last executing test programs: 6.671214213s ago: executing program 1 (id=541): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000005c0)='O', 0x1}], 0x2}, 0x4044800) 5.892122933s ago: executing program 1 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x42002, 0x0) fcntl$setstatus(r0, 0x4, 0x800) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x205f) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x8040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f0000006a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8no}, {@shortname_win95}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4807e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 3.573489161s ago: executing program 4 (id=571): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setuid(0xee01) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 3.337111017s ago: executing program 0 (id=572): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ftruncate(r3, 0x1ca6) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x3}, {0x0, 0x1}, 0xfffffffd}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1e}}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213000e0200000000000000f8dbdf255fbfc27b663d86ed7b85ff399d93c362c3"], 0x10}}, 0x4000050) 2.995038186s ago: executing program 4 (id=573): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000001340), 0x808008, &(0x7f00000001c0)={'trans=unix,', {[{@cachetag={'cachetag', 0x3d, 'trans=unix,'}}]}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x195) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') 2.560902826s ago: executing program 4 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.474231468s ago: executing program 1 (id=577): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2900004, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000b80)=ANY=[@ANYBLOB="71756965742c4e706172743d30783030303030303008c23030303030303030362c00"], 0x2, 0x357, &(0x7f00000002c0)="$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") open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000600)="$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") 2.373090301s ago: executing program 4 (id=580): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 2.325159172s ago: executing program 3 (id=581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 2.236365494s ago: executing program 0 (id=582): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="35fd5530cc8bc06dd7cb4c8c1f0dfa5e7220155c481e872eec9010bf0ebb766cb9ff79450e524eaee3a2ca09d6c483d61082f1d460cb4ac87ece0f819645845f2e2e2fa3bbeb1e31d88655b14d4c3d86e8f70f8523c4ce0f0d18559ab3e3a40fff928d2ad918cfb8622038e4be09bdc5f1de9a0946e11cb3727ded6a4013fb67836745dbaec497f4cb5a3b8131b6cbdb7bd3f24f5e1b5a3139ddfb69"], 0x1, 0x39a, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000050000000000"], &(0x7f0000000f40)=""/4089, 0x31, 0xff9, 0x9, 0xfffffffc}, 0x28) 2.129138497s ago: executing program 3 (id=584): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.070110289s ago: executing program 4 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x42002, 0x0) fcntl$setstatus(r0, 0x4, 0x800) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x205f) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x8040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f0000006a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8no}, {@shortname_win95}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4807e, 0xdc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 1.860046854s ago: executing program 0 (id=588): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRES32], 0x3, 0x255, &(0x7f0000001740)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@acl}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 1.674183928s ago: executing program 0 (id=590): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000002900000004000000840230040000000004"], 0x30}, 0x40) 1.497178312s ago: executing program 0 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f1001000"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) unshare(0x40000000) 1.496982592s ago: executing program 2 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0xa}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x0) 1.419418174s ago: executing program 2 (id=594): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f00000117c0)=[{&(0x7f00000001c0)=""/4, 0x4}, {0x0}], 0x2, 0xc03, 0x0) 1.20290474s ago: executing program 2 (id=595): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) poll(&(0x7f0000000000)=[{r0, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x2}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.030383474s ago: executing program 3 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x1, 0x1, 0x10, 0x7}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02000c0c0400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 888.954938ms ago: executing program 2 (id=597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd0b, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x1, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2000002, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x5, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0x8, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x5, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x14, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xffffff78, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7d, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 746.052032ms ago: executing program 1 (id=598): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r1, 0x0) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) 733.625351ms ago: executing program 3 (id=599): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) 673.133953ms ago: executing program 3 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 474.597588ms ago: executing program 0 (id=601): getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syslog(0x3, &(0x7f0000000880), 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x6c, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xe}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x8}, {0x8, 0xb, 0xed}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0xa49}, {0x8, 0xb, 0x101}, {0x8}, {0x8, 0xb, 0x80000000}]}, 0x6c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64=r3, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000c40)="$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") r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x5, 0x6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x501, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000200)={0x4, 0x4f12a844, 0x8}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000526) chdir(&(0x7f0000001180)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000000400)=""/208, 0xd0) 428.195129ms ago: executing program 1 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 350.505071ms ago: executing program 2 (id=603): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000001100)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESDEC=0x0], 0x3, 0xa5d, &(0x7f0000002680)="$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") statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/180) 164.620856ms ago: executing program 2 (id=604): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x21c91c, &(0x7f0000000300)={[{@noauto_da_alloc}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@noload}, {@noinit_itable}, {@abort}, {@orlov}, {@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8596}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 141.855886ms ago: executing program 1 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x38) 141.331816ms ago: executing program 4 (id=606): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 3 (id=607): r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000001000/0x1000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0xc3072, 0xffffffffffffffff, 0xffffc000) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) kernel console output (not intermixed with test programs): on+0x94/0x140 [ 85.466638][ T4634] get_signal+0x7eb/0x12e0 [ 85.471102][ T4634] arch_do_signal_or_restart+0xe6/0x12a0 [ 85.476781][ T4634] ? futex_exit_release+0x1c0/0x1c0 [ 85.482012][ T4634] ? get_sigframe_size+0x10/0x10 [ 85.486986][ T4634] ? __context_tracking_exit+0x4c/0x80 [ 85.492484][ T4634] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.498502][ T4634] ? exit_to_user_mode_loop+0x3b/0x130 [ 85.504026][ T4634] exit_to_user_mode_loop+0x9e/0x130 [ 85.509337][ T4634] exit_to_user_mode_prepare+0xee/0x180 [ 85.514910][ T4634] syscall_exit_to_user_mode+0x16/0x40 [ 85.520425][ T4634] do_syscall_64+0x58/0xa0 [ 85.524871][ T4634] ? clear_bhb_loop+0x30/0x80 [ 85.529572][ T4634] ? clear_bhb_loop+0x30/0x80 [ 85.534294][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.540234][ T4634] RIP: 0033:0x7f31c6c4d1d9 [ 85.544693][ T4634] Code: Unable to access opcode bytes at RIP 0x7f31c6c4d1af. [ 85.552095][ T4634] RSP: 002b:00007f31c4ea50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 85.560540][ T4634] RAX: fffffffffffffe00 RBX: 00007f31c6ed4fa8 RCX: 00007f31c6c4d1d9 [ 85.562305][ T4658] loop1: detected capacity change from 0 to 64 [ 85.568534][ T4634] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31c6ed4fa8 [ 85.582744][ T4634] RBP: 00007f31c6ed4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 85.590741][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.598736][ T4634] R13: 00007f31c6ed5038 R14: 00007ffda1384320 R15: 00007ffda1384408 [ 85.606762][ T4634] [ 85.628210][ T4658] hfs: unable to parse mount options [ 85.727973][ T4658] loop1: detected capacity change from 0 to 512 [ 85.780462][ T4658] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 85.801231][ T4658] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.64: corrupted inode contents [ 85.818903][ T4658] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #11: comm syz.1.64: mark_inode_dirty error [ 85.952886][ T4658] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.64: invalid indirect mapped block 1 (level 1) [ 86.017408][ T4658] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.64: corrupted inode contents [ 86.086863][ T4658] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 86.131255][ T4658] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.64: corrupted inode contents [ 86.167169][ T4658] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.64: mark_inode_dirty error [ 86.232813][ T4658] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 86.263134][ T4658] EXT4-fs (loop1): 1 truncate cleaned up [ 86.271154][ T4658] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.371642][ T26] audit: type=1326 audit(1791511591.679:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 86.424554][ T4672] FAULT_INJECTION: forcing a failure. [ 86.424554][ T4672] name failslab, interval 1, probability 0, space 0, times 1 [ 86.478003][ T26] audit: type=1326 audit(1791511591.719:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 86.520236][ T4672] CPU: 0 PID: 4672 Comm: syz.0.69 Not tainted syzkaller #0 [ 86.527519][ T4672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.537605][ T4672] Call Trace: [ 86.540915][ T4672] [ 86.543872][ T4672] dump_stack_lvl+0x188/0x250 [ 86.548589][ T4672] ? show_regs_print_info+0x20/0x20 [ 86.553829][ T4672] ? load_image+0x410/0x410 [ 86.558372][ T4672] ? __might_sleep+0xf0/0xf0 [ 86.563005][ T4672] ? __lock_acquire+0x7d40/0x7d40 [ 86.568108][ T4672] should_fail+0x383/0x4b0 [ 86.572579][ T4672] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 86.578027][ T4672] should_failslab+0x5/0x20 [ 86.582567][ T4672] slab_pre_alloc_hook+0x51/0xc0 [ 86.587538][ T4672] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 86.592942][ T4672] kmem_cache_alloc_trace+0x47/0x290 [ 86.598251][ T4672] ? __kthread_create_on_node+0x117/0x460 [ 86.603997][ T4672] ? __init_swait_queue_head+0xa4/0x140 [ 86.609575][ T4672] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 86.614987][ T4672] __kthread_create_on_node+0x117/0x460 [ 86.620563][ T4672] ? __kasan_kmalloc+0xc6/0xe0 [ 86.625357][ T4672] ? kthread_create_on_node+0x140/0x140 [ 86.630931][ T4672] ? misc_open+0x31f/0x390 [ 86.635393][ T4672] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 86.640817][ T4672] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 86.646230][ T4672] kthread_create_on_node+0xe8/0x140 [ 86.651560][ T4672] ? tsk_fork_get_node+0x60/0x60 [ 86.656550][ T4672] init_rescuer+0x1a6/0x290 [ 86.661095][ T4672] alloc_workqueue+0xfb8/0x1450 [ 86.665985][ T4672] ? vsnprintf+0x1b22/0x1c20 [ 86.670623][ T4672] ? snprintf+0xe5/0x140 [ 86.674906][ T4672] ? apply_workqueue_attrs+0x170/0x170 [ 86.680440][ T4672] nci_register_device+0x229/0x9f0 [ 86.685597][ T4672] ? nci_free_device+0x90/0x90 [ 86.690403][ T4672] ? nci_hci_allocate+0x1dd/0x2a0 [ 86.695465][ T4672] ? nci_allocate_device+0x241/0x350 [ 86.700786][ T4672] virtual_ncidev_open+0x55/0xc0 [ 86.705767][ T4672] ? virtual_ncidev_ioctl+0x90/0x90 [ 86.711003][ T4672] misc_open+0x31f/0x390 [ 86.715295][ T4672] chrdev_open+0x585/0x5f0 [ 86.719761][ T4672] ? cd_forget+0x160/0x160 [ 86.724242][ T4672] ? fsnotify_perm+0x3a7/0x560 [ 86.729045][ T4672] ? cd_forget+0x160/0x160 [ 86.733502][ T4672] do_dentry_open+0x7f7/0xf90 [ 86.738216][ T4672] ? vfs_open+0x2b/0x80 [ 86.742416][ T4672] path_openat+0x2718/0x2fb0 [ 86.747058][ T4672] ? __kasan_slab_alloc+0xa9/0xc0 [ 86.752117][ T4672] ? do_filp_open+0x400/0x400 [ 86.756878][ T4672] do_filp_open+0x1df/0x400 [ 86.761423][ T4672] ? vfs_tmpfile+0x300/0x300 [ 86.766068][ T4672] ? _raw_spin_unlock+0x24/0x40 [ 86.770955][ T4672] ? alloc_fd+0x59e/0x650 [ 86.775345][ T4672] do_sys_openat2+0x14b/0x500 [ 86.780054][ T4672] ? __lock_acquire+0x7d40/0x7d40 [ 86.785113][ T4672] ? do_sys_open+0xe0/0xe0 [ 86.789564][ T4672] ? lock_chain_count+0x20/0x20 [ 86.794455][ T4672] __x64_sys_openat+0x135/0x160 [ 86.797551][ T26] audit: type=1326 audit(1791511591.729:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 86.799355][ T4672] do_syscall_64+0x4c/0xa0 [ 86.827492][ T4672] ? clear_bhb_loop+0x30/0x80 [ 86.832224][ T4672] ? clear_bhb_loop+0x30/0x80 [ 86.836940][ T4672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.842876][ T4672] RIP: 0033:0x7f31c6c4d1d9 [ 86.847329][ T4672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.866962][ T4672] RSP: 002b:00007f31c4ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.875422][ T4672] RAX: ffffffffffffffda RBX: 00007f31c6ed4fa0 RCX: 00007f31c6c4d1d9 [ 86.883453][ T4672] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 86.891466][ T4672] RBP: 00007f31c6ce4888 R08: 0000000000000000 R09: 0000000000000000 [ 86.899469][ T4672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.907495][ T4672] R13: 00007f31c6ed5038 R14: 00007f31c6ed4fa0 R15: 00007ffda1384408 [ 86.911363][ T26] audit: type=1326 audit(1791511591.729:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 86.915546][ T4672] [ 86.952312][ T4679] netlink: 168 bytes leftover after parsing attributes in process `syz.2.71'. [ 86.980194][ T26] audit: type=1326 audit(1791511591.729:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 86.983365][ T4663] loop3: detected capacity change from 0 to 32768 [ 87.005519][ T26] audit: type=1326 audit(1791511591.729:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 87.025215][ T4656] loop4: detected capacity change from 0 to 40427 [ 87.037136][ T26] audit: type=1326 audit(1791511591.729:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 87.067249][ T26] audit: type=1326 audit(1791511591.729:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 87.092469][ T26] audit: type=1326 audit(1791511591.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 87.116944][ T26] audit: type=1326 audit(1791511591.