last executing test programs: 2m44.042061286s ago: executing program 1 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m43.976497166s ago: executing program 1 (id=2690): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2m43.61316893s ago: executing program 1 (id=2693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) 2m42.540736701s ago: executing program 1 (id=2698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48400) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x20001008}], 0x1, 0x0, 0x0) 2m42.539859171s ago: executing program 0 (id=2699): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 2m42.388543172s ago: executing program 1 (id=2700): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2m42.007125746s ago: executing program 1 (id=2703): syz_usb_connect(0x3, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x43, 0xfc, 0x2c, 0x8, 0xeb1a, 0xe300, 0x4260, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xb0, 0x1, "", [{{0x9, 0x4, 0x27, 0x68, 0x0, 0x1, 0x6f, 0x81, 0x80}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 2m41.441517642s ago: executing program 0 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48400) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)}, 0x20001008}], 0x1, 0x0, 0x0) 2m41.414382742s ago: executing program 0 (id=2711): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 2m41.024264536s ago: executing program 0 (id=2712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 2m40.954083797s ago: executing program 0 (id=2714): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2m40.913856627s ago: executing program 0 (id=2716): syz_usb_connect(0x3, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x43, 0xfc, 0x2c, 0x8, 0xeb1a, 0xe300, 0x4260, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xb0, 0x1, "", [{{0x9, 0x4, 0x27, 0x68, 0x0, 0x1, 0x6f, 0x81, 0x80}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 2m26.71898821s ago: executing program 32 (id=2703): syz_usb_connect(0x3, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x43, 0xfc, 0x2c, 0x8, 0xeb1a, 0xe300, 0x4260, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xb0, 0x1, "", [{{0x9, 0x4, 0x27, 0x68, 0x0, 0x1, 0x6f, 0x81, 0x80}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 2m25.77861686s ago: executing program 33 (id=2716): syz_usb_connect(0x3, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x43, 0xfc, 0x2c, 0x8, 0xeb1a, 0xe300, 0x4260, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xb0, 0x1, "", [{{0x9, 0x4, 0x27, 0x68, 0x0, 0x1, 0x6f, 0x81, 0x80}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 11.306911727s ago: executing program 2 (id=3628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c01032002ffffff00000000ff"], 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7eb8}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) unshare(0x20000000) 10.811868272s ago: executing program 4 (id=3630): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0x81, 0x5de, &(0x7f0000000700)="$eJzs3U1rXNcdB+DfHb1YcsFREjtJ3UJECsXExNaMTNpCoWoxRYtgAt1kK+pxLDx2gjQpkyyKWvxB0oW6yqKbEihdhOJ1F/kCgi4LhS5FNy73zp3RWFZkSVY8Y+d58Jl7zpx73v6696C5MkyA76zVDzKzlSKrl9/rleWd7eXOzvby3UE+yZkkjepfpsvsv5Kp+8li+infT1LU3RXfNM6XrS8ufn2jd6lfatSpOn/qsHZHs1WnrNSTXDnF/h48dX/FcIVlp9cHnU+Ch0/23yd20jjx8FMnbsmpKr7hZ7GQnE0yV+8Dgwv35D/xCTExNyAAAAB8i17azW56OTfueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDzpP7+/6JOjUF+McXg+/9n6/dS559rX417AgAAAAAAAABwCt7czW56OTcoPyyqv/m/VRXOV6/fyyfZTDsbuZJe1tJNNxtpJlkY6Wi2t9btbjSP0LJ1YMvWs1kvAAAAAAAAALyg/pjVvb//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJCiSqf6hSuf7x5kkjekkc0lmy/O2kr8P8s+zr8Y9AQAAAHgGXtrNbno5Nyg/LKrP/K9Vn/vn8knupZv1dNNJOzerZwL9T/2Nne3lzs728t0yPd7vL/9zrGlUPab/7OHgkZeqMy4MW6zm1/lNLmcx72cj6/ld1tJNO4u5XuXWUmShfoqxMJjnwfNdeaT0/pPm+kY1k/ncyno1tyv5bT5KJzfTqNZQnfPIiLv7R/xDGZ3iF7WDh/nH/jdu1sciKX5Qr2wyLFQRmRlGZKmOfRmNlw+P/TGvk/0jNdMYPoM6f/hIR4n5Y87WxzLmcxMd89bI1ffa4ZFI3un+9c3bnXt3bt/avDw5Szqh/ZFYHonE60eNxFxegEjM1tHo76LH2y3fqtqey3pu5KPcTDs/ybtpVWm5Oo7G9cIR7rXG8e61H12qM68kxXz/OCHKuL48EtfRnW6hqht9Zy9Kr5z+jjR9sc5MJcX0cE6TYH8kmiORePXwSPzpYfm62bl3Z+P22sdHHO/H9bHcm89M1N48W1+901Xp0aujrHv1wLpmVXd+WNd4rO7CsO5Jd+ps/Tvc4z21qrrXD6zrt3tjpO6g33IAmHhn3z47O//v+X/Ofz5/f/72/Htzvzrz0zM/nM3Mg+m/Tf2l8efGz4u383l+v/f5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLnNTz+7s9bptDdkZGRkhplx70w8C1e7dz++uvnpZ++s3137sP1h+961pVbz3WvNn127emu9017qv457lnxb9m76cc8EAAAAAAAAAACA43gW/5103GsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+bH6QWa2UqS5dGWpLO9sL3fKNMjvndlIMl0e/5dM3U8W009Z6NdPHTrOl60vLn59o3dpr68ypagbFk+3iq06ZaWe5Mop9vfgqfsrhissO70+6BzG7f8BAAD//+AzHq0=") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x11, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x4, 0xa}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 9.564359624s ago: executing program 2 (id=3633): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 8.164350798s ago: executing program 3 (id=3634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f00000026c0)=[{&(0x7f0000000340)=""/241, 0xf1}, {0x0}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/129, 0x81}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x6, &(0x7f00000029c0)=[{&(0x7f0000002740)=""/253, 0xfd}, {0x0}, {&(0x7f0000002940)=""/50, 0x32}, {&(0x7f0000002980)=""/26, 0x1a}], 0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 7.734389133s ago: executing program 4 (id=3635): socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.686839433s ago: executing program 5 (id=3636): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 7.585015094s ago: executing program 4 (id=3637): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 7.545755795s ago: executing program 6 (id=3638): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 7.545454555s ago: executing program 2 (id=3639): socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 7.228553748s ago: executing program 3 (id=3640): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_setup(0x141b, &(0x7f0000000140)={0x0, 0x2af6, 0x10, 0x2, 0x139, 0x0, r3}, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf253500000008000300", @ANYRES32, @ANYBLOB='\n\x004'], 0x3c}}, 0x22044804) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.179281538s ago: executing program 2 (id=3641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x40044050) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000019c0)) process_mrelease(r6, 0x0) 7.179100268s ago: executing program 4 (id=3642): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x2, 0x5, 0x0, 0x2}, @mpls={[], @llc={@llc={0x0, 0xfc, "b2"}}}}, 0xd) 6.125771769s ago: executing program 3 (id=3643): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0x81, 0x5de, &(0x7f0000000700)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x11, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x4, 0xa}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 6.05021688s ago: executing program 6 (id=3644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c01032002ffffff00000000ff"], 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7eb8}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) unshare(0x20000000) 6.0493896s ago: executing program 2 (id=3645): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0x81, 0x5de, &(0x7f0000000700)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x11, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x4, 0xa}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) 6.047516629s ago: executing program 5 (id=3654): socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.238978068s ago: executing program 5 (id=3646): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x31, 0xcf, 0x56, 0x10, 0x12d6, 0x444, 0xfe9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf9, 0x8, 0x0, 0x9, "", [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0x9a, 0x53, 0xc3, 0x7}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 5.205959358s ago: executing program 4 (id=3647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.143709479s ago: executing program 6 (id=3648): socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.142321029s ago: executing program 3 (id=3649): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$eJzs3V2IXGcdB+D/zO6myWZrPmzV1tishtpA6c5mswmJeGGJH7UmtcXiRSiEJTvdDZndWbMb6E4EG7wRCyJ4I4JQsRdWRAO5qdTaXrR4o6DUDyoaAyqoULRSFME6cmbmbCfp2W6S2Z2T7DwPnNn3vHNm3nd2+J2POV8B9Kzh5KEQMRQR5yNiS3P00gmGm39qe89NJ0Mh6vXP/L3QmG5y77npdNL0dZuTh/6IjRGx/VAhdg28td35xdrJiUqlfKo1XlqYmSvNL9buOTEzMVWeKs/uOzB+cGz/+IHx1fusoz8bvPXPdz5w8akX//3fb/5m//eT/g61nmv/HKtlOIZb/5OB2NZW31+IuH+1G8tJX/Orjjvb6gr9OXaIK1avb/9e8v29MyJ2NfK/Jfqi+eW98uwj/9wSv7ov7z4Ca6eeyn76tXqG3YNpqXD5uwA3kGJjHbhQHImIZrlYHBlprsPfEoPFSnV+4e5Hq6dnJ5vryltjoPjoiUp5tLWtsDUGCsn4nkb5zfGxy8b3RjTWgb/Ut6kxPnK8Wpns5owOesETGRvbGYYiLpz/3PENmy/L/1/6mvkH1q8k/7986Znnk/LrfXn3BuimJP/ffX3mUyH/cIN7+KpfIf/QIzL2x8o/9C75h97Vef5/tGHVOwV0heU/9C75h9505o16Xf6hd8k/9C75h/Xg7DW9Ks3/g0eOxINHjtRrrfPfZ6tTJ05Ozx0cGx2ZOX185Hj11NzIVLU61ThjZ2bl961Uq3N7xuL0Y6WF8vxCaX6xdmymenp24VjjvP5j5Ss7OwFYa0cvbrx/284XXilExOMf2tQYEumOPVmF9a1eLzh7H3qUTX/oXS7VBr3LNj70sNYMoO2av5nH9W9c7vWVNegT0BXFvDsA5Oau2+z/g17V+v1/uet/A+tY++//hRz7AXSfdXxgpWW/3/9h/bmG3/8fWnZeANxQhpa5/9fNbffuGo2Id0TET/sGbkrv9QXcUC7Z1B+KuHDh258tLd2HW0HhCguXrP9dB/1RWItC1+dPQJe9Gfq8ewLkZXLvuel06Fabz011qyUgy6v3Ng8CSnJfaw3NZ/qX9g0MrNF5wtvuSB5/+Psnd0/3JUO05kNr0BSQ4fGzEfGerOV/obFvYGtruu3NyeKWiLg1It4VEe/usO2vPxQxHC+V2+vkH7rnSvN/W0Qki+vbI+K9EbEjIt7XYdu/OJ/k/9eb2usy8j/UYTPAdejzL+bdAyAvn3wm7x4AeTnqGAPoWd85k3cPgLw8+4O8ewB0ZNtVTX3J7Qa+8vJqdwa4Gi/cGxGjWfv/io39/amB1nUBb2pdC2BTRAxGxObWDrqbW+cIbmnbZ7iSY5+OGI47ftxeZ/8/dE96/F/tLcf/FZeO/0sW2js7aOO5Dw89kVU/sSPJ/1Nn0uP/kiFpPz0WMOUaRbA2Xj0bcXtm/gtLx/wWIslpxPuvsY3hL1x8Oqv+5QeS9x34+Ur5B9ZG/VsRH4zs/KeSUmlhZq40v1i7p3Ef76ny7L4D4wfH9o8fGC81LhFSSi8UkuHwP167O6v+d2NJ/r+xT/4hH8nyf3CZ/Lev/3+ggzYOfe3LR7Pqh/6Y5H/H82+f/+LfNhQeboyn9yV4bGJh4dSeiA2Fw0v19bR+rIOOwjqXZiTNUJL/3buyt/+3t16TLP8PRcRHWzl7IyL+FxEfi4iPR8QnIuK+t2nzq3dNXcyq/8PTSf6fPGn5D/lI8j+5wvI/+fufDtr468hPvphV/5GdSf5Hfvunw4/0J4P8AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKy++cXayYlKpXxqlQv/qjclNTGQ96cEAAAAAACA3vD/AAAA//8C/zK7") 3.631351384s ago: executing program 6 (id=3650): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f00000026c0)=[{&(0x7f0000000340)=""/241, 0xf1}, {0x0}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/129, 0x81}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x6, &(0x7f00000029c0)=[{&(0x7f0000002740)=""/253, 0xfd}, {0x0}, {&(0x7f0000002940)=""/50, 0x32}, {&(0x7f0000002980)=""/26, 0x1a}], 0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 2.102715239s ago: executing program 6 (id=3651): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.04525868s ago: executing program 5 (id=3652): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 1.747978303s ago: executing program 2 (id=3653): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0x81, 0x5de, &(0x7f0000000700)="$eJzs3U1rXNcdB+DfHb1YcsFREjtJ3UJECsXExNaMTNpCoWoxRYtgAt1kK+pxLDx2gjQpkyyKWvxB0oW6yqKbEihdhOJ1F/kCgi4LhS5FNy73zp3RWFZkSVY8Y+d58Jl7zpx73v6696C5MkyA76zVDzKzlSKrl9/rleWd7eXOzvby3UE+yZkkjepfpsvsv5Kp+8li+infT1LU3RXfNM6XrS8ufn2jd6lfatSpOn/qsHZHs1WnrNSTXDnF/h48dX/FcIVlp9cHnU+Ch0/23yd20jjx8FMnbsmpKr7hZ7GQnE0yV+8Dgwv35D/xCTExNyAAAAB8i17azW56OTfueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDzpP7+/6JOjUF+McXg+/9n6/dS559rX417AgAAAAAAAABwCt7czW56OTcoPyyqv/m/VRXOV6/fyyfZTDsbuZJe1tJNNxtpJlkY6Wi2t9btbjSP0LJ1YMvWs1kvAAAAAAAAALyg/pjVvb//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJCiSqf6hSuf7x5kkjekkc0lmy/O2kr8P8s+zr8Y9AQAAAHgGXtrNbno5Nyg/LKrP/K9Vn/vn8knupZv1dNNJOzerZwL9T/2Nne3lzs728t0yPd7vL/9zrGlUPab/7OHgkZeqMy4MW6zm1/lNLmcx72cj6/ld1tJNO4u5XuXWUmShfoqxMJjnwfNdeaT0/pPm+kY1k/ncyno1tyv5bT5KJzfTqNZQnfPIiLv7R/xDGZ3iF7WDh/nH/jdu1sciKX5Qr2wyLFQRmRlGZKmOfRmNlw+P/TGvk/0jNdMYPoM6f/hIR4n5Y87WxzLmcxMd89bI1ffa4ZFI3un+9c3bnXt3bt/avDw5Szqh/ZFYHonE60eNxFxegEjM1tHo76LH2y3fqtqey3pu5KPcTDs/ybtpVWm5Oo7G9cIR7rXG8e61H12qM68kxXz/OCHKuL48EtfRnW6hqht9Zy9Kr5z+jjR9sc5MJcX0cE6TYH8kmiORePXwSPzpYfm62bl3Z+P22sdHHO/H9bHcm89M1N48W1+901Xp0aujrHv1wLpmVXd+WNd4rO7CsO5Jd+ps/Tvc4z21qrrXD6zrt3tjpO6g33IAmHhn3z47O//v+X/Ofz5/f/72/Htzvzrz0zM/nM3Mg+m/Tf2l8efGz4u383l+v/f5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLnNTz+7s9bptDdkZGRkhplx70w8C1e7dz++uvnpZ++s3137sP1h+961pVbz3WvNn127emu9017qv457lnxb9m76cc8EAAAAAAAAAACA43gW/5103GsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+bH6QWa2UqS5dGWpLO9sL3fKNMjvndlIMl0e/5dM3U8W009Z6NdPHTrOl60vLn59o3dpr68ypagbFk+3iq06ZaWe5Mop9vfgqfsrhissO70+6BzG7f8BAAD//+AzHq0=") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x11, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x4, 0xa}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 1.734527573s ago: executing program 4 (id=3655): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 1.733880043s ago: executing program 6 (id=3656): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 1.624658954s ago: executing program 5 (id=3657): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_setup(0x141b, &(0x7f0000000140)={0x0, 0x2af6, 0x10, 0x2, 0x139, 0x0, r3}, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf253500000008000300", @ANYRES32, @ANYBLOB='\n\x004'], 0x3c}}, 0x22044804) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.624481434s ago: executing program 3 (id=3658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x40044050) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000019c0)) process_mrelease(r6, 0x0) 48.90439ms ago: executing program 5 (id=3659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c01032002ffffff00000000ff"], 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7eb8}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) unshare(0x20000000) 0s ago: executing program 3 (id=3660): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x2, 0x5, 0x0, 0x2}, @mpls={[], @llc={@llc={0x0, 0xfc, "b2"}}}}, 0xd) kernel console output (not intermixed with test programs): all+0x98/0x290 [ 587.223406][T16135] el0_svc_common+0x13c/0x258 [ 587.224279][T16135] do_el0_svc+0x5c/0x134 [ 587.225080][T16135] el0_svc+0x58/0x128 [ 587.225862][T16135] el0t_64_sync_handler+0x84/0xf0 [ 587.226783][T16135] el0t_64_sync+0x18c/0x190 [ 587.907709][T16148] loop5: detected capacity change from 0 to 512 [ 588.118539][T16148] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3202: iget: checksum invalid [ 588.147515][T16148] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3202: Bad quota inode: 4, type: 1 [ 588.149651][T16148] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 588.152858][T16148] EXT4-fs (loop5): mount failed [ 588.171915][T16156] device-mapper: ioctl: populate_table: no targets specified [ 588.295067][T16160] loop6: detected capacity change from 0 to 512 [ 588.309280][T16160] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3207: iget: checksum invalid [ 588.321121][T16160] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3207: Bad quota inode: 4, type: 1 [ 588.325664][T16160] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 588.328876][T16160] EXT4-fs (loop6): mount failed [ 588.838308][T16169] FAULT_INJECTION: forcing a failure. [ 588.838308][T16169] name fail_futex, interval 1, probability 0, space 0, times 0 [ 588.840466][T16169] CPU: 0 PID: 16169 Comm: syz.6.3217 Not tainted syzkaller #0 [ 588.841820][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 588.843710][T16169] Call trace: [ 588.844318][T16169] dump_backtrace+0x1c4/0x1f0 [ 588.845163][T16169] show_stack+0x2c/0x3c [ 588.845934][T16169] __dump_stack+0x30/0x40 [ 588.846712][T16169] dump_stack_lvl+0xf4/0x15c [ 588.847554][T16169] dump_stack+0x1c/0x5c [ 588.848309][T16169] should_fail_ex+0x3cc/0x524 [ 588.849191][T16169] should_fail+0x14/0x24 [ 588.849972][T16169] get_futex_key+0x904/0xfb0 [ 588.850791][T16169] futex_wait_setup+0xbc/0x320 [ 588.851689][T16169] futex_wait+0x164/0x424 [ 