last executing test programs: 5.57488334s ago: executing program 2 (id=2027): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) syz_io_uring_setup(0x495, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 5.456275759s ago: executing program 2 (id=2032): io_destroy(0x0) io_setup(0xffff, &(0x7f0000000000)=0x0) io_destroy(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x62, 0x0) 3.876241599s ago: executing program 4 (id=2054): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000800)="af", 0x1, 0x8000000000000000}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000009c0)={0x18, r1, 0x1680, 0x280000000}) 3.834578395s ago: executing program 4 (id=2057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000480)=0x800001, 0x4) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r0, 0x1000000) 3.718698019s ago: executing program 4 (id=2059): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='+p', 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x4000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002600)="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", 0x2000, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004700)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x42, 0x85) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000006a00)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r5}, 0x48) ioctl$OTPGETREGIONCOUNT(r2, 0x40044d0e, &(0x7f0000006b40)) pipe2$9p(&(0x7f00000047c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000004800)='./file0\x00', &(0x7f0000004840), 0x0, &(0x7f0000004880)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_fuse_handle_req(r0, &(0x7f00000048c0)="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", 0x2000, &(0x7f00000068c0)={0x0, 0x0, 0x0, &(0x7f0000006980)={0x18, 0x0, 0x800, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r7, 0x0, 0x10) io_setup(0x7ffffff9, &(0x7f0000000580)) 2.772563666s ago: executing program 2 (id=2060): capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x3}}}, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000a80)={0x0, 0x10010003}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="6000000400143340000000000000ea0000c0000000f5ffffff0000a52af834000000000000000000", 0x28, 0x8000, &(0x7f00000006c0)={0xa, 0x0, 0x0, @local}, 0x1c) 2.54627866s ago: executing program 0 (id=2069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, 0x0}, 0x4005) 2.478638398s ago: executing program 0 (id=2072): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000300)="$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") fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000e40)='ext2\x00', &(0x7f0000000e80)='./file0\x00', 0x10008, &(0x7f0000000ec0)={[], [{@fowner_lt}, {@euid_eq}, {@hash}, {@pcr={'pcr', 0x3d, 0xf}}, {@measure}, {@obj_role={'obj_role', 0x3d, '\x87\x00\x00\x00gN{4\xba\x1d\x8e\x99\xf3\x8d\x91\t\xfa\xf5\x83\x0f@S}\xa4\xb6\xfe1\xf4'}}]}, 0xff, 0x49e, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000001440)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000014c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001600), 0x4000087, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804c}, 0x40) write$input_event(0xffffffffffffffff, &(0x7f0000001c00)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000009c0)=@deltaction={0x14, 0x31, 0x108, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="dbaa0000f100000071101a000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa069}, 0x94) 1.565281879s ago: executing program 3 (id=2074): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) (fail_nth: 4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 1.550074315s ago: executing program 2 (id=2075): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffdc1, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0xfc) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async, rerun: 32) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x182) (async, rerun: 32) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.490724586s ago: executing program 3 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7f, 0x101001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000180), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000001c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) syz_io_uring_setup(0x5afe, &(0x7f0000000300)={0x0, 0x8209, 0x40, 0x3, 0xe6, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060103000000001a0000005f5307000000040007800500d63206000000050005400200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000780)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1f7) unshare(0x40000000) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58c9c03edad305de2b906625525619ee"}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008880}, 0x4080) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfff, 0x7b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x91) 1.430165752s ago: executing program 2 (id=2078): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/nullb/nullb1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x161) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000880)='100', 0x3) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x7, 0x0, 0x0, @loopback, @empty, 0x0, 0x80, 0x0, 0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000980)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) (fail_nth: 3) 1.369510156s ago: executing program 0 (id=2079): openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) fanotify_init(0x0, 0x80000) pipe2(&(0x7f00000000c0), 0x80000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x543042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) (async) epoll_create1(0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x6e8) (async) pipe2(&(0x7f0000000080), 0x800) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.282374657s ago: executing program 3 (id=2081): pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.27027348s ago: executing program 2 (id=2082): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000300)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x92462658b1574913, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) fstat(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000e40)='ext2\x00', &(0x7f0000000e80)='./file0\x00', 0x10008, &(0x7f0000000ec0)={[], [{@fowner_lt}, {@euid_eq}, {@hash}, {@pcr={'pcr', 0x3d, 0xf}}, {@measure}, {@obj_role={'obj_role', 0x3d, '\x87\x00\x00\x00gN{4\xba\x1d\x8e\x99\xf3\x8d\x91\t\xfa\xf5\x83\x0f@S}\xa4\xb6\xfe1\xf4'}}]}, 0xff, 0x49e, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000001440)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001600), 0x4000087, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_io_uring_setup(0x2b2c, &(0x7f0000001680)={0x0, 0x6c28, 0x400, 0x3, 0xfffffffd}, 0x0, &(0x7f0000001700), &(0x7f0000001740)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14) write$uinput_user_dev(r1, &(0x7f0000001780)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0xc000000, 0x2, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x2000000, 0x7, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x5, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0xe, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x80000001, 0x400, 0x2, 0x201, 0x1, 0x297, 0x5, 0x0, 0x2, 0x204, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0xe6, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x9, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x17, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8a, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x2, 0x11, 0x7, 0xfffffff9, 0xe58, 0x10, 0x80040101, 0x7, 0x24, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0xe7c, 0x3, 0x20008, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xfffffffe, 0x3ff, 0x3, 0x4, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xdd, 0x0, 0x7d, 0x401, 0x2], [0x108e, 0x2, 0x3, 0xa, 0x88, 0x0, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb88, 0x404, 0x0, 0x5, 0x20001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x4, 0x9, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$nl_route(r0, &(0x7f0000001d00)={&(0x7f00000015c0), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)=@bridge_getvlan={0x48, 0x72, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4804c}, 0x40) write$input_event(r1, &(0x7f0000001c00)={{0x77359400}, 0x15}, 0xfe4f) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000009c0)=@deltaction={0x14, 0x31, 0x108, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/249, 0x101d0}], 0x1}, 0x40000000) sendmsg$tipc(r5, &(0x7f0000000bc0)={0x0, 0x810100, &(0x7f0000000c00)=[{&(0x7f0000000c40)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="dbaa0000f100000071101a000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa069}, 0x94) 1.2693577s ago: executing program 3 (id=2083): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x241) 1.242238408s ago: executing program 1 (id=2084): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) syz_io_uring_setup(0x495, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) 1.198848669s ago: executing program 0 (id=2085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x44, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) semget(0x3, 0x4, 0x69c) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 978.903423ms ago: executing program 1 (id=2086): capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x3}}}, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000a80)={0x0, 0x10010003}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="6000000400143340000000000000ea0000c0000000f5ffffff0000a52af834000000000000000000", 0x28, 0x8000, &(0x7f00000006c0)={0xa, 0x0, 0x0, @local}, 0x1c) 616.885094ms ago: executing program 4 (id=2087): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00`\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) 567.877782ms ago: executing program 4 (id=2088): openat$ptmx(0xffffffffffffff9c, 0x0, 0x22f41, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043b0aaaaaaa"], 0xd) 376.459723ms ago: executing program 3 (id=2089): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x783, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d00)=ANY=[]) 375.645992ms ago: executing program 1 (id=2090): socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xe, &(0x7f0000000240)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000002cc0)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") syz_mount_image$fuse(0x0, &(0x7f0000003140)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000003180)='./bus\x00', &(0x7f00000031c0), 0x8, &(0x7f0000003200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000003240)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000002c40)='./file1\x00', 0x0) 264.830708ms ago: executing program 3 (id=2091): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x67b8, 0x4) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) recvfrom$inet(r2, 0x0, 0x0, 0x12140, 0x0, 0xfffffffffffffdff) socket$unix(0x1, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/145, 0x91}], 0x4, &(0x7f00000004c0)=""/142, 0x8e}, 0xd}], 0x1, 0x100, &(0x7f0000000580)={0x77359400}) ioctl$MEMGETREGIONINFO(r1, 0xc0104d08, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r4 = fsopen(&(0x7f00000005c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000000600)='cgroup.controllers\x00', 0x5000000, 0x0) read$char_usb(r6, &(0x7f0000000680)=""/248, 0xf8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 234.800592ms ago: executing program 1 (id=2092): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1941d126a267466, 0x3, 0x3ff, 0x3, 0x41, r2, 0x1, '\x00', r3, r0, 0x0, 0x5, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x7, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x6, 0xffffffffffffffc0, 0x8}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 174.892652ms ago: executing program 0 (id=2093): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x20008046, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) (async) syz_emit_ethernet(0x42, &(0x7f00000008c0)=ANY=[@ANYBLOB="33330000000100000000000086dd6000000000073340fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) write(r0, 0x0, 0x0) 174.402178ms ago: executing program 0 (id=2094): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000200, &(0x7f0000000080), 0x7, 0x50b, &(0x7f0000000680)="$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") r1 = fanotify_init(0x200, 0x0) readv(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x2}, 0x8, 0x10, &(0x7f0000001140), 0x10}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r2, 0x702, 0xe98, 0x0, &(0x7f0000001200)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0x20642, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80800) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r4], 0x4) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x80087601, 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_clone(0xbaba4ef92682e92a, &(0x7f0000000400)="21c02ba0fe041f4de52997f94affc55af0d47b091d77bf67ffd0dc99e552d5d44ad94f71c9f22e2ca7be3a6e9bf322bdc56bff6336d3c65ca7f2a081562c3bcfaa4468d68a8f8ad975425a846dd11b637896747a5e09271438f387ffd45ddcd677ce228150168950616c162890ef339601b4d7647afe8bfa247071cd632a79cdcf9a00e5e2b3f96d907a16b91314792b4d2c4830b7c87086491bd0b487417a4951da36297846581dc78ea51b8316731eae4220d349098dfab4dbd836a6098b24265bceb6689151ef", 0xc8, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="5f87bb4f34072caf73e844b7d201dd7863ae049523fe35a91adb3a075c26d0d8479bc2edca50b65b79d2916613abbab3ffa16bbf30331a8a0257f2247381ebdda7010a0ece009379224d67edb266a59ac22b4dcb52476a5d2376cd9793e75fd5735f1b5e5fc5ab8ae83e3c2ca4f1c49084") syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7) 71.631173ms ago: executing program 1 (id=2095): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYBLOB="0c0005002201"], 0x48}}, 0x400400c) 14.641422ms ago: executing program 1 (id=2096): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) syz_io_uring_setup(0x495, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) 0s ago: executing program 4 (id=2097): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r0, 0x5, &(0x7f0000000080)={0x23, 0x80000000, 0x101}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000fc0), 0x440, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x11, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x140, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'veth1_to_batadv\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x7], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff04, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f00000004c0)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000500)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r2, 0x40480923, &(0x7f0000000540)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f00000005c0)={0xfffffffd, {0x1, 0x0}, 0x0, 0x14}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000600)={0x1, {0x1, 0x1}, 0x1, 0x6}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, 0x0, 0x81100) ioctl$RUN_ARRAY(r2, 0x400c0930, &(0x7f0000000640)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000880)="96", 0x1, 0x0, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000900)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x5800) pwrite64(r2, 0x0, 0x0, 0x1000) io_setup(0x2278, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000680)=""/512, 0x200, 0x10000) ioctl$STOP_ARRAY(r2, 0x932, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000001000)) kernel console output (not intermixed with test programs): mounting filesystem read-only [ 181.785016][ T9484] loop1: detected capacity change from 0 to 512 [ 181.803939][ T9484] vfat: Unknown parameter '00000000001041410600000ÿÿÿÿ' ** 13 printk messages dropped ** [ 181.950117][ T9490] loop1: detected capacity change from 0 to 512 [ 181.950383][ T9490] vfat: Unknown parameter '00000000001041410600000ÿÿÿÿ' [ 181.999794][ T9487] loop0: detected capacity change from 0 to 8192 [ 182.040782][ T9487] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. ** 125 printk messages dropped ** ** 906 printk messages dropped ** ** 2912 printk messages dropped ** ** 1837 printk messages dropped ** ** 38 printk messages dropped ** ** 75 printk messages dropped ** ** 120 printk messages dropped ** ** 125 printk messages dropped ** ** 148 printk messages dropped ** ** 136 printk messages dropped ** ** 128 printk messages dropped ** ** 117 printk messages dropped ** ** 116 printk messages dropped ** ** 138 printk messages dropped ** ** 113 printk messages dropped ** ** 124 printk messages dropped ** ** 110 printk messages dropped ** ** 