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c6c4d1d9 code=0x7ffc0000 [ 87.169062][ T1110] cfg80211: failed to load regulatory.db [ 87.179977][ T4656] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 87.226908][ T4656] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.274510][ T4656] F2FS-fs (loop4): invalid crc value [ 87.284457][ T4683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.72'. [ 87.342677][ T4656] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.480759][ T4690] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4692] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4690] [ 87.495275][ T4656] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.512147][ T4656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.715549][ T4688] binder: 4685:4688 ioctl c0306201 200000000080 returned -14 [ 87.835563][ T4701] loop2: detected capacity change from 0 to 256 [ 87.866511][ T4690] binder: 4685:4690 ioctl c0306201 2000000003c0 returned -14 [ 88.481757][ T4699] overlayfs: filesystem on './file2' not supported [ 88.979956][ T4710] device lo entered promiscuous mode [ 89.016146][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.056747][ T4710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 89.086953][ T4710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.172753][ T4700] loop1: detected capacity change from 0 to 32768 [ 89.182861][ T4710] syz.2.80 (4710) used greatest stack depth: 20400 bytes left [ 89.727932][ T4720] program syz.1.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.790331][ T4713] FAULT_INJECTION: forcing a failure. [ 89.790331][ T4713] name fail_futex, interval 1, probability 0, space 0, times 0 [ 89.850108][ T4713] CPU: 1 PID: 4713 Comm: syz.4.77 Not tainted syzkaller #0 [ 89.857600][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.867814][ T4713] Call Trace: [ 89.871118][ T4713] [ 89.874152][ T4713] dump_stack_lvl+0x188/0x250 [ 89.878847][ T4713] ? show_regs_print_info+0x20/0x20 [ 89.884052][ T4713] ? load_image+0x410/0x410 [ 89.888574][ T4713] ? __lock_acquire+0x12df/0x7d40 [ 89.893620][ T4713] ? mark_lock+0x94/0x320 [ 89.897995][ T4713] should_fail+0x383/0x4b0 [ 89.902540][ T4713] get_futex_key+0x1cf/0x12d0 [ 89.907249][ T4713] ? futex_wait_restart+0x250/0x250 [ 89.912471][ T4713] futex_wake+0x101/0x540 [ 89.916818][ T4713] ? verify_lock_unused+0x140/0x140 [ 89.922043][ T4713] ? verify_lock_unused+0x140/0x140 [ 89.927255][ T4713] ? futex_wait+0x680/0x680 [ 89.931775][ T4713] do_futex+0xd83/0x12b0 [ 89.936042][ T4713] ? __might_sleep+0xf0/0xf0 [ 89.940642][ T4713] ? __might_fault+0xb7/0x110 [ 89.945332][ T4713] ? futex_exit_release+0x1c0/0x1c0 [ 89.950538][ T4713] ? __lock_acquire+0x7d40/0x7d40 [ 89.955578][ T4713] mm_release+0x278/0x3c0 [ 89.959922][ T4713] ? exit_mm_release+0x30/0x30 [ 89.964698][ T4713] ? lockdep_hardirqs_on+0x94/0x140 [ 89.969918][ T4713] exit_mm+0xaf/0x7b0 [ 89.973907][ T4713] ? perf_pmu_migrate_context+0xb70/0xb70 [ 89.979644][ T4713] ? do_exit+0x2110/0x2110 [ 89.984069][ T4713] ? rcu_is_watching+0x11/0xa0 [ 89.988859][ T4713] ? mm_trace_rss_stat+0x81/0x1c0 [ 89.993892][ T4713] ? sync_mm_rss+0x1f5/0x350 [ 89.998492][ T4713] do_exit+0x5b8/0x2110 [ 90.002660][ T4713] ? put_task_struct+0x80/0x80 [ 90.007429][ T4713] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.013439][ T4713] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.018503][ T4713] do_group_exit+0x12c/0x2f0 [ 90.023125][ T4713] ? lockdep_hardirqs_on+0x94/0x140 [ 90.028343][ T4713] get_signal+0x7eb/0x12e0 [ 90.032779][ T4713] arch_do_signal_or_restart+0xe6/0x12a0 [ 90.038464][ T4713] ? futex_exit_release+0x1c0/0x1c0 [ 90.043684][ T4713] ? get_sigframe_size+0x10/0x10 [ 90.048642][ T4713] ? __context_tracking_exit+0x4c/0x80 [ 90.054121][ T4713] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.060123][ T4713] ? exit_to_user_mode_loop+0x3b/0x130 [ 90.065598][ T4713] exit_to_user_mode_loop+0x9e/0x130 [ 90.070901][ T4713] exit_to_user_mode_prepare+0xee/0x180 [ 90.076460][ T4713] syscall_exit_to_user_mode+0x16/0x40 [ 90.081936][ T4713] do_syscall_64+0x58/0xa0 [ 90.086458][ T4713] ? clear_bhb_loop+0x30/0x80 [ 90.091153][ T4713] ? clear_bhb_loop+0x30/0x80 [ 90.095847][ T4713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.101764][ T4713] RIP: 0033:0x7f7a283281d9 [ 90.106197][ T4713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.125817][ T4713] RSP: 002b:00007f7a265800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.134241][ T4713] RAX: fffffffffffffe00 RBX: 00007f7a285affa8 RCX: 00007f7a283281d9 [ 90.142219][ T4713] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7a285affa8 [ 90.150196][ T4713] RBP: 00007f7a285affa0 R08: 0000000000000000 R09: 0000000000000000 [ 90.158179][ T4713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.166160][ T4713] R13: 00007f7a285b0038 R14: 00007ffc65c4d750 R15: 00007ffc65c4d838 [ 90.174170][ T4713] [ 90.284743][ T4715] loop2: detected capacity change from 0 to 40427 [ 90.333323][ T4715] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 90.357220][ T4715] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.554647][ T4730] loop1: detected capacity change from 0 to 512 [ 90.689330][ T4715] F2FS-fs (loop2): invalid crc value [ 90.838109][ T4715] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.247271][ T4715] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 91.275879][ T4715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.452833][ T4744] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4745] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4744] [ 91.506405][ T4748] binder: 4743:4748 ioctl c0306201 200000000080 returned -14 [ 91.514557][ T4748] binder: 4743:4748 ioctl c0306201 2000000003c0 returned -14 [ 91.523787][ T4744] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4745] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4744] [ 91.700769][ T4723] loop0: detected capacity change from 0 to 32768 [ 92.068409][ T4759] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4761] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4759] [ 92.245845][ T4765] Illegal XDP return value 4294967274, expect packet loss! [ 92.339716][ T4754] binder: 4753:4754 ioctl c0306201 0 returned -14 [ 92.354906][ T4754] loop1: detected capacity change from 0 to 512 [ 92.401646][ T4754] EXT4-fs (loop1): Ignoring removed nobh option [ 92.425043][ T4754] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.435371][ T4754] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.93: corrupted inode contents [ 92.451574][ T4754] EXT4-fs (loop1): Remounting filesystem read-only [ 92.458506][ T4754] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 92.476920][ T4754] EXT4-fs (loop1): Remounting filesystem read-only [ 92.483597][ T4754] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.93: corrupted inode contents [ 92.498286][ T4754] EXT4-fs (loop1): Remounting filesystem read-only [ 92.504872][ T4754] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.93: mark_inode_dirty error [ 92.516556][ T4754] EXT4-fs (loop1): Remounting filesystem read-only [ 92.523529][ T4754] EXT4-fs (loop1): 1 orphan inode deleted [ 92.529406][ T4754] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 93.174595][ T4790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.330979][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 93.764319][ T4798] loop3: detected capacity change from 0 to 32768 [ 95.831266][ T4822] binder: 4813:4822 ioctl c0306201 0 returned -14 [ 95.998797][ T4821] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4824] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4821] [ 96.079056][ T4822] loop4: detected capacity change from 0 to 512 [ 96.316918][ T4822] EXT4-fs (loop4): Ignoring removed nobh option [ 96.419563][ T4822] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.443779][ T4822] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.109: corrupted inode contents [ 96.464141][ T4822] EXT4-fs (loop4): Remounting filesystem read-only [ 96.473150][ T4822] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 96.526755][ T4822] EXT4-fs (loop4): Remounting filesystem read-only [ 96.533358][ T4822] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.109: corrupted inode contents [ 96.584199][ T4822] EXT4-fs (loop4): Remounting filesystem read-only [ 96.611634][ T4822] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.109: mark_inode_dirty error [ 96.634107][ T4822] EXT4-fs (loop4): Remounting filesystem read-only [ 96.649179][ T4822] EXT4-fs (loop4): 1 orphan inode deleted [ 96.654996][ T4822] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 96.895060][ T4842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 96.909972][ T4838] netlink: 168 bytes leftover after parsing attributes in process `syz.3.113'. [ 97.025961][ T4847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.130467][ T4853] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.120'. [ 97.273221][ T4862] loop4: detected capacity change from 0 to 1024 [ 97.311067][ T4862] EXT4-fs (loop4): Ignoring removed orlov option [ 97.360894][ T4862] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.378605][ T4862] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.405447][ T4862] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.124: Invalid inode table block 0 in block_group 0 [ 97.475824][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.482894][ T4862] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 97.503457][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.520804][ T4862] EXT4-fs error (device loop4): ext4_quota_write:6648: inode #3: comm syz.4.124: mark_inode_dirty error [ 97.542534][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.558507][ T4862] __quota_error: 71 callbacks suppressed [ 97.558524][ T4862] Quota error (device loop4): write_blk: dquota write failed [ 97.586824][ T4862] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 97.616987][ T4862] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.124: Failed to acquire dquot type 0 [ 97.631371][ T4872] FAULT_INJECTION: forcing a failure. [ 97.631371][ T4872] name failslab, interval 1, probability 0, space 0, times 0 [ 97.653784][ T4872] CPU: 1 PID: 4872 Comm: syz.0.129 Not tainted syzkaller #0 [ 97.661155][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.671259][ T4872] Call Trace: [ 97.674582][ T4872] [ 97.677547][ T4872] dump_stack_lvl+0x188/0x250 [ 97.682272][ T4872] ? show_regs_print_info+0x20/0x20 [ 97.686899][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.687588][ T4872] ? load_image+0x410/0x410 [ 97.695214][ T4862] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.124: Invalid inode table block 0 in block_group 0 [ 97.698669][ T4872] ? __might_sleep+0xf0/0xf0 [ 97.698697][ T4872] ? __lock_acquire+0x7d40/0x7d40 [ 97.698726][ T4872] should_fail+0x383/0x4b0 [ 97.698756][ T4872] should_failslab+0x5/0x20 [ 97.698776][ T4872] slab_pre_alloc_hook+0x51/0xc0 [ 97.735400][ T4872] __kmalloc+0x6b/0x340 [ 97.739605][ T4872] ? ops_init+0x8a/0x5f0 [ 97.743928][ T4872] ops_init+0x8a/0x5f0 [ 97.745928][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.748054][ T4872] setup_net+0x39e/0xa10 [ 97.748087][ T4872] ? copy_net_ns+0x5b0/0x5b0 [ 97.748112][ T4872] ? copy_net_ns+0x324/0x5b0 [ 97.755269][ T4862] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 97.758890][ T4872] ? down_read_killable+0x1ce/0x340 [ 97.758922][ T4872] copy_net_ns+0x33e/0x5b0 [ 97.758951][ T4872] create_new_namespaces+0x3ce/0x700 [ 97.758993][ T4872] unshare_nsproxy_namespaces+0x116/0x160 [ 97.759018][ T4872] ksys_unshare+0x4f6/0x8e0 [ 97.759040][ T4872] ? __lock_acquire+0x7d40/0x7d40 [ 97.759070][ T4872] ? sighand_ctor+0x40/0x40 [ 97.759091][ T4872] ? lock_chain_count+0x20/0x20 [ 97.759121][ T4872] ? syscall_enter_from_user_mode+0x21/0x70 [ 97.759149][ T4872] __x64_sys_unshare+0x34/0x40 [ 97.759170][ T4872] do_syscall_64+0x4c/0xa0 [ 97.759190][ T4872] ? clear_bhb_loop+0x30/0x80 [ 97.759212][ T4872] ? clear_bhb_loop+0x30/0x80 [ 97.759236][ T4872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.759258][ T4872] RIP: 0033:0x7f31c6c4d1d9 [ 97.759277][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.759295][ T4872] RSP: 002b:00007f31c4ea5028 EFLAGS: 00000246 [ 97.798954][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.803108][ T4872] ORIG_RAX: 0000000000000110 [ 97.803122][ T4872] RAX: ffffffffffffffda RBX: 00007f31c6ed4fa0 RCX: 00007f31c6c4d1d9 [ 97.803140][ T4872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 97.803153][ T4872] RBP: 00007f31c6ce4888 R08: 0000000000000000 R09: 0000000000000000 [ 97.803167][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.821611][ T4862] EXT4-fs error (device loop4): ext4_ext_truncate:4487: inode #15: comm syz.4.124: mark_inode_dirty error [ 97.823488][ T4872] R13: 00007f31c6ed5038 R14: 00007f31c6ed4fa0 R15: 00007ffda1384408 [ 97.823527][ T4872] [ 97.950787][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.959675][ T4862] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.124: Invalid inode table block 0 in block_group 0 [ 97.989020][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 97.995688][ T4862] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.033758][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 98.043901][ T4882] netlink: 168 bytes leftover after parsing attributes in process `syz.2.132'. [ 98.057407][ T4862] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 98.076196][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 98.092671][ T4862] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.124: Invalid inode table block 0 in block_group 0 [ 98.149921][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 98.180863][ T4862] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.198974][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 98.216767][ T4862] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.124: mark_inode_dirty error [ 98.266835][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 98.293815][ T4862] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 98.328543][ T4862] EXT4-fs (loop4): Remounting filesystem read-only [ 98.356738][ T4862] EXT4-fs (loop4): 1 truncate cleaned up [ 98.372927][ T4862] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,norecovery,errors=remount-ro,lazytime,data_err=ignore,noblock_validity,minixdf,orlov,. Quota mode: writeback. [ 98.461972][ T4862] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.124: Invalid block bitmap block 0 in block_group 0 [ 98.946038][ T4902] loop2: detected capacity change from 0 to 16 [ 99.093549][ T4902] erofs: (device loop2): mounted with root inode @ nid 36. [ 99.128990][ T4902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 99.137907][ T4902] overlayfs: missing 'lowerdir' [ 99.493560][ T4909] loop2: detected capacity change from 0 to 1024 [ 99.519884][ T4911] loop0: detected capacity change from 0 to 1024 [ 99.529684][ T4913] loop4: detected capacity change from 0 to 512 [ 99.583916][ T4913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.598063][ T4911] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 99.687682][ T4923] loop1: detected capacity change from 0 to 512 [ 99.780244][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.796194][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,nogrpid,,errors=continue. Quota mode: writeback. [ 99.964151][ T4913] EXT4-fs (loop4): 1 truncate cleaned up [ 100.044006][ T4913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.764908][ T4935] loop0: detected capacity change from 0 to 1024 [ 101.068305][ T4944] loop4: detected capacity change from 0 to 512 [ 102.625851][ T4947] sched: RT throttling activated [ 103.607058][ T4947] loop2: detected capacity change from 0 to 16 [ 103.777251][ T4947] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.795021][ T4947] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.804234][ T4947] overlayfs: missing 'lowerdir' [ 104.011955][ T4961] loop3: detected capacity change from 0 to 256 [ 104.606752][ T4963] loop1: detected capacity change from 0 to 512 [ 105.392534][ T4957] overlayfs: filesystem on './file2' not supported [ 105.447439][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 