588.852497][T16169] do_futex+0x2e8/0x340 [ 588.853282][T16169] __arm64_sys_futex+0x390/0x414 [ 588.854179][T16169] invoke_syscall+0x98/0x290 [ 588.855037][T16169] el0_svc_common+0x13c/0x258 [ 588.855915][T16169] do_el0_svc+0x5c/0x134 [ 588.856727][T16169] el0_svc+0x58/0x128 [ 588.857465][T16169] el0t_64_sync_handler+0x84/0xf0 [ 588.858400][T16169] el0t_64_sync+0x18c/0x190 [ 588.870500][T16172] loop2: detected capacity change from 0 to 512 [ 589.011714][T16172] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3208: iget: checksum invalid [ 589.014178][T16172] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3208: Bad quota inode: 4, type: 1 [ 589.018272][T16172] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 589.021152][T16172] EXT4-fs (loop2): mount failed [ 589.087160][ T4948] team0 (unregistering): Port device team_slave_1 removed [ 589.377536][T16182] loop3: detected capacity change from 0 to 512 [ 589.485171][T16182] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3210: iget: checksum invalid [ 589.487745][T16182] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3210: Bad quota inode: 4, type: 1 [ 589.489912][T16182] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 589.493219][T16182] EXT4-fs (loop3): mount failed [ 589.563502][ T4948] team0 (unregistering): Port device team_slave_0 removed [ 589.678447][T16194] device-mapper: ioctl: populate_table: no targets specified [ 589.783314][T16199] loop6: detected capacity change from 0 to 512 [ 589.793598][ T4948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.797839][T16199] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3218: iget: checksum invalid [ 589.800428][T16199] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3218: Bad quota inode: 4, type: 1 [ 589.803028][T16199] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 589.806396][T16199] EXT4-fs (loop6): mount failed [ 590.020254][T16208] FAULT_INJECTION: forcing a failure. [ 590.020254][T16208] name failslab, interval 1, probability 0, space 0, times 0 [ 590.026552][T16208] CPU: 0 PID: 16208 Comm: syz.5.3221 Not tainted syzkaller #0 [ 590.027887][T16208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 590.029667][T16208] Call trace: [ 590.030258][T16208] dump_backtrace+0x1c4/0x1f0 [ 590.031094][T16208] show_stack+0x2c/0x3c [ 590.031793][T16208] __dump_stack+0x30/0x40 [ 590.032520][T16208] dump_stack_lvl+0xf4/0x15c [ 590.033333][T16208] dump_stack+0x1c/0x5c [ 590.034097][T16208] should_fail_ex+0x3cc/0x524 [ 590.034937][T16208] __should_failslab+0xc0/0x11c [ 590.035819][T16208] should_failslab+0x10/0x28 [ 590.036667][T16208] __kmem_cache_alloc_node+0x7c/0x318 [ 590.037622][T16208] __kmalloc_node_track_caller+0xb8/0x174 [ 590.038680][T16208] kstrdup+0x68/0xb0 [ 590.039381][T16208] snd_timer_instance_new+0x6c/0x1e0 [ 590.040373][T16208] snd_seq_timer_open+0x1e4/0x504 [ 590.041302][T16208] queue_use+0x174/0x20c [ 590.042083][T16208] snd_seq_queue_alloc+0x220/0x4cc [ 590.043022][T16208] snd_seq_ioctl_create_queue+0x84/0x37c [ 590.044049][T16208] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 590.045096][T16208] snd_seq_oss_open+0x510/0xca4 [ 590.046006][T16208] odev_open+0x84/0xbc [ 590.046776][T16208] soundcore_open+0x2f8/0x47c [ 590.047666][T16208] chrdev_open+0x3d0/0x51c [ 590.048506][T16208] do_dentry_open+0x738/0xf8c [ 590.049408][T16208] vfs_open+0x7c/0x90 [ 590.050177][T16208] path_openat+0x1fc0/0x27a0 [ 590.051051][T16208] do_filp_open+0x198/0x38c [ 590.051895][T16208] do_sys_openat2+0x134/0x3fc [ 590.052768][T16208] __arm64_sys_openat+0x11c/0x150 [ 590.053714][T16208] invoke_syscall+0x98/0x290 [ 590.054546][T16208] el0_svc_common+0x13c/0x258 [ 590.055388][T16208] do_el0_svc+0x5c/0x134 [ 590.056160][T16208] el0_svc+0x58/0x128 [ 590.056912][T16208] el0t_64_sync_handler+0x84/0xf0 [ 590.057845][T16208] el0t_64_sync+0x18c/0x190 [ 590.079478][ T4948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.219264][T16213] loop3: detected capacity change from 0 to 512 [ 590.437612][T16213] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3220: iget: checksum invalid [ 590.439824][T16213] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3220: Bad quota inode: 4, type: 1 [ 590.465392][T16213] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 590.468477][T16213] EXT4-fs (loop3): mount failed [ 590.675455][T16221] loop2: detected capacity change from 0 to 7 [ 590.721115][T16221] Dev loop2: unable to read RDB block 7 [ 590.722511][T16221] loop2: unable to read partition table [ 590.723883][T16221] loop2: partition table beyond EOD, truncated [ 590.728543][T16221] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 590.946742][T16223] loop6: detected capacity change from 0 to 512 [ 591.329559][T16223] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3219: iget: checksum invalid [ 591.382107][T16223] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3219: Bad quota inode: 4, type: 1 [ 591.396290][T16223] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 591.405888][T16223] EXT4-fs (loop6): mount failed [ 591.592976][T16234] loop5: detected capacity change from 0 to 512 [ 591.904280][T16234] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3225: iget: checksum invalid [ 591.906660][T16234] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3225: Bad quota inode: 4, type: 1 [ 591.908776][T16234] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 591.911937][T16234] EXT4-fs (loop5): mount failed [ 592.886841][T16255] FAULT_INJECTION: forcing a failure. [ 592.886841][T16255] name fail_futex, interval 1, probability 0, space 0, times 0 [ 592.889145][T16255] CPU: 1 PID: 16255 Comm: syz.5.3231 Not tainted syzkaller #0 [ 592.890418][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 592.892137][T16255] Call trace: [ 592.892734][T16255] dump_backtrace+0x1c4/0x1f0 [ 592.893568][T16255] show_stack+0x2c/0x3c [ 592.894350][T16255] __dump_stack+0x30/0x40 [ 592.895131][T16255] dump_stack_lvl+0xf4/0x15c [ 592.895963][T16255] dump_stack+0x1c/0x5c [ 592.896753][T16255] should_fail_ex+0x3cc/0x524 [ 592.897644][T16255] should_fail+0x14/0x24 [ 592.898457][T16255] get_futex_key+0x904/0xfb0 [ 592.899342][T16255] futex_wait_setup+0xbc/0x320 [ 592.900246][T16255] futex_wait+0x164/0x424 [ 592.901070][T16255] do_futex+0x2e8/0x340 [ 592.901862][T16255] __arm64_sys_futex+0x390/0x414 [ 592.902796][T16255] invoke_syscall+0x98/0x290 [ 592.903623][T16255] el0_svc_common+0x13c/0x258 [ 592.904623][T16255] do_el0_svc+0x5c/0x134 [ 592.905503][T16255] el0_svc+0x58/0x128 [ 592.906306][T16255] el0t_64_sync_handler+0x84/0xf0 [ 592.907313][T16255] el0t_64_sync+0x18c/0x190 [ 593.152462][T16258] device-mapper: table: 248:0: mirror: Not enough arguments to support feature count (-EINVAL) [ 593.154622][T16258] device-mapper: ioctl: error adding target to table [ 593.368610][T16268] loop2: detected capacity change from 0 to 7 [ 593.402890][T16268] Dev loop2: unable to read RDB block 7 [ 593.404131][T16268] loop2: unable to read partition table [ 593.405608][T16268] loop2: partition table beyond EOD, truncated [ 593.406831][T16268] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 593.836506][T16272] loop5: detected capacity change from 0 to 512 [ 593.851899][T16272] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3236: iget: checksum invalid [ 593.858551][T16272] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3236: Bad quota inode: 4, type: 1 [ 593.860546][T16272] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 593.863699][T16272] EXT4-fs (loop5): mount failed [ 594.008296][ T4948] bond0 (unregistering): Released all slaves [ 594.164037][T16280] FAULT_INJECTION: forcing a failure. [ 594.164037][T16280] name failslab, interval 1, probability 0, space 0, times 0 [ 594.166707][T16280] CPU: 0 PID: 16280 Comm: syz.2.3238 Not tainted syzkaller #0 [ 594.168041][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 594.169983][T16280] Call trace: [ 594.170598][T16280] dump_backtrace+0x1c4/0x1f0 [ 594.171479][T16280] show_stack+0x2c/0x3c [ 594.172267][T16280] __dump_stack+0x30/0x40 [ 594.173088][T16280] dump_stack_lvl+0xf4/0x15c [ 594.173934][T16280] dump_stack+0x1c/0x5c [ 594.174721][T16280] should_fail_ex+0x3cc/0x524 [ 594.175575][T16280] __should_failslab+0xc0/0x11c [ 594.176515][T16280] should_failslab+0x10/0x28 [ 594.177390][T16280] __kmem_cache_alloc_node+0x7c/0x318 [ 594.178404][T16280] kmalloc_trace+0x48/0x94 [ 594.179248][T16280] snd_seq_port_connect+0x7c/0x3a0 [ 594.180232][T16280] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 594.181356][T16280] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 594.182425][T16280] snd_seq_oss_midi_open+0x33c/0x5fc [ 594.183489][T16280] snd_seq_oss_synth_setup_midi+0x134/0x4a0 [ 594.184662][T16280] snd_seq_oss_open+0x754/0xca4 [ 594.185588][T16280] odev_open+0x84/0xbc [ 594.186376][T16280] soundcore_open+0x2f8/0x47c [ 594.187318][T16280] chrdev_open+0x3d0/0x51c [ 594.188093][T16280] do_dentry_open+0x738/0xf8c [ 594.188976][T16280] vfs_open+0x7c/0x90 [ 594.189693][T16280] path_openat+0x1fc0/0x27a0 [ 594.190550][T16280] do_filp_open+0x198/0x38c [ 594.191348][T16280] do_sys_openat2+0x134/0x3fc [ 594.192189][T16280] __arm64_sys_openat+0x11c/0x150 [ 594.193068][T16280] invoke_syscall+0x98/0x290 [ 594.194012][T16280] el0_svc_common+0x13c/0x258 [ 594.194947][T16280] do_el0_svc+0x5c/0x134 [ 594.195740][T16280] el0_svc+0x58/0x128 [ 594.196496][T16280] el0t_64_sync_handler+0x84/0xf0 [ 594.197363][T16280] el0t_64_sync+0x18c/0x190 [ 594.268826][T16285] loop5: detected capacity change from 0 to 512 [ 594.463501][T16291] loop6: detected capacity change from 0 to 512 [ 594.673059][T16285] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3247: iget: checksum invalid [ 594.675207][T16285] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3247: Bad quota inode: 4, type: 1 [ 594.677302][T16285] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 594.680103][T16291] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3239: iget: checksum invalid [ 594.680441][T16285] EXT4-fs (loop5): mount failed [ 594.683567][T16291] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3239: Bad quota inode: 4, type: 1 [ 594.685905][T16291] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 594.689149][T16291] EXT4-fs (loop6): mount failed [ 594.697334][T15738] device veth0_vlan entered promiscuous mode [ 594.701222][T15738] device veth1_vlan entered promiscuous mode [ 594.703810][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 594.740022][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.742643][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.795718][T15738] device veth0_macvtap entered promiscuous mode [ 595.095475][T15738] device veth1_macvtap entered promiscuous mode [ 595.137819][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.140292][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.150715][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.156814][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.158706][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.161410][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.166187][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.168292][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.171357][T15738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.227313][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.229186][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.230640][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.233788][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.494670][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.544921][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.557190][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.561386][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.575874][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.577780][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.579500][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.586426][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.592304][T15738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.595820][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.597670][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.601384][T15738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.618535][T15738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.620080][T15738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.621587][T15738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.647321][T16308] device-mapper: ioctl: populate_table: no targets specified [ 595.726672][ T5135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.728669][T15604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.736020][T15604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.736708][ T5135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.739825][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 595.741493][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.854994][T16313] FAULT_INJECTION: forcing a failure. [ 595.854994][T16313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 595.857407][T16313] CPU: 0 PID: 16313 Comm: syz.3.3245 Not tainted syzkaller #0 [ 595.858645][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 595.860329][T16313] Call trace: [ 595.860881][T16313] dump_backtrace+0x1c4/0x1f0 [ 595.861739][T16313] show_stack+0x2c/0x3c [ 595.862509][T16313] __dump_stack+0x30/0x40 [ 595.863330][T16313] dump_stack_lvl+0xf4/0x15c [ 595.864215][T16313] dump_stack+0x1c/0x5c [ 595.865012][T16313] should_fail_ex+0x3cc/0x524 [ 595.865846][T16313] should_fail+0x14/0x24 [ 595.866615][T16313] get_futex_key+0x904/0xfb0 [ 595.867440][T16313] futex_wait_setup+0xbc/0x320 [ 595.868325][T16313] futex_wait+0x164/0x424 [ 595.869262][T16313] do_futex+0x2e8/0x340 [ 595.870157][T16313] __arm64_sys_futex+0x390/0x414 [ 595.871086][T16313] invoke_syscall+0x98/0x290 [ 595.871989][T16313] el0_svc_common+0x13c/0x258 [ 595.872874][T16313] do_el0_svc+0x5c/0x134 [ 595.873697][T16313] el0_svc+0x58/0x128 [ 595.874459][T16313] el0t_64_sync_handler+0x84/0xf0 [ 595.875415][T16313] el0t_64_sync+0x18c/0x190 [ 596.179253][T16317] tipc: Started in network mode [ 596.180364][T16317] tipc: Node identity 3215143cb93, cluster identity 4711 [ 596.203471][T16317] tipc: Enabled bearer , priority 0 [ 596.208525][T16317] tipc: Resetting bearer [ 596.306699][T16326] loop2: detected capacity change from 0 to 7 [ 596.321390][T16326] Dev loop2: unable to read RDB block 7 [ 596.322925][T16326] loop2: unable to read partition table [ 596.324346][T16326] loop2: partition table beyond EOD, truncated [ 596.325671][T16326] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.552514][T16316] tipc: Disabling bearer [ 597.082868][T16345] device-mapper: ioctl: populate_table: no targets specified [ 597.449792][T16360] loop2: detected capacity change from 0 to 7 [ 597.482093][T16360] Dev loop2: unable to read RDB block 7 [ 597.483058][T16360] loop2: unable to read partition table [ 597.484052][T16360] loop2: partition table beyond EOD, truncated [ 597.485084][T16360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 597.500104][T16362] loop5: detected capacity change from 0 to 512 [ 597.500339][T16357] loop6: detected capacity change from 0 to 512 [ 597.535975][T16362] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3259: iget: checksum invalid [ 597.537216][T16357] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3258: iget: checksum invalid [ 597.538675][T16362] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3259: Bad quota inode: 4, type: 1 [ 597.543003][T16357] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3258: Bad quota inode: 4, type: 1 [ 597.545105][T16362] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 