130 printk messages dropped ** ** 124 printk messages dropped ** ** 124 printk messages dropped ** ** 116 printk messages dropped ** ** 110 printk messages dropped ** ** 102 printk messages dropped ** ** 141 printk messages dropped ** ** 113 printk messages dropped ** ** 106 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 132 printk messages dropped ** ** 109 printk messages dropped ** ** 114 printk messages dropped ** ** 145 printk messages dropped ** ** 126 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 116 printk messages dropped ** ** 113 printk messages dropped ** ** 112 printk messages dropped ** ** 105 printk messages dropped ** ** 157 printk messages dropped ** ** 127 printk messages dropped ** ** 120 printk messages dropped ** ** 128 printk messages dropped ** ** 147 printk messages dropped ** ** 118 printk messages dropped ** ** 144 printk messages dropped ** ** 134 printk messages dropped ** ** 118 printk messages dropped ** ** 116 printk messages dropped ** ** 123 printk messages dropped ** ** 129 printk messages dropped ** ** 106 printk messages dropped ** ** 116 printk messages dropped ** ** 109 printk messages dropped ** ** 147 printk messages dropped ** ** 97 printk messages dropped ** [ 182.366909][ T9512] FAULT_INJECTION: forcing a failure. [ 182.366909][ T9512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.366929][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.2.1545 Not tainted syzkaller #0 PREEMPT [ 182.366944][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.366959][ T9512] Call trace: [ 182.366962][ T9512] show_stack+0x2c/0x3c (C) [ 182.366978][ T9512] __dump_stack+0x30/0x40 [ 182.366988][ T9512] dump_stack_lvl+0xd8/0x12c [ 182.366997][ T9512] dump_stack+0x1c/0x28 [ 182.367005][ T9512] should_fail_ex+0x418/0x58c [ 182.367018][ T9512] should_fail+0x14/0x24 [ 182.367027][ T9512] should_fail_usercopy+0x20/0x30 [ 182.367038][ T9512] _inline_copy_from_user+0x3c/0x174 [ 182.367053][ T9512] kstrtouint_from_user+0xcc/0x174 [ 182.367064][ T9512] proc_fail_nth_write+0x9c/0x234 [ 182.367087][ T9512] vfs_write+0x2a4/0xa0c [ 182.367097][ T9512] ksys_write+0x12c/0x228 [ 182.367107][ T9512] __arm64_sys_write+0x84/0x98 [ 182.367117][ T9512] invoke_syscall+0x98/0x244 [ 182.367126][ T9512] el0_svc_common+0xec/0x23c [ 182.367135][ T9512] do_el0_svc+0x4c/0x5c [ 182.367143][ T9512] el0_svc+0x60/0x1d8 [ 182.367153][ T9512] el0t_64_sync_handler+0x44/0x104 [ 182.367162][ T9512] el0t_64_sync+0x198/0x19c [ 182.370686][ T9512] FAULT_INJECTION: forcing a failure. [ 182.370686][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 182.370702][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.2.1545 Not tainted syzkaller #0 PREEMPT [ 182.370713][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.370727][ T9512] Call trace: [ 182.370730][ T9512] show_stack+0x2c/0x3c (C) [ 182.370741][ T9512] __dump_stack+0x30/0x40 [ 182.370750][ T9512] dump_stack_lvl+0xd8/0x12c [ 182.370758][ T9512] dump_stack+0x1c/0x28 [ 182.370766][ T9512] should_fail_ex+0x418/0x58c [ 182.370776][ T9512] should_failslab+0xc4/0x120 [ 182.370786][ T9512] kmem_cache_alloc_noprof+0x94/0x5d4 [ 182.370797][ T9512] security_inode_alloc+0x40/0x304 [ 182.370809][ T9512] inode_init_always_gfp+0x704/0xb20 [ 182.370823][ T9512] alloc_inode+0x9c/0x198 [ 182.370835][ T9512] new_inode+0x20/0x50 [ 182.370842][ T9512] devpts_pty_new+0xdc/0x51c [ 182.370855][ T9512] ptmx_open+0x1d4/0x2d8 [ 182.370863][ T9512] chrdev_open+0x398/0x3e8 [ 182.370876][ T9512] do_dentry_open+0x5c4/0xfbc [ 182.370885][ T9512] vfs_open+0x44/0x2dc [ 182.370893][ T9512] path_openat+0x1084/0x18f0 [ 182.370905][ T9512] do_file_open+0x1c8/0x2e8 [ 182.370916][ T9512] do_sys_openat2+0x114/0x1e8 [ 182.370925][ T9512] do_sys_open+0xb0/0xe0 [ 182.370933][ T9512] __arm64_sys_openat+0xa8/0xc4 [ 182.370942][ T9512] invoke_syscall+0x98/0x244 [ 182.370951][ T9512] el0_svc_common+0xec/0x23c [ 182.370959][ T9512] do_el0_svc+0x4c/0x5c [ 182.370967][ T9512] el0_svc+0x60/0x1d8 [ 182.370975][ T9512] el0t_64_sync_handler+0x44/0x104 [ 182.370984][ T9512] el0t_64_sync+0x198/0x19c [ 182.389730][ T9487] FAULT_INJECTION: forcing a failure. [ 182.389730][ T9487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.389748][ T9487] CPU: 0 UID: 0 PID: 9487 Comm: syz.0.1539 Not tainted syzkaller #0 PREEMPT [ 182.389759][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.389773][ T9487] Call trace: [ 182.389776][ T9487] show_stack+0x2c/0x3c (C) [ 182.389791][ T9487] __dump_stack+0x30/0x40 [ 182.389800][ T9487] dump_stack_lvl+0xd8/0x12c [ 182.389808][ T9487] dump_stack+0x1c/0x28 [ 182.389815][ T9487] should_fail_ex+0x418/0x58c [ 182.389825][ T9487] should_fail+0x14/0x24 [ 182.389833][ T9487] should_fail_usercopy+0x20/0x30 [ 182.389842][ T9487] _inline_copy_from_user+0x3c/0x188 [ 182.389852][ T9487] dm_ctl_ioctl+0x10c/0xbbc [ 182.389861][ T9487] __arm64_sys_ioctl+0x154/0x1cc [ 182.389870][ T9487] invoke_syscall+0x98/0x244 [ 182.389879][ T9487] el0_svc_common+0xec/0x23c [ 182.389886][ T9487] do_el0_svc+0x4c/0x5c [ 182.389893][ T9487] el0_svc+0x60/0x1d8 [ 182.389901][ T9487] el0t_64_sync_handler+0x44/0x104 [ 182.389909][ T9487] el0t_64_sync+0x198/0x19c [ 182.429079][ T9520] FAULT_INJECTION: forcing a failure. [ 182.429079][ T9520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.429101][ T9520] CPU: 0 UID: 0 PID: 9520 Comm: syz.3.1548 Not tainted syzkaller #0 PREEMPT [ 182.429118][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.429134][ T9520] Call trace: [ 182.429138][ T9520] show_stack+0x2c/0x3c (C) [ 182.429154][ T9520] __dump_stack+0x30/0x40 [ 182.429163][ T9520] dump_stack_lvl+0xd8/0x12c [ 182.429171][ T9520] dump_stack+0x1c/0x28 [ 182.429179][ T9520] should_fail_ex+0x418/0x58c [ 182.429190][ T9520] should_fail+0x14/0x24 [ 182.429199][ T9520] should_fail_usercopy+0x20/0x30 [ 182.429210][ T9520] _inline_copy_from_user+0x3c/0x188 [ 182.429222][ T9520] vmemdup_user+0x6c/0xe0 [ 182.429232][ T9520] setxattr_copy+0x168/0x1c0 [ 182.429243][ T9520] path_setxattrat+0x130/0x2a8 [ 182.429254][ T9520] __arm64_sys_setxattr+0xd0/0xec [ 182.429265][ T9520] invoke_syscall+0x98/0x244 [ 182.429274][ T9520] el0_svc_common+0xec/0x23c [ 182.429282][ T9520] do_el0_svc+0x4c/0x5c [ 182.429290][ T9520] el0_svc+0x60/0x1d8 [ 182.429299][ T9520] el0t_64_sync_handler+0x44/0x104 [ 182.429308][ T9520] el0t_64_sync+0x198/0x19c [ 182.563449][ T9526] FAULT_INJECTION: forcing a failure. [ 182.563449][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.563465][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.0.1551 Not tainted syzkaller #0 PREEMPT [ 182.563475][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.563487][ T9526] Call trace: [ 182.563490][ T9526] show_stack+0x2c/0x3c (C) [ 182.563505][ T9526] __dump_stack+0x30/0x40 [ 182.563513][ T9526] dump_stack_lvl+0xd8/0x12c [ 182.563521][ T9526] dump_stack+0x1c/0x28 [ 182.563528][ T9526] should_fail_ex+0x418/0x58c [ 182.563538][ T9526] should_fail+0x14/0x24 [ 182.563546][ T9526] should_fail_usercopy+0x20/0x30 [ 182.563555][ T9526] drm_ioctl+0x498/0xac8 [ 182.563563][ T9526] __arm64_sys_ioctl+0x154/0x1cc [ 182.563572][ T9526] invoke_syscall+0x98/0x244 [ 182.563581][ T9526] el0_svc_common+0xec/0x23c [ 182.563588][ T9526] do_el0_svc+0x4c/0x5c [ 182.563596][ T9526] el0_svc+0x60/0x1d8 [ 182.563604][ T9526] el0t_64_sync_handler+0x44/0x104 [ 182.563611][ T9526] el0t_64_sync+0x198/0x19c [ 182.649940][ T9530] FAULT_INJECTION: forcing a failure. [ 182.649940][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.649961][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.0.1553 Not tainted syzkaller #0 PREEMPT [ 182.649975][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.649990][ T9530] Call trace: [ 182.649994][ T9530] show_stack+0x2c/0x3c (C) [ 182.650009][ T9530] __dump_stack+0x30/0x40 [ 182.650018][ T9530] dump_stack_lvl+0xd8/0x12c [ 182.650026][ T9530] dump_stack+0x1c/0x28 [ 182.650033][ T9530] should_fail_ex+0x418/0x58c [ 182.650043][ T9530] should_fail+0x14/0x24 [ 182.650051][ T9530] should_fail_usercopy+0x20/0x30 [ 182.650060][ T9530] _inline_copy_from_user+0x3c/0x3a4 [ 182.650077][ T9530] sk_getsockopt+0x140/0x18a8 [ 182.650086][ T9530] do_sock_getsockopt+0x278/0x720 [ 182.650096][ T9530] __sys_getsockopt+0xfc/0x168 [ 182.650106][ T9530] __arm64_sys_getsockopt+0xc8/0xe4 [ 182.650116][ T9530] invoke_syscall+0x98/0x244 [ 182.650125][ T9530] el0_svc_common+0xec/0x23c [ 182.650132][ T9530] do_el0_svc+0x4c/0x5c [ 182.650140][ T9530] el0_svc+0x60/0x1d8 [ 182.650148][ T9530] el0t_64_sync_handler+0x44/0x104 [ 182.650156][ T9530] el0t_64_sync+0x198/0x19c [ 182.691308][ T9533] loop2: detected capacity change from 0 to 4096 [ 182.710038][ T9536] syzkaller0: entered promiscuous mode [ 182.710050][ T9536] syzkaller0: entered allmulticast mode [ 182.946385][ T9549] loop0: detected capacity change from 0 to 8192 [ 182.952829][ T9549] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.978015][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.978184][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.072376][ T9555] __nla_validate_parse: 1 callbacks suppressed [ 183.072386][ T9555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'. [ 183.107921][ T9547] bridge_slave_0: left allmulticast mode [ 183.107930][ T9547] bridge_slave_0: left promiscuous mode [ 183.108002][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.153701][ T9547] bridge_slave_1: left allmulticast mode [ 183.153712][ T9547] bridge_slave_1: left promiscuous mode [ 183.155697][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.179116][ T9547] bond0: (slave bond_slave_0): Releasing backup interface [ 183.186627][ T9557] loop2: detected capacity change from 0 to 512 [ 183.190861][ T9557] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 183.190877][ T9557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.193754][ T9557] EXT4-fs (loop2): 1 truncate cleaned up [ 183.194234][ T9557] EXT4-fs mount: 4 callbacks suppressed [ 183.194242][ T9557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.210303][ T9557] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 183.211300][ T9557] EXT4-fs (loop2): Remounting filesystem read-only [ 183.226108][ T9547] bond0: (slave bond_slave_1): Releasing backup interface [ 183.260134][ T9547] team0: Port device team_slave_0 removed [ 183.266837][ T4752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.282398][ T9547] team0: Port device team_slave_1 removed [ 183.291099][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.295484][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.317531][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.326208][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.353546][ T9568] loop4: detected capacity change from 0 to 512 [ 183.402917][ T9568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.452857][ T4748] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 183.452971][ T4748] EXT4-fs (loop4): Remounting filesystem read-only [ 183.461701][ T9581] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1574'. [ 183.479152][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.486923][ T9577] netlink: 'syz.3.1573': attribute type 21 has an invalid length. [ 184.548793][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1580'. [ 184.548810][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'. [ 184.556114][ T9601] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 184.557491][ T9601] bond2 (unregistering): Released all slaves [ 184.605498][ T9605] qrtr: Invalid version 136 [ 184.776846][ T9621] netlink: 'syz.1.1587': attribute type 9 has an invalid length. [ 184.776857][ T9621] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1587'. [ 184.829255][ T9625] netlink: 'syz.1.1589': attribute type 21 has an invalid length. [ 185.168962][ T9630] loop1: detected capacity change from 0 to 512 [ 185.235477][ T9630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.253915][ T9630] overlayfs: missing 'lowerdir' [ 185.278168][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1595'. [ 185.278184][ T9641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1595'. [ 185.307448][ T4747] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 185.312903][ T9641] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 185.312909][ T4747] EXT4-fs (loop1): Remounting filesystem read-only [ 185.314886][ T9641] bond1 (unregistering): Released all slaves [ 185.331228][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.380734][ T9644] netlink: 'syz.3.1596': attribute type 4 has an invalid length. [ 185.391654][ T9648] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1597'. [ 185.436919][ T9652] FAULT_INJECTION: forcing a failure. [ 185.436919][ T9652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.436938][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.2.1600 Not tainted syzkaller #0 PREEMPT [ 185.436952][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 185.436967][ T9652] Call trace: [ 185.436970][ T9652] show_stack+0x2c/0x3c (C) [ 185.436984][ T9652] __dump_stack+0x30/0x40 [ 185.436992][ T9652] dump_stack_lvl+0xd8/0x12c [ 185.437000][ T9652] dump_stack+0x1c/0x28 [ 185.437007][ T9652] should_fail_ex+0x418/0x58c [ 185.437017][ T9652] should_fail+0x14/0x24 [ 185.437025][ T9652] should_fail_usercopy+0x20/0x30 [ 185.437034][ T9652] _copy_from_iter+0x188/0x1064 [ 185.437044][ T9652] tcp_sendmsg_locked+0x1080/0x3198 [ 185.437055][ T9652] tcp_sendmsg+0x40/0x64 [ 185.437067][ T9652] inet_sendmsg+0xb4/0xd8 [ 185.437077][ T9652] __sock_sendmsg+0xc8/0x17c [ 185.437092][ T9652] __sys_sendto+0x250/0x328 [ 185.437102][ T9652] __arm64_sys_sendto+0xec/0x10c [ 185.437112][ T9652] invoke_syscall+0x98/0x244 [ 185.437120][ T9652] el0_svc_common+0xec/0x23c [ 185.437128][ T9652] do_el0_svc+0x4c/0x5c [ 185.437135][ T9652] el0_svc+0x60/0x1d8 [ 185.437143][ T9652] el0t_64_sync_handler+0x44/0x104 [ 185.437151][ T9652] el0t_64_sync+0x198/0x19c [ 185.567773][ T9661] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 185.567782][ T9661] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.627509][ T9665] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 185.640083][ T9665] bond1 (unregistering): Released all slaves [ 185.699975][ T9670] netlink: 'syz.3.1608': attribute type 21 has an invalid length. [ 185.791774][ T9676] netlink: 'syz.3.1611': attribute type 21 has an invalid length. [ 185.827829][ T9677] fuse: Bad value for 'fd' [ 185.866720][ T9679] loop3: detected capacity change from 0 to 1024 [ 185.885383][ T9679] EXT4-fs: Ignoring removed nobh option [ 185.885444][ T9679] EXT4-fs: Ignoring removed bh option [ 185.886354][ T9679] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 185.906176][ T9679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 185.906217][ T9679] System zones: 0-1, 3-12 [ 185.906788][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.987525][ T9683] net_ratelimit: 4123 callbacks suppressed [ 186.322942][ T9656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.324178][ T9656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.324373][ T9656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.324450][ T9656] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.327235][ T9656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.392972][ T9700] bridge0: left promiscuous mode [ 186.392982][ T9700] bridge0: left allmulticast mode [ 186.422390][ T9703] netlink: 'syz.4.1621': attribute type 21 has an invalid length. [ 186.431950][ T9707] loop2: detected capacity change from 0 to 1024 [ 186.436850][ T9707] EXT4-fs: Ignoring removed nobh option [ 186.436889][ T9707] EXT4-fs: Ignoring removed bh option [ 186.444891][ T9707] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 186.470426][ T9707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 186.470477][ T9707] System zones: 0-1, 3-12 [ 186.471041][ T9707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.906685][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.932828][ T4754] block nbd0: Receive control failed (result -32) [ 186.933937][ T4750] block nbd0: Receive control failed (result -32) [ 186.972245][ T9732] loop3: detected capacity change from 0 to 512 [ 186.992482][ T9732] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 186.992504][ T9732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.994196][ T9732] EXT4-fs (loop3): 1 truncate cleaned up [ 186.994647][ T9732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.020281][ T9732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.020500][ T9732] EXT4-fs (loop3): Remounting filesystem read-only [ 187.035342][ T9742] loop4: detected capacity change from 0 to 