last executing test programs: 1m0.068470416s ago: executing program 2 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x5}}, @vht_group_id={0x15, 0x1, {0x400, "0a319fe56caec7d1615e461cfed9e0f9"}}}}]}, 0x54}}, 0x0) 1m0.014789998s ago: executing program 2 (id=59): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.948995574s ago: executing program 2 (id=61): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x87}, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 59.900628048s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 59.837144883s ago: executing program 2 (id=67): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000680)=0xffffb1e0, 0x4) 58.91653731s ago: executing program 2 (id=105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 58.826365887s ago: executing program 32 (id=105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 55.210274288s ago: executing program 0 (id=221): unshare(0x22020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 55.11451007s ago: executing program 0 (id=226): unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 54.780376996s ago: executing program 0 (id=237): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4044014) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0xc7, 0x200001}, 0xc) 54.713155735s ago: executing program 0 (id=240): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 54.553060959s ago: executing program 0 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r1) 53.665069643s ago: executing program 0 (id=285): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 53.573815015s ago: executing program 33 (id=285): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 35.60718289s ago: executing program 4 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="02031b00300014000600605f9a9b0f982901fc010000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 35.446279007s ago: executing program 4 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 35.341138123s ago: executing program 4 (id=933): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15) 35.290785344s ago: executing program 4 (id=938): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x1, 0x51a, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='0fc5:1227:hmhby', 0xf) 35.200578551s ago: executing program 4 (id=941): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x6004000, 0x0, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540), 0x5, &(0x7f0000000040), 0xfffffde3, 0x4000001}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000002c0)="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", 0x37f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 34.968118094s ago: executing program 4 (id=952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3d, &(0x7f0000000480)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 34.924768309s ago: executing program 34 (id=952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3d, &(0x7f0000000480)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 30.516450211s ago: executing program 5 (id=1119): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file1', [{}, {0x20, '#! '}, {}]}, 0x11) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 30.482427417s ago: executing program 5 (id=1121): r0 = socket$inet(0x2, 0x802, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0xb, 0x0, @void}, 0x10) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 30.481880533s ago: executing program 5 (id=1122): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0xfffffffffffff0e9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000880)="d5b747a316b632", 0x7, 0x2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x1000000008}) 30.437567855s ago: executing program 5 (id=1124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x808404, &(0x7f0000000480), 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 30.268240037s ago: executing program 5 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r0) 30.026265589s ago: executing program 5 (id=1140): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}}, 0x24}}, 0x24048000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x100000000000027d}, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 29.992498031s ago: executing program 35 (id=1140): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}}, 0x24}}, 0x24048000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x100000000000027d}, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 13.04582474s ago: executing program 3 (id=1692): add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 13.024969993s ago: executing program 3 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x48044) 13.006418678s ago: executing program 3 (id=1694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 12.930341153s ago: executing program 3 (id=1699): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 12.852814597s ago: executing program 3 (id=1703): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xb38a, 0x80, 0x8002, 0x272}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) 12.698545634s ago: executing program 3 (id=1710): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="521d8a68bf", 0x5}], 0x1}}], 0x5, 0x40480c0) 12.692113131s ago: executing program 36 (id=1710): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="521d8a68bf", 0x5}], 0x1}}], 0x5, 0x40480c0) 1.56789946s ago: executing program 1 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf25100000000800ba000680000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="0500350009"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x2004c050) 1.478593168s ago: executing program 1 (id=2063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x12100ca, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1.478221305s ago: executing program 1 (id=2066): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.374518506s ago: executing program 1 (id=2081): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x0, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x9, {0xfffffffffffffffe, 0x8001, 0x0, {0x3, 0x50a0, 0xfffffffff4b022ac, 0x797d2915, 0x7f, 0x7653, 0x5, 0x7, 0xe000, 0x4000, 0xcd35, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 1.280429357s ago: executing program 1 (id=2076): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x1af940, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.204493444s ago: executing program 1 (id=2079): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x82}, 0x1, 0x0, 0x0, 0x1}, 0x0) 714.304422ms ago: executing program 9 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 525.444176ms ago: executing program 7 (id=2106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00008863aaaaaaaaaaaa00000000000088a8400081"], 0x1a) 478.777318ms ago: executing program 6 (id=2107): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 478.493481ms ago: executing program 8 (id=2108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="c26d6d6d9d01954b3924fac24cf871cb", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x4048845) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003f00)=""/4096, 0xfed2}], 0x1}}], 0x1, 0x12102, 0x0) 459.478888ms ago: executing program 8 (id=2109): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x5000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 449.669724ms ago: executing program 9 (id=2110): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x521ca1, 0x0, 0x80, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 401.905102ms ago: executing program 8 (id=2111): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) 358.593803ms ago: executing program 6 (id=2121): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01880000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a30000000000800054000000008080003400000"], 0xfc}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0xfffffffffffffffc}}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e01") 358.388539ms ago: executing program 7 (id=2112): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x8000) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x38011, r1, 0xb6e42000) madvise(&(0x7f000062c000/0x3000)=nil, 0x3000, 0x64) 328.122889ms ago: executing program 9 (id=2113): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x24000044) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) 312.9538ms ago: executing program 6 (id=2114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 308.543721ms ago: executing program 7 (id=2115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="846134d356a07d80ca09588bf53514ebe6", 0x11}], 0x1, 0x0, 0x0, 0x24000080}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) 264.137488ms ago: executing program 7 (id=2116): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$9p_unix(&(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x208002, &(0x7f0000000440)={'trans=unix,', {[], [{@uid_eq}]}}) 263.899137ms ago: executing program 7 (id=2117): socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x4379, &(0x7f0000000580)={0x0, 0x8b0, 0x13500, 0xffffffff, 0x9e}, &(0x7f0000000000), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 263.135897ms ago: executing program 6 (id=2118): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x20000000, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 159.453558ms ago: executing program 7 (id=2119): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 159.121715ms ago: executing program 8 (id=2120): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 158.897791ms ago: executing program 9 (id=2122): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 100.286503ms ago: executing program 6 (id=2123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) 99.778053ms ago: executing program 9 (id=2124): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 22.693304ms ago: executing program 8 (id=2125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x253f4c600745cb57, 0x0, 0x0, 0xfffffffffffffef6}, &(0x7f0000000100)=0x35) 22.42879ms ago: executing program 8 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0), &(0x7f0000000140), &(0x7f0000000080)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.068635ms ago: executing program 9 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES64=r3], 0x15) 0s ago: executing program 6 (id=2128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) kernel console output (not intermixed with test programs): dd at group 3 (only 1 groups) [ 56.966417][ T7375] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 128 (only 1 groups) [ 56.977820][ T7379] EXT4-fs (loop1): 1 orphan inode deleted [ 57.021022][ T1289] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.021108][ T1289] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 1 [ 57.021118][ T1289] loop1: lost filesystem error report for type 5 error -117 [ 57.345744][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 57.599841][ T7437] bond1: invalid NS target :: specified for addition [ 57.599859][ T7437] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 57.604442][ T7437] bond1 (unregistering): Released all slaves [ 57.689674][ T7446] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 57.702262][ T7446] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.931: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.702284][ T7446] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.703231][ T7446] Quota error (device loop1): write_blk: dquota write failed [ 57.703247][ T7446] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 57.703272][ T7446] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.931: Failed to acquire dquot type 0 [ 57.703283][ T7446] loop1: lost filesystem error report for type 5 error -117 [ 57.703664][ T7446] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.931: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.703676][ T7446] loop1: lost filesystem error report for type 5 error -117 [ 57.703826][ T7446] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.931: Invalid inode bitmap blk 0 in block_group 0 [ 57.703838][ T7446] loop1: lost filesystem error report for type 5 error -117 [ 57.703898][ T7446] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 57.703999][ T7446] EXT4-fs (loop1): 1 orphan inode deleted [ 57.721875][ T7446] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.931: Invalid block bitmap block 0 in block_group 0 [ 57.737630][ T5057] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.739465][ T5057] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 57.739484][ T5057] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 57.775839][ T7457] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 57.782968][ T7457] EXT4-fs (loop3): failed to open journal device unknown-block(129,0) -ENXIO [ 57.797805][ T7461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.863609][ T7465] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.939: lblock 0 mapped to illegal pblock 0 (length 6) [ 57.865958][ T4717] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 57.866011][ T4717] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 57.866032][ T4717] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz-executor: Failed to acquire dquot type 0 [ 57.867173][ T7465] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 57.867195][ T7465] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.867195][ T7465] [ 57.883282][ T83] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 57.887835][ T83] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 57.894267][ T83] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.894267][ T83] [ 57.894282][ T83] EXT4-fs (loop3): Total free blocks count 0 [ 57.894294][ T83] EXT4-fs (loop3): Free/Dirty block details [ 57.894313][ T83] EXT4-fs (loop3): free_blocks=0 [ 57.894328][ T83] EXT4-fs (loop3): dirty_blocks=32 [ 57.894336][ T83] EXT4-fs (loop3): Block reservation details [ 57.894343][ T83] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 58.162465][ T7497] input: syz0 as /devices/virtual/input/input4 [ 58.162499][ T7497] input: failed to attach handler leds to device input4, error: -6 [ 58.204998][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.205872][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.206173][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.207385][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.210903][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.319755][ T7513] ip6erspan0: entered allmulticast mode [ 58.549456][ T7539] set_capacity_and_notify: 8 callbacks suppressed [ 58.549473][ T7539] loop5: detected capacity change from 0 to 1024 [ 58.601379][ T7547] FAULT_INJECTION: forcing a failure. [ 58.601379][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.601404][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.6.972 Not tainted syzkaller #0 PREEMPT [ 58.601416][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.601421][ T7547] Call trace: [ 58.601425][ T7547] show_stack+0x2c/0x3c (C) [ 58.601446][ T7547] __dump_stack+0x30/0x40 [ 58.601460][ T7547] dump_stack_lvl+0xd8/0x12c [ 58.601471][ T7547] dump_stack+0x1c/0x28 [ 58.601482][ T7547] should_fail_ex+0x41c/0x590 [ 58.601496][ T7547] should_fail+0x14/0x24 [ 58.601508][ T7547] should_fail_usercopy+0x20/0x30 [ 58.601520][ T7547] strncpy_from_user+0x48/0x388 [ 58.601536][ T7547] keyctl_keyring_search+0xb0/0x324 [ 58.601547][ T7547] __arm64_sys_keyctl+0x2c4/0x3e8 [ 58.601557][ T7547] invoke_syscall+0x98/0x244 [ 58.601570][ T7547] el0_svc_common+0xec/0x23c [ 58.601581][ T7547] do_el0_svc+0x4c/0x5c [ 58.601592][ T7547] el0_svc+0x64/0x260 [ 58.601605][ T7547] el0t_64_sync_handler+0x44/0x104 [ 58.601616][ T7547] el0t_64_sync+0x198/0x19c [ 58.721678][ T7500] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.721708][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.721765][ T7500] bridge_slave_0: entered allmulticast mode [ 58.738855][ T7500] bridge_slave_0: entered promiscuous mode [ 58.741020][ T7500] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.741075][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.741135][ T7500] bridge_slave_1: entered allmulticast mode [ 58.741554][ T7500] bridge_slave_1: entered promiscuous mode [ 58.771496][ T7500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.772077][ T7573] FAULT_INJECTION: forcing a failure. [ 58.772077][ T7573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.772119][ T7573] CPU: 0 UID: 0 PID: 7573 Comm: syz.3.983 Not tainted syzkaller #0 PREEMPT [ 58.772131][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.772137][ T7573] Call trace: [ 58.772140][ T7573] show_stack+0x2c/0x3c (C) [ 58.772159][ T7573] __dump_stack+0x30/0x40 [ 58.772171][ T7573] dump_stack_lvl+0xd8/0x12c [ 58.772183][ T7573] dump_stack+0x1c/0x28 [ 58.772194][ T7573] should_fail_ex+0x41c/0x590 [ 58.772207][ T7573] should_fail+0x14/0x24 [ 58.772218][ T7573] should_fail_usercopy+0x20/0x30 [ 58.772231][ T7573] strncpy_from_user+0x48/0x388 [ 58.772241][ T7573] path_getxattrat+0x12c/0x2cc [ 58.772251][ T7573] __arm64_sys_fgetxattr+0xb0/0xc8 [ 58.772260][ T7573] invoke_syscall+0x98/0x244 [ 58.772272][ T7573] el0_svc_common+0xec/0x23c [ 58.772284][ T7573] do_el0_svc+0x4c/0x5c [ 58.772295][ T7573] el0_svc+0x64/0x260 [ 58.772306][ T7573] el0t_64_sync_handler+0x44/0x104 [ 58.772318][ T7573] el0t_64_sync+0x198/0x19c [ 58.772529][ T7500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.808282][ T7500] team0: Port device team_slave_0 added [ 58.809026][ T7500] team0: Port device team_slave_1 added [ 58.817666][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.817676][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.817692][ T7500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.830070][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.830079][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.830094][ T7500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.864243][ T7500] hsr_slave_0: entered promiscuous mode [ 58.864595][ T7500] hsr_slave_1: entered promiscuous mode [ 58.864785][ T7500] debugfs: 'hsr0' already exists in 'hsr' [ 58.864796][ T7500] Cannot create hsr debugfs directory [ 58.915197][ T7585] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 58.933586][ T7590] loop6: detected capacity change from 0 to 2048 [ 58.996591][ T7500] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 59.001545][ T7500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.003297][ T7500] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 59.006714][ T7500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.007026][ T7500] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.014358][ T7500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.014843][ T7590] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.989: bg 0: block 2: invalid block bitmap [ 59.016164][ T7500] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.018287][ T7590] EXT4-fs (loop6): Remounting filesystem read-only [ 59.018908][ T7500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.053947][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 59.054659][ T7500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.068225][ T7500] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.072145][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.072175][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.074918][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.074944][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.096437][ T7500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.256486][ T7500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.315110][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1012'. [ 59.352119][ T7500] veth0_vlan: entered promiscuous mode [ 59.361460][ T7500] veth1_vlan: entered promiscuous mode [ 59.391708][ T7500] veth0_macvtap: entered promiscuous mode [ 59.392789][ T7500] veth1_macvtap: entered promiscuous mode [ 59.410505][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.417091][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.421671][ T1237] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.421738][ T1237] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.421794][ T1237] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.476196][ T7646] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 59.480875][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.480890][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.504664][ T7659] loop6: detected capacity change from 0 to 256 [ 59.511504][ T7659] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.567209][ T1358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.567227][ T1358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.568877][ T7666] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 59.568890][ T7666] FAT-fs (loop6): Filesystem has been set read-only [ 59.568994][ T7666] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 59.569015][ T7666] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 59.581399][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.681615][ T7674] FAULT_INJECTION: forcing a failure. [ 59.681615][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 59.681638][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT [ 59.681650][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 59.681656][ T7674] Call trace: [ 59.681659][ T7674] show_stack+0x2c/0x3c (C) [ 59.681681][ T7674] __dump_stack+0x30/0x40 [ 59.681695][ T7674] dump_stack_lvl+0xd8/0x12c [ 59.681706][ T7674] dump_stack+0x1c/0x28 [ 59.681717][ T7674] should_fail_ex+0x41c/0x590 [ 59.681733][ T7674] should_failslab+0xc4/0x120 [ 59.681747][ T7674] kmem_cache_alloc_noprof+0x94/0x5d4 [ 59.681755][ T7674] alloc_empty_file+0x6c/0x1cc [ 59.681765][ T7674] alloc_file+0x58/0x98 [ 59.681773][ T7674] alloc_file_pseudo+0xe0/0x198 [ 59.681782][ T7674] __anon_inode_getfile+0x118/0x1c8 [ 59.681795][ T7674] anon_inode_create_getfile+0x4c/0x64 [ 59.681808][ T7674] new_userfaultfd+0x1a0/0x37c [ 59.681818][ T7674] __arm64_sys_userfaultfd+0x8c/0xac [ 59.681829][ T7674] invoke_syscall+0x98/0x244 [ 59.681841][ T7674] el0_svc_common+0xec/0x23c [ 59.681852][ T7674] do_el0_svc+0x4c/0x5c [ 59.681864][ T7674] el0_svc+0x64/0x260 [ 59.681876][ T7674] el0t_64_sync_handler+0x44/0x104 [ 59.681887][ T7674] el0t_64_sync+0x198/0x19c [ 60.137447][ T7720] loop7: detected capacity change from 0 to 256 [ 60.145490][ T7718] sit0: entered promiscuous mode [ 60.152188][ T7718] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 60.152203][ T7718] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1036'. [ 60.248366][ T4719] Bluetooth: hci4: command tx timeout [ 60.451471][ T7741] loop5: detected capacity change from 0 to 512 [ 60.462712][ T7741] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.466309][ T7741] EXT4-fs (loop5): 1 truncate cleaned up [ 60.473602][ T7741] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.1045: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 60.475111][ T7741] EXT4-fs (loop5): Remounting filesystem read-only [ 60.563203][ T7750] loop7: detected capacity change from 0 to 512 [ 60.585737][ T7754] loop5: detected capacity change from 0 to 512 [ 60.587810][ T7754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.604632][ T7754] EXT4-fs (loop5): 1 truncate cleaned up [ 60.849121][ T7775] FAULT_INJECTION: forcing a failure. [ 60.849121][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 60.849146][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.1.1059 Not tainted syzkaller #0 PREEMPT [ 60.849160][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.849166][ T7775] Call trace: [ 60.849169][ T7775] show_stack+0x2c/0x3c (C) [ 60.849190][ T7775] __dump_stack+0x30/0x40 [ 60.849204][ T7775] dump_stack_lvl+0xd8/0x12c [ 60.849216][ T7775] dump_stack+0x1c/0x28 [ 60.849227][ T7775] should_fail_ex+0x41c/0x590 [ 60.849240][ T7775] should_failslab+0xc4/0x120 [ 60.849254][ T7775] kmem_cache_alloc_noprof+0x94/0x5d4 [ 60.849263][ T7775] prepare_creds+0x34/0x7d0 [ 60.849275][ T7775] __sys_setresgid+0x414/0x7ac [ 60.849286][ T7775] __arm64_sys_setresgid+0x84/0x98 [ 60.849297][ T7775] invoke_syscall+0x98/0x244 [ 60.849309][ T7775] el0_svc_common+0xec/0x23c [ 60.849321][ T7775] do_el0_svc+0x4c/0x5c [ 60.849332][ T7775] el0_svc+0x64/0x260 [ 60.849344][ T7775] el0t_64_sync_handler+0x44/0x104 [ 60.849355][ T7775] el0t_64_sync+0x198/0x19c [ 60.985447][ T7787] loop6: detected capacity change from 0 to 512 [ 60.997784][ T7789] syzkaller1: entered promiscuous mode [ 60.997799][ T7789] syzkaller1: entered allmulticast mode [ 61.618223][ T7804] netlink: 'syz.1.1069': attribute type 6 has an invalid length. [ 61.760799][ T7818] loop5: detected capacity change from 0 to 512 [ 61.761592][ T7818] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.763897][ T7818] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 61.764002][ T7818] EXT4-fs (loop5): orphan cleanup on readonly fs [ 61.765889][ T7818] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.1075: Allocating blocks 42-43 which overlap fs metadata [ 61.765906][ T7818] fserror_report: 1 callbacks suppressed [ 61.765913][ T7818] loop5: lost filesystem error report for type 5 error -117 [ 61.768012][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 61.768026][ C0] EXT4-fs (loop5): initial error at time 61: ext4_mb_mark_diskspace_used:4223 [ 61.768043][ C0] EXT4-fs (loop5): last error at time 61: ext4_mb_mark_diskspace_used:4223 [ 61.769838][ T7818] EXT4-fs (loop5): Remounting filesystem read-only [ 61.769897][ T7818] Quota error (device loop5): write_blk: dquota write failed [ 61.769952][ T7818] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 61.770029][ T7818] EXT4-fs (loop5): 1 truncate cleaned up [ 61.772117][ T7818] EXT4-fs (loop5): pa 000000007c611d78: logic 1, phys. 41, len 23 [ 61.831885][ T7823] binder: 7822:7823 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.831904][ T7823] binder: 7823 RLIMIT_NICE not set [ 61.831918][ T7823] binder: 7822:7823 ioctl c0306201 20000480 returned -14 [ 61.892179][ T30] audit: type=1400 audit(61.880:19): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7824 comm="syz.5.1077" name="file0" dev="tmpfs" ino=862 [ 61.907999][ T7826] FAULT_INJECTION: forcing a failure. [ 61.907999][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 61.908022][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.6.1079 Not tainted syzkaller #0 PREEMPT [ 61.908036][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.908042][ T7826] Call trace: [ 61.908045][ T7826] show_stack+0x2c/0x3c (C) [ 61.908063][ T7826] __dump_stack+0x30/0x40 [ 61.908076][ T7826] dump_stack_lvl+0xd8/0x12c [ 61.908088][ T7826] dump_stack+0x1c/0x28 [ 61.908099][ T7826] should_fail_ex+0x41c/0x590 [ 61.908112][ T7826] should_failslab+0xc4/0x120 [ 61.908125][ T7826] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 61.908134][ T7826] __d_alloc+0x50/0x690 [ 61.908144][ T7826] d_alloc_pseudo+0x2c/0xd8 [ 61.908153][ T7826] alloc_path_pseudo+0xe8/0x1d4 [ 61.908161][ T7826] alloc_file_pseudo+0xb0/0x198 [ 61.908170][ T7826] __shmem_file_setup+0x210/0x284 [ 61.908183][ T7826] shmem_file_setup+0x40/0x54 [ 61.908193][ T7826] memfd_alloc_file+0x9c/0x2f0 [ 61.908203][ T7826] __arm64_sys_memfd_create+0x318/0x3ec [ 61.908214][ T7826] invoke_syscall+0x98/0x244 [ 61.908226][ T7826] el0_svc_common+0xec/0x23c [ 61.908237][ T7826] do_el0_svc+0x4c/0x5c [ 61.908248][ T7826] el0_svc+0x64/0x260 [ 61.908260][ T7826] el0t_64_sync_handler+0x44/0x104 [ 61.908271][ T7826] el0t_64_sync+0x198/0x19c [ 61.971048][ T7835] loop5: detected capacity change from 0 to 256 [ 62.141036][ T7852] syz_tun: entered allmulticast mode [ 62.143246][ T7848] syz_tun: left allmulticast mode [ 62.328067][ T4719] Bluetooth: hci4: command tx timeout [ 62.384091][ T7890] Injecting memory failure for pfn 0x136aa5 at process virtual address 0x20000000 [ 62.396556][ T7890] Memory failure: 0x136aa5: Sending SIGBUS to syz.6.1111:7890 due to hardware memory corruption [ 62.396632][ T7890] Memory failure: 0x136aa5: recovery action for dirty LRU page: Recovered [ 62.396658][ T7890] Injecting memory failure for pfn 0x21910f at process virtual address 0x20001000 [ 62.396720][ T7890] Memory failure: 0x21910f: unhandlable page. [ 62.396726][ T7890] Memory failure: 0x21910f: recovery action for reserved kernel page: Ignored [ 62.585299][ T7916] EXT4-fs: Ignoring removed i_version option [ 62.681147][ T7924] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.689564][ T7924] EXT4-fs (loop5): 1 truncate cleaned up [ 62.756186][ T7933] Injecting memory failure for pfn 0x13ca9e at process virtual address 0x2062c000 [ 62.757300][ T7933] Memory failure: 0x13ca9e: Sending SIGBUS to syz.6.1127:7933 due to hardware memory corruption [ 62.757332][ T7933] Memory failure: 0x13ca9e: recovery action for unsplit thp: Failed [ 62.779882][ T7926] Injecting memory failure for pfn 0x137e03 at process virtual address 0x20003000 [ 62.789079][ T7926] Memory failure: 0x137e03: recovery action for dirty LRU page: Recovered [ 62.793825][ T5202] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 62.805276][ T5202] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 62.812996][ T5202] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 62.911518][ T7950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1134'. [ 62.916934][ T6073] syz_tun (unregistering): left allmulticast mode [ 62.916950][ T6073] syz_tun (unregistering): left promiscuous mode [ 62.916983][ T6073] bridge0: port 3(syz_tun) entered disabled state [ 62.979859][ T7953] FAULT_INJECTION: forcing a failure. [ 62.979859][ T7953] name failslab, interval 1, probability 0, space 0, times 0 [ 62.979897][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.3.1135 Not tainted syzkaller #0 PREEMPT [ 62.979909][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.979914][ T7953] Call trace: [ 62.979918][ T7953] show_stack+0x2c/0x3c (C) [ 62.979938][ T7953] __dump_stack+0x30/0x40 [ 62.979953][ T7953] dump_stack_lvl+0xd8/0x12c [ 62.979964][ T7953] dump_stack+0x1c/0x28 [ 62.979976][ T7953] should_fail_ex+0x41c/0x590 [ 62.979989][ T7953] should_failslab+0xc4/0x120 [ 62.980003][ T7953] kmem_cache_alloc_noprof+0x94/0x5d4 [ 62.980012][ T7953] security_file_alloc+0x3c/0x300 [ 62.980023][ T7953] init_file+0x90/0x28c [ 62.980032][ T7953] alloc_empty_file+0x80/0x1cc [ 62.980040][ T7953] alloc_file+0x58/0x98 [ 62.980048][ T7953] alloc_file_pseudo+0xe0/0x198 [ 62.980057][ T7953] __anon_inode_getfile+0x118/0x1c8 [ 62.980071][ T7953] anon_inode_getfile_fmode+0x4c/0xc0 [ 62.980083][ T7953] do_signalfd4+0x1b8/0x364 [ 62.980091][ T7953] __arm64_sys_signalfd4+0x150/0x1a4 [ 62.980104][ T7953] invoke_syscall+0x98/0x244 [ 62.980116][ T7953] el0_svc_common+0xec/0x23c [ 62.980128][ T7953] do_el0_svc+0x4c/0x5c [ 62.980139][ T7953] el0_svc+0x64/0x260 [ 62.980152][ T7953] el0t_64_sync_handler+0x44/0x104 [ 62.980163][ T7953] el0t_64_sync+0x198/0x19c [ 63.023565][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1137'. [ 63.025226][ T4719] block nbd0: Receive control failed (result -107) [ 63.133244][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.134648][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.135126][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.135623][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.135897][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 63.135924][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.343936][ T7996] GUP no longer grows the stack in syz.3.1152 (7996): 20004000-20006000 (20002000) [ 63.343955][ T7996] CPU: 0 UID: 0 PID: 7996 Comm: syz.3.1152 Not tainted syzkaller #0 PREEMPT [ 63.343966][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.343971][ T7996] Call trace: [ 63.343974][ T7996] show_stack+0x2c/0x3c (C) [ 63.343993][ T7996] __dump_stack+0x30/0x40 [ 63.344006][ T7996] dump_stack_lvl+0xd8/0x12c [ 63.344018][ T7996] dump_stack+0x1c/0x28 [ 63.344029][ T7996] gup_vma_lookup+0x1ac/0x1cc [ 63.344038][ T7996] __get_user_pages+0x2b4/0x13b0 [ 63.344047][ T7996] get_user_pages_remote+0x278/0x83c [ 63.344056][ T7996] __access_remote_vm+0x1d8/0x68c [ 63.344069][ T7996] access_remote_vm+0x48/0x60 [ 63.344080][ T7996] proc_pid_cmdline_read+0x4cc/0xa14 [ 63.344090][ T7996] do_loop_readv_writev+0x24c/0x3dc [ 63.344100][ T7996] vfs_readv+0x258/0x520 [ 63.344107][ T7996] do_preadv+0x11c/0x224 [ 63.344115][ T7996] __arm64_sys_preadv+0xac/0xc4 [ 63.344123][ T7996] invoke_syscall+0x98/0x244 [ 63.344135][ T7996] el0_svc_common+0xec/0x23c [ 63.344147][ T7996] do_el0_svc+0x4c/0x5c [ 63.344158][ T7996] el0_svc+0x64/0x260 [ 63.344170][ T7996] el0t_64_sync_handler+0x44/0x104 [ 63.344182][ T7996] el0t_64_sync+0x198/0x19c [ 63.448740][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 63.515000][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.515030][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.515093][ T7965] bridge_slave_0: entered allmulticast mode [ 63.515566][ T7965] bridge_slave_0: entered promiscuous mode [ 63.522585][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.528886][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.528984][ T7965] bridge_slave_1: entered allmulticast mode [ 63.532982][ T7965] bridge_slave_1: entered promiscuous mode [ 63.564678][ T8019] set_capacity_and_notify: 5 callbacks suppressed [ 63.564691][ T8019] loop1: detected capacity change from 0 to 2048 [ 63.573417][ T83] vlan2: left allmulticast mode [ 63.573441][ T83] vlan2: left promiscuous mode [ 63.573603][ T83] bridge0: port 4(vlan2) entered disabled state [ 63.574399][ T83] bridge_slave_1: left allmulticast mode [ 63.574409][ T83] bridge_slave_1: left promiscuous mode [ 63.574463][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.577775][ T83] bridge_slave_0: left allmulticast mode [ 63.577790][ T83] bridge_slave_0: left promiscuous mode [ 63.577849][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.623675][ T8019] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1161: bg 0: block 2: invalid block bitmap [ 63.623953][ T8019] EXT4-fs (loop1): Remounting filesystem read-only [ 63.681788][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.691649][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.702632][ T83] bond0 (unregistering): Released all slaves [ 63.706531][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.715805][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.728953][ T7965] team0: Port device team_slave_0 added [ 63.729871][ T7965] team0: Port device team_slave_1 added [ 63.761468][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.761485][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.761497][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.762129][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.762136][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.762152][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.764952][ T83] IPVS: stopping backup sync thread 6739 ... [ 63.798615][ T7965] hsr_slave_0: entered promiscuous mode [ 63.798940][ T7965] hsr_slave_1: entered promiscuous mode [ 63.799130][ T7965] debugfs: 'hsr0' already exists in 'hsr' [ 63.799141][ T7965] Cannot create hsr debugfs directory [ 63.891314][ T7965] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 63.893936][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.894564][ T7965] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 63.895689][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.896072][ T7965] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 63.899677][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.910312][ T7965] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 63.919646][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.923850][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 63.942725][ T83] hsr_slave_0: left promiscuous mode [ 63.943361][ T83] hsr_slave_1: left promiscuous mode [ 63.943646][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.944530][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.038620][ T83] team0 (unregistering): Port device team_slave_1 removed [ 64.043394][ T83] team0 (unregistering): Port device team_slave_0 removed [ 64.132686][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.147376][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.152306][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.152337][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.159786][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.159815][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.186718][ T7965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.308892][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.358775][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 64.408086][ T4719] Bluetooth: hci4: command tx timeout [ 64.409885][ T7965] veth0_vlan: entered promiscuous mode [ 64.412852][ T7965] veth1_vlan: entered promiscuous mode [ 64.441770][ T7965] veth0_macvtap: entered promiscuous mode [ 64.445126][ T7965] veth1_macvtap: entered promiscuous mode [ 64.462113][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.467436][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.474343][ T8091] IPVS: Error connecting to the multicast addr [ 64.477827][ T1358] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.490991][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491025][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.491045][ T866] cfg80211: failed to load regulatory.db [ 64.497087][ T1237] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.500983][ T1358] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.501262][ T1358] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.548307][ T5057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.548321][ T5057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.562461][ T8101] loop3: detected capacity change from 0 to 256 [ 64.575360][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.575395][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.632747][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.632963][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.673898][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.677291][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.831152][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 64.848077][ T83] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.848109][ T83] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.848128][ T83] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.848145][ T83] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 PÚÿÿÿ-D devtmpfs./dev/console[ 65.083722][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 65.188994][ T8146] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1180'. [ 65.208856][ T4719] Bluetooth: hci1: command tx timeout [ 65.288007][ T4719] Bluetooth: hci5: command 0x1003 tx timeout [ 65.288028][ T4715] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 65.600482][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 65.602200][ T4715] block nbd1: Receive control failed (result -107) [ 65.657705][ T8164] loop3: detected capacity change from 0 to 1024 [ 65.693030][ T8164] EXT4-fs mount: 38 callbacks suppressed [ 65.693047][ T8164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.724350][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.745716][ T8173] syzkaller1: entered promiscuous mode [ 65.745734][ T8173] syzkaller1: entered allmulticast mode [ 66.011592][ T8193] vlan2: entered allmulticast mode [ 66.011673][ T8193] bridge0: port 3(vlan2) entered blocking state [ 66.011748][ T8193] bridge0: port 3(vlan2) entered disabled state [ 66.012268][ T8193] vlan2: entered promiscuous mode [ 66.122894][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1205'. [ 66.197322][ T8217] loop8: detected capacity change from 0 to 1024 [ 66.243882][ T8217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.253926][ T8217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.255042][ T8217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.261596][ T8217] overlayfs: inode number too big (/file0, ino=4611686018427387917, xinobits=3) [ 66.279914][ T8218] loop1: detected capacity change from 0 to 8192 [ 66.282275][ T7965] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.321183][ T8218] loop1: p1 p2 p4 [ 66.321198][ T8218] loop1: partition table partially beyond EOD, truncated [ 66.325567][ T8218] loop1: p4 start 131072 is beyond EOD, truncated [ 66.369860][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 66.370008][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.490464][ T4715] Bluetooth: hci4: command tx timeout [ 66.529635][ T8253] loop6: detected capacity change from 0 to 128 [ 66.535209][ T8253] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 66.550669][ T8253] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.592931][ T5732] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.624097][ T8266] loop3: detected capacity change from 0 to 512 [ 66.647828][ T8266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.655472][ T8267] loop8: detected capacity change from 0 to 8192 [ 66.690722][ T8267] loop8: p1 p2 p4 [ 66.690747][ T8267] loop8: partition table partially beyond EOD, truncated [ 66.691059][ T8271] loop6: detected capacity change from 0 to 512 [ 66.693547][ T8267] loop8: p4 start 131072 is beyond EOD, truncated [ 66.696537][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.720661][ T8273] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 66.729560][ T8271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.742306][ T8271] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.1232: corrupted xattr block 33: invalid header [ 66.752426][ T8271] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.1232: corrupted xattr block 33: invalid header [ 66.752686][ T8271] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.1232: corrupted xattr block 33: invalid header [ 66.790563][ T8279] FAULT_INJECTION: forcing a failure. [ 66.790563][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 66.790585][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.1.1235 Not tainted syzkaller #0 PREEMPT [ 66.790598][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.790604][ T8279] Call trace: [ 66.790608][ T8279] show_stack+0x2c/0x3c (C) [ 66.790627][ T8279] __dump_stack+0x30/0x40 [ 66.790641][ T8279] dump_stack_lvl+0xd8/0x12c [ 66.790653][ T8279] dump_stack+0x1c/0x28 [ 66.790666][ T8279] should_fail_ex+0x41c/0x590 [ 66.790680][ T8279] should_failslab+0xc4/0x120 [ 66.790695][ T8279] __kmalloc_cache_noprof+0x94/0x5fc [ 66.790705][ T8279] shmem_init_fs_context+0x5c/0x260 [ 66.790717][ T8279] devtmpfs_init_fs_context+0x20/0x80 [ 66.790731][ T8279] alloc_fs_context+0x7d8/0xba4 [ 66.790741][ T8279] fs_context_for_mount+0x34/0x44 [ 66.790751][ T8279] __arm64_sys_fsopen+0xe8/0x1a4 [ 66.790761][ T8279] invoke_syscall+0x98/0x244 [ 66.790773][ T8279] el0_svc_common+0xec/0x23c [ 66.790787][ T8279] do_el0_svc+0x4c/0x5c [ 66.790799][ T8279] el0_svc+0x64/0x260 [ 66.790810][ T8279] el0t_64_sync_handler+0x44/0x104 [ 66.790822][ T8279] el0t_64_sync+0x198/0x19c [ 66.818639][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 66.820002][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 66.876600][ T1237] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 66.881090][ T1237] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 66.881106][ T1237] EXT4-fs (loop6): This should not happen!! Data will be lost [ 66.881106][ T1237] [ 66.881113][ T1237] EXT4-fs (loop6): Total free blocks count 0 [ 66.881120][ T1237] EXT4-fs (loop6): Free/Dirty block details [ 66.881127][ T1237] EXT4-fs (loop6): free_blocks=65280 [ 66.881135][ T1237] EXT4-fs (loop6): dirty_blocks=31 [ 66.881141][ T1237] EXT4-fs (loop6): Block reservation details [ 66.881146][ T1237] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 