last executing test programs: 5m26.271953608s ago: executing program 4 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3, 0x0, r0}) 5m26.026059413s ago: executing program 4 (id=349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x6, 0x3}, @sack_perm, @timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 5m24.676343006s ago: executing program 4 (id=356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002380)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00010019000100020000000000000020010000000000000000000000000000000000000000000000000000feffffff4d220005000100000a00000000000000", @ANYRES32=r2, @ANYBLOB="32af2a31f10c33fa890c21f0530f0e8b960c42833396134daa35c2b65d12a7de02aee33315d0b197fad033c6e9da526135b66e306c81b121e24744eee9f7f6a667d4b7255de984180f82b6de5821cce4d8f537e2d2bcdf9305ef93339ff9c468eb5c57f7c6230e5e0282fbd5a352c308effdf94f663e2dfea0bd62da7ca45402ac8e30799721f7606ac18c37b9a1a856c2dfec06c5", @ANYRES8=r0], 0xfc}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000feffffff64010100000000000000000000000000000000000000000000000000000000004e2300004e2200020a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200a9000000000000000000000000ff010000000000000000000000000001ff0200000000002b000000000000000001ffffffff0000000000000000000000006c01000000000000000002002c001300fe8000000000060000000000000000bbac1414aa00000000000000000000f6ff00000000020000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa990180c200000008004500002c0061f7ab58a6ef63d5000000cf78afcf00004e200018907804000000080000000000000001000000"], 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5d}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m22.662822324s ago: executing program 4 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 5m22.553937796s ago: executing program 4 (id=366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$unix(0x1, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, 0x0) r2 = socket(0x10, 0x2, 0x9) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 5m19.839295821s ago: executing program 4 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) 5m19.579463618s ago: executing program 32 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) 20.91885175s ago: executing program 3 (id=1841): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002380)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00010019000100020000000000000020010000000000000000000000000000000000000000000000000000feffffff4d220005000100000a00000000000000", @ANYRES32=r2, @ANYBLOB="32af2a31f10c33fa890c21f0530f0e8b960c42833396134daa35c2b65d12a7de02aee33315d0b197fad033c6e9da526135b66e306c81b121e24744eee9f7f6a667d4b7255de984180f82b6de5821cce4d8f537e2d2bcdf9305ef93339ff9c468eb5c57f7c6230e5e0282fbd5a352c308effdf94f663e2dfea0bd62da7ca45402ac8e30799721f7606ac18c37b9a1a856c2dfec06c5", @ANYRES8=r0], 0xfc}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000feffffff64010100000000000000000000000000000000000000000000000000000000004e2300004e2200020a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200a9000000000000000000000000ff010000000000000000000000000001ff0200000000002b000000000000000001ffffffff0000000000000000000000006c01000000000000000002002c001300fe8000000000060000000000000000bbac1414aa00000000000000000000f6ff00000000020000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa990180c200000008004500002c0061f7ab58a6ef63d5000000cf78afcf00004e200018907804000000080000000000000001000000"], 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5d}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.012377112s ago: executing program 3 (id=1846): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@mblk_io_submit}, {@nodioread_nolock}, {@oldalloc}, {@noblock_validity}, {@delalloc}, {@grpjquota}]}, 0x1, 0x5c5, &(0x7f0000000480)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c00", 0xd}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xffffff07, 0xffc1}, @generic={0x0, 0x8, "d588380003c1"}]}}}}}}, 0x4a) 19.535165803s ago: executing program 3 (id=1859): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) 19.23499248s ago: executing program 3 (id=1852): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.112252363s ago: executing program 0 (id=1854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001a00010029bdf447712a4efb80"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18.963176507s ago: executing program 3 (id=1855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) 18.707244363s ago: executing program 0 (id=1858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 17.844957394s ago: executing program 3 (id=1860): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@mblk_io_submit}, {@nodioread_nolock}, {@oldalloc}, {@noblock_validity}, {@delalloc}, {@grpjquota}]}, 0x1, 0x5c5, &(0x7f0000000480)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c00", 0xd}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xffffff07, 0xffc1}, @generic={0x0, 0x8, "d588380003c1"}]}}}}}}, 0x4a) 17.388133864s ago: executing program 0 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 17.107584271s ago: executing program 0 (id=1868): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.843001947s ago: executing program 0 (id=1870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) 15.535785449s ago: executing program 0 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b000100746172676574000040000000000000000039f2f10455afb9fdd672bad09dfb78c7698474e891a0c700000000000000000000000000000d1c0800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}}, 0x20040040) 15.171203227s ago: executing program 2 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 14.297447588s ago: executing program 2 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 13.997120555s ago: executing program 2 (id=1880): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.697086262s ago: executing program 2 (id=1881): openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 13.286710652s ago: executing program 2 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) 11.910834635s ago: executing program 2 (id=1887): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r0, 0x3, 0x6, @random="655a191e915c"}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r2, &(0x7f00000000c0)="008568da3602a8377d030097c1bfd8c13e938390559f5acc209a75a58707fc8fdb6bcca68c9744b7834494f1246371f88a05", 0x32, 0x4, &(0x7f0000000180)={0x11, 0x8100, r0, 0x1, 0x7f, 0x6, @remote}, 0x14) clock_gettime(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) 10.90796218s ago: executing program 1 (id=1891): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.671139935s ago: executing program 5 (id=1892): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bind$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) 10.601693257s ago: executing program 1 (id=1893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002380)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00010019000100020000000000000020010000000000000000000000000000000000000000000000000000feffffff4d220005000100000a00000000000000", @ANYRES32=r2, @ANYBLOB="32af2a31f10c33fa890c21f0530f0e8b960c42833396134daa35c2b65d12a7de02aee33315d0b197fad033c6e9da526135b66e306c81b121e24744eee9f7f6a667d4b7255de984180f82b6de5821cce4d8f537e2d2bcdf9305ef93339ff9c468eb5c57f7c6230e5e0282fbd5a352c308effdf94f663e2dfea0bd62da7ca45402ac8e30799721f7606ac18c37b9a1a856c2dfec06c5", @ANYRES8=r0], 0xfc}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000feffffff64010100000000000000000000000000000000000000000000000000000000004e2300004e2200020a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200a9000000000000000000000000ff010000000000000000000000000001ff0200000000002b000000000000000001ffffffff0000000000000000000000006c01000000000000000002002c001300fe8000000000060000000000000000bbac1414aa00000000000000000000f6ff00000000020000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa990180c200000008004500002c0061f7ab58a6ef63d5000000cf78afcf00004e200018907804000000080000000000000001000000"], 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5d}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.889031854s ago: executing program 1 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x200, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 9.676937438s ago: executing program 5 (id=1895): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 9.591221761s ago: executing program 1 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xc2) write$tun(r0, 0x0, 0x16) 1.868291525s ago: executing program 33 (id=1860): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@mblk_io_submit}, {@nodioread_nolock}, {@oldalloc}, {@noblock_validity}, {@delalloc}, {@grpjquota}]}, 0x1, 0x5c5, &(0x7f0000000480)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c00", 0xd}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xffffff07, 0xffc1}, @generic={0x0, 0x8, "d588380003c1"}]}}}}}}, 0x4a) 1.841610916s ago: executing program 5 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.840294696s ago: executing program 1 (id=1907): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@auto_da_alloc}, {@dioread_nolock}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x5a6, &(0x7f0000003200)="$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") chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000200)='./file1\x00') 1.450391995s ago: executing program 5 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) 1.391252947s ago: executing program 1 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 420.19451ms ago: executing program 34 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b000100746172676574000040000000000000000039f2f10455afb9fdd672bad09dfb78c7698474e891a0c700000000000000000000000000000d1c0800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}}, 0x20040040) 195.889616ms ago: executing program 5 (id=1902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x0) 0s ago: executing program 5 (id=1903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): more sockets [ 285.837864][ T7624] loop1: detected capacity change from 0 to 1024 [ 285.857428][ T7624] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.910466][ T7624] EXT4-fs: Ignoring removed oldalloc option [ 286.006304][ T7624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.020692][ T7624] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.262386][ T7633] device syzkaller0 entered promiscuous mode [ 287.701558][ T7627] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 290.034870][ T7586] Set syz1 is full, maxelem 65536 reached [ 290.453644][ T7662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.908'. [ 290.615662][ T7660] netlink: 'syz.3.908': attribute type 10 has an invalid length. [ 290.629429][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 290.862332][ T7670] program syz.5.