597.545214][T16357] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 597.548389][T16362] EXT4-fs (loop5): mount failed [ 597.550748][T16357] EXT4-fs (loop6): mount failed [ 597.614269][ T3939] Dev loop2: unable to read RDB block 7 [ 597.615591][ T3939] loop2: unable to read partition table [ 597.616946][ T3939] loop2: partition table beyond EOD, truncated [ 597.688812][ T3939] Dev loop2: unable to read RDB block 7 [ 597.690255][ T3939] loop2: unable to read partition table [ 597.692714][ T3939] loop2: partition table beyond EOD, truncated [ 597.728171][ T3939] Dev loop2: unable to read RDB block 7 [ 597.729676][ T3939] loop2: unable to read partition table [ 597.731004][ T3939] loop2: partition table beyond EOD, truncated [ 597.914129][ T3939] Dev loop2: unable to read RDB block 7 [ 597.915303][ T3939] loop2: unable to read partition table [ 597.920615][ T3939] loop2: partition table beyond EOD, truncated [ 598.053968][T16382] tipc: Started in network mode [ 598.055234][T16382] tipc: Node identity e662ed252ac2, cluster identity 4711 [ 598.064758][T16382] tipc: Enabled bearer , priority 0 [ 598.085680][T16382] tipc: Resetting bearer [ 598.566312][T16391] FAULT_INJECTION: forcing a failure. [ 598.566312][T16391] name fail_futex, interval 1, probability 0, space 0, times 0 [ 598.568521][T16391] CPU: 1 PID: 16391 Comm: syz.3.3269 Not tainted syzkaller #0 [ 598.569688][T16391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 598.571328][T16391] Call trace: [ 598.571894][T16391] dump_backtrace+0x1c4/0x1f0 [ 598.572773][T16391] show_stack+0x2c/0x3c [ 598.573541][T16391] __dump_stack+0x30/0x40 [ 598.574332][T16391] dump_stack_lvl+0xf4/0x15c [ 598.575214][T16391] dump_stack+0x1c/0x5c [ 598.576002][T16391] should_fail_ex+0x3cc/0x524 [ 598.576837][T16391] should_fail+0x14/0x24 [ 598.577602][T16391] get_futex_key+0x904/0xfb0 [ 598.578423][T16391] futex_wait_setup+0xbc/0x320 [ 598.579331][T16391] futex_wait+0x164/0x424 [ 598.580117][T16391] do_futex+0x2e8/0x340 [ 598.580889][T16391] __arm64_sys_futex+0x390/0x414 [ 598.581792][T16391] invoke_syscall+0x98/0x290 [ 598.582616][T16391] el0_svc_common+0x13c/0x258 [ 598.583495][T16391] do_el0_svc+0x5c/0x134 [ 598.584294][T16391] el0_svc+0x58/0x128 [ 598.585057][T16391] el0t_64_sync_handler+0x84/0xf0 [ 598.585961][T16391] el0t_64_sync+0x18c/0x190 [ 598.636631][T16393] loop4: detected capacity change from 0 to 512 [ 598.776194][T16395] loop6: detected capacity change from 0 to 512 [ 598.872321][T16379] tipc: Disabling bearer [ 598.899588][T16393] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3270: iget: checksum invalid [ 598.899618][T16395] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3271: iget: checksum invalid [ 598.904281][T16395] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3271: Bad quota inode: 4, type: 1 [ 598.904289][T16393] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3270: Bad quota inode: 4, type: 1 [ 598.906291][T16395] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 598.911314][T16395] EXT4-fs (loop6): mount failed [ 598.913167][T16393] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 598.917334][T16393] EXT4-fs (loop4): mount failed [ 598.945539][T16404] device-mapper: ioctl: populate_table: no targets specified [ 599.413323][T16422] loop2: detected capacity change from 0 to 7 [ 599.457965][T16422] Dev loop2: unable to read RDB block 7 [ 599.459315][T16422] loop2: unable to read partition table [ 599.460834][T16422] loop2: partition table beyond EOD, truncated [ 599.462161][T16422] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 599.704804][T16432] FAULT_INJECTION: forcing a failure. [ 599.704804][T16432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.707617][T16432] CPU: 1 PID: 16432 Comm: syz.4.3280 Not tainted syzkaller #0 [ 599.708958][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 599.710946][T16432] Call trace: [ 599.711553][T16432] dump_backtrace+0x1c4/0x1f0 [ 599.712442][T16432] show_stack+0x2c/0x3c [ 599.713173][T16432] __dump_stack+0x30/0x40 [ 599.713994][T16432] dump_stack_lvl+0xf4/0x15c [ 599.714875][T16432] dump_stack+0x1c/0x5c [ 599.715665][T16432] should_fail_ex+0x3cc/0x524 [ 599.716597][T16432] should_fail+0x14/0x24 [ 599.717415][T16432] should_fail_usercopy+0x20/0x30 [ 599.718374][T16432] simple_read_from_buffer+0xcc/0x238 [ 599.719348][T16432] proc_fail_nth_read+0x19c/0x23c [ 599.720263][T16432] vfs_read+0x2a4/0x7b8 [ 599.720997][T16432] ksys_read+0x12c/0x228 [ 599.721765][T16432] __arm64_sys_read+0x7c/0x90 [ 599.722582][T16432] invoke_syscall+0x98/0x290 [ 599.723382][T16432] el0_svc_common+0x13c/0x258 [ 599.724203][T16432] do_el0_svc+0x5c/0x134 [ 599.724989][T16432] el0_svc+0x58/0x128 [ 599.725731][T16432] el0t_64_sync_handler+0x84/0xf0 [ 599.726679][T16432] el0t_64_sync+0x18c/0x190 [ 600.185376][T16441] device syzkaller0 entered promiscuous mode [ 600.189476][T16441] tipc: Enabled bearer , priority 0 [ 600.284498][T16443] loop6: detected capacity change from 0 to 512 [ 600.492187][T16441] tipc: Resetting bearer [ 600.506096][T16443] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3282: iget: checksum invalid [ 600.509648][T16443] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3282: Bad quota inode: 4, type: 1 [ 600.512161][T16440] tipc: Resetting bearer [ 600.513697][T16443] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 600.517066][T16443] EXT4-fs (loop6): mount failed [ 600.572349][T16440] tipc: Disabling bearer [ 600.590419][T16450] loop5: detected capacity change from 0 to 512 [ 600.605464][T16452] device-mapper: ioctl: populate_table: no targets specified [ 600.619565][T16450] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3283: iget: checksum invalid [ 600.631520][T16450] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3283: Bad quota inode: 4, type: 1 [ 600.633956][T16450] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 600.637268][T16450] EXT4-fs (loop5): mount failed [ 600.924160][T16461] loop4: detected capacity change from 0 to 512 [ 601.179724][T16469] FAULT_INJECTION: forcing a failure. [ 601.179724][T16469] name fail_futex, interval 1, probability 0, space 0, times 0 [ 601.206456][T16461] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3286: iget: checksum invalid [ 601.208141][T16469] CPU: 0 PID: 16469 Comm: syz.6.3291 Not tainted syzkaller #0 [ 601.209850][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 601.211657][T16469] Call trace: [ 601.212315][T16469] dump_backtrace+0x1c4/0x1f0 [ 601.213292][T16469] show_stack+0x2c/0x3c [ 601.214124][T16469] __dump_stack+0x30/0x40 [ 601.214990][T16469] dump_stack_lvl+0xf4/0x15c [ 601.215875][T16469] dump_stack+0x1c/0x5c [ 601.216705][T16469] should_fail_ex+0x3cc/0x524 [ 601.217586][T16469] should_fail+0x14/0x24 [ 601.218377][T16469] get_futex_key+0x904/0xfb0 [ 601.219234][T16469] futex_wake+0x10c/0x458 [ 601.220007][T16469] do_futex+0x2c4/0x340 [ 601.220798][T16469] __arm64_sys_futex+0x390/0x414 [ 601.221700][T16469] invoke_syscall+0x98/0x290 [ 601.222565][T16469] el0_svc_common+0x13c/0x258 [ 601.223468][T16469] do_el0_svc+0x5c/0x134 [ 601.224292][T16469] el0_svc+0x58/0x128 [ 601.225126][T16469] el0t_64_sync_handler+0x84/0xf0 [ 601.226178][T16469] el0t_64_sync+0x18c/0x190 [ 601.233721][T16461] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3286: Bad quota inode: 4, type: 1 [ 601.236001][T16461] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 601.239033][T16461] EXT4-fs (loop4): mount failed [ 601.353731][T16474] FAULT_INJECTION: forcing a failure. [ 601.353731][T16474] name fail_futex, interval 1, probability 0, space 0, times 0 [ 601.356102][T16474] CPU: 1 PID: 16474 Comm: syz.2.3289 Not tainted syzkaller #0 [ 601.357272][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 601.359036][T16474] Call trace: [ 601.359640][T16474] dump_backtrace+0x1c4/0x1f0 [ 601.360439][T16474] show_stack+0x2c/0x3c [ 601.361127][T16474] __dump_stack+0x30/0x40 [ 601.361923][T16474] dump_stack_lvl+0xf4/0x15c [ 601.362810][T16474] dump_stack+0x1c/0x5c [ 601.363617][T16474] should_fail_ex+0x3cc/0x524 [ 601.364513][T16474] should_fail+0x14/0x24 [ 601.365312][T16474] get_futex_key+0x904/0xfb0 [ 601.366180][T16474] futex_wait_setup+0xbc/0x320 [ 601.367051][T16474] futex_wait+0x164/0x424 [ 601.367818][T16474] do_futex+0x2e8/0x340 [ 601.368547][T16474] __arm64_sys_futex+0x390/0x414 [ 601.369455][T16474] invoke_syscall+0x98/0x290 [ 601.370301][T16474] el0_svc_common+0x13c/0x258 [ 601.371179][T16474] do_el0_svc+0x5c/0x134 [ 601.371940][T16474] el0_svc+0x58/0x128 [ 601.372654][T16474] el0t_64_sync_handler+0x84/0xf0 [ 601.373592][T16474] el0t_64_sync+0x18c/0x190 [ 601.812372][T16484] loop2: detected capacity change from 0 to 7 [ 602.026944][T16484] Dev loop2: unable to read RDB block 7 [ 602.028175][T16484] loop2: unable to read partition table [ 602.029489][T16484] loop2: partition table beyond EOD, truncated [ 602.030676][T16484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 602.153290][T16494] device syzkaller0 entered promiscuous mode [ 602.156535][T16494] tipc: Started in network mode [ 602.157469][T16494] tipc: Node identity 76227733b358, cluster identity 4711 [ 602.158831][T16494] tipc: Enabled bearer , priority 0 [ 602.163950][T16494] tipc: Resetting bearer [ 602.167111][T16493] tipc: Resetting bearer [ 602.496346][T16493] tipc: Disabling bearer [ 602.602471][T16506] device-mapper: ioctl: populate_table: no targets specified [ 602.622418][T16509] FAULT_INJECTION: forcing a failure. [ 602.622418][T16509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.624544][T16509] CPU: 1 PID: 16509 Comm: syz.3.3303 Not tainted syzkaller #0 [ 602.625811][T16509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 602.627506][T16509] Call trace: [ 602.628070][T16509] dump_backtrace+0x1c4/0x1f0 [ 602.628915][T16509] show_stack+0x2c/0x3c [ 602.629609][T16509] __dump_stack+0x30/0x40 [ 602.630391][T16509] dump_stack_lvl+0xf4/0x15c [ 602.631260][T16509] dump_stack+0x1c/0x5c [ 602.632039][T16509] should_fail_ex+0x3cc/0x524 [ 602.632920][T16509] should_fail+0x14/0x24 [ 602.633758][T16509] should_fail_usercopy+0x20/0x30 [ 602.634689][T16509] simple_read_from_buffer+0xcc/0x238 [ 602.635687][T16509] proc_fail_nth_read+0x19c/0x23c [ 602.636647][T16509] vfs_read+0x2a4/0x7b8 [ 602.637433][T16509] ksys_read+0x12c/0x228 [ 602.638227][T16509] __arm64_sys_read+0x7c/0x90 [ 602.639065][T16509] invoke_syscall+0x98/0x290 [ 602.639897][T16509] el0_svc_common+0x13c/0x258 [ 602.640766][T16509] do_el0_svc+0x5c/0x134 [ 602.641588][T16509] el0_svc+0x58/0x128 [ 602.642362][T16509] el0t_64_sync_handler+0x84/0xf0 [ 602.643302][T16509] el0t_64_sync+0x18c/0x190 [ 602.878085][T16519] loop5: detected capacity change from 0 to 512 [ 603.099263][T16519] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3302: iget: checksum invalid [ 603.103216][T16519] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3302: Bad quota inode: 4, type: 1 [ 603.105703][T16519] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 603.109804][T16519] EXT4-fs (loop5): mount failed [ 603.426454][T16542] loop2: detected capacity change from 0 to 512 [ 603.527732][T16544] loop3: detected capacity change from 0 to 512 [ 603.775202][T16544] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3308: iget: checksum invalid [ 603.777574][T16544] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3308: Bad quota inode: 4, type: 1 [ 603.779776][T16544] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 603.783010][T16544] EXT4-fs (loop3): mount failed [ 603.843982][T16542] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3307: iget: checksum invalid [ 603.846357][T16542] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3307: Bad quota inode: 4, type: 1 [ 603.848737][T16542] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 603.860553][T16542] EXT4-fs (loop2): mount failed [ 603.925534][T16553] FAULT_INJECTION: forcing a failure. [ 603.925534][T16553] name fail_futex, interval 1, probability 0, space 0, times 0 [ 603.927894][T16553] CPU: 1 PID: 16553 Comm: syz.5.3309 Not tainted syzkaller #0 [ 603.929031][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 603.930594][T16553] Call trace: [ 603.931172][T16553] dump_backtrace+0x1c4/0x1f0 [ 603.931988][T16553] show_stack+0x2c/0x3c [ 603.932730][T16553] __dump_stack+0x30/0x40 [ 603.933557][T16553] dump_stack_lvl+0xf4/0x15c [ 603.934423][T16553] dump_stack+0x1c/0x5c [ 603.935223][T16553] should_fail_ex+0x3cc/0x524 [ 603.936119][T16553] should_fail+0x14/0x24 [ 603.936957][T16553] get_futex_key+0x904/0xfb0 [ 603.937843][T16553] futex_wait_setup+0xbc/0x320 [ 603.938775][T16553] futex_wait+0x164/0x424 [ 603.939616][T16553] do_futex+0x2e8/0x340 [ 603.940423][T16553] __arm64_sys_futex+0x390/0x414 [ 603.941347][T16553] invoke_syscall+0x98/0x290 [ 603.942167][T16553] el0_svc_common+0x13c/0x258 [ 603.942995][T16553] do_el0_svc+0x5c/0x134 [ 603.943751][T16553] el0_svc+0x58/0x128 [ 603.944477][T16553] el0t_64_sync_handler+0x84/0xf0 [ 603.945369][T16553] el0t_64_sync+0x18c/0x190 [ 604.401489][T16558] loop2: detected capacity change from 0 to 7 [ 604.462657][T16558] Dev loop2: unable to read RDB block 7 [ 604.464053][T16558] loop2: unable to read partition table [ 604.465515][T16558] loop2: partition table beyond EOD, truncated [ 604.466842][T16558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.988432][T16565] device syzkaller0 entered promiscuous mode [ 604.996692][T16565] tipc: Enabled bearer , priority 0 [ 605.015799][T16565] tipc: Resetting bearer [ 605.021117][T16564] tipc: Resetting bearer [ 605.076778][T16564] tipc: Disabling bearer [ 605.272942][T16577] device-mapper: ioctl: populate_table: no targets specified [ 605.279478][T16589] device syzkaller0 entered promiscuous mode [ 605.284445][T16589] tipc: Enabled bearer , priority 0 [ 605.294149][T16589] tipc: Resetting bearer [ 605.297109][T16585] tipc: Resetting bearer [ 605.511698][T16586] loop3: detected capacity change from 0 to 512 [ 605.514238][T16585] tipc: Disabling bearer [ 605.540197][T16586] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3322: iget: checksum invalid [ 605.542814][T16586] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3322: Bad quota inode: 4, type: 1 [ 605.545292][T16586] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 605.548614][T16586] EXT4-fs (loop3): mount failed [ 606.487851][T16622] loop2: detected capacity change from 0 to 7 [ 606.629850][T16624] FAULT_INJECTION: forcing a failure. [ 606.629850][T16624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 606.632145][T16624] CPU: 1 PID: 16624 Comm: syz.2.3330 Not tainted syzkaller #0 [ 606.633320][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 606.635001][T16624] Call trace: [ 606.635543][T16624] dump_backtrace+0x1c4/0x1f0 [ 606.636275][T16624] show_stack+0x2c/0x3c [ 606.637012][T16624] __dump_stack+0x30/0x40 [ 606.637776][T16624] dump_stack_lvl+0xf4/0x15c [ 606.638535][T16624] dump_stack+0x1c/0x5c [ 606.639241][T16624] should_fail_ex+0x3cc/0x524 [ 606.639994][T16624] should_fail+0x14/0x24 [ 606.640646][T16624] get_futex_key+0x904/0xfb0 [ 606.641390][T16624] futex_wait_setup+0xbc/0x320 [ 606.642255][T16624] futex_wait+0x164/0x424 [ 606.643067][T16624] do_futex+0x2e8/0x340 [ 606.643867][T16624] __arm64_sys_futex+0x390/0x414 [ 606.644769][T16624] invoke_syscall+0x98/0x290 [ 606.645612][T16624] el0_svc_common+0x13c/0x258 [ 606.646437][T16624] do_el0_svc+0x5c/0x134 [ 606.647224][T16624] el0_svc+0x58/0x128 [ 606.647985][T16624] el0t_64_sync_handler+0x84/0xf0 [ 606.648939][T16624] el0t_64_sync+0x18c/0x190 [ 606.910653][T16622] Dev loop2: unable to read RDB block 7 [ 606.911863][T16622] loop2: unable to read partition table [ 606.913026][T16622] loop2: partition table beyond EOD, truncated [ 606.914081][T16622] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 