last executing test programs: 36.773056622s ago: executing program 2 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 36.755918313s ago: executing program 2 (id=684): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r7, r6, 0x0, 0xfffffffc) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 33.964147017s ago: executing program 2 (id=686): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001280)=@newtaction={0x48, 0x26, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c000280"], 0x48}}, 0x0) 32.485135156s ago: executing program 2 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r2, 0x10, 0x800, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 30.034560854s ago: executing program 2 (id=696): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x9d7749d3e7f77007, 0x10, 0x400000, 0x80, {{0x33, 0x4, 0x3, 0x1, 0xcc, 0x68, 0x0, 0x6, 0x5c, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x61, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@remote, 0x15c00}, {@multicast2}]}, @timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x8, [{@local, 0x7}, {@local, 0x8}, {@loopback, 0x22}]}, @end, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xc, "e9ab509751f46d3726f8"}, @cipso={0x86, 0x6e, 0x2, [{0x0, 0xc, "b89e24bd7e7a57f104dd"}, {0x2, 0xb, "767de7b0bc3c7d57da"}, {0x5, 0x5, "0e2e68"}, {0x0, 0x5, '\f/$'}, {0x6, 0x12, "6cad9876b7d1429b07a904c2994c42b0"}, {0x7, 0x8, "3cf3459e92b2"}, {0x0, 0x12, "e26db8d7bfa9ebfc4a3d2a420347dcda"}, {0x0, 0x9, "9e6f9b8343fd36"}, {0x1, 0xb, "d65feaacaf5befd949"}, {0x6, 0x7, "a490647c47"}]}]}}}}}) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x18000000, 0x9946}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0xf, 0x5}, {0x2, 0x3, 0x8, 0x9}, {0x4, 0x1, 0x7, 0xb}, {0x4, 0x3, 0x9, 0xa}, {0x2, 0x3, 0x1, 0x8}, {0x1, 0x3, 0x7, 0x7}, {0x0, 0x1, 0x7, 0x1}, {0x5, 0x5, 0x5, 0xe}, {0x2, 0x3, 0xc, 0x2}, {0x3, 0x2, 0x3}], 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ustat(0x9, &(0x7f0000000480)) 28.653770541s ago: executing program 2 (id=701): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r5, 0xffffffffffffffc0, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8cb2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) 13.83364683s ago: executing program 32 (id=701): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r5, 0xffffffffffffffc0, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8cb2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) 8.374528877s ago: executing program 5 (id=771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.374244957s ago: executing program 5 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb4, 0x6a, 0x2c, 0x10, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0x2b, 0x57, 0x33, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) 8.078931043s ago: executing program 3 (id=774): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, "000022eb00000000"}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x810, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000002c0)=0x401) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) write(r2, &(0x7f0000000080)="d7381c47", 0x4) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/73, 0x49}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TCSETS(0xffffffffffffffff, 0x5433, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000065000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10, r3, 0x28f40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7.953186635s ago: executing program 3 (id=776): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) 7.952772755s ago: executing program 3 (id=777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setfsuid(0xee00) 7.583668262s ago: executing program 1 (id=780): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 7.365930816s ago: executing program 4 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x33) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = getpid() accept4(r0, 0x0, 0x0, 0x800) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r6, 0x29, 0x22, &(0x7f00000000c0)="ff02b5fffffffbffffffff2e2be82db1af00000000", 0x15) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.073016603s ago: executing program 0 (id=783): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 6.273330828s ago: executing program 1 (id=784): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) 5.365885126s ago: executing program 5 (id=785): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x65, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x3, 0x80000000, 0x10, @mcast1, @private1, 0x20, 0x80, 0x1, 0xfffffff8}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x7, [@enum64={0xd, 0x4, 0x0, 0x13, 0x0, 0x0, [{0xe, 0x6, 0x7}, {0x2, 0x10, 0x4}, {0xd, 0x7, 0xe8f}, {0x7, 0x0, 0x6}]}, @datasec={0x2, 0x7, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x1}, {0x3, 0x10000, 0x4}, {0x2, 0x1, 0x8}, {0x5, 0x10000, 0x8}, {0x4, 0x1, 0x7f}, {0x1, 0x3ff, 0x101}, {0x2, 0x1, 0x40}], "60dd"}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x1}, {0x3}]}]}, {0x0, [0x2e, 0x5f, 0x61, 0x30, 0x5f]}}, &(0x7f0000000500)=""/66, 0xdb, 0x42, 0x0, 0x8206, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0x5, 0x6, 0x601, r0, 0xa00, '\x00', r5, r6, 0x5, 0x0, 0x0, 0x6}, 0x50) 5.037760192s ago: executing program 0 (id=786): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) timer_create(0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r6, r5, 0x0, 0xfffffffc) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.998147813s ago: executing program 1 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000240)="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", 0x1d9}], 0x1, &(0x7f0000001b00)=[{0x10, 0x10d, 0xfffffffb}], 0x10}}], 0x1, 0x84) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (fail_nth: 1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x17) r3 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0xc, 0x1, {0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x16}}, @TCA_CHOKE_STAB={0x11e, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 4.933556344s ago: executing program 5 (id=788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) 4.931655094s ago: executing program 3 (id=789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000240)="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", 0x1d9}], 0x1, &(0x7f0000001b00)=[{0x10, 0x10d, 0xfffffffb}], 0x10}}], 0x1, 0x84) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x17) r3 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0xc, 0x1, {0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x16}}, @TCA_CHOKE_STAB={0x11e, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 4.67656701s ago: executing program 4 (id=790): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x800, &(0x7f0000000000)="74f774e0181a7e83acc620fb44d4147d0994d53d1a4de91dc6dc26b9ab0735ac613922252705295d058883c4ca740f5e44eff1f820042d73cb5f9f148e2141", 0x3f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3d31239e2f5aaa1b67f4ddca309487dfe3d65213c07d6ee78b43ddb1af768160320a134051f0b7b4395545e47c2f68800e03212a44bfa0aa6f4176a2a1e803") wait4(r0, 0x0, 0x20000000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x40004, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xffffffbb}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x3}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = syz_clone(0x140000, &(0x7f0000000340)="e865b11552f003b7ad0bd4d7798b0fd06533a12df098812402e813dd8c936aeeddcd3963766598690a92d68a9d3041a039c36eea52ffbbaf9ee103a1ab94c9034c80e55d6e25b6d16e722ce642fdbb93a7ad938e7cb353041173a165c9ea9ea8333f93257660edd802c39222f08fd85cfc8c3ce9d558de3cdc452daf16ded03de3b559de364e54ea4f20cac43a309cf41b82df297b", 0x95, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)="7c17503959a3050c1bcd519551c7953528a40494d60c46373d") waitid(0x0, r3, &(0x7f0000000b00), 0x1, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 4.65707459s ago: executing program 5 (id=791): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r2, 0x10, 0x800, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4.387393665s ago: executing program 4 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 4.348105106s ago: executing program 1 (id=793): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r5, r4, 0x0, 0xfffffffc) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.323054476s ago: executing program 3 (id=794): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) 4.309164477s ago: executing program 4 (id=795): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4.218099368s ago: executing program 5 (id=796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001280)=@newtaction={0x48, 0x26, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c000280"], 0x48}}, 0x0) 3.566705101s ago: executing program 0 (id=797): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 3.392402014s ago: executing program 1 (id=798): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8814) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) 3.378540654s ago: executing program 3 (id=799): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setfsuid(0xee00) 3.378035735s ago: executing program 4 (id=800): chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) mount(0x0, 0x0, 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) 2.039193361s ago: executing program 0 (id=801): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) 2.03822705s ago: executing program 1 (id=802): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0xb87, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 1.952151463s ago: executing program 0 (id=803): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close_range(r1, r3, 0x0) 21.66075ms ago: executing program 4 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x7fe2, 0x7fffffff, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x7}]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) 0s ago: executing program 0 (id=805): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close_range(r1, r3, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ver 1th superblock, ret: 0 [ 202.954154][ T2749] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.957896][ T2725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 202.981452][ T2749] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 2: comm syz.3.631: lblock 2 mapped to illegal pblock 2 (length 4) [ 203.027623][ T2725] FAULT_INJECTION: forcing a failure. [ 203.027623][ T2725] name failslab, interval 1, probability 0, space 0, times 0 [ 203.041756][ T2749] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.631: lblock 3 mapped to illegal pblock 3 (length 3) [ 203.075322][ T2749] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 203.087766][ T2725] CPU: 1 PID: 2725 Comm: syz.4.620 Not tainted syzkaller #0 [ 203.095060][ T2725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.105121][ T2725] Call Trace: [ 203.108400][ T2725] [ 203.111330][ T2725] __dump_stack+0x21/0x24 [ 203.115670][ T2725] dump_stack_lvl+0xee/0x150 [ 203.120276][ T2725] ? __cfi_dump_stack_lvl+0x8/0x8 [ 203.125302][ T2725] dump_stack+0x15/0x24 [ 203.129464][ T2725] should_fail_ex+0x3d4/0x520 [ 203.134145][ T2725] __should_failslab+0xac/0xf0 [ 203.138921][ T2725] ? f2fs_getxattr+0x11a1/0x1600 [ 203.143864][ T2725] should_failslab+0x9/0x20 [ 203.148374][ T2725] __kmem_cache_alloc_node+0x3d/0x2c0 [ 203.153753][ T2725] ? path_openat+0xff3/0x2f50 [ 203.158436][ T2725] ? f2fs_getxattr+0x11a1/0x1600 [ 203.161932][ T2736] loop1: detected capacity change from 0 to 131072 [ 203.163374][ T2725] __kmalloc+0xa1/0x1e0 [ 203.174012][ T2725] f2fs_getxattr+0x11a1/0x1600 [ 203.178500][ T2736] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 203.178780][ T2725] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 203.191652][ T2725] ? __cfi_f2fs_getxattr+0x10/0x10 [ 203.196779][ T2725] ? __kasan_check_write+0x14/0x20 [ 203.199049][ T2736] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 203.201897][ T2725] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 203.201927][ T2725] ? avc_has_perm+0x158/0x240 [ 203.201948][ T2725] f2fs_xattr_generic_get+0x12f/0x180 [ 203.210532][ T2736] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 203.215516][ T2725] ? __cfi_f2fs_xattr_generic_get+0x10/0x10 [ 203.239172][ T2725] __vfs_getxattr+0x3b1/0x3e0 [ 203.243845][ T2725] cap_inode_need_killpriv+0x45/0x60 [ 203.249117][ T2725] security_inode_need_killpriv+0x73/0xa0 [ 203.254825][ T2725] __file_remove_privs+0x225/0x5c0 [ 203.259918][ T2725] ? file_remove_privs+0x20/0x20 [ 203.264863][ T2725] ? current_time+0x197/0x2b0 [ 203.269525][ T2725] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 203.275751][ T2725] ? __cfi_current_time+0x10/0x10 [ 203.280767][ T2725] file_modified_flags+0xac/0x430 [ 203.285777][ T2725] ? file_modified+0x20/0x20 [ 203.290354][ T2725] ? generic_write_checks_count+0x3c6/0x4a0 [ 203.296231][ T2725] file_modified+0x17/0x20 [ 203.300632][ T2725] f2fs_file_write_iter+0x415/0x2550 [ 203.305914][ T2725] ? kstrtoull+0x137/0x1d0 [ 203.310334][ T2725] ? kstrtouint+0x74/0xe0 [ 203.314654][ T2725] ? kstrtouint_from_user+0xf7/0x150 [ 203.320021][ T2725] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 203.325736][ T2725] ? avc_policy_seqno+0x1b/0x70 [ 203.330571][ T2725] ? selinux_file_permission+0x2a5/0x510 [ 203.336187][ T2725] ? fsnotify_perm+0x67/0x5b0 [ 203.340848][ T2725] ? security_file_permission+0x8a/0xb0 [ 203.346377][ T2725] vfs_write+0x5db/0xca0 [ 203.350602][ T2725] ? slab_free_freelist_hook+0xc2/0x190 [ 203.356134][ T2725] ? __cfi_vfs_write+0x10/0x10 [ 203.360887][ T2725] ? __cfi_mutex_lock+0x10/0x10 [ 203.365728][ T2725] ? __fdget_pos+0x2cd/0x380 [ 203.370304][ T2725] ? ksys_write+0x71/0x240 [ 203.374707][ T2725] ksys_write+0x140/0x240 [ 203.379021][ T2725] ? __cfi_ksys_write+0x10/0x10 [ 203.383859][ T2725] ? debug_smp_processor_id+0x17/0x20 [ 203.389216][ T2725] __x64_sys_write+0x7b/0x90 [ 203.393789][ T2725] x64_sys_call+0x27b/0x9a0 [ 203.398274][ T2725] do_syscall_64+0x4c/0xa0 [ 203.402669][ T2725] ? clear_bhb_loop+0x30/0x80 [ 203.407328][ T2725] ? clear_bhb_loop+0x30/0x80 [ 203.411987][ T2725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.417861][ T2725] RIP: 0033:0x7fa69c78ebe9 [ 203.422269][ T2725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.441890][ T2725] RSP: 002b:00007fa69d5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.450304][ T2725] RAX: ffffffffffffffda RBX: 00007fa69c9c5fa0 RCX: 00007fa69c78ebe9 [ 203.458256][ T2725] RDX: 00000000ffffffd7 RSI: 0000200000000000 RDI: 0000000000000006 [ 203.466209][ T2725] RBP: 00007fa69d5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.474186][ T2725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.482146][ T2725] R13: 00007fa69c9c6038 R14: 00007fa69c9c5fa0 R15: 00007ffe4f47f9e8 [ 203.490108][ T2725] [ 203.503538][ T2749] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.503538][ T2749] [ 203.549810][ T43] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 203.602672][ T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 203.617397][ T2765] loop0: detected capacity change from 0 to 512 [ 203.623973][ T43] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.623973][ T43] [ 203.660268][ T287] EXT4-fs (loop3): unmounting filesystem. [ 203.692739][ T2765] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.635: corrupted inode contents [ 203.734324][ T2765] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.635: mark_inode_dirty error [ 203.755993][ T2765] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.635: corrupted inode contents [ 203.768558][ T2765] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.635: mark_inode_dirty error [ 203.780616][ T2765] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.635: corrupted inode contents [ 203.794292][ T2770] FAULT_INJECTION: forcing a failure. [ 203.794292][ T2770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.817593][ T2770] CPU: 0 PID: 2770 Comm: syz.2.633 Not tainted syzkaller #0 [ 203.824994][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.835058][ T2770] Call Trace: [ 203.838337][ T2770] [ 203.841265][ T2770] __dump_stack+0x21/0x24 [ 203.845604][ T2770] dump_stack_lvl+0xee/0x150 [ 203.850197][ T2770] ? __cfi_dump_stack_lvl+0x8/0x8 [ 203.855221][ T2770] dump_stack+0x15/0x24 [ 203.859374][ T2770] should_fail_ex+0x3d4/0x520 [ 203.864060][ T2770] should_fail+0xb/0x10 [ 203.868218][ T2770] should_fail_usercopy+0x1a/0x20 [ 203.873246][ T2770] _copy_to_user+0x1e/0x90 [ 203.877683][ T2770] simple_read_from_buffer+0xe9/0x160 [ 203.883062][ T2770] proc_fail_nth_read+0x19a/0x210 [ 203.886226][ T2765] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 203.888092][ T2770] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 203.897619][ T2765] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.635: corrupted inode contents [ 203.902100][ T2770] ? security_file_permission+0x94/0xb0 [ 203.902127][ T2770] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 203.902148][ T2770] vfs_read+0x26e/0x8c0 [ 203.914425][ T2765] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.635: mark_inode_dirty error [ 203.919382][ T2770] ? __cfi_vfs_read+0x10/0x10 [ 203.925422][ T2765] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 203.929039][ T2770] ? __kasan_check_write+0x14/0x20 [ 203.941133][ T2765] EXT4-fs (loop0): 1 truncate cleaned up [ 203.945115][ T2770] ? mutex_lock+0x8d/0x1a0 [ 203.954393][ T2765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 203.959201][ T2770] ? __cfi_mutex_lock+0x10/0x10 [ 203.965147][ T2765] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.969197][ T2770] ? __fdget_pos+0x2cd/0x380 [ 203.997769][ T2770] ? ksys_read+0x71/0x240 [ 204.002087][ T2770] ksys_read+0x140/0x240 [ 204.006312][ T2770] ? __cfi_ksys_read+0x10/0x10 [ 204.011058][ T2770] ? debug_smp_processor_id+0x17/0x20 [ 204.016418][ T2770] __x64_sys_read+0x7b/0x90 [ 204.020909][ T2770] x64_sys_call+0x2f/0x9a0 [ 204.025311][ T2770] do_syscall_64+0x4c/0xa0 [ 204.029713][ T2770] ? clear_bhb_loop+0x30/0x80 [ 204.034375][ T2770] ? clear_bhb_loop+0x30/0x80 [ 204.039035][ T2770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.044910][ T2770] RIP: 0033:0x7f4635f8d5fc [ 204.049306][ T2770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.069071][ T2770] RSP: 002b:00007f4636db6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.077478][ T2770] RAX: ffffffffffffffda RBX: 00007f46361c6090 RCX: 00007f4635f8d5fc [ 204.085447][ T2770] RDX: 000000000000000f RSI: 00007f4636db60a0 RDI: 0000000000000009 [ 204.093403][ T2770] RBP: 00007f4636db6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.101365][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.109321][ T2770] R13: 00007f46361c6128 R14: 00007f46361c6090 R15: 00007ffce82e9e48 [ 204.117281][ T2770] [ 204.227812][ T832] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 204.238171][ T832] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:8: Failed to release dquot type 1 [ 204.260024][ T2774] loop3: detected capacity change from 0 to 128 [ 204.405480][ T2774] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 204.414756][ T2774] FAT-fs (loop3): Filesystem has been set read-only [ 204.421467][ T2774] bio_check_eod: 82871 callbacks suppressed [ 204.421483][ T2774] syz.3.637: attempt to access beyond end of device [ 204.421483][ T2774] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 204.441061][ T2774] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 204.448939][ T2774] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 204.461613][ T2774] syz.3.637: attempt to access beyond end of device [ 204.461613][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.477925][ T2774] syz.3.637: attempt to access beyond end of device [ 204.477925][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.494190][ T2774] syz.3.637: attempt to access beyond end of device [ 204.494190][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.509633][ T2774] syz.3.637: attempt to access beyond end of device [ 204.509633][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.523136][ T2774] syz.3.637: attempt to access beyond end of device [ 204.523136][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.536768][ T2774] syz.3.637: attempt to access beyond end of device [ 204.536768][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.554205][ T2774] syz.3.637: attempt to access beyond end of device [ 204.554205][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.568272][ T2774] syz.3.637: attempt to access beyond end of device [ 204.568272][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.583609][ T2774] syz.3.637: attempt to access beyond end of device [ 204.583609][ T2774] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 204.698244][ T2765] EXT4-fs (loop0): unmounting filesystem. [ 204.844319][ T2785] loop1: detected capacity change from 0 to 16 [ 204.869899][ T2785] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.883895][ T2787] loop2: detected capacity change from 0 to 16 [ 204.891114][ T2787] erofs: (device loop2): mounted with root inode @ nid 36. [ 205.094777][ T2791] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 205.460248][ T2794] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 206.075034][ T2796] loop4: detected capacity change from 0 to 512 [ 206.085208][ T2791] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 206.096178][ T2791] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 206.110025][ T2794] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 206.121028][ T2794] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 206.301871][ T2796] EXT4-fs (loop4): 1 orphan inode deleted [ 206.307675][ T2796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.318930][ T2796] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.471168][ T2796] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.639: iget: bad i_size value: 360287970189639690 [ 206.484898][ T2796] overlayfs: failed to resolve './file1': -117 [ 207.234048][ T2810] loop2: detected capacity change from 0 to 128 [ 207.374410][ T286] EXT4-fs (loop4): unmounting filesystem. [ 207.388390][ T2812] loop0: detected capacity change from 0 to 1024 [ 207.492331][ T2817] loop1: detected capacity change from 0 to 1024 [ 207.516671][ T2812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 207.584981][ T2817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 207.604761][ T2812] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.650218][ T2812] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 2: comm syz.0.645: lblock 2 mapped to illegal pblock 2 (length 4) [ 207.668726][ T2829] FAULT_INJECTION: forcing a failure. [ 207.668726][ T2829] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.684069][ T2812] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.645: lblock 3 mapped to illegal pblock 3 (length 3) [ 207.687297][ T2829] CPU: 0 PID: 2829 Comm: syz.4.646 Not tainted syzkaller #0 [ 207.705254][ T2829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.715315][ T2829] Call Trace: [ 207.718590][ T2829] [ 207.721523][ T2829] __dump_stack+0x21/0x24 [ 207.725857][ T2829] dump_stack_lvl+0xee/0x150 [ 207.730446][ T2829] ? __cfi_dump_stack_lvl+0x8/0x8 [ 207.735507][ T2829] ? kasan_save_stack+0x4c/0x60 [ 207.740365][ T2829] ? kasan_save_stack+0x3a/0x60 [ 207.745209][ T2829] ? __kasan_record_aux_stack+0xb6/0xc0 [ 207.750757][ T2829] dump_stack+0x15/0x24 [ 207.754915][ T2829] should_fail_ex+0x3d4/0x520 [ 207.759581][ T2829] should_fail_alloc_page+0x61/0x90 [ 207.764768][ T2829] prepare_alloc_pages+0x148/0x5f0 [ 207.769860][ T2829] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 207.775055][ T2829] __alloc_pages+0x124/0x450 [ 207.779717][ T2829] ? __cfi___alloc_pages+0x10/0x10 [ 207.784810][ T2829] ? __kasan_check_read+0x11/0x20 [ 207.789822][ T2829] ? call_rcu+0xb83/0xf90 [ 207.794131][ T2829] __folio_alloc+0x12/0x40 [ 207.798532][ T2829] handle_mm_fault+0x18ef/0x2640 [ 207.803457][ T2829] ? __cfi_handle_mm_fault+0x10/0x10 [ 207.808725][ T2829] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 207.813907][ T2829] ? ksys_read+0x71/0x240 [ 207.818220][ T2829] ? ksys_read+0x110/0x240 [ 207.822622][ T2829] do_user_addr_fault+0x905/0x1050 [ 207.827721][ T2829] exc_page_fault+0x51/0xb0 [ 207.832208][ T2829] asm_exc_page_fault+0x27/0x30 [ 207.837051][ T2829] RIP: 0033:0x7fa69c73c1eb [ 207.841447][ T2829] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 207.861035][ T2829] RSP: 002b:00007fa69d562e10 EFLAGS: 00010246 [ 207.867085][ T2829] RAX: 00007fa69d564f30 RBX: 00007fa69c997640 RCX: 0000000000000000 [ 207.875046][ T2829] RDX: 00007fa69d564f78 RSI: 00007fa69c7eeca8 RDI: 00007fa69d562e30 [ 207.883001][ T2829] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 207.890952][ T2829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.898901][ T2829] R13: 00007fa69c9c6218 R14: 00007fa69c9c6180 R15: 00007ffe4f47f9e8 [ 207.906859][ T2829] [ 207.912030][ T2829] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 207.919904][ T2812] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 207.932632][ T2812] EXT4-fs (loop0): This should not happen!! Data will be lost [ 207.932632][ T2812] [ 207.960479][ T965] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 207.994876][ T2823] loop3: detected capacity change from 0 to 40427 [ 208.014478][ T28] audit: type=1400 audit(1757206966.288:238): avc: denied { mounton } for pid=2814 comm="syz.1.648" path="/134/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.047741][ T2823] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 208.072303][ T2833] loop2: detected capacity change from 0 to 128 [ 208.079120][ T2823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.087379][ T2823] F2FS-fs (loop3): Unrecognized mount option "00000000000000000000000" or missing value [ 208.100797][ T965] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 208.116837][ T965] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.116837][ T965] [ 208.117856][ T284] EXT4-fs (loop0): unmounting filesystem. [ 208.147028][ T2832] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 208.147052][ T2832] FAT-fs (loop2): Filesystem has been set read-only [ 208.147101][ T2832] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 208.147118][ T2832] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 208.280642][ T28] audit: type=1400 audit(1757206966.558:239): avc: denied { rmdir } for pid=288 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.313625][ T288] EXT4-fs (loop1): unmounting filesystem. [ 208.356585][ T2845] loop4: detected capacity change from 0 to 512 [ 208.392857][ T2847] loop1: detected capacity change from 0 to 16 [ 208.399195][ T28] audit: type=1400 audit(1757206966.578:240): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.433150][ T2845] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.655: corrupted inode contents [ 208.459724][ T2847] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.497660][ T28] audit: type=1400 audit(1757206966.578:241): avc: denied { unlink } for pid=288 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 208.575678][ T28] audit: type=1400 audit(1757206966.598:242): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.599714][ T2845] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.655: mark_inode_dirty error [ 208.680631][ T2851] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 208.890731][ T2851] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 208.901660][ T2851] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 208.922230][ T2845] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.655: corrupted inode contents [ 208.942679][ T2845] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.655: mark_inode_dirty error [ 208.989756][ T2845] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.655: corrupted inode contents [ 209.006494][ T2845] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 209.014354][ T2823] loop3: detected capacity change from 0 to 40427 [ 209.021756][ T2845] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.655: corrupted inode contents [ 209.026793][ T2823] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 209.033935][ T2845] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.655: mark_inode_dirty error [ 209.041780][ T2823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 209.053024][ T2845] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 209.070190][ T2845] EXT4-fs (loop4): 1 truncate cleaned up [ 209.071641][ T2823] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.082341][ T2845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.091630][ T2845] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.155290][ T2859] loop2: detected capacity change from 0 to 512 [ 209.230143][ T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 209.321958][ T2859] EXT4-fs (loop2): 1 orphan inode deleted [ 209.327756][ T2859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.338680][ T2859] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.396804][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 209.522413][ T2859] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.656: iget: bad i_size value: 360287970189639690 [ 209.536799][ T2859] overlayfs: failed to resolve './file1': -117 [ 209.578113][ T2823] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 209.606781][ T2823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.028853][ T286] EXT4-fs (loop4): unmounting filesystem. [ 210.042676][ T2867] loop4: detected capacity change from 0 to 16 [ 210.049988][ T2867] erofs: (device loop4): mounted with root inode @ nid 36. [ 210.097316][ T285] EXT4-fs (loop2): unmounting filesystem. [ 210.236341][ T2870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 210.598244][ T2875] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.879832][ T2875] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 210.890848][ T2875] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 210.927425][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 210.927509][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 210.935748][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 210.943936][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 210.952049][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 210.959844][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 210.967511][ T287] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 