 52.378688][ T4624] loop1: detected capacity change from 0 to 512 [ 52.387427][ T4624] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 52.398875][ T4624] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 52.510691][ T4633] loop4: detected capacity change from 0 to 128 [ 52.519019][ T4633] EXT4-fs: Ignoring removed nobh option [ 52.528401][ T4633] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.648180][ T4647] loop4: detected capacity change from 0 to 512 [ 52.659405][ T4647] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 52.668396][ T4647] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 52.728341][ T4651] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 52.775126][ T4655] loop4: detected capacity change from 0 to 256 [ 52.875897][ T29] kauditd_printk_skb: 1025 callbacks suppressed [ 52.875911][ T29] audit: type=1326 audit(1748936150.665:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 52.908399][ T29] audit: type=1326 audit(1748936150.705:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 52.932343][ T29] audit: type=1326 audit(1748936150.705:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 52.956541][ T29] audit: type=1326 audit(1748936150.705:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 52.980639][ T29] audit: type=1326 audit(1748936150.705:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 53.028816][ T29] audit: type=1326 audit(1748936150.755:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 53.052807][ T29] audit: type=1326 audit(1748936150.755:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 53.076671][ T29] audit: type=1326 audit(1748936150.755:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 53.100565][ T29] audit: type=1326 audit(1748936150.755:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 53.124558][ T29] audit: type=1326 audit(1748936150.755:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 53.291650][ T4696] loop0: detected capacity change from 0 to 128 [ 53.298611][ T4696] EXT4-fs: Ignoring removed nobh option [ 53.348395][ T4696] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.400790][ T4703] loop0: detected capacity change from 0 to 512 [ 53.420804][ T4703] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 53.438265][ T4703] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 53.568756][ T4723] loop0: detected capacity change from 0 to 128 [ 53.586979][ T4723] EXT4-fs: Ignoring removed nobh option [ 53.635401][ T4723] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.660524][ T4734] loop1: detected capacity change from 0 to 512 [ 53.735114][ T4734] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 53.782117][ T4734] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 53.848729][ T4756] loop0: detected capacity change from 0 to 128 [ 53.875721][ T4756] EXT4-fs: Ignoring removed nobh option [ 53.902479][ T4760] loop2: detected capacity change from 0 to 512 [ 53.912822][ T4756] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.941907][ T4760] EXT4-fs: Ignoring removed orlov option [ 53.963137][ T4760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.976412][ T4760] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.988854][ T4771] loop1: detected capacity change from 0 to 512 [ 53.996165][ T4760] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.415: bg 0: block 248: padding at end of block bitmap is not set [ 54.030714][ T4760] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.415: Failed to acquire dquot type 1 [ 54.044850][ T4771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 54.075688][ T4760] EXT4-fs (loop2): 1 truncate cleaned up [ 54.086294][ T4771] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.097460][ T4771] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 54.153840][ T4771] EXT4-fs (loop1): 2 truncates cleaned up [ 54.209209][ T4771] __nla_validate_parse: 8 callbacks suppressed [ 54.209227][ T4771] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 54.297542][ T4797] loop4: detected capacity change from 0 to 512 [ 54.305422][ T4797] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 54.320298][ T4797] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 54.348697][ T4802] loop1: detected capacity change from 0 to 128 [ 54.371563][ T4802] EXT4-fs: Ignoring removed nobh option [ 54.394823][ T4802] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.452924][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 54.487866][ T4816] siw: device registration error -23 [ 54.493612][ T4816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.438'. [ 54.502994][ T4811] loop1: detected capacity change from 0 to 512 [ 54.511935][ T4811] EXT4-fs: Ignoring removed orlov option [ 54.523375][ T4811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.547696][ T4811] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.554921][ T4811] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.437: bg 0: block 248: padding at end of block bitmap is not set [ 54.573888][ T4811] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.437: Failed to acquire dquot type 1 [ 54.587247][ T4811] EXT4-fs (loop1): 1 truncate cleaned up [ 54.634469][ T4827] loop4: detected capacity change from 0 to 512 [ 54.648294][ T4827] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 54.663414][ T4827] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 54.696996][ T4825] loop0: detected capacity change from 0 to 512 [ 54.714224][ T4825] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 54.743240][ T4825] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.752821][ T4825] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 54.768589][ T4825] EXT4-fs (loop0): 2 truncates cleaned up [ 54.792971][ T4825] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 54.813586][ T4834] loop1: detected capacity change from 0 to 128 [ 54.821589][ T4834] EXT4-fs: Ignoring removed nobh option [ 54.832889][ T4834] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.926298][ T4842] netlink: 92 bytes leftover after parsing attributes in process `syz.4.451'. [ 55.062683][ T4862] loop0: detected capacity change from 0 to 1024 [ 55.083730][ T4862] FAULT_INJECTION: forcing a failure. [ 55.083730][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 55.096549][ T4862] CPU: 1 UID: 0 PID: 4862 Comm: syz.0.459 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 55.096611][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.096628][ T4862] Call Trace: [ 55.096636][ T4862] [ 55.096645][ T4862] __dump_stack+0x1d/0x30 [ 55.096673][ T4862] dump_stack_lvl+0xe8/0x140 [ 55.096711][ T4862] dump_stack+0x15/0x1b [ 55.096796][ T4862] should_fail_ex+0x265/0x280 [ 55.096825][ T4862] should_failslab+0x8c/0xb0 [ 55.096863][ T4862] __kmalloc_noprof+0xa5/0x3e0 [ 55.096981][ T4862] ? copy_splice_read+0xc2/0x5f0 [ 55.097026][ T4862] copy_splice_read+0xc2/0x5f0 [ 55.097077][ T4862] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 55.097180][ T4862] splice_direct_to_actor+0x290/0x680 [ 55.097208][ T4862] ? __pfx_direct_splice_actor+0x10/0x10 [ 55.097240][ T4862] do_splice_direct+0xda/0x150 [ 55.097265][ T4862] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 55.097306][ T4862] do_sendfile+0x380/0x650 [ 55.097348][ T4862] __x64_sys_sendfile64+0x105/0x150 [ 55.097387][ T4862] x64_sys_call+0xb39/0x2fb0 [ 55.097444][ T4862] do_syscall_64+0xd2/0x200 [ 55.097535][ T4862] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.097571][ T4862] ? clear_bhb_loop+0x40/0x90 [ 55.097600][ T4862] ? clear_bhb_loop+0x40/0x90 [ 55.097629][ T4862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.097706][ T4862] RIP: 0033:0x7fa82c41e969 [ 55.097725][ T4862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.097748][ T4862] RSP: 002b:00007fa82aa87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 55.097772][ T4862] RAX: ffffffffffffffda RBX: 00007fa82c645fa0 RCX: 00007fa82c41e969 [ 55.097851][ T4862] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 55.097867][ T4862] RBP: 00007fa82aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 55.097883][ T4862] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 55.097899][ T4862] R13: 0000000000000000 R14: 00007fa82c645fa0 R15: 00007ffe6c249f98 [ 55.097925][ T4862] [ 55.319454][ T4868] loop1: detected capacity change from 0 to 128 [ 55.326548][ T4868] EXT4-fs: Ignoring removed nobh option [ 55.365565][ T4868] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.423059][ T4880] netlink: 92 bytes leftover after parsing attributes in process `syz.1.466'. [ 55.530229][ T4894] loop2: detected capacity change from 0 to 512 [ 55.530331][ T4895] loop4: detected capacity change from 0 to 128 [ 55.549504][ T4895] EXT4-fs: Ignoring removed nobh option [ 55.567743][ T4895] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.579927][ T4894] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 55.599763][ T4894] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 55.681550][ T4908] loop1: detected capacity change from 0 to 128 [ 55.697688][ T4908] EXT4-fs: Ignoring removed nobh option [ 55.707266][ T4914] netlink: 92 bytes leftover after parsing attributes in process `syz.2.482'. [ 55.719906][ T4908] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.804312][ T4924] loop1: detected capacity change from 0 to 512 [ 55.828365][ T4924] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 55.839718][ T4924] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 55.912412][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 55.961605][ T4938] loop4: detected capacity change from 0 to 512 [ 55.979824][ T4938] EXT4-fs: Ignoring removed orlov option [ 55.990647][ T4938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.009664][ T4938] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.019237][ T4938] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.492: bg 0: block 248: padding at end of block bitmap is not set [ 56.034049][ T4938] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.492: Failed to acquire dquot type 1 [ 56.048060][ T4949] netlink: 92 bytes leftover after parsing attributes in process `syz.1.496'. [ 56.058009][ T4938] EXT4-fs (loop4): 1 truncate cleaned up [ 56.117273][ T4955] loop2: detected capacity change from 0 to 128 [ 56.127700][ T4955] EXT4-fs: Ignoring removed nobh option [ 56.141063][ T4955] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.335319][ T4979] loop4: detected capacity change from 0 to 128 [ 56.342951][ T4979] EXT4-fs: Ignoring removed nobh option [ 56.356081][ T4979] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.508577][ T4997] loop4: detected capacity change from 0 to 512 [ 56.517517][ T4997] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 56.526921][ T4997] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 56.590916][ T5005] loop4: detected capacity change from 0 to 128 [ 56.612223][ T5005] EXT4-fs: Ignoring removed nobh option [ 56.628904][ T5007] loop2: detected capacity change from 0 to 128 [ 56.638594][ T5005] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.652122][ T5007] EXT4-fs: Ignoring removed nobh option [ 56.670069][ T5007] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.734577][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 56.757090][ T5016] loop0: detected capacity change from 0 to 512 [ 56.774464][ T5016] EXT4-fs: Ignoring removed orlov option [ 56.788460][ T5016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.800748][ T5016] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.809812][ T5016] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.528: bg 0: block 248: padding at end of block bitmap is not set [ 56.824517][ T5016] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.528: Failed to acquire dquot type 1 [ 56.836761][ T5016] EXT4-fs (loop0): 1 truncate cleaned up [ 56.964613][ T5030] loop0: detected capacity change from 0 to 512 [ 56.986694][ T5030] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 57.001561][ T5030] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 57.062014][ T5038] loop3: detected capacity change from 0 to 128 [ 57.064852][ T5036] loop4: detected capacity change from 0 to 512 [ 57.080759][ T5036] EXT4-fs: Ignoring removed orlov option [ 57.081079][ T5038] EXT4-fs: Ignoring removed nobh option [ 57.093840][ T5036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.110238][ T5036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.122773][ T5036] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.536: bg 0: block 248: padding at end of block bitmap is not set [ 57.124680][ T5038] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.145406][ T5036] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.536: Failed to acquire dquot type 1 [ 57.161092][ T5036] EXT4-fs (loop4): 1 truncate cleaned up [ 57.249484][ T5049] loop3: detected capacity change from 0 to 512 [ 57.256220][ T5055] loop4: detected capacity change from 0 to 128 [ 57.274535][ T5055] EXT4-fs: Ignoring removed nobh option [ 57.281205][ T5049] EXT4-fs: Ignoring removed orlov option [ 57.303748][ T5049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.308432][ T5055] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.342502][ T5049] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.355893][ T5049] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.541: bg 0: block 248: padding at end of block bitmap is not set [ 57.371028][ T5049] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.541: Failed to acquire dquot type 1 [ 57.383151][ T5049] EXT4-fs (loop3): 1 truncate cleaned up [ 57.552643][ T5077] loop1: detected capacity change from 0 to 512 [ 57.579280][ T5077] EXT4-fs: Ignoring removed orlov option [ 57.596285][ T5077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.619115][ T5077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.637101][ T5077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.553: bg 0: block 248: padding at end of block bitmap is not set [ 57.651938][ T5077] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.553: Failed to acquire dquot type 1 [ 57.663917][ T5077] EXT4-fs (loop1): 1 truncate cleaned up [ 57.697252][ T5093] loop2: detected capacity change from 0 to 128 [ 57.720287][ T5093] EXT4-fs: Ignoring removed nobh option [ 57.771548][ T5093] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.897730][ T5120] loop4: detected capacity change from 0 to 128 [ 57.907951][ T5116] loop1: detected capacity change from 0 to 512 [ 57.926212][ T5120] EXT4-fs: Ignoring removed nobh option [ 57.929455][ T5116] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 57.946876][ T5120] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.957324][ T29] kauditd_printk_skb: 1056 callbacks suppressed [ 57.957403][ T29] audit: type=1326 audit(1748936155.745:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 57.987230][ T29] audit: type=1326 audit(1748936155.745:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.016659][ T29] audit: type=1326 audit(1748936155.785:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.023604][ T5116] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 58.040061][ T29] audit: type=1326 audit(1748936155.785:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.072346][ T29] audit: type=1326 audit(1748936155.785:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.074250][ T5116] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 58.096105][ T29] audit: type=1326 audit(1748936155.785:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.132476][ T29] audit: type=1326 audit(1748936155.785:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.134401][ T5116] EXT4-fs (loop1): 2 truncates cleaned up [ 58.155998][ T29] audit: type=1326 audit(1748936155.785:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.156040][ T29] audit: type=1326 audit(1748936155.785:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.156073][ T29] audit: type=1326 audit(1748936155.785:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 58.300608][ T5132] loop2: detected capacity change from 0 to 512 [ 58.307610][ T5132] EXT4-fs: Ignoring removed orlov option [ 58.314793][ T5132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.337934][ T5132] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.360785][ T5132] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.576: bg 0: block 248: padding at end of block bitmap is not set [ 58.378564][ T5132] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.576: Failed to acquire dquot type 1 [ 58.414109][ T5132] EXT4-fs (loop2): 1 truncate cleaned up [ 58.463655][ T5150] loop1: detected capacity change from 0 to 512 [ 58.480972][ T5150] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 58.506434][ T5156] loop2: detected capacity change from 0 to 128 [ 58.517494][ T5150] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 58.540188][ T5156] EXT4-fs: Ignoring removed nobh option [ 58.567449][ T5162] loop3: detected capacity change from 0 to 128 [ 58.576636][ T5156] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.597784][ T5165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.605369][ T5165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.609173][ T5162] EXT4-fs: Ignoring removed nobh option [ 58.619049][ T5165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.626755][ T5165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.639281][ T5162] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.656919][ T5167] loop1: detected capacity change from 0 to 512 [ 58.674616][ T5167] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 58.689166][ T5167] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 58.698766][ T5167] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 58.719122][ T5167] EXT4-fs (loop1): 2 truncates cleaned up [ 58.944008][ T5190] loop3: detected capacity change from 0 to 512 [ 58.977101][ T5194] loop1: detected capacity change from 0 to 128 [ 58.977607][ T5194] EXT4-fs: Ignoring removed nobh option [ 58.978354][ T5195] loop4: detected capacity change from 0 to 128 [ 58.978760][ T5195] EXT4-fs: Ignoring removed nobh option [ 59.059761][ T5190] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 59.090856][ T5195] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.106573][ T5194] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.140272][ T5190] EXT4-fs (loop3): failed to open journal device unknown-block(7,45) -6 [ 59.429026][ T5211] __nla_validate_parse: 7 callbacks suppressed [ 59.429041][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 59.429184][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 59.511983][ T5223] loop1: detected capacity change from 0 to 128 [ 59.536242][ T5223] EXT4-fs: Ignoring removed nobh option [ 59.546398][ T5227] loop4: detected capacity change from 0 to 128 [ 59.557842][ T5229] FAULT_INJECTION: forcing a failure. [ 59.557842][ T5229] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.571809][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: syz.3.616 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 59.571889][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.571904][ T5229] Call Trace: [ 59.571913][ T5229] [ 