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.973967][ T7674] FAULT_INJECTION: forcing a failure. [ 290.973967][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 291.007030][ T7674] CPU: 0 PID: 7674 Comm: syz.3.914 Not tainted syzkaller #0 [ 291.014371][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.024444][ T7674] Call Trace: [ 291.027735][ T7674] [ 291.030684][ T7674] dump_stack_lvl+0x188/0x24e [ 291.035396][ T7674] ? show_regs_print_info+0x12/0x12 [ 291.040628][ T7674] ? load_image+0x410/0x410 [ 291.045163][ T7674] ? __lock_acquire+0x7c40/0x7c40 [ 291.050226][ T7674] should_fail_ex+0x390/0x4c0 [ 291.054945][ T7674] should_failslab+0x5/0x20 [ 291.059468][ T7674] slab_pre_alloc_hook+0x59/0x300 [ 291.064522][ T7674] kmem_cache_alloc_lru+0x49/0x2e0 [ 291.069660][ T7674] ? sock_alloc_inode+0x24/0xc0 [ 291.074539][ T7674] sock_alloc_inode+0x24/0xc0 [ 291.079236][ T7674] ? sockfs_init_fs_context+0xa0/0xa0 [ 291.084626][ T7674] new_inode_pseudo+0x5f/0x1c0 [ 291.089417][ T7674] __sock_create+0x129/0x940 [ 291.094037][ T7674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.100050][ T7674] __sys_socket+0xc4/0x190 [ 291.104489][ T7674] __x64_sys_socket+0x76/0x80 [ 291.109172][ T7674] do_syscall_64+0x4c/0xa0 [ 291.113595][ T7674] ? clear_bhb_loop+0x60/0xb0 [ 291.118275][ T7674] ? clear_bhb_loop+0x60/0xb0 [ 291.122958][ T7674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.128851][ T7674] RIP: 0033:0x7f706479e159 [ 291.133263][ T7674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.152871][ T7674] RSP: 002b:00007f70629f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 291.161291][ T7674] RAX: ffffffffffffffda RBX: 00007f7064a25fa0 RCX: 00007f706479e159 [ 291.169263][ T7674] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 291.177232][ T7674] RBP: 00007f7064835024 R08: 0000000000000000 R09: 0000000000000000 [ 291.185201][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.193164][ T7674] R13: 00007f7064a26038 R14: 00007f7064a25fa0 R15: 00007fffb41715c8 [ 291.201141][ T7674] [ 291.206880][ T7679] Illegal XDP return value 65535 on prog (id 9) dev syz_tun, expect packet loss! [ 291.252787][ T7683] program syz.0.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.253620][ T7674] socket: no more sockets [ 291.529419][ T7693] loop3: detected capacity change from 0 to 1024 [ 291.565315][ T7693] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.589300][ T7693] EXT4-fs: Ignoring removed oldalloc option [ 292.410170][ T7693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.487096][ T7693] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.755935][ T7708] device syzkaller0 entered promiscuous mode [ 293.185112][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 293.605639][ T7722] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 293.656785][ T7722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.923'. [ 293.926883][ T7736] FAULT_INJECTION: forcing a failure. [ 293.926883][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 294.004119][ T7738] program syz.0.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.007581][ T7736] CPU: 0 PID: 7736 Comm: syz.1.930 Not tainted syzkaller #0 [ 294.020554][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.030626][ T7736] Call Trace: [ 294.033916][ T7736] [ 294.036860][ T7736] dump_stack_lvl+0x188/0x24e [ 294.041576][ T7736] ? show_regs_print_info+0x12/0x12 [ 294.046810][ T7736] ? load_image+0x410/0x410 [ 294.051349][ T7736] ? __lock_acquire+0x7c40/0x7c40 [ 294.056414][ T7736] should_fail_ex+0x390/0x4c0 [ 294.061123][ T7736] should_failslab+0x5/0x20 [ 294.065642][ T7736] slab_pre_alloc_hook+0x59/0x300 [ 294.070696][ T7736] kmem_cache_alloc_lru+0x49/0x2e0 [ 294.075829][ T7736] ? sock_alloc_inode+0x24/0xc0 [ 294.080708][ T7736] sock_alloc_inode+0x24/0xc0 [ 294.085403][ T7736] ? sockfs_init_fs_context+0xa0/0xa0 [ 294.090794][ T7736] new_inode_pseudo+0x5f/0x1c0 [ 294.095570][ T7736] __sock_create+0x129/0x940 [ 294.100164][ T7736] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 294.106154][ T7736] __sys_socket+0xc4/0x190 [ 294.110581][ T7736] __x64_sys_socket+0x76/0x80 [ 294.115260][ T7736] do_syscall_64+0x4c/0xa0 [ 294.119680][ T7736] ? clear_bhb_loop+0x60/0xb0 [ 294.124362][ T7736] ? clear_bhb_loop+0x60/0xb0 [ 294.129046][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.134944][ T7736] RIP: 0033:0x7f7f9a19e159 [ 294.139356][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.158958][ T7736] RSP: 002b:00007f7f9affc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 294.167385][ T7736] RAX: ffffffffffffffda RBX: 00007f7f9a425fa0 RCX: 00007f7f9a19e159 [ 294.175351][ T7736] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 294.183321][ T7736] RBP: 00007f7f9a235024 R08: 0000000000000000 R09: 0000000000000000 [ 294.191285][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.199252][ T7736] R13: 00007f7f9a426038 R14: 00007f7f9a425fa0 R15: 00007fff190eb1d8 [ 294.207227][ T7736] [ 294.227283][ T7741] device syzkaller0 entered promiscuous mode [ 294.245001][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 294.286059][ T7743] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 294.331033][ T7743] netlink: 'syz.2.932': attribute type 2 has an invalid length. [ 294.390579][ T7736] socket: no more sockets [ 294.796072][ T7759] loop2: detected capacity change from 0 to 1024 [ 295.016197][ T7759] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.302550][ T7759] EXT4-fs: Ignoring removed oldalloc option [ 295.592592][ T7759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 295.674282][ T7759] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.142530][ T7778] program syz.1.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.224602][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 296.358340][ T7783] netlink: 'syz.5.945': attribute type 10 has an invalid length. [ 296.408269][ T7783] netlink: 44 bytes leftover after parsing attributes in process `syz.5.945'. [ 296.686202][ T7788] device syzkaller0 entered promiscuous mode [ 296.733211][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 297.044777][ T7801] FAULT_INJECTION: forcing a failure. [ 297.044777][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 297.072099][ T7801] CPU: 1 PID: 7801 Comm: syz.1.953 Not tainted syzkaller #0 [ 297.079432][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.089505][ T7801] Call Trace: [ 297.092792][ T7801] [ 297.095729][ T7801] dump_stack_lvl+0x188/0x24e [ 297.100441][ T7801] ? show_regs_print_info+0x12/0x12 [ 297.105672][ T7801] ? load_image+0x410/0x410 [ 297.110207][ T7801] ? __lock_acquire+0x7c40/0x7c40 [ 297.115275][ T7801] should_fail_ex+0x390/0x4c0 [ 297.119989][ T7801] should_failslab+0x5/0x20 [ 297.124511][ T7801] slab_pre_alloc_hook+0x59/0x300 [ 297.129576][ T7801] kmem_cache_alloc_lru+0x49/0x2e0 [ 297.134713][ T7801] ? sock_alloc_inode+0x24/0xc0 [ 297.139592][ T7801] sock_alloc_inode+0x24/0xc0 [ 297.144291][ T7801] ? sockfs_init_fs_context+0xa0/0xa0 [ 297.149688][ T7801] new_inode_pseudo+0x5f/0x1c0 [ 297.154477][ T7801] __sock_create+0x129/0x940 [ 297.159097][ T7801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 297.165113][ T7801] __sys_socket+0xc4/0x190 [ 297.169564][ T7801] __x64_sys_socket+0x76/0x80 [ 297.174277][ T7801] do_syscall_64+0x4c/0xa0 [ 297.178724][ T7801] ? clear_bhb_loop+0x60/0xb0 [ 297.183432][ T7801] ? clear_bhb_loop+0x60/0xb0 [ 297.188140][ T7801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.194067][ T7801] RIP: 0033:0x7f7f9a19e159 [ 297.198502][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.218129][ T7801] RSP: 002b:00007f7f9affc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 297.226582][ T7801] RAX: ffffffffffffffda RBX: 00007f7f9a425fa0 RCX: 00007f7f9a19e159 [ 297.234560][ T7801] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 297.242525][ T7801] RBP: 00007f7f9a235024 R08: 0000000000000000 R09: 0000000000000000 [ 297.250496][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.258465][ T7801] R13: 00007f7f9a426038 R14: 00007f7f9a425fa0 R15: 00007fff190eb1d8 [ 297.266443][ T7801] [ 297.269553][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.280026][ T7808] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 297.280118][ T7801] socket: no more sockets [ 297.304799][ T7808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.961'. [ 297.650045][ T7825] program syz.1.956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.008412][ T7833] loop5: detected capacity change from 0 to 1024 [ 298.096399][ T7833] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.194713][ T7833] EXT4-fs: Ignoring removed oldalloc option [ 298.437591][ T7833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 298.547824][ T7833] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.542832][ T7854] FAULT_INJECTION: forcing a failure. [ 299.542832][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 299.585109][ T7854] CPU: 0 PID: 7854 Comm: syz.0.967 Not tainted syzkaller #0 [ 299.592448][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.602532][ T7854] Call Trace: [ 299.605821][ T7854] [ 299.608762][ T7854] dump_stack_lvl+0x188/0x24e [ 299.613468][ T7854] ? show_regs_print_info+0x12/0x12 [ 299.618695][ T7854] ? load_image+0x410/0x410 [ 299.623221][ T7854] ? __lock_acquire+0x7c40/0x7c40 [ 299.628271][ T7854] should_fail_ex+0x390/0x4c0 [ 299.632976][ T7854] should_failslab+0x5/0x20 [ 299.637490][ T7854] slab_pre_alloc_hook+0x59/0x300 [ 299.642537][ T7854] kmem_cache_alloc_lru+0x49/0x2e0 [ 299.647663][ T7854] ? sock_alloc_inode+0x24/0xc0 [ 299.652535][ T7854] sock_alloc_inode+0x24/0xc0 [ 299.657223][ T7854] ? sockfs_init_fs_context+0xa0/0xa0 [ 299.662606][ T7854] new_inode_pseudo+0x5f/0x1c0 [ 299.667391][ T7854] __sock_create+0x129/0x940 [ 299.671998][ T7854] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 299.678007][ T7854] __sys_socket+0xc4/0x190 [ 299.682448][ T7854] __x64_sys_socket+0x76/0x80 [ 299.687156][ T7854] do_syscall_64+0x4c/0xa0 [ 299.691598][ T7854] ? clear_bhb_loop+0x60/0xb0 [ 299.696296][ T7854] ? clear_bhb_loop+0x60/0xb0 [ 299.700997][ T7854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.706909][ T7854] RIP: 0033:0x7f6ad739e159 [ 299.711334][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.730961][ T7854] RSP: 002b:00007f6ad81c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 299.739389][ T7854] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e159 [ 299.747373][ T7854] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 299.755353][ T7854] RBP: 00007f6ad7435024 R08: 0000000000000000 R09: 0000000000000000 [ 299.763334][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.771316][ T7854] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007ffcd3c45928 [ 299.779313][ T7854] [ 300.020985][ T7854] socket: no more sockets [ 300.122450][ T7858] program syz.0.