211.037526][ T28] audit: type=1400 audit(1757206969.308:243): avc: denied { getopt } for pid=2883 comm="syz.4.664" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.066104][ T2882] loop1: detected capacity change from 0 to 1024 [ 211.117954][ T2889] loop2: detected capacity change from 0 to 1024 [ 211.124110][ T2882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.135884][ T2882] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.170430][ T2889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.186367][ T2882] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 2: comm syz.1.663: lblock 2 mapped to illegal pblock 2 (length 4) [ 211.261806][ T2889] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.286405][ T2898] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.663: lblock 3 mapped to illegal pblock 3 (length 3) [ 211.444927][ T2896] loop4: detected capacity change from 0 to 128 [ 211.451732][ T2898] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 211.463042][ T2900] loop0: detected capacity change from 0 to 16 [ 211.465166][ T2898] EXT4-fs (loop1): This should not happen!! Data will be lost [ 211.465166][ T2898] [ 211.481340][ T2900] erofs: (device loop0): mounted with root inode @ nid 36. [ 211.481613][ T2889] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 2: comm syz.2.665: lblock 2 mapped to illegal pblock 2 (length 4) [ 211.503083][ T2896] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 211.511260][ T2896] FAT-fs (loop4): Filesystem has been set read-only [ 211.517861][ T2896] bio_check_eod: 43684 callbacks suppressed [ 211.517879][ T2896] syz.4.666: attempt to access beyond end of device [ 211.517879][ T2896] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 211.538333][ T2896] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 211.546203][ T2896] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 211.554873][ T2896] syz.4.666: attempt to access beyond end of device [ 211.554873][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.572343][ T2896] syz.4.666: attempt to access beyond end of device [ 211.572343][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.591052][ T2896] syz.4.666: attempt to access beyond end of device [ 211.591052][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.606258][ T2896] syz.4.666: attempt to access beyond end of device [ 211.606258][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.620015][ T2896] syz.4.666: attempt to access beyond end of device [ 211.620015][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.638390][ T2896] syz.4.666: attempt to access beyond end of device [ 211.638390][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.654193][ T2896] syz.4.666: attempt to access beyond end of device [ 211.654193][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.673273][ T2896] syz.4.666: attempt to access beyond end of device [ 211.673273][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.686617][ T2896] syz.4.666: attempt to access beyond end of device [ 211.686617][ T2896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.694296][ T2889] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.665: lblock 3 mapped to illegal pblock 3 (length 3) [ 211.802113][ T965] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 211.817356][ T965] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 211.830854][ T965] EXT4-fs (loop1): This should not happen!! Data will be lost [ 211.830854][ T965] [ 211.842053][ T288] EXT4-fs (loop1): unmounting filesystem. [ 211.919971][ T2906] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.772638][ T2906] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 212.783552][ T2906] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 212.854657][ T2889] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 212.858626][ T2912] loop4: detected capacity change from 0 to 16 [ 212.874057][ T2912] erofs: (device loop4): mounted with root inode @ nid 36. [ 212.896488][ T2889] EXT4-fs (loop2): This should not happen!! Data will be lost [ 212.896488][ T2889] [ 212.930101][ T965] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 212.954654][ T965] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 212.987299][ T965] EXT4-fs (loop2): This should not happen!! Data will be lost [ 212.987299][ T965] [ 213.006445][ T285] EXT4-fs (loop2): unmounting filesystem. [ 213.062935][ T2920] loop3: detected capacity change from 0 to 512 [ 213.070122][ T2919] device pim6reg1 entered promiscuous mode [ 213.158725][ T2921] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.180260][ T2920] EXT4-fs (loop3): 1 orphan inode deleted [ 213.186111][ T2920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 213.199783][ T10] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 213.229778][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 213.255810][ T2921] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 213.272064][ T2920] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.292661][ T2921] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 213.491617][ T2934] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.669: iget: bad i_size value: 360287970189639690 [ 213.537867][ T2934] overlayfs: failed to resolve './file1': -117 [ 213.812777][ T2933] loop0: detected capacity change from 0 to 40427 [ 213.827679][ T2933] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 213.843875][ T2933] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 213.852402][ T2933] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000000" or missing value [ 214.113215][ T2933] loop0: detected capacity change from 0 to 40427 [ 214.128872][ T2933] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 214.142396][ T2933] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 214.420353][ T2933] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.485648][ T2933] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 214.492804][ T2933] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.605732][ T287] EXT4-fs (loop3): unmounting filesystem. [ 214.627795][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 214.670823][ T2951] loop1: detected capacity change from 0 to 1024 [ 214.691174][ T2951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.699829][ T2951] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.711764][ T2951] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 2: comm syz.1.679: lblock 2 mapped to illegal pblock 2 (length 4) [ 214.759662][ T2813] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 214.786313][ T28] audit: type=1400 audit(1757206973.058:244): avc: denied { getattr } for pid=2948 comm="syz.3.678" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 214.824254][ T2951] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.679: lblock 3 mapped to illegal pblock 3 (length 3) [ 214.840492][ T2951] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 214.853877][ T2951] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.853877][ T2951] [ 214.971762][ T2813] usb 5-1: not running at top speed; connect to a high speed hub [ 214.982731][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 214.982754][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 214.993321][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 214.993768][ T965] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 215.023517][ T2813] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 215.034685][ T965] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 215.047145][ T2813] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.060379][ T965] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.060379][ T965] [ 215.081458][ T288] EXT4-fs (loop1): unmounting filesystem. [ 215.111721][ T2813] usb 5-1: config 1 interface 0 has no altsetting 0 [ 215.209180][ T2813] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.248800][ T2813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.256921][ T2813] usb 5-1: Product: syz [ 215.261178][ T2813] usb 5-1: Manufacturer: syz [ 215.265835][ T2813] usb 5-1: SerialNumber: syz [ 215.271443][ T2945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.703649][ T2970] loop1: detected capacity change from 0 to 2048 [ 217.835230][ T2977] loop2: detected capacity change from 0 to 512 [ 217.841985][ T2974] loop3: detected capacity change from 0 to 16 [ 217.861163][ T2974] erofs: (device loop3): mounted with root inode @ nid 36. [ 217.878584][ T2977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.927886][ T2970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.936454][ T2977] EXT4-fs (loop2): 1 truncate cleaned up [ 217.972644][ T2977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.484100][ T2985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 218.932092][ T2988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'. [ 219.061919][ T2986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'. [ 219.070854][ T2986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 219.247263][ T2985] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 219.258919][ T2985] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 219.270586][ T288] EXT4-fs (loop1): unmounting filesystem. [ 219.286990][ T2813] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 219.294486][ T285] EXT4-fs (loop2): unmounting filesystem. [ 219.314114][ T2992] loop3: detected capacity change from 0 to 512 [ 219.330455][ T2813] usb 5-1: USB disconnect, device number 3 [ 219.338185][ T2996] loop1: detected capacity change from 0 to 16 [ 219.348932][ T2992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.623329][ T2996] erofs: (device loop1): mounted with root inode @ nid 36. [ 219.667876][ T2997] loop0: detected capacity change from 0 to 128 [ 219.678012][ T2997] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.685937][ T2997] FAT-fs (loop0): Filesystem has been set read-only [ 219.692556][ T2997] bio_check_eod: 18678 callbacks suppressed [ 219.692571][ T2997] syz.0.689: attempt to access beyond end of device [ 219.692571][ T2997] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 219.712157][ T2997] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.720139][ T2997] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.728514][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.736419][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.744601][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.749417][ T2997] syz.0.689: attempt to access beyond end of device [ 219.749417][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.752435][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.752470][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.752485][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.765636][ T2997] syz.0.689: attempt to access beyond end of device [ 219.765636][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.773474][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.781241][ T2997] syz.0.689: attempt to access beyond end of device [ 219.781241][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.789437][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.802286][ T2997] syz.0.689: attempt to access beyond end of device [ 219.802286][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.846309][ T2997] syz.0.689: attempt to access beyond end of device [ 219.846309][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.861363][ T2997] syz.0.689: attempt to access beyond end of device [ 219.861363][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.887339][ T3003] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 219.897904][ T2997] syz.0.689: attempt to access beyond end of device [ 219.897904][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.912182][ T2997] syz.0.689: attempt to access beyond end of device [ 219.912182][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.926310][ T2997] syz.0.689: attempt to access beyond end of device [ 219.926310][ T2997] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 219.927597][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.952670][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.960658][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.969008][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.976917][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.984785][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.992631][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.000466][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.008279][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.016122][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.023986][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.031804][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.039631][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.047523][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.055349][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.063165][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.071266][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.079075][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.086927][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.094758][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.102623][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.110484][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.118333][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.126163][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.134013][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.141835][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.149662][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.157465][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.165562][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.173401][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.181234][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.189044][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.196898][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.204711][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.212574][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.220428][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.228278][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.236106][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.243927][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.251756][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.259661][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.267493][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.275325][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.283142][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.290980][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.298778][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.306644][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.314485][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.322416][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.330255][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.338079][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.345906][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