59.571989][ T5229] __dump_stack+0x1d/0x30 [ 59.572019][ T5229] dump_stack_lvl+0xe8/0x140 [ 59.572045][ T5229] dump_stack+0x15/0x1b [ 59.572067][ T5229] should_fail_ex+0x265/0x280 [ 59.572157][ T5229] should_fail+0xb/0x20 [ 59.572179][ T5229] should_fail_usercopy+0x1a/0x20 [ 59.572202][ T5229] _copy_from_iter+0xcf/0xe40 [ 59.572384][ T5229] ? __build_skb_around+0x1a0/0x200 [ 59.572431][ T5229] ? __build_skb+0x59/0x70 [ 59.572514][ T5229] ? is_vmalloc_addr+0x37/0x90 [ 59.572545][ T5229] netlink_sendmsg+0x471/0x6b0 [ 59.572582][ T5229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.572670][ T5229] __sock_sendmsg+0x142/0x180 [ 59.572693][ T5229] sock_write_iter+0x165/0x1b0 [ 59.572770][ T5229] ? __pfx_sock_write_iter+0x10/0x10 [ 59.572827][ T5229] vfs_write+0x4a0/0x8e0 [ 59.572922][ T5229] ksys_write+0xda/0x1a0 [ 59.572953][ T5229] __x64_sys_write+0x40/0x50 [ 59.573008][ T5229] x64_sys_call+0x2cdd/0x2fb0 [ 59.573034][ T5229] do_syscall_64+0xd2/0x200 [ 59.573108][ T5229] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.573144][ T5229] ? clear_bhb_loop+0x40/0x90 [ 59.573173][ T5229] ? clear_bhb_loop+0x40/0x90 [ 59.573210][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.573238][ T5229] RIP: 0033:0x7fa61ab8e969 [ 59.573255][ T5229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.573274][ T5229] RSP: 002b:00007fa6191f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.573298][ T5229] RAX: ffffffffffffffda RBX: 00007fa61adb5fa0 RCX: 00007fa61ab8e969 [ 59.573321][ T5229] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000006 [ 59.573391][ T5229] RBP: 00007fa6191f7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.573407][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.573490][ T5229] R13: 0000000000000000 R14: 00007fa61adb5fa0 R15: 00007ffe59448828 [ 59.573517][ T5229] [ 59.579147][ T5227] EXT4-fs: Ignoring removed nobh option [ 59.629345][ T5223] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.635845][ T5232] netlink: 596 bytes leftover after parsing attributes in process `syz.3.618'. [ 59.644247][ T5227] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.874596][ T5232] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 59.892190][ T5236] loop1: detected capacity change from 0 to 512 [ 59.919457][ T5236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.619: bg 0: block 248: padding at end of block bitmap is not set [ 59.942362][ T5236] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.619: Failed to acquire dquot type 1 [ 59.986986][ T5236] EXT4-fs (loop1): 1 truncate cleaned up [ 60.003439][ T5236] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.003865][ T5246] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.623'. [ 60.050330][ T5247] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.623'. [ 60.059858][ T5256] loop3: detected capacity change from 0 to 128 [ 60.066722][ T5248] loop2: detected capacity change from 0 to 128 [ 60.075158][ T5236] batman_adv: batadv0: Adding interface: dummy0 [ 60.081549][ T5236] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.112745][ T5236] batman_adv: batadv0: Interface activated: dummy0 [ 60.120831][ T5256] EXT4-fs: Ignoring removed nobh option [ 60.124173][ T5236] batadv0: mtu less than device minimum [ 60.132395][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.143388][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.154314][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.165080][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.175998][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.182770][ T5256] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.186948][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.207587][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.218456][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.229332][ T5236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.288947][ T5236] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.619: deleted inode referenced: 12 [ 60.301100][ T5236] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.619: deleted inode referenced: 12 [ 60.315577][ T5268] loop4: detected capacity change from 0 to 128 [ 60.332615][ T5236] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.619: deleted inode referenced: 12 [ 60.341517][ T5268] EXT4-fs: Ignoring removed nobh option [ 60.367964][ T5236] syz.1.619 (5236) used greatest stack depth: 9096 bytes left [ 60.512872][ T5268] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.561417][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 60.570431][ T5290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'. [ 60.708590][ T5293] lo speed is unknown, defaulting to 1000 [ 61.265215][ T5310] loop1: detected capacity change from 0 to 512 [ 61.285753][ T5318] loop3: detected capacity change from 0 to 128 [ 61.292543][ T5318] EXT4-fs: Ignoring removed nobh option [ 61.343285][ T5318] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.351894][ T5310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 61.369263][ T5310] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 61.378258][ T5310] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 61.392101][ T5310] EXT4-fs (loop1): 2 truncates cleaned up [ 61.515424][ T5337] loop4: detected capacity change from 0 to 128 [ 61.544604][ T5337] EXT4-fs: Ignoring removed nobh option [ 61.594367][ T5337] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.615507][ T5347] netlink: 596 bytes leftover after parsing attributes in process `syz.1.656'. [ 61.662151][ T5352] loop2: detected capacity change from 0 to 512 [ 61.673837][ T5352] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 61.684786][ T5352] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 61.734802][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 61.744316][ T5355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.655'. [ 61.754811][ T5354] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 61.871471][ T5364] loop2: detected capacity change from 0 to 128 [ 61.880505][ T5364] EXT4-fs: Ignoring removed nobh option [ 61.969258][ T5367] lo speed is unknown, defaulting to 1000 [ 62.143186][ T5364] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.643656][ T5378] loop1: detected capacity change from 0 to 2048 [ 62.704872][ T5378] EXT4-fs (loop1): failed to initialize system zone (-117) [ 62.712650][ T5378] EXT4-fs (loop1): mount failed [ 62.768574][ T5395] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 62.807607][ T5397] loop4: detected capacity change from 0 to 512 [ 62.816000][ T5397] EXT4-fs: Ignoring removed orlov option [ 62.848492][ T5397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.869590][ T5397] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.881554][ T5405] lo speed is unknown, defaulting to 1000 [ 62.903011][ T5397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.676: bg 0: block 248: padding at end of block bitmap is not set [ 62.918372][ T5397] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.676: Failed to acquire dquot type 1 [ 62.930731][ T5410] loop3: detected capacity change from 0 to 512 [ 62.939958][ T5410] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 62.957073][ T5397] EXT4-fs (loop4): 1 truncate cleaned up [ 62.971851][ T5410] EXT4-fs (loop3): failed to open journal device unknown-block(7,45) -6 [ 62.973733][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 62.973751][ T29] audit: type=1326 audit(1748936160.765:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddb650d2d0 code=0x7ffc0000 [ 63.089620][ T29] audit: type=1326 audit(1748936160.815:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fddb650d6b7 code=0x7ffc0000 [ 63.113315][ T29] audit: type=1326 audit(1748936160.815:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddb650d2d0 code=0x7ffc0000 [ 63.137256][ T29] audit: type=1326 audit(1748936160.815:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 63.161140][ T29] audit: type=1326 audit(1748936160.815:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 63.185047][ T29] audit: type=1326 audit(1748936160.815:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fddb650e969 code=0x7ffc0000 [ 63.209900][ T29] audit: type=1326 audit(1748936160.845:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375e1e969 code=0x7ffc0000 [ 63.233895][ T29] audit: type=1326 audit(1748936160.845:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375e1e969 code=0x7ffc0000 [ 63.257867][ T29] audit: type=1326 audit(1748936160.845:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0375e1e969 code=0x7ffc0000 [ 63.281737][ T29] audit: type=1326 audit(1748936160.845:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375e1e969 code=0x7ffc0000 [ 63.548584][ T5434] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 63.628430][ T5442] lo speed is unknown, defaulting to 1000 [ 63.920299][ T5447] loop4: detected capacity change from 0 to 512 [ 63.968441][ T5447] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 64.053839][ T5447] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 64.256364][ T5453] loop3: detected capacity change from 0 to 2048 [ 64.277677][ T5453] EXT4-fs (loop3): failed to initialize system zone (-117) [ 64.286174][ T5453] EXT4-fs (loop3): mount failed [ 64.402270][ T5464] loop1: detected capacity change from 0 to 512 [ 64.414018][ T5464] EXT4-fs: Ignoring removed orlov option [ 64.441860][ T5464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.457513][ T5476] __nla_validate_parse: 10 callbacks suppressed [ 64.457529][ T5476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 