607.058286][T16637] device-mapper: ioctl: populate_table: no targets specified [ 607.114029][T16638] loop6: detected capacity change from 0 to 512 [ 607.178363][T16638] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3331: iget: checksum invalid [ 607.181203][T16638] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3331: Bad quota inode: 4, type: 1 [ 607.185198][T16638] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 607.204691][T16638] EXT4-fs (loop6): mount failed [ 607.216776][T16643] device syzkaller0 entered promiscuous mode [ 607.222884][T16643] tipc: Enabled bearer , priority 0 [ 607.285341][T16643] tipc: Resetting bearer [ 607.324856][T16639] tipc: Resetting bearer [ 607.457832][T16653] loop5: detected capacity change from 0 to 512 [ 607.652312][T16639] tipc: Disabling bearer [ 607.664292][T16653] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3338: iget: checksum invalid [ 607.666564][T16653] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3338: Bad quota inode: 4, type: 1 [ 607.668709][T16653] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 607.671665][T16653] EXT4-fs (loop5): mount failed [ 608.342825][T16673] device-mapper: ioctl: populate_table: no targets specified [ 608.666548][T16686] loop2: detected capacity change from 0 to 7 [ 608.869425][T16686] Dev loop2: unable to read RDB block 7 [ 608.870723][T16686] loop2: unable to read partition table [ 608.872362][T16686] loop2: partition table beyond EOD, truncated [ 608.873663][T16686] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 609.123672][T16695] FAULT_INJECTION: forcing a failure. [ 609.123672][T16695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 609.125992][T16695] CPU: 1 PID: 16695 Comm: syz.2.3354 Not tainted syzkaller #0 [ 609.127246][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 609.128944][T16695] Call trace: [ 609.129523][T16695] dump_backtrace+0x1c4/0x1f0 [ 609.130335][T16695] show_stack+0x2c/0x3c [ 609.131071][T16695] __dump_stack+0x30/0x40 [ 609.131778][T16695] dump_stack_lvl+0xf4/0x15c [ 609.132621][T16695] dump_stack+0x1c/0x5c [ 609.133403][T16695] should_fail_ex+0x3cc/0x524 [ 609.134259][T16695] should_fail+0x14/0x24 [ 609.135057][T16695] get_futex_key+0x904/0xfb0 [ 609.135943][T16695] futex_wait_setup+0xbc/0x320 [ 609.136858][T16695] futex_wait+0x164/0x424 [ 609.137680][T16695] do_futex+0x2e8/0x340 [ 609.138494][T16695] __arm64_sys_futex+0x390/0x414 [ 609.139454][T16695] invoke_syscall+0x98/0x290 [ 609.140345][T16695] el0_svc_common+0x13c/0x258 [ 609.141257][T16695] do_el0_svc+0x5c/0x134 [ 609.142161][T16695] el0_svc+0x58/0x128 [ 609.142922][T16695] el0t_64_sync_handler+0x84/0xf0 [ 609.143863][T16695] el0t_64_sync+0x18c/0x190 [ 609.425092][T16699] device syzkaller0 entered promiscuous mode [ 609.445414][T16699] tipc: Enabled bearer , priority 0 [ 609.470670][T16699] tipc: Resetting bearer [ 609.475282][T16698] tipc: Resetting bearer [ 609.583449][T16703] loop3: detected capacity change from 0 to 512 [ 609.798023][T16703] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3356: iget: checksum invalid [ 609.800404][T16703] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3356: Bad quota inode: 4, type: 1 [ 609.811973][T16703] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 609.813097][T16698] tipc: Disabling bearer [ 609.815196][T16703] EXT4-fs (loop3): mount failed [ 609.887455][T16712] device-mapper: ioctl: populate_table: no targets specified [ 610.380056][T16722] loop5: detected capacity change from 0 to 512 [ 610.490449][T16722] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3361: iget: checksum invalid [ 610.497291][T16722] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3361: Bad quota inode: 4, type: 1 [ 610.499387][T16722] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 610.504695][T16722] EXT4-fs (loop5): mount failed [ 611.007063][T16745] device syzkaller0 entered promiscuous mode [ 611.068555][T16748] loop2: detected capacity change from 0 to 7 [ 611.071741][T16748] Dev loop2: unable to read RDB block 7 [ 611.073032][T16748] loop2: unable to read partition table [ 611.074510][T16748] loop2: partition table beyond EOD, truncated [ 611.075601][T16748] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.309774][T16745] tipc: Started in network mode [ 611.310921][T16745] tipc: Node identity 96e949b6aa2f, cluster identity 4711 [ 611.334632][T16745] tipc: Enabled bearer , priority 0 [ 611.343770][T16745] tipc: Resetting bearer [ 611.349461][T16753] device-mapper: ioctl: populate_table: no targets specified [ 611.355484][T16744] tipc: Resetting bearer [ 611.392783][ T3939] Dev loop2: unable to read RDB block 7 [ 611.393907][ T3939] loop2: unable to read partition table [ 611.395016][ T3939] loop2: partition table beyond EOD, truncated [ 611.412408][T16744] tipc: Disabling bearer [ 611.668099][T16761] FAULT_INJECTION: forcing a failure. [ 611.668099][T16761] name fail_futex, interval 1, probability 0, space 0, times 0 [ 611.670780][T16761] CPU: 1 PID: 16761 Comm: syz.3.3376 Not tainted syzkaller #0 [ 611.672027][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 611.673851][T16761] Call trace: [ 611.674440][T16761] dump_backtrace+0x1c4/0x1f0 [ 611.675266][T16761] show_stack+0x2c/0x3c [ 611.676022][T16761] __dump_stack+0x30/0x40 [ 611.676802][T16761] dump_stack_lvl+0xf4/0x15c [ 611.677612][T16761] dump_stack+0x1c/0x5c [ 611.678376][T16761] should_fail_ex+0x3cc/0x524 [ 611.679229][T16761] should_fail+0x14/0x24 [ 611.680020][T16761] get_futex_key+0x904/0xfb0 [ 611.680863][T16761] futex_wait_setup+0xbc/0x320 [ 611.681765][T16761] futex_wait+0x164/0x424 [ 611.682543][T16761] do_futex+0x2e8/0x340 [ 611.683334][T16761] __arm64_sys_futex+0x390/0x414 [ 611.684259][T16761] invoke_syscall+0x98/0x290 [ 611.685112][T16761] el0_svc_common+0x13c/0x258 [ 611.686033][T16761] do_el0_svc+0x5c/0x134 [ 611.686790][T16761] el0_svc+0x58/0x128 [ 611.687494][T16761] el0t_64_sync_handler+0x84/0xf0 [ 611.688384][T16761] el0t_64_sync+0x18c/0x190 [ 612.005587][T16765] FAULT_INJECTION: forcing a failure. [ 612.005587][T16765] name failslab, interval 1, probability 0, space 0, times 0 [ 612.010251][T16765] CPU: 1 PID: 16765 Comm: syz.5.3377 Not tainted syzkaller #0 [ 612.011655][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 612.013459][T16765] Call trace: [ 612.014030][T16765] dump_backtrace+0x1c4/0x1f0 [ 612.014889][T16765] show_stack+0x2c/0x3c [ 612.015656][T16765] __dump_stack+0x30/0x40 [ 612.016482][T16765] dump_stack_lvl+0xf4/0x15c [ 612.017334][T16765] dump_stack+0x1c/0x5c [ 612.018126][T16765] should_fail_ex+0x3cc/0x524 [ 612.019113][T16765] __should_failslab+0xc0/0x11c [ 612.020045][T16765] should_failslab+0x10/0x28 [ 612.020923][T16765] kmem_cache_alloc+0x88/0x310 [ 612.021786][T16765] configfs_new_dirent+0x6c/0x32c [ 612.022741][T16765] configfs_make_dirent+0x48/0x194 [ 612.023655][T16765] configfs_create_file+0xdc/0x134 [ 612.024582][T16765] configfs_attach_item+0x550/0x83c [ 612.025522][T16765] configfs_attach_group+0x40/0x318 [ 612.026443][T16765] configfs_mkdir+0x574/0x884 [ 612.027283][T16765] vfs_mkdir+0x314/0x4d8 [ 612.028052][T16765] do_mkdirat+0x1b8/0x3ec [ 612.028835][T16765] __arm64_sys_mkdirat+0x90/0xa8 [ 612.029768][T16765] invoke_syscall+0x98/0x290 [ 612.030589][T16765] el0_svc_common+0x13c/0x258 [ 612.031406][T16765] do_el0_svc+0x5c/0x134 [ 612.032153][T16765] el0_svc+0x58/0x128 [ 612.032862][T16765] el0t_64_sync_handler+0x84/0xf0 [ 612.033785][T16765] el0t_64_sync+0x18c/0x190 [ 612.527947][T16785] device syzkaller0 entered promiscuous mode [ 612.531520][T16785] tipc: Started in network mode [ 612.532835][T16785] tipc: Node identity 2ebc762fc236, cluster identity 4711 [ 612.534407][T16785] tipc: Enabled bearer , priority 0 [ 612.540238][T16785] tipc: Resetting bearer [ 612.546726][T16784] tipc: Resetting bearer [ 612.608496][T16788] device-mapper: ioctl: populate_table: no targets specified [ 612.612335][T16784] tipc: Disabling bearer [ 613.105798][T16801] loop2: detected capacity change from 0 to 7 [ 613.109038][T16801] Dev loop2: unable to read RDB block 7 [ 613.110326][T16801] loop2: unable to read partition table [ 613.111881][T16801] loop2: partition table beyond EOD, truncated [ 613.113247][T16801] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 613.377228][T16803] FAULT_INJECTION: forcing a failure. [ 613.377228][T16803] name failslab, interval 1, probability 0, space 0, times 0 [ 613.379710][T16803] CPU: 1 PID: 16803 Comm: syz.4.3393 Not tainted syzkaller #0 [ 613.380913][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 613.382608][T16803] Call trace: [ 613.383164][T16803] dump_backtrace+0x1c4/0x1f0 [ 613.384010][T16803] show_stack+0x2c/0x3c [ 613.384757][T16803] __dump_stack+0x30/0x40 [ 613.385553][T16803] dump_stack_lvl+0xf4/0x15c [ 613.386455][T16803] dump_stack+0x1c/0x5c [ 613.387198][T16803] should_fail_ex+0x3cc/0x524 [ 613.388027][T16803] __should_failslab+0xc0/0x11c [ 613.388970][T16803] should_failslab+0x10/0x28 [ 613.389793][T16803] kmem_cache_alloc+0x88/0x310 [ 613.390621][T16803] configfs_new_dirent+0x6c/0x32c [ 613.391561][T16803] configfs_make_dirent+0x48/0x194 [ 613.392513][T16803] configfs_create_file+0xdc/0x134 [ 613.393456][T16803] configfs_attach_item+0x550/0x83c [ 613.394397][T16803] configfs_attach_group+0x40/0x318 [ 613.395333][T16803] configfs_mkdir+0x574/0x884 [ 613.396189][T16803] vfs_mkdir+0x314/0x4d8 [ 613.396984][T16803] do_mkdirat+0x1b8/0x3ec [ 613.397804][T16803] __arm64_sys_mkdirat+0x90/0xa8 [ 613.398382][T16806] FAULT_INJECTION: forcing a failure. [ 613.398382][T16806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.398902][T16803] invoke_syscall+0x98/0x290 [ 613.402179][T16803] el0_svc_common+0x13c/0x258 [ 613.403037][T16803] do_el0_svc+0x5c/0x134 [ 613.403834][T16803] el0_svc+0x58/0x128 [ 613.404581][T16803] el0t_64_sync_handler+0x84/0xf0 [ 613.405489][T16803] el0t_64_sync+0x18c/0x190 [ 613.406308][T16806] CPU: 0 PID: 16806 Comm: syz.5.3394 Not tainted syzkaller #0 [ 613.407776][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 613.409637][T16806] Call trace: [ 613.410240][T16806] dump_backtrace+0x1c4/0x1f0 [ 613.411092][T16806] show_stack+0x2c/0x3c [ 613.411882][T16806] __dump_stack+0x30/0x40 [ 613.412761][T16806] dump_stack_lvl+0xf4/0x15c [ 613.413628][T16806] dump_stack+0x1c/0x5c [ 613.414432][T16806] should_fail_ex+0x3cc/0x524 [ 613.415313][T16806] should_fail+0x14/0x24 [ 613.416146][T16806] should_fail_usercopy+0x20/0x30 [ 613.417085][T16806] simple_read_from_buffer+0xcc/0x238 [ 613.418092][T16806] proc_fail_nth_read+0x19c/0x23c [ 613.419012][T16806] vfs_read+0x2a4/0x7b8 [ 613.419802][T16806] ksys_read+0x12c/0x228 [ 613.420604][T16806] __arm64_sys_read+0x7c/0x90 [ 613.421478][T16806] invoke_syscall+0x98/0x290 [ 613.422348][T16806] el0_svc_common+0x13c/0x258 [ 613.423237][T16806] do_el0_svc+0x5c/0x134 [ 613.424029][T16806] el0_svc+0x58/0x128 [ 613.424744][T16806] el0t_64_sync_handler+0x84/0xf0 [ 613.425648][T16806] el0t_64_sync+0x18c/0x190 [ 613.556893][ T3939] Dev loop2: unable to read RDB block 7 [ 613.559386][ T3939] loop2: unable to read partition table [ 613.564777][T16817] device-mapper: ioctl: populate_table: no targets specified [ 613.566542][ T3939] loop2: partition table beyond EOD, truncated [ 613.848946][T16825] FAULT_INJECTION: forcing a failure. [ 613.848946][T16825] name fail_futex, interval 1, probability 0, space 0, times 0 [ 613.851300][T16825] CPU: 1 PID: 16825 Comm: syz.6.3399 Not tainted syzkaller #0 [ 613.852672][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 613.854519][T16825] Call trace: [ 613.855122][T16825] dump_backtrace+0x1c4/0x1f0 [ 613.856040][T16825] show_stack+0x2c/0x3c [ 613.856797][T16825] __dump_stack+0x30/0x40 [ 613.857583][T16825] dump_stack_lvl+0xf4/0x15c [ 613.858415][T16825] dump_stack+0x1c/0x5c [ 613.859192][T16825] should_fail_ex+0x3cc/0x524 [ 613.860046][T16825] should_fail+0x14/0x24 [ 613.860846][T16825] get_futex_key+0x904/0xfb0 [ 613.861714][T16825] futex_wait_setup+0xbc/0x320 [ 613.862635][T16825] futex_wait+0x164/0x424 [ 613.863467][T16825] do_futex+0x2e8/0x340 [ 613.864280][T16825] __arm64_sys_futex+0x390/0x414 [ 613.865210][T16825] invoke_syscall+0x98/0x290 [ 613.866064][T16825] el0_svc_common+0x13c/0x258 [ 613.866946][T16825] do_el0_svc+0x5c/0x134 [ 613.867759][T16825] el0_svc+0x58/0x128 [ 613.868503][T16825] el0t_64_sync_handler+0x84/0xf0 [ 613.869412][T16825] el0t_64_sync+0x18c/0x190 [ 614.378049][T16831] device syzkaller0 entered promiscuous mode [ 614.381539][T16831] tipc: Enabled bearer , priority 0 [ 614.388493][T16831] tipc: Resetting bearer [ 614.390976][T16830] tipc: Resetting bearer [ 614.422662][T16830] tipc: Disabling bearer [ 614.567950][T16841] ERROR: Out of memory at tomoyo_memory_ok. [ 614.742338][T16845] FAULT_INJECTION: forcing a failure. [ 614.742338][T16845] name fail_futex, interval 1, probability 0, space 0, times 0 [ 614.751554][T16845] CPU: 1 PID: 16845 Comm: syz.4.3407 Not tainted syzkaller #0 [ 614.753071][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 614.755139][T16845] Call trace: [ 614.755795][T16845] dump_backtrace+0x1c4/0x1f0 [ 614.756657][T16845] show_stack+0x2c/0x3c [ 614.757402][T16845] __dump_stack+0x30/0x40 [ 614.758177][T16845] dump_stack_lvl+0xf4/0x15c [ 614.759002][T16845] dump_stack+0x1c/0x5c [ 614.759753][T16845] should_fail_ex+0x3cc/0x524 [ 614.760612][T16845] should_fail+0x14/0x24 [ 614.761409][T16845] get_futex_key+0x904/0xfb0 [ 614.762283][T16845] futex_wake+0x10c/0x458 [ 614.763076][T16845] do_futex+0x2c4/0x340 [ 614.763834][T16845] __arm64_sys_futex+0x390/0x414 [ 614.764766][T16845] invoke_syscall+0x98/0x290 [ 614.765594][T16845] el0_svc_common+0x13c/0x258 [ 614.766430][T16845] do_el0_svc+0x5c/0x134 [ 614.767257][T16845] el0_svc+0x58/0x128 [ 614.767993][T16845] el0t_64_sync_handler+0x84/0xf0 [ 614.768907][T16845] el0t_64_sync+0x18c/0x190 [ 615.199644][T16857] loop2: detected capacity change from 0 to 7 [ 615.207998][T16857] Dev loop2: unable to read RDB block 7 [ 615.209044][T16857] loop2: unable to read partition table [ 615.210026][T16857] loop2: partition table beyond EOD, truncated [ 615.211078][T16857] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.220970][T16858] loop4: detected capacity change from 0 to 512 [ 615.266851][T16858] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3411: iget: checksum invalid [ 615.269198][T16858] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3411: Bad quota inode: 4, type: 1 [ 615.271391][T16858] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 615.274722][T16858] EXT4-fs (loop4): mount failed [ 615.299012][ T3939] Dev loop2: unable to read RDB block 7 [ 615.300252][ T3939] loop2: unable to read partition table [ 615.301466][ T3939] loop2: partition table beyond EOD, truncated [ 615.376886][ T3939] Dev loop2: unable to read RDB block 7 [ 615.378017][ T3939] loop2: unable to read partition table [ 615.379295][ T3939] loop2: partition table beyond EOD, truncated [ 615.459859][T16874] device syzkaller0 entered promiscuous mode [ 615.466530][T16874] tipc: Enabled bearer , priority 0 [ 615.472336][T16874] tipc: Resetting bearer [ 615.475152][T16873] tipc: Resetting bearer [ 615.704402][T16879] loop6: detected capacity change from 0 to 512 [ 615.713867][T16873] tipc: Disabling bearer [ 615.717566][T16879] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3413: iget: checksum invalid [ 615.719858][T16879] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3413: Bad quota inode: 4, type: 1 [ 615.722789][T16879] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 615.725889][T16879] EXT4-fs (loop6): mount failed [ 615.858182][ T8673] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 615.879614][T16889] ERROR: Out of memory at tomoyo_memory_ok. [ 616.164084][T16897] FAULT_INJECTION: forcing a failure. [ 616.164084][T16897] name fail_futex, interval 1, probability 0, space 0, times 0 [ 616.169025][T16897] CPU: 0 PID: 16897 Comm: syz.5.3421 Not tainted syzkaller #0 [ 616.170216][T16897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 616.171906][T16897] Call trace: [ 616.172488][T16897] dump_backtrace+0x1c4/0x1f0 [ 616.173324][T16897] show_stack+0x2c/0x3c [ 616.174056][T16897] __dump_stack+0x30/0x40 [ 616.174876][T16897] dump_stack_lvl+0xf4/0x15c [ 616.175726][T16897] dump_stack+0x1c/0x5c [ 616.176497][T16897] should_fail_ex+0x3cc/0x524 [ 616.177360][T16897] should_fail+0x14/0x24 [ 616.178152][T16897] get_futex_key+0x904/0xfb0 [ 616.178983][T16897] futex_wake+0x10c/0x458 [ 616.179789][T16897] do_futex+0x2c4/0x340 [ 616.180587][T16897] __arm64_sys_futex+0x390/0x414 [ 616.181459][T16897] invoke_syscall+0x98/0x290 [ 616.182335][T16897] el0_svc_common+0x13c/0x258 [ 616.183173][T16897] do_el0_svc+0x5c/0x134 [ 616.184033][T16897] el0_svc+0x58/0x128 [ 616.184894][T16897] el0t_64_sync_handler+0x84/0xf0 [ 616.185977][T16897] el0t_64_sync+0x18c/0x190 [ 616.469391][T16911] FAULT_INJECTION: forcing a failure. [ 616.469391][T16911] name fail_futex, interval 1, probability 0, space 0, times 0 [ 616.471774][T16911] CPU: 0 PID: 16911 Comm: syz.6.3424 Not tainted syzkaller #0 [ 616.472991][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 616.474628][T16911] Call trace: [ 616.475192][T16911] dump_backtrace+0x1c4/0x1f0 [ 616.475998][T16911] show_stack+0x2c/0x3c [ 616.476714][T16911] __dump_stack+0x30/0x40 [ 616.477436][T16911] dump_stack_lvl+0xf4/0x15c [ 616.478205][T16911] dump_stack+0x1c/0x5c [ 616.478922][T16911] should_fail_ex+0x3cc/0x524 [ 616.479718][T16911] should_fail+0x14/0x24 [ 616.480491][T16911] get_futex_key+0x904/0xfb0 [ 616.481296][T16911] futex_wait_setup+0xbc/0x320 [ 616.482178][T16911] futex_wait+0x164/0x424 [ 616.483023][T16911] do_futex+0x2e8/0x340 [ 616.483814][T16911] __arm64_sys_futex+0x390/0x414 [ 616.484731][T16911] invoke_syscall+0x98/0x290 [ 616.485598][T16911] el0_svc_common+0x13c/0x258 [ 616.486529][T16911] do_el0_svc+0x5c/0x134 [ 616.487306][T16911] el0_svc+0x58/0x128 [ 616.488033][T16911] el0t_64_sync_handler+0x84/0xf0 [ 616.488925][T16911] el0t_64_sync+0x18c/0x190 [ 616.757075][T16914] loop2: detected capacity change from 0 to 512 [ 617.050957][T16914] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3427: iget: checksum invalid [ 617.054563][T16914] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3427: Bad quota inode: 4, type: 1 [ 617.056615][T16914] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 617.059908][T16914] EXT4-fs (loop2): mount failed [ 617.293245][T16927] loop3: detected capacity change from 0 to 512 [ 617.405151][T16929] loop2: detected capacity change from 0 to 7 [ 617.535926][T16929] Dev loop2: unable to read RDB block 7 [ 617.537069][T16929] loop2: unable to read partition table [ 617.538195][T16929] loop2: partition table beyond EOD, truncated [ 617.539266][T16929] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.542170][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.543266][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.559492][ T3939] Dev loop2: unable to read RDB block 7 [ 617.564191][T16933] device syzkaller0 entered promiscuous mode [ 617.567090][T16933] tipc: Enabled bearer , priority 0 [ 617.570357][ T3939] loop2: unable to read partition table [ 617.572876][T16933] tipc: Resetting bearer [ 617.576027][T16927] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3429: iget: checksum invalid [ 617.577877][ T3939] loop2: partition table beyond EOD, truncated [ 617.579421][T16927] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3429: Bad quota inode: 4, type: 1 [ 617.582697][T16932] tipc: Resetting bearer [ 617.584252][T16927] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 617.587522][T16927] EXT4-fs (loop3): mount failed [ 617.644085][T16932] tipc: Disabling bearer [ 617.720163][ T3939] Dev loop2: unable to read RDB block 7 [ 617.726642][ T3939] loop2: unable to read partition table [ 617.730067][ T3939] loop2: partition table beyond EOD, truncated [ 617.881350][T16945] FAULT_INJECTION: forcing a failure. [ 617.881350][T16945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.884134][T16945] CPU: 1 PID: 16945 Comm: syz.5.3436 Not tainted syzkaller #0 [ 617.885555][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 617.887516][T16945] Call trace: [ 617.888148][T16945] dump_backtrace+0x1c4/0x1f0 [ 617.889092][T16945] show_stack+0x2c/0x3c [ 617.889959][T16945] __dump_stack+0x30/0x40 [ 617.890783][T16945] dump_stack_lvl+0xf4/0x15c [ 617.891662][T16945] dump_stack+0x1c/0x5c [ 617.892436][T16945] should_fail_ex+0x3cc/0x524 [ 617.893314][T16945] should_fail+0x14/0x24 [ 617.894118][T16945] should_fail_usercopy+0x20/0x30 [ 617.895135][T16945] simple_read_from_buffer+0xcc/0x238 [ 617.896178][T16945] proc_fail_nth_read+0x19c/0x23c [ 617.897108][T16945] vfs_read+0x2a4/0x7b8 [ 617.897938][T16945] ksys_read+0x12c/0x228 [ 617.898697][T16945] __arm64_sys_read+0x7c/0x90 [ 617.899522][T16945] invoke_syscall+0x98/0x290 [ 617.900363][T16945] el0_svc_common+0x13c/0x258 [ 617.901212][T16945] do_el0_svc+0x5c/0x134 [ 617.902008][T16945] el0_svc+0x58/0x128 [ 617.902769][T16945] el0t_64_sync_handler+0x84/0xf0 [ 617.903710][T16945] el0t_64_sync+0x18c/0x190 [ 618.142940][T16949] loop6: detected capacity change from 0 to 512 [ 618.382324][T16949] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3435: iget: checksum invalid [ 618.384736][T16949] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3435: Bad quota inode: 4, type: 1 [ 618.386802][T16949] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 618.389971][T16949] EXT4-fs (loop6): mount failed [ 618.650534][T16962] loop4: detected capacity change from 0 to 512 [ 618.953296][T16962] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3438: iget: checksum invalid [ 618.958923][T16962] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3438: Bad quota inode: 4, type: 1 [ 618.960949][T16962] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 618.964304][T16962] EXT4-fs (loop4): mount failed [ 619.080535][T16975] loop6: detected capacity change from 0 to 512 [ 619.349454][T16975] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3440: iget: checksum invalid [ 619.352247][T16975] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3440: Bad quota inode: 4, type: 1 [ 619.354356][T16975] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 619.357435][T16975] EXT4-fs (loop6): mount failed [ 619.385655][T16984] jffs2: notice: (16984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 619.723897][T16986] loop3: detected capacity change from 0 to 512 [ 619.728437][T16990] FAULT_INJECTION: forcing a failure. [ 619.728437][T16990] name fail_futex, interval 1, probability 0, space 0, times 0 [ 619.730773][T16990] CPU: 0 PID: 16990 Comm: syz.5.3444 Not tainted syzkaller #0 [ 619.732156][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 619.734061][T16990] Call trace: [ 619.734684][T16990] dump_backtrace+0x1c4/0x1f0 [ 619.735572][T16990] show_stack+0x2c/0x3c [ 619.736353][T16990] __dump_stack+0x30/0x40 [ 619.737149][T16990] dump_stack_lvl+0xf4/0x15c [ 619.738006][T16990] dump_stack+0x1c/0x5c [ 619.738752][T16990] should_fail_ex+0x3cc/0x524 [ 619.739608][T16990] should_fail+0x14/0x24 [ 619.740409][T16990] get_futex_key+0x904/0xfb0 [ 619.741275][T16990] futex_wait_setup+0xbc/0x320 [ 619.742163][T16990] futex_wait+0x164/0x424 [ 619.742985][T16990] do_futex+0x2e8/0x340 [ 619.743770][T16990] __arm64_sys_futex+0x390/0x414 [ 619.744832][T16990] invoke_syscall+0x98/0x290 [ 619.745704][T16990] el0_svc_common+0x13c/0x258 [ 619.746603][T16990] do_el0_svc+0x5c/0x134 [ 619.747415][T16990] el0_svc+0x58/0x128 [ 619.748186][T16990] el0t_64_sync_handler+0x84/0xf0 [ 619.749204][T16990] el0t_64_sync+0x18c/0x190 [ 619.976623][T16983] tipc: Enabled bearer , priority 0 [ 619.993222][T16986] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3442: iget: checksum invalid [ 619.995464][T16986] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3442: Bad quota inode: 4, type: 1 [ 619.997770][T16986] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 620.000934][T16986] EXT4-fs (loop3): mount failed [ 620.015263][T16983] tipc: Resetting bearer [ 620.031190][T16978] tipc: Disabling bearer [ 620.067004][ T7156] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.241311][T17003] FAULT_INJECTION: forcing a failure. [ 620.241311][T17003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.247746][T17003] CPU: 1 PID: 17003 Comm: syz.3.3450 Not tainted syzkaller #0 [ 620.249048][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 620.250799][T17003] Call trace: [ 620.251396][T17003] dump_backtrace+0x1c4/0x1f0 [ 620.252248][T17003] show_stack+0x2c/0x3c [ 620.253010][T17003] __dump_stack+0x30/0x40 [ 620.253811][T17003] dump_stack_lvl+0xf4/0x15c [ 620.254685][T17003] dump_stack+0x1c/0x5c [ 620.255489][T17003] should_fail_ex+0x3cc/0x524 [ 620.256461][T17003] should_fail+0x14/0x24 [ 620.257305][T17003] should_fail_usercopy+0x20/0x30 [ 620.258316][T17003] simple_read_from_buffer+0xcc/0x238 [ 620.259418][T17003] proc_fail_nth_read+0x19c/0x23c [ 620.260402][T17003] vfs_read+0x2a4/0x7b8 [ 620.261213][T17003] ksys_read+0x12c/0x228 [ 620.262042][T17003] __arm64_sys_read+0x7c/0x90 [ 620.262920][T17003] invoke_syscall+0x98/0x290 [ 620.263831][T17003] el0_svc_common+0x13c/0x258 [ 620.264746][T17003] do_el0_svc+0x5c/0x134 [ 620.265589][T17003] el0_svc+0x58/0x128 [ 620.266458][T17003] el0t_64_sync_handler+0x84/0xf0 [ 620.267547][T17003] el0t_64_sync+0x18c/0x190 [ 620.413772][T17010] loop2: detected capacity change from 0 to 7 [ 620.592683][T17013] loop4: detected capacity change from 0 to 512 [ 620.636356][T17010] Dev loop2: unable to read RDB block 7 [ 620.637372][T17010] loop2: unable to read partition table [ 620.638395][T17010] loop2: partition table beyond EOD, truncated [ 620.639469][T17010] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 620.676870][T17013] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3448: iget: checksum invalid [ 620.679102][T17013] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3448: Bad quota inode: 4, type: 1 [ 620.681112][T17013] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 620.684519][T17013] EXT4-fs (loop4): mount failed [ 621.202921][T17023] loop3: detected capacity change from 0 to 512 [ 621.686446][T17023] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3452: iget: checksum invalid [ 621.702136][T17023] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3452: Bad quota inode: 4, type: 1 [ 621.713231][T17023] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 621.724112][T17035] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3456: iget: checksum invalid [ 621.726496][T17035] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3456: Bad quota inode: 4, type: 1 [ 621.728434][T17035] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 621.731611][T17035] EXT4-fs (loop6): mount failed [ 621.746454][T17023] EXT4-fs (loop3): mount failed [ 621.796105][T17041] jffs2: notice: (17041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 622.130309][T17044] device syzkaller0 entered promiscuous mode [ 622.219277][T17044] tipc: Enabled bearer , priority 0 [ 622.242226][T17044] tipc: Resetting bearer [ 622.271014][T17043] tipc: Resetting bearer [ 622.402397][T17043] tipc: Disabling bearer [ 622.649080][T17053] set_capacity_and_notify: 1 callbacks suppressed [ 622.649112][T17053] loop2: detected capacity change from 0 to 512 [ 622.930500][T17053] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3460: iget: checksum invalid [ 622.966342][T17053] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3460: Bad quota inode: 4, type: 1 [ 622.969485][T17053] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 622.972404][T17053] EXT4-fs (loop2): mount failed [ 623.333522][T17065] FAULT_INJECTION: forcing a failure. [ 623.333522][T17065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 623.336194][T17065] CPU: 0 PID: 17065 Comm: syz.5.3463 Not tainted syzkaller #0 [ 623.337460][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 623.339152][T17065] Call trace: [ 623.339712][T17065] dump_backtrace+0x1c4/0x1f0 [ 623.340498][T17065] show_stack+0x2c/0x3c [ 623.341218][T17065] __dump_stack+0x30/0x40 [ 623.342107][T17065] dump_stack_lvl+0xf4/0x15c [ 623.343044][T17065] dump_stack+0x1c/0x5c [ 623.343945][T17065] should_fail_ex+0x3cc/0x524 [ 623.344940][T17065] should_fail+0x14/0x24 [ 623.345814][T17065] get_futex_key+0x904/0xfb0 [ 623.346739][T17065] futex_wait_setup+0xbc/0x320 [ 623.347686][T17065] futex_wait+0x164/0x424 [ 623.348553][T17065] do_futex+0x2e8/0x340 [ 623.349362][T17065] __arm64_sys_futex+0x390/0x414 [ 623.350360][T17065] invoke_syscall+0x98/0x290 [ 623.351295][T17065] el0_svc_common+0x13c/0x258 [ 623.352302][T17065] do_el0_svc+0x5c/0x134 [ 623.353215][T17065] el0_svc+0x58/0x128 [ 623.354054][T17065] el0t_64_sync_handler+0x84/0xf0 [ 623.355098][T17065] el0t_64_sync+0x18c/0x190 [ 624.010240][T17067] FAULT_INJECTION: forcing a failure. [ 624.010240][T17067] name fail_futex, interval 1, probability 0, space 0, times 0 [ 624.029607][T17067] CPU: 0 PID: 17067 Comm: syz.2.3464 Not tainted syzkaller #0 [ 624.031039][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 624.032836][T17067] Call trace: [ 624.033448][T17067] dump_backtrace+0x1c4/0x1f0 [ 624.034310][T17067] show_stack+0x2c/0x3c [ 624.035086][T17067] __dump_stack+0x30/0x40 [ 624.035876][T17067] dump_stack_lvl+0xf4/0x15c [ 624.036716][T17067] dump_stack+0x1c/0x5c [ 624.037494][T17067] should_fail_ex+0x3cc/0x524 [ 624.038380][T17067] should_fail+0x14/0x24 [ 624.039258][T17067] get_futex_key+0x904/0xfb0 [ 624.040107][T17067] futex_wake+0x10c/0x458 [ 624.040913][T17067] do_futex+0x2c4/0x340 [ 624.041682][T17067] __arm64_sys_futex+0x390/0x414 [ 624.042604][T17067] invoke_syscall+0x98/0x290 [ 624.043558][T17067] el0_svc_common+0x13c/0x258 [ 624.044493][T17067] do_el0_svc+0x5c/0x134 [ 624.045300][T17067] el0_svc+0x58/0x128 [ 624.046037][T17067] el0t_64_sync_handler+0x84/0xf0 [ 624.047072][T17067] el0t_64_sync+0x18c/0x190 [ 624.170797][T17074] loop2: detected capacity change from 0 to 7 [ 624.173587][T17074] Dev loop2: unable to read RDB block 7 [ 624.174719][T17074] loop2: unable to read partition table [ 624.176097][T17074] loop2: partition table beyond EOD, truncated [ 624.177284][T17074] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.640628][ T3939] Dev loop2: unable to read RDB block 7 [ 624.643699][ T3939] loop2: unable to read partition table [ 624.644955][ T3939] loop2: partition table beyond EOD, truncated [ 625.301847][T17093] loop3: detected capacity change from 0 to 512 [ 625.416282][T17093] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3469: iget: checksum invalid [ 625.419133][T17093] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3469: Bad quota inode: 4, type: 1 [ 625.421614][T17093] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 625.424779][T17093] EXT4-fs (loop3): mount failed [ 625.488023][T17103] device syzkaller0 entered promiscuous mode [ 625.493113][T17103] tipc: Enabled bearer , priority 0 [ 625.498583][T17103] tipc: Resetting bearer [ 625.501057][T17101] tipc: Resetting bearer [ 625.807918][ T8673] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 626.940648][T17112] loop2: detected capacity change from 0 to 512 [ 627.025876][T17101] tipc: Disabling bearer [ 627.078009][T17112] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3475: iget: checksum invalid [ 627.080320][T17112] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3475: Bad quota inode: 4, type: 1 [ 627.085851][T14724] tipc: Node number set to 2334463036 [ 