66.892731][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.085040][ T8315] loop1: detected capacity change from 0 to 1024 [ 67.110874][ T8315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.151441][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.187044][ T8322] FAULT_INJECTION: forcing a failure. [ 67.187044][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 67.187067][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.6.1252 Not tainted syzkaller #0 PREEMPT [ 67.187078][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.187084][ T8322] Call trace: [ 67.187087][ T8322] show_stack+0x2c/0x3c (C) [ 67.187112][ T8322] __dump_stack+0x30/0x40 [ 67.187124][ T8322] dump_stack_lvl+0xd8/0x12c [ 67.187136][ T8322] dump_stack+0x1c/0x28 [ 67.187147][ T8322] should_fail_ex+0x41c/0x590 [ 67.187161][ T8322] should_failslab+0xc4/0x120 [ 67.187174][ T8322] kmem_cache_alloc_noprof+0x94/0x5d4 [ 67.187182][ T8322] pagetable_pte_ctor+0x7c/0x268 [ 67.187195][ T8322] __pte_alloc+0x54/0x1c4 [ 67.187205][ T8322] do_pte_missing+0x25a0/0x2a28 [ 67.187213][ T8322] handle_mm_fault+0x1534/0x2bec [ 67.187224][ T8322] __get_user_pages+0x82c/0x13b0 [ 67.187233][ T8322] populate_vma_page_range+0x260/0x358 [ 67.187243][ T8322] __mm_populate+0x204/0x328 [ 67.187251][ T8322] do_mlock+0x530/0x638 [ 67.187259][ T8322] __arm64_sys_mlock+0x80/0xb4 [ 67.187268][ T8322] invoke_syscall+0x98/0x244 [ 67.187280][ T8322] el0_svc_common+0xec/0x23c [ 67.187291][ T8322] do_el0_svc+0x4c/0x5c [ 67.187302][ T8322] el0_svc+0x64/0x260 [ 67.187314][ T8322] el0t_64_sync_handler+0x44/0x104 [ 67.187325][ T8322] el0t_64_sync+0x198/0x19c [ 67.236685][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 67.288107][ T4715] Bluetooth: hci1: command tx timeout [ 67.295690][ T8331] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1256'. [ 67.453499][ T8351] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 67.456952][ T8351] EXT4-fs (loop7): 1 truncate cleaned up [ 67.457403][ T8351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.479380][ T8351] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #12: block 7: comm syz.7.1265: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 67.479700][ T8351] EXT4-fs (loop7): Remounting filesystem read-only [ 67.501853][ T8356] Set syz1 is full, maxelem 1029 reached [ 67.511858][ T7500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.538623][ T8363] FAULT_INJECTION: forcing a failure. [ 67.538623][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 67.538644][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.7.1268 Not tainted syzkaller #0 PREEMPT [ 67.538656][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.538662][ T8363] Call trace: [ 67.538666][ T8363] show_stack+0x2c/0x3c (C) [ 67.538687][ T8363] __dump_stack+0x30/0x40 [ 67.538701][ T8363] dump_stack_lvl+0xd8/0x12c [ 67.538712][ T8363] dump_stack+0x1c/0x28 [ 67.538724][ T8363] should_fail_ex+0x41c/0x590 [ 67.538738][ T8363] should_failslab+0xc4/0x120 [ 67.538751][ T8363] __kmalloc_noprof+0x108/0x6c8 [ 67.538760][ T8363] tomoyo_encode2+0x10c/0x330 [ 67.538772][ T8363] tomoyo_encode+0x34/0x50 [ 67.538782][ T8363] tomoyo_realpath_from_path+0x488/0x4dc [ 67.538794][ T8363] tomoyo_mkdev_perm+0x1f0/0x4b4 [ 67.538804][ T8363] tomoyo_path_mknod+0xf0/0x18c [ 67.538815][ T8363] security_path_mknod+0x16c/0x340 [ 67.538824][ T8363] filename_mknodat+0x284/0x5a0 [ 67.538835][ T8363] __arm64_sys_mknodat+0xc0/0xe8 [ 67.538845][ T8363] invoke_syscall+0x98/0x244 [ 67.538857][ T8363] el0_svc_common+0xec/0x23c [ 67.538868][ T8363] do_el0_svc+0x4c/0x5c [ 67.538879][ T8363] el0_svc+0x64/0x260 [ 67.538891][ T8363] el0t_64_sync_handler+0x44/0x104 [ 67.538902][ T8363] el0t_64_sync+0x198/0x19c [ 67.538919][ T8363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.602466][ T8367] device-mapper: table: 248:2: loop0 too small for target: start=0, len=2048, dev_size=1024 [ 67.602483][ T8367] device-mapper: core: Cannot calculate initial queue limits [ 67.602488][ T8367] device-mapper: ioctl: unable to set up device queue for new table. [ 67.616745][ T8366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.723921][ T8381] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 67.723937][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.6.1275 Not tainted syzkaller #0 PREEMPT [ 67.723948][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.723954][ T8381] Call trace: [ 67.723957][ T8381] show_stack+0x2c/0x3c (C) [ 67.723978][ T8381] __dump_stack+0x30/0x40 [ 67.723992][ T8381] dump_stack_lvl+0xd8/0x12c [ 67.724004][ T8381] dump_stack+0x1c/0x28 [ 67.724015][ T8381] sysfs_warn_dup+0x9c/0xb8 [ 67.724028][ T8381] sysfs_create_dir_ns+0x190/0x1f4 [ 67.724040][ T8381] kobject_add_internal+0x290/0x6f0 [ 67.724054][ T8381] kobject_add_varg+0x9c/0xe8 [ 67.724066][ T8381] kobject_add+0x110/0x1c8 [ 67.724078][ T8381] device_add+0x394/0x9e0 [ 67.724088][ T8381] device_register+0x28/0x38 [ 67.724096][ T8381] tty_register_device_attr+0x31c/0x5e8 [ 67.724107][ T8381] tty_register_device+0x3c/0x50 [ 67.724116][ T8381] gsm_activate_mux+0xdc/0x284 [ 67.724127][ T8381] gsmld_ioctl+0xea8/0x1414 [ 67.724137][ T8381] tty_ioctl+0x8a8/0xcb0 [ 67.724145][ T8381] __arm64_sys_ioctl+0x154/0x1cc [ 67.724159][ T8381] invoke_syscall+0x98/0x244 [ 67.724171][ T8381] el0_svc_common+0xec/0x23c [ 67.724182][ T8381] do_el0_svc+0x4c/0x5c [ 67.724193][ T8381] el0_svc+0x64/0x260 [ 67.724204][ T8381] el0t_64_sync_handler+0x44/0x104 [ 67.724215][ T8381] el0t_64_sync+0x198/0x19c [ 67.724233][ T8381] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.773586][ T7500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.838477][ T4715] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 67.879933][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1281'. [ 67.906891][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.907036][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.967667][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.974015][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.055927][ T8395] ip6erspan0: left allmulticast mode [ 68.057991][ T1237] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.058021][ T1237] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.058039][ T1237] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.058056][ T1237] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.119288][ T8404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.122934][ T8404] EXT4-fs (loop1): 1 truncate cleaned up [ 68.123388][ T8404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.149847][ T8404] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.1295: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 68.150906][ T8404] EXT4-fs (loop1): Remounting filesystem read-only [ 68.150919][ T8404] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #2: comm syz.1.1295: Deleting old file: nlink 5, error=-117 [ 68.186591][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.216502][ T4381] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4381 comm: kworker/1:2) [ 68.477401][ T8439] FAULT_INJECTION: forcing a failure. [ 68.477401][ T8439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 68.477534][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.7.1301 Not tainted syzkaller #0 PREEMPT [ 68.477553][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.477559][ T8439] Call trace: [ 68.477562][ T8439] show_stack+0x2c/0x3c (C) [ 68.477583][ T8439] __dump_stack+0x30/0x40 [ 68.477598][ T8439] dump_stack_lvl+0xd8/0x12c [ 68.477609][ T8439] dump_stack+0x1c/0x28 [ 68.477621][ T8439] should_fail_ex+0x41c/0x590 [ 68.477634][ T8439] should_fail+0x14/0x24 [ 68.477646][ T8439] get_futex_key+0x1ec/0x12b0 [ 68.477657][ T8439] futex_wait_multiple_setup+0x144/0x758 [ 68.477670][ T8439] futex_wait_multiple+0xa4/0x33c [ 68.477681][ T8439] __arm64_sys_futex_waitv+0x2ac/0x2dc [ 68.477692][ T8439] invoke_syscall+0x98/0x244 [ 68.477705][ T8439] el0_svc_common+0xec/0x23c [ 68.477716][ T8439] do_el0_svc+0x4c/0x5c [ 68.477727][ T8439] el0_svc+0x64/0x260 [ 68.477740][ T8439] el0t_64_sync_handler+0x44/0x104 [ 68.477751][ T8439] el0t_64_sync+0x198/0x19c [ 68.541544][ T8443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 68.541587][ T8443] System zones: 1-12 [ 68.542349][ T8443] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1302: missing EA_INODE flag [ 68.542370][ T8443] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.543116][ T8443] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1302: error while reading EA inode 12 err=-117 [ 68.543136][ T8443] loop3: lost filesystem error report for type 5 error -117 [ 68.544703][ T8443] EXT4-fs (loop3): 1 orphan inode deleted [ 68.545177][ T8443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.574073][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.591546][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 68.678142][ T8460] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1310'. [ 68.681011][ T8458] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1309'. [ 68.749654][ T8467] set_capacity_and_notify: 4 callbacks suppressed [ 68.749669][ T8467] loop3: detected capacity change from 0 to 128 [ 68.760330][ T8467] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.768365][ T8470] loop7: detected capacity change from 0 to 512 [ 68.770675][ T8467] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.771580][ T8470] EXT4-fs: test_dummy_encryption requires encrypt feature [ 68.850153][ T4706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.872211][ T8480] loop3: detected capacity change from 0 to 1024 [ 68.881528][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.886026][ T8480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.887371][ T8480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.894242][ T8480] overlayfs: inode number too big (/file0, ino=4611686018427387917, xinobits=3) [ 68.980574][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.271566][ T8528] FAULT_INJECTION: forcing a failure. [ 69.271566][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.271591][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.1.1342 Not tainted syzkaller #0 PREEMPT [ 69.271602][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.271608][ T8528] Call trace: [ 69.271611][ T8528] show_stack+0x2c/0x3c (C) [ 69.271630][ T8528] __dump_stack+0x30/0x40 [ 69.271642][ T8528] dump_stack_lvl+0xd8/0x12c [ 69.271654][ T8528] dump_stack+0x1c/0x28 [ 69.271665][ T8528] should_fail_ex+0x41c/0x590 [ 69.271678][ T8528] should_fail+0x14/0x24 [ 69.271690][ T8528] should_fail_usercopy+0x20/0x30 [ 69.271703][ T8528] _inline_copy_from_user+0x3c/0x174 [ 69.271715][ T8528] prctl_set_mm+0x570/0x1048 [ 69.271726][ T8528] __arm64_sys_prctl+0x504/0x13d0 [ 69.271738][ T8528] invoke_syscall+0x98/0x244 [ 69.271750][ T8528] el0_svc_common+0xec/0x23c [ 69.271761][ T8528] do_el0_svc+0x4c/0x5c [ 69.271773][ T8528] el0_svc+0x64/0x260 [ 69.271785][ T8528] el0t_64_sync_handler+0x44/0x104 [ 69.271796][ T8528] el0t_64_sync+0x198/0x19c [ 69.359990][ T8540] loop6: detected capacity change from 0 to 1024 [ 69.365867][ T8542] input: syz1 as /devices/virtual/input/input5 [ 69.368162][ T4715] Bluetooth: hci1: command tx timeout [ 69.374507][ T8540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.400459][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.420734][ T8548] bcache: register_bcache() error : failed to open device [ 69.582419][ T8568] loop3: detected capacity change from 0 to 2048 [ 69.615841][ T8568] loop3: p1 < > p4 [ 69.615841][ T8568] p4: [ 69.617365][ T8568] loop3: p4 size 722688 extends beyond EOD, truncated [ 69.721698][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 69.726818][ T8382] udevd[8382]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 69.745105][ T8587] netlink: 'syz.8.1368': attribute type 2 has an invalid length. [ 70.004812][ T8624] loop6: detected capacity change from 0 to 1024 [ 70.021078][ T8624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.023219][ T8624] EXT4-fs error (device loop6): ext4_free_blocks:6719: comm syz.6.1396: Freeing blocks not in datazone - block = 0, count = 16 [ 70.033509][ T8624] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1396: bg 0: block 112: padding at end of block bitmap is not set [ 70.110879][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.129882][ T8638] Injecting memory failure for pfn 0x121f07 at process virtual address 0x20000000 [ 70.136219][ T8638] Memory failure: 0x121f07: Sending SIGBUS to syz.3.1390:8638 due to hardware memory corruption [ 70.136263][ T8638] Memory failure: 0x121f07: recovery action for dirty LRU page: Recovered [ 70.136287][ T8638] Injecting memory failure for pfn 0x21910f at process virtual address 0x20001000 [ 70.136415][ T8638] Memory failure: 0x21910f: Sending SIGBUS to syz.3.1390:8638 due to hardware memory corruption [ 70.136440][ T8638] Memory failure: 0x21910f: recovery action for already poisoned page: Failed [ 70.320499][ T8664] loop3: detected capacity change from 0 to 256 [ 70.355258][ T30] audit: type=1326 audit(70.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.355476][ T30] audit: type=1326 audit(70.340:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.360266][ T8670] device-mapper: table: 248:2: loop0 too small for target: start=0, len=2048, dev_size=1024 [ 70.360281][ T8670] device-mapper: core: Cannot calculate initial queue limits [ 70.360286][ T8670] device-mapper: ioctl: unable to set up device queue for new table. [ 70.366022][ T30] audit: type=1326 audit(70.350:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.366120][ T30] audit: type=1326 audit(70.350:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.366200][ T30] audit: type=1326 audit(70.350:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.384416][ T30] audit: type=1326 audit(70.370:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.399553][ T30] audit: type=1326 audit(70.390:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.399581][ T30] audit: type=1326 audit(70.390:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.399600][ T30] audit: type=1326 audit(70.390:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8672 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffbd35c22c code=0x7ffc0000 [ 70.401525][ T30] audit: type=1326 audit(70.390:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.1.