64.472924][ T5476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.698'. [ 64.492149][ T5464] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.502677][ T5473] lo speed is unknown, defaulting to 1000 [ 64.508757][ T5453] netlink: 44 bytes leftover after parsing attributes in process `syz.3.695'. [ 64.520636][ T5464] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.701: bg 0: block 248: padding at end of block bitmap is not set [ 64.536842][ T5464] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.701: Failed to acquire dquot type 1 [ 64.611343][ T5464] EXT4-fs (loop1): 1 truncate cleaned up [ 64.622227][ T5486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.706'. [ 64.641145][ T5491] loop4: detected capacity change from 0 to 512 [ 64.671799][ T5493] random: crng reseeded on system resumption [ 64.684241][ T5491] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 64.695850][ T5491] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 64.741623][ T5496] loop3: detected capacity change from 0 to 512 [ 64.803873][ T5496] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.708: bad orphan inode 11 [ 64.827042][ T5496] ext4_test_bit(bit=10, block=4) = 1 [ 64.832591][ T5496] is_bad_inode(inode)=0 [ 64.836825][ T5496] NEXT_ORPHAN(inode)=2080374784 [ 64.841744][ T5496] max_ino=32 [ 64.844999][ T5496] i_nlink=0 [ 64.848975][ T5506] netlink: 596 bytes leftover after parsing attributes in process `syz.4.710'. [ 64.865241][ T5496] EXT4-fs (loop3): 1 truncate cleaned up [ 64.964844][ T5513] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 65.036436][ T5524] loop1: detected capacity change from 0 to 512 [ 65.046171][ T5524] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 65.055613][ T5524] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 65.120468][ T5529] netlink: 596 bytes leftover after parsing attributes in process `syz.2.723'. [ 65.162537][ T5532] netlink: 596 bytes leftover after parsing attributes in process `syz.0.724'. [ 65.188240][ T5535] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 65.210465][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 65.232144][ T5536] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 65.232351][ T5534] loop1: detected capacity change from 0 to 512 [ 65.250574][ T5534] EXT4-fs: Ignoring removed orlov option [ 65.258833][ T5534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.268439][ T5534] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.275839][ T5534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.725: bg 0: block 248: padding at end of block bitmap is not set [ 65.292728][ T5534] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.725: Failed to acquire dquot type 1 [ 65.305128][ T5534] EXT4-fs (loop1): 1 truncate cleaned up [ 65.542304][ T5543] loop1: detected capacity change from 0 to 2048 [ 65.567454][ T5543] EXT4-fs (loop1): failed to initialize system zone (-117) [ 65.575566][ T5543] EXT4-fs (loop1): mount failed [ 65.728272][ T5560] loop4: detected capacity change from 0 to 512 [ 65.744802][ T5560] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 65.760454][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 65.760359][ T5560] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 65.769711][ T5562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.786368][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.798613][ T5562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.806950][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.848557][ T5564] loop1: detected capacity change from 0 to 512 [ 65.861675][ T5564] EXT4-fs: Ignoring removed orlov option [ 65.875567][ T5564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.896793][ T5568] netlink: 596 bytes leftover after parsing attributes in process `syz.4.739'. [ 65.908516][ T5564] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.920851][ T5564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.737: bg 0: block 248: padding at end of block bitmap is not set [ 65.936406][ T5564] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.737: Failed to acquire dquot type 1 [ 65.965437][ T5564] EXT4-fs (loop1): 1 truncate cleaned up [ 65.976048][ T5572] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 65.999886][ T5576] random: crng reseeded on system resumption [ 66.116716][ T5586] loop2: detected capacity change from 0 to 512 [ 66.144228][ T5586] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.741: bad orphan inode 11 [ 66.158818][ T5586] ext4_test_bit(bit=10, block=4) = 1 [ 66.164477][ T5586] is_bad_inode(inode)=0 [ 66.169328][ T5586] NEXT_ORPHAN(inode)=2080374784 [ 66.174709][ T5586] max_ino=32 [ 66.178451][ T5586] i_nlink=0 [ 66.186090][ T5586] EXT4-fs (loop2): 1 truncate cleaned up [ 66.291762][ T5593] loop1: detected capacity change from 0 to 512 [ 66.322856][ T5593] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.503474][ T5613] loop3: detected capacity change from 0 to 512 [ 66.512412][ T5613] EXT4-fs: Ignoring removed orlov option [ 66.524035][ T5613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.549214][ T5613] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.562041][ T5613] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.758: bg 0: block 248: padding at end of block bitmap is not set [ 66.577665][ T5613] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.758: Failed to acquire dquot type 1 [ 66.590903][ T5613] EXT4-fs (loop3): 1 truncate cleaned up [ 66.628535][ T5624] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 66.856454][ T5633] loop4: detected capacity change from 0 to 512 [ 66.866941][ T5633] EXT4-fs: Ignoring removed orlov option [ 66.872361][ T5635] loop3: detected capacity change from 0 to 512 [ 66.881309][ T5633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.883280][ T5635] EXT4-fs: Ignoring removed orlov option [ 66.898846][ T5635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.917121][ T5633] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.917816][ T5635] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.936990][ T5633] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.764: bg 0: block 248: padding at end of block bitmap is not set [ 66.937392][ T5635] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.766: bg 0: block 248: padding at end of block bitmap is not set [ 66.969437][ T5635] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.766: Failed to acquire dquot type 1 [ 66.970517][ T5633] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.764: Failed to acquire dquot type 1 [ 66.986547][ T5635] EXT4-fs (loop3): 1 truncate cleaned up [ 66.995349][ T5633] EXT4-fs (loop4): 1 truncate cleaned up [ 67.333141][ T5654] loop2: detected capacity change from 0 to 512 [ 67.342473][ T5654] EXT4-fs: Ignoring removed orlov option [ 67.349491][ T5654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.365240][ T5654] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.375910][ T5654] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.773: bg 0: block 248: padding at end of block bitmap is not set [ 67.422719][ T5654] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.773: Failed to acquire dquot type 1 [ 67.450251][ T5654] EXT4-fs (loop2): 1 truncate cleaned up [ 67.534975][ T5666] loop4: detected capacity change from 0 to 512 [ 67.552344][ T5666] EXT4-fs: Ignoring removed orlov option [ 67.585534][ T5666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.624776][ T5666] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.635128][ T5666] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.778: bg 0: block 248: padding at end of block bitmap is not set [ 67.651451][ T5666] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.778: Failed to acquire dquot type 1 [ 67.666910][ T5666] EXT4-fs (loop4): 1 truncate cleaned up [ 67.753996][ T5696] loop2: detected capacity change from 0 to 128 [ 67.767197][ T5696] EXT4-fs: Ignoring removed nobh option [ 67.805642][ T5696] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.857271][ T5699] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 67.937576][ T5708] loop0: detected capacity change from 0 to 512 [ 67.944736][ T5708] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 67.965697][ T5711] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 67.978534][ T5708] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 67.988010][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 67.988025][ T29] audit: type=1326 audit(1748936165.775:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.018582][ T29] audit: type=1326 audit(1748936165.775:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.042473][ T29] audit: type=1326 audit(1748936165.775:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.066511][ T29] audit: type=1326 audit(1748936165.775:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.090464][ T29] audit: type=1326 audit(1748936165.775:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.114418][ T29] audit: type=1326 audit(1748936165.775:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.138448][ T29] audit: type=1326 audit(1748936165.775:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.162383][ T29] audit: type=1326 audit(1748936165.775:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.186326][ T29] audit: type=1326 audit(1748936165.775:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.210613][ T29] audit: type=1326 audit(1748936165.775:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb305fe969 code=0x7ffc0000 [ 68.321626][ T5727] loop1: detected capacity change from 