105.708864][ T4976] netlink: 168 bytes leftover after parsing attributes in process `syz.4.165'. [ 105.945879][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 106.002262][ T4991] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4994] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4991] [ 106.043692][ T4991] binder: 4990:4991 ioctl c0306201 200000000080 returned -14 [ 106.055752][ T4991] binder: 4990:4991 ioctl c0306201 2000000003c0 returned -14 [ 106.104715][ T4991] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4994] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4991] [ 106.366023][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 106.457395][ T5017] loop3: detected capacity change from 0 to 512 [ 107.479981][ T5026] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.177'. [ 107.627221][ T5031] FAULT_INJECTION: forcing a failure. [ 107.627221][ T5031] name failslab, interval 1, probability 0, space 0, times 0 [ 107.666848][ T5031] CPU: 0 PID: 5031 Comm: syz.3.178 Not tainted syzkaller #0 [ 107.674231][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.684535][ T5031] Call Trace: [ 107.687902][ T5031] [ 107.690903][ T5031] dump_stack_lvl+0x188/0x250 [ 107.695630][ T5031] ? show_regs_print_info+0x20/0x20 [ 107.700874][ T5031] ? load_image+0x410/0x410 [ 107.705417][ T5031] ? __might_sleep+0xf0/0xf0 [ 107.710068][ T5031] ? __lock_acquire+0x7d40/0x7d40 [ 107.715148][ T5031] should_fail+0x383/0x4b0 [ 107.719625][ T5031] should_failslab+0x5/0x20 [ 107.724198][ T5031] slab_pre_alloc_hook+0x51/0xc0 [ 107.729187][ T5031] ? security_inode_alloc+0x30/0x110 [ 107.734537][ T5031] kmem_cache_alloc+0x3d/0x280 [ 107.739361][ T5031] security_inode_alloc+0x30/0x110 [ 107.744520][ T5031] inode_init_always+0x8e5/0xc90 [ 107.749499][ T5031] new_inode_pseudo+0x8e/0x210 [ 107.754314][ T5031] new_inode+0x25/0x1d0 [ 107.758521][ T5031] ? __rwlock_init+0x140/0x140 [ 107.763325][ T5031] proc_get_inode+0x1e/0x6d0 [ 107.767956][ T5031] proc_lookup_de+0x244/0x2f0 [ 107.772681][ T5031] proc_tgid_net_lookup+0x5f/0xf0 [ 107.777736][ T5031] ? proc_create_net_single_write+0x190/0x190 [ 107.783863][ T5031] path_openat+0x1046/0x2fb0 [ 107.788525][ T5031] ? do_filp_open+0x400/0x400 [ 107.793265][ T5031] do_filp_open+0x1df/0x400 [ 107.797826][ T5031] ? vfs_tmpfile+0x300/0x300 [ 107.802455][ T5031] ? noop_direct_IO+0x10/0x10 [ 107.807167][ T5031] ? _raw_spin_unlock+0x24/0x40 [ 107.812070][ T5031] ? alloc_fd+0x59e/0x650 [ 107.816536][ T5031] do_sys_openat2+0x14b/0x500 [ 107.821253][ T5031] ? __lock_acquire+0x7d40/0x7d40 [ 107.826313][ T5031] ? do_sys_open+0xe0/0xe0 [ 107.830758][ T5031] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.836766][ T5031] ? lock_chain_count+0x20/0x20 [ 107.841658][ T5031] __x64_sys_openat+0x135/0x160 [ 107.846548][ T5031] do_syscall_64+0x4c/0xa0 [ 107.851094][ T5031] ? clear_bhb_loop+0x30/0x80 [ 107.855805][ T5031] ? clear_bhb_loop+0x30/0x80 [ 107.860519][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.866461][ T5031] RIP: 0033:0x7f1999154a0e [ 107.871096][ T5031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.890755][ T5031] RSP: 002b:00007f19973ebec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.899218][ T5031] RAX: ffffffffffffffda RBX: 00007f19973ec6c0 RCX: 00007f1999154a0e [ 107.907358][ T5031] RDX: 0000000000000002 RSI: 00007f19973ebf90 RDI: ffffffffffffff9c [ 107.915369][ T5031] RBP: 00007f199922b888 R08: 0000000000000000 R09: 0000000000000000 [ 107.923382][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.931390][ T5031] R13: 00007f199941c038 R14: 00007f199941bfa0 R15: 00007fffd713d5b8 [ 107.939415][ T5031] [ 108.098193][ T5042] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5043] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5042] [ 108.147258][ T5042] binder: 5041:5042 ioctl c0306201 200000000080 returned -14 [ 108.169180][ T5042] binder: 5041:5042 ioctl c0306201 2000000003c0 returned -14 [ 108.194885][ T5042] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5043] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5042] [ 108.270770][ T5051] loop1: detected capacity change from 0 to 512 [ 109.118961][ T5061] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.190'. [ 109.144539][ T5057] FAULT_INJECTION: forcing a failure. [ 109.144539][ T5057] name failslab, interval 1, probability 0, space 0, times 0 [ 109.176667][ T5057] CPU: 0 PID: 5057 Comm: syz.3.189 Not tainted syzkaller #0 [ 109.184193][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.194288][ T5057] Call Trace: [ 109.197637][ T5057] [ 109.200592][ T5057] dump_stack_lvl+0x188/0x250 [ 109.205305][ T5057] ? show_regs_print_info+0x20/0x20 [ 109.210540][ T5057] ? load_image+0x410/0x410 [ 109.215135][ T5057] ? __lock_acquire+0x7d40/0x7d40 [ 109.220220][ T5057] should_fail+0x383/0x4b0 [ 109.224686][ T5057] should_failslab+0x5/0x20 [ 109.229222][ T5057] slab_pre_alloc_hook+0x51/0xc0 [ 109.234227][ T5057] ? __d_alloc+0x27/0x6d0 [ 109.238604][ T5057] kmem_cache_alloc+0x3d/0x280 [ 109.243406][ T5057] __d_alloc+0x27/0x6d0 [ 109.247617][ T5057] d_alloc+0x46/0x250 [ 109.251635][ T5057] lookup_one_qstr_excl+0xc6/0x240 [ 109.256788][ T5057] filename_create+0x242/0x450 [ 109.261602][ T5057] ? kern_path_create+0x190/0x190 [ 109.266675][ T5057] do_mkdirat+0xa5/0x5c0 [ 109.270961][ T5057] ? vfs_mkdir+0x570/0x570 [ 109.275416][ T5057] __x64_sys_mkdirat+0x85/0x90 [ 109.280234][ T5057] do_syscall_64+0x4c/0xa0 [ 109.284685][ T5057] ? clear_bhb_loop+0x30/0x80 [ 109.289431][ T5057] ? clear_bhb_loop+0x30/0x80 [ 109.294158][ T5057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.300095][ T5057] RIP: 0033:0x7f19991941d9 [ 109.304542][ T5057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.324191][ T5057] RSP: 002b:00007f19973ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.332652][ T5057] RAX: ffffffffffffffda RBX: 00007f199941bfa0 RCX: 00007f19991941d9 [ 109.340670][ T5057] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 109.348680][ T5057] RBP: 00007f199922b888 R08: 0000000000000000 R09: 0000000000000000 [ 109.356708][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.364717][ T5057] R13: 00007f199941c038 R14: 00007f199941bfa0 R15: 00007fffd713d5b8 [ 109.372778][ T5057] [ 110.592940][ T5090] loop4: detected capacity change from 0 to 256 [ 111.380279][ T5094] loop0: detected capacity change from 0 to 512 [ 111.456277][ T5092] loop1: detected capacity change from 0 to 512 [ 111.762875][ T5090] FAT-fs (loop4): Directory bread(block 64) failed [ 111.819099][ T5090] FAT-fs (loop4): Directory bread(block 65) failed [ 111.909687][ T5090] FAT-fs (loop4): Directory bread(block 66) failed [ 111.995778][ T5090] FAT-fs (loop4): Directory bread(block 67) failed [ 112.108197][ T5090] FAT-fs (loop4): Directory bread(block 68) failed [ 112.157168][ T5090] FAT-fs (loop4): Directory bread(block 69) failed [ 112.163915][ T5090] FAT-fs (loop4): Directory bread(block 70) failed [ 112.183532][ T5090] FAT-fs (loop4): Directory bread(block 71) failed [ 112.206466][ T5090] FAT-fs (loop4): Directory bread(block 72) failed [ 112.230164][ T5090] FAT-fs (loop4): Directory bread(block 73) failed [ 112.488418][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 112.525722][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 112.682107][ T5112] netlink: 44 bytes leftover after parsing attributes in process `syz.0.210'. [ 113.563557][ T5120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.212'. [ 114.233611][ T5126] loop0: detected capacity change from 0 to 512 [ 114.274778][ T5126] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 114.374649][ T5126] EXT4-fs (loop0): 1 truncate cleaned up [ 114.386734][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 114.677278][ T5137] loop1: detected capacity change from 0 to 512 [ 115.363513][ T5140] loop4: detected capacity change from 0 to 512 [ 116.026083][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 116.039750][ T5144] Zero length message leads to an empty skb [ 116.060639][ T5147] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5148] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5147] [ 116.121909][ T5147] binder: 5146:5147 ioctl c0306201 200000000080 returned -14 [ 116.134384][ T5147] binder: 5146:5147 ioctl c0306201 2000000003c0 returned -14 [ 116.162917][ T5147] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5148] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5147] [ 116.189730][ T5153] loop2: detected capacity change from 0 to 512 [ 116.314456][ T5160] loop3: detected capacity change from 0 to 1024 [ 116.384327][ T5160] EXT4-fs (loop3): Ignoring removed bh option [ 116.470888][ T5160] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 116.591010][ T5160] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.492638][ T5169] loop1: detected capacity change from 0 to 8192 [ 117.570377][ T5172] loop3: detected capacity change from 0 to 64 [ 117.648559][ T26] audit: type=1800 audit(1791511622.969:84): pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="file0" dev="loop1" ino=1048638 res=0 errno=0 [ 117.697822][ T5172] hfs: unable to parse mount options [ 117.788356][ T5172] loop3: detected capacity change from 0 to 512 [ 117.836332][ T5172] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.856854][ T5172] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.228: corrupted inode contents [ 117.938536][ T5172] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.228: mark_inode_dirty error [ 118.008478][ T5172] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.228: invalid indirect mapped block 1 (level 1) [ 118.057441][ T5172] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.228: corrupted inode contents [ 118.129524][ T5172] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 118.195136][ T5172] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.228: corrupted inode contents [ 118.262666][ T5172] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.228: mark_inode_dirty error [ 118.295055][ T5172] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 118.313702][ T26] audit: type=1326 audit(1791511623.629:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.340237][ T5172] EXT4-fs (loop3): 1 truncate cleaned up [ 118.355819][ T5172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.379796][ T26] audit: type=1326 audit(1791511623.629:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.447327][ T26] audit: type=1326 audit(1791511623.629:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.509643][ T26] audit: type=1326 audit(1791511623.629:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.613629][ T26] audit: type=1326 audit(1791511623.629:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.687891][ T26] audit: type=1326 audit(1791511623.629:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.719009][ T26] audit: type=1326 audit(1791511623.629:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.750749][ T26] audit: type=1326 audit(1791511623.659:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.832891][ T26] audit: type=1326 audit(1791511623.659:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.4.233" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a283281d9 code=0x7ffc0000 [ 118.836546][ T5192] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.014370][ T5217] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5219] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5217] [ 120.058436][ T5217] binder: 5216:5217 ioctl c0306201 200000000080 returned -14 [ 120.080249][ T5217] binder: 5216:5217 ioctl c0306201 2000000003c0 returned -14 [ 120.108685][ T5217] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5219] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5217] [ 120.230867][ T5229] scsi_dev_info_list_add_str: bad dev info string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' 'œ' '(null)' [ 120.249894][ T5228] loop1: detected capacity change from 0 to 64 [ 120.262014][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.290128][ T5228] hfs: unable to parse mount options [ 120.332416][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.340639][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.358218][ T5228] loop1: detected capacity change from 0 to 512 [ 120.437748][ T5228] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 120.475982][ T5228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.246: corrupted inode contents [ 120.537444][ T5228] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #11: comm syz.1.246: mark_inode_dirty error [ 120.616789][ T5228] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.246: invalid indirect mapped block 1 (level 1) [ 120.684002][ T5228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.246: corrupted inode contents [ 120.714020][ T5228] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 120.729900][ T5228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.246: corrupted inode contents [ 120.744621][ T5228] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.246: mark_inode_dirty error [ 120.760511][ T5228] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 120.773061][ T5228] EXT4-fs (loop1): 1 truncate cleaned up [ 121.089333][ T5251] loop2: detected capacity change from 0 to 16 [ 121.127795][ T5228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.172306][ T5251] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.217656][ T5251] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.226774][ T5251] overlayfs: missing 'lowerdir' [ 121.886044][ T5265] loop2: detected capacity change from 0 to 512 [ 121.930415][ T5265] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 121.969115][ T5265] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.259: invalid indirect mapped block 256 (level 1) [ 122.258901][ T5265] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.259: invalid indirect mapped block 2683928664 (level 1) [ 122.526989][ T5265] EXT4-fs (loop2): 1 truncate cleaned up [ 122.809512][ T5265] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 123.063958][ T5277] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5279] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5277] [ 123.146108][ T26] audit: type=1326 audit(1791511628.459:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.185168][ T5274] binder: 5273:5274 ioctl c0306201 0 returned -14 [ 123.198374][ T5274] loop1: detected capacity change from 0 to 512 [ 123.225807][ T26] audit: type=1326 audit(1791511628.459:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.254052][ T5284] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.265'. [ 123.316692][ T26] audit: type=1326 audit(1791511628.489:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.367570][ T5274] EXT4-fs (loop1): Ignoring removed nobh option [ 123.376427][ T5274] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.395191][ T5274] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.261: corrupted inode contents [ 123.409174][ T5274] EXT4-fs (loop1): Remounting filesystem read-only [ 123.415746][ T5274] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 123.430609][ T5274] EXT4-fs (loop1): Remounting filesystem read-only [ 123.437326][ T5274] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.261: corrupted inode contents [ 123.450383][ T5274] EXT4-fs (loop1): Remounting filesystem read-only [ 123.457020][ T5274] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.261: mark_inode_dirty error [ 123.470119][ T5274] EXT4-fs (loop1): Remounting filesystem read-only [ 123.477082][ T5274] EXT4-fs (loop1): 1 orphan inode deleted [ 123.482872][ T5274] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 123.525610][ T26] audit: type=1326 audit(1791511628.489:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.558463][ T26] audit: type=1326 audit(1791511628.489:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.608373][ T26] audit: type=1326 audit(1791511628.489:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.723163][ T5296] loop3: detected