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.153689][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 300.350046][ T7867] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 300.380581][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.971'. [ 300.786023][ T7882] device syzkaller0 entered promiscuous mode [ 300.906145][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 301.137578][ T7891] FAULT_INJECTION: forcing a failure. [ 301.137578][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 301.180579][ T7891] CPU: 1 PID: 7891 Comm: syz.2.979 Not tainted syzkaller #0 [ 301.187919][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.198000][ T7891] Call Trace: [ 301.201296][ T7891] [ 301.204240][ T7891] dump_stack_lvl+0x188/0x24e [ 301.208953][ T7891] ? show_regs_print_info+0x12/0x12 [ 301.214200][ T7891] ? load_image+0x410/0x410 [ 301.217656][ T7896] loop0: detected capacity change from 0 to 1024 [ 301.218712][ T7891] ? __lock_acquire+0x7c40/0x7c40 [ 301.230081][ T7891] should_fail_ex+0x390/0x4c0 [ 301.234804][ T7891] should_failslab+0x5/0x20 [ 301.234827][ T7891] slab_pre_alloc_hook+0x59/0x300 [ 301.234855][ T7891] kmem_cache_alloc_lru+0x49/0x2e0 [ 301.234877][ T7891] ? sock_alloc_inode+0x24/0xc0 [ 301.234905][ T7891] sock_alloc_inode+0x24/0xc0 [ 301.234922][ T7891] ? sockfs_init_fs_context+0xa0/0xa0 [ 301.234942][ T7891] new_inode_pseudo+0x5f/0x1c0 [ 301.234966][ T7891] __sock_create+0x129/0x940 [ 301.235001][ T7891] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 301.235035][ T7891] __sys_socket+0xc4/0x190 [ 301.235064][ T7891] __x64_sys_socket+0x76/0x80 [ 301.235093][ T7891] do_syscall_64+0x4c/0xa0 [ 301.235120][ T7891] ? clear_bhb_loop+0x60/0xb0 [ 301.235147][ T7891] ? clear_bhb_loop+0x60/0xb0 [ 301.235175][ T7891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.235201][ T7891] RIP: 0033:0x7faaa119e159 [ 301.235219][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.235237][ T7891] RSP: 002b:00007faaa2051028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 301.235261][ T7891] RAX: ffffffffffffffda RBX: 00007faaa1425fa0 RCX: 00007faaa119e159 [ 301.235275][ T7891] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 301.235286][ T7891] RBP: 00007faaa1235024 R08: 0000000000000000 R09: 0000000000000000 [ 301.235299][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.235312][ T7891] R13: 00007faaa1426038 R14: 00007faaa1425fa0 R15: 00007ffcb1ff9ed8 [ 301.235339][ T7891] [ 301.235361][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.239101][ T7896] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.239124][ T7896] EXT4-fs: Ignoring removed oldalloc option [ 301.246547][ T7891] socket: no more sockets [ 301.270108][ T7896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 301.367094][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.457838][ T7896] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.489272][ T7907] program syz.2.983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.867592][ T7920] loop1: detected capacity change from 0 to 1024 [ 301.917037][ T7920] EXT4-fs: Ignoring removed bh option [ 301.931091][ T7920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.959507][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 302.019831][ T7920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.044235][ T7924] device syzkaller0 entered promiscuous mode [ 302.106415][ T7920] EXT4-fs error (device loop1): __ext4_remount:6650: comm syz.1.988: Abort forced by user [ 302.173988][ T7920] EXT4-fs (loop1): Remounting filesystem read-only [ 302.182513][ T7920] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 302.224554][ T7936] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 302.246023][ T7936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.989'. [ 302.264685][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 302.420614][ T5389] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 302.483814][ T7948] program syz.2.994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.629172][ T5389] usb 4-1: Using ep0 maxpacket: 16 [ 303.005580][ T7961] loop5: detected capacity change from 0 to 1024 [ 303.060075][ T7961] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.100549][ T7961] EXT4-fs: Ignoring removed oldalloc option [ 303.188480][ T7961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 303.220948][ T7961] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.416361][ T7974] loop2: detected capacity change from 0 to 1024 [ 303.428717][ T7974] EXT4-fs: Ignoring removed bh option [ 303.434983][ T7974] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.727620][ T7974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 304.200625][ T7974] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.1003: Abort forced by user [ 304.295906][ T7974] EXT4-fs (loop2): Remounting filesystem read-only [ 304.312272][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 304.332365][ T7974] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 304.552162][ T7979] device syzkaller0 entered promiscuous mode [ 304.616522][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 304.889935][ T7986] loop5: detected capacity change from 0 to 256 [ 304.932625][ T7987] program syz.2.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.038835][ T7986] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 305.208190][ T7986] FAT-fs (loop5): Filesystem has been set read-only [ 305.260575][ T7986] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 305.270760][ T7986] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 305.281376][ T27] audit: type=1800 audit(1788661225.665:9): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1007" name="file1" dev="loop5" ino=1048598 res=0 errno=0 [ 305.302607][ T5389] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.310332][ T5389] usb 4-1: no configurations [ 305.350954][ T5389] usb 4-1: can't read configurations, error -22 [ 305.435432][ T7997] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 305.456326][ T7997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1008'. [ 305.977611][ T8017] loop5: detected capacity change from 0 to 1024 [ 306.055965][ T8017] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.086478][ T8017] EXT4-fs: Ignoring removed oldalloc option [ 306.196635][ T8023] device syzkaller0 entered promiscuous mode [ 306.201112][ T8017] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 306.212488][ T8029] program syz.3.1019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.231848][ T8017] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.310464][ T8030] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 307.179513][ T8043] loop3: detected capacity change from 0 to 1024 [ 307.289411][ T8043] EXT4-fs: Ignoring removed bh option [ 307.367602][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 307.400218][ T8043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.759632][ T8043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 307.942257][ T8043] EXT4-fs error (device loop3): __ext4_remount:6650: comm syz.3.1021: Abort forced by user [ 308.065404][ T8043] EXT4-fs (loop3): Remounting filesystem read-only [ 308.125017][ T8043] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 308.336583][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 308.430185][ T8072] netlink: 'syz.2.1027': attribute type 10 has an invalid length. [ 308.459249][ T8072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1027'. [ 308.882908][ T8081] device bridge1 entered promiscuous mode [ 308.941893][ T5389] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 309.140677][ T5389] usb 2-1: Using ep0 maxpacket: 16 [ 309.180153][ T8086] program syz.5.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.315766][ T8089] loop2: detected capacity change from 0 to 1024 [ 309.338286][ T8092] device syzkaller0 entered promiscuous mode [ 309.352515][ T8090] device syzkaller0 entered promiscuous mode [ 309.360242][ T8090] 0: reclassify loop, rule prio 0, protocol 700 [ 309.391956][ T8089] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.450754][ T8089] EXT4-fs: Ignoring removed oldalloc option [ 309.616100][ T8089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 309.664024][ T8089] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.559443][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 310.801383][ T8105] loop0: detected capacity change from 0 to 1024 [ 310.877146][ T8105] EXT4-fs: Ignoring removed bh option [ 310.917295][ T8105] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.845487][ T8105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 311.953134][ T8105] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.1040: Abort forced by user [ 312.071759][ T8105] EXT4-fs (loop0): Remounting filesystem read-only [ 312.078690][ T8105] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 312.119210][ T5389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.145105][ T5389] usb 2-1: no configurations [ 312.157480][ T5389] usb 2-1: can't read configurations, error -22 [ 312.209174][ T8125] netlink: 'syz.2.1045': attribute type 10 has an invalid length. [ 312.219883][ T8126] program syz.1.1047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.230955][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 312.248443][ T8125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1045'. [ 312.406407][ T8131] device syzkaller0 entered promiscuous mode [ 312.538939][ T8138] loop1: detected capacity change from 0 to 1024 [ 312.585885][ T8138] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.629108][ T8138] EXT4-fs: Ignoring removed oldalloc option [ 312.705013][ T8138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.713709][ T8138] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.951630][ T8114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 314.057979][ T8160] device bridge1 entered promiscuous mode [ 314.093075][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 314.720582][ T4921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 314.910684][ T4921] usb 6-1: Using ep0 maxpacket: 16 [ 315.398028][ T4921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.407584][ T4921] usb 6-1: no configurations [ 315.414392][ T4921] usb 6-1: can't read configurations, error -22 [ 316.081763][ T8172] loop5: detected capacity change from 0 to 1024 [ 316.089046][ T8172] EXT4-fs: Ignoring removed bh option [ 316.095914][ T8172] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.141306][ T8172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.159785][ T8182] device syzkaller0 entered promiscuous mode [ 316.197365][ T8172] EXT4-fs error (device loop5): __ext4_remount:6650: comm syz.5.1059: Abort forced by user [ 316.212672][ T8172] EXT4-fs (loop5): Remounting filesystem read-only [ 316.219508][ T8172] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 316.311676][ T8183] program syz.2.