627.092258][T17112] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 627.095196][T17112] EXT4-fs (loop2): mount failed [ 627.113639][T17124] FAULT_INJECTION: forcing a failure. [ 627.113639][T17124] name fail_futex, interval 1, probability 0, space 0, times 0 [ 627.115789][T17124] CPU: 1 PID: 17124 Comm: syz.3.3479 Not tainted syzkaller #0 [ 627.117048][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 627.118743][T17124] Call trace: [ 627.119272][T17124] dump_backtrace+0x1c4/0x1f0 [ 627.120026][T17124] show_stack+0x2c/0x3c [ 627.120701][T17124] __dump_stack+0x30/0x40 [ 627.121420][T17124] dump_stack_lvl+0xf4/0x15c [ 627.122254][T17124] dump_stack+0x1c/0x5c [ 627.123005][T17124] should_fail_ex+0x3cc/0x524 [ 627.123842][T17124] should_fail+0x14/0x24 [ 627.124601][T17124] get_futex_key+0x904/0xfb0 [ 627.125424][T17124] futex_wake+0x10c/0x458 [ 627.126242][T17124] do_futex+0x2c4/0x340 [ 627.126994][T17124] __arm64_sys_futex+0x390/0x414 [ 627.127859][T17124] invoke_syscall+0x98/0x290 [ 627.128712][T17124] el0_svc_common+0x13c/0x258 [ 627.129585][T17124] do_el0_svc+0x5c/0x134 [ 627.130370][T17124] el0_svc+0x58/0x128 [ 627.131111][T17124] el0t_64_sync_handler+0x84/0xf0 [ 627.132017][T17124] el0t_64_sync+0x18c/0x190 [ 628.622133][T17131] FAULT_INJECTION: forcing a failure. [ 628.622133][T17131] name fail_futex, interval 1, probability 0, space 0, times 0 [ 628.624516][T17131] CPU: 0 PID: 17131 Comm: syz.5.3478 Not tainted syzkaller #0 [ 628.625861][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 628.627613][T17131] Call trace: [ 628.628147][T17131] dump_backtrace+0x1c4/0x1f0 [ 628.628902][T17131] show_stack+0x2c/0x3c [ 628.629637][T17131] __dump_stack+0x30/0x40 [ 628.630359][T17131] dump_stack_lvl+0xf4/0x15c [ 628.631137][T17131] dump_stack+0x1c/0x5c [ 628.631831][T17131] should_fail_ex+0x3cc/0x524 [ 628.632672][T17131] should_fail+0x14/0x24 [ 628.633431][T17131] get_futex_key+0x904/0xfb0 [ 628.634306][T17131] futex_wait_setup+0xbc/0x320 [ 628.635195][T17131] futex_wait+0x164/0x424 [ 628.635940][T17131] do_futex+0x2e8/0x340 [ 628.636670][T17131] __arm64_sys_futex+0x390/0x414 [ 628.637536][T17131] invoke_syscall+0x98/0x290 [ 628.638370][T17131] el0_svc_common+0x13c/0x258 [ 628.639241][T17131] do_el0_svc+0x5c/0x134 [ 628.639987][T17131] el0_svc+0x58/0x128 [ 628.640743][T17131] el0t_64_sync_handler+0x84/0xf0 [ 628.641685][T17131] el0t_64_sync+0x18c/0x190 [ 629.467564][T17150] loop4: detected capacity change from 0 to 512 [ 629.498203][T17150] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3480: iget: checksum invalid [ 629.500839][T17150] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3480: Bad quota inode: 4, type: 1 [ 629.504394][T17150] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 629.693542][T17155] loop3: detected capacity change from 0 to 512 [ 629.729476][T17150] EXT4-fs (loop4): mount failed [ 629.757868][T17155] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3485: iget: checksum invalid [ 629.760326][T17155] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3485: Bad quota inode: 4, type: 1 [ 629.763686][T17155] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 629.766779][T17155] EXT4-fs (loop3): mount failed [ 631.090336][T17178] device syzkaller0 entered promiscuous mode [ 631.093983][T17178] tipc: Enabled bearer , priority 0 [ 631.099262][T17178] tipc: Resetting bearer [ 631.105868][T17172] tipc: Resetting bearer [ 631.363068][T17182] loop2: detected capacity change from 0 to 512 [ 631.668006][T17189] FAULT_INJECTION: forcing a failure. [ 631.668006][T17189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.670427][T17189] CPU: 0 PID: 17189 Comm: syz.4.3495 Not tainted syzkaller #0 [ 631.671710][T17189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 631.673554][T17189] Call trace: [ 631.674198][T17189] dump_backtrace+0x1c4/0x1f0 [ 631.675099][T17189] show_stack+0x2c/0x3c [ 631.675901][T17189] __dump_stack+0x30/0x40 [ 631.676737][T17189] dump_stack_lvl+0xf4/0x15c [ 631.677568][T17189] dump_stack+0x1c/0x5c [ 631.678342][T17189] should_fail_ex+0x3cc/0x524 [ 631.679236][T17189] should_fail+0x14/0x24 [ 631.680047][T17189] should_fail_usercopy+0x20/0x30 [ 631.680962][T17189] simple_read_from_buffer+0xcc/0x238 [ 631.682047][T17189] proc_fail_nth_read+0x19c/0x23c [ 631.682999][T17189] vfs_read+0x2a4/0x7b8 [ 631.683777][T17189] ksys_read+0x12c/0x228 [ 631.684591][T17189] __arm64_sys_read+0x7c/0x90 [ 631.685437][T17189] invoke_syscall+0x98/0x290 [ 631.686288][T17189] el0_svc_common+0x13c/0x258 [ 631.687130][T17189] do_el0_svc+0x5c/0x134 [ 631.687928][T17189] el0_svc+0x58/0x128 [ 631.688678][T17189] el0t_64_sync_handler+0x84/0xf0 [ 631.689604][T17189] el0t_64_sync+0x18c/0x190 [ 631.707214][T17172] tipc: Disabling bearer [ 631.711481][T17182] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3492: iget: checksum invalid [ 631.715614][T17182] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3492: Bad quota inode: 4, type: 1 [ 631.717941][T17182] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 631.720760][T17182] EXT4-fs (loop2): mount failed [ 633.696889][T17199] FAULT_INJECTION: forcing a failure. [ 633.696889][T17199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 633.698988][T17199] CPU: 1 PID: 17199 Comm: syz.4.3496 Not tainted syzkaller #0 [ 633.700241][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 633.701927][T17199] Call trace: [ 633.702556][T17199] dump_backtrace+0x1c4/0x1f0 [ 633.703426][T17199] show_stack+0x2c/0x3c [ 633.704205][T17199] __dump_stack+0x30/0x40 [ 633.705067][T17199] dump_stack_lvl+0xf4/0x15c [ 633.705899][T17199] dump_stack+0x1c/0x5c [ 633.706635][T17199] should_fail_ex+0x3cc/0x524 [ 633.707518][T17199] should_fail+0x14/0x24 [ 633.708320][T17199] get_futex_key+0x904/0xfb0 [ 633.709180][T17199] futex_wait_setup+0xbc/0x320 [ 633.710043][T17199] futex_wait+0x164/0x424 [ 633.710850][T17199] do_futex+0x2e8/0x340 [ 633.711619][T17199] __arm64_sys_futex+0x390/0x414 [ 633.712546][T17199] invoke_syscall+0x98/0x290 [ 633.713411][T17199] el0_svc_common+0x13c/0x258 [ 633.714308][T17199] do_el0_svc+0x5c/0x134 [ 633.715056][T17199] el0_svc+0x58/0x128 [ 633.715759][T17199] el0t_64_sync_handler+0x84/0xf0 [ 633.716644][T17199] el0t_64_sync+0x18c/0x190 [ 633.909540][T17208] loop2: detected capacity change from 0 to 7 [ 633.912652][T17208] Dev loop2: unable to read RDB block 7 [ 633.913829][T17208] loop2: unable to read partition table [ 634.051421][T17208] loop2: partition table beyond EOD, truncated [ 634.053102][T17208] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 634.387778][ T3939] Dev loop2: unable to read RDB block 7 [ 634.389017][ T3939] loop2: unable to read partition table [ 634.390170][ T3939] loop2: partition table beyond EOD, truncated [ 634.674069][T17218] loop2: detected capacity change from 0 to 512 [ 635.088618][T17218] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3501: iget: checksum invalid [ 635.090998][T17218] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3501: Bad quota inode: 4, type: 1 [ 635.093807][T17218] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 635.102027][T17218] EXT4-fs (loop2): mount failed [ 635.513344][T17233] loop5: detected capacity change from 0 to 512 [ 635.649490][T17233] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3513: iget: checksum invalid [ 635.660016][T17233] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3513: Bad quota inode: 4, type: 1 [ 635.662531][T17233] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 635.665669][T17233] EXT4-fs (loop5): mount failed [ 635.806881][T17243] FAULT_INJECTION: forcing a failure. [ 635.806881][T17243] name fail_futex, interval 1, probability 0, space 0, times 0 [ 635.809476][T17243] CPU: 0 PID: 17243 Comm: syz.2.3507 Not tainted syzkaller #0 [ 635.810884][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 635.812924][T17243] Call trace: [ 635.813495][T17243] dump_backtrace+0x1c4/0x1f0 [ 635.814341][T17243] show_stack+0x2c/0x3c [ 635.815113][T17243] __dump_stack+0x30/0x40 [ 635.815882][T17243] dump_stack_lvl+0xf4/0x15c [ 635.816770][T17243] dump_stack+0x1c/0x5c [ 635.817534][T17243] should_fail_ex+0x3cc/0x524 [ 635.818404][T17243] should_fail+0x14/0x24 [ 635.819154][T17243] get_futex_key+0x904/0xfb0 [ 635.819987][T17243] futex_wake+0x10c/0x458 [ 635.820762][T17243] do_futex+0x2c4/0x340 [ 635.821526][T17243] __arm64_sys_futex+0x390/0x414 [ 635.822429][T17243] invoke_syscall+0x98/0x290 [ 635.823254][T17243] el0_svc_common+0x13c/0x258 [ 635.824104][T17243] do_el0_svc+0x5c/0x134 [ 635.824878][T17243] el0_svc+0x58/0x128 [ 635.825621][T17243] el0t_64_sync_handler+0x84/0xf0 [ 635.826540][T17243] el0t_64_sync+0x18c/0x190 [ 636.299233][T17248] tipc: Enabled bearer , priority 0 [ 636.310883][T17248] tipc: Resetting bearer [ 636.320733][T17250] loop6: detected capacity change from 0 to 512 [ 637.348531][T17250] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3503: iget: checksum invalid [ 637.358639][T17250] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3503: Bad quota inode: 4, type: 1 [ 637.375423][T17250] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 637.378489][T17250] EXT4-fs (loop6): mount failed [ 637.382740][T17245] tipc: Disabling bearer [ 637.455852][ T4376] tipc: Node number set to 1019627958 [ 637.896227][T17269] FAULT_INJECTION: forcing a failure. [ 637.896227][T17269] name fail_futex, interval 1, probability 0, space 0, times 0 [ 637.898447][T17269] CPU: 1 PID: 17269 Comm: syz.4.3512 Not tainted syzkaller #0 [ 637.899635][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 637.901188][T17269] Call trace: [ 637.901740][T17269] dump_backtrace+0x1c4/0x1f0 [ 637.902644][T17269] show_stack+0x2c/0x3c [ 637.903458][T17269] __dump_stack+0x30/0x40 [ 637.904292][T17269] dump_stack_lvl+0xf4/0x15c [ 637.905162][T17269] dump_stack+0x1c/0x5c [ 637.905944][T17269] should_fail_ex+0x3cc/0x524 [ 637.906828][T17269] should_fail+0x14/0x24 [ 637.907681][T17269] get_futex_key+0x904/0xfb0 [ 637.908577][T17269] futex_wait_setup+0xbc/0x320 [ 637.909499][T17269] futex_wait+0x164/0x424 [ 637.910286][T17269] do_futex+0x2e8/0x340 [ 637.911029][T17269] __arm64_sys_futex+0x390/0x414 [ 637.911888][T17269] invoke_syscall+0x98/0x290 [ 637.912687][T17269] el0_svc_common+0x13c/0x258 [ 637.913541][T17269] do_el0_svc+0x5c/0x134 [ 637.914297][T17269] el0_svc+0x58/0x128 [ 637.915051][T17269] el0t_64_sync_handler+0x84/0xf0 [ 637.915911][T17269] el0t_64_sync+0x18c/0x190 [ 637.923565][T17270] loop2: detected capacity change from 0 to 7 [ 637.945527][T17270] Dev loop2: unable to read RDB block 7 [ 637.946960][T17270] loop2: unable to read partition table [ 637.948510][T17270] loop2: partition table beyond EOD, truncated [ 637.949811][T17270] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 639.015852][T17287] loop2: detected capacity change from 0 to 512 [ 639.260879][T17287] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3519: iget: checksum invalid [ 639.264403][T17287] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3519: Bad quota inode: 4, type: 1 [ 639.266891][T17287] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 639.270069][T17287] EXT4-fs (loop2): mount failed [ 639.414825][T17296] loop3: detected capacity change from 0 to 512 [ 639.882370][T17309] loop6: detected capacity change from 0 to 1024 [ 639.915798][T17296] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3520: iget: checksum invalid [ 639.919268][T17296] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3520: Bad quota inode: 4, type: 1 [ 639.921506][T17296] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 639.924959][T17296] EXT4-fs (loop3): mount failed [ 639.935178][T17309] hfsplus: failed to load catalog file [ 640.947468][ T7157] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 640.956598][T17321] tipc: Enabled bearer , priority 0 [ 641.044476][T17321] tipc: Resetting bearer [ 641.130048][T17324] loop2: detected capacity change from 0 to 7 [ 641.354966][T17329] xt_hashlimit: size too large, truncated to 1048576 [ 641.455129][T17324] Dev loop2: unable to read RDB block 7 [ 641.456345][T17324] loop2: unable to read partition table [ 641.457672][T17324] loop2: partition table beyond EOD, truncated [ 641.458868][T17324] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 642.152352][T17316] tipc: Disabling bearer [ 642.364854][T17340] FAULT_INJECTION: forcing a failure. [ 642.364854][T17340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 642.367457][T17340] CPU: 1 PID: 17340 Comm: syz.3.3532 Not tainted syzkaller #0 [ 642.368778][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 642.370348][T17340] Call trace: [ 642.370900][T17340] dump_backtrace+0x1c4/0x1f0 [ 642.371666][T17340] show_stack+0x2c/0x3c [ 642.372444][T17340] __dump_stack+0x30/0x40 [ 642.373259][T17340] dump_stack_lvl+0xf4/0x15c [ 642.374103][T17340] dump_stack+0x1c/0x5c [ 642.374863][T17340] should_fail_ex+0x3cc/0x524 [ 642.375724][T17340] should_fail+0x14/0x24 [ 642.376508][T17340] get_futex_key+0x904/0xfb0 [ 642.377391][T17340] futex_wait_setup+0xbc/0x320 [ 642.378300][T17340] futex_wait+0x164/0x424 [ 642.379093][T17340] do_futex+0x2e8/0x340 [ 642.379891][T17340] __arm64_sys_futex+0x390/0x414 [ 642.380773][T17340] invoke_syscall+0x98/0x290 [ 642.381631][T17340] el0_svc_common+0x13c/0x258 [ 642.382495][T17340] do_el0_svc+0x5c/0x134 [ 642.383262][T17340] el0_svc+0x58/0x128 [ 642.383995][T17340] el0t_64_sync_handler+0x84/0xf0 [ 642.384915][T17340] el0t_64_sync+0x18c/0x190 [ 642.982121][T17346] loop5: detected capacity change from 0 to 512 [ 643.259068][ T7] tipc: Node number set to 3433098533 [ 643.303978][T17346] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3533: iget: checksum invalid [ 643.306673][T17346] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3533: Bad quota inode: 4, type: 1 [ 643.309113][T17346] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 643.312411][T17346] EXT4-fs (loop5): mount failed [ 643.659305][T17357] loop2: detected capacity change from 0 to 512 [ 644.444912][T17357] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3536: iget: checksum invalid [ 644.447125][T17357] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3536: Bad quota inode: 4, type: 1 [ 644.449076][T17357] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 644.452173][T17357] EXT4-fs (loop2): mount failed [ 644.541231][T17372] loop4: detected capacity change from 0 to 512 [ 644.845021][T17372] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3539: iget: checksum invalid [ 644.847380][T17372] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3539: Bad quota inode: 4, type: 1 [ 644.849369][T17372] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 644.852345][T17372] EXT4-fs (loop4): mount failed [ 645.221774][ T7156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 645.580055][T17392] loop5: detected capacity change from 0 to 512 [ 646.021997][T17392] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3552: iget: checksum invalid [ 646.025425][T17392] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3552: Bad quota inode: 4, type: 1 [ 646.027713][T17392] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 646.031049][T17392] EXT4-fs (loop5): mount failed [ 646.242191][T17399] loop2: detected capacity change from 0 to 7 [ 646.293130][T17399] Dev loop2: unable to read RDB block 7 [ 646.294151][T17399] loop2: unable to read partition table [ 646.295099][T17399] loop2: partition table beyond EOD, truncated [ 646.296157][T17399] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 646.813807][T17415] FAULT_INJECTION: forcing a failure. [ 646.813807][T17415] name fail_futex, interval 1, probability 0, space 0, times 0 [ 646.815947][T17415] CPU: 0 PID: 17415 Comm: syz.5.3549 Not tainted syzkaller #0 [ 