.353859][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.361679][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.369487][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.377338][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.385213][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.393075][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.400935][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.408741][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.416571][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.424385][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.432225][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.440038][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.447882][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.455722][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.463565][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.471392][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.479361][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.487189][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.495078][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.502898][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.510721][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.518520][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.526434][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.534258][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.542121][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.549954][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.557769][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.565589][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.573413][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.581517][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.589362][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.597180][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.605013][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.612836][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.620660][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.628461][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.636323][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.644143][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.651976][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.659798][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.667614][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.675595][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.683505][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.691336][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.699144][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.707022][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.714880][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.722785][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.730648][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.738445][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.746279][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.754272][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.762133][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.769968][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.777821][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.785642][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.793468][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.801300][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.809111][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.816926][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.824785][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.832632][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.840455][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.848256][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.861330][ T3001] loop2: detected capacity change from 0 to 1024 [ 220.863661][ T2992] EXT4-fs (loop3): 1 truncate cleaned up [ 220.877883][ T2995] loop4: detected capacity change from 0 to 40427 [ 220.879289][ T2992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.889621][ T3003] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 220.893400][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.904182][ T3003] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 220.911962][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.928135][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.935977][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.943811][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.951632][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.959442][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.967262][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.975121][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.982956][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.990776][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 220.998573][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.006483][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.014301][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.022156][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.029975][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.037781][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.045623][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.053533][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.061345][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.069183][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.076996][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.084814][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.092662][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.100500][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.108303][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.116171][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.123984][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.131804][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.139616][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.147421][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.155233][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.163098][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.170997][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.178802][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.186621][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.194438][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.202248][ T2989] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.210211][ T2998] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.218025][ T2998] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.225865][ T2998] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.233700][ T2998] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.261790][ T2995] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 221.316518][ T2995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.343064][ T3001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.402256][ T2995] F2FS-fs (loop4): Unrecognized mount option "00000000000000000000000" or missing value [ 221.448982][ T3001] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.480714][ T3011] loop1: detected capacity change from 0 to 512 [ 221.522949][ T3001] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 2: comm syz.2.688: lblock 2 mapped to illegal pblock 2 (length 4) [ 221.721749][ T3011] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.695: corrupted inode contents [ 221.743552][ T285] EXT4-fs (loop2): unmounting filesystem. [ 221.749822][ T3011] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #16: comm syz.1.695: mark_inode_dirty error [ 221.761442][ T3011] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.695: corrupted inode contents [ 221.780958][ T3011] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.695: mark_inode_dirty error [ 221.792918][ T3011] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.695: corrupted inode contents [ 221.805484][ T3011] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 221.819370][ T3011] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.695: corrupted inode contents [ 221.831606][ T3011] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.695: mark_inode_dirty error [ 221.848349][ T3011] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 221.857878][ T3021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 221.868492][ T3021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.691'. [ 221.877418][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 221.894901][ T3011] EXT4-fs (loop1): 1 truncate cleaned up [ 221.929703][ T3011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.939447][ T351] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 221.949478][ T351] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 221.951987][ T3011] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.965284][ T2995] loop4: detected capacity change from 0 to 40427 [ 221.986652][ T2995] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 222.003808][ T2995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.039104][ T2995] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.066098][ T287] EXT4-fs (loop3): unmounting filesystem. [ 222.076253][ T288] EXT4-fs (loop1): unmounting filesystem. [ 222.100861][ T2995] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.108102][ T2995] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.356833][ T3034] loop1: detected capacity change from 0 to 128 [ 222.524304][ T3034] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 222.532498][ T3034] FAT-fs (loop1): Filesystem has been set read-only [ 222.540330][ T3034] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 222.928051][ T3043] loop0: detected capacity change from 0 to 128 [ 223.154863][ T3043] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 223.162785][ T3043] FAT-fs (loop0): Filesystem has been set read-only [ 223.169614][ T3043] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 223.219636][ T28] audit: type=1400 audit(1757206981.488:245): avc: denied { setattr } for pid=285 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.429984][ T3051] loop3: detected capacity change from 0 to 512 [ 223.489724][ T286] f2fs_fill_dentries: 4 callbacks suppressed [ 223.489742][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.504261][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.504762][ T3051] EXT4-fs (loop3): 1 orphan inode deleted [ 223.526917][ T43] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 223.528852][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.539608][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.549347][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 223.569952][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.569972][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.585719][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 223.700597][ T3051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.749759][ T3051] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.854407][ T3060] loop0: detected capacity change from 0 to 128 [ 223.880386][ T3060] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 223.888252][ T3060] FAT-fs (loop0): Filesystem has been set read-only [ 223.895047][ T3060] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 224.202574][ T3064] device pim6reg1 entered promiscuous mode [ 224.215841][ T3051] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.703: iget: bad i_size value: 360287970189639690 [ 224.442581][ T3051] overlayfs: failed to resolve './file1': -117 [ 224.739236][ T3069] loop1: detected capacity change from 0 to 512 [ 224.776631][ T3069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.825309][ T3072] loop0: detected capacity change from 0 to 512 [ 224.841972][ T3069] EXT4-fs (loop1): 1 truncate cleaned up [ 224.849744][ T3069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.861822][ T3072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.884312][ T3072] EXT4-fs (loop0): 1 truncate cleaned up [ 224.902480][ T3072] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.251297][ T3077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.708'. [ 225.652098][ T3076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'. [ 225.661074][ T3076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 225.956022][ T3083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.709'. [ 225.966515][ T3083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 225.975483][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 225.995796][ T288] EXT4-fs (loop1): unmounting filesystem. [ 226.786759][ T3089] device pim6reg1 entered promiscuous mode [ 226.962586][ T284] EXT4-fs (loop0): unmounting filesystem. [ 227.071871][ T3098] loop1: detected capacity change from 0 to 128 [ 227.176949][ T3098] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 227.184865][ T3098] FAT-fs (loop1): Filesystem has been set read-only [ 227.191527][ T3098] bio_check_eod: 104610 callbacks suppressed [ 227.191552][ T3098] syz.1.714: attempt to access beyond end of device [ 227.191552][ T3098] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 227.211609][ T3098] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 227.219466][ T3098] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 227.232754][ T3098] syz.1.714: attempt to access beyond end of device [ 227.232754][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.246244][ T3098] syz.1.714: attempt to access beyond end of device [ 227.246244][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.259600][ T3098] syz.1.714: attempt to access beyond end of device [ 227.259600][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.272950][ T3098] syz.1.714: attempt to access beyond end of device [ 227.272950][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.286269][ T3098] syz.1.714: attempt to access beyond end of device [ 227.286269][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.299826][ T3098] syz.1.714: attempt to access beyond end of device [ 227.299826][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.313153][ T3098] syz.1.714: attempt to access beyond end of device [ 227.313153][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.326496][ T3098] syz.1.714: attempt to access beyond end of device [ 227.326496][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.339905][ T3098] syz.1.714: attempt to access beyond end of device [ 227.339905][ T3098] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.621048][ T3102] loop4: detected capacity change from 0 to 128 [ 227.627746][ T3102] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.642367][ T3102] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.598993][ T3095] loop0: detected capacity change from 0 to 40427 [ 228.617219][ T3095] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 228.635730][ T3095] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 228.670230][ T3095] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000000" or missing value [ 229.110362][ T3095] loop0: detected capacity change from 0 to 40427 [ 229.127002][ T3095] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 229.143057][ T3095] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 229.175660][ T3095] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.210746][ T287] EXT4-fs (loop3): unmounting filesystem. [ 229.236795][ T3095] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 229.244547][ T3095] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.658009][ T3120] loop1: detected capacity change from 0 to 128 [ 229.669032][ T3120] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 229.676943][ T3120] FAT-fs (loop1): Filesystem has been set read-only [ 229.683785][ T3120] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 229.691652][ T3120] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 230.008882][ T3125] loop4: detected capacity change from 0 to 16 [ 230.041118][ T3125] erofs: (device loop4): mounted with root inode @ nid 36. [ 230.273704][ T3129] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.284721][ T3129] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 230.295979][ T3129] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 230.970941][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 230.970966][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 230.993335][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 231.020356][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 231.048225][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 231.068395][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 231.098694][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 231.423298][ T3133] device pim6reg1 entered promiscuous mode [ 231.593814][ T3139] loop4: detected capacity change from 0 to 16 [ 231.632112][ T3139] erofs: (device loop4): mounted with root inode @ nid 36. [ 231.869624][ T3142] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 231.879983][ T3142] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 231.891215][ T3142] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 232.464136][ T3120] bio_check_eod: 127975 callbacks suppressed [ 232.464156][ T3120] syz.1.721: attempt to access beyond end of device [ 232.464156][ T3120] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.483420][ T3120] syz.1.721: attempt to access beyond end of device [ 232.483420][ T3120] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.496642][ T3120] syz.1.721: attempt to access beyond end of device [ 232.496642][ T3120] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.509873][ T3120] syz.1.721: attempt to access beyond end of device [ 232.509873][ T3120] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.781560][ T3150] loop1: detected capacity change from 0 to 128 [ 233.040116][ T3150] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.075115][ T3150] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.178231][ T3154] loop4: detected capacity change from 0 to 512 [ 233.203128][ T3154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.246060][ T3154] EXT4-fs (loop4): 1 truncate cleaned up [ 233.263198][ T3154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.279028][ T3158] loop3: detected capacity change from 0 to 16 [ 233.312888][ T3158] erofs: (device loop3): mounted with root inode @ nid 36. [ 233.749605][ T3160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.730'. [ 234.179857][ T3159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 234.188802][ T3159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 234.295509][ T3162] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 234.457220][ T3162] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 234.468223][ T3162] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 234.515989][ T286] EXT4-fs (loop4): unmounting filesystem. [ 234.656718][ T3167] loop4: detected capacity change from 0 to 1024 [ 234.727295][ T3169] loop0: detected capacity change from 0 to 128 [ 234.990565][ T3167] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.003844][ T3167] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.017617][ T3167] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 2: comm syz.4.733: lblock 2 mapped to illegal pblock 2 (length 4) [ 235.036623][ T3167] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.733: lblock 3 mapped to illegal pblock 3 (length 3) [ 235.052255][ T3167] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 235.066169][ T3167] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.066169][ T3167] [ 235.085304][ T965] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 235.157174][ T965] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 235.171080][ T965] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.171080][ T965] [ 235.183719][ T286] EXT4-fs (loop4): unmounting filesystem. [ 235.194373][ T3177] loop3: detected capacity change from 0 to 1024 [ 235.238789][ T3177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 235.259643][ T3177] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.299106][ T3177] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 2: comm syz.3.737: lblock 2 mapped to illegal pblock 2 (length 4) [ 235.330764][ T3177] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.737: lblock 3 mapped to illegal pblock 3 (length 3) [ 235.359754][ T3177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 235.389583][ T3177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 235.389583][ T3177] [ 235.432445][ T3185] loop4: detected capacity change from 0 to 40427 [ 235.459575][ T3185] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 235.466581][ T3185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.478327][ T351] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 235.489179][ T3185] F2FS-fs (loop4): Unrecognized mount option "00000000000000000000000" or missing value [ 235.510212][ T351] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 235.539653][ T351] EXT4-fs (loop3): This should not happen!! Data will be lost [ 235.539653][ T351] [ 235.559457][ T287] EXT4-fs (loop3): unmounting filesystem. [ 235.841943][ T3198] loop3: detected capacity change from 0 to 128 [ 235.887987][ T3197] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 235.895891][ T3197] FAT-fs (loop3): Filesystem has been set read-only [ 235.902546][ T3197] syz.3.742: attempt to access beyond end of device [ 235.902546][ T3197] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 235.916174][ T3197] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 235.924054][ T3197] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 235.932058][ T3197] syz.3.742: attempt to access beyond end of device [ 235.932058][ T3197] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 235.945303][ T3197] syz.3.742: attempt to access beyond end of device [ 235.945303][ T3197] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 235.945397][ T3198] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 235.958494][ T3197] syz.3.742: attempt to access beyond end of device [ 235.958494][ T3197] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 235.966361][ T3198] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 235.979478][ T3197] syz.3.742: attempt to access beyond end of device [ 235.979478][ T3197] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 235.987293][ T3198] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.000372][ T3197] syz.3.742: attempt to access beyond end of device [ 236.000372][ T3197] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.008182][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.030105][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.037923][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.046324][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.054715][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.062690][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.070545][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.078338][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.086158][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.093962][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.101788][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.109625][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.117457][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.125842][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.134242][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.142627][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.151011][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.158806][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.168021][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.175922][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.183751][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.191574][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.199375][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.207183][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.215910][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.223739][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.231559][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.239355][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.247175][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.254996][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.262854][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.270666][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.278468][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.286278][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.294092][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.301909][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.309799][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.317599][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.325453][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.333285][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.341112][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.348909][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.356764][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.364576][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.372415][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.380226][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.388031][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.395846][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.403695][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.411628][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.419439][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.427346][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.435184][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.443001][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.450861][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.458673][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.466542][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.474367][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.482196][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.490027][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.497884][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.505792][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.513725][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.521565][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.529396][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.537222][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.545079][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.552911][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.560731][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.568532][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.576360][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.584172][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.592028][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.599839][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.607642][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.615537][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.623366][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.631178][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.639014][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.646846][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.654664][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.662476][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.670303][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.678112][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.685972][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.693783][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.701599][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.709398][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.717337][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.725157][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.733017][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.740832][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.748634][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.756449][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.764268][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.772082][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.779936][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.787731][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.795560][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.803372][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.811190][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.818993][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.826843][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.834656][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.842561][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.850419][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.858238][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.866085][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.873980][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.881850][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.889688][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.897494][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.905344][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.913285][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.921158][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.928958][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.936792][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.944602][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.952424][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.960233][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.968071][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.975895][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.983717][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.991540][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 