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.343592][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 316.906672][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.913393][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.097783][ T8188] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 317.137961][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1064'. [ 317.547590][ T8201] loop2: detected capacity change from 0 to 1024 [ 317.565225][ T8201] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.640568][ T8201] EXT4-fs: Ignoring removed oldalloc option [ 317.771955][ T8201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.828656][ T8201] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.336963][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 319.243895][ T8223] device bridge1 entered promiscuous mode [ 319.651923][ T8231] program syz.2.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.736220][ T8235] device syzkaller0 entered promiscuous mode [ 320.207177][ T8241] loop5: detected capacity change from 0 to 1024 [ 320.248309][ T8246] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 320.270208][ T8241] EXT4-fs: Ignoring removed bh option [ 320.292172][ T8246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1080'. [ 320.336423][ T8241] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.441823][ T8241] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 320.540583][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 320.624632][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 320.740603][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 320.805727][ T8260] loop3: detected capacity change from 0 to 1024 [ 320.812383][ T8262] loop5: detected capacity change from 0 to 512 [ 320.861194][ T8260] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.867666][ T8260] EXT4-fs: Ignoring removed oldalloc option [ 320.894767][ T8262] EXT4-fs (loop5): DAX unsupported by block device. [ 321.016515][ T8260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.068411][ T8260] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.271709][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1097'. [ 321.599850][ T8284] device bridge1 entered promiscuous mode [ 321.900159][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 322.070901][ T8292] program syz.2.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.518220][ T8307] loop1: detected capacity change from 0 to 1024 [ 322.536318][ T8307] EXT4-fs: Ignoring removed bh option [ 322.620121][ T8307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.531460][ T8307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 323.570505][ T127] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.578225][ T127] usb 1-1: no configurations [ 323.804724][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 323.848148][ T8320] loop0: detected capacity change from 0 to 1024 [ 323.877730][ T8320] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.919908][ T8320] EXT4-fs: Ignoring removed oldalloc option [ 323.990955][ T8320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 324.052168][ T8320] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.401056][ T127] usb 1-1: can't read configurations, error -22 [ 324.571605][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 324.603116][ T8339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1101'. [ 325.515176][ T8353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1113'. [ 325.751722][ T8354] device bridge1 entered promiscuous mode [ 326.228902][ T8370] loop3: detected capacity change from 0 to 1024 [ 326.304382][ T8370] EXT4-fs: Ignoring removed bh option [ 326.324431][ T8370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 326.418239][ T8375] loop0: detected capacity change from 0 to 1024 [ 326.456616][ T8370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 326.461432][ T8375] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.496496][ T8375] EXT4-fs: Ignoring removed oldalloc option [ 326.937912][ T8375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 327.210086][ T8375] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.568480][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 327.921593][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 328.519611][ T8417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1126'. [ 329.448918][ T8431] loop2: detected capacity change from 0 to 1024 [ 329.529471][ T8431] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.574267][ T8431] EXT4-fs: Ignoring removed oldalloc option [ 329.672649][ T8431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.701670][ T8431] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.955473][ T8448] device syzkaller0 entered promiscuous mode [ 330.072284][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 331.327877][ T8468] program syz.3.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.557369][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1146'. [ 331.768264][ T8482] loop3: detected capacity change from 0 to 1024 [ 331.783317][ T8474] device syzkaller0 entered promiscuous mode [ 331.878917][ T8482] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.954427][ T8482] EXT4-fs: Ignoring removed oldalloc option [ 332.103838][ T8482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.127525][ T8482] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.450246][ T8521] program syz.5.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.117275][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1163'. [ 336.021600][ T8488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 336.727231][ T8545] loop5: detected capacity change from 0 to 1024 [ 336.741466][ T8545] EXT4-fs: Ignoring removed bh option [ 336.771789][ T8545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 336.845772][ T8545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 336.893929][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 337.541150][ T8551] device bridge2 entered promiscuous mode [ 337.826679][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 337.908064][ T8556] program syz.0.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.190787][ T8574] netlink: 'syz.2.1175': attribute type 10 has an invalid length. [ 338.222455][ T8573] loop3: detected capacity change from 0 to 1024 [ 338.229674][ T8573] EXT4-fs: Ignoring removed bh option [ 338.261865][ T8574] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1175'. [ 338.277823][ T8573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.384751][ T8573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 338.449265][ T8577] device syzkaller0 entered promiscuous mode [ 338.479346][ T8585] loop0: detected capacity change from 0 to 1024 [ 338.480834][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 338.487123][ T8585] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.498462][ T8585] EXT4-fs: Ignoring removed oldalloc option [ 338.911489][ T8585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 339.114156][ T8585] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.528567][ T8594] device syzkaller0 entered promiscuous mode [ 339.751073][ T8601] loop5: detected capacity change from 0 to 1024 [ 339.972585][ T8601] EXT4-fs: Ignoring removed bh option [ 340.101394][ T8601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 340.189596][ T8601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 340.377806][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 341.842842][ T8603] device bridge2 entered promiscuous mode [ 341.892162][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 343.298124][ T8634] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 343.321236][ T8632] device syzkaller0 entered promiscuous mode [ 343.329022][ T8634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1193'. [ 343.846968][ T8637] device bridge3 entered promiscuous mode [ 344.525399][ T8652] loop0: detected capacity change from 0 to 1024 [ 344.527030][ T8646] device syzkaller0 entered promiscuous mode [ 344.563463][ T8652] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.589810][ T8652] EXT4-fs: Ignoring removed oldalloc option [ 344.662426][ T8652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 344.691136][ T8652] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.334690][ T8661] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 348.035349][ T8665] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 349.144895][ T8686] device bridge3 entered promiscuous mode [ 349.386958][ T8707] netlink: 'syz.1.1213': attribute type 10 has an invalid length. [ 349.420173][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 349.428801][ T8709] FAULT_INJECTION: forcing a failure. [ 349.428801][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.435129][ T8707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1213'. [ 349.525936][ T8709] CPU: 1 PID: 8709 Comm: syz.3.1214 Not tainted syzkaller #0 [ 349.533364][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.543445][ T8709] Call Trace: [ 349.546739][ T8709] [ 349.549685][ T8709] dump_stack_lvl+0x188/0x24e [ 349.554405][ T8709] ? show_regs_print_info+0x12/0x12 [ 349.559635][ T8709] ? load_image+0x410/0x410 [ 349.564165][ T8709] ? __lock_acquire+0x7c40/0x7c40 [ 349.569230][ T8709] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 349.575239][ T8709] ? __lock_acquire+0x7c40/0x7c40 [ 349.580296][ T8709] should_fail_ex+0x390/0x4c0 [ 349.585005][ T8709] _copy_to_user+0x2c/0x130 [ 