646.817170][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 646.818825][T17415] Call trace: [ 646.819361][T17415] dump_backtrace+0x1c4/0x1f0 [ 646.820169][T17415] show_stack+0x2c/0x3c [ 646.820861][T17415] __dump_stack+0x30/0x40 [ 646.821594][T17415] dump_stack_lvl+0xf4/0x15c [ 646.822424][T17415] dump_stack+0x1c/0x5c [ 646.823176][T17415] should_fail_ex+0x3cc/0x524 [ 646.824063][T17415] should_fail+0x14/0x24 [ 646.824872][T17415] get_futex_key+0x904/0xfb0 [ 646.825754][T17415] futex_wait_setup+0xbc/0x320 [ 646.826665][T17415] futex_wait+0x164/0x424 [ 646.827475][T17415] do_futex+0x2e8/0x340 [ 646.828258][T17415] __arm64_sys_futex+0x390/0x414 [ 646.829207][T17415] invoke_syscall+0x98/0x290 [ 646.830093][T17415] el0_svc_common+0x13c/0x258 [ 646.831034][T17415] do_el0_svc+0x5c/0x134 [ 646.831903][T17415] el0_svc+0x58/0x128 [ 646.832659][T17415] el0t_64_sync_handler+0x84/0xf0 [ 646.833637][T17415] el0t_64_sync+0x18c/0x190 [ 646.866968][T17417] loop2: detected capacity change from 0 to 512 [ 646.940716][T17421] loop4: detected capacity change from 0 to 1024 [ 646.947458][T17421] hfsplus: failed to load catalog file [ 646.987547][T17419] tipc: Enabling of bearer rejected, failed to enable media [ 647.009874][T17417] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3548: iget: checksum invalid [ 647.014646][T17417] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3548: Bad quota inode: 4, type: 1 [ 647.017080][T17417] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 647.020537][T17417] EXT4-fs (loop2): mount failed [ 647.924912][T17439] xt_hashlimit: size too large, truncated to 1048576 [ 648.827612][T17448] loop2: detected capacity change from 0 to 512 [ 648.846519][T17450] loop5: detected capacity change from 0 to 1024 [ 648.859704][T17450] hfsplus: failed to load catalog file [ 649.691332][T17458] xt_hashlimit: size too large, truncated to 1048576 [ 649.729092][T17448] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3557: iget: checksum invalid [ 649.731395][T17448] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3557: Bad quota inode: 4, type: 1 [ 649.734251][T17448] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 649.737664][T17448] EXT4-fs (loop2): mount failed [ 651.860841][T17484] loop4: detected capacity change from 0 to 512 [ 652.095319][T17484] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3563: iget: checksum invalid [ 652.104024][T17484] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3563: Bad quota inode: 4, type: 1 [ 652.108843][T17484] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 652.111932][T17484] EXT4-fs (loop4): mount failed [ 652.226072][T17495] device syzkaller0 entered promiscuous mode [ 652.373187][T17497] FAULT_INJECTION: forcing a failure. [ 652.373187][T17497] name fail_futex, interval 1, probability 0, space 0, times 0 [ 652.375435][T17497] CPU: 0 PID: 17497 Comm: syz.6.3565 Not tainted syzkaller #0 [ 652.376858][T17497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 652.378740][T17497] Call trace: [ 652.379344][T17497] dump_backtrace+0x1c4/0x1f0 [ 652.380191][T17497] show_stack+0x2c/0x3c [ 652.380928][T17497] __dump_stack+0x30/0x40 [ 652.381696][T17497] dump_stack_lvl+0xf4/0x15c [ 652.382564][T17497] dump_stack+0x1c/0x5c [ 652.383349][T17497] should_fail_ex+0x3cc/0x524 [ 652.384203][T17497] should_fail+0x14/0x24 [ 652.384973][T17497] get_futex_key+0x904/0xfb0 [ 652.385833][T17497] futex_wait_setup+0xbc/0x320 [ 652.386743][T17497] futex_wait+0x164/0x424 [ 652.387581][T17497] do_futex+0x2e8/0x340 [ 652.388379][T17497] __arm64_sys_futex+0x390/0x414 [ 652.389340][T17497] invoke_syscall+0x98/0x290 [ 652.390191][T17497] el0_svc_common+0x13c/0x258 [ 652.391098][T17497] do_el0_svc+0x5c/0x134 [ 652.391912][T17497] el0_svc+0x58/0x128 [ 652.392623][T17497] el0t_64_sync_handler+0x84/0xf0 [ 652.393530][T17497] el0t_64_sync+0x18c/0x190 [ 652.839111][T17505] loop4: detected capacity change from 0 to 512 [ 653.207843][T17505] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3567: iget: checksum invalid [ 653.210083][T17505] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3567: Bad quota inode: 4, type: 1 [ 653.215851][T17505] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 653.218980][T17505] EXT4-fs (loop4): mount failed [ 653.674850][T17515] loop5: detected capacity change from 0 to 1024 [ 653.695118][T17515] hfsplus: failed to load catalog file [ 654.168263][T17520] loop3: detected capacity change from 0 to 1024 [ 654.239430][T17526] xt_hashlimit: size too large, truncated to 1048576 [ 654.357414][T17528] loop2: detected capacity change from 0 to 512 [ 654.856880][T17520] hfsplus: failed to load catalog file [ 654.919853][T17528] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3572: iget: checksum invalid [ 654.922147][T17528] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3572: Bad quota inode: 4, type: 1 [ 654.924318][T17528] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 654.927568][T17528] EXT4-fs (loop2): mount failed [ 654.970151][ T27] audit: type=1326 audit(654.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 654.980778][ T27] audit: type=1326 audit(654.960:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 654.987993][ T27] audit: type=1326 audit(654.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 655.000302][T17533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.003016][ T27] audit: type=1326 audit(654.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 655.008890][T17533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.016885][ T27] audit: type=1326 audit(654.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 655.023690][ T27] audit: type=1326 audit(654.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff95d5c22c code=0x7ffc0000 [ 655.028076][ T27] audit: type=1326 audit(654.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff95d78f90 code=0x7ffc0000 [ 655.088986][ T27] audit: type=1326 audit(654.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff95d78f90 code=0x7ffc0000 [ 655.104055][ T27] audit: type=1326 audit(654.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 655.109482][ T27] audit: type=1326 audit(655.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.6.3573" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffff95d79368 code=0x7ffc0000 [ 655.613687][ T7156] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 655.826785][T17541] xt_hashlimit: size too large, truncated to 1048576 [ 655.937561][T17545] loop2: detected capacity change from 0 to 7 [ 656.169021][T17545] Dev loop2: unable to read RDB block 7 [ 656.170254][T17545] loop2: unable to read partition table [ 656.171412][T17545] loop2: partition table beyond EOD, truncated [ 656.172667][T17545] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 657.054176][T17557] loop2: detected capacity change from 0 to 512 [ 657.687540][T17557] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3578: iget: checksum invalid [ 657.690196][T17557] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3578: Bad quota inode: 4, type: 1 [ 657.695970][T17557] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 657.699118][T17557] EXT4-fs (loop2): mount failed [ 657.783410][T17572] loop6: detected capacity change from 0 to 512 [ 658.089901][T17572] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3582: iget: checksum invalid [ 658.097408][T17572] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3582: Bad quota inode: 4, type: 1 [ 658.099605][T17572] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 658.102955][T17572] EXT4-fs (loop6): mount failed [ 659.189006][T17579] FAULT_INJECTION: forcing a failure. [ 659.189006][T17579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 659.191376][T17579] CPU: 1 PID: 17579 Comm: syz.4.3579 Not tainted syzkaller #0 [ 659.192651][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 659.194397][T17579] Call trace: [ 659.194994][T17579] dump_backtrace+0x1c4/0x1f0 [ 659.195890][T17579] show_stack+0x2c/0x3c [ 659.196679][T17579] __dump_stack+0x30/0x40 [ 659.197441][T17579] dump_stack_lvl+0xf4/0x15c [ 659.198206][T17579] dump_stack+0x1c/0x5c [ 659.199039][T17579] should_fail_ex+0x3cc/0x524 [ 659.199933][T17579] should_fail+0x14/0x24 [ 659.200688][T17579] get_futex_key+0x904/0xfb0 [ 659.201524][T17579] futex_wait_setup+0xbc/0x320 [ 659.202408][T17579] futex_wait+0x164/0x424 [ 659.203190][T17579] do_futex+0x2e8/0x340 [ 659.203925][T17579] __arm64_sys_futex+0x390/0x414 [ 659.204841][T17579] invoke_syscall+0x98/0x290 [ 659.205705][T17579] el0_svc_common+0x13c/0x258 [ 659.206570][T17579] do_el0_svc+0x5c/0x134 [ 659.207371][T17579] el0_svc+0x58/0x128 [ 659.208075][T17579] el0t_64_sync_handler+0x84/0xf0 [ 659.208957][T17579] el0t_64_sync+0x18c/0x190 [ 659.515035][T17583] device syzkaller0 entered promiscuous mode [ 659.867897][T17588] loop6: detected capacity change from 0 to 512 [ 660.171305][T17595] loop3: detected capacity change from 0 to 512 [ 660.392218][T17588] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3595: iget: checksum invalid [ 660.393851][T17595] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3586: iget: checksum invalid [ 660.396646][T17595] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3586: Bad quota inode: 4, type: 1 [ 660.396674][T17588] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3595: Bad quota inode: 4, type: 1 [ 660.402274][T17595] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 660.406778][T17588] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 660.417796][T17595] EXT4-fs (loop3): mount failed [ 660.438531][T17588] EXT4-fs (loop6): mount failed [ 660.439676][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 660.439684][ T27] audit: type=1326 audit(660.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.450162][ T27] audit: type=1326 audit(660.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.459134][ T27] audit: type=1326 audit(660.440:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.466682][T17602] loop5: detected capacity change from 0 to 1024 [ 660.467041][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.471278][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.474376][T17602] hfsplus: failed to load catalog file [ 660.478710][ T27] audit: type=1326 audit(660.440:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.497599][ T27] audit: type=1326 audit(660.440:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.502688][ T27] audit: type=1326 audit(660.440:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.507208][ T27] audit: type=1326 audit(660.440:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.512618][ T27] audit: type=1326 audit(660.450:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d979368 code=0x7ffc0000 [ 660.517340][ T27] audit: type=1326 audit(660.450:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9d95c22c code=0x7ffc0000 [ 660.522220][ T27] audit: type=1326 audit(660.450:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.4.3588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9d978f90 code=0x7ffc0000 [ 660.983445][T17614] loop2: detected capacity change from 0 to 7 [ 661.161031][T17616] xt_hashlimit: size too large, truncated to 1048576 [ 661.209482][T17614] Dev loop2: unable to read RDB block 7 [ 661.210680][T17614] loop2: unable to read partition table [ 661.211825][T17614] loop2: partition table beyond EOD, truncated [ 661.212850][T17614] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 661.515073][T17619] loop3: detected capacity change from 0 to 1024 [ 661.527470][T17619] hfsplus: failed to load catalog file [ 662.917511][T17628] xt_hashlimit: size too large, truncated to 1048576 [ 663.038237][T17635] loop2: detected capacity change from 0 to 1024 [ 663.042096][T17635] hfsplus: failed to load catalog file [ 663.543301][T17645] loop6: detected capacity change from 0 to 512 [ 663.836259][ T7157] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 663.992778][T17651] FAULT_INJECTION: forcing a failure. [ 663.992778][T17651] name fail_futex, interval 1, probability 0, space 0, times 0 [ 663.994994][T17651] CPU: 1 PID: 17651 Comm: syz.4.3599 Not tainted syzkaller #0 [ 663.996286][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 663.997712][T17651] Call trace: [ 663.998227][T17651] dump_backtrace+0x1c4/0x1f0 [ 663.998961][T17651] show_stack+0x2c/0x3c [ 663.999602][T17651] __dump_stack+0x30/0x40 [ 664.000256][T17651] dump_stack_lvl+0xf4/0x15c [ 664.000973][T17651] dump_stack+0x1c/0x5c [ 664.001653][T17651] should_fail_ex+0x3cc/0x524 [ 664.002484][T17651] should_fail+0x14/0x24 [ 664.003232][T17651] get_futex_key+0x904/0xfb0 [ 664.004072][T17651] futex_wait_setup+0xbc/0x320 [ 664.004941][T17651] futex_wait+0x164/0x424 [ 664.005737][T17651] do_futex+0x2e8/0x340 [ 664.006507][T17651] __arm64_sys_futex+0x390/0x414 [ 664.007417][T17651] invoke_syscall+0x98/0x290 [ 664.008244][T17651] el0_svc_common+0x13c/0x258 [ 664.009098][T17651] do_el0_svc+0x5c/0x134 [ 664.009886][T17651] el0_svc+0x58/0x128 [ 664.010648][T17651] el0t_64_sync_handler+0x84/0xf0 [ 664.011481][T17651] el0t_64_sync+0x18c/0x190 [ 664.345287][T17645] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3596: iget: checksum invalid [ 664.355186][T17645] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3596: Bad quota inode: 4, type: 1 [ 665.051595][T17654] xt_hashlimit: size too large, truncated to 1048576 [ 665.190169][T17645] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 665.194204][T17645] EXT4-fs (loop6): mount failed [ 665.209473][T17658] device syzkaller0 entered promiscuous mode [ 665.733442][T17667] loop4: detected capacity change from 0 to 512 [ 665.923435][ T4344] Bluetooth: hci6: command 0x0406 tx timeout [ 665.924799][ T4344] Bluetooth: hci5: command 0x0406 tx timeout [ 665.933848][T17667] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3602: iget: checksum invalid [ 665.937055][T17667] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3602: Bad quota inode: 4, type: 1 [ 665.939910][T17667] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 665.943223][T17667] EXT4-fs (loop4): mount failed [ 666.154859][T17673] loop6: detected capacity change from 0 to 512 [ 666.923378][T17682] loop2: detected capacity change from 0 to 7 [ 667.162471][T17682] Dev loop2: unable to read RDB block 7 [ 667.163645][T17682] loop2: unable to read partition table [ 667.164783][T17682] loop2: partition table beyond EOD, truncated [ 667.165944][T17682] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.191189][T17673] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3603: iget: checksum invalid [ 667.193700][T17673] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3603: Bad quota inode: 4, type: 1 [ 667.195748][T17673] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 667.199070][T17673] EXT4-fs (loop6): mount failed [ 667.346199][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 667.346209][ T27] audit: type=1326 audit(667.330:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.434243][ T27] audit: type=1326 audit(667.420:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.779096][ T27] audit: type=1326 audit(667.760:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.780026][T17696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.785994][ T27] audit: type=1326 audit(667.760:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.804491][T17696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.839919][T17697] loop6: detected capacity change from 0 to 1024 [ 667.847817][T17697] hfsplus: failed to load catalog file [ 667.870626][ T27] audit: type=1326 audit(667.850:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.875850][ T27] audit: type=1326 audit(667.850:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.892625][ T8673] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 