capacity change from 0 to 16 [ 123.746243][ T26] audit: type=1326 audit(1791511628.489:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.778044][ T5296] erofs: (device loop3): mounted with root inode @ nid 36. [ 123.789164][ T5296] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.797998][ T5296] overlayfs: missing 'lowerdir' [ 123.857907][ T26] audit: type=1326 audit(1791511628.489:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 123.962190][ T26] audit: type=1326 audit(1791511628.489:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 124.097973][ T26] audit: type=1326 audit(1791511628.489:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19991941d9 code=0x7ffc0000 [ 124.751404][ T5310] loop0: detected capacity change from 0 to 8192 [ 125.467422][ T5318] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.278'. [ 125.690605][ T5323] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5324] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5323] [ 125.742721][ T5328] binder: 5322:5328 ioctl c0306201 200000000080 returned -14 [ 125.750792][ T5328] binder: 5322:5328 ioctl c0306201 2000000003c0 returned -14 [ 125.758774][ T5328] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5324] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5328] [ 126.029738][ T5335] loop4: detected capacity change from 0 to 256 [ 126.947512][ T5335] overlayfs: filesystem on './file2' not supported [ 126.980269][ T5350] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.289'. [ 127.008214][ T5352] PM: suspend entry (deep) [ 127.079182][ T5354] FAULT_INJECTION: forcing a failure. [ 127.079182][ T5354] name failslab, interval 1, probability 0, space 0, times 0 [ 127.107654][ T5354] CPU: 0 PID: 5354 Comm: syz.2.290 Not tainted syzkaller #0 [ 127.115014][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.125105][ T5354] Call Trace: [ 127.128416][ T5354] [ 127.131371][ T5354] dump_stack_lvl+0x188/0x250 [ 127.136125][ T5354] ? show_regs_print_info+0x20/0x20 [ 127.141383][ T5354] ? load_image+0x410/0x410 [ 127.145937][ T5354] ? __might_sleep+0xf0/0xf0 [ 127.150569][ T5354] ? __lock_acquire+0x7d40/0x7d40 [ 127.155643][ T5354] should_fail+0x383/0x4b0 [ 127.160164][ T5354] should_failslab+0x5/0x20 [ 127.164716][ T5354] slab_pre_alloc_hook+0x51/0xc0 [ 127.169709][ T5354] __kmalloc+0x6b/0x340 [ 127.173898][ T5354] ? ops_init+0x8a/0x5f0 [ 127.178187][ T5354] ops_init+0x8a/0x5f0 [ 127.182296][ T5354] setup_net+0x39e/0xa10 [ 127.186570][ T5354] ? copy_net_ns+0x5b0/0x5b0 [ 127.191208][ T5354] ? copy_net_ns+0x324/0x5b0 [ 127.195834][ T5354] ? down_read_killable+0x1ce/0x340 [ 127.201084][ T5354] copy_net_ns+0x33e/0x5b0 [ 127.205566][ T5354] create_new_namespaces+0x3ce/0x700 [ 127.210899][ T5354] unshare_nsproxy_namespaces+0x116/0x160 [ 127.216650][ T5354] ksys_unshare+0x4f6/0x8e0 [ 127.221203][ T5354] ? __lock_acquire+0x7d40/0x7d40 [ 127.226275][ T5354] ? sighand_ctor+0x40/0x40 [ 127.230832][ T5354] ? lock_chain_count+0x20/0x20 [ 127.235723][ T5354] ? syscall_enter_from_user_mode+0x21/0x70 [ 127.241668][ T5354] __x64_sys_unshare+0x34/0x40 [ 127.246473][ T5354] do_syscall_64+0x4c/0xa0 [ 127.250935][ T5354] ? clear_bhb_loop+0x30/0x80 [ 127.255659][ T5354] ? clear_bhb_loop+0x30/0x80 [ 127.260378][ T5354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.266307][ T5354] RIP: 0033:0x7f2cb387f1d9 [ 127.270787][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.290432][ T5354] RSP: 002b:00007f2cb1ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.298882][ T5354] RAX: ffffffffffffffda RBX: 00007f2cb3b06fa0 RCX: 00007f2cb387f1d9 [ 127.306904][ T5354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 127.314911][ T5354] RBP: 00007f2cb3916888 R08: 0000000000000000 R09: 0000000000000000 [ 127.322940][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.330949][ T5354] R13: 00007f2cb3b07038 R14: 00007f2cb3b06fa0 R15: 00007ffde8de32d8 [ 127.338983][ T5354] [ 127.359564][ T5352] Filesystems sync: 0.346 seconds [ 127.446472][ T5360] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 127.453762][ T5360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.473392][ T5360] vhci_hcd vhci_hcd.0: Device attached [ 127.490861][ T5361] vhci_hcd: connection closed [ 127.494367][ T4926] vhci_hcd: stop threads [ 127.509618][ T4926] vhci_hcd: release socket [ 127.514135][ T4926] vhci_hcd: disconnect device [ 127.599226][ T5364] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5365] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5364] [ 127.630379][ T5364] binder: 5363:5364 ioctl c0306201 200000000080 returned -14 [ 127.653939][ T5364] binder: 5363:5364 ioctl c0306201 2000000003c0 returned -14 [ 127.681193][ T5364] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5365] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5364] [ 128.037911][ T5382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.302'. [ 128.245016][ T5392] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5393] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5392] [ 128.317462][ T5394] binder: 5387:5394 ioctl c0306201 0 returned -14 [ 128.609120][ T5392] loop0: detected capacity change from 0 to 512 [ 128.737046][ T5392] EXT4-fs (loop0): Ignoring removed nobh option [ 128.758544][ T5392] EXT4-fs (loop0): orphan cleanup on readonly fs [ 128.857307][ T5392] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.303: corrupted inode contents [ 129.110428][ T5414] binder: 5406:5414 ioctl c0306201 200000000080 returned -14 [ 129.118371][ T5414] binder: 5406:5414 ioctl c0306201 2000000003c0 returned -14 [ 129.155744][ T5392] EXT4-fs (loop0): Remounting filesystem read-only [ 129.176667][ T5392] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 129.197268][ T5392] EXT4-fs (loop0): Remounting filesystem read-only [ 129.204074][ T5392] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.303: corrupted inode contents [ 129.315531][ T5392] EXT4-fs (loop0): Remounting filesystem read-only [ 129.380998][ T5392] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.303: mark_inode_dirty error [ 129.437197][ T5352] Bluetooth: hci1: Timed out waiting for suspend events [ 129.472709][ T5352] Bluetooth: hci1: Suspend timeout bit: 4 [ 129.573666][ T5352] Bluetooth: hci1: Suspend timeout bit: 6 [ 129.593748][ T5392] EXT4-fs (loop0): Remounting filesystem read-only [ 129.691408][ T5352] Bluetooth: hci1: Suspend notifier action (3) failed: -110 [ 129.712454][ T5392] EXT4-fs (loop0): 1 orphan inode deleted [ 129.977521][ T4454] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.128409][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 130.362654][ T5422] FAULT_INJECTION: forcing a failure. [ 130.362654][ T5422] name failslab, interval 1, probability 0, space 0, times 0 [ 130.385012][ T5426] loop1: detected capacity change from 0 to 512 [ 130.460242][ T5422] CPU: 0 PID: 5422 Comm: syz.4.309 Not tainted syzkaller #0 [ 130.467629][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.477732][ T5422] Call Trace: [ 130.481051][ T5422] [ 130.484038][ T5422] dump_stack_lvl+0x188/0x250 [ 130.488779][ T5422] ? show_regs_print_info+0x20/0x20 [ 130.494022][ T5422] ? load_image+0x410/0x410 [ 130.498574][ T5422] ? __might_sleep+0xf0/0xf0 [ 130.503220][ T5422] ? __lock_acquire+0x7d40/0x7d40 [ 130.508289][ T5422] should_fail+0x383/0x4b0 [ 130.512761][ T5422] should_failslab+0x5/0x20 [ 130.517340][ T5422] slab_pre_alloc_hook+0x51/0xc0 [ 130.522328][ T5422] ? __proc_create+0x36f/0x8b0 [ 130.527149][ T5422] kmem_cache_alloc+0x3d/0x280 [ 130.532100][ T5422] __proc_create+0x36f/0x8b0 [ 130.536833][ T5422] ? proc_symlink+0x210/0x210 [ 130.541589][ T5422] ? __lock_acquire+0x7d40/0x7d40 [ 130.546717][ T5422] proc_mkdir+0x3b/0x110 [ 130.551025][ T5422] bond_create_proc_dir+0x87/0xe0 [ 130.556099][ T5422] bond_net_init+0x87/0xa0 [ 130.560574][ T5422] ops_init+0x360/0x5f0 [ 130.564781][ T5422] setup_net+0x39e/0xa10 [ 130.569075][ T5422] ? copy_net_ns+0x5b0/0x5b0 [ 130.573710][ T5422] ? copy_net_ns+0x324/0x5b0 [ 130.578339][ T5422] ? down_read_killable+0x1ce/0x340 [ 130.583589][ T5422] copy_net_ns+0x33e/0x5b0 [ 130.588055][ T5422] create_new_namespaces+0x3ce/0x700 [ 130.593401][ T5422] unshare_nsproxy_namespaces+0x116/0x160 [ 130.599166][ T5422] ksys_unshare+0x4f6/0x8e0 [ 130.603708][ T5422] ? __lock_acquire+0x7d40/0x7d40 [ 130.608792][ T5422] ? sighand_ctor+0x40/0x40 [ 130.613339][ T5422] ? lock_chain_count+0x20/0x20 [ 130.618239][ T5422] ? syscall_enter_from_user_mode+0x21/0x70 [ 130.624185][ T5422] __x64_sys_unshare+0x34/0x40 [ 130.628994][ T5422] do_syscall_64+0x4c/0xa0 [ 130.633457][ T5422] ? clear_bhb_loop+0x30/0x80 [ 130.638173][ T5422] ? clear_bhb_loop+0x30/0x80 [ 130.642892][ T5422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.648835][ T5422] RIP: 0033:0x7f7a283281d9 [ 130.653280][ T5422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.672923][ T5422] RSP: 002b:00007f7a26580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 130.681396][ T5422] RAX: ffffffffffffffda RBX: 00007f7a285affa0 RCX: 00007f7a283281d9 [ 130.689412][ T5422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 130.697412][ T5422] RBP: 00007f7a283bf888 R08: 0000000000000000 R09: 0000000000000000 [ 130.705433][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.713463][ T5422] R13: 00007f7a285b0038 R14: 00007f7a285affa0 R15: 00007ffc65c4d838 [ 130.721644][ T5422] [ 130.737233][ T5422] Warning: Cannot create /proc/net/bonding [ 130.745543][ T5426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.774048][ T5426] EXT4-fs (loop1): 1 truncate cleaned up [ 130.785477][ T5434] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.313'. [ 130.791739][ T5426] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 130.821419][ T5426] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.312: Logical block already allocated [ 130.909205][ T5426] EXT4-fs (loop1): Remounting filesystem read-only [ 131.830141][ T5442] loop2: detected capacity change from 0 to 16 [ 132.525205][ T5352] Bluetooth: hci2: Timed out waiting for suspend events [ 132.534457][ T4454] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.546651][ T5352] Bluetooth: hci2: Suspend timeout bit: 4 [ 132.547191][ T5442] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.552486][ T5352] Bluetooth: hci2: Suspend timeout bit: 6 [ 132.565816][ T4454] Bluetooth: hci1: command 0x0406 tx timeout [ 132.572037][ T5352] Bluetooth: hci2: Suspend notifier action (3) failed: -110 [ 132.590667][ T5441] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 132.599783][ T5441] overlayfs: missing 'lowerdir' [ 132.869905][ T5448] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5450] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5448] [ 132.896174][ T5448] binder: 5447:5448 ioctl c0306201 200000000080 returned -14 [ 132.905275][ T5448] binder: 5447:5448 ioctl c0306201 2000000003c0 returned -14 [ 132.914190][ T5448] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5450] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5448] [ 133.023450][ T5454] loop0: detected capacity change from 0 to 256 [ 133.089116][ T5454] overlayfs: filesystem on './file2' not supported [ 133.238097][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 133.252641][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.259149][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.606973][ T5352] Bluetooth: hci0: Timed out waiting for suspend events [ 134.639090][ T5352] Bluetooth: hci0: Suspend timeout bit: 4 [ 134.782051][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 134.788264][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.794424][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 134.821804][ T5352] Bluetooth: hci0: Suspend timeout bit: 6 [ 134.844302][ T5480] loop1: detected capacity change from 0 to 128 [ 134.856802][ T5352] Bluetooth: hci0: Suspend notifier action (3) failed: -110 [ 134.995757][ T5484] loop2: detected capacity change from 0 to 16 [ 135.788099][ T5484] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.805292][ T5483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.817343][ T5483] overlayfs: missing 'lowerdir' [ 136.191174][ T5486] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5487] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5486] [ 136.208734][ T5486] binder: 5485:5486 ioctl c0306201 200000000080 returned -14 [ 136.217111][ T5486] binder: 5485:5486 ioctl c0306201 2000000003c0 returned -14 [ 136.225868][ T5486] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5487] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5486] [ 136.706253][ T5499] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5500] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5499] [ 136.798961][ T5501] binder: 5496:5501 ioctl c0306201 0 returned -14 [ 136.846719][ T4456] Bluetooth: hci2: command 0x0406 tx timeout [ 136.876681][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 136.926695][ T5352] Bluetooth: hci3: Timed out waiting for suspend events [ 136.933871][ T4231] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.944828][ T5352] Bluetooth: hci3: Suspend timeout bit: 4 [ 136.966831][ T5352] Bluetooth: hci3: Suspend timeout bit: 6 [ 136.982902][ T5352] Bluetooth: hci3: Suspend notifier action (3) failed: -110 [ 137.838005][ T5518] loop4: detected capacity change from 0 to 16 [ 137.985610][ T5511] mount: server 127. not responding, timed out [ 138.037803][ T5518] erofs: (device loop4): mounted with root inode @ nid 36. [ 138.064936][ T5518] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.073951][ T5518] overlayfs: missing 'lowerdir' [ 138.878016][ T5522] loop4: detected capacity change from 0 to 512 [ 138.936852][ T4445] Bluetooth: hci0: command 0x0406 tx timeout [ 138.943258][ T5522] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 139.007818][ T4375] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.013967][ T5352] Bluetooth: hci4: Timed out waiting for suspend events [ 139.022099][ T4375] Bluetooth: hci3: command 0x0406 tx timeout [ 139.028343][ T5352] Bluetooth: hci4: Suspend timeout bit: 4 [ 139.046712][ T5352] Bluetooth: hci4: Suspend timeout bit: 6 [ 139.053634][ T5352] Bluetooth: hci4: Suspend notifier action (3) failed: -110 [ 139.062471][ T5522] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.094458][ T5526] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5527] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5526] [ 139.103532][ T5352] Freezing user space processes ... [ 139.192008][ T5522] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 139.367925][ T5522] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.396427][ T5352] (elapsed 0.269 seconds) done. [ 139.408426][ T5352] OOM killer disabled. [ 139.412574][ T5352] Freezing remaining freezable tasks ... (elapsed 0.008 seconds) done. [ 139.433078][ T5352] printk: Suspending console(s) (use no_console_suspend to debug) [ 139.579766][ T5352] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 139.619509][ T5352] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 139.668951][ T5352] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 139.717521][ T5352] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 139.768134][ T5352] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 139.817993][ T5352] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 139.859731][ T5352] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 139.898759][ T5352] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 139.947958][ T5352] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 139.988120][ T5352] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 140.027864][ T5352] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 140.068084][ T5352] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 140.108981][ T5352] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 140.157547][ T5352] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 140.197958][ T5352] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 140.269979][ T5054] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 140.581636][ T5352] ACPI: PM: Preparing to enter system sleep state S3 [ 140.582619][ T5352] ACPI: PM: Saving platform NVS memory [ 140.582856][ T5352] Disabling non-boot CPUs ... [ 140.626833][ T5352] smpboot: CPU 1 is now offline [ 140.654640][ T5352] kvm-clock: cpu 0, msr ff0a001, primary cpu clock, resume [ 140.654808][ T5352] ACPI: PM: Low-level resume complete [ 140.654876][ T5352] ACPI: PM: Restoring platform NVS memory [ 140.654889][ T5352] kvm-guest: stealtime: cpu 0, msr b8e27440 [ 140.673283][ T5352] Enabling non-boot CPUs ... [ 140.674071][ T5352] x86: Booting SMP configuration: [ 140.674113][ T5352] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 140.674618][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 140.679778][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 140.691021][ T5352] CPU1 is up [ 140.692885][ T5352] ACPI: PM: Waking up from system sleep state S3 [ 140.780302][ T5016] pci 0000:00:00.0: quirk_passive_release+0x0/0x160 took 31181 usecs [ 140.862055][ T5532] hwrng: no data available [ 141.046662][ T4456] Bluetooth: hci4: command 0x0406 tx timeout [ 141.050142][ T5352] OOM killer enabled. [ 141.086694][ T4456] Bluetooth: hci3: command 0x0406 tx timeout [ 141.108661][ T5352] Restarting tasks ... [ 141.122175][ T5634] binder: 5524:5634 ioctl c0306201 200000000080 returned -14 [ 141.128063][ T5634] binder: 5524:5634 ioctl c0306201 2000000003c0 returned -14 [ 141.142474][ T5352] done. [ 141.154477][ T5352] PM: suspend exit [ 141.248358][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 141.248375][ T26] audit: type=1800 audit(1791511646.634:116): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.343" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 141.493926][ T5649] FAULT_INJECTION: forcing a failure. [ 141.493926][ T5649] name failslab, interval 1, probability 0, space 0, times 0 [ 141.521598][ T5649] CPU: 0 PID: 5649 Comm: syz.0.353 Not tainted syzkaller #0 [ 141.524860][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.529251][ T5649] Call Trace: [ 141.530739][ T5649] [ 141.532063][ T5649] dump_stack_lvl+0x188/0x250 [ 141.534113][ T5649] ? show_regs_print_info+0x20/0x20 [ 141.536336][ T5649] ? load_image+0x410/0x410 [ 141.538287][ T5649] ? __might_sleep+0xf0/0xf0 [ 141.540173][ T5649] ? __lock_acquire+0x7d40/0x7d40 [ 141.542205][ T5649] should_fail+0x383/0x4b0 [ 141.544320][ T5649] should_failslab+0x5/0x20 [ 141.546366][ T5649] slab_pre_alloc_hook+0x51/0xc0 [ 141.548647][ T5649] ? create_filter_start+0xdf/0x2c0 [ 141.550875][ T5649] __kmalloc_track_caller+0x69/0x330 [ 141.553257][ T5649] ? create_filter_start+0xdf/0x2c0 [ 141.555616][ T5649] kstrdup+0x32/0x70 [ 141.557168][ T5649] create_filter_start+0xdf/0x2c0 [ 141.559154][ T5649] apply_event_filter+0x16c/0x590 [ 141.561179][ T5649] event_filter_write+0xce/0x140 [ 141.563302][ T5649] ? event_filter_read+0x270/0x270 [ 141.565404][ T5649] vfs_write+0x304/0xd70 [ 141.567176][ T5649] ? file_end_write+0x250/0x250 [ 141.569248][ T5649] ? mutex_lock_nested+0x17/0x20 [ 141.571326][ T5649] ? __fdget_pos+0x2bf/0x370 [ 141.573186][ T5649] ? ksys_write+0x70/0x260 [ 141.575147][ T5649] ksys_write+0x153/0x260 [ 141.577056][ T5649] ? __ia32_sys_read+0x80/0x80 [ 141.578931][ T5649] ? lockdep_hardirqs_on+0x94/0x140 [ 141.581187][ T5649] do_syscall_64+0x4c/0xa0 [ 141.582967][ T5649] ? clear_bhb_loop+0x30/0x80 [ 141.584873][ T5649] ? clear_bhb_loop+0x30/0x80 [ 141.586943][ T5649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.589609][ T5649] RIP: 0033:0x7f31c6c4d1d9 [ 141.591554][ T5649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.600238][ T5649] RSP: 002b:00007f31c4ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.604408][ T5649] RAX: ffffffffffffffda RBX: 00007f31c6ed4fa0 RCX: 00007f31c6c4d1d9 [ 141.608114][ T5649] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 141.611723][ T5649] RBP: 00007f31c6ce4888 R08: 0000000000000000 R09: 0000000000000000 [ 141.615193][ T5649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.618637][ T5649] R13: 00007f31c6ed5038 R14: 00007f31c6ed4fa0 R15: 00007ffda1384408 [ 141.622137][ T5649] [ 141.715781][ T5652] loop2: detected capacity change from 0 to 4096 [ 141.764523][ T5652] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 142.158419][ T5656] loop4: detected capacity change from 0 to 16 [ 142.673145][ T5656] erofs: (device loop4): mounted with root inode @ nid 36. [ 142.685596][ T5655] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.689403][ T5655] overlayfs: missing 'lowerdir' [ 143.108447][ T5660] loop0: detected capacity change from 0 to 256 [ 143.126762][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 143.314718][ T5660] overlayfs: filesystem on './file2' not supported [ 144.044011][ T5667] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5668] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5667] [ 144.146323][ T5667] binder: 5665:5667 ioctl c0306201 0 returned -14 [ 144.149720][ T5646] loop3: detected capacity change from 0 to 32768 [ 144.185328][ T5667] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5668] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5667] [ 144.240512][ T5672] loop2: detected capacity change from 0 to 512 [ 144.331150][ T5646] XFS (loop3): Mounting V5 Filesystem [ 144.398747][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.418463][ T5672] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.470738][ T5666] loop0: detected capacity change from 0 to 512 [ 144.487103][ T5646] XFS (loop3): Ending clean mount [ 144.507916][ T4189] XFS (loop3): Unmounting Filesystem [ 144.586098][ T5666] EXT4-fs (loop0): Ignoring removed nobh option [ 144.593430][ T5672] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.361: corrupted inode contents [ 144.600913][ T5666] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.605302][ T5666] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.359: corrupted inode contents [ 144.611527][ T5666] EXT4-fs (loop0): Remounting filesystem read-only [ 144.614529][ T5666] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 144.619476][ T5666] EXT4-fs (loop0): Remounting filesystem read-only [ 144.622588][ T5666] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.359: corrupted inode contents [ 144.628615][ T5666] EXT4-fs (loop0): Remounting filesystem read-only [ 144.631363][ T5666] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.359: mark_inode_dirty error [ 144.640719][ T5666] EXT4-fs (loop0): Remounting filesystem read-only [ 144.643699][ T5666] EXT4-fs (loop0): 1 orphan inode deleted [ 144.646256][ T5666] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 144.672487][ T5672] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.361: mark_inode_dirty error [ 144.744978][ T5672] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.361: corrupted inode contents [ 144.771388][ T5672] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.361: mark_inode_dirty error [ 144.816201][ T5691] loop1: detected capacity change from 0 to 64 [ 144.841272][ T5691] hfs: unable to parse mount options [ 144.945694][ T5691] loop1: detected capacity change from 0 to 512 [ 145.016801][ T5691] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 145.054913][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.364: corrupted inode contents [ 145.080012][ T5691] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #11: comm syz.1.364: mark_inode_dirty error [ 145.199650][ T5691] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.364: invalid indirect mapped block 1 (level 1) [ 145.213631][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.364: corrupted inode contents [ 145.220791][ T5684] loop4: detected capacity change from 0 to 32768 [ 145.232277][ T5691] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 145.246597][ T5696] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5698] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5696] [ 145.253173][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.364: corrupted inode contents [ 145.266593][ T5691] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.364: mark_inode_dirty error [ 145.277710][ T5696] binder: 5695:5696 ioctl c0306201 200000000080 returned -14 [ 145.284276][ T5691] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 145.294828][ T5696] binder: 5695:5696 ioctl c0306201 2000000003c0 returned -14 [ 145.301517][ T5691] EXT4-fs (loop1): 1 truncate cleaned up [ 145.304002][ T5691] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.315494][ T5696] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5698] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5696] [ 145.319909][ T5684] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 145.325627][ T5684] BTRFS info (device loop4): setting nodatasum [ 145.336129][ T5684] BTRFS info (device loop4): force zlib compression, level 3 [ 145.339390][ T5684] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 145.343673][ T5684] BTRFS info (device loop4): use lzo compression, level 0 [ 145.392767][ T5684] BTRFS info (device loop4): turning on flush-on-commit [ 145.395768][ T5684] BTRFS info (device loop4): enabling auto defrag [ 145.436089][ T5684] BTRFS info (device loop4): max_inline at 4096 [ 145.438915][ T5684] BTRFS info (device loop4): using free space tree [ 145.442031][ T5684] BTRFS info (device loop4): has skinny extents [ 145.829267][ T5709] loop3: detected capacity change from 0 to 16 [ 145.969768][ T5709] erofs: (device loop3): mounted with root inode @ nid 36. [ 145.989522][ T5709] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.994106][ T5709] overlayfs: missing 'lowerdir' [ 148.772573][ T5721] overlayfs: filesystem on './file2' not supported [ 148.969885][ T5684] BTRFS error (device loop4): open_ctree failed: -12 [ 149.512141][ T5744] set_capacity_and_notify: 2 callbacks suppressed [ 149.512160][ T5744] loop1: detected capacity change from 0 to 32768 [ 149.648527][ T5744] XFS (loop1): Mounting V5 Filesystem [ 149.764326][ T5744] XFS (loop1): Ending clean mount [ 149.781072][ T26] audit: type=1800 audit(1791511655.164:117): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.373" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 149.808942][ T5758] loop3: detected capacity change from 0 to 64 [ 149.871301][ T5758] hfs: unable to parse mount options [ 149.955221][ T5758] loop3: detected capacity change from 0 to 512 [ 150.141226][ T5758] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 150.237430][ T5758] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.377: corrupted inode contents [ 150.252233][ T5758] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.377: mark_inode_dirty error [ 150.336634][ T4186] XFS (loop1): Unmounting Filesystem [ 150.386048][ T5758] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.377: invalid indirect mapped block 1 (level 1) [ 150.403719][ T5758] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.377: corrupted inode contents [ 150.409674][ T5765] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5765] [ 150.449909][ T5769] binder: 5762:5769 ioctl c0306201 0 returned -14 [ 150.485995][ T5758] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 150.526739][ T5758] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.377: corrupted inode contents [ 150.532487][ T5758] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.377: mark_inode_dirty error [ 150.565930][ T5758] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 150.570909][ T5776] loop2: detected capacity change from 0 to 1024 [ 150.576165][ T5758] EXT4-fs (loop3): 1 truncate cleaned up [ 150.578649][ T5758] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.590684][ T5763] loop4: detected capacity change from 0 to 512 [ 150.626515][ T5777] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5777] [ 150.634715][ T5777] binder: 5775:5777 ioctl c0306201 200000000080 returned -14 [ 150.640160][ T5777] binder: 5775:5777 ioctl c0306201 2000000003c0 returned -14 [ 150.643702][ T5777] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5777] [ 150.654903][ T5763] EXT4-fs (loop4): Ignoring removed nobh option [ 150.686113][ T5776] EXT4-fs (loop2): inline encryption not supported [ 150.689253][ T5776] EXT4-fs (loop2): Ignoring removed bh option [ 150.728598][ T5763] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.732414][ T5763] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.376: corrupted inode contents [ 150.745455][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 150.748352][ T5763] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 150.752531][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 150.755567][ T5763] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.376: corrupted inode contents [ 150.761365][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 150.764278][ T5763] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.376: mark_inode_dirty error [ 150.771304][ T5776] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 150.783497][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 150.786537][ T5763] EXT4-fs (loop4): 1 orphan inode deleted [ 150.789244][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 150.965872][ T5786] loop0: detected capacity change from 0 to 512 [ 151.957730][ T5800] capability: warning: `syz.4.387' uses 32-bit capabilities (legacy support in use) [ 152.261586][ T5803] loop1: detected capacity change from 0 to 16 [ 152.518104][ T5804] loop0: detected capacity change from 0 to 1024 [ 152.851375][ T5803] erofs: (device loop1): mounted with root inode @ nid 36. [ 152.867992][ T5801] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 152.871430][ T5801] overlayfs: missing 'lowerdir' [ 152.966026][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.972819][ T5804] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.307084][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 153.449275][ T5810] loop2: detected capacity change from 0 to 32768 [ 153.660839][ T5829] loop0: detected capacity change from 0 to 512 [ 154.110173][ T5810] XFS (loop2): Mounting V5 Filesystem [ 154.405304][ T5810] XFS (loop2): Ending clean mount [ 154.458802][ T26] audit: type=1800 audit(1791511659.844:118): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.388" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 154.582334][ T5837] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 154.616205][ T5816] set_capacity_and_notify: 1 callbacks suppressed [ 154.616223][ T5816] loop1: detected capacity change from 0 to 32768 [ 154.689883][ T5844] loop0: detected capacity change from 0 to 512 [ 154.745681][ T5844] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.774982][ T5816] XFS (loop1): Mounting V5 Filesystem [ 154.972190][ T5816] XFS (loop1): Ending clean mount [ 155.033835][ T26] audit: type=1800 audit(1791511660.414:119): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.391" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 155.107015][ T4199] XFS (loop2): Unmounting Filesystem [ 155.335836][ T4186] XFS (loop1): Unmounting Filesystem [ 155.430265][ T5858] loop0: detected capacity change from 0 to 32768 [ 155.514424][ T5858] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.400 (5858) [ 155.573808][ T5858] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.630864][ T5858] BTRFS info (device loop0): enabling ssd optimizations [ 155.665988][ T5858] BTRFS info (device loop0): not using ssd optimizations [ 155.673101][ T5858] BTRFS info (device loop0): turning off barriers [ 155.732209][ T5858] BTRFS info (device loop0): use no compression [ 155.749360][ T5858] BTRFS info (device loop0): using free space tree [ 155.776224][ T5858] BTRFS info (device loop0): has skinny extents [ 156.502338][ T5877] loop2: detected capacity change from 0 to 16 [ 156.633269][ T5875] loop4: detected capacity change from 0 to 512 [ 156.799587][ T5877] erofs: (device loop2): mounted with root inode @ nid 36. [ 156.823623][ T5877] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.832535][ T5877] overlayfs: missing 'lowerdir' [ 157.198478][ T5853] loop3: detected capacity change from 0 to 40427 [ 157.254300][ T5853] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 157.286068][ T5853] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 157.398706][ T5853] F2FS-fs (loop3): invalid crc value [ 157.516086][ T5853] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.750545][ T5922] loop2: detected capacity change from 0 to 256 [ 157.899966][ T5922] FAT-fs (loop2): Directory bread(block 64) failed [ 157.915612][ T5924] loop4: detected capacity change from 0 to 64 [ 157.950775][ T5922] FAT-fs (loop2): Directory bread(block 65) failed [ 157.971615][ T5924] hfs: unable to parse mount options [ 157.998587][ T5922] FAT-fs (loop2): Directory bread(block 66) failed [ 158.055142][ T5922] FAT-fs (loop2): Directory bread(block 67) failed [ 158.077350][ T5924] loop4: detected capacity change from 0 to 512 [ 158.100086][ T5922] FAT-fs (loop2): Directory bread(block 68) failed [ 158.139967][ T5922] FAT-fs (loop2): Directory bread(block 69) failed [ 158.215600][ T5922] FAT-fs (loop2): Directory bread(block 70) failed [ 158.225214][ T5924] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 158.309648][ T5922] FAT-fs (loop2): Directory bread(block 71) failed [ 158.321326][ T5924] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.415: corrupted inode contents [ 158.347787][ T5924] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #11: comm syz.4.415: mark_inode_dirty error [ 158.360173][ T5924] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.415: invalid indirect mapped block 1 (level 1) [ 158.374931][ T5924] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.415: corrupted inode contents [ 158.376420][ T5922] FAT-fs (loop2): Directory bread(block 72) failed [ 158.392971][ T5924] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 158.411080][ T5924] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.415: corrupted inode contents [ 158.440614][ T5922] FAT-fs (loop2): Directory bread(block 73) failed [ 158.448381][ T5924] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.415: mark_inode_dirty error [ 158.471342][ T5924] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 158.496419][ T5924] EXT4-fs (loop4): 1 truncate cleaned up [ 158.510428][ T5924] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.266035][ T4384] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.631554][ T5951] loop1: detected capacity change from 0 to 1024 [ 159.686909][ T5951] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.753852][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 159.774564][ T4384] usb 3-1: Using ep0 maxpacket: 32 [ 159.785441][ T5951] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.887743][ T5951] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.419: bg 0: block 112: padding at end of block bitmap is not set [ 159.906090][ T4384] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 159.918369][ T4384] usb 3-1: config 0 has no interface number 0 [ 159.927521][ T4384] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 160.046440][ T5964] loop3: detected capacity change from 0 to 512 [ 160.382395][ T5951] EXT4-fs (loop1): Remounting filesystem read-only [ 160.416652][ T4384] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 160.521453][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.546930][ T5962] loop4: detected capacity change from 0 to 256 [ 160.807291][ T4384] usb 3-1: Product: syz [ 160.818616][ T4384] usb 3-1: Manufacturer: syz [ 160.839920][ T4384] usb 3-1: SerialNumber: syz [ 160.886977][ T5962] overlayfs: filesystem on './file2' not supported [ 160.900336][ T4384] usb 3-1: config 0 descriptor?? [ 160.930624][ T4384] usb 3-1: can't set config #0, error -71 [ 160.960151][ T5937] loop0: detected capacity change from 0 to 32768 [ 160.970960][ T4384] usb 3-1: USB disconnect, device number 2 [ 161.205721][ T5974] device syzkaller0 entered promiscuous mode [ 161.277306][ T5937] XFS (loop0): Mounting V5 Filesystem [ 161.291821][ T5979] loop3: detected capacity change from 0 to 512 [ 161.357579][ T5980] loop2: detected capacity change from 0 to 512 [ 161.376726][ T5937] XFS (loop0): Ending clean mount [ 161.399560][ T4187] XFS (loop0): Unmounting Filesystem [ 161.428402][ T5980] FAULT_INJECTION: forcing a failure. [ 161.428402][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 161.456021][ T5980] CPU: 1 PID: 5980 Comm: syz.2.422 Not tainted syzkaller #0 [ 161.463394][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.473494][ T5980] Call Trace: [ 161.476803][ T5980] [ 161.479755][ T5980] dump_stack_lvl+0x188/0x250 [ 161.484468][ T5980] ? show_regs_print_info+0x20/0x20 [ 161.489693][ T5980] ? load_image+0x410/0x410 [ 161.494401][ T5980] ? __might_sleep+0xf0/0xf0 [ 161.499029][ T5980] ? __lock_acquire+0x7d40/0x7d40 [ 161.504090][ T5980] ? reacquire_held_locks+0x31b/0x5c0 [ 161.509489][ T5980] should_fail+0x383/0x4b0 [ 161.513941][ T5980] should_failslab+0x5/0x20 [ 161.518473][ T5980] slab_pre_alloc_hook+0x51/0xc0 [ 161.523453][ T5980] ? ext4_fill_super+0xd5/0x93f0 [ 161.528429][ T5980] __kmalloc_track_caller+0x69/0x330 [ 161.533772][ T5980] ? ext4_fill_super+0xd5/0x93f0 [ 161.538761][ T5980] kstrdup+0x32/0x70 [ 161.542701][ T5980] ext4_fill_super+0xd5/0x93f0 [ 161.547510][ T5980] ? format_decode+0x8b1/0x1330 [ 161.552429][ T5980] ? vsnprintf+0x1b22/0x1c20 [ 161.557076][ T5980] ? snprintf+0xe5/0x140 [ 161.561373][ T5980] ? vscnprintf+0x80/0x80 [ 161.565738][ T5980] ? up_write+0x1b6/0x410 [ 161.570106][ T5980] ? ext4_mount+0x40/0x40 [ 161.574503][ T5980] ? set_blocksize+0x1f1/0x360 [ 161.579314][ T5980] ? sb_set_blocksize+0xa5/0xe0 [ 161.584215][ T5980] mount_bdev+0x28a/0x3c0 [ 161.588583][ T5980] ? ext4_mount+0x40/0x40 [ 161.592953][ T5980] legacy_get_tree+0xe6/0x180 [ 161.597662][ T5980] ? ext4_errno_to_code+0x160/0x160 [ 161.602901][ T5980] vfs_get_tree+0x88/0x270 [ 161.607366][ T5980] do_new_mount+0x247/0xa40 [ 161.611915][ T5980] __se_sys_mount+0x2e3/0x3d0 [ 161.616640][ T5980] ? __x64_sys_mount+0xc0/0xc0 [ 161.621463][ T5980] ? lockdep_hardirqs_on+0x94/0x140 [ 161.626803][ T5980] ? __x64_sys_mount+0x1c/0xc0 [ 161.631617][ T5980] do_syscall_64+0x4c/0xa0 [ 161.636074][ T5980] ? clear_bhb_loop+0x30/0x80 [ 161.640791][ T5980] ? clear_bhb_loop+0x30/0x80 [ 161.645506][ T5980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.651486][ T5980] RIP: 0033:0x7f2cb388044a [ 161.655954][ T5980] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.675599][ T5980] RSP: 002b:00007f2cb1ad6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.684061][ T5980] RAX: ffffffffffffffda RBX: 00007f2cb1ad6ee0 RCX: 00007f2cb388044a [ 161.692092][ T5980] RDX: 0000200000000440 RSI: 0000200000000480 RDI: 00007f2cb1ad6ea0 [ 161.700098][ T5980] RBP: 0000200000000440 R08: 00007f2cb1ad6ee0 R09: 0000000000000000 [ 161.708187][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000480 [ 161.716195][ T5980] R13: 00007f2cb1ad6ea0 R14: 000000000000044b R15: 00002000000004c0 [ 161.724219][ T5980] [ 161.728100][ T5979] EXT4-fs (loop3): Ignoring removed nobh option [ 161.734815][ T26] audit: type=1326 audit(1791511667.114:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77af945a0e code=0x7ffc0000 [ 161.845948][ T26] audit: type=1326 audit(1791511667.114:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77af9851d9 code=0x7ffc0000 [ 161.916149][ T26] audit: type=1326 audit(1791511667.114:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77af9851d9 code=0x7ffc0000 [ 161.960703][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue. Quota mode: writeback. [ 161.976154][ T5979] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.998159][ T26] audit: type=1326 audit(1791511667.144:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77af945a0e code=0x7ffc0000 [ 162.025104][ T26] audit: type=1326 audit(1791511667.174:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f77af94162c code=0x7ffc0000 [ 162.053216][ T26] audit: type=1326 audit(1791511667.184:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f77af94168e code=0x7ffc0000 [ 162.089761][ T5979] EXT4-fs (loop3): shut down requested (2) [ 162.236641][ T26] audit: type=1326 audit(1791511667.184:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77af984e6b code=0x7ffc0000 [ 162.294388][ T5999] loop2: detected capacity change from 0 to 512 [ 162.303542][ T26] audit: type=1326 audit(1791511667.184:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f77af9851d9 code=0x7ffc0000 [ 162.347413][ T26] audit: type=1326 audit(1791511667.184:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77af9851d9 code=0x7ffc0000 [ 162.377193][ T5999] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 162.423082][ T26] audit: type=1326 audit(1791511667.184:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77af9851d9 code=0x7ffc0000 [ 162.997004][ T6025] loop4: detected capacity change from 0 to 512 [ 163.896067][ T6035] loop3: detected capacity change from 0 to 512 [ 163.981639][ T6037] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6039] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6037] [ 164.009240][ T6035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.024320][ T6037] binder: 6036:6037 ioctl c0306201 200000000080 returned -14 [ 164.032616][ T6037] binder: 6036:6037 ioctl c0306201 2000000003c0 returned -14 [ 164.191066][ T6035] EXT4-fs (loop3): 1 truncate cleaned up [ 164.208474][ T6035] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 164.324122][ T6019] loop2: detected capacity change from 0 to 32768 [ 164.362627][ T6052] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 164.556806][ T6019] XFS (loop2): Mounting V5 Filesystem [ 164.561876][ T6054] overlayfs: filesystem on './file2' not supported [ 164.635630][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.448'. [ 164.748820][ T6019] XFS (loop2): Ending clean mount [ 164.987186][ T6069] device veth0_to_bond entered promiscuous mode [ 165.643851][ T6069] syz.1.448 (6069) used greatest stack depth: 20016 bytes left [ 166.054463][ T6084] set_capacity_and_notify: 2 callbacks suppressed [ 166.054482][ T6084] loop0: detected capacity change from 0 to 2048 [ 166.449596][ T4199] XFS (loop2): Unmounting Filesystem [ 166.459142][ T6085] ptrace attach of ""[6089] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6085] [ 166.501951][ T6085] binder: 6082:6085 ioctl c0306201 0 returned -14 [ 166.516067][ T6085] loop1: detected capacity change from 0 to 512 [ 166.671629][ T6085] EXT4-fs (loop1): Ignoring removed nobh option [ 166.692902][ T6084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.727297][ T6085] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.734961][ T6085] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.453: corrupted inode contents [ 166.748649][ T6085] EXT4-fs (loop1): Remounting filesystem read-only [ 166.755225][ T6085] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 166.764724][ T6085] EXT4-fs (loop1): Remounting filesystem read-only [ 166.771351][ T6085] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.453: corrupted inode contents [ 166.784126][ T6085] EXT4-fs (loop1): Remounting filesystem read-only [ 166.791010][ T6085] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.453: mark_inode_dirty error [ 166.803160][ T6085] EXT4-fs (loop1): Remounting filesystem read-only [ 166.809862][ T6085] EXT4-fs (loop1): 1 orphan inode deleted [ 166.815689][ T6085] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 166.881559][ T6084] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.017696][ T6100] type: 808465973 invalid [ 167.353257][ T6112] loop3: detected capacity change from 0 to 64 [ 167.446439][ T6112] hfs: unable to parse mount options [ 167.537045][ T6112] loop3: detected capacity change from 0 to 512 [ 167.630456][ T6112] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 167.699604][ T6112] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.460: corrupted inode contents [ 167.792037][ T6112] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.460: mark_inode_dirty error [ 167.830966][ T6112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.460: invalid indirect mapped block 1 (level 1) [ 167.865684][ T6112] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.460: corrupted inode contents [ 167.881166][ T6137] loop0: detected capacity change from 0 to 164 [ 167.978508][ T6112] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 168.058189][ T6112] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.460: corrupted inode contents [ 168.394352][ T6112] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.460: mark_inode_dirty error [ 168.683823][ T6112] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 168.746859][ T6112] EXT4-fs (loop3): 1 truncate cleaned up [ 168.752572][ T6112] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.968607][ T6154] FAULT_INJECTION: forcing a failure. [ 168.968607][ T6154] name fail_futex, interval 1, probability 0, space 0, times 0 [ 169.031085][ T6154] CPU: 0 PID: 6154 Comm: syz.2.471 Not tainted syzkaller #0 [ 169.038457][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.048561][ T6154] Call Trace: [ 169.051984][ T6154] [ 169.054942][ T6154] dump_stack_lvl+0x188/0x250 [ 169.059662][ T6154] ? show_regs_print_info+0x20/0x20 [ 169.064906][ T6154] ? load_image+0x410/0x410 [ 169.069451][ T6154] ? cgroup_rstat_updated+0xce/0x350 [ 169.074793][ T6154] ? place_entity+0x4f0/0x4f0 [ 169.079524][ T6154] should_fail+0x383/0x4b0 [ 169.084028][ T6154] get_futex_key+0x1a1/0x12d0 [ 169.088751][ T6154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.094781][ T6154] ? futex_wait_restart+0x250/0x250 [ 169.100030][ T6154] ? lock_chain_count+0x20/0x20 [ 169.104920][ T6154] futex_wait_setup+0x4b/0x520 [ 169.109727][ T6154] ? lockdep_hardirqs_on+0x94/0x140 [ 169.114982][ T6154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 169.120926][ T6154] futex_wait+0x22f/0x680 [ 169.125309][ T6154] ? __lock_acquire+0x13b3/0x7d40 [ 169.130381][ T6154] ? do_futex+0x12b0/0x12b0 [ 169.134965][ T6154] ? verify_lock_unused+0x140/0x140 [ 169.140208][ T6154] ? verify_lock_unused+0x140/0x140 [ 169.145449][ T6154] do_futex+0xdc2/0x12b0 [ 169.149766][ T6154] ? futex_exit_release+0x1c0/0x1c0 [ 169.155045][ T6154] ? __context_tracking_exit+0x4c/0x80 [ 169.160556][ T6154] __se_sys_futex+0x389/0x420 [ 169.165286][ T6154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.171332][ T6154] ? __x64_sys_futex+0xf0/0xf0 [ 169.176152][ T6154] ? __x64_sys_futex+0x1d/0xf0 [ 169.180966][ T6154] do_syscall_64+0x4c/0xa0 [ 169.185425][ T6154] ? clear_bhb_loop+0x30/0x80 [ 169.190166][ T6154] ? clear_bhb_loop+0x30/0x80 [ 169.194893][ T6154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.200831][ T6154] RIP: 0033:0x7f2cb387f1d9 [ 169.205300][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.224941][ T6154] RSP: 002b:00007f2cb1ad70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.233396][ T6154] RAX: ffffffffffffffda RBX: 00007f2cb3b06fa8 RCX: 00007f2cb387f1d9 [ 169.241399][ T6154] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2cb3b06fa8 [ 169.249407][ T6154] RBP: 00007f2cb3b06fa0 R08: 0000000000000000 R09: 0000000000000000 [ 169.257421][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.265428][ T6154] R13: 00007f2cb3b07038 R14: 00007ffde8de31f0 R15: 00007ffde8de32d8 [ 169.273455][ T6154] [ 169.288409][ T6129] loop1: detected capacity change from 0 to 32768 [ 169.415758][ T6129] XFS (loop1): Mounting V5 Filesystem [ 169.527283][ T6129] XFS (loop1): Ending clean mount [ 169.583106][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 169.583122][ T26] audit: type=1800 audit(1791511674.964:143): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.464" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 170.029408][ T6192] loop2: detected capacity change from 0 to 16 [ 170.138165][ T6192] erofs: (device loop2): mounted with root inode @ nid 36. [ 170.859625][ T4186] XFS (loop1): Unmounting