0 to 512 [ 68.329386][ T5727] EXT4-fs: Ignoring removed orlov option [ 68.335845][ T5727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.354436][ T5727] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.365000][ T5727] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.803: bg 0: block 248: padding at end of block bitmap is not set [ 68.382178][ T5727] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.803: Failed to acquire dquot type 1 [ 68.412025][ T5727] EXT4-fs (loop1): 1 truncate cleaned up [ 68.421543][ T5727] EXT4-fs mount: 124 callbacks suppressed [ 68.421561][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.436964][ T5732] loop0: detected capacity change from 0 to 512 [ 68.449280][ T5729] loop2: detected capacity change from 0 to 2048 [ 68.475151][ T5732] EXT4-fs: Ignoring removed orlov option [ 68.490866][ T5729] EXT4-fs (loop2): failed to initialize system zone (-117) [ 68.501013][ T5732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.512296][ T5729] EXT4-fs (loop2): mount failed [ 68.518760][ T5732] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.532302][ T5732] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.806: bg 0: block 248: padding at end of block bitmap is not set [ 68.548042][ T5732] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.806: Failed to acquire dquot type 1 [ 68.563900][ T5732] EXT4-fs (loop0): 1 truncate cleaned up [ 68.572054][ T5732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.704729][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.758553][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.761477][ T5741] loop2: detected capacity change from 0 to 512 [ 68.766097][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.780979][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.800034][ T5741] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 68.817304][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.824842][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.834769][ T5741] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 68.983551][ T5761] loop4: detected capacity change from 0 to 2048 [ 68.988418][ T5751] loop1: detected capacity change from 0 to 512 [ 69.007222][ T5751] EXT4-fs: Ignoring removed orlov option [ 69.023736][ T5751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.041460][ T5761] EXT4-fs (loop4): failed to initialize system zone (-117) [ 69.050074][ T5761] EXT4-fs (loop4): mount failed [ 69.052147][ T5771] loop0: detected capacity change from 0 to 128 [ 69.062610][ T5751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.066729][ T5771] EXT4-fs: Ignoring removed nobh option [ 69.089184][ T5751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.814: bg 0: block 248: padding at end of block bitmap is not set [ 69.114847][ T5751] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.814: Failed to acquire dquot type 1 [ 69.136616][ T5771] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.151134][ T5751] EXT4-fs (loop1): 1 truncate cleaned up [ 69.161614][ T5771] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.162473][ T5751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.222871][ T5783] loop2: detected capacity change from 0 to 512 [ 69.234501][ T5783] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 69.247041][ T5782] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 69.259231][ T5783] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 69.327122][ T3494] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.533590][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.764822][ T5832] __nla_validate_parse: 14 callbacks suppressed [ 69.764856][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'. [ 69.877629][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 69.991178][ T5841] loop0: detected capacity change from 0 to 512 [ 70.016912][ T5859] netlink: 596 bytes leftover after parsing attributes in process `syz.1.862'. [ 70.026968][ T5841] EXT4-fs: Ignoring removed orlov option [ 70.042115][ T5841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.074319][ T5841] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.102487][ T5841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.854: bg 0: block 248: padding at end of block bitmap is not set [ 70.126829][ T5841] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.854: Failed to acquire dquot type 1 [ 70.146714][ T5868] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 70.176973][ T5841] EXT4-fs (loop0): 1 truncate cleaned up [ 70.177474][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 70.200868][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.224272][ T5872] loop4: detected capacity change from 0 to 512 [ 70.242665][ T5872] EXT4-fs: Ignoring removed orlov option [ 70.258497][ T5872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.278711][ T5872] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.287625][ T5872] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.867: bg 0: block 248: padding at end of block bitmap is not set [ 70.346103][ T5872] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.867: Failed to acquire dquot type 1 [ 70.367717][ T5872] EXT4-fs (loop4): 1 truncate cleaned up [ 70.384438][ T5872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.427856][ T5887] netlink: 596 bytes leftover after parsing attributes in process `syz.3.872'. [ 70.498316][ T5888] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 70.550872][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.610913][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 70.635086][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.640136][ T5894] loop2: detected capacity change from 0 to 512 [ 70.662029][ T5894] EXT4-fs: Ignoring removed orlov option [ 70.677983][ T5894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.687718][ T5894] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.694798][ T5894] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.877: bg 0: block 248: padding at end of block bitmap is not set [ 70.709795][ T5894] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.877: Failed to acquire dquot type 1 [ 70.725439][ T5894] EXT4-fs (loop2): 1 truncate cleaned up [ 70.733182][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.876869][ T5908] siw: device registration error -23 [ 70.901209][ T5908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.881'. [ 70.936261][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.094199][ T5925] loop4: detected capacity change from 0 to 512 [ 71.111904][ T5925] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 71.134666][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 71.155118][ T5925] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 71.188266][ T5925] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 71.206284][ T5925] EXT4-fs (loop4): 2 truncates cleaned up [ 71.218796][ T5935] loop2: detected capacity change from 0 to 512 [ 71.234791][ T5925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.248975][ T5935] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 71.258493][ T5935] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 71.295438][ T5925] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 71.343707][ T5939] loop0: detected capacity change from 0 to 512 [ 71.350906][ T5939] EXT4-fs: Ignoring removed orlov option [ 71.357679][ T5939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.373484][ T5939] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.398138][ T5939] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.894: bg 0: block 248: padding at end of block bitmap is not set [ 71.420217][ T5956] netlink: 596 bytes leftover after parsing attributes in process `syz.3.903'. [ 71.429769][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.442829][ T5939] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.894: Failed to acquire dquot type 1 [ 71.480769][ T5939] EXT4-fs (loop0): 1 truncate cleaned up [ 71.505146][ T5939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.577133][ T5964] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 71.659388][ T5969] loop2: detected capacity change from 0 to 512 [ 71.668339][ T5969] EXT4-fs: Ignoring removed orlov option [ 71.680688][ T5969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.706732][ T5969] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.714341][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.729793][ T5969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.906: bg 0: block 248: padding at end of block bitmap is not set [ 71.751577][ T5971] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 71.762334][ T5969] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.906: Failed to acquire dquot type 1 [ 71.804134][ T5969] EXT4-fs (loop2): 1 truncate cleaned up [ 71.807211][ T5977] loop1: detected capacity change from 0 to 512 [ 71.817847][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.823017][ T5977] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 71.846247][ T5977] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 72.058647][ T5991] loop1: detected capacity change from 0 to 512 [ 72.067225][ T5991] EXT4-fs: Ignoring removed orlov option [ 72.097695][ T5991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.107018][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.109369][ T5991] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.128497][ T5991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.916: bg 0: block 248: padding at end of block bitmap is not set [ 72.142988][ T5995] loop0: detected capacity change from 0 to 512 [ 72.151482][ T5991] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.916: Failed to acquire dquot type 1 [ 72.163481][ T5995] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 72.171150][ T5991] EXT4-fs (loop1): 1 truncate cleaned up [ 72.174195][ T5995] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 72.195053][ T5991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.364956][ T6010] loop0: detected capacity change from 0 to 512 [ 72.391579][ T6010] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 72.419084][ T6010] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 72.532313][ T6018] loop3: detected capacity change from 0 to 2048 [ 72.559832][ T6018] EXT4-fs (loop3): failed to initialize system zone (-117) [ 72.569485][ T6018] EXT4-fs (loop3): mount failed [ 72.648314][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.800402][ T6049] loop0: detected capacity change from 0 to 2048 [ 72.831736][ T6049] EXT4-fs (loop0): failed to initialize system zone (-117) [ 72.844705][ T6049] EXT4-fs (loop0): mount failed [ 72.872744][ T6064] loop2: detected capacity change from 0 to 512 [ 72.876644][ T6063] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 72.897590][ T6062] loop3: detected capacity change from 0 to 512 [ 72.908876][ T6062] EXT4-fs: Ignoring removed orlov option [ 72.923128][ T6062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.934039][ T6062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.941417][ T6062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.948: bg 0: block 248: padding at end of block bitmap is not set [ 72.968608][ T6064] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 72.980610][ T6064] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 72.980684][ T6062] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.948: Failed to acquire dquot type 1 [ 73.063307][ T6062] EXT4-fs (loop3): 1 truncate cleaned up [ 73.075421][ T29] kauditd_printk_skb: 1036 callbacks suppressed [ 73.075438][ T29] audit: type=1326 audit(1748936170.865:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 73.109880][ T6062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.180585][ T29] audit: type=1326 audit(1748936170.905:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 73.204116][ T29] audit: type=1326 audit(1748936170.905:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 73.227652][ T29] audit: type=1326 audit(1748936170.905:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 73.251101][ T29] audit: type=1326 audit(1748936170.905:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 73.274636][ T29] audit: type=1326 audit(1748936170.905:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c41e969 code=0x7ffc0000 [ 73.298015][ T29] audit: type=1326 audit(1748936170.945:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa61ab8d2d0 code=0x7ffc0000 [ 73.321499][ T29] audit: type=1326 audit(1748936170.945:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa61ab8d6b7 code=0x7ffc0000 [ 73.345074][ T29] audit: type=1326 audit(1748936170.945:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa61ab8d2d0 code=0x7ffc0000 [ 73.368486][ T29] audit: type=1326 audit(1748936170.945:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 73.474470][ T6090] loop0: detected capacity change from 0 to 512 [ 73.481853][ T6090] EXT4-fs: Ignoring removed orlov option [ 73.495695][ T6090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.510503][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.534592][ T6094] loop2: detected capacity change from 0 to 1024 [ 73.539458][ T6092] loop4: detected capacity change from 0 to 512 [ 73.557438][ T6090] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.564350][ T6094] ext4: Bad value for 'init_itable' [ 73.589183][ T6092] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 73.601134][ T6090] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.958: bg 0: block 248: padding at end of block bitmap is not set [ 73.630039][ T6092] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 73.653039][ T6102] FAULT_INJECTION: forcing a failure. [ 73.653039][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 73.665883][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.3.963 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 73.665956][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.665971][ T6102] Call Trace: [ 73.665991][ T6102] [ 73.666001][ T6102] __dump_stack+0x1d/0x30 [ 73.666029][ T6102] dump_stack_lvl+0xe8/0x140 [ 73.666097][ T6102] dump_stack+0x15/0x1b [ 73.666119][ T6102] should_fail_ex+0x265/0x280 [ 73.666148][ T6102] should_failslab+0x8c/0xb0 [ 73.666214][ T6102] kmem_cache_alloc_noprof+0x50/0x310 [ 73.666321][ T6102] ? getname_flags+0x80/0x3b0 [ 73.666353][ T6102] ? kstrtoull+0x111/0x140 [ 73.666416][ T6102] getname_flags+0x80/0x3b0 [ 73.666449][ T6102] vfs_fstatat+0x43/0x170 [ 73.666560][ T6102] __se_sys_newfstatat+0x55/0x260 [ 73.666607][ T6102] ? __fget_files+0x184/0x1c0 [ 73.666675][ T6102] ? fput+0x8f/0xc0 [ 73.666709][ T6102] ? ksys_write+0x192/0x1a0 [ 73.666735][ T6102] __x64_sys_newfstatat+0x55/0x70 [ 73.666861][ T6102] x64_sys_call+0x2c22/0x2fb0 [ 73.666889][ T6102] do_syscall_64+0xd2/0x200 [ 73.666925][ T6102] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.666974][ T6102] ? clear_bhb_loop+0x40/0x90 [ 73.666999][ T6102] ? clear_bhb_loop+0x40/0x90 [ 73.667025][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.667051][ T6102] RIP: 0033:0x7fa61ab8e969 [ 73.667071][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.667148][ T6102] RSP: 002b:00007fa6191f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 73.667171][ T6102] RAX: ffffffffffffffda RBX: 00007fa61adb5fa0 RCX: 00007fa61ab8e969 [ 73.667214][ T6102] RDX: 0000200000000580 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 73.667230][ T6102] RBP: 00007fa6191f7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.667245][ T6102] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 73.667260][ T6102] R13: 0000000000000000 R14: 00007fa61adb5fa0 R15: 00007ffe59448828 [ 73.667281][ T6102] [ 73.671551][ T6090] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.958: Failed to acquire dquot type 1 [ 73.685126][ T6092] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 73.705418][ T6090] EXT4-fs (loop0): 1 truncate cleaned up [ 73.797710][ T6092] EXT4-fs (loop4): 2 truncates cleaned up [ 73.875874][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.896746][ T6092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.013358][ T6123] loop3: detected capacity change from 0 to 2048 [ 74.060324][ T6123] EXT4-fs (loop3): failed to initialize system zone (-117) [ 74.068016][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.082244][ T6123] EXT4-fs (loop3): mount failed [ 74.110096][ T6135] loop4: detected capacity change from 0 to 1024 [ 74.127697][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.149545][ T6135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.188227][ T6135] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.975: Allocating blocks 497-513 which overlap fs metadata [ 74.207460][ T6143] x_tables: duplicate underflow at hook 2 [ 74.211003][ T6134] EXT4-fs (loop4): pa ffff888106a65af0: logic 128, phys. 273, len 15 [ 74.221367][ T6134] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 74.232534][ T6143] x_tables: duplicate underflow at hook 2 [ 74.263657][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.349158][ T6160] loop0: detected capacity change from 0 to 512 [ 74.379621][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.393816][ T6163] bridge_slave_1: left allmulticast mode [ 74.399662][ T6163] bridge_slave_1: left promiscuous mode [ 74.405412][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.448557][ T6170] loop3: detected capacity change from 0 to 512 [ 74.455416][ T6170] EXT4-fs: Ignoring removed orlov option [ 74.463574][ T6169] FAULT_INJECTION: forcing a failure. [ 74.463574][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 74.476471][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.2.987 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 74.476502][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.476518][ T6169] Call Trace: [ 74.476527][ T6169] [ 74.476538][ T6169] __dump_stack+0x1d/0x30 [ 74.476605][ T6169] dump_stack_lvl+0xe8/0x140 [ 74.476631][ T6169] dump_stack+0x15/0x1b [ 74.476652][ T6169] should_fail_ex+0x265/0x280 [ 74.476675][ T6169] should_failslab+0x8c/0xb0 [ 74.476704][ T6169] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 74.476770][ T6169] ? __d_alloc+0x3d/0x350 [ 74.476804][ T6169] __d_alloc+0x3d/0x350 [ 74.476839][ T6169] ? from_vfsgid+0x70/0xa0 [ 74.476873][ T6169] d_alloc_pseudo+0x1e/0x80 [ 74.476922][ T6169] alloc_file_pseudo+0x71/0x160 [ 74.476956][ T6169] ? hugetlbfs_get_inode+0x267/0x370 [ 74.476978][ T6169] hugetlb_file_setup+0x298/0x3d0 [ 74.477009][ T6169] ksys_mmap_pgoff+0x157/0x310 [ 74.477030][ T6169] x64_sys_call+0x1602/0x2fb0 [ 74.477054][ T6169] do_syscall_64+0xd2/0x200 [ 74.477091][ T6169] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.477127][ T6169] ? clear_bhb_loop+0x40/0x90 [ 74.477284][ T6169] ? clear_bhb_loop+0x40/0x90 [ 74.477306][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.477329][ T6169] RIP: 0033:0x7feb305fe969 [ 74.477350][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.477384][ T6169] RSP: 002b:00007feb2ec67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 74.477448][ T6169] RAX: ffffffffffffffda RBX: 00007feb30825fa0 RCX: 00007feb305fe969 [ 