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 70.455615][ T8676] loop8: detected capacity change from 0 to 4096 [ 70.461370][ T8676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.501269][ T7965] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.656941][ T8694] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.763196][ T8698] loop8: detected capacity change from 0 to 8192 [ 70.779805][ T8698] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.447945][ T4715] Bluetooth: hci1: command tx timeout [ 71.653817][ T8737] FAULT_INJECTION: forcing a failure. [ 71.653817][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 71.653839][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.7.1432 Not tainted syzkaller #0 PREEMPT [ 71.653850][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.653856][ T8737] Call trace: [ 71.653859][ T8737] show_stack+0x2c/0x3c (C) [ 71.653879][ T8737] __dump_stack+0x30/0x40 [ 71.653892][ T8737] dump_stack_lvl+0xd8/0x12c [ 71.653903][ T8737] dump_stack+0x1c/0x28 [ 71.653914][ T8737] should_fail_ex+0x41c/0x590 [ 71.653928][ T8737] should_failslab+0xc4/0x120 [ 71.653941][ T8737] kmem_cache_alloc_noprof+0x94/0x5d4 [ 71.653950][ T8737] security_file_alloc+0x3c/0x300 [ 71.653961][ T8737] init_file+0x90/0x28c [ 71.653970][ T8737] alloc_empty_file+0x80/0x1cc [ 71.653979][ T8737] alloc_file+0x58/0x98 [ 71.653987][ T8737] alloc_file_pseudo+0xe0/0x198 [ 71.653995][ T8737] __anon_inode_getfile+0x118/0x1c8 [ 71.654009][ T8737] __anon_inode_getfd+0x70/0xf4 [ 71.654021][ T8737] anon_inode_getfd+0x44/0x58 [ 71.654034][ T8737] do_inotify_init+0x2d4/0x408 [ 71.654044][ T8737] __arm64_sys_inotify_init1+0x40/0x54 [ 71.654055][ T8737] invoke_syscall+0x98/0x244 [ 71.654068][ T8737] el0_svc_common+0xec/0x23c [ 71.654079][ T8737] do_el0_svc+0x4c/0x5c [ 71.654091][ T8737] el0_svc+0x64/0x260 [ 71.654103][ T8737] el0t_64_sync_handler+0x44/0x104 [ 71.654114][ T8737] el0t_64_sync+0x198/0x19c [ 71.745152][ T8745] lo: entered allmulticast mode [ 71.745834][ T8744] lo: left allmulticast mode [ 72.115471][ T8780] ip6erspan0: entered allmulticast mode [ 72.163342][ T8788] bcache: register_bcache() error : failed to open device [ 72.180825][ T8785] bond1: invalid NS target :: specified for addition [ 72.180846][ T8785] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 72.183990][ T8785] bond1 (unregistering): Released all slaves [ 72.208617][ T8793] loop6: detected capacity change from 0 to 512 [ 72.244690][ T8793] EXT4-fs (loop6): 1 orphan inode deleted [ 72.245148][ T8793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.281571][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.284956][ T1237] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 1 [ 72.284973][ T1237] loop6: lost filesystem error report for type 5 error -117 [ 72.369333][ T8806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 72.369604][ T8806] System zones: 1-12 [ 72.369830][ T8806] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1462: missing EA_INODE flag [ 72.369843][ T8806] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 72.372074][ T8806] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1462: error while reading EA inode 12 err=-117 [ 72.372099][ T8806] loop7: lost filesystem error report for type 5 error -117 [ 72.375638][ T8806] EXT4-fs (loop7): 1 orphan inode deleted [ 72.376107][ T8806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.400836][ T8806] fscrypt (loop7, inode 15): Mutually exclusive encryption flags (0x1c) [ 72.418772][ T7500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.444017][ T8814] input: syz1 as /devices/virtual/input/input6 [ 72.559494][ T8826] EXT4-fs: Ignoring removed oldalloc option [ 72.559509][ T8826] EXT4-fs: Ignoring removed orlov option [ 72.575252][ T8826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.588692][ T8826] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.590072][ T8826] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 72.590110][ T8826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.590110][ T8826] [ 72.624916][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.706670][ T8841] syzkaller1: entered promiscuous mode [ 72.706688][ T8841] syzkaller1: entered allmulticast mode [ 73.225192][ T8853] device-mapper: table: 248:2: loop0 too small for target: start=0, len=2048, dev_size=1024 [ 73.225209][ T8853] device-mapper: core: Cannot calculate initial queue limits [ 73.225214][ T8853] device-mapper: ioctl: unable to set up device queue for new table. [ 73.259847][ T8852] netlink: 'syz.1.1482': attribute type 4 has an invalid length. [ 73.551389][ T8873] FAULT_INJECTION: forcing a failure. [ 73.551389][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.551410][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.6.1489 Not tainted syzkaller #0 PREEMPT [ 73.551426][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.551432][ T8873] Call trace: [ 73.551436][ T8873] show_stack+0x2c/0x3c (C) [ 73.551456][ T8873] __dump_stack+0x30/0x40 [ 73.551468][ T8873] dump_stack_lvl+0xd8/0x12c [ 73.551479][ T8873] dump_stack+0x1c/0x28 [ 73.551491][ T8873] should_fail_ex+0x41c/0x590 [ 73.551504][ T8873] should_fail+0x14/0x24 [ 73.551521][ T8873] should_fail_usercopy+0x20/0x30 [ 73.551534][ T8873] strncpy_from_user+0x48/0x388 [ 73.551545][ T8873] path_getxattrat+0x12c/0x2cc [ 73.551556][ T8873] __arm64_sys_fgetxattr+0xb0/0xc8 [ 73.551565][ T8873] invoke_syscall+0x98/0x244 [ 73.551577][ T8873] el0_svc_common+0xec/0x23c [ 73.551588][ T8873] do_el0_svc+0x4c/0x5c [ 73.551599][ T8873] el0_svc+0x64/0x260 [ 73.551611][ T8873] el0t_64_sync_handler+0x44/0x104 [ 73.551622][ T8873] el0t_64_sync+0x198/0x19c [ 73.779887][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 73.800966][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.801147][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.884404][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.889479][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.953896][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.957748][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.966445][ T8901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.966462][ T8901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.980654][ T8901] veth1_macvtap: left promiscuous mode [ 73.981287][ T8901] veth0_macvtap: left promiscuous mode [ 73.984731][ T8901] veth0_macvtap: entered promiscuous mode [ 73.987797][ T8901] veth1_macvtap: entered promiscuous mode [ 73.994819][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.997721][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.002327][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.003015][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.011836][ T8901] bridge0: port 3(vlan2) entered blocking state [ 74.011879][ T8901] bridge0: port 3(vlan2) entered forwarding state [ 74.018164][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.018772][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.018974][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.019121][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.090058][ T8905] sit0: entered promiscuous mode [ 74.091482][ T8905] netlink: 'syz.6.1505': attribute type 1 has an invalid length. [ 74.091495][ T8905] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1505'. [ 74.092618][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.092655][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.093178][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.093209][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.199172][ T8914] FAULT_INJECTION: forcing a failure. [ 74.199172][ T8914] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.199193][ T8914] CPU: 1 UID: 0 PID: 8914 Comm: syz.6.1509 Not tainted syzkaller #0 PREEMPT [ 74.199204][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.199210][ T8914] Call trace: [ 74.199213][ T8914] show_stack+0x2c/0x3c (C) [ 74.199233][ T8914] __dump_stack+0x30/0x40 [ 74.199248][ T8914] dump_stack_lvl+0xd8/0x12c [ 74.199260][ T8914] dump_stack+0x1c/0x28 [ 74.199270][ T8914] should_fail_ex+0x41c/0x590 [ 74.199284][ T8914] should_fail+0x14/0x24 [ 74.199296][ T8914] get_futex_key+0x1ec/0x12b0 [ 74.199307][ T8914] futex_wake+0x10c/0x594 [ 74.199318][ T8914] do_futex+0x2c4/0x378 [ 74.199328][ T8914] __arm64_sys_futex+0x2e4/0x418 [ 74.199339][ T8914] invoke_syscall+0x98/0x244 [ 74.199352][ T8914] el0_svc_common+0xec/0x23c [ 74.199363][ T8914] do_el0_svc+0x4c/0x5c [ 74.199374][ T8914] el0_svc+0x64/0x260 [ 74.199386][ T8914] el0t_64_sync_handler+0x44/0x104 [ 74.199398][ T8914] el0t_64_sync+0x198/0x19c [ 74.230355][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1511'. [ 74.317123][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1514'. [ 74.317152][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1514'. [ 74.563019][ T4894] kernel write not supported for file /dummy_udc (pid: 4894 comm: kworker/0:8) [ 74.658331][ T8960] FAULT_INJECTION: forcing a failure. [ 74.658331][ T8960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.658353][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.1.1530 Not tainted syzkaller #0 PREEMPT [ 74.658363][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.658369][ T8960] Call trace: [ 74.658372][ T8960] show_stack+0x2c/0x3c (C) [ 74.658392][ T8960] __dump_stack+0x30/0x40 [ 74.658406][ T8960] dump_stack_lvl+0xd8/0x12c [ 74.658418][ T8960] dump_stack+0x1c/0x28 [ 74.658428][ T8960] should_fail_ex+0x41c/0x590 [ 74.658442][ T8960] should_fail+0x14/0x24 [ 74.658453][ T8960] get_futex_key+0x1ec/0x12b0 [ 74.658465][ T8960] futex_wake+0x10c/0x594 [ 74.658475][ T8960] do_futex+0x2c4/0x378 [ 74.658486][ T8960] __arm64_sys_futex+0x2e4/0x418 [ 74.658496][ T8960] invoke_syscall+0x98/0x244 [ 74.658508][ T8960] el0_svc_common+0xec/0x23c [ 74.658519][ T8960] do_el0_svc+0x4c/0x5c [ 74.658537][ T8960] el0_svc+0x64/0x260 [ 74.658549][ T8960] el0t_64_sync_handler+0x44/0x104 [ 74.658561][ T8960] el0t_64_sync+0x198/0x19c [ 74.713981][ T8964] lo: entered allmulticast mode [ 74.716716][ T8962] lo: left allmulticast mode [ 74.836670][ T8973] set_capacity_and_notify: 2 callbacks suppressed [ 74.836684][ T8973] loop6: detected capacity change from 0 to 512 [ 74.874114][ T8973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.999945][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.313352][ T9014] syzkaller1: entered promiscuous mode [ 75.313370][ T9014] syzkaller1: entered allmulticast mode [ 75.427031][ T9026] loop3: detected capacity change from 0 to 512 [ 75.434071][ T9026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.442845][ T9026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.475945][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.869276][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 75.869290][ T30] audit: type=1400 audit(75.860:36): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=9077 comm="syz.3.1562" path="/359/file1" dev="tmpfs" ino=1921 [ 76.313585][ T9114] input: syz0 as /devices/virtual/input/input7 [ 76.317303][ T9118] loop6: detected capacity change from 0 to 512 [ 76.359826][ T9118] EXT4-fs (loop6): 1 orphan inode deleted [ 76.360280][ T9118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.393232][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.491781][ T9138] syzkaller1: entered promiscuous mode [ 76.491798][ T9138] syzkaller1: entered allmulticast mode [ 76.655360][ T9154] netlink: 'syz.1.1591': attribute type 3 has an invalid length. [ 76.655381][ T9154] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1591'. [ 76.710073][ T9158] loop6: detected capacity change from 0 to 2048 [ 76.711105][ T9158] EXT4-fs: Ignoring removed i_version option [ 76.726228][ T9158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.756228][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1594'. [ 76.820923][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.976169][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1604'. [ 77.084856][ T9211] Injecting memory failure for pfn 0x13c8de at process virtual address 0x2062c000 [ 77.104233][ T9211] Memory failure: 0x13c8de: Sending SIGBUS to syz.1.1610:9211 due to hardware memory corruption [ 77.104269][ T9211] Memory failure: 0x13c8de: recovery action for unsplit thp: Failed [ 77.121721][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.121933][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.250104][ T9224] loop1: detected capacity change from 0 to 128 [ 77.254699][ T9224] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.272428][ T9224] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.293057][ T9227] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1617'. [ 77.345805][ T9233] loop1: detected capacity change from 0 to 256 [ 77.472361][ T9240] overlayfs: fs on './proc' does not support file handles, falling back to xino=off. [ 77.472374][ T9240] overlayfs: maximum fs stacking depth exceeded [ 77.843904][ T9274] mmap: syz.7.1635 (9274) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.026963][ T9290] loop1: detected capacity change from 0 to 512 [ 78.031500][ T9290] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.040477][ T9290] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1644: corrupted in-inode xattr: e_value size too large [ 78.040504][ T9290] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.043283][ T9290] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1644: couldn't read orphan inode 15 (err -117) [ 78.043307][ T9290] loop1: lost filesystem error report for type 5 error -117 [ 78.048716][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 78.048737][ C1] EXT4-fs (loop1): initial error at time 78: ext4_iget_extra_inode:5210: inode 15 [ 78.048759][ C1] EXT4-fs (loop1): last error at time 78: ext4_orphan_get:1408 [ 78.050808][ T9290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.063814][ T9290] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.1644: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 78.144226][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. PÚÿÿÿ-D devtmpfs./dev/console[ 78.705565][ T9333] loop8: detected capacity change from 0 to 2048 [ 78.763962][ T9333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.781920][ T1358] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 78.783254][ T1358] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.783270][ T1358] EXT4-fs (loop8): This should not happen!! Data will be lost [ 78.783270][ T1358] [ 78.783278][ T1358] EXT4-fs (loop8): Total free blocks count 0 [ 78.783285][ T1358] EXT4-fs (loop8): Free/Dirty block details [ 78.783292][ T1358] EXT4-fs (loop8): free_blocks=2415919504 [ 78.783300][ T1358] EXT4-fs (loop8): dirty_blocks=16 [ 78.783306][ T1358] EXT4-fs (loop8): Block reservation details [ 78.783312][ T1358] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 