Filesystem [ 171.140539][ T6231] netlink: 128 bytes leftover after parsing attributes in process `syz.3.482'. [ 171.244155][ T6233] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6234] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6233] [ 171.297370][ T6236] binder: 6232:6236 ioctl c0306201 200000000080 returned -14 [ 171.305613][ T6233] binder: 6232:6233 ioctl c0306201 2000000003c0 returned -14 [ 171.341701][ T6233] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6234] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6233] [ 171.343987][ T6237] loop3: detected capacity change from 0 to 64 [ 171.378633][ T6237] hfs: unable to parse mount options [ 171.501302][ T6237] loop3: detected capacity change from 0 to 512 [ 171.588340][ T6237] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 171.628292][ T6242] loop0: detected capacity change from 0 to 512 [ 171.664380][ T6237] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.483: corrupted inode contents [ 171.754943][ T6237] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.483: mark_inode_dirty error [ 171.843818][ T6237] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.483: invalid indirect mapped block 1 (level 1) [ 171.871620][ T6242] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.485: bg 0: block 5: invalid block bitmap [ 171.928719][ T6237] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.483: corrupted inode contents [ 171.942124][ T6237] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 171.956335][ T6237] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.483: corrupted inode contents [ 172.130214][ T6237] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.483: mark_inode_dirty error [ 172.144620][ T6242] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 172.224343][ T6242] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.485: invalid indirect mapped block 3 (level 2) [ 172.280164][ T6237] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 172.414001][ T6237] EXT4-fs (loop3): 1 truncate cleaned up [ 172.454912][ T6242] EXT4-fs (loop0): 1 orphan inode deleted [ 172.507245][ T6237] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.559472][ T6242] EXT4-fs (loop0): 1 truncate cleaned up [ 172.583275][ T6242] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.739010][ T6255] netlink: 'syz.1.488': attribute type 5 has an invalid length. [ 172.918108][ T6268] FAULT_INJECTION: forcing a failure. [ 172.918108][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 172.931022][ T6268] CPU: 1 PID: 6268 Comm: syz.3.489 Not tainted syzkaller #0 [ 172.938346][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.948431][ T6268] Call Trace: [ 172.951738][ T6268] [ 172.954690][ T6268] dump_stack_lvl+0x188/0x250 [ 172.959402][ T6268] ? show_regs_print_info+0x20/0x20 [ 172.964632][ T6268] ? load_image+0x410/0x410 [ 172.969165][ T6268] ? __might_sleep+0xf0/0xf0 [ 172.973795][ T6268] ? __lock_acquire+0x7d40/0x7d40 [ 172.978867][ T6268] should_fail+0x383/0x4b0 [ 172.983335][ T6268] should_failslab+0x5/0x20 [ 172.987886][ T6268] slab_pre_alloc_hook+0x51/0xc0 [ 172.992868][ T6268] __kmalloc_node+0x6d/0x3a0 [ 172.997522][ T6268] ? blk_mq_alloc_rq_map+0xe4/0x1a0 [ 172.997560][ T6268] blk_mq_alloc_rq_map+0xe4/0x1a0 [ 172.997587][ T6268] __blk_mq_alloc_map_and_request+0x8e/0x320 [ 173.014098][ T6268] blk_mq_alloc_map_and_requests+0xd0/0x4d0 [ 173.014254][ T6268] blk_mq_alloc_tag_set+0x794/0xf30 [ 173.014284][ T6268] loop_add+0x257/0x890 [ 173.014313][ T6268] loop_control_ioctl+0x124/0x550 [ 173.014339][ T6268] ? xor_init+0x60/0x60 [ 173.014365][ T6268] ? bpf_lsm_file_ioctl+0x5/0x10 [ 173.014386][ T6268] ? security_file_ioctl+0x7c/0xa0 [ 173.014408][ T6268] ? xor_init+0x60/0x60 [ 173.014432][ T6268] __se_sys_ioctl+0xfa/0x170 [ 173.014455][ T6268] do_syscall_64+0x4c/0xa0 [ 173.014477][ T6268] ? clear_bhb_loop+0x30/0x80 [ 173.014500][ T6268] ? clear_bhb_loop+0x30/0x80 [ 173.014523][ T6268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.014545][ T6268] RIP: 0033:0x7f19991941d9 [ 173.014564][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.014582][ T6268] RSP: 002b:00007f19973ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.014606][ T6268] RAX: ffffffffffffffda RBX: 00007f199941bfa0 RCX: 00007f19991941d9 [ 173.014624][ T6268] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 173.014638][ T6268] RBP: 00007f199922b888 R08: 0000000000000000 R09: 0000000000000000 [ 173.014653][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.014667][ T6268] R13: 00007f199941c038 R14: 00007f199941bfa0 R15: 00007fffd713d5b8 [ 173.014698][ T6268] [ 173.043710][ T6268] blk-mq: reduced tag depth (128 -> 64) [ 173.163269][ T6275] loop0: detected capacity change from 0 to 16 [ 173.217258][ T6275] erofs: (device loop0): mounted with root inode @ nid 36. [ 173.259525][ T6280] loop4: detected capacity change from 0 to 2048 [ 173.298191][ T6282] loop2: detected capacity change from 0 to 512 [ 173.327360][ T6280] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000001cc4,,errors=continue. Quota mode: none. [ 173.346981][ T26] audit: type=1800 audit(1791511678.734:144): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.495" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 173.380156][ T6282] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 173.404950][ T6282] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.864424][ T6301] loop0: detected capacity change from 0 to 64 [ 173.890864][ T6301] hfs: unable to parse mount options [ 174.009455][ T6288] loop3: detected capacity change from 0 to 40427 [ 174.032988][ T6301] loop0: detected capacity change from 0 to 512 [ 174.063924][ T6288] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 174.121275][ T6301] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 174.125386][ T6288] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.203415][ T6301] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.500: corrupted inode contents [ 174.280688][ T6301] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #11: comm syz.0.500: mark_inode_dirty error [ 174.298427][ T6288] F2FS-fs (loop3): invalid crc value [ 174.315339][ T6311] loop2: detected capacity change from 0 to 1024 [ 174.338486][ T6301] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.500: invalid indirect mapped block 1 (level 1) [ 174.366151][ T6311] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 174.394554][ T6288] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.427779][ T6301] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.500: corrupted inode contents [ 174.459626][ T6301] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 174.471146][ T6288] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.496087][ T6288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.504332][ T6301] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.500: corrupted inode contents [ 174.551445][ T6301] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.500: mark_inode_dirty error [ 174.564715][ T6301] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 174.574677][ T6301] EXT4-fs (loop0): 1 truncate cleaned up [ 174.581757][ T6301] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.830961][ T4189] attempt to access beyond end of device [ 174.830961][ T4189] loop3: rw=2049, want=40968, limit=40427 [ 175.272658][ T6325] device syzkaller0 entered promiscuous mode [ 175.383416][ T6330] erofs: (device loop2): mounted with root inode @ nid 36. [ 175.885333][ T6269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.296542][ T6325] 0: reclassify loop, rule prio 0, protocol 700 [ 176.424249][ T6349] set_capacity_and_notify: 2 callbacks suppressed [ 176.424267][ T6349] loop3: detected capacity change from 0 to 64 [ 176.481370][ T6349] hfs: unable to parse mount options [ 176.566436][ T6349] loop3: detected capacity change from 0 to 512 [ 177.140793][ T6359] loop0: detected capacity change from 0 to 512 [ 177.374313][ T6349] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 177.636746][ T6349] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.518: corrupted inode contents [ 177.652012][ T6349] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.518: mark_inode_dirty error [ 177.664249][ T6349] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.518: invalid indirect mapped block 1 (level 1) [ 177.700534][ T6357] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6364] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6357] [ 177.717866][ T6357] binder: 6354:6357 ioctl c0306201 0 returned -14 [ 177.726953][ T6357] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6364] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6357] [ 177.746919][ T6357] loop4: detected capacity change from 0 to 512 [ 177.766529][ T6349] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.518: corrupted inode contents [ 177.794507][ T6349] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 177.875088][ T6357] EXT4-fs (loop4): Ignoring removed nobh option [ 177.888026][ T6357] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.904680][ T6357] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.521: corrupted inode contents [ 177.934053][ T6357] EXT4-fs (loop4): Remounting filesystem read-only [ 177.941014][ T6357] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 177.949878][ T6349] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.518: corrupted inode contents [ 177.962360][ T6357] EXT4-fs (loop4): Remounting filesystem read-only [ 177.969889][ T6357] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.521: corrupted inode contents [ 177.978006][ T6349] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.518: mark_inode_dirty error [ 177.993566][ T6357] EXT4-fs (loop4): Remounting filesystem read-only [ 178.000244][ T6357] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.521: mark_inode_dirty error [ 178.012059][ T6357] EXT4-fs (loop4): Remounting filesystem read-only [ 178.018838][ T6357] EXT4-fs (loop4): 1 orphan inode deleted [ 178.024767][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 178.047464][ T6349] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 178.106539][ T6349] EXT4-fs (loop3): 1 truncate cleaned up [ 178.112256][ T6349] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.284892][ T6371] device syzkaller0 entered promiscuous mode [ 178.559610][ T6379] loop3: detected capacity change from 0 to 256 [ 178.695632][ T6379] FAT-fs (loop3): Directory bread(block 64) failed [ 178.702693][ T6352] loop2: detected capacity change from 0 to 40427 [ 178.756127][ T6379] FAT-fs (loop3): Directory bread(block 65) failed [ 178.762913][ T6379] FAT-fs (loop3): Directory bread(block 66) failed [ 178.786561][ T6379] FAT-fs (loop3): Directory bread(block 67) failed [ 178.836440][ T6352] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 178.887808][ T6379] FAT-fs (loop3): Directory bread(block 68) failed [ 178.900534][ T6352] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.943361][ T6379] FAT-fs (loop3): Directory bread(block 69) failed [ 178.985555][ T6352] F2FS-fs (loop2): invalid crc value [ 179.028211][ T6379] FAT-fs (loop3): Directory bread(block 70) failed [ 179.035114][ T6379] FAT-fs (loop3): Directory bread(block 71) failed [ 179.070335][ T6386] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 179.129862][ T6352] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.165217][ T6379] FAT-fs (loop3): Directory bread(block 72) failed [ 179.235274][ T6379] FAT-fs (loop3): Directory bread(block 73) failed [ 179.441649][ T6352] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.460318][ T6352] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.493599][ T6399] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.533'. [ 180.862173][ T4393] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 181.750553][ T6436] loop4: detected capacity change from 0 to 164 [ 181.899626][ T6444] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.548'. [ 182.172679][ T6462] loop4: detected capacity change from 0 to 512 [ 182.429064][ T6472] loop3: detected capacity change from 0 to 512 [ 182.605687][ T6478] loop4: detected capacity change from 0 to 512 [ 183.029359][ T6472] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 183.360297][ T6472] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.565086][ T6435] loop1: detected capacity change from 0 to 40427 [ 183.637918][ T6435] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 183.645735][ T6435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 183.656670][ T6498] loop3: detected capacity change from 0 to 512 [ 183.713851][ T6498] EXT4-fs (loop3): Unrecognized mount option "rootcontext=sysadm_u" or missing value [ 183.736263][ T6435] F2FS-fs (loop1): invalid crc value [ 183.814856][ T6435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.996291][ T6435] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 184.003510][ T6435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.176761][ T6529] loop3: detected capacity change from 0 to 512 [ 185.128487][ T4186] attempt to access beyond end of device [ 185.128487][ T4186] loop1: rw=2049, want=40968, limit=40427 [ 185.210424][ T6544] netlink: 164 bytes leftover after parsing attributes in process `syz.2.578'. [ 185.282988][ T6547] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 185.380154][ T6555] loop0: detected capacity change from 0 to 512 [ 185.445261][ T6560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.585'. [ 185.456149][ T6555] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿ5ýU0Ì‹Àm×ËLŒú^r \H‡.ì�¿»vl¹ÿyERN®ã¢Ê ÖăÖ‚ñÔ`ËJÈ~Î�–E„_../£»ë1؆U±ML=†è÷…#ÄÎUš³ã¤ÿ’�*Ùϸb 8ä¾ ½ÅñÞš Fá³r}íj@ûgƒgEۮėôËZ;�1¶ËÛ{ÓòO^Z19Ýûi" or missing value [ 185.554504][ T6565] netlink: 76 bytes leftover after parsing attributes in process `syz.2.586'. [ 185.705235][ T6567] loop0: detected capacity change from 0 to 128 [ 185.929195][ T6569] loop1: detected capacity change from 0 to 64 [ 185.951975][ T6569] hfs: unable to parse mount options [ 186.113927][ T6577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.592'. [ 186.174885][ T6569] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 186.208519][ T6577] FAULT_INJECTION: forcing a failure. [ 186.208519][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 186.225961][ T6577] CPU: 1 PID: 6577 Comm: syz.0.592 Not tainted syzkaller #0 [ 186.233343][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.243449][ T6577] Call Trace: [ 186.246777][ T6577] [ 186.249760][ T6577] dump_stack_lvl+0x188/0x250 [ 186.254492][ T6577] ? show_regs_print_info+0x20/0x20 [ 186.259743][ T6577] ? load_image+0x410/0x410 [ 186.264297][ T6577] ? __might_sleep+0xf0/0xf0 [ 186.268937][ T6577] ? __lock_acquire+0x7d40/0x7d40 [ 186.274017][ T6577] ? fib_rules_register+0x3cc/0x3f0 [ 186.279336][ T6577] should_fail+0x383/0x4b0 [ 186.283818][ T6577] should_failslab+0x5/0x20 [ 186.288369][ T6577] slab_pre_alloc_hook+0x51/0xc0 [ 186.290720][ T6569] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.577: corrupted inode contents [ 186.293362][ T6577] kmem_cache_alloc_trace+0x47/0x290 [ 186.310590][ T6577] ? mr_table_alloc+0x61/0x240 [ 186.315417][ T6577] ? ipmr_expire_process+0xc0/0xc0 [ 186.320590][ T6577] mr_table_alloc+0x61/0x240 [ 186.325238][ T6577] ? ip6mr_cache_report+0x15a0/0x15a0 [ 186.330680][ T6577] ip6mr_net_init+0x245/0x3a0 [ 186.335412][ T6577] ops_init+0x360/0x5f0 [ 186.339622][ T6577] setup_net+0x39e/0xa10 [ 186.343914][ T6577] ? copy_net_ns+0x5b0/0x5b0 [ 186.348545][ T6577] ? copy_net_ns+0x324/0x5b0 [ 186.353199][ T6577] ? down_read_killable+0x1ce/0x340 [ 186.358438][ T6577] copy_net_ns+0x33e/0x5b0 [ 186.362905][ T6577] create_new_namespaces+0x3ce/0x700 [ 186.368291][ T6577] unshare_nsproxy_namespaces+0x116/0x160 [ 186.374059][ T6577] ksys_unshare+0x4f6/0x8e0 [ 186.378608][ T6577] ? __lock_acquire+0x7d40/0x7d40 [ 186.383682][ T6577] ? sighand_ctor+0x40/0x40 [ 186.388221][ T6577] ? lock_chain_count+0x20/0x20 [ 186.393121][ T6577] ? syscall_enter_from_user_mode+0x21/0x70 [ 