2048 [ 187.045510][ T9744] netlink: 'syz.1.1635': attribute type 21 has an invalid length. [ 187.062897][ T9742] loop4: p1 < > p4 [ 187.062897][ T9742] p4: [ 187.065975][ T9742] loop4: p4 size 722688 extends beyond EOD, truncated [ 187.094897][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.114687][ T9751] loop3: detected capacity change from 0 to 512 [ 187.163051][ T9751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.176792][ T9751] overlayfs: missing 'lowerdir' [ 187.216207][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.292603][ T9761] FAULT_INJECTION: forcing a failure. [ 187.292603][ T9761] name failslab, interval 1, probability 0, space 0, times 0 [ 187.292623][ T9761] CPU: 1 UID: 0 PID: 9761 Comm: syz.4.1640 Not tainted syzkaller #0 PREEMPT [ 187.292635][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 187.292648][ T9761] Call trace: [ 187.292651][ T9761] show_stack+0x2c/0x3c (C) [ 187.292666][ T9761] __dump_stack+0x30/0x40 [ 187.292675][ T9761] dump_stack_lvl+0xd8/0x12c [ 187.292683][ T9761] dump_stack+0x1c/0x28 [ 187.292690][ T9761] should_fail_ex+0x418/0x58c [ 187.292700][ T9761] should_failslab+0xc4/0x120 [ 187.292709][ T9761] kmem_cache_alloc_node_noprof+0x98/0x604 [ 187.292719][ T9761] __alloc_skb+0x1f0/0x610 [ 187.292730][ T9761] netlink_ack+0x11c/0x890 [ 187.292740][ T9761] netlink_rcv_skb+0x21c/0x414 [ 187.292750][ T9761] genl_rcv+0x38/0x50 [ 187.292756][ T9761] netlink_unicast+0x600/0x7f8 [ 187.292766][ T9761] netlink_sendmsg+0x648/0x948 [ 187.292776][ T9761] __sock_sendmsg+0xc8/0x17c [ 187.292785][ T9761] ____sys_sendmsg+0x3d0/0x6c8 [ 187.292795][ T9761] ___sys_sendmsg+0x198/0x224 [ 187.292805][ T9761] __sys_sendmsg+0x158/0x204 [ 187.292814][ T9761] __arm64_sys_sendmsg+0x88/0x9c [ 187.292824][ T9761] invoke_syscall+0x98/0x244 [ 187.292832][ T9761] el0_svc_common+0xec/0x23c [ 187.292840][ T9761] do_el0_svc+0x4c/0x5c [ 187.292847][ T9761] el0_svc+0x60/0x1d8 [ 187.292856][ T9761] el0t_64_sync_handler+0x44/0x104 [ 187.292863][ T9761] el0t_64_sync+0x198/0x19c [ 187.360217][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 187.370253][ T1614] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.370280][ T1614] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.382111][ T4752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.478619][ T9767] FAULT_INJECTION: forcing a failure. [ 187.478619][ T9767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.478635][ T9767] CPU: 0 UID: 0 PID: 9767 Comm: syz.2.1641 Not tainted syzkaller #0 PREEMPT [ 187.478646][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 187.478659][ T9767] Call trace: [ 187.478661][ T9767] show_stack+0x2c/0x3c (C) [ 187.478677][ T9767] __dump_stack+0x30/0x40 [ 187.478686][ T9767] dump_stack_lvl+0xd8/0x12c [ 187.478694][ T9767] dump_stack+0x1c/0x28 [ 187.478702][ T9767] should_fail_ex+0x418/0x58c [ 187.478713][ T9767] should_fail+0x14/0x24 [ 187.478723][ T9767] should_fail_usercopy+0x20/0x30 [ 187.478733][ T9767] strncpy_from_user+0x48/0x388 [ 187.478745][ T9767] __arm64_sys_add_key+0x150/0x43c [ 187.478759][ T9767] invoke_syscall+0x98/0x244 [ 187.478768][ T9767] el0_svc_common+0xec/0x23c [ 187.478776][ T9767] do_el0_svc+0x4c/0x5c [ 187.478785][ T9767] el0_svc+0x60/0x1d8 [ 187.478793][ T9767] el0t_64_sync_handler+0x44/0x104 [ 187.478802][ T9767] el0t_64_sync+0x198/0x19c [ 187.481181][ T30] audit: type=1326 audit(193.460:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.514472][ T30] audit: type=1326 audit(193.500:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520104][ T30] audit: type=1326 audit(193.500:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520249][ T30] audit: type=1326 audit(193.500:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520333][ T30] audit: type=1326 audit(193.500:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520470][ T30] audit: type=1326 audit(193.500:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520545][ T30] audit: type=1326 audit(193.500:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520657][ T30] audit: type=1326 audit(193.500:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520748][ T30] audit: type=1326 audit(193.500:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa777a228 code=0x7ffc0000 [ 187.520887][ T30] audit: type=1326 audit(193.500:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.2.1641" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa775d0ec code=0x7ffc0000 [ 187.522038][ T9769] FAULT_INJECTION: forcing a failure. [ 187.522038][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 187.522052][ T9769] CPU: 1 UID: 0 PID: 9769 Comm: syz.4.1642 Not tainted syzkaller #0 PREEMPT [ 187.522061][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 187.522073][ T9769] Call trace: [ 187.522076][ T9769] show_stack+0x2c/0x3c (C) [ 187.522097][ T9769] __dump_stack+0x30/0x40 [ 187.522107][ T9769] dump_stack_lvl+0xd8/0x12c [ 187.522115][ T9769] dump_stack+0x1c/0x28 [ 187.522122][ T9769] should_fail_ex+0x418/0x58c [ 187.522132][ T9769] should_failslab+0xc4/0x120 [ 187.522141][ T9769] kmem_cache_alloc_noprof+0x94/0x5d4 [ 187.522150][ T9769] alloc_empty_file+0x6c/0x1cc [ 187.522159][ T9769] path_openat+0x78/0x18f0 [ 187.522170][ T9769] do_file_open+0x1c8/0x2e8 [ 187.522179][ T9769] do_sys_openat2+0x114/0x1e8 [ 187.522187][ T9769] do_sys_open+0xb0/0xe0 [ 187.522194][ T9769] __arm64_sys_openat+0xa8/0xc4 [ 187.522202][ T9769] invoke_syscall+0x98/0x244 [ 187.522210][ T9769] el0_svc_common+0xec/0x23c [ 187.522217][ T9769] do_el0_svc+0x4c/0x5c [ 187.522224][ T9769] el0_svc+0x60/0x1d8 [ 187.522232][ T9769] el0t_64_sync_handler+0x44/0x104 [ 187.522240][ T9769] el0t_64_sync+0x198/0x19c [ 187.547784][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1641'. [ 187.607651][ T4750] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.680365][ T9779] loop4: detected capacity change from 0 to 512 [ 187.684057][ T9779] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 187.684070][ T9779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.693372][ T9779] EXT4-fs (loop4): 1 truncate cleaned up [ 187.693820][ T9779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.710725][ T9779] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.711005][ T9779] EXT4-fs (loop4): Remounting filesystem read-only [ 187.757123][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.777469][ T9787] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 187.777469][ T9787] The task syz.3.1645 (9787) triggered the difference, watch for misbehavior. [ 187.812018][ T9789] loop4: detected capacity change from 0 to 2048 [ 187.834478][ T9789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.847404][ T9789] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 187.865262][ T9795] loop2: detected capacity change from 0 to 512 [ 187.867712][ T9795] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 187.867726][ T9795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.886924][ T9795] EXT4-fs (loop2): 1 truncate cleaned up [ 187.890709][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.901343][ T9795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.935643][ T9799] overlayfs: conflicting options: userxattr,metacopy=on [ 187.935951][ T9795] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.1651: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 187.936208][ T9795] EXT4-fs (loop2): Remounting filesystem read-only [ 187.936267][ T9795] overlayfs: cleanup of 'work/#3e' failed (-30) [ 187.966887][ T9799] loop4: detected capacity change from 0 to 8192 [ 187.970668][ T9799] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.985612][ T4752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.033605][ T9801] syzkaller0: entered promiscuous mode [ 188.033624][ T9801] syzkaller0: entered allmulticast mode [ 188.122443][ T9810] EXT4-fs: Ignoring removed nobh option [ 188.122480][ T9810] EXT4-fs: Ignoring removed bh option [ 188.126520][ T9810] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 188.141524][ T9810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 188.141576][ T9810] System zones: 0-1, 3-12 [ 188.145788][ T9810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.327769][ T4750] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.378416][ T4750] Bluetooth: hci3: command 0x0406 tx timeout [ 188.407727][ T4750] Bluetooth: hci4: command 0x041b tx timeout [ 188.997525][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.013314][ T9827] vfat: Unknown parameter 'devlink' [ 189.152562][ T9848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.154108][ T9850] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 189.156289][ T9848] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 189.166479][ T9850] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.1670: lblock 2 mapped to illegal pblock 2 (length 1) [ 189.166500][ T9850] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.166587][ T9850] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.1670: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.166601][ T9850] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.166673][ T9850] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.1670: Failed to acquire dquot type 0 [ 189.166684][ T9850] loop3: lost filesystem error report for type 5 error -117 [ 189.166779][ T9850] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 189.166788][ T9850] loop3: lost filesystem error report for type 5 error -117 [ 189.166857][ T9850] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.1670: mark_inode_dirty error [ 189.166868][ T9850] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.166935][ T9850] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 189.166973][ T9850] EXT4-fs (loop3): 1 orphan inode deleted [ 189.167425][ T9850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.221586][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 189.237690][ T424] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.252015][ T424] EXT4-fs error (device loop3): ext4_release_dquot:7106: comm kworker/u8:6: Failed to release dquot type 0 [ 189.316980][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.507139][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 190.094823][ T9861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.122936][ T9863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.408452][ T4750] Bluetooth: hci3: command 0x0406 tx timeout [ 190.427254][ T9872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 190.427315][ T9872] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 190.427327][ T9872] EXT4-fs (loop4): This should not happen!! Data will be lost [ 190.427327][ T9872] [ 190.427335][ T9872] EXT4-fs (loop4): Total free blocks count 0 [ 190.427342][ T9872] EXT4-fs (loop4): Free/Dirty block details [ 190.427351][ T9872] EXT4-fs (loop4): free_blocks=4096 [ 190.427359][ T9872] EXT4-fs (loop4): dirty_blocks=32 [ 190.427366][ T9872] EXT4-fs (loop4): Block reservation details [ 190.427372][ T9872] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 190.428849][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'. [ 190.471298][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.474946][ T4742] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 190.474965][ T4742] loop3: lost filesystem error report for type 5 error -117 [ 190.475332][ T4742] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 190.475358][ T4742] loop3: lost filesystem error report for type 5 error -117 [ 190.475455][ T4742] EXT4-fs error (device loop3): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 190.475467][ T4742] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 190.475552][ T4742] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 190.475563][ T4742] loop3: lost filesystem error report for type 5 error -117 [ 190.511201][ T9879] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1676'. [ 190.536644][ T9882] netlink: 'syz.3.1677': attribute type 21 has an invalid length. [ 190.634363][ T9884] set_capacity_and_notify: 7 callbacks suppressed [ 190.634369][ T9884] loop3: detected capacity change from 0 to 512 [ 190.639383][ T9884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.654703][ T9884] overlayfs: missing 'workdir' [ 190.666464][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.765464][ T3122] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.765577][ T3122] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.766432][ T631] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.938730][ T729] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.970464][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.193351][ T9912] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 191.195373][ T9912] bond2 (unregistering): Released all slaves [ 191.249099][ T9920] net_ratelimit: 2390 callbacks suppressed [ 191.256789][ T9920] loop0: detected capacity change from 0 to 2048 [ 191.280426][ T9920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.284257][ T9920] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 191.306817][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.402041][ T4754] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 191.486325][ T9943] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1701'. [ 191.527375][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 191.554245][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 191.669191][ T9948] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1703'. [ 191.691342][ T9951] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 191.818274][ T9956] loop1: detected capacity change from 0 to 2048 [ 191.836511][ T9956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.841241][ T9956] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 191.856059][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.960362][ T9970] loop1: detected capacity change from 0 to 1024 [ 191.960843][ T9970] EXT4-fs: Ignoring removed nobh option [ 191.960884][ T9970] EXT4-fs: Ignoring removed bh option [ 191.969823][ T9970] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 191.989851][ T9970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 191.989901][ T9970] System zones: 0-1, 3-12 [ 191.990459][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.371978][ T9979] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1712'. [ 192.404057][ T9983] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1714'. [ 192.432289][ T9985] loop0: detected capacity change from 0 to 512 [ 192.435497][ T9985] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 192.435513][ T9985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.444109][ T9985] EXT4-fs (loop0): 1 truncate cleaned up [ 192.444584][ T9985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.460765][ T9985] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.1715: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 192.462541][ T9985] EXT4-fs (loop0): Remounting filesystem read-only [ 192.462595][ T9985] overlayfs: cleanup of 'work/#42' failed (-30) [ 192.501025][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.552185][ T9991] loop0: detected capacity change from 0 to 2048 [ 192.585260][ T9997] loop2: detected capacity change from 0 to 512 [ 192.591110][ T9991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.592507][ T9991] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 192.611763][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.614791][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.644481][ T9997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 192.644500][ T9997] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.679204][ T4752] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 192.679353][ T4752] EXT4-fs (loop2): Remounting filesystem read-only [ 192.682335][T10004] loop0: detected capacity change from 0 to 2048 [ 192.684563][ T4752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.713340][T10004] loop0: AHDI p3 ** 621 printk messages dropped ** ** 210 printk messages dropped ** ** 107 printk messages dropped ** [ 192.792929][T10010] netlink: 'syz.0.1723': attribute type 21 has an invalid length. [ 192.818623][ T4750] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 192.855509][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.859176][T10012] loop4: detected capacity change from 0 to 512 [ 192.894846][T10012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.924024][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.006771][T10021] loop1: detected capacity change from 0 to 512 [ 193.029130][ T4736] udevd[4736]: incorrect ext4 checksum on /dev/loop1 [ 