74.477464][ T6169] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 74.477480][ T6169] RBP: 00007feb2ec67090 R08: ffffffffffffffff R09: 0000000000000000 [ 74.477496][ T6169] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 74.477512][ T6169] R13: 0000000000000000 R14: 00007feb30825fa0 R15: 00007ffc5ca01958 [ 74.477537][ T6169] [ 74.481048][ T6163] bridge_slave_0: left allmulticast mode [ 74.549324][ T6160] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.550874][ T6163] bridge_slave_0: left promiscuous mode [ 74.703860][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.722317][ T6170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.735210][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.746579][ T6170] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.753629][ T6170] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.988: bg 0: block 248: padding at end of block bitmap is not set [ 74.774898][ T6170] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.988: Failed to acquire dquot type 1 [ 74.790517][ T6170] EXT4-fs (loop3): 1 truncate cleaned up [ 74.873482][ T6170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.902036][ T6182] loop0: detected capacity change from 0 to 2048 [ 74.993607][ T6188] loop0: detected capacity change from 0 to 512 [ 74.994341][ T6187] __nla_validate_parse: 15 callbacks suppressed [ 74.994360][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 75.004218][ T6188] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.049901][ T6188] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.063147][ T6188] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.082694][ T6187] loop2: detected capacity change from 0 to 512 [ 75.126974][ T6187] EXT4-fs: Ignoring removed orlov option [ 75.144608][ T6187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.167914][ T6188] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.201896][ T6187] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.206240][ T6188] EXT4-fs (loop0): 1 truncate cleaned up [ 75.214569][ T6188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.228435][ T6182] msdos: Unknown parameter '184467440737095516150x0000000000000000' [ 75.237729][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 75.257544][ T6187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.995: bg 0: block 248: padding at end of block bitmap is not set [ 75.257827][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.281658][ T6199] batman_adv: batadv0: Interface deactivated: dummy0 [ 75.288589][ T6199] batman_adv: batadv0: Removing interface: dummy0 [ 75.296877][ T6187] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.995: Failed to acquire dquot type 1 [ 75.297424][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.326977][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.334486][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.360353][ T6187] EXT4-fs (loop2): 1 truncate cleaned up [ 75.377283][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.389972][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.397510][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.438170][ T6206] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1002'. [ 75.577409][ T6211] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 75.896081][ T6229] loop3: detected capacity change from 0 to 512 [ 75.896815][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.929064][ T6229] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 75.965832][ T6229] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.031750][ T6229] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 76.076301][ T6229] EXT4-fs (loop3): 2 truncates cleaned up [ 76.082744][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.097201][ T6229] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 76.162370][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.228056][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1021'. [ 76.326395][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 76.369252][ T6260] loop3: detected capacity change from 0 to 512 [ 76.388085][ T6260] EXT4-fs: Ignoring removed orlov option [ 76.412875][ T6260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.436812][ T6260] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.446706][ T6265] loop2: detected capacity change from 0 to 2048 [ 76.459993][ T6268] loop0: detected capacity change from 0 to 2048 [ 76.466555][ T6260] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1025: bg 0: block 248: padding at end of block bitmap is not set [ 76.492631][ T6260] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1025: Failed to acquire dquot type 1 [ 76.521166][ T6260] EXT4-fs (loop3): 1 truncate cleaned up [ 76.546751][ T6268] EXT4-fs (loop0): failed to initialize system zone (-117) [ 76.566029][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 76.571804][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.599838][ T6280] loop1: detected capacity change from 0 to 512 [ 76.606240][ T6268] EXT4-fs (loop0): mount failed [ 76.612376][ T6265] EXT4-fs (loop2): failed to initialize system zone (-117) [ 76.620294][ T6265] EXT4-fs (loop2): mount failed [ 76.647122][ T6280] EXT4-fs: Ignoring removed orlov option [ 76.647810][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 76.662154][ T6285] bridge_slave_1: left allmulticast mode [ 76.668019][ T6285] bridge_slave_1: left promiscuous mode [ 76.673916][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.685652][ T6285] bridge_slave_0: left allmulticast mode [ 76.689245][ T6280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.691399][ T6285] bridge_slave_0: left promiscuous mode [ 76.705502][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.732002][ T6280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.742229][ T6280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1033: bg 0: block 248: padding at end of block bitmap is not set [ 76.760740][ T6280] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1033: Failed to acquire dquot type 1 [ 76.774962][ T6280] EXT4-fs (loop1): 1 truncate cleaned up [ 76.788954][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.860477][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1037'. [ 76.892945][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.947096][ T6300] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 77.019112][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.038167][ T6308] loop1: detected capacity change from 0 to 512 [ 77.052879][ T6308] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 77.073248][ T6308] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 77.145222][ T6314] loop3: detected capacity change from 0 to 2048 [ 77.177404][ T6314] EXT4-fs (loop3): failed to initialize system zone (-117) [ 77.189223][ T6314] EXT4-fs (loop3): mount failed [ 77.240700][ T6321] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 77.273598][ T6324] loop1: detected capacity change from 0 to 2048 [ 77.323831][ T6324] EXT4-fs (loop1): failed to initialize system zone (-117) [ 77.352285][ T6324] EXT4-fs (loop1): mount failed [ 77.410155][ T6334] loop4: detected capacity change from 0 to 2048 [ 77.483654][ T6334] EXT4-fs (loop4): failed to initialize system zone (-117) [ 77.503491][ T6339] loop1: detected capacity change from 0 to 512 [ 77.510651][ T6339] EXT4-fs: Ignoring removed orlov option [ 77.539395][ T6339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.539680][ T6334] EXT4-fs (loop4): mount failed [ 77.566764][ T6339] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.585701][ T6339] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1055: bg 0: block 248: padding at end of block bitmap is not set [ 77.608674][ T6339] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1055: Failed to acquire dquot type 1 [ 77.666517][ T6339] EXT4-fs (loop1): 1 truncate cleaned up [ 77.674270][ T6339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.872810][ T6362] tmpfs: Bad value for 'mpol' [ 77.890327][ T6362] loop3: detected capacity change from 0 to 512 [ 77.903181][ T6362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.947094][ T6362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.961232][ T6362] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.976853][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.066664][ T6383] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 78.107890][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.130705][ T6391] loop4: detected capacity change from 0 to 2048 [ 78.156234][ T6395] loop0: detected capacity change from 0 to 512 [ 78.169479][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 78.169495][ T29] audit: type=1400 audit(1748936175.965:7490): avc: denied { unlink } for pid=3328 comm="syz-executor" name="file0" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.171107][ T6391] EXT4-fs (loop4): failed to initialize system zone (-117) [ 78.212231][ T6399] loop1: detected capacity change from 0 to 512 [ 78.233055][ T6391] EXT4-fs (loop4): mount failed [ 78.242314][ T6395] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 78.256376][ T29] audit: type=1326 audit(1748936176.045:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.280309][ T29] audit: type=1326 audit(1748936176.045:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.294893][ T6406] bridge_slave_1: left allmulticast mode [ 78.304317][ T29] audit: type=1326 audit(1748936176.045:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.309517][ T6406] bridge_slave_1: left promiscuous mode [ 