236.999346][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.007211][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.015100][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.022915][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.030754][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.038554][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.046377][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.054186][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.062038][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.069856][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.077657][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.085471][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.093311][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.101128][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.108964][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.116808][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.124625][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.132452][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.140270][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.148071][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.155930][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.163742][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.171561][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.179802][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.187602][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.195409][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.203253][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.211115][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.218920][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.226737][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.234567][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.242431][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.250281][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.258076][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.265898][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.273715][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.281533][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.289327][ T3194] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.298998][ T3199] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.306857][ T3199] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.314685][ T3199] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.322501][ T3199] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 237.569362][ T3185] loop4: detected capacity change from 0 to 40427 [ 237.583485][ T3185] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 237.610652][ T3185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.890450][ T3185] F2FS-fs (loop4): Found nat_bits in checkpoint [ 238.037279][ T3185] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 238.048562][ T3185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.383006][ T3216] loop3: detected capacity change from 0 to 16 [ 238.417081][ T3216] erofs: (device loop3): mounted with root inode @ nid 36. [ 238.434647][ T28] audit: type=1400 audit(1757206996.708:246): avc: denied { mounton } for pid=3217 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 238.485552][ T3209] loop0: detected capacity change from 0 to 40427 [ 238.498016][ T3209] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 238.508660][ T3209] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 238.518113][ T3209] F2FS-fs (loop0): invalid crc value [ 238.531040][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.539133][ T3209] F2FS-fs (loop0): Found nat_bits in checkpoint [ 238.548238][ T3217] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.560819][ T3217] device bridge_slave_0 entered promiscuous mode [ 238.576854][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.587029][ T3217] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.596064][ T3217] device bridge_slave_1 entered promiscuous mode [ 238.605685][ T3209] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 238.614197][ T3209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 238.690169][ T28] audit: type=1400 audit(1757206996.968:247): avc: denied { append } for pid=3207 comm="syz.0.744" path="/139/bus/cpuacct.usage_sys" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 238.717780][ T3228] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 238.780450][ T3228] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 238.806845][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.813932][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.821253][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.828275][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.861724][ T3228] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 238.950388][ T3239] loop0: detected capacity change from 0 to 1024 [ 238.969791][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.982078][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.997868][ T3239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 239.006473][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.006493][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.012352][ T3239] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.014507][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.032479][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.032652][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.047130][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.054746][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.062392][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 239.063545][ T3239] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 2: comm syz.0.748: lblock 2 mapped to illegal pblock 2 (length 4) [ 239.113606][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.128229][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.135328][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.154261][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.162890][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.169976][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.187358][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.189436][ T3239] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.748: lblock 3 mapped to illegal pblock 3 (length 3) [ 239.196215][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.223312][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.227721][ T3239] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 239.232201][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.251480][ T3239] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.251480][ T3239] [ 239.268466][ T3217] device veth0_vlan entered promiscuous mode [ 239.277194][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.290003][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.303350][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.323774][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.332229][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.339684][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.347451][ T10] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 239.361954][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 239.367774][ T3217] device veth1_macvtap entered promiscuous mode [ 239.381425][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.381425][ T10] [ 239.392709][ T284] EXT4-fs (loop0): unmounting filesystem. [ 239.398621][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.407073][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.418270][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.426629][ T3250] loop0: detected capacity change from 0 to 1024 [ 239.441329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.450614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.452795][ T3250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 239.467681][ T3250] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.480620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.489319][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.524678][ T3250] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 2: comm syz.0.752: lblock 2 mapped to illegal pblock 2 (length 4) [ 239.526516][ T28] audit: type=1400 audit(1757206997.798:248): avc: denied { mounton } for pid=3217 comm="syz-executor" path="/root/syzkaller.kVIQZc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 239.540885][ T3250] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.752: lblock 3 mapped to illegal pblock 3 (length 3) [ 239.579578][ T3250] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 239.591912][ T3250] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.591912][ T3250] [ 239.602182][ T351] device bridge_slave_1 left promiscuous mode [ 239.608525][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.616204][ T965] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 239.630737][ T351] device bridge_slave_0 left promiscuous mode [ 239.633319][ T965] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 239.637015][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.649470][ T965] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.649470][ T965] [ 239.666805][ T351] device veth1_macvtap left promiscuous mode [ 239.667800][ T284] EXT4-fs (loop0): unmounting filesystem. [ 239.672951][ T351] device veth0_vlan left promiscuous mode [ 239.738514][ T3258] loop0: detected capacity change from 0 to 1024 [ 239.788390][ T3258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 239.801044][ T3258] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.822602][ T3258] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 2: comm syz.0.755: lblock 2 mapped to illegal pblock 2 (length 4) [ 239.839205][ T3258] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.755: lblock 3 mapped to illegal pblock 3 (length 3) [ 239.858711][ T3258] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 239.871243][ T3258] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.871243][ T3258] [ 239.896274][ T10] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 239.919126][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 239.932054][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.932054][ T10] [ 239.943241][ T284] EXT4-fs (loop0): unmounting filesystem. [ 240.200860][ T3270] loop0: detected capacity change from 0 to 1024 [ 240.283836][ T3270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.301861][ T3270] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.366260][ T3270] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 2: comm syz.0.757: lblock 2 mapped to illegal pblock 2 (length 4) [ 240.546148][ T3270] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.757: lblock 3 mapped to illegal pblock 3 (length 3) [ 240.572063][ T3270] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 240.585051][ T3270] EXT4-fs (loop0): This should not happen!! Data will be lost [ 240.585051][ T3270] [ 240.611663][ T351] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 240.632009][ T351] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 240.644428][ T351] EXT4-fs (loop0): This should not happen!! Data will be lost [ 240.644428][ T351] [ 240.655592][ T284] EXT4-fs (loop0): unmounting filesystem. [ 240.736596][ T3280] loop0: detected capacity change from 0 to 1024 [ 240.790667][ T3280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.799672][ T3280] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.871288][ T3290] loop3: detected capacity change from 0 to 128 [ 241.033642][ T3289] loop1: detected capacity change from 0 to 1024 [ 241.133989][ T284] EXT4-fs (loop0): unmounting filesystem. [ 241.301511][ T3289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 241.323475][ T3289] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.348053][ T3289] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 2: comm syz.1.762: lblock 2 mapped to illegal pblock 2 (length 4) [ 241.872405][ T3305] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.762: lblock 3 mapped to illegal pblock 3 (length 3) [ 241.895568][ T3305] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 241.909742][ T3305] EXT4-fs (loop1): This should not happen!! Data will be lost [ 241.909742][ T3305] [ 241.970170][ T10] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 241.995047][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 242.019561][ T10] EXT4-fs (loop1): This should not happen!! Data will be lost [ 242.019561][ T10] [ 242.100544][ T288] EXT4-fs (loop1): unmounting filesystem. [ 242.251386][ T3313] loop3: detected capacity change from 0 to 512 [ 242.431920][ T3313] EXT4-fs (loop3): 1 orphan inode deleted [ 242.437783][ T3313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.449920][ T3313] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.263937][ T3318] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.767: iget: bad i_size value: 360287970189639690 [ 243.276977][ T3318] overlayfs: failed to resolve './file1': -117 [ 243.412244][ T3329] netlink: 96 bytes leftover after parsing attributes in process `syz.5.772'. [ 243.700966][ T287] EXT4-fs (loop3): unmounting filesystem. [ 243.792830][ T28] audit: type=1400 audit(1757207002.068:249): avc: denied { map } for pid=3336 comm="syz.3.774" path="socket:[24344]" dev="sockfs" ino=24344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 243.959622][ T352] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 244.050006][ T3351] loop4: detected capacity change from 0 to 1024 [ 244.060865][ T3351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.069450][ T3351] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.081839][ T3351] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 2: comm syz.4.779: lblock 2 mapped to illegal pblock 2 (length 4) [ 244.097619][ T3351] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.779: lblock 3 mapped to illegal pblock 3 (length 3) [ 244.112098][ T3351] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 244.124632][ T3351] EXT4-fs (loop4): This should not happen!! Data will be lost [ 244.124632][ T3351] [ 244.149613][ T352] usb 6-1: Using ep0 maxpacket: 16 [ 244.155915][ T352] usb 6-1: config 1 has an invalid interface number: 214 but max is 0 [ 244.176874][ T965] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 244.209716][ T965] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 244.214406][ T352] usb 6-1: config 1 has no interface number 0 [ 244.235691][ T965] EXT4-fs (loop4): This should not happen!! Data will be lost [ 244.235691][ T965] [ 244.235891][ T352] usb 6-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 244.255640][ T352] usb 6-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 244.260455][ T286] EXT4-fs (loop4): unmounting filesystem. [ 244.266018][ T352] usb 6-1: config 1 interface 214 has no altsetting 0 [ 244.286379][ T352] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 244.305321][ T352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.321080][ T352] usb 6-1: Product: syz [ 244.325377][ T352] usb 6-1: Manufacturer: syz [ 244.330763][ T352] usb 6-1: SerialNumber: syz [ 244.355264][ T3330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.389999][ T3330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 244.426625][ T352] ums-alauda 6-1:1.214: USB Mass Storage device detected [ 244.509927][ T352] scsi host1: usb-storage 6-1:1.214 [ 244.831218][ T352] usb 6-1: USB disconnect, device number 2 [ 244.835892][ T3368] loop0: detected capacity change from 0 to 16 [ 244.852549][ T3368] erofs: (device loop0): mounted with root inode @ nid 36. [ 245.182504][ T3370] loop4: detected capacity change from 0 to 512 [ 245.651206][ T3376] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 245.661652][ T3376] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 245.672670][ T3376] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 246.220627][ T3370] EXT4-fs (loop4): 1 orphan inode deleted [ 246.226474][ T3370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.237906][ T3370] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.493746][ T3370] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.782: iget: bad i_size value: 360287970189639690 [ 246.507602][ T3370] overlayfs: failed to resolve './file1': -117 [ 246.799154][ T3387] xt_hashlimit: size too large, truncated to 1048576 [ 246.859452][ T3389] xt_hashlimit: size too large, truncated to 1048576 [ 246.869835][ T3392] FAULT_INJECTION: forcing a failure. [ 246.869835][ T3392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.893282][ T3392] CPU: 0 PID: 3392 Comm: syz.1.787 Not tainted syzkaller #0 [ 246.900609][ T3392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.910667][ T3392] Call Trace: [ 246.913947][ T3392] [ 246.916884][ T3392] __dump_stack+0x21/0x24 [ 246.921213][ T3392] dump_stack_lvl+0xee/0x150 [ 246.925800][ T3392] ? __cfi_dump_stack_lvl+0x8/0x8 [ 246.930820][ T3392] ? _parse_integer+0x2a/0x40 [ 246.935502][ T3392] dump_stack+0x15/0x24 [ 246.939656][ T3392] should_fail_ex+0x3d4/0x520 [ 246.944332][ T3392] should_fail+0xb/0x10 [ 246.948483][ T3392] should_fail_usercopy+0x1a/0x20 [ 246.953509][ T3392] _copy_from_user+0x1e/0xc0 [ 246.958105][ T3392] ___sys_sendmsg+0x155/0x290 [ 246.962792][ T3392] ? __sys_sendmsg+0x270/0x270 [ 246.967559][ T3392] ? __kasan_check_write+0x14/0x20 [ 246.972675][ T3392] ? proc_fail_nth_write+0x17a/0x1f0 [ 246.977963][ T3392] ? vfs_write+0x9d6/0xca0 [ 246.982476][ T3392] ? __fdget+0x19c/0x220 [ 246.986712][ T3392] __x64_sys_sendmsg+0x1f0/0x2c0 [ 246.991648][ T3392] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 246.997108][ T3392] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 247.003180][ T3392] x64_sys_call+0x171/0x9a0 [ 247.007688][ T3392] do_syscall_64+0x4c/0xa0 [ 247.012097][ T3392] ? clear_bhb_loop+0x30/0x80 [ 247.016769][ T3392] ? clear_bhb_loop+0x30/0x80 [ 247.021443][ T3392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.027332][ T3392] RIP: 0033:0x7fbfb858ebe9 [ 247.031748][ T3392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.051531][ T3392] RSP: 002b:00007fbfb9455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.059961][ T3392] RAX: ffffffffffffffda RBX: 00007fbfb87c6090 RCX: 00007fbfb858ebe9 [ 247.067940][ T3392] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 247.075918][ T3392] RBP: 00007fbfb9455090 R08: 0000000000000000 R09: 0000000000000000 [ 247.083893][ T3392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.091867][ T3392] R13: 00007fbfb87c6128 R14: 00007fbfb87c6090 R15: 00007fff9bac8238 [ 247.099847][ T3392] [ 247.109376][ T286] EXT4-fs (loop4): unmounting filesystem. [ 247.161880][ T3400] loop5: detected capacity change from 0 to 1024 [ 247.181493][ T3392] loop1: detected capacity change from 0 to 512 [ 247.217129][ T3407] loop3: detected capacity change from 0 to 512 [ 247.227591][ T3400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 247.237707][ T3400] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.276120][ T3392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.291234][ T3407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.310855][ T3400] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 2: comm syz.5.791: lblock 2 mapped to illegal pblock 2 (length 4) [ 247.325108][ T3407] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.335821][ T3392] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.378578][ T3400] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 3: comm syz.5.791: lblock 3 mapped to illegal pblock 3 (length 3) [ 247.400010][ T3400] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 247.434768][ T288] EXT4-fs (loop1): unmounting filesystem. [ 247.455078][ T287] EXT4-fs (loop3): unmounting filesystem. [ 247.459877][ T3400] EXT4-fs (loop5): This should not happen!! Data will be lost [ 247.459877][ T3400] [ 247.576493][ T351] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 247.606224][ T351] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 247.668669][ T351] EXT4-fs (loop5): This should not happen!! Data will be lost [ 247.668669][ T351] [ 248.002458][ T3217] EXT4-fs (loop5): unmounting filesystem. [ 248.087679][ T3427] loop5: detected capacity change from 0 to 512 [ 248.112476][ T3427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 248.135305][ T3427] EXT4-fs (loop5): 1 truncate cleaned up [ 248.144235][ T3427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 248.235376][ T3430] loop0: detected capacity change from 0 to 16 [ 248.261467][ T3430] erofs: (device loop0): mounted with root inode @ nid 36. [ 248.476533][ T3436] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 248.486984][ T3436] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 248.499291][ T3436] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 249.019739][ T3443] loop4: detected capacity change from 0 to 2048 [ 249.211792][ T3443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 249.675543][ T3448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.796'. [ 249.696187][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.796'. [ 249.968989][ T3458] loop1: detected capacity change from 0 to 128 [ 249.988734][ T3458] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 249.996682][ T3458] FAT-fs (loop1): Filesystem has been set read-only [ 250.003371][ T3458] bio_check_eod: 106313 callbacks suppressed [ 250.003396][ T3458] syz.1.802: attempt to access beyond end of device [ 250.003396][ T3458] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 250.023120][ T3458] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.031004][ T3458] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.042288][ T3458] syz.1.802: attempt to access beyond end of device [ 250.042288][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.055794][ T3458] syz.1.802: attempt to access beyond end of device [ 250.055794][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.069221][ T3458] syz.1.802: attempt to access beyond end of device [ 250.069221][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.084002][ T3458] syz.1.802: attempt to access beyond end of device [ 250.084002][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.099020][ T3458] syz.1.802: attempt to access beyond end of device [ 250.099020][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.112813][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.120715][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.128624][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.136739][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.145261][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.153614][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.162588][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.171167][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.180110][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.188649][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.196944][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.205101][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.213130][ T3458] syz.1.802: attempt to access beyond end of device [ 250.213130][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.226457][ T3458] syz.1.802: attempt to access beyond end of device [ 250.226457][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.242458][ T3458] syz.1.802: attempt to access beyond end of device [ 250.242458][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.257333][ T3458] syz.1.802: attempt to access beyond end of device [ 250.257333][ T3458] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.350425][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.358961][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.367790][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.376266][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.384426][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.392766][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.400801][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.408641][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.416560][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.424426][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.432880][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.441339][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.644163][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.652137][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.660063][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.667875][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.675694][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.683562][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.691403][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.699211][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.707025][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.714843][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.722674][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.730536][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.738338][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.746156][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.754298][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.762143][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.769957][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.777794][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.785702][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.793520][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.801335][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.809137][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.816948][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.824799][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.832614][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.840487][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.848283][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.856211][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.864027][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.871951][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.879988][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.887803][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.895715][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.903563][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.911376][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.919217][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.927035][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.934852][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.942757][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.950577][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.958375][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.966243][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.974058][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.981874][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.989685][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.997488][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.005296][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.013141][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.020961][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.028764][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.036582][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.044399][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.052217][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.060076][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.067871][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.075690][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.083506][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.091320][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.099113][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.106961][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.114768][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.122599][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.130579][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.138378][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.146195][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.154062][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.161878][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.169706][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.177502][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.185326][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.193142][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.201010][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.208823][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.216690][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.224521][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.232345][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.240165][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.248021][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.255844][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.263693][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.271514][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.279320][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.287135][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.295336][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.303169][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.311010][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.318815][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.326697][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.334576][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.342465][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.350285][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.358093][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.365998][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.373844][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.381695][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