193.031316][T10021] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 193.114809][T10023] EXT4-fs: Ignoring removed nobh option [ 193.114851][T10023] EXT4-fs: Ignoring removed bh option [ 193.117335][T10023] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 193.118870][T10023] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 193.118902][T10023] System zones: 0-1 [ 193.118912][T10023] , 3-12 [ 193.118918][T10023] [ 193.119486][T10023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.173105][T10027] block nbd1: shutting down sockets [ 193.826190][T10047] netlink: 'syz.1.1737': attribute type 21 has an invalid length. [ 193.945455][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. ** 139 printk messages dropped ** ** 1054 printk messages dropped ** [ 194.477548][T10067] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.489371][T10067] bond1 (unregistering): Released all slaves [ 194.617153][T10008] journal_path: Non-blockdev passed as './file1' [ 194.617166][T10008] EXT4-fs: error: could not find journal device path [ 194.748684][T10081] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 194.773565][T10077] __nla_validate_parse: 1 callbacks suppressed [ 194.773578][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 194.817909][T10087] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 194.826344][T10087] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.1753: lblock 2 mapped to illegal pblock 2 (length 1) [ 194.826365][T10087] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 194.826441][T10087] __quota_error: 25 callbacks suppressed [ 194.826447][T10087] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 194.826460][T10087] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.1753: lblock 0 mapped to illegal pblock 48 (length 1) [ 194.826473][T10087] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 194.826537][T10087] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 194.826545][T10087] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.1753: Failed to acquire dquot type 0 [ 194.826555][T10087] loop0: lost filesystem error report for type 5 error -117 [ 194.826642][T10087] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 194.826651][T10087] loop0: lost filesystem error report for type 5 error -117 [ 194.826714][T10087] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.1753: mark_inode_dirty error [ 194.826725][T10087] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.826786][T10087] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 194.826819][T10087] EXT4-fs (loop0): 1 orphan inode deleted [ 194.827277][T10087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.867557][ T729] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.868645][ T729] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 194.868664][ T729] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:10: Failed to release dquot type 0 [ 194.878778][T10088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1748'. [ 194.878791][T10088] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1748'. [ 194.878800][T10088] netlink: 'syz.2.1748': attribute type 5 has an invalid length. [ 194.878806][T10088] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1748'. [ 195.143836][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 195.921274][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.923257][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.923277][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 195.923476][ T4743] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 195.923488][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 195.923643][ T4743] EXT4-fs error (device loop0): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 195.923656][ T4743] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 195.930373][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.930390][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 196.018372][T10102] set_capacity_and_notify: 3 callbacks suppressed [ 196.018379][T10102] loop1: detected capacity change from 0 to 512 [ 196.052523][T10102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.144712][ T4747] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 196.144886][ T4747] EXT4-fs (loop1): Remounting filesystem read-only [ 196.155027][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.161309][T10109] netlink: 'syz.0.1759': attribute type 21 has an invalid length. [ 196.514419][T10128] FAULT_INJECTION: forcing a failure. [ 196.514419][T10128] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.514436][T10128] CPU: 0 UID: 0 PID: 10128 Comm: syz.2.1765 Not tainted syzkaller #0 PREEMPT [ 196.514447][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 196.514461][T10128] Call trace: [ 196.514464][T10128] show_stack+0x2c/0x3c (C) [ 196.514480][T10128] __dump_stack+0x30/0x40 [ 196.514489][T10128] dump_stack_lvl+0xd8/0x12c [ 196.514497][T10128] dump_stack+0x1c/0x28 [ 196.514506][T10128] should_fail_ex+0x418/0x58c [ 196.514517][T10128] should_fail+0x14/0x24 [ 196.514526][T10128] get_futex_key+0x1ec/0x12b0 [ 196.514539][T10128] futex_wait_setup+0x58/0x674 [ 196.514547][T10128] __futex_wait+0x108/0x25c [ 196.514556][T10128] futex_wait+0x108/0x2c0 [ 196.514564][T10128] do_futex+0x320/0x378 [ 196.514575][T10128] __arm64_sys_futex+0x2e4/0x418 [ 196.514588][T10128] invoke_syscall+0x98/0x244 [ 196.514597][T10128] el0_svc_common+0xec/0x23c [ 196.514606][T10128] do_el0_svc+0x4c/0x5c [ 196.514614][T10128] el0_svc+0x60/0x1d8 [ 196.514623][T10128] el0t_64_sync_handler+0x44/0x104 [ 196.514631][T10128] el0t_64_sync+0x198/0x19c [ 196.516276][T10128] net_ratelimit: 2096 callbacks suppressed [ 196.550555][T10126] loop1: detected capacity change from 0 to 512 [ 196.562960][T10126] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 196.562977][T10126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.566415][T10126] EXT4-fs (loop1): 1 truncate cleaned up [ 196.566866][T10126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.571965][T10132] loop0: detected capacity change from 0 to 1024 [ 196.583617][T10132] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 196.600358][T10132] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.1767: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.600378][T10132] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.600450][T10132] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 196.600522][T10132] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.1767: lblock 0 mapped to illegal pblock 48 (length 1) [ 196.600538][T10132] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.600606][T10132] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 196.600614][T10132] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.1767: Failed to acquire dquot type 0 [ 196.600624][T10132] loop0: lost filesystem error report for type 5 error -117 [ 196.600721][T10132] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 196.600730][T10132] loop0: lost filesystem error report for type 5 error -117 [ 196.600802][T10132] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.1767: mark_inode_dirty error [ 196.600814][T10132] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.600882][T10132] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 196.600917][T10132] EXT4-fs (loop0): 1 orphan inode deleted [ 196.601375][T10132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.688544][ T3059] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.688706][ T3059] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 196.688719][ T3059] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:11: Failed to release dquot type 0 [ 196.712897][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.878703][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'. [ 197.423173][T10146] loop1: detected capacity change from 0 to 1024 [ 197.439180][T10149] FAULT_INJECTION: forcing a failure. [ 197.439180][T10149] name failslab, interval 1, probability 0, space 0, times 0 [ 197.439197][T10149] CPU: 1 UID: 0 PID: 10149 Comm: syz.3.1774 Not tainted syzkaller #0 PREEMPT [ 197.439210][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 197.439223][T10149] Call trace: [ 197.439226][T10149] show_stack+0x2c/0x3c (C) [ 197.439242][T10149] __dump_stack+0x30/0x40 [ 197.439251][T10149] dump_stack_lvl+0xd8/0x12c [ 197.439259][T10149] dump_stack+0x1c/0x28 [ 197.439266][T10149] should_fail_ex+0x418/0x58c [ 197.439276][T10149] should_failslab+0xc4/0x120 [ 197.439285][T10149] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 197.439295][T10149] __d_alloc+0x50/0x600 [ 197.439304][T10149] d_alloc_pseudo+0x2c/0xd8 [ 197.439314][T10149] alloc_path_pseudo+0xe8/0x1d4 [ 197.439323][T10149] alloc_file_pseudo+0xb0/0x198 [ 197.439332][T10149] sock_alloc_file+0xb4/0x1ac [ 197.439343][T10149] do_accept+0x1e0/0x438 [ 197.439352][T10149] __sys_accept4+0x11c/0x1f8 [ 197.439362][T10149] __arm64_sys_accept4+0xa8/0xc4 [ 197.439371][T10149] invoke_syscall+0x98/0x244 [ 197.439379][T10149] el0_svc_common+0xec/0x23c [ 197.439387][T10149] do_el0_svc+0x4c/0x5c [ 197.439394][T10149] el0_svc+0x60/0x1d8 [ 197.439403][T10149] el0t_64_sync_handler+0x44/0x104 [ 197.439410][T10149] el0t_64_sync+0x198/0x19c [ 197.448713][T10146] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 197.520965][T10146] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.1772: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.520988][T10146] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 197.521058][T10146] Quota error (device loop1): write_blk: dquota write failed [ 197.521072][T10146] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 197.521098][T10146] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.1772: Failed to acquire dquot type 0 [ 197.521109][T10146] loop1: lost filesystem error report for type 5 error -117 [ 197.521331][T10146] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.1772: Freeing blocks not in datazone - block = 0, count = 4096 [ 197.521349][T10146] loop1: lost filesystem error report for type 5 error -117 [ 197.521825][T10146] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1772: Invalid inode bitmap blk 0 in block_group 0 [ 197.521838][T10146] loop1: lost filesystem error report for type 5 error -117 [ 197.522023][T10146] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 197.522154][T10146] EXT4-fs (loop1): 1 orphan inode deleted [ 197.522614][T10146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.541438][T10146] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1772: Invalid block bitmap block 0 in block_group 0 [ 197.668550][ T40] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.668726][ T40] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 197.668741][ T40] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:2: Failed to release dquot type 0 [ 197.671429][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.673029][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.673134][ T4743] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 197.673719][ T4743] EXT4-fs error (device loop0): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 197.673744][ T4743] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 197.674375][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.762138][ T7786] sony 0005:054C:03D5.0004: UNIQ does not contain a MAC address; duplicate check skipped [ 197.780173][ T7786] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0004/input/input29 [ 197.793094][ T7786] sony 0005:054C:03D5.0004: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 197.824905][T10168] fido_id[10168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 198.037834][T10171] FAULT_INJECTION: forcing a failure. [ 198.037834][T10171] name fail_futex, interval 1, probability 0, space 0, times 0 [ 198.037857][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.3.1780 Not tainted syzkaller #0 PREEMPT [ 198.037868][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 198.037883][T10171] Call trace: [ 198.037886][T10171] show_stack+0x2c/0x3c (C) [ 198.037901][T10171] __dump_stack+0x30/0x40 [ 198.037910][T10171] dump_stack_lvl+0xd8/0x12c [ 198.037919][T10171] dump_stack+0x1c/0x28 [ 198.037926][T10171] should_fail_ex+0x418/0x58c [ 198.037938][T10171] should_fail+0x14/0x24 [ 198.037947][T10171] get_futex_key+0x1ec/0x12b0 [ 198.037959][T10171] futex_wait_setup+0x58/0x674 [ 198.037968][T10171] __futex_wait+0x108/0x25c [ 198.037976][T10171] futex_wait+0x108/0x2c0 [ 198.037984][T10171] do_futex+0x320/0x378 [ 198.037996][T10171] __arm64_sys_futex+0x2e4/0x418 [ 198.038009][T10171] invoke_syscall+0x98/0x244 [ 198.038018][T10171] el0_svc_common+0xec/0x23c [ 198.038026][T10171] do_el0_svc+0x4c/0x5c [ 198.038034][T10171] el0_svc+0x60/0x1d8 [ 198.038043][T10171] el0t_64_sync_handler+0x44/0x104 [ 198.038051][T10171] el0t_64_sync+0x198/0x19c [ 198.099845][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.158326][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'. [ 198.248483][T10186] FAULT_INJECTION: forcing a failure. [ 198.248483][T10186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.248496][T10186] CPU: 1 UID: 0 PID: 10186 Comm: syz.1.1784 Not tainted syzkaller #0 PREEMPT [ 198.248505][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 198.248517][T10186] Call trace: [ 198.248520][T10186] show_stack+0x2c/0x3c (C) [ 198.248538][T10186] __dump_stack+0x30/0x40 [ 198.248548][T10186] dump_stack_lvl+0xd8/0x12c [ 198.248558][T10186] dump_stack+0x1c/0x28 [ 198.248565][T10186] should_fail_ex+0x418/0x58c [ 198.248575][T10186] should_fail+0x14/0x24 [ 198.248584][T10186] should_fail_usercopy+0x20/0x30 [ 198.248592][T10186] _inline_copy_from_user+0x3c/0x174 [ 198.248603][T10186] kstrtouint_from_user+0xcc/0x174 [ 198.248612][T10186] proc_fail_nth_write+0x9c/0x234 [ 198.248623][T10186] vfs_write+0x2a4/0xa0c [ 198.248632][T10186] ksys_write+0x12c/0x228 [ 198.248640][T10186] __arm64_sys_write+0x84/0x98 [ 198.248648][T10186] invoke_syscall+0x98/0x244 [ 198.248656][T10186] el0_svc_common+0xec/0x23c [ 198.248664][T10186] do_el0_svc+0x4c/0x5c [ 198.248671][T10186] el0_svc+0x60/0x1d8 [ 198.248679][T10186] el0t_64_sync_handler+0x44/0x104 [ 198.248686][T10186] el0t_64_sync+0x198/0x19c [ 198.687831][T10194] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.720000][T10197] loop1: detected capacity change from 0 to 1024 [ 198.731027][T10197] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 198.743441][T10197] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.1788: lblock 2 mapped to illegal pblock 2 (length 1) [ 198.743469][T10197] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.744318][T10197] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 198.744338][T10197] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.1788: lblock 0 mapped to illegal pblock 48 (length 1) [ 198.744665][T10197] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.1788: Failed to acquire dquot type 0 [ 198.744807][T10197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 198.744897][T10197] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.1788: mark_inode_dirty error [ 198.744980][T10197] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 198.745033][T10197] EXT4-fs (loop1): 1 orphan inode deleted [ 198.747798][T10197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.760066][ T3664] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.762233][ T3664] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:15: Failed to release dquot type 0 [ 198.776201][T10202] loop0: detected capacity change from 0 to 2048 [ 198.785289][T10200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1789'. [ 198.789543][T10202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.854529][T10202] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 198.903397][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.039285][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 199.622952][T10215] loop4: detected capacity change from 0 to 512 [ 199.623394][T10214] FAULT_INJECTION: forcing a failure. [ 199.623394][T10214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.623411][T10214] CPU: 1 UID: 0 PID: 10214 Comm: syz.3.1793 Not tainted syzkaller #0 PREEMPT [ 199.623425][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 199.623438][T10214] Call trace: [ 199.623441][T10214] show_stack+0x2c/0x3c (C) [ 199.623455][T10214] __dump_stack+0x30/0x40 [ 199.623465][T10214] dump_stack_lvl+0xd8/0x12c [ 199.623473][T10214] dump_stack+0x1c/0x28 [ 199.623480][T10214] should_fail_ex+0x418/0x58c [ 199.623490][T10214] should_fail+0x14/0x24 [ 199.623498][T10214] should_fail_usercopy+0x20/0x30 [ 