667.897650][ T27] audit: type=1326 audit(667.850:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.971290][ T27] audit: type=1326 audit(667.850:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.985447][ T27] audit: type=1326 audit(667.850:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 667.990014][ T27] audit: type=1326 audit(667.850:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.3606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7179368 code=0x7ffc0000 [ 668.247807][T17699] xt_hashlimit: size too large, truncated to 1048576 [ 668.534733][T17706] loop3: detected capacity change from 0 to 1024 [ 668.545331][T17706] hfsplus: failed to load catalog file [ 670.279463][T17713] FAULT_INJECTION: forcing a failure. [ 670.279463][T17713] name fail_futex, interval 1, probability 0, space 0, times 0 [ 670.281852][T17713] CPU: 1 PID: 17713 Comm: syz.2.3613 Not tainted syzkaller #0 [ 670.283099][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 670.284758][T17713] Call trace: [ 670.285307][T17713] dump_backtrace+0x1c4/0x1f0 [ 670.286111][T17713] show_stack+0x2c/0x3c [ 670.286815][T17713] __dump_stack+0x30/0x40 [ 670.287564][T17713] dump_stack_lvl+0xf4/0x15c [ 670.288384][T17713] dump_stack+0x1c/0x5c [ 670.289094][T17713] should_fail_ex+0x3cc/0x524 [ 670.289879][T17713] should_fail+0x14/0x24 [ 670.290581][T17713] get_futex_key+0x904/0xfb0 [ 670.291360][T17713] futex_wait_setup+0xbc/0x320 [ 670.292230][T17713] futex_wait+0x164/0x424 [ 670.293017][T17713] do_futex+0x2e8/0x340 [ 670.293774][T17713] __arm64_sys_futex+0x390/0x414 [ 670.294683][T17713] invoke_syscall+0x98/0x290 [ 670.295535][T17713] el0_svc_common+0x13c/0x258 [ 670.296397][T17713] do_el0_svc+0x5c/0x134 [ 670.297187][T17713] el0_svc+0x58/0x128 [ 670.297968][T17713] el0t_64_sync_handler+0x84/0xf0 [ 670.298923][T17713] el0t_64_sync+0x18c/0x190 [ 670.419921][ T7156] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 671.385009][T17719] xt_hashlimit: size too large, truncated to 1048576 [ 671.620288][T17726] loop5: detected capacity change from 0 to 512 [ 671.649067][T17727] loop4: detected capacity change from 0 to 512 [ 671.856902][T17726] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3615: iget: checksum invalid [ 671.860437][T17726] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3615: Bad quota inode: 4, type: 1 [ 671.868856][T17733] device syzkaller0 entered promiscuous mode [ 671.870490][T17726] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 671.873868][T17726] EXT4-fs (loop5): mount failed [ 671.898185][T17735] loop6: detected capacity change from 0 to 1024 [ 671.916203][T17735] hfsplus: failed to load catalog file [ 671.945425][T17727] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.3614: iget: checksum invalid [ 671.947864][T17727] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.3614: Bad quota inode: 4, type: 1 [ 671.950344][T17727] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 671.953696][T17727] EXT4-fs (loop4): mount failed [ 672.411821][ T4344] Bluetooth: hci7: command 0x0406 tx timeout [ 672.715454][ T8674] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.821670][T17741] loop2: detected capacity change from 0 to 7 [ 672.950489][T17741] Dev loop2: unable to read RDB block 7 [ 672.951857][T17741] loop2: unable to read partition table [ 672.953319][T17741] loop2: partition table beyond EOD, truncated [ 672.954510][T17741] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 673.031354][T17743] xt_hashlimit: size too large, truncated to 1048576 [ 673.074664][ T3939] Dev loop2: unable to read RDB block 7 [ 673.077209][ T3939] loop2: unable to read partition table [ 673.082297][ T3939] loop2: partition table beyond EOD, truncated [ 673.550630][T17750] loop2: detected capacity change from 0 to 512 [ 673.737493][T17750] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3620: iget: checksum invalid [ 673.740032][T17750] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3620: Bad quota inode: 4, type: 1 [ 673.742926][T17750] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 673.746442][T17750] EXT4-fs (loop2): mount failed [ 676.492829][T17777] FAULT_INJECTION: forcing a failure. [ 676.492829][T17777] name fail_futex, interval 1, probability 0, space 0, times 0 [ 676.495290][T17777] CPU: 0 PID: 17777 Comm: syz.2.3628 Not tainted syzkaller #0 [ 676.496674][T17777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 676.498421][T17777] Call trace: [ 676.498995][T17777] dump_backtrace+0x1c4/0x1f0 [ 676.499834][T17777] show_stack+0x2c/0x3c [ 676.500560][T17777] __dump_stack+0x30/0x40 [ 676.501337][T17777] dump_stack_lvl+0xf4/0x15c [ 676.502181][T17777] dump_stack+0x1c/0x5c [ 676.502926][T17777] should_fail_ex+0x3cc/0x524 [ 676.503807][T17777] should_fail+0x14/0x24 [ 676.504605][T17777] get_futex_key+0x904/0xfb0 [ 676.505477][T17777] futex_wait_setup+0xbc/0x320 [ 676.506377][T17777] futex_wait+0x164/0x424 [ 676.507227][T17777] do_futex+0x2e8/0x340 [ 676.508010][T17777] __arm64_sys_futex+0x390/0x414 [ 676.508943][T17777] invoke_syscall+0x98/0x290 [ 676.509786][T17777] el0_svc_common+0x13c/0x258 [ 676.510654][T17777] do_el0_svc+0x5c/0x134 [ 676.511438][T17777] el0_svc+0x58/0x128 [ 676.512172][T17777] el0t_64_sync_handler+0x84/0xf0 [ 676.513175][T17777] el0t_64_sync+0x18c/0x190 [ 676.885613][T17780] loop3: detected capacity change from 0 to 1024 [ 676.888905][T17781] loop4: detected capacity change from 0 to 1024 [ 676.900792][T17780] hfsplus: failed to load catalog file [ 676.920834][T17781] hfsplus: failed to load catalog file [ 676.945234][T17783] device syzkaller0 entered promiscuous mode [ 677.128175][T17785] xt_hashlimit: size too large, truncated to 1048576 [ 677.988347][T17788] xt_hashlimit: size too large, truncated to 1048576 [ 678.376492][T17794] loop6: detected capacity change from 0 to 512 [ 678.436143][T17795] loop2: detected capacity change from 0 to 512 [ 679.431255][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.432675][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.874967][T17795] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.3633: iget: checksum invalid [ 679.874969][T17794] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3632: iget: checksum invalid [ 679.875259][T17794] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3632: Bad quota inode: 4, type: 1 [ 679.877262][T17795] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3633: Bad quota inode: 4, type: 1 [ 679.881440][T17794] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 679.884148][T17795] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 679.885880][T17794] EXT4-fs (loop6): mount failed [ 679.888063][T17795] EXT4-fs (loop2): mount failed [ 680.141967][T17815] loop5: detected capacity change from 0 to 512 [ 680.361237][T17815] EXT4-fs error (device loop5): ext4_quota_enable:7049: inode #4: comm syz.5.3636: iget: checksum invalid [ 680.364387][T17815] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.3636: Bad quota inode: 4, type: 1 [ 680.367424][T17815] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 680.370620][T17815] EXT4-fs (loop5): mount failed [ 680.383844][ T8673] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 681.481561][ T7157] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 681.542399][T17839] loop3: detected capacity change from 0 to 1024 [ 681.545653][ T4344] Bluetooth: hci0: command 0x0406 tx timeout [ 681.581499][T17839] hfsplus: failed to load catalog file [ 681.608395][T17844] loop2: detected capacity change from 0 to 1024 [ 681.632383][T17844] hfsplus: failed to load catalog file [ 681.654702][ T8673] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 681.743714][T17848] FAULT_INJECTION: forcing a failure. [ 681.743714][T17848] name fail_futex, interval 1, probability 0, space 0, times 0 [ 681.745926][T17848] CPU: 0 PID: 17848 Comm: syz.6.3644 Not tainted syzkaller #0 [ 681.747334][T17848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 681.749160][T17848] Call trace: [ 681.749768][T17848] dump_backtrace+0x1c4/0x1f0 [ 681.750575][T17848] show_stack+0x2c/0x3c [ 681.751289][T17848] __dump_stack+0x30/0x40 [ 681.752056][T17848] dump_stack_lvl+0xf4/0x15c [ 681.752908][T17848] dump_stack+0x1c/0x5c [ 681.753673][T17848] should_fail_ex+0x3cc/0x524 [ 681.754568][T17848] should_fail+0x14/0x24 [ 681.755392][T17848] get_futex_key+0x904/0xfb0 [ 681.756246][T17848] futex_wait_setup+0xbc/0x320 [ 681.757156][T17848] futex_wait+0x164/0x424 [ 681.757940][T17848] do_futex+0x2e8/0x340 [ 681.758816][T17848] __arm64_sys_futex+0x390/0x414 [ 681.759873][T17848] invoke_syscall+0x98/0x290 [ 681.760712][T17848] el0_svc_common+0x13c/0x258 [ 681.761567][T17848] do_el0_svc+0x5c/0x134 [ 681.762329][T17848] el0_svc+0x58/0x128 [ 681.763036][T17848] el0t_64_sync_handler+0x84/0xf0 [ 681.763945][T17848] el0t_64_sync+0x18c/0x190 [ 682.009321][T17850] xt_hashlimit: size too large, truncated to 1048576 [ 682.363522][ T7157] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.498716][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.500520][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.488110][T17861] device syzkaller0 entered promiscuous mode [ 683.595689][T17857] xt_hashlimit: size too large, truncated to 1048576 [ 683.607554][T17864] gadgetfs expected dummy_udc controller not usbip-vudc [ 683.608855][T17864] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 683.610693][T17864] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 684.085280][T17869] loop3: detected capacity change from 0 to 512 [ 684.537730][T17875] loop2: detected capacity change from 0 to 7 [ 684.845716][T17869] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.3649: iget: checksum invalid [ 684.848464][T17869] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.3649: Bad quota inode: 4, type: 1 [ 684.850973][T17869] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 684.853994][T17869] EXT4-fs (loop3): mount failed [ 685.463469][T17875] Dev loop2: unable to read RDB block 7 [ 685.464490][T17875] loop2: unable to read partition table [ 685.465596][T17875] loop2: partition table beyond EOD, truncated [ 685.466728][T17875] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 685.919150][T17887] loop2: detected capacity change from 0 to 1024 [ 686.060910][T17887] hfsplus: failed to load catalog file [ 687.103939][T17890] loop6: detected capacity change from 0 to 512 [ 687.166016][T17890] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.3656: iget: checksum invalid [ 687.168462][T17890] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.3656: Bad quota inode: 4, type: 1 [ 687.170637][T17890] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 687.174182][T17890] EXT4-fs (loop6): mount failed [ 687.246307][T17904] xt_hashlimit: size too large, truncated to 1048576 [ 687.792977][T17911] FAULT_INJECTION: forcing a failure. [ 687.792977][T17911] name fail_futex, interval 1, probability 0, space 0, times 0 [ 687.795138][T17911] CPU: 0 PID: 17911 Comm: syz.5.3659 Not tainted syzkaller #0 [ 687.796315][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 687.797945][T17911] Call trace: [ 687.798495][T17911] dump_backtrace+0x1c4/0x1f0 [ 687.799302][T17911] show_stack+0x2c/0x3c [ 687.800020][T17911] __dump_stack+0x30/0x40 [ 687.800759][T17911] dump_stack_lvl+0xf4/0x15c [ 687.801508][T17911] dump_stack+0x1c/0x5c [ 687.802293][T17911] should_fail_ex+0x3cc/0x524 [ 687.803174][T17911] should_fail+0x14/0x24 [ 687.803966][T17911] get_futex_key+0x904/0xfb0 [ 687.804846][T17911] futex_wait_setup+0xbc/0x320 [ 687.805761][T17911] futex_wait+0x164/0x424 [ 687.806594][T17911] do_futex+0x2e8/0x340 [ 687.807395][T17911] __arm64_sys_futex+0x390/0x414 [ 687.808344][T17911] invoke_syscall+0x98/0x290 [ 687.809226][T17911] el0_svc_common+0x13c/0x258 [ 687.810072][T17911] do_el0_svc+0x5c/0x134 [ 687.810838][T17911] el0_svc+0x58/0x128 [ 687.811576][T17911] el0t_64_sync_handler+0x84/0xf0 [ 687.812499][T17911] el0t_64_sync+0x18c/0x190 [ 688.491777][ T28] INFO: task syz.0.2716:14345 blocked for more than 143 seconds. [ 688.493193][ T28] Not tainted syzkaller #0 [ 688.494179][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.495695][ T28] task:syz.0.2716 state:D stack:0 pid:14345 ppid:4338 flags:0x00000001 [ 688.497209][ T28] Call trace: [ 688.497754][ T28] __switch_to+0x2f4/0x550 [ 688.498531][ T28] __schedule+0xdb4/0x1a6c [ 688.499287][ T28] schedule+0xc4/0x170 [ 688.499983][ T28] schedule_preempt_disabled+0x18/0x2c [ 688.500950][ T28] __mutex_lock_common+0xb20/0x1f3c [ 688.511870][ T28] mutex_lock_nested+0x38/0x44 [ 688.513044][ T28] write_ports+0xbc/0x9f0 [ 688.513925][ T28] nfsctl_transaction_write+0x114/0x164 [ 688.514844][ T28] vfs_write+0x2a8/0x7c8 [ 688.515535][ T28] ksys_write+0x12c/0x228 [ 688.516244][ T28] __arm64_sys_write+0x7c/0x90 [ 688.516992][ T28] invoke_syscall+0x98/0x290 [ 688.517754][ T28] el0_svc_common+0x13c/0x258 [ 688.518551][ T28] do_el0_svc+0x5c/0x134 [ 688.519278][ T28] el0_svc+0x58/0x128 [ 688.520047][ T28] el0t_64_sync_handler+0x84/0xf0 [ 688.520980][ T28] el0t_64_sync+0x18c/0x190 [ 688.539452][ T28] [ 688.539452][ T28] Showing all locks held in the system: [ 688.546161][ T28] 1 lock held by rcu_tasks_kthre/12: [ 688.547055][ T28] #0: ffff800015597db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 688.552998][ T28] 1 lock held by rcu_tasks_trace/13: [ 688.553855][ T28] #0: ffff8000155985d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 688.559627][ T28] 1 lock held by khungtaskd/28: [ 688.560501][ T28] #0: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 688.568921][ T28] 2 locks held by getty/4084: [ 688.569799][ T28] #0: ffff0000d62f5098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 688.575098][ T28] #1: ffff800020b1b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 688.579311][ T28] 3 locks held by kworker/u4:12/4584: [ 688.580269][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 688.588961][ T28] #1: ffff800021707c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 688.593249][ T28] #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 688.595966][ T28] 3 locks held by syz.1.2703/14308: [ 688.596894][ T28] #0: ffff0000f60ccd68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 688.604796][ T28] #1: ffff0000dbe62460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 688.608849][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 688.614482][ T28] 3 locks held by syz.0.2716/14345: [ 688.615341][ T28] #0: ffff0000d96cc868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 688.619311][ T28] #1: ffff0001019e2460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 688.626269][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 688.630074][ T28] 1 lock held by syz.3.3660/17910: [ 688.630932][ T28] #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 688.636520][ T28] [ 688.636948][ T28] ============================================= [ 688.636948][ T28] [ 688.640819][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 688.642072][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 688.643497][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 688.645461][ T28] Call trace: [ 688.646099][ T28] dump_backtrace+0x1c4/0x1f0 [ 688.647019][ T28] show_stack+0x2c/0x3c [ 688.647882][ T28] __dump_stack+0x30/0x40 [ 688.648748][ T28] dump_stack_lvl+0xf4/0x15c [ 688.649583][ T28] dump_stack+0x1c/0x5c [ 688.650324][ T28] panic+0x2f8/0x7ac [ 688.651029][ T28] hung_task_panic+0x0/0x2c [ 688.651846][ T28] kthread+0x254/0x2e0 [ 688.652598][ T28] ret_from_fork+0x10/0x20 [ 688.653403][ T28] SMP: stopping secondary CPUs [ 688.654274][ T28] Kernel Offset: disabled [ 688.655060][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 688.656117][ T28] Memory Limit: none [ 689.010774][ T28] Rebooting in 86400 seconds..