.389561][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.397361][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.405185][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.413000][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.420817][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.428621][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.436478][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.444295][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.452166][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.459991][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.467801][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.475643][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.483500][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.491314][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.499206][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.507118][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.514934][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.523232][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.531114][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.538916][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.546742][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.554556][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.562384][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.570197][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.578036][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.585853][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.593677][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.601490][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.609291][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.617116][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.624967][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.632786][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.640614][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.648413][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.656237][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.664048][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.671900][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.679736][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.687540][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.695355][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.703168][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.710976][ T3453] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.724135][ T3457] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.732103][ T3457] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.740019][ T3457] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.747821][ T3457] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 251.761192][ T286] EXT4-fs (loop4): unmounting filesystem. [ 251.891182][ T3461] FAULT_INJECTION: forcing a failure. [ 251.891182][ T3461] name failslab, interval 1, probability 0, space 0, times 0 [ 251.904433][ T3461] CPU: 0 PID: 3461 Comm: syz.0.805 Not tainted syzkaller #0 [ 251.911736][ T3461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.921796][ T3461] Call Trace: [ 251.925086][ T3461] [ 251.928022][ T3461] __dump_stack+0x21/0x24 [ 251.932355][ T3461] dump_stack_lvl+0xee/0x150 [ 251.936945][ T3461] ? __cfi_dump_stack_lvl+0x8/0x8 [ 251.941965][ T3461] ? call_rcu+0xb83/0xf90 [ 251.946295][ T3461] ? exit_to_user_mode_loop+0x9b/0xb0 [ 251.951668][ T3461] dump_stack+0x15/0x24 [ 251.955827][ T3461] should_fail_ex+0x3d4/0x520 [ 251.960511][ T3461] __should_failslab+0xac/0xf0 [ 251.965280][ T3461] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 251.971262][ T3461] should_failslab+0x9/0x20 [ 251.975769][ T3461] __kmem_cache_alloc_node+0x3d/0x2c0 [ 251.981143][ T3461] ? __cfi_mutex_lock+0x10/0x10 [ 251.985993][ T3461] ? delete_node+0x2b3/0xa60 [ 251.990583][ T3461] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 251.996572][ T3461] __kmalloc+0xa1/0x1e0 [ 252.000743][ T3461] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 252.006810][ T3461] tracepoint_probe_unregister+0x1e6/0x8b0 [ 252.012624][ T3461] bpf_probe_unregister+0x61/0x70 [ 252.017665][ T3461] bpf_raw_tp_link_release+0x63/0x90 [ 252.022955][ T3461] bpf_link_free+0x13a/0x390 [ 252.027554][ T3461] ? bpf_link_put_deferred+0x20/0x20 [ 252.032849][ T3461] ? security_file_free+0xd8/0xf0 [ 252.037880][ T3461] bpf_link_release+0x15f/0x170 [ 252.042731][ T3461] ? __cfi_bpf_link_release+0x10/0x10 [ 252.048106][ T3461] __fput+0x1fc/0x8f0 [ 252.052102][ T3461] ? _raw_spin_unlock+0x4c/0x70 [ 252.056995][ T3461] ____fput+0x15/0x20 [ 252.060975][ T3461] task_work_run+0x1db/0x240 [ 252.065564][ T3461] ? __cfi_task_work_run+0x10/0x10 [ 252.070681][ T3461] ? __cfi___close_range+0x10/0x10 [ 252.075795][ T3461] exit_to_user_mode_loop+0x9b/0xb0 [ 252.080992][ T3461] exit_to_user_mode_prepare+0x5a/0xa0 [ 252.086448][ T3461] syscall_exit_to_user_mode+0x1a/0x30 [ 252.091908][ T3461] do_syscall_64+0x58/0xa0 [ 252.096316][ T3461] ? clear_bhb_loop+0x30/0x80 [ 252.100989][ T3461] ? clear_bhb_loop+0x30/0x80 [ 252.105668][ T3461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.111563][ T3461] RIP: 0033:0x7fa106b8ebe9 [ 252.116022][ T3461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.135712][ T3461] RSP: 002b:00007fa107947038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 252.144130][ T3461] RAX: 0000000000000000 RBX: 00007fa106dc5fa0 RCX: 00007fa106b8ebe9 [ 252.152103][ T3461] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 252.160070][ T3461] RBP: 00007fa107947090 R08: 0000000000000000 R09: 0000000000000000 [ 252.168037][ T3461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.175999][ T3461] R13: 00007fa106dc6038 R14: 00007fa106dc5fa0 R15: 00007fff18629f08 [ 252.183969][ T3461] [ 252.189579][ T3463] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 252.189919][ T3461] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 252.201353][ T3463] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 252.219400][ T3463] CPU: 1 PID: 3463 Comm: syz.4.804 Not tainted syzkaller #0 [ 252.226657][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.236686][ T3463] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 252.242819][ T3463] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 252.262406][ T3463] RSP: 0018:ffffc90000b473d0 EFLAGS: 00010096 [ 252.268463][ T3463] RAX: 1ffff11021a2bd86 RBX: ffff88810d15ec28 RCX: ffff88811eeaa880 [ 252.276430][ T3463] RDX: ffff88811b31d100 RSI: 0000000000000000 RDI: ffffc90000cc9000 [ 252.284398][ T3463] RBP: ffffc90000b47410 R08: 0000000000000001 R09: fffffbfff0ee4bb6 [ 252.292352][ T3463] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000000 [ 252.300301][ T3463] R13: ffff88810d15ec28 R14: dffffc0000000000 R15: ffffffff817125b0 [ 252.308308][ T3463] FS: 00007fa69d5a76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 252.317211][ T3463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.323778][ T3463] CR2: 00007fa69d565d58 CR3: 0000000114013000 CR4: 00000000003506a0 [ 252.331744][ T3463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.339787][ T3463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.347746][ T3463] Call Trace: [ 252.351007][ T3463] [ 252.353939][ T3463] __schedule+0x1263/0x14e0 [ 252.358432][ T3463] ? release_firmware_map_entry+0x194/0x194 [ 252.364323][ T3463] ? avc_has_perm+0x158/0x240 [ 252.368979][ T3463] schedule+0xbd/0x170 [ 252.373075][ T3463] schedule_timeout+0xa6/0x2e0 [ 252.377815][ T3463] ? __cfi_schedule_timeout+0x10/0x10 [ 252.383169][ T3463] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 252.388946][ T3463] ? prepare_to_wait_exclusive+0x191/0x1d0 [ 252.394731][ T3463] unix_wait_for_peer+0x1e5/0x2e0 [ 252.399728][ T3463] ? unix_find_other+0x880/0x880 [ 252.404644][ T3463] ? __cfi_autoremove_wake_function+0x10/0x10 [ 252.410705][ T3463] ? __cfi__raw_spin_lock+0x10/0x10 [ 252.415881][ T3463] ? security_unix_may_send+0x8c/0xb0 [ 252.421237][ T3463] unix_dgram_sendmsg+0xed4/0x16d0 [ 252.426326][ T3463] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 252.431846][ T3463] ? security_socket_sendmsg+0x93/0xb0 [ 252.437277][ T3463] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 252.442798][ T3463] ____sys_sendmsg+0x5a9/0x990 [ 252.447538][ T3463] ? _raw_spin_unlock+0x4c/0x70 [ 252.452360][ T3463] ? __cfi_push_rt_tasks+0x10/0x10 [ 252.457470][ T3463] ? __sys_sendmsg_sock+0x40/0x40 [ 252.462465][ T3463] ? __schedule+0xb8f/0x14e0 [ 252.467027][ T3463] ? import_iovec+0x7c/0xb0 [ 252.471523][ T3463] ___sys_sendmsg+0x21c/0x290 [ 252.476192][ T3463] ? __sys_sendmsg+0x270/0x270 [ 252.480941][ T3463] ? futex_unqueue+0x132/0x160 [ 252.485680][ T3463] ? __cfi_futex_wait+0x10/0x10 [ 252.490506][ T3463] ? __fdget+0x19c/0x220 [ 252.494719][ T3463] __sys_sendmmsg+0x274/0x460 [ 252.499367][ T3463] ? __cfi___sys_sendmmsg+0x10/0x10 [ 252.504541][ T3463] ? fpregs_restore_userregs+0x128/0x260 [ 252.510146][ T3463] __x64_sys_sendmmsg+0xa0/0xb0 [ 252.514980][ T3463] x64_sys_call+0x3f5/0x9a0 [ 252.519518][ T3463] do_syscall_64+0x4c/0xa0 [ 252.523919][ T3463] ? clear_bhb_loop+0x30/0x80 [ 252.528582][ T3463] ? clear_bhb_loop+0x30/0x80 [ 252.533256][ T3463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.539153][ T3463] RIP: 0033:0x7fa69c78ebe9 [ 252.543549][ T3463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.563147][ T3463] RSP: 002b:00007fa69d5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.571535][ T3463] RAX: ffffffffffffffda RBX: 00007fa69c9c5fa0 RCX: 00007fa69c78ebe9 [ 252.579485][ T3463] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000009 [ 252.587432][ T3463] RBP: 00007fa69c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 252.595393][ T3463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.603350][ T3463] R13: 00007fa69c9c6038 R14: 00007fa69c9c5fa0 R15: 00007ffe4f47f9e8 [ 252.611300][ T3463] [ 252.614301][ T3463] Modules linked in: [ 252.618200][ T3463] ---[ end trace 0000000000000000 ]--- [ 252.618230][ T3461] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 252.623634][ T3463] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 252.629678][ T3461] CPU: 0 PID: 3461 Comm: syz.0.805 Tainted: G D syzkaller #0 [ 252.635799][ T3463] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 252.644530][ T3461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.664107][ T3463] RSP: 0018:ffffc90000b473d0 EFLAGS: 00010096 [ 252.674137][ T3461] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 252.680183][ T3463] RAX: 1ffff11021a2bd86 RBX: ffff88810d15ec28 RCX: ffff88811eeaa880 [ 252.686309][ T3461] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 252.694262][ T3463] RDX: ffff88811b31d100 RSI: 0000000000000000 RDI: ffffc90000cc9000 [ 252.713838][ T3461] RSP: 0018:ffffc900009e7b90 EFLAGS: 00010096 [ 252.721785][ T3463] RBP: ffffc90000b47410 R08: 0000000000000001 R09: fffffbfff0ee4bb6 [ 252.727826][ T3461] RAX: 1ffff11021a2bd86 RBX: ffff88810d15ec28 RCX: ffff8881003a6540 [ 252.735776][ T3463] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000000 [ 252.743741][ T3461] RDX: ffff88811b0f0000 RSI: 0000000000000000 RDI: ffffc90000cc9000 [ 252.751687][ T3463] R13: ffff88810d15ec28 R14: dffffc0000000000 R15: ffffffff817125b0 [ 252.759634][ T3461] RBP: ffffc900009e7bd0 R08: 0000000000000080 R09: fffffbfff0ee4bb6 [ 252.767583][ T3463] FS: 00007fa69d5a76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 252.775530][ T3461] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000000 [ 252.784429][ T3463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.792373][ T3461] R13: ffff88810d15ec28 R14: dffffc0000000000 R15: ffffffff817125b0 [ 252.798928][ T3463] CR2: 00007fa69d565d58 CR3: 0000000114013000 CR4: 00000000003506a0 [ 252.806871][ T3461] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 252.814820][ T3463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.823716][ T3461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.831664][ T3463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.838224][ T3461] CR2: 00007fa106beeca8 CR3: 0000000135b57000 CR4: 00000000003506b0 [ 252.846175][ T3463] Kernel panic - not syncing: Fatal exception [ 252.854127][ T3461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.854140][ T3461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.854151][ T3461] Call Trace: [ 252.854157][ T3461] [ 252.854167][ T3461] __schedule+0x1263/0x14e0 [ 252.854189][ T3461] ? release_firmware_map_entry+0x194/0x194 [ 252.854206][ T3461] ? memcpy+0x56/0x70 [ 252.854220][ T3461] ? __kasan_check_write+0x14/0x20 [ 252.854240][ T3461] do_task_dead+0x9c/0xa0 [ 252.854259][ T3461] do_exit+0x1baa/0x2650 [ 252.854279][ T3461] ? __fget_files+0x2d5/0x330 [ 252.854294][ T3461] ? __cfi_do_exit+0x10/0x10 [ 252.854314][ T3461] ? kick_process+0xee/0x160 [ 252.854331][ T3461] ? zap_other_threads+0x2b7/0x2f0 [ 252.854350][ T3461] do_group_exit+0x210/0x2d0 [ 252.854370][ T3461] __x64_sys_exit_group+0x3f/0x40 [ 252.854390][ T3461] x64_sys_call+0x7b4/0x9a0 [ 252.854407][ T3461] do_syscall_64+0x4c/0xa0 [ 252.854422][ T3461] ? clear_bhb_loop+0x30/0x80 [ 252.854439][ T3461] ? clear_bhb_loop+0x30/0x80 [ 252.854456][ T3461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.854474][ T3461] RIP: 0033:0x7fa106b8ebe9 [ 252.854492][ T3461] Code: Unable to access opcode bytes at 0x7fa106b8ebbf. [ 252.854501][ T3461] RSP: 002b:00007fa107946f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 252.854517][ T3461] RAX: ffffffffffffffda RBX: 00007fa106beeca8 RCX: 00007fa106b8ebe9 [ 252.854529][ T3461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 252.854540][ T3461] RBP: 0000000000000009 R08: 00007fa107944ce7 R09: 0000000000000001 [ 252.854550][ T3461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.854561][ T3461] R13: 00007fa106dc6038 R14: 00007fa106dc5fa0 R15: 00007fff18629f08 [ 252.854576][ T3461] [ 252.854581][ T3461] Modules linked in: [ 252.860627][ T3461] ---[ end trace 0000000000000000 ]--- [ 252.860635][ T3461] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 252.860655][ T3461] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 252.860669][ T3461] RSP: 0018:ffffc90000b473d0 EFLAGS: 00010096 [ 252.860682][ T3461] RAX: 1ffff11021a2bd86 RBX: ffff88810d15ec28 RCX: ffff88811eeaa880 [ 252.860694][ T3461] RDX: ffff88811b31d100 RSI: 0000000000000000 RDI: ffffc90000cc9000 [ 252.860705][ T3461] RBP: ffffc90000b47410 R08: 0000000000000001 R09: fffffbfff0ee4bb6 [ 252.860717][ T3461] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000000 [ 252.860728][ T3461] R13: ffff88810d15ec28 R14: dffffc0000000000 R15: ffffffff817125b0 [ 252.860740][ T3461] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 252.860755][ T3461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.860767][ T3461] CR2: 00007fa106beeca8 CR3: 0000000135b57000 CR4: 00000000003506b0 [ 252.860781][ T3461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.860792][ T3461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.965672][ T3463] Shutting down cpus with NMI [ 254.255524][ T3463] Kernel Offset: disabled [ 254.259836][ T3463] Rebooting in 86400 seconds..