199.623506][T10214] _copy_from_iter+0x188/0x1064 [ 199.623516][T10214] tun_get_user+0x1e4/0x37fc [ 199.623526][T10214] tun_chr_write_iter+0xfc/0x168 [ 199.623534][T10214] vfs_write+0x51c/0xa0c [ 199.623543][T10214] ksys_write+0x12c/0x228 [ 199.623551][T10214] __arm64_sys_write+0x84/0x98 [ 199.623559][T10214] invoke_syscall+0x98/0x244 [ 199.623567][T10214] el0_svc_common+0xec/0x23c [ 199.623575][T10214] do_el0_svc+0x4c/0x5c [ 199.623582][T10214] el0_svc+0x60/0x1d8 [ 199.623589][T10214] el0t_64_sync_handler+0x44/0x104 [ 199.623597][T10214] el0t_64_sync+0x198/0x19c [ 199.665876][T10215] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 199.665894][T10215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.685442][T10215] EXT4-fs (loop4): 1 truncate cleaned up [ 199.685893][T10215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.870481][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.870999][ T4747] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 199.871010][ T4747] fserror_report: 7 callbacks suppressed [ 199.871015][ T4747] loop1: lost filesystem error report for type 5 error -117 [ 199.877164][ T4747] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 199.877191][ T4747] loop1: lost filesystem error report for type 5 error -117 [ 199.881160][T10233] loop0: detected capacity change from 0 to 512 [ 199.893399][ T4747] EXT4-fs error (device loop1): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 199.893441][ T4747] fserror_report: 3 callbacks suppressed [ 199.893460][ T4747] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 199.902638][ T4747] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 199.902702][ T4747] loop1: lost filesystem error report for type 5 error -117 [ 200.150144][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.202193][T10233] overlay: filesystem on ./file0 not supported as upperdir [ 200.232344][T10242] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1800'. [ 200.242112][ T4743] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 200.242302][ T4743] EXT4-fs (loop0): Remounting filesystem read-only [ 200.275627][T10251] loop3: detected capacity change from 0 to 2048 [ 200.355121][T10260] bridge0: left promiscuous mode [ 200.355134][T10260] bridge0: left allmulticast mode [ 200.361144][T10260] bond0: left promiscuous mode [ 200.381257][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 200.394624][T10265] loop4: detected capacity change from 0 to 1024 [ 200.395200][T10265] EXT4-fs: Ignoring removed nobh option [ 200.395237][T10265] EXT4-fs: Ignoring removed bh option [ 200.396561][T10265] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 200.409169][T10265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 200.409213][T10265] System zones: 0-1, 3-12 [ 200.880909][T10280] netlink: 'syz.2.1815': attribute type 21 has an invalid length. [ 200.892121][T10282] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1816'. [ 200.924132][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 200.935501][T10286] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 200.967270][T10291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1819'. [ 201.220902][T10307] ubi0: attaching mtd0 [ 201.240147][T10307] ubi0: scanning is finished [ 201.240257][T10307] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 201.501616][T10310] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1827'. [ 201.529110][T10307] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 201.545892][T10317] loop2: detected capacity change from 0 to 512 [ 201.550296][T10317] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 201.550306][T10317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.557695][T10317] EXT4-fs (loop2): 1 truncate cleaned up [ 201.763624][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 201.825696][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1836'. [ 201.903734][T10340] binder: 10339:10340 tried to acquire reference to desc 0, got 1 instead [ 201.939640][T10344] FAULT_INJECTION: forcing a failure. [ 201.939640][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 201.939656][T10344] CPU: 1 UID: 0 PID: 10344 Comm: syz.0.1839 Not tainted syzkaller #0 PREEMPT [ 201.939666][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 201.939679][T10344] Call trace: [ 201.939682][T10344] show_stack+0x2c/0x3c (C) [ 201.939697][T10344] __dump_stack+0x30/0x40 [ 201.939706][T10344] dump_stack_lvl+0xd8/0x12c [ 201.939715][T10344] dump_stack+0x1c/0x28 [ 201.939723][T10344] should_fail_ex+0x418/0x58c [ 201.939735][T10344] should_failslab+0xc4/0x120 [ 201.939745][T10344] __kmalloc_noprof+0x108/0x6c8 [ 201.939757][T10344] security_inode_init_security+0xec/0x370 [ 201.939770][T10344] shmem_mknod+0x1c0/0x2f8 [ 201.939781][T10344] vfs_mknod+0x360/0x4e0 [ 201.939794][T10344] filename_mknodat+0x3a0/0x5a0 [ 201.939806][T10344] __arm64_sys_mknodat+0xc0/0xe8 [ 201.939819][T10344] invoke_syscall+0x98/0x244 [ 201.939828][T10344] el0_svc_common+0xec/0x23c [ 201.939836][T10344] do_el0_svc+0x4c/0x5c [ 201.939845][T10344] el0_svc+0x60/0x1d8 [ 201.939854][T10344] el0t_64_sync_handler+0x44/0x104 [ 201.939862][T10344] el0t_64_sync+0x198/0x19c [ 202.014920][T10338] bond0: option slaves: interface -šT†d does not exist! [ 202.016016][T10349] net_ratelimit: 4659 callbacks suppressed [ 202.027747][T10349] loop2: detected capacity change from 0 to 2048 [ 202.526423][T10357] FAULT_INJECTION: forcing a failure. [ 202.526423][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.526436][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.1.1843 Not tainted syzkaller #0 PREEMPT [ 202.526446][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 202.526457][T10357] Call trace: [ 202.526460][T10357] show_stack+0x2c/0x3c (C) [ 202.526475][T10357] __dump_stack+0x30/0x40 [ 202.526484][T10357] dump_stack_lvl+0xd8/0x12c [ 202.526491][T10357] dump_stack+0x1c/0x28 [ 202.526499][T10357] should_fail_ex+0x418/0x58c [ 202.526509][T10357] should_fail+0x14/0x24 [ 202.526517][T10357] should_fail_usercopy+0x20/0x30 [ 202.526526][T10357] _inline_copy_from_user+0x3c/0x174 [ 202.526534][T10357] fanotify_write+0xec/0x680 [ 202.526541][T10357] vfs_write+0x2a4/0xa0c [ 202.526553][T10357] ksys_write+0x12c/0x228 [ 202.526561][T10357] __arm64_sys_write+0x84/0x98 [ 202.526570][T10357] invoke_syscall+0x98/0x244 [ 202.526581][T10357] el0_svc_common+0xec/0x23c [ 202.526589][T10357] do_el0_svc+0x4c/0x5c [ 202.526596][T10357] el0_svc+0x60/0x1d8 [ 202.526605][T10357] el0t_64_sync_handler+0x44/0x104 [ 202.526613][T10357] el0t_64_sync+0x198/0x19c [ 202.574121][T10349] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 202.700657][T10366] loop4: detected capacity change from 0 to 512 [ 202.702916][T10366] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 202.702932][T10366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.714796][T10366] EXT4-fs (loop4): 1 truncate cleaned up [ 202.725370][T10366] overlayfs: missing 'lowerdir' [ 202.737017][T10369] loop1: detected capacity change from 0 to 512 [ 202.741075][T10369] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 202.741100][T10369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.744979][T10369] EXT4-fs (loop1): 1 truncate cleaned up [ 202.907987][T10382] FAULT_INJECTION: forcing a failure. [ 202.907987][T10382] name failslab, interval 1, probability 0, space 0, times 0 [ 202.907999][T10382] CPU: 0 UID: 0 PID: 10382 Comm: syz.0.1851 Not tainted syzkaller #0 PREEMPT [ 202.908008][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 202.908019][T10382] Call trace: [ 202.908022][T10382] show_stack+0x2c/0x3c (C) [ 202.908035][T10382] __dump_stack+0x30/0x40 [ 202.908044][T10382] dump_stack_lvl+0xd8/0x12c [ 202.908051][T10382] dump_stack+0x1c/0x28 [ 202.908058][T10382] should_fail_ex+0x418/0x58c [ 202.908068][T10382] should_failslab+0xc4/0x120 [ 202.908084][T10382] __kmalloc_cache_noprof+0x94/0x5fc [ 202.908094][T10382] media_pipeline_add_pad+0xc0/0x690 [ 202.908105][T10382] __media_pipeline_start+0x4e4/0x17fc [ 202.908113][T10382] media_pipeline_start+0x58/0x7c [ 202.908122][T10382] video_device_pipeline_start+0x88/0xb4 [ 202.908131][T10382] vimc_capture_start_streaming+0x6c/0xec [ 202.908141][T10382] vb2_start_streaming+0x114/0x4ac [ 202.908149][T10382] vb2_core_streamon+0x288/0x44c [ 202.908157][T10382] vb2_streamon+0x80/0xb4 [ 202.908166][T10382] vb2_ioctl_streamon+0xb8/0xd0 [ 202.908175][T10382] v4l_streamon+0x64/0x94 [ 202.908183][T10382] __video_do_ioctl+0x768/0xaa8 [ 202.908192][T10382] video_usercopy+0x74c/0xe88 [ 202.908200][T10382] video_ioctl2+0x3c/0x50 [ 202.908208][T10382] v4l2_ioctl+0x148/0x18c [ 202.908216][T10382] __arm64_sys_ioctl+0x154/0x1cc [ 202.908225][T10382] invoke_syscall+0x98/0x244 [ 202.908234][T10382] el0_svc_common+0xec/0x23c [ 202.908241][T10382] do_el0_svc+0x4c/0x5c [ 202.908249][T10382] el0_svc+0x60/0x1d8 [ 202.908257][T10382] el0t_64_sync_handler+0x44/0x104 [ 202.908264][T10382] el0t_64_sync+0x198/0x19c [ 203.267044][T10391] loop0: detected capacity change from 0 to 1024 [ 203.267550][T10391] EXT4-fs: Ignoring removed oldalloc option [ 203.273475][T10391] EXT4-fs: Ignoring removed orlov option [ 203.290723][T10391] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4743] was attempted by " : passed\x0ainternal : no\x0atype : kpp\x0a\x0aname : zstd\x0adriver : zstd-generic\x0amodule : kernel\x0apriority : 0\x0arefcnt : 2\x0aselftest : passed\x0ainternal : no\x0atype : acomp\x0a\x0aname : 842\x0adriver : 842-scomp\x0amodule : kernel\x0apriority : 100\x0arefcnt : 5\x0aselftest : passed\x0ainternal : no\x0atype : scomp\x0a\x0aname : lz4hc\x0adriver : lz4hc-scomp\x0amodule : kernel\x0apriority : 0\x0arefcnt : 1\x0aselftest : passed\x0ainternal : no\x0atype : scomp\x0a\x0aname : lz4\x0adriver : lz4-scomp\x0amodule : kernel\x0apriority : 0\x0arefcnt : 1\x0aselftest : passed\x0ainternal : no\x0atype : scomp\x0a\x0aname : lzo-rle\x0adriver : lzo-rle-scomp\x0amodule : kernel\x0apriority : 0\x0arefcn [ 203.292976][T10391] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.1854: lblock 0 mapped to illegal pblock 0 (length 6) [ 203.294422][T10391] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 203.294441][T10391] EXT4-fs (loop0): This should not happen!! Data will be lost [ 203.294441][T10391] [ 203.302434][T10391] PKCS7: Unsupported SignerInfo version [ 203.319974][ T631] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 6) [ 203.321382][ T631] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 203.321397][ T631] EXT4-fs (loop0): This should not happen!! Data will be lost [ 203.321397][ T631] [ 203.322492][ T631] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 203.323365][ T631] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 203.323379][ T631] EXT4-fs (loop0): This should not happen!! Data will be lost [ 203.323379][ T631] [ 203.323387][ T631] EXT4-fs (loop0): Total free blocks count 0 [ 203.323393][ T631] EXT4-fs (loop0): Free/Dirty block details [ 203.323401][ T631] EXT4-fs (loop0): free_blocks=0 [ 203.323409][ T631] EXT4-fs (loop0): dirty_blocks=32 [ 203.323942][ T4743] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 203.516145][ T4754] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 203.567368][T10404] netlink: 'syz.2.1859': attribute type 10 has an invalid length. [ 203.646566][T10407] netlink: 'syz.2.1859': attribute type 4 has an invalid length. [ 203.646577][T10407] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1859'. [ 203.646629][T10404] macvlan1: entered promiscuous mode [ 203.646641][T10404] macvlan1: entered allmulticast mode [ 203.654792][T10404] veth1_vlan: entered allmulticast mode [ 203.658784][T10404] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 203.669087][T10404] loop2: detected capacity change from 0 to 1024 [ 203.673649][T10404] EXT4-fs: Ignoring removed oldalloc option [ 203.673660][T10404] EXT4-fs: Ignoring removed orlov option [ 203.914338][T10424] netlink: 'syz.4.1866': attribute type 21 has an invalid length. [ 204.148924][T10446] loop0: detected capacity change from 0 to 512 [ 204.740981][T10471] netlink: 'syz.4.1882': attribute type 21 has an invalid length. [ 204.761345][T10478] syzkaller0: entered promiscuous mode [ 204.761358][T10478] syzkaller0: entered allmulticast mode [ 204.804542][T10483] loop3: detected capacity change from 0 to 2048 [ 204.851115][T10483] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 204.876364][T10490] netlink: 'syz.2.1889': attribute type 4 has an invalid length. [ 204.876377][T10490] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1889'. [ 205.332878][T10507] bridge0: entered promiscuous mode [ 205.332892][T10507] bridge0: entered allmulticast mode [ 205.355560][T10513] loop2: detected capacity change from 0 to 1024 [ 205.358645][T10513] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 205.364194][T10513] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.1898: lblock 2 mapped to illegal pblock 2 (length 1) [ 205.364212][T10513] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 205.364315][T10513] __quota_error: 2 callbacks suppressed [ 205.364321][T10513] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 205.364334][T10513] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.1898: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.364347][T10513] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 205.364415][T10513] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 205.364422][T10513] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.1898: Failed to acquire dquot type 0 [ 205.364432][T10513] loop2: lost filesystem error report for type 5 error -117 [ 205.364522][T10513] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 205.364531][T10513] loop2: lost filesystem error report for type 5 error -117 [ 205.364599][T10513] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.1898: mark_inode_dirty error [ 205.364610][T10513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.364676][T10513] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 205.364712][T10513] EXT4-fs (loop2): 1 orphan inode deleted [ 205.406726][T10516] syzkaller0: entered promiscuous mode [ 205.406736][T10516] syzkaller0: entered allmulticast mode [ 205.502987][ T3376] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.504835][ T3376] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 205.504852][ T3376] EXT4-fs error (device loop2): ext4_release_dquot:7106: comm kworker/u8:14: Failed to release dquot type 0 [ 205.612494][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 206.355332][T10525] netlink: 'syz.1.1900': attribute type 21 has an invalid length. [ 206.414544][T10529] loop4: detected capacity change from 0 to 2048 [ 206.445387][T10529] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 206.493958][ T4752] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 206.493973][ T4752] loop2: lost filesystem error report for type 5 error -117 [ 206.494084][ T4752] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 206.494098][ T4752] loop2: lost filesystem error report for type 5 error -117 [ 206.494173][ T4752] EXT4-fs error (device loop2): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 206.494184][ T4752] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.494482][ T4752] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 206.494498][ T4752] loop2: lost filesystem error report for type 5 error -117 [ 206.552868][T10544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1908'. [ 206.620631][T10553] syzkaller0: entered promiscuous mode [ 206.620641][T10553] syzkaller0: entered allmulticast mode [ 206.643283][T10555] bridge0: entered promiscuous mode [ 206.643316][T10555] bridge0: entered allmulticast mode [ 206.891890][T10559] FAULT_INJECTION: forcing a failure. [ 206.891890][T10559] name failslab, interval 1, probability 0, space 0, times 0 [ 206.891906][T10559] CPU: 1 UID: 0 PID: 10559 Comm: syz.1.1914 Not tainted syzkaller #0 PREEMPT [ 206.891916][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 206.891928][T10559] Call trace: [ 206.891931][T10559] show_stack+0x2c/0x3c (C) [ 206.891946][T10559] __dump_stack+0x30/0x40 [ 206.891955][T10559] dump_stack_lvl+0xd8/0x12c [ 206.891963][T10559] dump_stack+0x1c/0x28 [ 206.891970][T10559] should_fail_ex+0x418/0x58c [ 206.891980][T10559] should_failslab+0xc4/0x120 [ 206.891989][T10559] kmem_cache_alloc_node_noprof+0x98/0x604 [ 206.891999][T10559] __alloc_skb+0x1f0/0x610 [ 206.892010][T10559] alloc_skb_with_frags+0xb8/0x690 [ 206.892018][T10559] sock_alloc_send_pskb+0x740/0x850 [ 206.892027][T10559] hci_sock_sendmsg+0x1c0/0xc44 [ 206.892040][T10559] __sock_sendmsg+0xc8/0x17c [ 