78.309722][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.337167][ T6399] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 78.340122][ T29] audit: type=1326 audit(1748936176.045:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.357752][ T6399] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 78.380150][ T29] audit: type=1326 audit(1748936176.045:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.391338][ T6395] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 78.412419][ T29] audit: type=1326 audit(1748936176.045:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.421594][ T6395] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 78.445316][ T29] audit: type=1326 audit(1748936176.045:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.459989][ T6395] EXT4-fs (loop0): 2 truncates cleaned up [ 78.481792][ T29] audit: type=1326 audit(1748936176.045:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.488338][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.511421][ T29] audit: type=1326 audit(1748936176.045:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6401 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ab8e969 code=0x7ffc0000 [ 78.550125][ T6406] bridge_slave_0: left allmulticast mode [ 78.556184][ T6406] bridge_slave_0: left promiscuous mode [ 78.562376][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.672174][ T3494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.840544][ T6430] tmpfs: Bad value for 'mpol' [ 78.863310][ T6430] loop1: detected capacity change from 0 to 512 [ 78.890268][ T6430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.942183][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.979488][ T6430] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.035530][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.076923][ T6458] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 79.260978][ T6476] loop0: detected capacity change from 0 to 512 [ 79.292933][ T6476] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 79.305226][ T6476] EXT4-fs (loop0): failed to open journal device unknown-block(7,45) -6 [ 79.436812][ T6490] tmpfs: Bad value for 'mpol' [ 79.460059][ T6490] loop2: detected capacity change from 0 to 512 [ 79.484306][ T6490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.526373][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.546480][ T6490] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.574075][ T6501] loop0: detected capacity change from 0 to 2048 [ 79.614471][ T6501] EXT4-fs (loop0): failed to initialize system zone (-117) [ 79.630261][ T6501] EXT4-fs (loop0): mount failed [ 79.637871][ T6507] loop1: detected capacity change from 0 to 512 [ 79.644734][ T6509] loop3: detected capacity change from 0 to 512 [ 79.651803][ T6507] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 79.664261][ T6507] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 79.676375][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.706310][ T6509] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 79.727032][ T6509] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 79.749149][ T6509] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 79.777743][ T6509] EXT4-fs (loop3): 2 truncates cleaned up [ 79.791565][ T6509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.893219][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.911859][ T6524] loop0: detected capacity change from 0 to 2048 [ 80.006908][ T6524] EXT4-fs (loop0): failed to initialize system zone (-117) [ 80.014757][ T6524] EXT4-fs (loop0): mount failed [ 80.024067][ T6532] __nla_validate_parse: 12 callbacks suppressed [ 80.024085][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 80.054962][ T6532] bridge_slave_1: left allmulticast mode [ 80.060767][ T6532] bridge_slave_1: left promiscuous mode [ 80.066583][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.091668][ T6532] bridge_slave_0: left allmulticast mode [ 80.097430][ T6532] bridge_slave_0: left promiscuous mode [ 80.103151][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.108905][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 80.134141][ T6544] loop3: detected capacity change from 0 to 512 [ 80.141180][ T6544] EXT4-fs: Ignoring removed orlov option [ 80.162203][ T6544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.187331][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 80.206515][ T6544] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.208645][ T6552] bridge_slave_1: left allmulticast mode [ 80.218605][ T6552] bridge_slave_1: left promiscuous mode [ 80.224444][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.232225][ T6544] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1145: bg 0: block 248: padding at end of block bitmap is not set [ 80.250207][ T6544] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1145: Failed to acquire dquot type 1 [ 80.262462][ T6552] bridge_slave_0: left allmulticast mode [ 80.267794][ T6544] EXT4-fs (loop3): 1 truncate cleaned up [ 80.268237][ T6552] bridge_slave_0: left promiscuous mode [ 80.279676][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.293085][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.334494][ T6562] loop2: detected capacity change from 0 to 512 [ 80.344077][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 80.367196][ T6562] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 80.377292][ T6562] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 80.383606][ T6565] loop0: detected capacity change from 0 to 2048 [ 80.441005][ T6565] EXT4-fs (loop0): failed to initialize system zone (-117) [ 80.453584][ T6565] EXT4-fs (loop0): mount failed [ 80.547927][ T6576] loop4: detected capacity change from 0 to 2048 [ 80.566581][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.583806][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 80.613084][ T6576] EXT4-fs (loop4): failed to initialize system zone (-117) [ 80.625043][ T6576] EXT4-fs (loop4): mount failed [ 80.637430][ T6582] loop1: detected capacity change from 0 to 512 [ 80.655600][ T6582] EXT4-fs: Ignoring removed orlov option [ 80.698638][ T6582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.706677][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 80.731293][ T6582] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.738269][ T6582] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1161: bg 0: block 248: padding at end of block bitmap is not set [ 80.753161][ T6582] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1161: Failed to acquire dquot type 1 [ 80.766619][ T6582] EXT4-fs (loop1): 1 truncate cleaned up [ 80.773028][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.831719][ T6603] loop2: detected capacity change from 0 to 512 [ 80.845582][ T6604] loop3: detected capacity change from 0 to 2048 [ 80.873605][ T6603] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 80.883018][ T6603] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 80.917017][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 80.930709][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.953658][ T6604] EXT4-fs (loop3): failed to initialize system zone (-117) [ 80.977541][ T6604] EXT4-fs (loop3): mount failed [ 80.994664][ T6610] loop4: detected capacity change from 0 to 512 [ 81.009690][ T6614] loop2: detected capacity change from 0 to 2048 [ 81.017031][ T6610] EXT4-fs: Ignoring removed orlov option [ 81.026008][ T6610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.045819][ T6610] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.052629][ T2] ================================================================== [ 81.060749][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 81.067271][ T2] [ 81.069610][ T2] read-write to 0xffffffff86860a20 of 4 bytes by task 3328 on cpu 0: [ 81.077684][ T2] free_pid+0x77/0x180 [ 81.081774][ T2] free_pids+0x54/0xb0 [ 81.085865][ T2] release_task+0x9a9/0xb60 [ 81.090389][ T2] wait_consider_task+0x113f/0x1650 [ 81.095612][ T2] __do_wait+0xfa/0x510 [ 81.099792][ T2] do_wait+0xb7/0x260 [ 81.103791][ T2] kernel_wait4+0x16b/0x1e0 [ 81.108317][ T2] __x64_sys_wait4+0x91/0x120 [ 81.113016][ T2] x64_sys_call+0x26c8/0x2fb0 [ 81.117709][ T2] do_syscall_64+0xd2/0x200 [ 81.122238][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.128153][ T2] [ 81.130478][ T2] read to 0xffffffff86860a20 of 4 bytes by task 2 on cpu 1: [ 81.137764][ T2] copy_process+0x148f/0x1fe0 [ 81.142454][ T2] kernel_clone+0x16c/0x5b0 [ 81.146971][ T2] kernel_thread+0xac/0xe0 [ 81.151400][ T2] kthreadd+0x28d/0x360 [ 81.155562][ T2] ret_from_fork+0xda/0x150 [ 81.160077][ T2] ret_from_fork_asm+0x1a/0x30 [ 81.164938][ T2] [ 81.167260][ T2] value changed: 0x800000c0 -> 0x800000bf [ 81.172982][ T2] [ 81.175304][ T2] Reported by Kernel Concurrency Sanitizer on: [ 81.181459][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 81.193098][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.203166][ T2] ================================================================== [ 81.222898][ T6614] EXT4-fs (loop2): failed to initialize system zone (-117) [ 81.230877][ T6610] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1173: bg 0: block 248: padding at end of block bitmap is not set [ 81.248893][ T6614] EXT4-fs (loop2): mount failed [ 81.256128][ T6610] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1173: Failed to acquire dquot type 1 [ 81.271185][ T6610] EXT4-fs (loop4): 1 truncate cleaned up [ 81.278897][ T6610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.417733][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.