78.783691][ T5057] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 78.783963][ T7965] EXT4-fs warning (device loop8): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 78.878891][ T9342] loop8: detected capacity change from 0 to 128 [ 78.888789][ T9342] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.923851][ T9349] loop3: detected capacity change from 0 to 512 [ 78.935553][ T7965] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.806222][ T9386] input: syz0 as /devices/virtual/input/input8 [ 79.843349][ T9389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 79.843388][ T9389] System zones: 1-12 [ 79.845093][ T9389] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1683: missing EA_INODE flag [ 79.845109][ T9389] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 79.845277][ T9389] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1683: error while reading EA inode 12 err=-117 [ 79.845291][ T9389] loop6: lost filesystem error report for type 5 error -117 [ 79.845417][ T9389] EXT4-fs (loop6): 1 orphan inode deleted [ 79.845878][ T9389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.877114][ T9389] fscrypt (loop6, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 79.890986][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.140834][ T9423] set_capacity_and_notify: 1 callbacks suppressed [ 80.140849][ T9423] loop8: detected capacity change from 0 to 1024 [ 80.141187][ T9423] EXT4-fs: Ignoring removed orlov option [ 80.192391][ T9423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.234564][ T7965] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.431465][ T4709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.432496][ T4709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.432916][ T4709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.433494][ T4709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.434620][ T4709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.729406][ T9487] loop6: detected capacity change from 0 to 512 [ 80.729777][ T9487] EXT4-fs: Ignoring removed bh option [ 80.735828][ T9487] EXT4-fs (loop6): Test dummy encryption mode enabled [ 80.762426][ T9487] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1726: corrupted in-inode xattr: invalid ea_ino [ 80.762456][ T9487] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.762778][ T9487] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1726: couldn't read orphan inode 15 (err -117) [ 80.762793][ T9487] loop6: lost filesystem error report for type 5 error -117 [ 80.763417][ T9487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.783614][ T4381] kernel write not supported for file /netlabel (pid: 4381 comm: kworker/1:2) [ 80.799726][ T5732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.806562][ T30] audit: type=1326 audit(80.790:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.806645][ T30] audit: type=1326 audit(80.790:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.806865][ T30] audit: type=1326 audit(80.790:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.806938][ T30] audit: type=1326 audit(80.790:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.807003][ T30] audit: type=1326 audit(80.790:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.807073][ T30] audit: type=1326 audit(80.790:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.807204][ T30] audit: type=1326 audit(80.790:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.807273][ T30] audit: type=1326 audit(80.790:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.807348][ T30] audit: type=1326 audit(80.790:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.1.1737" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbd379368 code=0x7ffc0000 [ 80.889197][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.889880][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.889997][ T9453] bridge_slave_0: entered allmulticast mode [ 80.892484][ T9453] bridge_slave_0: entered promiscuous mode [ 80.899580][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.899618][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.899693][ T9453] bridge_slave_1: entered allmulticast mode [ 80.900156][ T9453] bridge_slave_1: entered promiscuous mode [ 80.907264][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.920992][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.930580][ T9453] team0: Port device team_slave_0 added [ 80.931569][ T9453] team0: Port device team_slave_1 added [ 80.948853][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.948867][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.948884][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.949435][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.949442][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.949456][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.961813][ T9453] hsr_slave_0: entered promiscuous mode [ 80.962133][ T9453] hsr_slave_1: entered promiscuous mode [ 80.962344][ T9453] debugfs: 'hsr0' already exists in 'hsr' [ 80.962354][ T9453] Cannot create hsr debugfs directory [ 81.047411][ T9520] FAULT_INJECTION: forcing a failure. [ 81.047411][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 81.047431][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.8.1738 Not tainted syzkaller #0 PREEMPT [ 81.047442][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.047448][ T9520] Call trace: [ 81.047451][ T9520] show_stack+0x2c/0x3c (C) [ 81.047470][ T9520] __dump_stack+0x30/0x40 [ 81.047483][ T9520] dump_stack_lvl+0xd8/0x12c [ 81.047495][ T9520] dump_stack+0x1c/0x28 [ 81.047506][ T9520] should_fail_ex+0x41c/0x590 [ 81.047519][ T9520] should_failslab+0xc4/0x120 [ 81.047538][ T9520] kmem_cache_alloc_noprof+0x94/0x5d4 [ 81.047547][ T9520] pagetable_pte_ctor+0x7c/0x268 [ 81.047560][ T9520] __pte_alloc+0x54/0x1c4 [ 81.047570][ T9520] do_pte_missing+0x25a0/0x2a28 [ 81.047578][ T9520] handle_mm_fault+0x1534/0x2bec [ 81.047590][ T9520] __get_user_pages+0x82c/0x13b0 [ 81.047599][ T9520] populate_vma_page_range+0x260/0x358 [ 81.047608][ T9520] __mm_populate+0x204/0x328 [ 81.047617][ T9520] do_mlock+0x530/0x638 [ 81.047625][ T9520] __arm64_sys_mlock+0x80/0xb4 [ 81.047633][ T9520] invoke_syscall+0x98/0x244 [ 81.047645][ T9520] el0_svc_common+0xec/0x23c [ 81.047656][ T9520] do_el0_svc+0x4c/0x5c [ 81.047667][ T9520] el0_svc+0x64/0x260 [ 81.047679][ T9520] el0t_64_sync_handler+0x44/0x104 [ 81.047690][ T9520] el0t_64_sync+0x198/0x19c [ 81.094488][ T9524] Bluetooth: MGMT ver 1.23 [ 81.095856][ T9524] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 81.101941][ T9453] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 81.115881][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.117003][ T9453] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 81.121617][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.122140][ T9453] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 81.125281][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.125713][ T9453] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 81.129596][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.182773][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.196027][ T9453] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.205543][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.205578][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.218532][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.218563][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.263319][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1744'. [ 81.280788][ T9548] loop1: detected capacity change from 0 to 512 [ 81.322803][ T9548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.354492][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.373951][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.484100][ T9453] veth0_vlan: entered promiscuous mode [ 81.494439][ T9453] veth1_vlan: entered promiscuous mode [ 81.507393][ T9453] veth0_macvtap: entered promiscuous mode [ 81.513047][ T9453] veth1_macvtap: entered promiscuous mode [ 81.521653][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.535006][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.572425][ T9582] syzkaller1: entered promiscuous mode [ 81.572444][ T9582] syzkaller1: entered allmulticast mode [ 81.580594][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.581505][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.581543][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.581564][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.602428][ T9584] loop1: detected capacity change from 0 to 512 [ 81.607114][ T1358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.607128][ T1358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.623205][ T9584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.630910][ T9584] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.1756: corrupted xattr block 33: invalid header [ 81.631393][ T9584] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.1756: corrupted xattr block 33: invalid header [ 81.631661][ T9584] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.1756: corrupted xattr block 33: invalid header [ 81.672611][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.672625][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.677401][ T40] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 81.677588][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 81.677600][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.677600][ T40] [ 81.677607][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 81.677614][ T40] EXT4-fs (loop1): Free/Dirty block details [ 81.677621][ T40] EXT4-fs (loop1): free_blocks=65280 [ 81.677629][ T40] EXT4-fs (loop1): dirty_blocks=31 [ 81.677635][ T40] EXT4-fs (loop1): Block reservation details [ 81.677640][ T40] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 81.713134][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.741791][ T9588] loop1: detected capacity change from 0 to 2048 [ 81.768368][ T4709] Bluetooth: hci5: command 0x1003 tx timeout [ 81.768417][ T4715] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 81.784691][ T9588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.794947][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1767'. [ 81.796988][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.797343][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.831076][ T1237] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 81.831140][ T1237] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.831151][ T1237] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.831151][ T1237] [ 81.831158][ T1237] EXT4-fs (loop1): Total free blocks count 0 [ 81.831164][ T1237] EXT4-fs (loop1): Free/Dirty block details [ 81.831172][ T1237] EXT4-fs (loop1): free_blocks=2415919504 [ 81.831180][ T1237] EXT4-fs (loop1): dirty_blocks=16 [ 81.831185][ T1237] EXT4-fs (loop1): Block reservation details [ 81.831191][ T1237] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 81.831782][ T14] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 81.832853][ T4707] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 81.949136][ T9607] FAULT_INJECTION: forcing a failure. [ 81.949136][ T9607] name failslab, interval 1, probability 0, space 0, times 0 [ 81.949160][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.8.1764 Not tainted syzkaller #0 PREEMPT [ 81.949172][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.949178][ T9607] Call trace: [ 81.949181][ T9607] show_stack+0x2c/0x3c (C) [ 81.949202][ T9607] __dump_stack+0x30/0x40 [ 81.949214][ T9607] dump_stack_lvl+0xd8/0x12c [ 81.949226][ T9607] dump_stack+0x1c/0x28 [ 81.949238][ T9607] should_fail_ex+0x41c/0x590 [ 81.949251][ T9607] should_failslab+0xc4/0x120 [ 81.949264][ T9607] __kmalloc_noprof+0x108/0x6c8 [ 81.949273][ T9607] security_prepare_creds+0x60/0x35c [ 81.949285][ T9607] prepare_creds+0x500/0x7d0 [ 81.949297][ T9607] cap_task_prctl+0x6c0/0x8a8 [ 81.949310][ T9607] security_task_prctl+0xe8/0x17c [ 81.949321][ T9607] __arm64_sys_prctl+0x13c/0x13d0 [ 81.949333][ T9607] invoke_syscall+0x98/0x244 [ 81.949346][ T9607] el0_svc_common+0xec/0x23c [ 81.949357][ T9607] do_el0_svc+0x4c/0x5c [ 81.949369][ T9607] el0_svc+0x64/0x260 [ 81.949381][ T9607] el0t_64_sync_handler+0x44/0x104 [ 81.949393][ T9607] el0t_64_sync+0x198/0x19c [ 82.101665][ T9623] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1772'. [ 82.149964][ T9633] loop6: detected capacity change from 0 to 512 [ 82.151001][ T9633] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 82.153654][ T9633] EXT4-fs (loop6): 1 truncate cleaned up [ 82.172776][ T9633] EXT4-fs error (device loop6): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.6.1775: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 82.172989][ T9633] EXT4-fs (loop6): Remounting filesystem read-only [ 82.172999][ T9633] EXT4-fs warning (device loop6): ext4_rename_delete:3741: inode #2: comm syz.6.1775: Deleting old file: nlink 5, error=-117 [ 82.257514][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 82.257541][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 82.273067][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 82.273088][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 82.274724][ T9646] loop8: detected capacity change from 0 to 1024 [ 82.275042][ T9646] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.275055][ T9646] EXT4-fs: Ignoring removed oldalloc option [ 82.300366][ T9648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.358833][ T9646] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1782: bg 0: block 112: padding at end of block bitmap is not set [ 82.367363][ T9646] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.1782: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.376727][ T9658] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1787'. [ 82.376743][ T9658] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1787'. [ 82.384267][ T9646] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.1782: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.487995][ T4715] Bluetooth: hci0: command tx timeout [ 82.511213][ T9672] syzkaller1: entered promiscuous mode [ 82.511234][ T9672] syzkaller1: entered allmulticast mode [ 82.551330][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1798'. [ 82.725376][ T4894] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4894 comm: kworker/0:8) [ 82.729005][ T9694] syzkaller1: entered promiscuous mode [ 82.729019][ T9694] syzkaller1: entered allmulticast mode [ 82.789784][ T9702] loop7: detected