206.892050][T10559] sock_write_iter+0x220/0x310 [ 206.892060][T10559] vfs_write+0x51c/0xa0c [ 206.892069][T10559] ksys_write+0x12c/0x228 [ 206.892077][T10559] __arm64_sys_write+0x84/0x98 [ 206.892091][T10559] invoke_syscall+0x98/0x244 [ 206.892100][T10559] el0_svc_common+0xec/0x23c [ 206.892108][T10559] do_el0_svc+0x4c/0x5c [ 206.892116][T10559] el0_svc+0x60/0x1d8 [ 206.892124][T10559] el0t_64_sync_handler+0x44/0x104 [ 206.892132][T10559] el0t_64_sync+0x198/0x19c [ 206.929262][T10561] loop1: detected capacity change from 0 to 2048 [ 206.962997][T10561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 207.425975][T10585] FAULT_INJECTION: forcing a failure. [ 207.425975][T10585] name failslab, interval 1, probability 0, space 0, times 0 [ 207.425990][T10585] CPU: 0 UID: 0 PID: 10585 Comm: syz.2.1924 Not tainted syzkaller #0 PREEMPT [ 207.426001][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 207.426014][T10585] Call trace: [ 207.426017][T10585] show_stack+0x2c/0x3c (C) [ 207.426033][T10585] __dump_stack+0x30/0x40 [ 207.426044][T10585] dump_stack_lvl+0xd8/0x12c [ 207.426052][T10585] dump_stack+0x1c/0x28 [ 207.426060][T10585] should_fail_ex+0x418/0x58c [ 207.426080][T10585] should_failslab+0xc4/0x120 [ 207.426092][T10585] __kmalloc_cache_noprof+0x94/0x5fc [ 207.426105][T10585] vidtv_psi_sdt_table_init+0x60/0x278 [ 207.426120][T10585] vidtv_channel_si_init+0xa8/0x1224 [ 207.426132][T10585] vidtv_mux_init+0x390/0x7e4 [ 207.426144][T10585] vidtv_start_feed+0x2e0/0x49c [ 207.426155][T10585] dmx_section_feed_start_filtering+0x328/0x464 [ 207.426165][T10585] dvb_dmxdev_filter_start+0x748/0xa8c [ 207.426178][T10585] dvb_dmxdev_filter_set+0x158/0x288 [ 207.426191][T10585] dvb_demux_do_ioctl+0x3f4/0x4bc [ 207.426203][T10585] dvb_usercopy+0x2a4/0x4d4 [ 207.426215][T10585] dvb_demux_ioctl+0x3c/0x54 [ 207.426227][T10585] __arm64_sys_ioctl+0x154/0x1cc [ 207.426237][T10585] invoke_syscall+0x98/0x244 [ 207.426246][T10585] el0_svc_common+0xec/0x23c [ 207.426255][T10585] do_el0_svc+0x4c/0x5c [ 207.426263][T10585] el0_svc+0x60/0x1d8 [ 207.426272][T10585] el0t_64_sync_handler+0x44/0x104 [ 207.426281][T10585] el0t_64_sync+0x198/0x19c [ 207.450695][T10589] FAULT_INJECTION: forcing a failure. [ 207.450695][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.450710][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.1.1922 Not tainted syzkaller #0 PREEMPT [ 207.450720][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 207.450732][T10589] Call trace: [ 207.450735][T10589] show_stack+0x2c/0x3c (C) [ 207.450748][T10589] __dump_stack+0x30/0x40 [ 207.450757][T10589] dump_stack_lvl+0xd8/0x12c [ 207.450764][T10589] dump_stack+0x1c/0x28 [ 207.450771][T10589] should_fail_ex+0x418/0x58c [ 207.450781][T10589] should_fail+0x14/0x24 [ 207.450789][T10589] should_fail_usercopy+0x20/0x30 [ 207.450798][T10589] _inline_copy_from_user+0x3c/0x174 [ 207.450809][T10589] kstrtouint_from_user+0xcc/0x174 [ 207.450818][T10589] proc_fail_nth_write+0x9c/0x234 [ 207.450829][T10589] vfs_write+0x2a4/0xa0c [ 207.450838][T10589] ksys_write+0x12c/0x228 [ 207.450845][T10589] __arm64_sys_write+0x84/0x98 [ 207.450853][T10589] invoke_syscall+0x98/0x244 [ 207.450861][T10589] el0_svc_common+0xec/0x23c [ 207.450869][T10589] do_el0_svc+0x4c/0x5c [ 207.450876][T10589] el0_svc+0x60/0x1d8 [ 207.450884][T10589] el0t_64_sync_handler+0x44/0x104 [ 207.450891][T10589] el0t_64_sync+0x198/0x19c [ 207.453570][T10588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1925'. [ 207.482558][T10592] FAULT_INJECTION: forcing a failure. [ 207.482558][T10592] name failslab, interval 1, probability 0, space 0, times 0 [ 207.482575][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.4.1923 Not tainted syzkaller #0 PREEMPT [ 207.482588][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 207.482601][T10592] Call trace: [ 207.482604][T10592] show_stack+0x2c/0x3c (C) [ 207.482616][T10592] __dump_stack+0x30/0x40 [ 207.482624][T10592] dump_stack_lvl+0xd8/0x12c [ 207.482631][T10592] dump_stack+0x1c/0x28 [ 207.482638][T10592] should_fail_ex+0x418/0x58c [ 207.482649][T10592] should_failslab+0xc4/0x120 [ 207.482658][T10592] kmem_cache_alloc_node_noprof+0x98/0x604 [ 207.482667][T10592] __alloc_skb+0x1f0/0x610 [ 207.482677][T10592] netlink_alloc_large_skb+0xd4/0x114 [ 207.482687][T10592] netlink_sendmsg+0x4c4/0x948 [ 207.482697][T10592] __sock_sendmsg+0xc8/0x17c [ 207.482706][T10592] ____sys_sendmsg+0x3d0/0x6c8 [ 207.482716][T10592] ___sys_sendmsg+0x198/0x224 [ 207.482725][T10592] __sys_sendmsg+0x158/0x204 [ 207.482735][T10592] __arm64_sys_sendmsg+0x88/0x9c [ 207.482745][T10592] invoke_syscall+0x98/0x244 [ 207.482753][T10592] el0_svc_common+0xec/0x23c [ 207.482760][T10592] do_el0_svc+0x4c/0x5c [ 207.482767][T10592] el0_svc+0x60/0x1d8 [ 207.482775][T10592] el0t_64_sync_handler+0x44/0x104 [ 207.482782][T10592] el0t_64_sync+0x198/0x19c [ 208.001784][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 208.188583][T10607] capability: warning: `syz.3.1931' uses 32-bit capabilities (legacy support in use) [ 208.315452][T10609] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1932'. [ 208.449417][T10620] loop2: detected capacity change from 0 to 512 [ 208.450061][T10620] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 208.450068][T10620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.693468][T10620] EXT4-fs (loop2): 1 truncate cleaned up [ 208.697430][T10620] overlayfs: missing 'lowerdir' [ 208.701683][T10624] loop3: detected capacity change from 0 to 128 [ 208.710175][T10624] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 208.949569][T10642] net_ratelimit: 539 callbacks suppressed [ 208.952042][T10642] loop1: detected capacity change from 0 to 512 [ 208.953846][T10642] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 208.953859][T10642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.981233][T10642] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1943: invalid indirect mapped block 32768 (level 2) [ 208.981256][T10642] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.987611][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 208.987627][ C0] EXT4-fs (loop1): initial error at time 214: ext4_free_branches:1023: inode 16 [ 208.987646][ C0] EXT4-fs (loop1): last error at time 214: ext4_free_branches:1023: inode 16 [ 209.000139][T10642] EXT4-fs (loop1): 1 orphan inode deleted [ 209.000153][T10642] EXT4-fs (loop1): 1 truncate cleaned up [ 209.080197][T10644] loop2: detected capacity change from 0 to 8192 [ 209.124489][T10644] Dev loop2: RDB in block 1 has bad checksum [ 209.254079][T10648] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20ffa000 [ 209.264037][T10648] Memory failure: 0x216a31: unhandlable page. [ 209.264051][T10648] Memory failure: 0x216a31: recovery action for reserved kernel page: Ignored [ 209.499217][T10661] ubi0: attaching mtd0 [ 209.507118][T10661] ubi0: scanning is finished [ 209.507228][T10661] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 209.828570][T10661] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 209.912240][T10670] i2c i2c-0: new_device: Can't parse I2C address [ 210.009758][ T4750] Bluetooth: hci5: command 0x1003 tx timeout [ 210.009841][ T4754] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 210.378844][T10678] bond2: option xmit_hash_policy: invalid value (6) [ 210.397433][T10678] bond2 (unregistering): Released all slaves [ 210.666181][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 210.666361][T10690] block nbd1: server does not support multiple connections per device. [ 210.666683][T10690] block nbd1: shutting down sockets [ 210.757357][T10700] loop2: detected capacity change from 0 to 2048 [ 210.803543][T10700] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 210.905868][T10704] ubi0: attaching mtd0 [ 210.907849][T10704] ubi0: scanning is finished [ 210.907874][T10704] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 210.998833][T10704] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 211.713229][T10726] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 211.763148][T10731] fuse: Unknown parameter 'group_' [ 211.794154][T10734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1974'. [ 211.874413][T10738] FAULT_INJECTION: forcing a failure. [ 211.874413][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 211.874427][T10738] CPU: 1 UID: 0 PID: 10738 Comm: syz.2.1976 Not tainted syzkaller #0 PREEMPT [ 211.874438][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 211.874449][T10738] Call trace: [ 211.874452][T10738] show_stack+0x2c/0x3c (C) [ 211.874467][T10738] __dump_stack+0x30/0x40 [ 211.874476][T10738] dump_stack_lvl+0xd8/0x12c [ 211.874483][T10738] dump_stack+0x1c/0x28 [ 211.874490][T10738] should_fail_ex+0x418/0x58c [ 211.874500][T10738] should_failslab+0xc4/0x120 [ 211.874509][T10738] __kmalloc_cache_noprof+0x94/0x5fc [ 211.874519][T10738] kobject_uevent_env+0x250/0x944 [ 211.874529][T10738] kobject_uevent+0x2c/0x3c [ 211.874537][T10738] device_del+0x5f8/0x71c [ 211.874545][T10738] rfkill_unregister+0xa8/0x204 [ 211.874557][T10738] nfc_unregister_rfkill+0xc4/0x284 [ 211.874566][T10738] nci_unregister_device+0x54/0x248 [ 211.874574][T10738] virtual_ncidev_close+0x5c/0xa0 [ 211.874582][T10738] __fput+0x338/0x74c [ 211.874591][T10738] fput_close_sync+0x10c/0x278 [ 211.874604][T10738] __arm64_sys_close+0x80/0x110 [ 211.874611][T10738] invoke_syscall+0x98/0x244 [ 211.874620][T10738] el0_svc_common+0xec/0x23c [ 211.874627][T10738] do_el0_svc+0x4c/0x5c [ 211.874635][T10738] el0_svc+0x60/0x1d8 [ 211.874642][T10738] el0t_64_sync_handler+0x44/0x104 [ 211.874650][T10738] el0t_64_sync+0x198/0x19c [ 211.950752][T10745] loop2: detected capacity change from 0 to 1024 [ 211.970926][T10745] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 211.986923][T10745] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.1978: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.986945][T10745] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 211.987138][T10745] Quota error (device loop2): write_blk: dquota write failed [ 211.987155][T10745] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 211.987180][T10745] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.1978: Failed to acquire dquot type 0 [ 211.987193][T10745] loop2: lost filesystem error report for type 5 error -117 [ 211.987338][T10745] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.1978: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.987350][T10745] loop2: lost filesystem error report for type 5 error -117 [ 211.990967][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 211.990981][ C1] EXT4-fs (loop2): initial error at time 217: ext4_map_blocks:832: inode 3: block 1 [ 211.991001][ C1] EXT4-fs (loop2): last error at time 217: ext4_free_blocks:6719 [ 212.016118][T10745] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1978: Invalid inode bitmap blk 0 in block_group 0 [ 212.016142][T10745] loop2: lost filesystem error report for type 5 error -117 [ 212.017140][T10745] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 212.017160][T10745] loop2: lost filesystem error report for type 5 error -117 [ 212.024428][T10745] EXT4-fs (loop2): 1 orphan inode deleted [ 212.033123][ T3664] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.033276][ T3664] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 212.033290][ T3664] EXT4-fs error (device loop2): ext4_release_dquot:7106: comm kworker/u8:15: Failed to release dquot type 0 [ 212.037339][T10745] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.1978: Invalid block bitmap block 0 in block_group 0 [ 212.451061][T10755] loop3: detected capacity change from 0 to 2048 [ 212.626377][T10768] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1986'. [ 212.684786][T10770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1984'. [ 212.684803][T10770] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1984'. [ 212.684813][T10770] netlink: 'syz.3.1984': attribute type 5 has an invalid length. [ 212.684820][T10770] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1984'. [ 212.931845][T10778] bridge0: entered promiscuous mode [ 212.931871][T10778] bridge0: entered allmulticast mode [ 212.961627][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 212.993524][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 213.005067][T10784] FAULT_INJECTION: forcing a failure. [ 213.005067][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 213.005091][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.1.1991 Not tainted syzkaller #0 PREEMPT [ 213.005105][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 213.005119][T10784] Call trace: [ 213.005122][T10784] show_stack+0x2c/0x3c (C) [ 213.005138][T10784] __dump_stack+0x30/0x40 [ 213.005146][T10784] dump_stack_lvl+0xd8/0x12c [ 213.005155][T10784] dump_stack+0x1c/0x28 [ 213.005163][T10784] should_fail_ex+0x418/0x58c [ 213.005174][T10784] should_failslab+0xc4/0x120 [ 213.005185][T10784] __kmalloc_noprof+0x108/0x6c8 [ 213.005195][T10784] security_prepare_creds+0x60/0x35c [ 213.005209][T10784] prepare_creds+0x500/0x7d0 [ 213.005219][T10784] __sys_setuid+0x8c/0x35c [ 213.005231][T10784] __arm64_sys_setuid+0x40/0x50 [ 213.005243][T10784] invoke_syscall+0x98/0x244 [ 213.005252][T10784] el0_svc_common+0xec/0x23c [ 213.005261][T10784] do_el0_svc+0x4c/0x5c [ 213.005269][T10784] el0_svc+0x60/0x1d8 [ 213.005278][T10784] el0t_64_sync_handler+0x44/0x104 [ 213.005286][T10784] el0t_64_sync+0x198/0x19c [ 213.084750][ T4754] block nbd1: Receive control failed (result -32) [ 213.084752][ T4750] block nbd1: Receive control failed (result -32) [ 213.091626][T10790] netlink: 'syz.0.1994': attribute type 21 has an invalid length. [ 213.138990][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 213.155721][T10798] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1997'. [ 213.182665][T10802] loop4: detected capacity change from 0 to 1024 [ 213.183402][T10802] EXT4-fs: Ignoring removed nobh option [ 213.183446][T10802] EXT4-fs: Ignoring removed bh option [ 213.188937][T10802] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 213.214599][T10802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 213.214634][T10802] System zones: 0-1, 3-12 [ 213.217991][T10802] EXT4-fs mount: 40 callbacks suppressed [ 213.218001][T10802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.239284][T10806] device-mapper: raid: Choosing default region size of 4MiB [ 213.239787][T10806] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 213.328431][T10811] bridge0: entered promiscuous mode [ 213.328444][T10811] bridge0: entered allmulticast mode [ 213.329638][T10806] mdX: WARNING: ram3 appears to be on the same physical disk as ram3. [ 213.329653][T10806] True protection against single-disk failure might be compromised. [ 213.329662][T10806] md/raid:mdX: not enough configured devices (3, minimum 4) [ 213.329669][T10806] md: pers->run() failed ... [ 213.330066][T10806] device-mapper: table: 248:6: raid: Failed to run raid array (-EINVAL) [ 213.330076][T10806] device-mapper: ioctl: error adding target to table [ 213.603699][T10816] FAULT_INJECTION: forcing a failure. [ 213.603699][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 213.603722][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.0.2003 Not tainted syzkaller #0 PREEMPT [ 213.603735][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 213.603751][T10816] Call trace: [ 213.603755][T10816] show_stack+0x2c/0x3c (C) [ 213.603770][T10816] __dump_stack+0x30/0x40 [ 213.603778][T10816] dump_stack_lvl+0xd8/0x12c [ 213.603786][T10816] dump_stack+0x1c/0x28 [ 213.603793][T10816] should_fail_ex+0x418/0x58c [ 213.603803][T10816] should_failslab+0xc4/0x120 [ 213.603813][T10816] __kmalloc_noprof+0x108/0x6c8 [ 213.603822][T10816] tomoyo_encode2+0x10c/0x330 [ 213.603831][T10816] tomoyo_encode+0x34/0x50 [ 213.603838][T10816] tomoyo_realpath_from_path+0x488/0x4dc [ 213.603846][T10816] tomoyo_check_open_permission+0x1c4/0x394 [ 213.603857][T10816] tomoyo_file_open+0x78/0xcc [ 213.603864][T10816] security_file_open+0xbc/0x258 [ 213.603875][T10816] do_dentry_open+0x2a8/0xfbc [ 213.603883][T10816] vfs_open+0x44/0x2dc [ 213.603890][T10816] path_openat+0x1084/0x18f0 [ 213.603901][T10816] do_file_open+0x1c8/0x2e8 [ 213.603911][T10816] do_sys_openat2+0x114/0x1e8 [ 213.603918][T10816] do_sys_open+0xb0/0xe0 [ 213.603926][T10816] __arm64_sys_openat+0xa8/0xc4 [ 213.603933][T10816] invoke_syscall+0x98/0x244 [ 213.603941][T10816] el0_svc_common+0xec/0x23c [ 213.603949][T10816] do_el0_svc+0x4c/0x5c [ 213.603956][T10816] el0_svc+0x60/0x1d8 [ 213.603964][T10816] el0t_64_sync_handler+0x44/0x104 [ 213.603972][T10816] el0t_64_sync+0x198/0x19c [ 213.603984][T10816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.604058][T10816] FAULT_INJECTION: forcing a failure. [ 213.604058][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 213.604067][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.0.2003 Not tainted syzkaller #0 PREEMPT [ 213.604080][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 213.604091][T10816] Call trace: [ 213.604094][T10816] show_stack+0x2c/0x3c (C) [ 213.604103][T10816] __dump_stack+0x30/0x40 [ 213.604113][T10816] dump_stack_lvl+0xd8/0x12c [ 213.604120][T10816] dump_stack+0x1c/0x28 [ 213.604127][T10816] should_fail_ex+0x418/0x58c [ 213.604136][T10816] should_failslab+0xc4/0x120 [ 213.604144][T10816] kmem_cache_alloc_noprof+0x94/0x5d4 [ 213.604153][T10816] prepare_creds+0x34/0x7d0 [ 213.604161][T10816] join_session_keyring+0x24/0x2d0 [ 213.604169][T10816] lookup_user_key+0x338/0xd4c [ 213.604176][T10816] __arm64_sys_add_key+0x34c/0x43c [ 213.604186][T10816] invoke_syscall+0x98/0x244 [ 213.604193][T10816] el0_svc_common+0xec/0x23c [ 213.604201][T10816] do_el0_svc+0x4c/0x5c [ 213.604208][T10816] el0_svc+0x60/0x1d8 [ 213.604215][T10816] el0t_64_sync_handler+0x44/0x104 [ 213.604222][T10816] el0t_64_sync+0x198/0x19c [ 213.736289][T10824] block nbd2: server does not support multiple connections per device. [ 213.736452][T10824] block nbd2: shutting down sockets [ 214.061448][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.118606][T10836] netlink: 'syz.4.2009': attribute type 21 has an invalid length. [ 214.201436][T10845] FAULT_INJECTION: forcing a failure. [ 214.201436][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 214.201448][T10845] CPU: 1 UID: 0 PID: 10845 Comm: syz.3.2013 Not tainted syzkaller #0 PREEMPT [ 214.201458][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 214.201470][T10845] Call trace: [ 214.201473][T10845] show_stack+0x2c/0x3c (C) [ 214.201488][T10845] __dump_stack+0x30/0x40 [ 214.201497][T10845] dump_stack_lvl+0xd8/0x12c [ 214.201506][T10845] dump_stack+0x1c/0x28 [ 214.201513][T10845] should_fail_ex+0x418/0x58c [ 214.201525][T10845] should_failslab+0xc4/0x120 [ 214.201535][T10845] __kmalloc_noprof+0x108/0x6c8 [ 214.201547][T10845] x509_fabricate_name+0x498/0x858 [ 214.201556][T10845] x509_note_issuer+0x160/0x19c [ 214.201564][T10845] asn1_ber_decoder+0xf24/0x1944 [ 214.201573][T10845] x509_cert_parse+0x1a4/0x65c [ 214.201580][T10845] x509_key_preparse+0x74/0x630 [ 214.201589][T10845] asymmetric_key_preparse+0xcc/0x1c0 [ 214.201601][T10845] __key_create_or_update+0x264/0x7fc [ 214.201614][T10845] key_create_or_update+0x60/0x7c [ 214.201624][T10845] __arm64_sys_add_key+0x384/0x43c [ 214.201636][T10845] invoke_syscall+0x98/0x244 [ 214.201645][T10845] el0_svc_common+0xec/0x23c [ 214.201654][T10845] do_el0_svc+0x4c/0x5c [ 214.201662][T10845] el0_svc+0x60/0x1d8 [ 214.201671][T10845] el0t_64_sync_handler+0x44/0x104 [ 214.201679][T10845] el0t_64_sync+0x198/0x19c [ 214.277326][T10851] block nbd2: server does not support multiple connections per device. [ 214.280284][T10851] block nbd2: shutting down sockets [ 214.284650][ T30] audit: type=1326 audit(220.260:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10852 comm="syz.4.2017" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf77a228 code=0x0 [ 214.358026][T10862] md: array md1 already initialised! [ 214.885302][T10877] loop2: detected capacity change from 0 to 1024 [ 214.891444][T10877] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 214.894916][T10877] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 214.895378][T10877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.930372][ T4752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.961486][T10880] netlink: 'syz.2.2026': attribute type 21 has an invalid length. [ 215.187944][T10886] md: array md4 already initialised! [ 215.188475][T10886] FAULT_INJECTION: forcing a failure. [ 215.188475][T10886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.188489][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.4.2029 Not tainted syzkaller #0 PREEMPT [ 215.188499][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 215.188512][T10886] Call trace: [ 215.188515][T10886] show_stack+0x2c/0x3c (C) [ 215.188530][T10886] __dump_stack+0x30/0x40 [ 215.188539][T10886] dump_stack_lvl+0xd8/0x12c [ 215.188547][T10886] dump_stack+0x1c/0x28 [ 215.188554][T10886] should_fail_ex+0x418/0x58c [ 215.188564][T10886] should_fail+0x14/0x24 [ 215.188572][T10886] should_fail_usercopy+0x20/0x30 [ 215.188581][T10886] md_ioctl+0x1734/0x23d4 [ 215.188591][T10886] blkdev_ioctl+0x574/0x904 [ 215.188600][T10886] __arm64_sys_ioctl+0x154/0x1cc [ 215.188609][T10886] invoke_syscall+0x98/0x244 [ 215.188617][T10886] el0_svc_common+0xec/0x23c [ 215.188624][T10886] do_el0_svc+0x4c/0x5c [ 215.188632][T10886] el0_svc+0x60/0x1d8 [ 215.188640][T10886] el0t_64_sync_handler+0x44/0x104 [ 215.188647][T10886] el0t_64_sync+0x198/0x19c [ 215.273371][ T321] Bluetooth: hci5: Frame reassembly failed (-84) [ 215.540196][T10903] loop0: detected capacity change from 0 to 512 [ 215.542047][T10905] net_ratelimit: 1168 callbacks suppressed [ 215.546151][T10903] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 215.546165][T10903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.556661][T10903] EXT4-fs (loop0): 1 truncate cleaned up [ 215.557145][T10903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.563096][T10903] overlayfs: missing 'workdir' [ 215.593667][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.608961][T10905] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 215.636416][T10912] netlink: 'syz.1.2038': attribute type 21 has an invalid length. [ 215.653625][T10914] FAULT_INJECTION: forcing a failure. [ 215.653625][T10914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.653642][T10914] CPU: 1 UID: 0 PID: 10914 Comm: syz.3.2039 Not tainted syzkaller #0 PREEMPT [ 215.653655][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 215.653670][T10914] Call trace: [ 215.653673][T10914] show_stack+0x2c/0x3c (C) [ 215.653688][T10914] __dump_stack+0x30/0x40 [ 215.653696][T10914] dump_stack_lvl+0xd8/0x12c [ 215.653704][T10914] dump_stack+0x1c/0x28 [ 215.653711][T10914] should_fail_ex+0x418/0x58c [ 215.653722][T10914] should_fail+0x14/0x24 [ 215.653730][T10914] should_fail_usercopy+0x20/0x30 [ 215.653738][T10914] _inline_copy_from_user+0x3c/0x174 [ 215.653750][T10914] do_sock_getsockopt+0x210/0x720 [ 215.653760][T10914] __sys_getsockopt+0xfc/0x168 [ 215.653769][T10914] __arm64_sys_getsockopt+0xc8/0xe4 [ 215.653780][T10914] invoke_syscall+0x98/0x244 [ 215.653788][T10914] el0_svc_common+0xec/0x23c [ 215.653795][T10914] do_el0_svc+0x4c/0x5c [ 215.653803][T10914] el0_svc+0x60/0x1d8 [ 215.653811][T10914] el0t_64_sync_handler+0x44/0x104 [ 215.653818][T10914] el0t_64_sync+0x198/0x19c [ 215.719442][T10922] syzkaller0: entered promiscuous mode [ 215.719452][T10922] syzkaller0: entered allmulticast mode [ 215.742737][T10922] vivid-000: disconnect [ 215.745699][ T30] audit: type=1326 audit(221.730:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.0.2040" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf7a228 code=0x7ffc0000 [ 215.746034][ T30] audit: type=1326 audit(221.730:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.0.2040" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf7a228 code=0x7ffc0000 [ 215.746162][ T30] audit: type=1326 audit(221.730:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.0.2040" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf7a228 code=0x7ffc0000 [ 215.746244][ T30] audit: type=1326 audit(221.730:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.0.2040" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=292 compat=0 ip=0xffff9cf7a228 code=0x7ffc0000 [ 215.746321][ T30] audit: type=1326 audit(221.730:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.0.2040" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf7a228 code=0x7ffc0000 [ 215.746386][ T30] audit: type=1326 audit(221.730:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.0.2040" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf7a228 code=0x7ffc0000 [ 216.088941][T10921] vivid-000: reconnect [ 216.119533][T10932] loop3: detected capacity change from 0 to 1024 [ 216.120490][T10932] EXT4-fs: Ignoring removed nobh option [ 216.120527][T10932] EXT4-fs: Ignoring removed bh option [ 216.125784][T10932] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 216.207968][T10932] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 216.208016][T10932] System zones: 0-1, 3-12 [ 216.208578][T10932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.592501][T10942] loop4: detected capacity change from 0 to 512 [ 216.593283][T10942] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 216.593290][T10942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.606001][T10942] EXT4-fs (loop4): 1 truncate cleaned up [ 216.606507][T10942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.608871][T10942] overlayfs: missing 'workdir' [ 216.656804][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.692925][T10945] loop1: detected capacity change from 0 to 2048 [ 216.694998][T10947] FAULT_INJECTION: forcing a failure. [ 216.694998][T10947] name failslab, interval 1, probability 0, space 0, times 0 [ 216.695014][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.4.2050 Not tainted syzkaller #0 PREEMPT [ 216.695025][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 216.695038][T10947] Call trace: [ 216.695041][T10947] show_stack+0x2c/0x3c (C) [ 216.695055][T10947] __dump_stack+0x30/0x40 [ 216.695064][T10947] dump_stack_lvl+0xd8/0x12c [ 216.695071][T10947] dump_stack+0x1c/0x28 [ 216.695078][T10947] should_fail_ex+0x418/0x58c [ 216.695096][T10947] should_failslab+0xc4/0x120 [ 216.695106][T10947] __kmalloc_cache_noprof+0x94/0x5fc [ 216.695116][T10947] drm_atomic_commit_alloc+0xbc/0x108 [ 216.695129][T10947] drm_mode_atomic_ioctl+0x3e0/0x1fb8 [ 216.695137][T10947] drm_ioctl_kernel+0x250/0x31c [ 216.695146][T10947] drm_ioctl+0x694/0xac8 [ 216.695153][T10947] __arm64_sys_ioctl+0x154/0x1cc [ 216.695162][T10947] invoke_syscall+0x98/0x244 [ 216.695170][T10947] el0_svc_common+0xec/0x23c [ 216.695178][T10947] do_el0_svc+0x4c/0x5c [ 216.695185][T10947] el0_svc+0x60/0x1d8 [ 216.695194][T10947] el0t_64_sync_handler+0x44/0x104 [ 216.695201][T10947] el0t_64_sync+0x198/0x19c [ 216.709697][T10945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.733959][T10951] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 216.742882][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.994764][T10970] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 216.994808][T10970] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.111062][T10970] loop1: detected capacity change from 0 to 2048 [ 217.692431][ T4754] Bluetooth: hci5: command 0x1003 tx timeout [ 217.692521][ T4750] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.799783][T10970] loop1: unable to read partition table [ 217.799839][T10970] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 217.886693][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.026732][T10982] FAULT_INJECTION: forcing a failure. [ 218.026732][T10982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.026748][T10982] CPU: 1 UID: 0 PID: 10982 Comm: syz.1.2064 Not tainted syzkaller #0 PREEMPT [ 218.026759][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 218.026771][T10982] Call trace: [ 218.026774][T10982] show_stack+0x2c/0x3c (C) [ 218.026790][T10982] __dump_stack+0x30/0x40 [ 218.026799][T10982] dump_stack_lvl+0xd8/0x12c [ 218.026807][T10982] dump_stack+0x1c/0x28 [ 218.026814][T10982] should_fail_ex+0x418/0x58c [ 218.026824][T10982] should_fail+0x14/0x24 [ 218.026832][T10982] should_fail_usercopy+0x20/0x30 [ 218.026841][T10982] simple_read_from_buffer+0xc4/0x238 [ 218.026849][T10982] proc_fail_nth_read+0x1a8/0x248 [ 218.026860][T10982] vfs_read+0x230/0x8c8 [ 218.026869][T10982] ksys_read+0x12c/0x228 [ 218.026877][T10982] __arm64_sys_read+0x84/0x98 [ 218.026885][T10982] invoke_syscall+0x98/0x244 [ 218.026893][T10982] el0_svc_common+0xec/0x23c [ 218.026901][T10982] do_el0_svc+0x4c/0x5c [ 218.026908][T10982] el0_svc+0x60/0x1d8 [ 218.026917][T10982] el0t_64_sync_handler+0x44/0x104 [ 218.026924][T10982] el0t_64_sync+0x198/0x19c [ 218.107060][T10992] syzkaller0: entered promiscuous mode [ 218.107069][T10992] syzkaller0: entered allmulticast mode [ 218.160948][T10996] FAULT_INJECTION: forcing a failure. [ 218.160948][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.160969][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.1.2071 Not tainted syzkaller #0 PREEMPT [ 218.160982][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 218.160995][T10996] Call trace: [ 218.160998][T10996] show_stack+0x2c/0x3c (C) [ 218.161012][T10996] __dump_stack+0x30/0x40 [ 218.161020][T10996] dump_stack_lvl+0xd8/0x12c [ 218.161028][T10996] dump_stack+0x1c/0x28 [ 218.161035][T10996] should_fail_ex+0x418/0x58c [ 218.161045][T10996] should_fail+0x14/0x24 [ 218.161053][T10996] should_fail_usercopy+0x20/0x30 [ 218.161062][T10996] _copy_from_iter+0x188/0x1064 [ 218.161072][T10996] netlink_sendmsg+0x570/0x948 [ 218.161090][T10996] __sock_sendmsg+0xc8/0x17c [ 218.161101][T10996] ____sys_sendmsg+0x3d0/0x6c8 [ 218.161111][T10996] ___sys_sendmsg+0x198/0x224 [ 218.161120][T10996] __sys_sendmsg+0x158/0x204 [ 218.161130][T10996] __arm64_sys_sendmsg+0x88/0x9c [ 218.161140][T10996] invoke_syscall+0x98/0x244 [ 218.161148][T10996] el0_svc_common+0xec/0x23c [ 218.161155][T10996] do_el0_svc+0x4c/0x5c [ 218.161163][T10996] el0_svc+0x60/0x1d8 [ 218.161171][T10996] el0t_64_sync_handler+0x44/0x104 [ 218.161178][T10996] el0t_64_sync+0x198/0x19c [ 218.201657][T11000] loop0: detected capacity change from 0 to 1024 [ 218.205518][T11000] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 218.211781][T11000] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.2072: lblock 2 mapped to illegal pblock 2 (length 1) [ 218.211805][T11000] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 218.211916][T11000] __quota_error: 3 callbacks suppressed [ 218.211923][T11000] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 218.211938][T11000] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.2072: lblock 0 mapped to illegal pblock 48 (length 1) [ 218.211952][T11000] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 218.212018][T11000] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 218.212028][T11000] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.2072: Failed to acquire dquot type 0 [ 218.212039][T11000] loop0: lost filesystem error report for type 5 error -117 [ 218.212143][T11000] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 218.212154][T11000] loop0: lost filesystem error report for type 5 error -117 [ 218.212422][T11000] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.2072: mark_inode_dirty error [ 218.212449][T11000] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 218.212561][T11000] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 218.212623][T11000] EXT4-fs (loop0): 1 orphan inode deleted [ 218.213317][T11000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.230758][ T3059] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 218.230930][ T3059] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 218.230945][ T3059] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:11: Failed to release dquot type 0 [ 219.090839][T11005] FAULT_INJECTION: forcing a failure. [ 219.090839][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.090861][T11005] CPU: 1 UID: 0 PID: 11005 Comm: syz.3.2074 Not tainted syzkaller #0 PREEMPT [ 219.090872][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 219.090885][T11005] Call trace: [ 219.090888][T11005] show_stack+0x2c/0x3c (C) [ 219.090903][T11005] __dump_stack+0x30/0x40 [ 219.090911][T11005] dump_stack_lvl+0xd8/0x12c [ 219.090918][T11005] dump_stack+0x1c/0x28 [ 219.090926][T11005] should_fail_ex+0x418/0x58c [ 219.090935][T11005] should_fail+0x14/0x24 [ 219.090944][T11005] should_fail_usercopy+0x20/0x30 [ 219.090952][T11005] _inline_copy_from_user+0x3c/0x174 [ 219.090963][T11005] kstrtouint_from_user+0xcc/0x174 [ 219.090972][T11005] proc_fail_nth_write+0x9c/0x234 [ 219.090983][T11005] vfs_write+0x2a4/0xa0c [ 219.090992][T11005] ksys_write+0x12c/0x228 [ 219.091000][T11005] __arm64_sys_write+0x84/0x98 [ 219.091008][T11005] invoke_syscall+0x98/0x244 [ 219.091016][T11005] el0_svc_common+0xec/0x23c [ 219.091024][T11005] do_el0_svc+0x4c/0x5c [ 219.091031][T11005] el0_svc+0x60/0x1d8 [ 219.091039][T11005] el0t_64_sync_handler+0x44/0x104 [ 219.091046][T11005] el0t_64_sync+0x198/0x19c [ 219.126774][T11013] loop7: detected capacity change from 0 to 7 [ 219.131133][T11013] Dev loop7: unable to read RDB block 7 [ 219.131151][T11013] loop7: unable to read partition table [ 219.131221][T11013] loop7: partition table beyond EOD, truncated [ 219.135990][T11013] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.197115][T11013] __nla_validate_parse: 3 callbacks suppressed [ 219.197129][T11013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2076'. [ 219.214629][T11013] FAULT_INJECTION: forcing a failure. [ 219.214629][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 219.214641][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.3.2076 Not tainted syzkaller #0 PREEMPT [ 219.214651][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 219.214663][T11013] Call trace: [ 219.214666][T11013] show_stack+0x2c/0x3c (C) [ 219.214677][T11013] __dump_stack+0x30/0x40 [ 219.214685][T11013] dump_stack_lvl+0xd8/0x12c [ 219.214694][T11013] dump_stack+0x1c/0x28 [ 219.214702][T11013] should_fail_ex+0x418/0x58c [ 219.214713][T11013] should_failslab+0xc4/0x120 [ 219.214723][T11013] __kmalloc_noprof+0x108/0x6c8 [ 219.214733][T11013] __register_sysctl_table+0x898/0xb4c [ 219.214745][T11013] register_net_sysctl_sz+0x29c/0x38c [ 219.214755][T11013] __devinet_sysctl_register+0x19c/0x274 [ 219.214766][T11013] devinet_init_net+0x2dc/0x56c [ 219.214776][T11013] ops_init+0x2cc/0x528 [ 219.214788][T11013] setup_net+0x118/0x2fc [ 219.214799][T11013] copy_net_ns+0x454/0x698 [ 219.214810][T11013] create_new_namespaces+0x304/0x50c [ 219.214823][T11013] unshare_nsproxy_namespaces+0x120/0x170 [ 219.214836][T11013] ksys_unshare+0x438/0x6e0 [ 219.214847][T11013] __arm64_sys_unshare+0x40/0x54 [ 219.214858][T11013] invoke_syscall+0x98/0x244 [ 219.214867][T11013] el0_svc_common+0xec/0x23c [ 219.214876][T11013] do_el0_svc+0x4c/0x5c [ 219.214884][T11013] el0_svc+0x60/0x1d8 [ 219.214892][T11013] el0t_64_sync_handler+0x44/0x104 [ 219.214901][T11013] el0t_64_sync+0x198/0x19c [ 219.214911][T11013] sysctl could not get directory: /net/ipv4 -12 [ 219.270268][T11015] qrtr: Invalid version 136 [ 219.271773][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.272512][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 219.272525][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 219.272630][ T4743] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 219.272641][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 219.272714][ T4743] EXT4-fs error (device loop0): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 219.272723][ T4743] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 219.272809][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 219.272819][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 219.338545][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2080'. [ 219.338707][T11025] block nbd2: shutting down sockets [ 219.344026][T11026] FAULT_INJECTION: forcing a failure. [ 219.344026][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.344043][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.2.2078 Not tainted syzkaller #0 PREEMPT [ 219.344053][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 219.344066][T11026] Call trace: [ 219.344069][T11026] show_stack+0x2c/0x3c (C) [ 219.344089][T11026] __dump_stack+0x30/0x40 [ 219.344098][T11026] dump_stack_lvl+0xd8/0x12c [ 219.344106][T11026] dump_stack+0x1c/0x28 [ 219.344114][T11026] should_fail_ex+0x418/0x58c [ 219.344126][T11026] should_fail+0x14/0x24 [ 219.344135][T11026] should_fail_usercopy+0x20/0x30 [ 219.344145][T11026] simple_read_from_buffer+0xc4/0x238 [ 219.344154][T11026] proc_fail_nth_read+0x1a8/0x248 [ 219.344167][T11026] vfs_read+0x230/0x8c8 [ 219.344176][T11026] ksys_read+0x12c/0x228 [ 219.344185][T11026] __arm64_sys_read+0x84/0x98 [ 219.344193][T11026] invoke_syscall+0x98/0x244 [ 219.344202][T11026] el0_svc_common+0xec/0x23c [ 219.344209][T11026] do_el0_svc+0x4c/0x5c [ 219.344217][T11026] el0_svc+0x60/0x1d8 [ 219.344226][T11026] el0t_64_sync_handler+0x44/0x104 [ 219.344233][T11026] el0t_64_sync+0x198/0x19c [ 219.399890][T11032] loop2: detected capacity change from 0 to 1024 [ 219.403502][T11032] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 219.415188][T11032] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.2082: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.415218][T11032] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 219.415308][T11032] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 219.415328][T11032] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.2082: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.415347][T11032] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 219.415436][T11032] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 219.415449][T11032] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.2082: Failed to acquire dquot type 0 [ 219.415460][T11032] loop2: lost filesystem error report for type 5 error -117 [ 219.415582][T11032] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 219.415593][T11032] loop2: lost filesystem error report for type 5 error -117 [ 219.415689][T11032] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.2082: mark_inode_dirty error [ 219.415705][T11032] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.415788][T11032] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 219.415836][T11032] EXT4-fs (loop2): 1 orphan inode deleted [ 219.416296][T11032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.595447][T11042] input: syz0 as /devices/virtual/input/input31 [ 220.048800][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 220.284210][T11053] loop3: detected capacity change from 0 to 2048 [ 220.296763][T11054] loop1: detected capacity change from 0 to 512 [ 220.313173][T11054] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 220.313189][T11054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.325006][T11054] EXT4-fs (loop1): 1 truncate cleaned up [ 220.325473][T11054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.333172][T11053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.340708][T11054] overlayfs: missing 'workdir' [ 220.379307][ T4742] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.423443][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.462363][T11064] loop0: detected capacity change from 0 to 512 [ 220.493564][T11064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2094: bg 0: block 5: invalid block bitmap [ 220.493579][T11064] loop0: lost filesystem error report for type 5 error -117 [ 220.493870][T11064] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 220.493883][T11064] loop0: lost filesystem error report for type 5 error -117 [ 220.494002][T11064] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2094: invalid indirect mapped block 3 (level 2) [ 220.494017][T11064] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.494180][T11064] EXT4-fs (loop0): 1 orphan inode deleted [ 220.494189][T11064] EXT4-fs (loop0): 1 truncate cleaned up [ 220.494630][T11064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-00fd-ffffffffffff r/w without journal. Quota mode: writeback. [ 220.594561][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 220.595065][T11072] block nbd2: shutting down sockets [ 220.718339][T11081] md: array md4 already initialised! [ 220.724550][ T4750] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 220.819401][T11081] ------------[ cut here ]------------ [ 220.819408][T11081] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0xe4/0x578, CPU#1: syz.4.2097/11081 [ 220.822433][T11081] Modules linked in: [ 220.823115][T11081] CPU: 1 UID: 0 PID: 11081 Comm: syz.4.2097 Not tainted syzkaller #0 PREEMPT [ 220.824826][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.826998][T11081] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 220.828591][T11081] pc : __alloc_frozen_pages_noprof+0xe4/0x578 [ 220.829907][T11081] lr : __alloc_frozen_pages_noprof+0xa8/0x578 [ 220.831030][T11081] sp : ffff8000933572e0 [ 220.831834][T11081] x29: ffff8000933573a0 x28: ffff0000d9e00018 x27: ffff800093357300 [ 220.833504][T11081] x26: 1ffff00011eac4ec x25: dfff800000000000 x24: ffff70001266ae60 [ 220.834921][T11081] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000040dc0 [ 220.836671][T11081] x20: 0000000000000000 x19: 0000000000000034 x18: ffff8001237d4000 [ 220.838492][T11081] x17: ffff0001acf92e07 x16: ffff0000d1ef5894 x15: 00000000000000fe [ 220.840095][T11081] x14: 0000000000000006 x13: 0000000000000005 x12: 0000000000000000 [ 220.841653][T11081] x11: 0000000000000000 x10: ffff70001266ae69 x9 : 0000000000000001 [ 220.843220][T11081] x8 : ffff80008ae88000 x7 : 0000000000000000 x6 : 0000000000000000 [ 220.844781][T11081] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 220.846326][T11081] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff800093357320 [ 220.847933][T11081] Call trace: [ 220.848612][T11081] __alloc_frozen_pages_noprof+0xe4/0x578 (P) [ 220.849923][T11081] alloc_pages_mpol+0x1fc/0x3d0 [ 220.851070][T11081] alloc_frozen_pages_noprof+0xc4/0x10c [ 220.852332][T11081] ___kmalloc_large_node+0x74/0x158 [ 220.853454][T11081] __kmalloc_large_node_noprof+0x2c/0x8c [ 220.854590][T11081] __kmalloc_noprof+0x3f0/0x6c8 [ 220.855565][T11081] setup_conf+0x9e4/0x1f38 [ 220.856472][T11081] raid5_run+0x670/0x1b68 [ 220.856935][T11083] net_ratelimit: 1060 callbacks suppressed [ 220.858645][T11081] md_run+0xb10/0x19e8 [ 220.859474][T11081] do_md_run+0x4c/0x4e4 [ 220.860317][T11081] md_ioctl+0x1bf8/0x23d4 [ 220.861183][T11081] blkdev_ioctl+0x574/0x904 [ 220.862077][T11081] __arm64_sys_ioctl+0x154/0x1cc [ 220.863051][T11081] invoke_syscall+0x98/0x244 [ 220.864049][T11081] el0_svc_common+0xec/0x23c [ 220.865029][T11081] do_el0_svc+0x4c/0x5c [ 220.865936][T11081] el0_svc+0x60/0x1d8 [ 220.866748][T11081] el0t_64_sync_handler+0x44/0x104 [ 220.867759][T11081] el0t_64_sync+0x198/0x19c [ 220.868657][T11081] irq event stamp: 940 [ 220.869477][T11081] hardirqs last enabled at (939): [] seqcount_lockdep_reader_access+0x68/0xcc [ 220.871816][T11081] hardirqs last disabled at (940): [] el1_brk64+0x20/0x54 [ 220.873562][T11081] softirqs last enabled at (848): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 220.875403][T11081] softirqs last disabled at (846): [] fpsimd_restore_current_state+0x44/0x9c8 [ 220.877366][T11081] ---[ end trace 0000000000000000 ]--- [ 220.896653][T110 ** replaying previous printk message ** [ 220.896653][T11083] team0: Port device xfrm0 added [ 220.897958][T11081] Unable to handle kernel paging request at virtual address dfff800000000005 [ 220.897972][T11081] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 220.897983][T11081] Mem abort info: [ 220.897988][T11081] ESR = 0x0000000096000005 [ 220.897993][T11081] EC = 0x25: DABT (current EL), IL = 32 bits [ 220.898000][T11081] SET = 0, FnV = 0 [ 220.898004][T11081] EA = 0, S1PTW = 0 [ 220.898009][T11081] FSC = 0x05: level 1 translation fault [ 220.898014][T11081] Data abort info: [ 220.898017][T11081] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 220.898023][T11081] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 220.898028][T11081] GCS = 0, Overlay = 0, DirtyBit = 0 [ 220.898034][T11081] [dfff800000000005] address between user and kernel address ranges [ 220.898129][T11081] Internal error: Oops: 0000000096000005 [#1] SMP [ 220.916644][T11081] Modules linked in: [ 220.917491][T11081] CPU: 1 UID: 0 PID: 11081 Comm: syz.4.2097 Tainted: G W syzkaller #0 PREEMPT [ 220.919528][T11081] Tainted: [W]=WARN [ 220.920318][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.922249][T11081] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 220.923851][T11081] pc : free_conf+0x88/0x540 [ 220.924762][T11081] lr : free_conf+0x34/0x540 [ 220.925700][T11081] sp : ffff800093357550 [ 220.926520][T11081] x29: ffff800093357560 x28: ffff0000d9e00018 x27: ffff70001266aecc [ 220.928365][T11081] x26: ffff0000c65a2000 x25: 1fffe00018cb4444 x24: ffff0000c65a2000 [ 220.930202][T11081] x23: dfff800000000000 x22: 00000000fffffff4 x21: ffff0000c65a2660 [ 220.931989][T11081] x20: 0000000000000028 x19: ffff0000c65a2000 x18: ffff8001237d4000 [ 220.933846][T11081] x17: ffff0001acf92e07 x16: ffff0000d1ef5894 x15: 00000000000000fe [ 220.935639][T11081] x14: 0000000000000006 x13: 0000000000000005 x12: 0000000000000000 [ 220.937420][T11081] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000001d765 [ 220.939150][T11081] x8 : 0000000000000005 x7 : 0000000000000000 x6 : 0000000000000000 [ 220.941019][T11081] x5 : 00000000ffffffff x4 : 0000000000000dc0 x3 : 0000000000000000 [ 220.942793][T11081] x2 : ffffffffffffffff x1 : ffff0000d1ef5880 x0 : 0000000000000001 [ 220.944494][T11081] dump_backtrace(regs = 0000000046a364e9 tsk = 0000000000000000) [ 220.946218][T11081] Call trace: [ 220.946965][T11081] free_conf+0x88/0x540 (P) [ 220.947932][T11081] setup_conf+0xb0c/0x1f38 [ 220.948886][T11081] raid5_run+0x670/0x1b68 [ 220.949842][T11081] md_run+0xb10/0x19e8 [ 220.950658][T11081] do_md_run+0x4c/0x4e4 [ 220.951575][T11081] md_ioctl+0x1bf8/0x23d4 [ 220.952544][T11081] blkdev_ioctl+0x574/0x904 [ 220.953557][T11081] __arm64_sys_ioctl+0x154/0x1cc [ 220.954632][T11081] invoke_syscall+0x98/0x244 [ 220.955624][T11081] el0_svc_common+0xec/0x23c [ 220.956664][T11081] do_el0_svc+0x4c/0x5c [ 220.957570][T11081] el0_svc+0x60/0x1d8 [ 220.958460][T11081] el0t_64_sync_handler+0x44/0x104 [ 220.959611][T11081] el0t_64_sync+0x198/0x19c [ 220.960556][T11081] Code: 9730d23e f9400288 9100a114 d343fe88 (38776908) [ 220.962052][T11081] ---[ end trace 0000000000000000 ]--- [ 220.967638][ C0] bond1: (slave geneve2): Server sent ARP Request packet [ 220.967686][ C0] nf_nat: Already setup manip DST for ct 00000000afdc4548 (status bits 0x188) [ 220.967728][ C0] nf_nat: Already setup manip SRC for ct 00000000afdc4548 (status bits 0x188) [ 221.018219][T11087] kcov: kcov_start: t = ffff0000ced5d880, size = 524288, area = ffff8000a693e000 [ 221.137631][ T3059] bond1: (slave geneve2): Send learning packet: mac ea:ea:02:89:62:93 vlan 0 [ 221.137680][ T3059] nf_nat: Already setup manip DST for ct 000000007564ec94 (status bits 0x188) [ 221.137718][ T3059] nf_nat: Already setup manip SRC for ct 000000007564ec94 (status bits 0x188) [ 221.225920][T11040] kcov: kcov_task_exit: t = ffff0000cd0a8000, kcov->t = ffff0000cd0a8000 [ 221.255281][T11058] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1109 [ 221.255482][ T7796] nfc: nfc_urelease_event_work: portid 1109 [ 221.317171][T11062] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1110 [ 221.317211][ T7796] nfc: nfc_urelease_event_work: portid 1110 [ 221.318008][T11062] nfc: nfc_unregister_rfkill: dev_name=nfc2 [ 221.318077][T11062] kernfs runtime_status: removing [ 221.318101][T11062] kernfs control: removing [ 221.318119][T11062] kernfs runtime_suspended_time: removing [ 221.318135][T11062] kernfs runtime_active_time: removing [ 221.318151][T11062] kernfs autosuspend_delay_ms: removing [ 221.318169][T11062] kernfs power: removing [ 221.318187][T11062] kernfs device: removing [ 221.318198][T11062] kernfs subsystem: removing [ 221.318212][T11062] kernfs rfkill56: removing [ 221.318225][T11062] kernfs uevent: removing [ 221.318236][T11062] kernfs name: removing [ 221.318247][T11062] kernfs type: removing [ 221.318257][T11062] kernfs index: removing [ 221.318267][T11062] kernfs persistent: removing [ 221.318277][T11062] kernfs state: removing [ 221.318287][T11062] kernfs soft: removing [ 221.318297][T11062] kernfs hard: removing [ 221.318307][T11062] kernfs hard_block_reasons: removing [ 221.318318][T11062] PM: Removing info for No Bus:rfkill56 [ 221.318330][T11062] kobject: 'rfkill56' (00000000654748be): kobject_uevent_env [ 221.318343][T11062] kobject: 'rfkill56' (00000000654748be): fill_kobj_path: path = '/devices/virtual/nfc/nfc2/rfkill56' [ 221.320998][T11062] kernfs rfkill56: removing [ 221.321051][T11062] kobject: 'rfkill56' (00000000654748be): kobject_cleanup, parent 0000000000000000 [ 221.321065][T11062] kobject: 'rfkill56' (00000000654748be): calling ktype release [ 221.321087][T11062] kobject: 'rfkill56': free name [ 221.387582][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:000000001b064c8d is addr:fe80::cdb5:6cda:92:346a for cmd:0 at entry:00000000616f20c7 [ 221.437763][T11081] Kernel panic - not syncing: Oops: Fatal exception [ 221.487310][T11081] SMP: stopping secondary CPUs [ 221.488226][T11081] Kernel Offset: disabled [ 221.489152][T11081] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 221.490619][T11081] Memory Limit: none [ 221.891070][T11081] Rebooting in 86400 seconds..