186.399066][ T6577] __x64_sys_unshare+0x34/0x40 [ 186.403876][ T6577] do_syscall_64+0x4c/0xa0 [ 186.408331][ T6577] ? clear_bhb_loop+0x30/0x80 [ 186.413045][ T6577] ? clear_bhb_loop+0x30/0x80 [ 186.417866][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.423799][ T6577] RIP: 0033:0x7f31c6c4d1d9 [ 186.428272][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.445037][ T6569] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #11: comm syz.1.577: mark_inode_dirty error [ 186.448112][ T6577] RSP: 002b:00007f31c4ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 186.448141][ T6577] RAX: ffffffffffffffda RBX: 00007f31c6ed4fa0 RCX: 00007f31c6c4d1d9 [ 186.448157][ T6577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 186.448171][ T6577] RBP: 00007f31c6ce4888 R08: 0000000000000000 R09: 0000000000000000 [ 186.448184][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.448198][ T6577] R13: 00007f31c6ed5038 R14: 00007f31c6ed4fa0 R15: 00007ffda1384408 [ 186.507744][ T6569] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.577: invalid indirect mapped block 1 (level 1) [ 186.507798][ T6577] [ 186.559811][ T6569] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.577: corrupted inode contents [ 186.585980][ T6569] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 186.607639][ T6569] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.577: corrupted inode contents [ 186.631530][ T6569] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.577: mark_inode_dirty error [ 186.669504][ T6569] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 186.691602][ T6587] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.596'. [ 186.708330][ T6569] EXT4-fs (loop1): 1 truncate cleaned up [ 186.716080][ T6563] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 186.728123][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.738976][ T6563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 186.754451][ T6563] F2FS-fs (loop4): invalid crc value [ 186.820975][ T6589] device syzkaller0 entered promiscuous mode [ 186.852071][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 186.866014][ T6563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.004392][ T6599] set_capacity_and_notify: 2 callbacks suppressed [ 187.004408][ T6599] loop1: detected capacity change from 0 to 512 [ 187.042396][ T6563] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 187.070249][ T6563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 187.151058][ T6597] device syzkaller0 entered promiscuous mode [ 187.194370][ T6603] netlink: 76 bytes leftover after parsing attributes in process `syz.0.601'. [ 187.300641][ T6608] loop2: detected capacity change from 0 to 1764 [ 187.309686][ T6607] loop0: detected capacity change from 0 to 512 [ 187.471883][ T6607] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.505748][ T6613] loop2: detected capacity change from 0 to 512 [ 187.551897][ T6613] EXT4-fs (loop2): Ignoring removed orlov option [ 187.568698][ T6613] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.686741][ T6613] [ 187.689147][ T6613] ====================================================== [ 187.696194][ T6613] WARNING: possible circular locking dependency detected [ 187.703259][ T6613] syzkaller #0 Not tainted [ 187.707709][ T6613] ------------------------------------------------------ [ 187.714763][ T6613] syz.2.604/6613 is trying to acquire lock: [ 187.720684][ T6613] ffff888073f8f020 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x350/0x1a50 [ 187.730233][ T6613] [ 187.730233][ T6613] but task is already holding lock: [ 187.737628][ T6613] ffff88806137c208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 187.747098][ T6613] [ 187.747098][ T6613] which lock already depends on the new lock. [ 187.747098][ T6613] [ 187.757530][ T6613] [ 187.757530][ T6613] the existing dependency chain (in reverse order) is: [ 187.766572][ T6613] [ 187.766572][ T6613] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 187.774725][ T6613] down_read+0x44/0x2e0 [ 187.779442][ T6613] v2_read_dquot+0x4a/0x110 [ 187.784499][ T6613] dquot_acquire+0x152/0x520 [ 187.789655][ T6613] ext4_acquire_dquot+0x2e3/0x4a0 [ 187.795235][ T6613] dqget+0x713/0xbb0 [ 187.799687][ T6613] __dquot_initialize+0x3a9/0xd00 [ 187.805259][ T6613] ext4_tmpfile+0x8f/0x3f0 [ 187.810226][ T6613] vfs_tmpfile+0x20d/0x300 [ 187.815194][ T6613] do_tmpfile+0x148/0x380 [ 187.820073][ T6613] path_openat+0x29b0/0x2fb0 [ 187.825219][ T6613] do_filp_open+0x1df/0x400 [ 187.830284][ T6613] do_sys_openat2+0x14b/0x500 [ 187.835533][ T6613] __x64_sys_openat+0x135/0x160 [ 187.840952][ T6613] do_syscall_64+0x4c/0xa0 [ 187.845932][ T6613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.852396][ T6613] [ 187.852396][ T6613] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 187.860077][ T6613] __mutex_lock_common+0x1e5/0x2400 [ 187.865835][ T6613] mutex_lock_nested+0x17/0x20 [ 187.871230][ T6613] dquot_commit+0x5a/0x410 [ 187.876218][ T6613] ext4_write_dquot+0x1f0/0x360 [ 187.881634][ T6613] mark_all_dquot_dirty+0xf9/0x400 [ 187.887304][ T6613] __dquot_alloc_space+0x5cb/0xe10 [ 187.892979][ T6613] ext4_mb_new_blocks+0xf80/0x47c0 [ 187.898659][ T6613] ext4_ext_map_blocks+0x17d1/0x63d0 [ 187.904508][ T6613] ext4_map_blocks+0x97f/0x1a50 [ 187.909913][ T6613] ext4_getblk+0x176/0x670 [ 187.914883][ T6613] ext4_bread+0x26/0x180 [ 187.919681][ T6613] ext4_append+0x2bb/0x560 [ 187.924663][ T6613] ext4_init_new_dir+0x2a7/0x910 [ 187.930155][ T6613] ext4_mkdir+0x4c3/0xc90 [ 187.935041][ T6613] vfs_mkdir+0x386/0x570 [ 187.939840][ T6613] do_mkdirat+0x1dd/0x5c0 [ 187.944722][ T6613] __x64_sys_mkdirat+0x85/0x90 [ 187.950050][ T6613] do_syscall_64+0x4c/0xa0 [ 187.955056][ T6613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.961512][ T6613] [ 187.961512][ T6613] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 187.969374][ T6613] __lock_acquire+0x38f7/0x7d40 [ 187.974790][ T6613] lock_acquire+0x19f/0x400 [ 187.979866][ T6613] down_read+0x44/0x2e0 [ 187.984586][ T6613] ext4_map_blocks+0x350/0x1a50 [ 187.990004][ T6613] ext4_getblk+0x176/0x670 [ 187.995018][ T6613] ext4_bread+0x26/0x180 [ 187.999820][ T6613] ext4_quota_read+0x1ac/0x390 [ 188.005142][ T6613] find_tree_dqentry+0x187/0xb30 [ 188.010632][ T6613] find_tree_dqentry+0x3e8/0xb30 [ 188.016124][ T6613] qtree_read_dquot+0x122/0x690 [ 188.021531][ T6613] v2_read_dquot+0xc0/0x110 [ 188.026603][ T6613] dquot_acquire+0x152/0x520 [ 188.031771][ T6613] ext4_acquire_dquot+0x2e3/0x4a0 [ 188.037363][ T6613] dqget+0x713/0xbb0 [ 188.041838][ T6613] __dquot_initialize+0x324/0xd00 [ 188.047425][ T6613] ext4_process_orphan+0x4c/0x2e0 [ 188.053014][ T6613] ext4_orphan_cleanup+0xc96/0x14f0 [ 188.058789][ T6613] ext4_fill_super+0x8c65/0x93f0 [ 188.064290][ T6613] mount_bdev+0x28a/0x3c0 [ 188.069173][ T6613] legacy_get_tree+0xe6/0x180 [ 188.074435][ T6613] vfs_get_tree+0x88/0x270 [ 188.079405][ T6613] do_new_mount+0x247/0xa40 [ 188.084469][ T6613] __se_sys_mount+0x2e3/0x3d0 [ 188.089704][ T6613] do_syscall_64+0x4c/0xa0 [ 188.094677][ T6613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.101129][ T6613] [ 188.101129][ T6613] other info that might help us debug this: [ 188.101129][ T6613] [ 188.111385][ T6613] Chain exists of: [ 188.111385][ T6613] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 188.111385][ T6613] [ 188.125072][ T6613] Possible unsafe locking scenario: [ 188.125072][ T6613] [ 188.132559][ T6613] CPU0 CPU1 [ 188.137952][ T6613] ---- ---- [ 188.143345][ T6613] rlock(&s->s_dquot.dqio_sem); [ 188.148312][ T6613] lock(&dquot->dq_lock); [ 188.155272][ T6613] lock(&s->s_dquot.dqio_sem); [ 188.162672][ T6613] rlock(&ei->i_data_sem/2); [ 188.167385][ T6613] [ 188.167385][ T6613] *** DEADLOCK *** [ 188.167385][ T6613] [ 188.175579][ T6613] 3 locks held by syz.2.604/6613: [ 188.180638][ T6613] #0: ffff88806137c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 188.190844][ T6613] #1: ffff888073fa2428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 188.200313][ T6613] #2: ffff88806137c208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 188.210220][ T6613] [ 188.210220][ T6613] stack backtrace: [ 188.216148][ T6613] CPU: 0 PID: 6613 Comm: syz.2.604 Not tainted syzkaller #0 [ 188.223492][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.233727][ T6613] Call Trace: [ 188.237055][ T6613] [ 188.240028][ T6613] dump_stack_lvl+0x188/0x250 [ 188.244756][ T6613] ? load_image+0x410/0x410 [ 188.249314][ T6613] ? show_regs_print_info+0x20/0x20 [ 188.254567][ T6613] ? print_circular_bug+0x12b/0x1a0 [ 188.259816][ T6613] check_noncircular+0x2f8/0x400 [ 188.264882][ T6613] ? print_deadlock_bug+0x5d0/0x5d0 [ 188.270120][ T6613] ? lockdep_lock+0xf1/0x1f0 [ 188.274775][ T6613] ? mark_lock+0x94/0x320 [ 188.279139][ T6613] ? mark_lock+0x94/0x320 [ 188.284193][ T6613] ? _find_first_zero_bit+0xd1/0xf0 [ 188.289434][ T6613] __lock_acquire+0x38f7/0x7d40 [ 188.294331][ T6613] ? verify_lock_unused+0x140/0x140 [ 188.299570][ T6613] ? verify_lock_unused+0x140/0x140 [ 188.304819][ T6613] lock_acquire+0x19f/0x400 [ 188.309355][ T6613] ? ext4_map_blocks+0x350/0x1a50 [ 188.314412][ T6613] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 188.320454][ T6613] ? __might_sleep+0xf0/0xf0 [ 188.325222][ T6613] ? read_lock_is_recursive+0x10/0x10 [ 188.330636][ T6613] ? rcu_is_watching+0x11/0xa0 [ 188.335438][ T6613] down_read+0x44/0x2e0 [ 188.339686][ T6613] ? ext4_map_blocks+0x350/0x1a50 [ 188.344743][ T6613] ext4_map_blocks+0x350/0x1a50 [ 188.349619][ T6613] ? ext4_issue_zeroout+0x250/0x250 [ 188.354879][ T6613] ? find_tree_dqentry+0x55/0xb30 [ 188.359934][ T6613] ? find_tree_dqentry+0x3e8/0xb30 [ 188.365086][ T6613] ? qtree_read_dquot+0x122/0x690 [ 188.370145][ T6613] ? v2_read_dquot+0xc0/0x110 [ 188.374851][ T6613] ? dquot_acquire+0x152/0x520 [ 188.379641][ T6613] ? ext4_acquire_dquot+0x2e3/0x4a0 [ 188.384910][ T6613] ? dqget+0x713/0xbb0 [ 188.389018][ T6613] ? ext4_process_orphan+0x4c/0x2e0 [ 188.394258][ T6613] ext4_getblk+0x176/0x670 [ 188.398827][ T6613] ? ext4_get_block_unwritten+0x30/0x30 [ 188.404436][ T6613] ext4_bread+0x26/0x180 [ 188.408726][ T6613] ext4_quota_read+0x1ac/0x390 [ 188.413532][ T6613] ? ext4_show_options+0x50/0x50 [ 188.418522][ T6613] find_tree_dqentry+0x187/0xb30 [ 188.423549][ T6613] find_tree_dqentry+0x3e8/0xb30 [ 188.428538][ T6613] qtree_read_dquot+0x122/0x690 [ 188.433429][ T6613] ? down_read+0x1aa/0x2e0 [ 188.437884][ T6613] v2_read_dquot+0xc0/0x110 [ 188.442447][ T6613] dquot_acquire+0x152/0x520 [ 188.447067][ T6613] ext4_acquire_dquot+0x2e3/0x4a0 [ 188.452154][ T6613] dqget+0x713/0xbb0 [ 188.456093][ T6613] __dquot_initialize+0x324/0xd00 [ 188.461157][ T6613] ? dquot_initialize+0x20/0x20 [ 188.466049][ T6613] ext4_process_orphan+0x4c/0x2e0 [ 188.471107][ T6613] ext4_orphan_cleanup+0xc96/0x14f0 [ 188.476340][ T6613] ? _raw_write_unlock+0x24/0x40 [ 188.481316][ T6613] ? ext4_orphan_del+0xc90/0xc90 [ 188.486294][ T6613] ? errseq_check_and_advance+0x62/0x120 [ 188.491962][ T6613] ext4_fill_super+0x8c65/0x93f0 [ 188.496964][ T6613] ? format_decode+0x8b1/0x1330 [ 188.501861][ T6613] ? ext4_mount+0x40/0x40 [ 188.506224][ T6613] ? set_blocksize+0x1f1/0x360 [ 188.511023][ T6613] ? sb_set_blocksize+0xa5/0xe0 [ 188.515907][ T6613] mount_bdev+0x28a/0x3c0 [ 188.520279][ T6613] ? ext4_mount+0x40/0x40 [ 188.524646][ T6613] legacy_get_tree+0xe6/0x180 [ 188.529354][ T6613] ? ext4_errno_to_code+0x160/0x160 [ 188.534597][ T6613] vfs_get_tree+0x88/0x270 [ 188.539053][ T6613] do_new_mount+0x247/0xa40 [ 188.543594][ T6613] __se_sys_mount+0x2e3/0x3d0 [ 188.548307][ T6613] ? __x64_sys_mount+0xc0/0xc0 [ 188.553100][ T6613] ? lockdep_hardirqs_on+0x94/0x140 [ 188.558335][ T6613] ? __x64_sys_mount+0x1c/0xc0 [ 188.563161][ T6613] do_syscall_64+0x4c/0xa0 [ 188.567609][ T6613] ? clear_bhb_loop+0x30/0x80 [ 188.572356][ T6613] ? clear_bhb_loop+0x30/0x80 [ 188.577086][ T6613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.583025][ T6613] RIP: 0033:0x7f2cb388044a [ 188.587461][ T6613] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.607094][ T6613] RSP: 002b:00007f2cb1ad6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.615752][ T6613] RAX: ffffffffffffffda RBX: 00007f2cb1ad6ee0 RCX: 00007f2cb388044a [ 188.623764][ T6613] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 00007f2cb1ad6ea0 [ 188.631772][ T6613] RBP: 0000200000000280 R08: 00007f2cb1ad6ee0 R09: 000000000021c91c [ 188.639775][ T6613] R10: 000000000021c91c R11: 0000000000000246 R12: 0000200000000180 [ 188.647782][ T6613] R13: 00007f2cb1ad6ea0 R14: 00000000000004e0 R15: 0000200000000300 [ 188.655788][ T6613] [ 188.666965][ T6613] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.604: Allocating blocks 41-42 which overlap fs metadata [ 188.725244][ T6613] Quota error (device loop2): write_blk: dquota write failed [ 188.742319][ T6613] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 188.843029][ T6621] loop3: detected capacity change from 0 to 2048 [ 188.870824][ T6613] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.604: Allocating blocks 41-42 which overlap fs metadata [ 188.885939][ T6613] Quota error (device loop2): write_blk: dquota write failed [ 188.893772][ T6613] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 188.904685][ T6613] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.604: Failed to acquire dquot type 1 [ 188.922381][ T6613] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 188.939123][ T4262] loop3: p1 p2 p3 [ 188.939123][ T4262] p1: [ 188.943405][ T6613] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.604: corrupted inode contents [ 188.969804][ T6613] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #12: comm syz.2.604: mark_inode_dirty error [ 188.983965][ T4262] loop3: partition table partially beyond EOD, truncated [ 188.991719][ T6613] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.604: corrupted inode contents [ 189.006959][ T6613] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.604: mark_inode_dirty error [ 189.008993][ T4262] loop3: p1 size 16777216 extends beyond EOD, [ 189.021020][ T6613] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.604: corrupted inode contents [ 189.035648][ T4262] truncated [ 189.044726][ T6613] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 189.054218][ T6613] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.604: corrupted inode contents [ 189.063827][ T4262] loop3: p2 size 458752 extends beyond EOD, [ 189.069251][ T6613] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.604: mark_inode_dirty error [ 189.072991][ T4262] truncated [ 189.079937][ T6613] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 189.101833][ T6613] EXT4-fs (loop2): 1 truncate cleaned up [ 189.108039][ T6613] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,inode_readahead_blks=0x0000000000200000,noload,noinit_itable,abort,orlov,init_itable,auto_da_alloc=0x00000000000085962,errors=continue. Quota mode: writeback. [ 189.121804][ T4262] loop3: p3 start 3036741376 is beyond EOD, truncated [ 189.158676][ T6621] loop3: p1 p2 p3 [ 189.158676][ T6621] p1: [ 189.193074][ T6621] loop3: partition table partially beyond EOD, truncated [ 189.206623][ T6621] loop3: p1 size 16777216 extends beyond EOD, truncated [ 189.214439][ T6613] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.604: Abort forced by user [ 189.224737][ T6621] loop3: p2 size 458752 extends beyond EOD, truncated [ 189.232385][ T6613] EXT4-fs (loop2): Remounting filesystem read-only [ 189.239652][ T6613] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 189.248074][ T6621] loop3: p3 start 3036741376 is beyond EOD, truncated [ 189.352819][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 189.363146][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 189.385520][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 189.395594][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 194.709259][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.715680][ T1421] ieee802154 phy1 wpan1: encryption failed: -22