capacity change from 0 to 1024 [ 82.790124][ T9702] EXT4-fs: Ignoring removed bh option [ 82.907732][ T9711] FAULT_INJECTION: forcing a failure. [ 82.907732][ T9711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.907757][ T9711] CPU: 1 UID: 0 PID: 9711 Comm: syz.7.1808 Not tainted syzkaller #0 PREEMPT [ 82.907770][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.907777][ T9711] Call trace: [ 82.907780][ T9711] show_stack+0x2c/0x3c (C) [ 82.907801][ T9711] __dump_stack+0x30/0x40 [ 82.907815][ T9711] dump_stack_lvl+0xd8/0x12c [ 82.907827][ T9711] dump_stack+0x1c/0x28 [ 82.907838][ T9711] should_fail_ex+0x41c/0x590 [ 82.907855][ T9711] should_fail+0x14/0x24 [ 82.907867][ T9711] should_fail_usercopy+0x20/0x30 [ 82.907880][ T9711] _inline_copy_from_user+0x3c/0x174 [ 82.907894][ T9711] __arm64_sys_mq_open+0x12c/0x1c8 [ 82.907906][ T9711] invoke_syscall+0x98/0x244 [ 82.907919][ T9711] el0_svc_common+0xec/0x23c [ 82.907930][ T9711] do_el0_svc+0x4c/0x5c [ 82.907942][ T9711] el0_svc+0x64/0x260 [ 82.907954][ T9711] el0t_64_sync_handler+0x44/0x104 [ 82.907966][ T9711] el0t_64_sync+0x198/0x19c [ 83.443195][ T9743] loop8: detected capacity change from 0 to 86 [ 84.118764][ T9785] FAULT_INJECTION: forcing a failure. [ 84.118764][ T9785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.118786][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.8.1842 Not tainted syzkaller #0 PREEMPT [ 84.118797][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.118803][ T9785] Call trace: [ 84.118806][ T9785] show_stack+0x2c/0x3c (C) [ 84.118827][ T9785] __dump_stack+0x30/0x40 [ 84.118840][ T9785] dump_stack_lvl+0xd8/0x12c [ 84.118852][ T9785] dump_stack+0x1c/0x28 [ 84.118863][ T9785] should_fail_ex+0x41c/0x590 [ 84.118876][ T9785] should_fail_alloc_page+0xec/0x10c [ 84.118890][ T9785] prepare_alloc_pages+0x194/0x484 [ 84.118899][ T9785] __alloc_frozen_pages_noprof+0x180/0x648 [ 84.118908][ T9785] alloc_pages_mpol+0x1fc/0x3d0 [ 84.118918][ T9785] folio_alloc_mpol_noprof+0x4c/0x248 [ 84.118927][ T9785] alloc_migration_target_by_mpol+0x25c/0x494 [ 84.118939][ T9785] migrate_pages_batch+0x738/0x2bc4 [ 84.118947][ T9785] migrate_pages+0x1adc/0x2a5c [ 84.118960][ T9785] __arm64_sys_mbind+0x73c/0x994 [ 84.118969][ T9785] invoke_syscall+0x98/0x244 [ 84.118981][ T9785] el0_svc_common+0xec/0x23c [ 84.118992][ T9785] do_el0_svc+0x4c/0x5c [ 84.119004][ T9785] el0_svc+0x64/0x260 [ 84.119016][ T9785] el0t_64_sync_handler+0x44/0x104 [ 84.119027][ T9785] el0t_64_sync+0x198/0x19c [ 84.285809][ T9792] FAULT_INJECTION: forcing a failure. [ 84.285809][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 84.285830][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: syz.9.1845 Not tainted syzkaller #0 PREEMPT [ 84.285841][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.285850][ T9792] Call trace: [ 84.285854][ T9792] show_stack+0x2c/0x3c (C) [ 84.285876][ T9792] __dump_stack+0x30/0x40 [ 84.285889][ T9792] dump_stack_lvl+0xd8/0x12c [ 84.285901][ T9792] dump_stack+0x1c/0x28 [ 84.285912][ T9792] should_fail_ex+0x41c/0x590 [ 84.285925][ T9792] should_failslab+0xc4/0x120 [ 84.285938][ T9792] kmem_cache_alloc_noprof+0x94/0x5d4 [ 84.285947][ T9792] prepare_creds+0x34/0x7d0 [ 84.285959][ T9792] keyctl_set_reqkey_keyring+0x84/0x1e4 [ 84.285970][ T9792] __arm64_sys_keyctl+0x120/0x3e8 [ 84.285980][ T9792] invoke_syscall+0x98/0x244 [ 84.285993][ T9792] el0_svc_common+0xec/0x23c [ 84.286004][ T9792] do_el0_svc+0x4c/0x5c [ 84.286015][ T9792] el0_svc+0x64/0x260 [ 84.286027][ T9792] el0t_64_sync_handler+0x44/0x104 [ 84.286038][ T9792] el0t_64_sync+0x198/0x19c [ 84.351701][ T9796] loop8: detected capacity change from 0 to 512 [ 84.371627][ T9796] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.414689][ T9796] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.415183][ T9796] EXT4-fs (loop8): mount failed [ 84.570047][ T4715] Bluetooth: hci0: command tx timeout [ 85.051132][ T9844] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.051150][ T9844] EXT4-fs: Ignoring removed oldalloc option [ 85.079362][ T9844] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1868: bg 0: block 112: padding at end of block bitmap is not set [ 85.081497][ T9844] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.1868: lblock 0 mapped to illegal pblock 0 (length 1) [ 85.087711][ T9844] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.1868: lblock 0 mapped to illegal pblock 0 (length 1) [ 85.206100][ T30] audit: type=1400 audit(85.190:46): lsm=SMACK fn=smk_curacc_sem action=denied subject="y" object="_" requested=rw pid=9857 comm="syz.7.1872" ipc_key=0 [ 85.230824][ T9860] set_capacity_and_notify: 1 callbacks suppressed [ 85.230838][ T9860] loop7: detected capacity change from 0 to 512 [ 85.384709][ T9873] loop7: detected capacity change from 0 to 512 [ 85.469287][ T9885] loop7: detected capacity change from 0 to 1024 [ 85.537128][ T9885] EXT4-fs error (device loop7): ext4_free_blocks:6719: comm syz.7.1881: Freeing blocks not in datazone - block = 0, count = 16 [ 85.555780][ T9885] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1881: bg 0: block 112: padding at end of block bitmap is not set [ 85.556936][ T9893] syzkaller1: entered promiscuous mode [ 85.556952][ T9893] syzkaller1: entered allmulticast mode [ 85.752952][ T9902] loop7: detected capacity change from 0 to 2048 [ 85.776509][ T9911] loop8: detected capacity change from 0 to 256 [ 85.846881][ T9914] loop1: detected capacity change from 0 to 4096 [ 86.239480][ T9945] loop6: detected capacity change from 0 to 1024 [ 86.280032][ T9945] EXT4-fs (loop6): shut down requested (2) [ 86.415258][ T9962] ima: policy update failed [ 86.415329][ T30] audit: type=1802 audit(86.400:47): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.8.1915" res=0 errno=0 [ 86.451783][ T9967] loop9: detected capacity change from 0 to 1024 [ 86.452274][ T9967] EXT4-fs: Ignoring removed bh option [ 86.563005][ T9980] loop6: detected capacity change from 0 to 1024 [ 86.584557][ T9980] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 86.590147][ T9980] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.1921: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.590169][ T9980] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.590250][ T9980] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 86.590264][ T9980] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.1921: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.590278][ T9980] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.590350][ T9980] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 86.590358][ T9980] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1921: Failed to acquire dquot type 0 [ 86.590368][ T9980] loop6: lost filesystem error report for type 5 error -117 [ 86.590474][ T9980] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 86.590484][ T9980] loop6: lost filesystem error report for type 5 error -117 [ 86.590566][ T9980] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.1921: mark_inode_dirty error [ 86.590579][ T9980] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.590650][ T9980] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 86.590686][ T9980] EXT4-fs (loop6): 1 orphan inode deleted [ 86.609523][ T40] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.609786][ T40] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 86.609801][ T40] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 86.624301][ T9980] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm syz.6.1921: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.632503][ T9980] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1 [ 86.632546][ T9980] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 980643439 [ 86.632560][ T9980] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1921: Failed to acquire dquot type 0 [ 86.648257][ T4715] Bluetooth: hci0: command tx timeout [ 86.662433][ T40] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.662460][ T40] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.662595][ T40] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 86.662613][ T40] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 86.662625][ T40] loop6: lost filesystem error report for type 5 error -117 [ 86.666762][ T5732] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 86.666779][ T5732] loop6: lost filesystem error report for type 5 error -117 [ 86.667713][ T5732] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 86.667731][ T5732] loop6: lost filesystem error report for type 5 error -117 [ 86.667827][ T5732] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 86.667842][ T5732] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.670721][ T5732] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 86.670739][ T5732] loop6: lost filesystem error report for type 5 error -117 [ 86.867101][T10006] loop6: detected capacity change from 0 to 1024 [ 86.867472][T10006] EXT4-fs: Ignoring removed bh option [ 86.943029][T10017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 87.100989][T10030] __nla_validate_parse: 5 callbacks suppressed [ 87.101003][T10030] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1943'. [ 87.243614][T10047] input: syz0 as /devices/virtual/input/input9 [ 87.284885][ T30] audit: type=1400 audit(87.270:48): lsm=SMACK fn=smk_curacc_sem action=denied subject="y" object="_" requested=rw pid=10049 comm="syz.8.1950" ipc_key=0 [ 87.349657][T10055] FAULT_INJECTION: forcing a failure. [ 87.349657][T10055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.349677][T10055] CPU: 1 UID: 0 PID: 10055 Comm: syz.8.1952 Not tainted syzkaller #0 PREEMPT [ 87.349688][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.349694][T10055] Call trace: [ 87.349697][T10055] show_stack+0x2c/0x3c (C) [ 87.349717][T10055] __dump_stack+0x30/0x40 [ 87.349730][T10055] dump_stack_lvl+0xd8/0x12c [ 87.349742][T10055] dump_stack+0x1c/0x28 [ 87.349753][T10055] should_fail_ex+0x41c/0x590 [ 87.349767][T10055] should_fail+0x14/0x24 [ 87.349782][T10055] should_fail_usercopy+0x20/0x30 [ 87.349795][T10055] __arm64_sys_move_pages+0x166c/0x1aa0 [ 87.349805][T10055] invoke_syscall+0x98/0x244 [ 87.349817][T10055] el0_svc_common+0xec/0x23c [ 87.349829][T10055] do_el0_svc+0x4c/0x5c [ 87.349840][T10055] el0_svc+0x64/0x260 [ 87.349853][T10055] el0t_64_sync_handler+0x44/0x104 [ 87.349864][T10055] el0t_64_sync+0x198/0x19c [ 87.424254][T10062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.424269][T10062] IPv6: NLM_F_CREATE should be set when creating new route [ 87.578230][T10073] syzkaller1: entered promiscuous mode [ 87.578249][T10073] syzkaller1: entered allmulticast mode [ 87.595931][T10075] EXT4-fs: Ignoring removed oldalloc option [ 87.595946][T10075] EXT4-fs: Ignoring removed orlov option [ 87.641153][T10075] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.1963: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.647010][T10075] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 87.647032][T10075] EXT4-fs (loop9): This should not happen!! Data will be lost [ 87.647032][T10075] [ 87.875876][T10098] FAULT_INJECTION: forcing a failure. [ 87.875876][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 87.875903][T10098] CPU: 0 UID: 0 PID: 10098 Comm: syz.8.1973 Not tainted syzkaller #0 PREEMPT [ 87.875917][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.875924][T10098] Call trace: [ 87.875927][T10098] show_stack+0x2c/0x3c (C) [ 87.875948][T10098] __dump_stack+0x30/0x40 [ 87.875962][T10098] dump_stack_lvl+0xd8/0x12c [ 87.875974][T10098] dump_stack+0x1c/0x28 [ 87.875986][T10098] should_fail_ex+0x41c/0x590 [ 87.876000][T10098] should_failslab+0xc4/0x120 [ 87.876013][T10098] kmem_cache_alloc_noprof+0x94/0x5d4 [ 87.876023][T10098] security_file_alloc+0x3c/0x300 [ 87.876034][T10098] init_file+0x90/0x28c [ 87.876043][T10098] alloc_empty_file+0x80/0x1cc [ 87.876052][T10098] alloc_file+0x58/0x98 [ 87.876064][T10098] alloc_file_pseudo+0xe0/0x198 [ 87.876073][T10098] sock_alloc_file+0xb4/0x1ac [ 87.876084][T10098] do_accept+0x1e0/0x438 [ 87.876093][T10098] __sys_accept4+0x11c/0x1f8 [ 87.876103][T10098] __arm64_sys_accept+0x88/0xa0 [ 87.876114][T10098] invoke_syscall+0x98/0x244 [ 87.876127][T10098] el0_svc_common+0xec/0x23c [ 87.876138][T10098] do_el0_svc+0x4c/0x5c [ 87.876149][T10098] el0_svc+0x64/0x260 [ 87.876162][T10098] el0t_64_sync_handler+0x44/0x104 [ 87.876173][T10098] el0t_64_sync+0x198/0x19c [ 87.971591][T10102] FAULT_INJECTION: forcing a failure. [ 87.971591][T10102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.971614][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.7.1976 Not tainted syzkaller #0 PREEMPT [ 87.971625][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.971631][T10102] Call trace: [ 87.971634][T10102] show_stack+0x2c/0x3c (C) [ 87.971655][T10102] __dump_stack+0x30/0x40 [ 87.971667][T10102] dump_stack_lvl+0xd8/0x12c [ 87.971678][T10102] dump_stack+0x1c/0x28 [ 87.971689][T10102] should_fail_ex+0x41c/0x590 [ 87.971702][T10102] should_fail+0x14/0x24 [ 87.971714][T10102] should_fail_usercopy+0x20/0x30 [ 87.971727][T10102] strncpy_from_user+0x48/0x388 [ 87.971737][T10102] path_getxattrat+0x12c/0x2cc [ 87.971747][T10102] __arm64_sys_fgetxattr+0xb0/0xc8 [ 87.971757][T10102] invoke_syscall+0x98/0x244 [ 87.971769][T10102] el0_svc_common+0xec/0x23c [ 87.971780][T10102] do_el0_svc+0x4c/0x5c [ 87.971792][T10102] el0_svc+0x64/0x260 [ 87.971803][T10102] el0t_64_sync_handler+0x44/0x104 [ 87.971814][T10102] el0t_64_sync+0x198/0x19c [ 88.018703][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1987'. [ 88.020721][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1987'. [ 88.727929][ T4715] Bluetooth: hci0: command tx timeout [ 89.117412][T10148] FAULT_INJECTION: forcing a failure. [ 89.117412][T10148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.117436][T10148] CPU: 1 UID: 0 PID: 10148 Comm: syz.1.1992 Not tainted syzkaller #0 PREEMPT [ 89.117447][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.117453][T10148] Call trace: [ 89.117456][T10148] show_stack+0x2c/0x3c (C) [ 89.117475][T10148] __dump_stack+0x30/0x40 [ 89.117488][T10148] dump_stack_lvl+0xd8/0x12c [ 89.117499][T10148] dump_stack+0x1c/0x28 [ 89.117511][T10148] should_fail_ex+0x41c/0x590 [ 89.117531][T10148] should_fail+0x14/0x24 [ 89.117544][T10148] should_fail_usercopy+0x20/0x30 [ 89.117557][T10148] lsm_fill_user_ctx+0x180/0x358 [ 89.117566][T10148] smack_getselfattr+0xe8/0x110 [ 89.117576][T10148] security_getselfattr+0x310/0x5f8 [ 89.117589][T10148] __arm64_sys_lsm_get_self_attr+0xa8/0xc4 [ 89.117603][T10148] invoke_syscall+0x98/0x244 [ 89.117615][T10148] el0_svc_common+0xec/0x23c [ 89.117627][T10148] do_el0_svc+0x4c/0x5c [ 89.117638][T10148] el0_svc+0x64/0x260 [ 89.117651][T10148] el0t_64_sync_handler+0x44/0x104 [ 89.117662][T10148] el0t_64_sync+0x198/0x19c [ 89.205242][T10158] input: syz0 as /devices/virtual/input/input10 [ 89.212245][T10154] sit0: left promiscuous mode [ 89.241440][T10162] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.274535][T10162] syz.9.1994: attempt to access beyond end of device [ 89.274535][T10162] loop9: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 89.276148][T10162] syz.9.1994: attempt to access beyond end of device [ 89.276148][T10162] loop9: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 89.282340][T10162] syz.9.1994: attempt to access beyond end of device [ 89.282340][T10162] loop9: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 89.332069][T10160] EXT4-fs (loop1): shut down requested (2) [ 89.463234][ T4691] kernel write not supported for file /dummy_udc (pid: 4691 comm: kworker/0:3) [ 90.109365][T10220] netlink: 'syz.6.2023': attribute type 12 has an invalid length. [ 90.110548][T10220] netlink: 'syz.6.2023': attribute type 29 has an invalid length. [ 90.110558][T10220] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2023'. [ 90.110570][T10220] netlink: 'syz.6.2023': attribute type 1 has an invalid length. [ 90.110578][T10220] netlink: 'syz.6.2023': attribute type 2 has an invalid length. [ 90.110587][T10220] netlink: 'syz.6.2023': attribute type 3 has an invalid length. [ 90.110595][T10220] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2023'. [ 90.867818][T10263] set_capacity_and_notify: 7 callbacks suppressed [ 90.867832][T10263] loop7: detected capacity change from 0 to 2048 [ 91.002344][ T30] audit: type=1400 audit(90.990:49): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=10278 comm="syz.9.2047" path="/56/file1" dev="tmpfs" ino=315 [ 91.013989][T10281] loop7: detected capacity change from 0 to 512 [ 91.014353][T10281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.022955][T10277] FAULT_INJECTION: forcing a failure. [ 91.022955][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.022975][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.1.2045 Not tainted syzkaller #0 PREEMPT [ 91.022986][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.022992][T10277] Call trace: [ 91.022995][T10277] show_stack+0x2c/0x3c (C) [ 91.023013][T10277] __dump_stack+0x30/0x40 [ 91.023026][T10277] dump_stack_lvl+0xd8/0x12c [ 91.023037][T10277] dump_stack+0x1c/0x28 [ 91.023049][T10277] should_fail_ex+0x41c/0x590 [ 91.023062][T10277] should_fail+0x14/0x24 [ 91.023074][T10277] should_fail_usercopy+0x20/0x30 [ 91.023087][T10277] __arm64_sys_move_pages+0x166c/0x1aa0 [ 91.023097][T10277] invoke_syscall+0x98/0x244 [ 91.023109][T10277] el0_svc_common+0xec/0x23c [ 91.023121][T10277] do_el0_svc+0x4c/0x5c [ 91.023132][T10277] el0_svc+0x64/0x260 [ 91.023144][T10277] el0t_64_sync_handler+0x44/0x104 [ 91.023156][T10277] el0t_64_sync+0x198/0x19c [ 91.233692][T10304] input: syz0 as /devices/virtual/input/input11 [ 91.389288][T10315] loop1: detected capacity change from 0 to 2048 [ 91.528156][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'. [ 91.631265][T10342] overlayfs: failed to decode file handle (len=3, type=1, flags=0, err=-22) [ 91.874545][T10366] netlink: 'syz.9.2080': attribute type 3 has an invalid length. [ 91.874564][T10366] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2080'. [ 91.899464][ T4715] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 91.913321][T10372] loop6: detected capacity change from 0 to 8 [ 91.965445][T10372] team_slave_1: entered promiscuous mode [ 91.972782][T10371] team_slave_1: left promiscuous mode [ 91.992461][T10382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.074314][T10392] loop8: detected capacity change from 0 to 512 [ 92.081317][T10392] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.2092: iget: bad i_size value: 38620345925642 [ 92.081342][T10392] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.081644][T10392] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2092: couldn't read orphan inode 15 (err -117) [ 92.081664][T10392] loop8: lost filesystem error report for type 5 error -117 [ 92.154451][T10397] loop9: detected capacity change from 0 to 512 [ 92.155792][T10397] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 92.167837][T10397] EXT4-fs (loop9): 1 truncate cleaned up [ 92.177502][T10395] loop8: detected capacity change from 0 to 2048 [ 92.180107][T10395] EXT4-fs: Ignoring removed i_version option [ 92.184973][T10399] loop6: detected capacity change from 0 to 2048 [ 92.304364][T10409] loop8: detected capacity change from 0 to 512 [ 92.383467][T10409] EXT4-fs (loop8): 1 orphan inode deleted [ 92.398207][ T83] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.398244][ T83] EXT4-fs error (device loop8): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 92.535345][ T30] audit: type=1400 audit(92.520:50): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10426 comm="syz.8.2102" src=65532 dest=20002 netif=wpan0 [ 92.650809][T10437] loop9: detected capacity change from 0 to 4096 [ 92.654106][T10437] EXT4-fs (loop9): Test dummy encryption mode enabled [ 92.683072][T10437] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 92.713862][T10443] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 92.717003][T10446] Injecting memory failure for pfn 0x1099de at process virtual address 0x2062c000 [ 92.733321][T10446] Memory failure: 0x1099de: Sending SIGBUS to syz.7.2112:10446 due to hardware memory corruption [ 92.733360][T10446] Memory failure: 0x1099de: recovery action for unsplit thp: Failed [ 92.772186][T10450] FAULT_INJECTION: forcing a failure. [ 92.772186][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 92.772206][T10450] CPU: 1 UID: 0 PID: 10450 Comm: syz.7.2116 Not tainted syzkaller #0 PREEMPT [ 92.772217][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.772222][T10450] Call trace: [ 92.772225][T10450] show_stack+0x2c/0x3c (C) [ 92.772244][T10450] __dump_stack+0x30/0x40 [ 92.772257][T10450] dump_stack_lvl+0xd8/0x12c [ 92.772269][T10450] dump_stack+0x1c/0x28 [ 92.772280][T10450] should_fail_ex+0x41c/0x590 [ 92.772295][T10450] should_failslab+0xc4/0x120 [ 92.772309][T10450] kmem_cache_alloc_noprof+0x94/0x5d4 [ 92.772318][T10450] sk_prot_alloc+0x60/0x1e8 [ 92.772327][T10450] sk_alloc+0x44/0x3ac [ 92.772334][T10450] unix_create1+0xcc/0x640 [ 92.772346][T10450] unix_stream_connect+0x25c/0xca0 [ 92.772357][T10450] p9_fd_create_unix+0x234/0x42c [ 92.772367][T10450] p9_client_create+0x338/0xa40 [ 92.772380][T10450] v9fs_session_init+0x58/0xa7c [ 92.772394][T10450] v9fs_get_tree+0xc4/0x8e8 [ 92.772405][T10450] vfs_get_tree+0x90/0x28c [ 92.772416][T10450] fc_mount+0x24/0xac [ 92.772426][T10450] do_new_mount+0x2a4/0x538 [ 92.772437][T10450] path_mount+0x5f0/0xa88 [ 92.772448][T10450] do_mount+0xe8/0x148 [ 92.772458][T10450] __arm64_sys_mount+0x33c/0x388 [ 92.772470][T10450] invoke_syscall+0x98/0x244 [ 92.772482][T10450] el0_svc_common+0xec/0x23c [ 92.772494][T10450] do_el0_svc+0x4c/0x5c [ 92.772505][T10450] el0_svc+0x64/0x260 [ 92.772517][T10450] el0t_64_sync_handler+0x44/0x104 [ 92.772536][T10450] el0t_64_sync+0x198/0x19c [ 92.772547][T10450] 9pnet_fd: p9_fd_create_unix (10450): problem connecting socket: ./proc: -12 [ 92.937499][T10464] EXT4-fs: Ignoring removed bh option [ 92.937540][T10464] EXT4-fs: Ignoring removed bh option [ 92.942973][T10464] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.949584][T10466] syzkaller1: entered promiscuous mode [ 92.949597][T10466] syzkaller1: entered allmulticast mode [ 92.984726][T10464] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #12: block 7: comm syz.8.2120: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 92.991598][T10464] EXT4-fs (loop8): Remounting filesystem read-only [ 93.067515][ C1] ------------[ cut here ]------------ [ 93.067533][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x10b4/0x1658, CPU#1: syz.8.2126/10476 [ 93.070491][ C1] Modules linked in: [ 93.071198][ C1] CPU: 1 UID: 0 PID: 10476 Comm: syz.8.2126 Not tainted syzkaller #0 PREEMPT [ 93.072825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.074654][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 93.076110][ C1] pc : __cfg80211_bss_update+0x10b4/0x1658 [ 93.077226][ C1] lr : __cfg80211_bss_update+0x164c/0x1658 [ 93.078277][ C1] sp : ffff80008ebe7150 [ 93.079053][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: 1fffe0001ec9e035 [ 93.080559][ C1] x26: dfff800000000000 x25: ffff0000f64f0190 x24: ffff800088b9a000 [ 93.082069][ C1] x23: ffff0000e8498890 x22: ffff0000f64f0190 x21: ffff80008ebe7260 [ 93.083555][ C1] x20: ffff0000f64f0000 x19: ffff0000e8498800 x18: 0000000000000000 [ 93.084961][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 93.086366][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 93.087742][ C1] x11: 0000000000000000 x10: 0000000000040000 x9 : 0000000000000fcf [ 93.089079][ C1] x8 : ffff800092202000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 93.090399][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086063f74 [ 93.091747][ C1] x2 : 0000000000000001 x1 : ffff0000c9cfbb00 x0 : 0000000000000001 [ 93.093139][ C1] Call trace: [ 93.093722][ C1] __cfg80211_bss_update+0x10b4/0x1658 (P) [ 93.094756][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 93.095868][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 93.096898][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 93.097950][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 93.098954][ C1] ieee80211_scan_rx+0x450/0x928 [ 93.099872][ C1] ieee80211_rx_list+0x229c/0x3000 [ 93.100793][ C1] ieee80211_rx_napi+0x18c/0x370 [ 93.101684][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 93.102752][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 93.103681][ C1] tasklet_action_common+0x1dc/0x278 [ 93.104613][ C1] tasklet_action+0x68/0x8c [ 93.105429][ C1] handle_softirqs+0x2ec/0xd98 [ 93.106296][ C1] __do_softirq+0x14/0x20 [ 93.107021][ C1] ____do_softirq+0x14/0x20 [ 93.107760][ C1] call_on_irq_stack+0x30/0x48 [ 93.108556][ C1] do_softirq_own_stack+0x20/0x2c [ 93.109420][ C1] do_softirq+0x90/0xf8 [ 93.110152][ C1] __local_bh_enable_ip+0x240/0x35c [ 93.111022][ C1] __ieee80211_tx_skb_tid_band+0x4bc/0x604 [ 93.111990][ C1] ieee80211_tx_skb_tid+0x268/0x44c [ 93.112853][ C1] ieee80211_mgmt_tx+0x190c/0x1ecc [ 93.113704][ C1] cfg80211_mlme_mgmt_tx+0x638/0x150c [ 93.114682][ C1] nl80211_tx_mgmt+0x81c/0xb04 [ 93.115465][ C1] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 93.116442][ C1] genl_rcv_msg+0x43c/0x620 [ 93.117121][ C1] netlink_rcv_skb+0x238/0x414 [ 93.117941][ C1] genl_rcv+0x38/0x50 [ 93.118668][ C1] netlink_unicast+0x600/0x7f8 [ 93.119422][ C1] netlink_sendmsg+0x648/0x948 [ 93.120280][ C1] __sock_sendmsg+0xc8/0x17c [ 93.121077][ C1] ____sys_sendmsg+0x3d0/0x6c8 [ 93.121910][ C1] ___sys_sendmsg+0x198/0x224 [ 93.122715][ C1] __sys_sendmsg+0x158/0x204 [ 93.123519][ C1] __arm64_sys_sendmsg+0x88/0x9c [ 93.124393][ C1] invoke_syscall+0x98/0x244 [ 93.125187][ C1] el0_svc_common+0xec/0x23c [ 93.125960][ C1] do_el0_svc+0x4c/0x5c [ 93.126731][ C1] el0_svc+0x64/0x260 [ 93.127480][ C1] el0t_64_sync_handler+0x44/0x104 [ 93.128332][ C1] el0t_64_sync+0x198/0x19c [ 93.129073][ C1] irq event stamp: 1423 [ 93.129781][ C1] hardirqs last enabled at (1422): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 93.131556][ C1] hardirqs last disabled at (1423): [] el1_brk64+0x20/0x54 [ 93.132995][ C1] softirqs last enabled at (1412): [] __ieee80211_tx_skb_tid_band+0x4b4/0x604 [ 93.134825][ C1] softirqs last disabled at (1413): [] __do_softirq+0x14/0x20 [ 93.136381][ C1] ---[ end trace 0000000000000000 ]--- [ 93.137889][ T5057] ------------[ cut here ]------------ [ 93.137897][ T5057] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x10b4/0x1658, CPU#0: kworker/u8:9/5057 [ 93.140663][ T5057] Modules linked in: [ 93.141392][ T5057] CPU: 0 UID: 0 PID: 5057 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 93.143124][ T5057] Tainted: [W]=WARN [ 93.143745][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.145498][ T5057] Workqueue: events_unbound cfg80211_wiphy_work [ 93.146603][ T5057] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 93.147854][ T5057] pc : __cfg80211_bss_update+0x10b4/0x1658 [ 93.148897][ T5057] lr : __cfg80211_bss_update+0x164c/0x1658 [ 93.149912][ T5057] sp : ffff80009ae06ed0 [ 93.150656][ T5057] x29: ffff80009ae06f20 x28: 1ffff00011173571 x27: 1fffe0001ec9e035 [ 93.152126][ T5057] x26: dfff800000000000 x25: ffff0000f64f0190 x24: ffff800088b9a000 [ 93.153402][ T5057] x23: ffff0000f237b090 x22: ffff0000f64f0190 x21: ffff80009ae06fe0 [ 93.154822][ T5057] x20: ffff0000f64f0000 x19: ffff0000f237b000 x18: 1fffe00035bac428 [ 93.156316][ T5057] x17: ffff80008606a314 x16: ffff800086065ad8 x15: 0000000000000000 [ 93.157691][ T5057] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 93.159089][ T5057] x11: 0000000000000000 x10: 0000000000100000 x9 : 0000000000001fb5 [ 93.160417][ T5057] x8 : ffff8000a7a55000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 93.161757][ T5057] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086063f74 [ 93.163139][ T5057] x2 : 0000000000000001 x1 : ffff0000f5240000 x0 : 0000000000000001 [ 93.164533][ T5057] Call trace: [ 93.165042][ T5057] __cfg80211_bss_update+0x10b4/0x1658 (P) [ 93.166021][ T5057] cfg80211_inform_single_bss_data+0x980/0x19dc [ 93.167029][ T5057] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 93.168014][ T5057] cfg80211_inform_bss_frame_data+0x348/0x838 [ 93.169164][ T5057] ieee80211_bss_info_update+0x5d0/0x944 [ 93.170115][ T5057] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 93.171079][ T5057] ieee80211_iface_work+0x600/0xd3c [ 93.171999][ T5057] cfg80211_wiphy_work+0x278/0x588 [ 93.172893][ T5057] process_scheduled_works+0x91c/0x1250 [ 93.173852][ T5057] worker_thread+0x798/0xbd0 [ 93.174624][ T5057] kthread+0x304/0x3d4 [ 93.175297][ T5057] ret_from_fork+0x10/0x20 [ 93.176020][ T5057] irq event stamp: 777791 [ 93.176760][ T5057] hardirqs last enabled at (777790): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 93.178528][ T5057] hardirqs last disabled at (777791): [] el1_brk64+0x20/0x54 [ 93.180029][ T5057] softirqs last enabled at (777740): [] addrconf_dad_completed+0x2ac/0x9e4 [ 93.181830][ T5057] softirqs last disabled at (777788): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 93.183834][ T5057] ---[ end trace 0000000000000000 ]--- [ 93.193120][T10478] 9pnet: p9_errstr2errno: server reported unknown error