349.589538][ T8709] do_fcntl+0xe3c/0x1280 [ 349.593807][ T8709] ? __ia32_sys_get_robust_list+0x100/0x100 [ 349.599728][ T8709] ? do_fcntl+0x1d4/0x1280 [ 349.604175][ T8709] ? kill_fasync+0x4b0/0x4b0 [ 349.608801][ T8709] ? __fget_files+0x28/0x460 [ 349.613429][ T8709] ? __fget_files+0x3fc/0x460 [ 349.618145][ T8709] ? tomoyo_file_fcntl+0x74/0x210 [ 349.623215][ T8709] ? bpf_lsm_file_fcntl+0x5/0x10 [ 349.628181][ T8709] ? security_file_fcntl+0x7c/0xa0 [ 349.633321][ T8709] __se_sys_fcntl+0xc9/0x190 [ 349.637924][ T8709] do_syscall_64+0x4c/0xa0 [ 349.642346][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 349.647027][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 349.651710][ T8709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.657603][ T8709] RIP: 0033:0x7f706479e159 [ 349.662011][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.681614][ T8709] RSP: 002b:00007f70629f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 349.690023][ T8709] RAX: ffffffffffffffda RBX: 00007f7064a25fa0 RCX: 00007f706479e159 [ 349.697989][ T8709] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000003 [ 349.705955][ T8709] RBP: 00007f7064835024 R08: 0000000000000000 R09: 0000000000000000 [ 349.713919][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.721884][ T8709] R13: 00007f7064a26038 R14: 00007f7064a25fa0 R15: 00007fffb41715c8 [ 349.729874][ T8709] [ 350.084959][ T8724] device syzkaller0 entered promiscuous mode [ 350.873194][ T8729] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 352.587363][ T8748] loop1: detected capacity change from 0 to 1024 [ 352.658601][ T8748] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.741168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.956462][ T8748] EXT4-fs: Ignoring removed oldalloc option [ 353.161095][ T8748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 353.179532][ T8748] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.219819][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 353.233207][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 354.709134][ T8734] device bridge4 entered promiscuous mode [ 354.999394][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 355.155181][ T8786] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 355.173973][ T8786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1234'. [ 355.242642][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 355.393027][ T8800] FAULT_INJECTION: forcing a failure. [ 355.393027][ T8800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.418472][ T8800] CPU: 0 PID: 8800 Comm: syz.5.1239 Not tainted syzkaller #0 [ 355.425907][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.435984][ T8800] Call Trace: [ 355.439283][ T8800] [ 355.442228][ T8800] dump_stack_lvl+0x188/0x24e [ 355.446944][ T8800] ? show_regs_print_info+0x12/0x12 [ 355.452175][ T8800] ? load_image+0x410/0x410 [ 355.456710][ T8800] ? __lock_acquire+0x7c40/0x7c40 [ 355.461768][ T8800] ? __lock_acquire+0x138a/0x7c40 [ 355.466829][ T8800] ? verify_lock_unused+0x140/0x140 [ 355.472054][ T8800] should_fail_ex+0x390/0x4c0 [ 355.476743][ T8800] prepare_alloc_pages+0x1e1/0x5b0 [ 355.481896][ T8800] __alloc_pages+0x130/0x4f0 [ 355.486516][ T8800] ? lock_chain_count+0x20/0x20 [ 355.491395][ T8800] ? zone_statistics+0x170/0x170 [ 355.496375][ T8800] ? count_memcg_event_mm+0x8a/0x3c0 [ 355.501685][ T8800] ? count_memcg_event_mm+0x36b/0x3c0 [ 355.507084][ T8800] ? __lock_acquire+0x7c40/0x7c40 [ 355.512133][ T8800] ? count_memcg_event_mm+0x8a/0x3c0 [ 355.517439][ T8800] ? put_page+0x270/0x270 [ 355.519234][ T8804] device bridge2 entered promiscuous mode [ 355.521771][ T8800] __folio_alloc+0xe/0x30 [ 355.521896][ T8800] vma_alloc_folio+0x499/0x900 [ 355.521933][ T8800] handle_mm_fault+0x1fe3/0x3d40 [ 355.541675][ T8800] ? mt_find+0x157/0x830 [ 355.545963][ T8800] ? numa_migrate_prep+0x250/0x250 [ 355.551115][ T8800] ? lock_chain_count+0x20/0x20 [ 355.555996][ T8800] ? lock_mm_and_find_vma+0xae/0x2f0 [ 355.561307][ T8800] do_user_addr_fault+0x58e/0xb20 [ 355.566372][ T8800] exc_page_fault+0x60/0x100 [ 355.570990][ T8800] asm_exc_page_fault+0x22/0x30 [ 355.575872][ T8800] RIP: 0010:copy_user_short_string+0xd/0x40 [ 355.581781][ T8800] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 355.601391][ T8800] RSP: 0018:ffffc9000675fbc0 EFLAGS: 00050203 [ 355.607481][ T8800] RAX: ffffffff84160301 RBX: 000000000000000c RCX: 0000000000000001 [ 355.615471][ T8800] RDX: 0000000000000004 RSI: ffffc9000675fcd0 RDI: 0000200000caaffb [ 355.623462][ T8800] RBP: 0000000000000000 R08: ffffffff00000000 R09: 0000000000000004 [ 355.631451][ T8800] R10: dffffc0000000000 R11: fffff52000cebf9b R12: 00007fffffffeff4 [ 355.639444][ T8800] R13: 1ffff92000cebf8c R14: 0000200000caaffb R15: ffffc9000675fcd0 [ 355.647443][ T8800] ? _copy_from_user+0x161/0x170 [ 355.652411][ T8800] _copy_to_user+0xea/0x130 [ 355.656935][ T8800] copy_to_sockptr+0x6c/0x90 [ 355.661555][ T8800] sk_getsockopt+0x19c6/0x1ea0 [ 355.666352][ T8800] ? sock_setsockopt+0x60/0x60 [ 355.671141][ T8800] ? __might_sleep+0xd0/0xd0 [ 355.675758][ T8800] ? __fget_files+0x28/0x460 [ 355.680387][ T8800] ? aa_sk_perm+0x81f/0x950 [ 355.684923][ T8800] ? aa_af_perm+0x340/0x340 [ 355.689455][ T8800] sock_getsockopt+0x7f/0x90 [ 355.694072][ T8800] __sys_getsockopt+0x144/0x230 [ 355.698963][ T8800] __x64_sys_getsockopt+0xb1/0xc0 [ 355.704031][ T8800] do_syscall_64+0x4c/0xa0 [ 355.708467][ T8800] ? clear_bhb_loop+0x60/0xb0 [ 355.713173][ T8800] ? clear_bhb_loop+0x60/0xb0 [ 355.717882][ T8800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.723802][ T8800] RIP: 0033:0x7fa1e399e159 [ 355.728232][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.747854][ T8800] RSP: 002b:00007fa1e48a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 355.756295][ T8800] RAX: ffffffffffffffda RBX: 00007fa1e3c25fa0 RCX: 00007fa1e399e159 [ 355.764291][ T8800] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000005 [ 355.772282][ T8800] RBP: 00007fa1e3a35024 R08: 0000200000cab000 R09: 0000000000000000 [ 355.780260][ T8800] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000000 [ 355.788220][ T8800] R13: 00007fa1e3c26038 R14: 00007fa1e3c25fa0 R15: 00007ffe79d03818 [ 355.796187][ T8800] [ 356.865428][ T8816] device syzkaller0 entered promiscuous mode [ 356.876669][ T8821] loop1: detected capacity change from 0 to 1024 [ 356.932697][ T8821] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.989852][ T8821] EXT4-fs: Ignoring removed oldalloc option [ 357.107875][ T8821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 357.147227][ T8821] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.645960][ T8839] loop2: detected capacity change from 0 to 128 [ 357.701423][ T8839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 357.729850][ T8839] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.006085][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 358.355881][ T8851] FAULT_INJECTION: forcing a failure. [ 358.355881][ T8851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.369347][ T8851] CPU: 1 PID: 8851 Comm: syz.0.1253 Not tainted syzkaller #0 [ 358.376746][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.386819][ T8851] Call Trace: [ 358.390108][ T8851] [ 358.393051][ T8851] dump_stack_lvl+0x188/0x24e [ 358.397763][ T8851] ? show_regs_print_info+0x12/0x12 [ 358.402991][ T8851] ? load_image+0x410/0x410 [ 358.407521][ T8851] ? __lock_acquire+0x7c40/0x7c40 [ 358.412569][ T8851] ? __lock_acquire+0x138a/0x7c40 [ 358.417617][ T8851] ? verify_lock_unused+0x140/0x140 [ 358.422841][ T8851] should_fail_ex+0x390/0x4c0 [ 358.427529][ T8851] prepare_alloc_pages+0x1e1/0x5b0 [ 358.432654][ T8851] __alloc_pages+0x130/0x4f0 [ 358.437256][ T8851] ? lock_chain_count+0x20/0x20 [ 358.442116][ T8851] ? zone_statistics+0x170/0x170 [ 358.447062][ T8851] ? count_memcg_event_mm+0x8a/0x3c0 [ 358.452343][ T8851] ? count_memcg_event_mm+0x36b/0x3c0 [ 358.457710][ T8851] ? __lock_acquire+0x7c40/0x7c40 [ 358.462734][ T8851] ? count_memcg_event_mm+0x8a/0x3c0 [ 358.468051][ T8851] ? put_page+0x270/0x270 [ 358.472389][ T8851] __folio_alloc+0xe/0x30 [ 358.476723][ T8851] vma_alloc_folio+0x499/0x900 [ 358.481494][ T8851] handle_mm_fault+0x1fe3/0x3d40 [ 358.486453][ T8851] ? mt_find+0x157/0x830 [ 358.490713][ T8851] ? numa_migrate_prep+0x250/0x250 [ 358.495828][ T8851] ? lock_chain_count+0x20/0x20 [ 358.500683][ T8851] ? lock_mm_and_find_vma+0xae/0x2f0 [ 358.505965][ T8851] do_user_addr_fault+0x58e/0xb20 [ 358.510999][ T8851] exc_page_fault+0x60/0x100 [ 358.515592][ T8851] asm_exc_page_fault+0x22/0x30 [ 358.520446][ T8851] RIP: 0010:copy_user_short_string+0xd/0x40 [ 358.526342][ T8851] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 358.545942][ T8851] RSP: 0018:ffffc9000ca07bc0 EFLAGS: 00050203 [ 358.552004][ T8851] RAX: ffffffff84160301 RBX: 000000000000000c RCX: 0000000000000001 [ 358.559968][ T8851] RDX: 0000000000000004 RSI: ffffc9000ca07cd0 RDI: 0000200000caaffb [ 358.567934][ T8851] RBP: 0000000000000000 R08: ffffffff00000000 R09: 0000000000000004 [ 358.575897][ T8851] R10: dffffc0000000000 R11: fffff52001940f9b R12: 00007fffffffeff4 [ 358.583863][ T8851] R13: 1ffff92001940f8c R14: 0000200000caaffb R15: ffffc9000ca07cd0 [ 358.591833][ T8851] ? _copy_from_user+0x161/0x170 [ 358.596777][ T8851] _copy_to_user+0xea/0x130 [ 358.601280][ T8851] copy_to_sockptr+0x6c/0x90 [ 358.605872][ T8851] sk_getsockopt+0x19c6/0x1ea0 [ 358.610642][ T8851] ? sock_setsockopt+0x60/0x60 [ 358.615403][ T8851] ? __might_sleep+0xd0/0xd0 [ 358.619992][ T8851] ? __fget_files+0x28/0x460 [ 358.624590][ T8851] ? aa_sk_perm+0x81f/0x950 [ 358.629097][ T8851] ? aa_af_perm+0x340/0x340 [ 358.633603][ T8851] sock_getsockopt+0x7f/0x90 [ 358.638194][ T8851] __sys_getsockopt+0x144/0x230 [ 358.643054][ T8851] __x64_sys_getsockopt+0xb1/0xc0 [ 358.648084][ T8851] do_syscall_64+0x4c/0xa0 [ 358.652502][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 358.657178][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 358.661859][ T8851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.667757][ T8851] RIP: 0033:0x7f6ad739e159 [ 358.672167][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.691767][ T8851] RSP: 002b:00007f6ad81c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 358.700181][ T8851] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e159 [ 358.708151][ T8851] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000005 [ 358.716118][ T8851] RBP: 00007f6ad7435024 R08: 0000200000cab000 R09: 0000000000000000 [ 358.724083][ T8851] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000000 [ 358.732050][ T8851] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007ffcd3c45928 [ 358.740025][ T8851] [ 360.038221][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 360.165677][ T8857] device syzkaller0 entered promiscuous mode [ 360.234141][ T8865] netlink: 'syz.1.1256': attribute type 10 has an invalid length. [ 360.286211][ T8865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1256'. [ 363.065753][ T8885] FAULT_INJECTION: forcing a failure. [ 363.065753][ T8885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.116399][ T8885] CPU: 0 PID: 8885 Comm: syz.3.1265 Not tainted syzkaller #0 [ 363.123829][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.133905][ T8885] Call Trace: [ 363.137192][ T8885] [ 363.140127][ T8885] dump_stack_lvl+0x188/0x24e [ 363.144838][ T8885] ? show_regs_print_info+0x12/0x12 [ 363.150066][ T8885] ? load_image+0x410/0x410 [ 363.154621][ T8885] ? __lock_acquire+0x7c40/0x7c40 [ 363.159657][ T8885] should_fail_ex+0x390/0x4c0 [ 363.164342][ T8885] prepare_alloc_pages+0x1e1/0x5b0 [ 363.169463][ T8885] __alloc_pages+0x130/0x4f0 [ 363.174058][ T8885] ? lock_chain_count+0x20/0x20 [ 363.178913][ T8885] ? zone_statistics+0x170/0x170 [ 363.183858][ T8885] ? count_memcg_event_mm+0x8a/0x3c0 [ 363.189135][ T8885] ? count_memcg_event_mm+0x36b/0x3c0 [ 363.194504][ T8885] ? __lock_acquire+0x7c40/0x7c40 [ 363.199528][ T8885] ? count_memcg_event_mm+0x8a/0x3c0 [ 363.204814][ T8885] ? put_page+0x270/0x270 [ 363.209141][ T8885] __folio_alloc+0xe/0x30 [ 363.213474][ T8885] vma_alloc_folio+0x499/0x900 [ 363.218251][ T8885] handle_mm_fault+0x1fe3/0x3d40 [ 363.223189][ T8885] ? mt_find+0x157/0x830 [ 363.227445][ T8885] ? numa_migrate_prep+0x250/0x250 [ 363.232560][ T8885] ? lock_chain_count+0x20/0x20 [ 363.237416][ T8885] ? lock_mm_and_find_vma+0xae/0x2f0 [ 363.242699][ T8885] do_user_addr_fault+0x58e/0xb20 [ 363.247740][ T8885] exc_page_fault+0x60/0x100 [ 363.252339][ T8885] asm_exc_page_fault+0x22/0x30 [ 363.257192][ T8885] RIP: 0010:copy_user_short_string+0xd/0x40 [ 363.263090][ T8885] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 363.282702][ T8885] RSP: 0018:ffffc9000ca97bc0 EFLAGS: 00050203 [ 363.288769][ T8885] RAX: ffffffff84160301 RBX: 000000000000000c RCX: 0000000000000001 [ 363.296749][ T8885] RDX: 0000000000000004 RSI: ffffc9000ca97cd0 RDI: 0000200000caaffb [ 363.304727][ T8885] RBP: 0000000000000000 R08: ffffffff00000000 R09: 0000000000000004 [ 363.312702][ T8885] R10: dffffc0000000000 R11: fffff52001952f9b R12: 00007fffffffeff4 [ 363.320673][ T8885] R13: 1ffff92001952f8c R14: 0000200000caaffb R15: ffffc9000ca97cd0 [ 363.328653][ T8885] ? _copy_from_user+0x161/0x170 [ 363.333601][ T8885] _copy_to_user+0xea/0x130 [ 363.338108][ T8885] copy_to_sockptr+0x6c/0x90 [ 363.342700][ T8885] sk_getsockopt+0x19c6/0x1ea0 [ 363.347473][ T8885] ? sock_setsockopt+0x60/0x60 [ 363.352238][ T8885] ? __might_sleep+0xd0/0xd0 [ 363.356833][ T8885] ? __fget_files+0x28/0x460 [ 363.361433][ T8885] ? aa_sk_perm+0x81f/0x950 [ 363.365940][ T8885] ? aa_af_perm+0x340/0x340 [ 363.370450][ T8885] sock_getsockopt+0x7f/0x90 [ 363.376441][ T8885] __sys_getsockopt+0x144/0x230 [ 363.381302][ T8885] __x64_sys_getsockopt+0xb1/0xc0 [ 363.386340][ T8885] do_syscall_64+0x4c/0xa0 [ 363.390762][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 363.395447][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 363.400125][ T8885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.406018][ T8885] RIP: 0033:0x7f706479e159 [ 363.410434][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.430036][ T8885] RSP: 002b:00007f70629f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 363.438451][ T8885] RAX: ffffffffffffffda RBX: 00007f7064a25fa0 RCX: 00007f706479e159 [ 363.446444][ T8885] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000005 [ 363.454411][ T8885] RBP: 00007f7064835024 R08: 0000200000cab000 R09: 0000000000000000 [ 363.462378][ T8885] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000000 [ 363.470348][ T8885] R13: 00007f7064a26038 R14: 00007f7064a25fa0 R15: 00007fffb41715c8 [ 363.478329][ T8885] [ 364.118079][ T8891] loop3: detected capacity change from 0 to 1024 [ 364.132772][ T8891] EXT4-fs: Ignoring removed mblk_io_submit option [ 364.143870][ T8891] EXT4-fs: Ignoring removed oldalloc option [ 364.210751][ T8891] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 364.231250][ T8891] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.691251][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 365.928021][ T8914] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 365.983870][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 367.901069][ T8940] loop1: detected capacity change from 0 to 1024 [ 367.917537][ T8937] device syzkaller0 entered promiscuous mode [ 367.953342][ T8940] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.980598][ T8940] EXT4-fs: Ignoring removed oldalloc option [ 368.122923][ T8940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 368.140955][ T8940] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.176070][ T8954] FAULT_INJECTION: forcing a failure. [ 368.176070][ T8954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.195086][ T8954] CPU: 0 PID: 8954 Comm: syz.3.1289 Not tainted syzkaller #0 [ 368.202497][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.212568][ T8954] Call Trace: [ 368.215871][ T8954] [ 368.218815][ T8954] dump_stack_lvl+0x188/0x24e [ 368.223534][ T8954] ? show_regs_print_info+0x12/0x12 [ 368.228769][ T8954] ? load_image+0x410/0x410 [ 368.233296][ T8954] ? __lock_acquire+0x7c40/0x7c40 [ 368.238341][ T8954] should_fail_ex+0x390/0x4c0 [ 368.243027][ T8954] _copy_to_user+0x2c/0x130 [ 368.247560][ T8954] sk_getsockopt+0x1697/0x1ea0 [ 368.252353][ T8954] ? sock_setsockopt+0x60/0x60 [ 368.257144][ T8954] ? __might_sleep+0xd0/0xd0 [ 368.261760][ T8954] ? __fget_files+0x28/0x460 [ 368.266387][ T8954] ? aa_sk_perm+0x81f/0x950 [ 368.270924][ T8954] ? aa_af_perm+0x340/0x340 [ 368.275457][ T8954] sock_getsockopt+0x7f/0x90 [ 368.280075][ T8954] __sys_getsockopt+0x144/0x230 [ 368.284967][ T8954] __x64_sys_getsockopt+0xb1/0xc0 [ 368.290020][ T8954] do_syscall_64+0x4c/0xa0 [ 368.294447][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 368.299129][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 368.303810][ T8954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.309720][ T8954] RIP: 0033:0x7f706479e159 [ 368.314132][ T8954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.333734][ T8954] RSP: 002b:00007f70629f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 368.342147][ T8954] RAX: ffffffffffffffda RBX: 00007f7064a25fa0 RCX: 00007f706479e159 [ 368.350111][ T8954] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000005 [ 368.358077][ T8954] RBP: 00007f7064835024 R08: 0000200000cab000 R09: 0000000000000000 [ 368.366046][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.374019][ T8954] R13: 00007f7064a26038 R14: 00007f7064a25fa0 R15: 00007fffb41715c8 [ 368.381998][ T8954] [ 368.463357][ T27] audit: type=1107 audit(1788661288.845:10): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÝF±o¤ŸÙS [ 368.463357][ T27] ÷Ç!}P7Qù/ÑcÈ<ð³õ¶õ\úÃïë[;ÆÑpÐ÷ ü‡{KBã2Š·WÅ3€Ü2ˆ^@]‚&®sç%!wØ‚oƒÀÐA~MÛ)IìçÀèìl\e [ 368.463357][ T27] ?óT5Ìc)æþŒÓêËÐg‰6†ºÙ]á'Àë·÷¡·íƒ/^-NA20ß‘É„éñ£|„X–?o´e¯Aþy™L’´rUÁ†]~EòXR½—ýñboqoÝŽ9Šb£!zÜ>Šß [ 368.463357][ T27] ɨ赣P¾üŒï—cÑZµµˆß?á26í“+Ñtÿõ@–LÄï;Î$úço]Ž½瘤¡‘ Òm>þòÛÇù@Z$§L£W&!øc?›.¤ÃúëÀ󃽚ŽÛ%âÒá4;²›l!¡Ðp³W²ìÅ%¯Í§©+Ã>¼ºŠA å%Ôü€M'íxHà¾ä YŠ.÷mžÂ‘ö>²òùö3 2<‰ [ 368.463357][ T27] ° [ 368.463357][ T27] g&ÜkKaþäÐCú=¿ ðÝÈÚNÃ-"÷ªB#o0Ãbà0sì·¨zqþà…õýýÒÈ28,¥ž0Àœ¾E‹öªØÅ` “‹>|L–ÁÛ¬ gÚ/éeIocõÕÉ´ö_}Þ¨1ç]iÓf¼€¡Ãä߸Aüutiæ”a†jöoçv7/> mt´ÊˆA^*Á(âs*§HÚéËO0…¦Ÿ^gÅ÷Ùæ°îs% ¯7þõY³UëóqÖ ³' [ 370.989470][ T8977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1293'. [ 372.740649][ T8898] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 372.786817][ T8974] netlink: 'syz.3.1293': attribute type 10 has an invalid length. [ 372.849780][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 373.039286][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 373.243743][ T8998] FAULT_INJECTION: forcing a failure. [ 373.243743][ T8998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.285496][ T8998] CPU: 0 PID: 8998 Comm: syz.0.1303 Not tainted syzkaller #0 [ 373.292933][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.303005][ T8998] Call Trace: [ 373.306302][ T8998] [ 373.309250][ T8998] dump_stack_lvl+0x188/0x24e [ 373.313965][ T8998] ? show_regs_print_info+0x12/0x12 [ 373.319187][ T8998] ? load_image+0x410/0x410 [ 373.323714][ T8998] ? __lock_acquire+0x7c40/0x7c40 [ 373.328773][ T8998] should_fail_ex+0x390/0x4c0 [ 373.333485][ T8998] _copy_to_user+0x2c/0x130 [ 373.338015][ T8998] copy_to_sockptr+0x6c/0x90 [ 373.342632][ T8998] sk_getsockopt+0x19c6/0x1ea0 [ 373.347422][ T8998] ? sock_setsockopt+0x60/0x60 [ 373.352209][ T8998] ? __might_sleep+0xd0/0xd0 [ 373.356834][ T8998] ? __fget_files+0x28/0x460 [ 373.361464][ T8998] ? aa_sk_perm+0x81f/0x950 [ 373.365997][ T8998] ? aa_af_perm+0x340/0x340 [ 373.370525][ T8998] sock_getsockopt+0x7f/0x90 [ 373.375133][ T8998] __sys_getsockopt+0x144/0x230 [ 373.379990][ T8998] __x64_sys_getsockopt+0xb1/0xc0 [ 373.385023][ T8998] do_syscall_64+0x4c/0xa0 [ 373.389445][ T8998] ? clear_bhb_loop+0x60/0xb0 [ 373.394127][ T8998] ? clear_bhb_loop+0x60/0xb0 [ 373.398808][ T8998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.404702][ T8998] RIP: 0033:0x7f6ad739e159 [ 373.409113][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.428715][ T8998] RSP: 002b:00007f6ad81c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 373.437130][ T8998] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e159 [ 373.445096][ T8998] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000005 [ 373.453064][ T8998] RBP: 00007f6ad7435024 R08: 0000200000cab000 R09: 0000000000000000 [ 373.461031][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.468995][ T8998] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007ffcd3c45928 [ 373.476975][ T8998] [ 373.577643][ T9004] device syzkaller0 entered promiscuous mode [ 374.241754][ T9005] device bridge5 entered promiscuous mode [ 374.546511][ T9013] loop0: detected capacity change from 0 to 1024 [ 374.553663][ T9014] loop1: detected capacity change from 0 to 512 [ 374.579417][ T9014] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 374.607015][ T9013] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.634567][ T9013] EXT4-fs: Ignoring removed oldalloc option [ 374.718956][ T9013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 374.744418][ T9014] syz.1.1308: attempt to access beyond end of device [ 374.744418][ T9014] loop1: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 374.769359][ T9013] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.836652][ T9014] syz.1.1308: attempt to access beyond end of device [ 374.836652][ T9014] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 374.897628][ T27] audit: type=1800 audit(1788661295.275:11): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1308" name="file2" dev="loop1" ino=1048599 res=0 errno=0 [ 375.703104][ T9034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1310'. [ 376.420563][ T9017] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 377.528909][ T9030] netlink: 'syz.3.1310': attribute type 10 has an invalid length. [ 377.688024][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 377.993835][ T9067] device bridge6 entered promiscuous mode [ 378.353522][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.359854][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.359863][ T9082] FAULT_INJECTION: forcing a failure. [ 378.359863][ T9082] name fail_futex, interval 1, probability 0, space 0, times 0 [ 378.479776][ T9082] CPU: 0 PID: 9082 Comm: syz.0.1328 Not tainted syzkaller #0 [ 378.487204][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.497272][ T9082] Call Trace: [ 378.500555][ T9082] [ 378.503500][ T9082] dump_stack_lvl+0x188/0x24e [ 378.508214][ T9082] ? show_regs_print_info+0x12/0x12 [ 378.513443][ T9082] ? load_image+0x410/0x410 [ 378.517977][ T9082] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 378.523991][ T9082] ? lock_chain_count+0x20/0x20 [ 378.528872][ T9082] should_fail_ex+0x390/0x4c0 [ 378.533590][ T9082] get_futex_key+0x1b1/0x1000 [ 378.538298][ T9082] ? asm_exc_page_fault+0x22/0x30 [ 378.543353][ T9082] ? futex_setup_timer+0xc0/0xc0 [ 378.548327][ T9082] ? memset+0x1e/0x40 [ 378.552336][ T9082] futex_wake+0x123/0x4f0 [ 378.556687][ T9082] ? futex_wake_mark+0x150/0x150 [ 378.561648][ T9082] ? __fget_files+0x28/0x460 [ 378.563488][ T9086] device syzkaller0 entered promiscuous mode [ 378.566246][ T9082] do_futex+0x2e2/0x320 [ 378.566276][ T9082] ? __ia32_sys_get_robust_list+0x100/0x100 [ 378.582286][ T9082] __se_sys_futex+0x381/0x410 [ 378.586969][ T9082] ? __x64_sys_futex+0xf0/0xf0 [ 378.591735][ T9082] ? __x64_sys_futex+0x1d/0xf0 [ 378.596497][ T9082] do_syscall_64+0x4c/0xa0 [ 378.600917][ T9082] ? clear_bhb_loop+0x60/0xb0 [ 378.605597][ T9082] ? clear_bhb_loop+0x60/0xb0 [ 378.610277][ T9082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.616174][ T9082] RIP: 0033:0x7f6ad739e159 [ 378.620583][ T9082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.640183][ T9082] RSP: 002b:00007f6ad81c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 378.648592][ T9082] RAX: ffffffffffffffda RBX: 00007f6ad7625fa8 RCX: 00007f6ad739e159 [ 378.656557][ T9082] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ad7625fac [ 378.664522][ T9082] RBP: 00007f6ad7625fa0 R08: 0012dca2a5039000 R09: 0000000000000000 [ 378.672487][ T9082] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 378.680451][ T9082] R13: 00007f6ad7626038 R14: 00007ffcd3c45840 R15: 00007ffcd3c45928 [ 378.688426][ T9082] [ 378.706033][ T9091] loop5: detected capacity change from 0 to 1024 [ 378.725321][ T9091] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.740514][ T9091] EXT4-fs: Ignoring removed oldalloc option [ 378.819496][ T9091] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 378.838385][ T9091] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.883137][ T9104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1331'. [ 380.652135][ T9100] netlink: 'syz.1.1331': attribute type 10 has an invalid length. [ 380.841496][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 380.940286][ T9133] device bridge2 entered promiscuous mode [ 381.428649][ T9150] FAULT_INJECTION: forcing a failure. [ 381.428649][ T9150] name fail_futex, interval 1, probability 0, space 0, times 0 [ 381.481169][ T9150] CPU: 1 PID: 9150 Comm: syz.0.1344 Not tainted syzkaller #0 [ 381.488589][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.498662][ T9150] Call Trace: [ 381.501956][ T9150] [ 381.504899][ T9150] dump_stack_lvl+0x188/0x24e [ 381.509606][ T9150] ? show_regs_print_info+0x12/0x12 [ 381.514835][ T9150] ? load_image+0x410/0x410 [ 381.519367][ T9150] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 381.525381][ T9150] ? lock_chain_count+0x20/0x20 [ 381.530258][ T9150] should_fail_ex+0x390/0x4c0 [ 381.534929][ T9150] get_futex_key+0x1b1/0x1000 [ 381.539621][ T9150] ? asm_exc_page_fault+0x22/0x30 [ 381.544652][ T9150] ? futex_setup_timer+0xc0/0xc0 [ 381.549621][ T9150] ? memset+0x1e/0x40 [ 381.553629][ T9150] futex_wake+0x123/0x4f0 [ 381.557988][ T9150] ? futex_wake_mark+0x150/0x150 [ 381.562962][ T9150] ? __fget_files+0x28/0x460 [ 381.567587][ T9150] do_futex+0x2e2/0x320 [ 381.571772][ T9150] ? __ia32_sys_get_robust_list+0x100/0x100 [ 381.577700][ T9150] __se_sys_futex+0x381/0x410 [ 381.582667][ T9150] ? __x64_sys_futex+0xf0/0xf0 [ 381.587463][ T9150] ? __x64_sys_futex+0x1d/0xf0 [ 381.592254][ T9150] do_syscall_64+0x4c/0xa0 [ 381.596698][ T9150] ? clear_bhb_loop+0x60/0xb0 [ 381.601381][ T9150] ? clear_bhb_loop+0x60/0xb0 [ 381.606062][ T9150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.611961][ T9150] RIP: 0033:0x7f6ad739e159 [ 381.616374][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.635976][ T9150] RSP: 002b:00007f6ad81c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 381.644388][ T9150] RAX: ffffffffffffffda RBX: 00007f6ad7625fa8 RCX: 00007f6ad739e159 [ 381.652356][ T9150] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ad7625fac [ 381.660321][ T9150] RBP: 00007f6ad7625fa0 R08: 001708c00be87fe0 R09: 0000000000000000 [ 381.668287][ T9150] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 381.676254][ T9150] R13: 00007f6ad7626038 R14: 00007ffcd3c45840 R15: 00007ffcd3c45928 [ 381.684496][ T9150] [ 381.719306][ T9156] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 381.733797][ T9156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1347'. [ 381.807374][ T9158] device syzkaller0 entered promiscuous mode [ 381.938060][ T9164] loop0: detected capacity change from 0 to 1024 [ 381.959916][ T9164] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.974478][ T9164] EXT4-fs: Ignoring removed oldalloc option [ 382.069861][ T9164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 382.117064][ T9164] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.671711][ T9099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 383.990001][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 384.142485][ T9183] device syzkaller0 entered promiscuous mode [ 384.629764][ T9212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1361'. [ 384.713507][ T9214] loop5: detected capacity change from 0 to 1024 [ 384.762361][ T9214] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.801041][ T9214] EXT4-fs: Ignoring removed oldalloc option [ 384.962223][ T9214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 384.973401][ T9214] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.549594][ T9232] FAULT_INJECTION: forcing a failure. [ 385.549594][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 385.567791][ T9232] CPU: 0 PID: 9232 Comm: syz.0.1366 Not tainted syzkaller #0 [ 385.575196][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.585255][ T9232] Call Trace: [ 385.588548][ T9232] [ 385.591497][ T9232] dump_stack_lvl+0x188/0x24e [ 385.596196][ T9232] ? show_regs_print_info+0x12/0x12 [ 385.601414][ T9232] ? load_image+0x410/0x410 [ 385.605931][ T9232] ? __might_sleep+0xd0/0xd0 [ 385.610519][ T9232] ? __lock_acquire+0x7c40/0x7c40 [ 385.615557][ T9232] should_fail_ex+0x390/0x4c0 [ 385.620232][ T9232] should_failslab+0x5/0x20 [ 385.624743][ T9232] slab_pre_alloc_hook+0x59/0x300 [ 385.629778][ T9232] ? slab_post_alloc_hook+0x67/0x490 [ 385.635053][ T9232] kmem_cache_alloc_bulk+0x42/0x4e0 [ 385.640238][ T9232] ? kmem_cache_alloc+0x1b2/0x2f0 [ 385.645261][ T9232] ? mas_alloc_nodes+0x2ec/0x880 [ 385.650192][ T9232] mas_alloc_nodes+0x449/0x880 [ 385.654954][ T9232] mas_preallocate+0x162/0x3b0 [ 385.659707][ T9232] mmap_region+0xdcb/0x1c50 [ 385.664216][ T9232] ? file_mmap_ok+0x170/0x170 [ 385.668890][ T9232] ? vma_expand+0x850/0x850 [ 385.673393][ T9232] ? cap_mmap_addr+0x153/0x2c0 [ 385.678181][ T9232] ? file_mmap_ok+0x11c/0x170 [ 385.682852][ T9232] do_mmap+0x9ce/0x10d0 [ 385.687002][ T9232] ? mlock_future_check+0x100/0x100 [ 385.692216][ T9232] aio_setup_ring+0x8d4/0xf50 [ 385.696909][ T9232] ? free_ioctx_reqs+0x180/0x180 [ 385.701853][ T9232] ioctx_alloc+0x315/0x7b0 [ 385.706281][ T9232] __se_sys_io_setup+0x7b/0x190 [ 385.711132][ T9232] do_syscall_64+0x4c/0xa0 [ 385.715563][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 385.720230][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 385.724918][ T9232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.730815][ T9232] RIP: 0033:0x7f6ad739e159 [ 385.735239][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.754835][ T9232] RSP: 002b:00007f6ad81c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 385.763239][ T9232] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e159 [ 385.771207][ T9232] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000001ff [ 385.779189][ T9232] RBP: 00007f6ad7435024 R08: 0000000000000000 R09: 0000000000000000 [ 385.787262][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.795239][ T9232] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007ffcd3c45928 [ 385.803217][ T9232] [ 386.343324][ T9220] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 387.007539][ T9209] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 387.236932][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 387.524892][ T9261] FAULT_INJECTION: forcing a failure. [ 387.524892][ T9261] name failslab, interval 1, probability 0, space 0, times 0 [ 387.660600][ T9261] CPU: 0 PID: 9261 Comm: syz.5.1377 Not tainted syzkaller #0 [ 387.668036][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.668049][ T9265] netlink: 'syz.1.1379': attribute type 10 has an invalid length. [ 387.678093][ T9261] Call Trace: [ 387.678197][ T9261] [ 387.678206][ T9261] dump_stack_lvl+0x188/0x24e [ 387.696926][ T9261] ? show_regs_print_info+0x12/0x12 [ 387.702161][ T9261] ? load_image+0x410/0x410 [ 387.706690][ T9261] ? __might_sleep+0xd0/0xd0 [ 387.709927][ T9265] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1379'. [ 387.711283][ T9261] ? __lock_acquire+0x7c40/0x7c40 [ 387.711321][ T9261] should_fail_ex+0x390/0x4c0 [ 387.711353][ T9261] should_failslab+0x5/0x20 [ 387.711371][ T9261] slab_pre_alloc_hook+0x59/0x300 [ 387.711394][ T9261] ? slab_post_alloc_hook+0x67/0x490 [ 387.744743][ T9261] kmem_cache_alloc_bulk+0x42/0x4e0 [ 387.749948][ T9261] ? kmem_cache_alloc+0x1b2/0x2f0 [ 387.754970][ T9261] ? mas_alloc_nodes+0x2ec/0x880 [ 387.759913][ T9261] mas_alloc_nodes+0x449/0x880 [ 387.764688][ T9261] mas_preallocate+0x162/0x3b0 [ 387.769456][ T9261] mmap_region+0xdcb/0x1c50 [ 387.773975][ T9261] ? file_mmap_ok+0x170/0x170 [ 387.778656][ T9261] ? vma_expand+0x850/0x850 [ 387.783162][ T9261] ? cap_mmap_addr+0x153/0x2c0 [ 387.787937][ T9261] ? file_mmap_ok+0x11c/0x170 [ 387.792614][ T9261] do_mmap+0x9ce/0x10d0 [ 387.796775][ T9261] ? mlock_future_check+0x100/0x100 [ 387.801983][ T9261] aio_setup_ring+0x8d4/0xf50 [ 387.806667][ T9261] ? free_ioctx_reqs+0x180/0x180 [ 387.811606][ T9261] ioctx_alloc+0x315/0x7b0 [ 387.816023][ T9261] __se_sys_io_setup+0x7b/0x190 [ 387.820873][ T9261] do_syscall_64+0x4c/0xa0 [ 387.825292][ T9261] ? clear_bhb_loop+0x60/0xb0 [ 387.829970][ T9261] ? clear_bhb_loop+0x60/0xb0 [ 387.834653][ T9261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.840547][ T9261] RIP: 0033:0x7fa1e399e159 [ 387.844960][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.864564][ T9261] RSP: 002b:00007fa1e48a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 387.872975][ T9261] RAX: ffffffffffffffda RBX: 00007fa1e3c25fa0 RCX: 00007fa1e399e159 [ 387.880940][ T9261] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000001ff [ 387.888905][ T9261] RBP: 00007fa1e3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 387.896871][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.904837][ T9261] R13: 00007fa1e3c26038 R14: 00007fa1e3c25fa0 R15: 00007ffe79d03818 [ 387.912817][ T9261] [ 388.044538][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 388.356640][ T9273] loop3: detected capacity change from 0 to 1024 [ 388.393199][ T9273] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.406793][ T9271] device syzkaller0 entered promiscuous mode [ 388.440603][ T9273] EXT4-fs: Ignoring removed oldalloc option [ 388.505331][ T9273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 388.522573][ T9273] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.159671][ T9285] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 390.301098][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 390.614646][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1391'. [ 390.713676][ T9321] FAULT_INJECTION: forcing a failure. [ 390.713676][ T9321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 390.821044][ T9323] device bridge7 entered promiscuous mode [ 390.858707][ T9321] CPU: 0 PID: 9321 Comm: syz.2.1394 Not tainted syzkaller #0 [ 390.866133][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.876204][ T9321] Call Trace: [ 390.879503][ T9321] [ 390.882453][ T9321] dump_stack_lvl+0x188/0x24e [ 390.887168][ T9321] ? show_regs_print_info+0x12/0x12 [ 390.892400][ T9321] ? load_image+0x410/0x410 [ 390.896936][ T9321] ? __lock_acquire+0x7c40/0x7c40 [ 390.901216][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1396'. [ 390.901977][ T9321] should_fail_ex+0x390/0x4c0 [ 390.915958][ T9321] prepare_alloc_pages+0x1e1/0x5b0 [ 390.921114][ T9321] __alloc_pages+0x130/0x4f0 [ 390.925735][ T9321] ? zone_statistics+0x170/0x170 [ 390.930716][ T9321] folio_alloc+0x1c/0x60 [ 390.932974][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 390.934968][ T9321] filemap_alloc_folio+0xdb/0x480 [ 390.948866][ T9321] ? __filemap_get_folio+0x10f/0xde0 [ 390.954182][ T9321] ? filemap_add_folio+0x3d0/0x3d0 [ 390.959316][ T9321] ? __lock_acquire+0x7c40/0x7c40 [ 390.964375][ T9321] ? xas_load+0x127/0x140 [ 390.968735][ T9321] __filemap_get_folio+0x6ba/0xde0 [ 390.973877][ T9321] ? __filemap_get_folio+0x10f/0xde0 [ 390.979191][ T9321] ? page_cache_prev_miss+0x380/0x380 [ 390.984600][ T9321] ? pagecache_get_page+0x17/0x260 [ 390.989745][ T9321] pagecache_get_page+0x26/0x260 [ 390.994715][ T9321] aio_setup_ring+0x3ab/0xf50 [ 390.999428][ T9321] ? free_ioctx_reqs+0x180/0x180 [ 391.004397][ T9321] ioctx_alloc+0x315/0x7b0 [ 391.008845][ T9321] __se_sys_io_setup+0x7b/0x190 [ 391.013718][ T9321] do_syscall_64+0x4c/0xa0 [ 391.018163][ T9321] ? clear_bhb_loop+0x60/0xb0 [ 391.022869][ T9321] ? clear_bhb_loop+0x60/0xb0 [ 391.027573][ T9321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.033489][ T9321] RIP: 0033:0x7faaa119e159 [ 391.037919][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.057536][ T9321] RSP: 002b:00007faaa2051028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 391.065952][ T9321] RAX: ffffffffffffffda RBX: 00007faaa1425fa0 RCX: 00007faaa119e159 [ 391.073924][ T9321] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000001ff [ 391.081891][ T9321] RBP: 00007faaa1235024 R08: 0000000000000000 R09: 0000000000000000 [ 391.089855][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.097821][ T9321] R13: 00007faaa1426038 R14: 00007faaa1425fa0 R15: 00007ffcb1ff9ed8 [ 391.105811][ T9321] [ 391.211419][ T9332] device syzkaller0 entered promiscuous mode [ 391.275982][ T9336] netlink: 'syz.5.1397': attribute type 10 has an invalid length. [ 391.424152][ T9338] loop1: detected capacity change from 0 to 1024 [ 391.465408][ T9338] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.520990][ T9338] EXT4-fs: Ignoring removed oldalloc option [ 391.569867][ T9338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 391.645632][ T9338] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.697567][ T9350] loop2: detected capacity change from 0 to 128 [ 391.785759][ T9353] 9pnet_fd: Insufficient options for proto=fd [ 391.814252][ T9350] FAT-fs (loop2): Directory bread(block 32) failed [ 391.838549][ T9350] FAT-fs (loop2): Directory bread(block 33) failed [ 391.866620][ T9350] FAT-fs (loop2): Directory bread(block 34) failed [ 391.891144][ T9350] FAT-fs (loop2): Directory bread(block 35) failed [ 391.919215][ T9350] FAT-fs (loop2): Directory bread(block 36) failed [ 391.961639][ T9350] FAT-fs (loop2): Directory bread(block 37) failed [ 391.991288][ T9350] FAT-fs (loop2): Directory bread(block 38) failed [ 392.019108][ T9350] FAT-fs (loop2): Directory bread(block 39) failed [ 392.042907][ T9350] FAT-fs (loop2): Directory bread(block 40) failed [ 392.062292][ T9350] FAT-fs (loop2): Directory bread(block 41) failed [ 392.530029][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 392.632441][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1410'. [ 392.656054][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 394.177221][ T9379] device bridge3 entered promiscuous mode [ 394.366862][ T9383] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1412'. [ 394.410509][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1412'. [ 394.411902][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 394.436326][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1412'. [ 394.490784][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1412'. [ 394.572602][ T9393] FAULT_INJECTION: forcing a failure. [ 394.572602][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 394.643018][ T9388] device syzkaller0 entered promiscuous mode [ 394.657489][ T9393] CPU: 0 PID: 9393 Comm: syz.1.1415 Not tainted syzkaller #0 [ 394.664900][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.674985][ T9393] Call Trace: [ 394.678280][ T9393] [ 394.681230][ T9393] dump_stack_lvl+0x188/0x24e [ 394.685954][ T9393] ? show_regs_print_info+0x12/0x12 [ 394.691191][ T9393] ? load_image+0x410/0x410 [ 394.695719][ T9393] ? __might_sleep+0xd0/0xd0 [ 394.700334][ T9393] ? __lock_acquire+0x7c40/0x7c40 [ 394.705406][ T9393] should_fail_ex+0x390/0x4c0 [ 394.710114][ T9393] should_failslab+0x5/0x20 [ 394.714636][ T9393] slab_pre_alloc_hook+0x59/0x300 [ 394.719681][ T9393] ? slab_post_alloc_hook+0x67/0x490 [ 394.724997][ T9393] kmem_cache_alloc_bulk+0x42/0x4e0 [ 394.730228][ T9393] ? kmem_cache_alloc+0x1b2/0x2f0 [ 394.735274][ T9393] ? mas_alloc_nodes+0x2ec/0x880 [ 394.740245][ T9393] mas_alloc_nodes+0x449/0x880 [ 394.745053][ T9393] mas_preallocate+0x162/0x3b0 [ 394.749854][ T9393] mmap_region+0xdcb/0x1c50 [ 394.754401][ T9393] ? file_mmap_ok+0x170/0x170 [ 394.759113][ T9393] ? vma_expand+0x850/0x850 [ 394.763646][ T9393] ? cap_mmap_addr+0x153/0x2c0 [ 394.768453][ T9393] ? file_mmap_ok+0x11c/0x170 [ 394.773167][ T9393] do_mmap+0x9ce/0x10d0 [ 394.776430][ T9390] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 394.777367][ T9393] ? mlock_future_check+0x100/0x100 [ 394.790389][ T9393] aio_setup_ring+0x8d4/0xf50 [ 394.795104][ T9393] ? free_ioctx_reqs+0x180/0x180 [ 394.800088][ T9393] ioctx_alloc+0x315/0x7b0 [ 394.804497][ T9393] __se_sys_io_setup+0x7b/0x190 [ 394.809350][ T9393] do_syscall_64+0x4c/0xa0 [ 394.813773][ T9393] ? clear_bhb_loop+0x60/0xb0 [ 394.818467][ T9393] ? clear_bhb_loop+0x60/0xb0 [ 394.823163][ T9393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.829062][ T9393] RIP: 0033:0x7f7f9a19e159 [ 394.833500][ T9393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.853132][ T9393] RSP: 002b:00007f7f9affc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 394.861576][ T9393] RAX: ffffffffffffffda RBX: 00007f7f9a425fa0 RCX: 00007f7f9a19e159 [ 394.869574][ T9393] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000001ff [ 394.877567][ T9393] RBP: 00007f7f9a235024 R08: 0000000000000000 R09: 0000000000000000 [ 394.885562][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.893555][ T9393] R13: 00007f7f9a426038 R14: 00007f7f9a425fa0 R15: 00007fff190eb1d8 [ 394.901566][ T9393] [ 395.345363][ T9418] loop5: detected capacity change from 0 to 1024 [ 395.362518][ T9418] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.379236][ T9418] EXT4-fs: Ignoring removed oldalloc option [ 395.467341][ T9418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 395.518008][ T9418] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.185235][ T9414] __nla_validate_parse: 4 callbacks suppressed [ 397.185255][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1422'. [ 397.213038][ T9428] device bridge4 entered promiscuous mode [ 397.406754][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 397.567037][ T9453] netlink: 'syz.3.1432': attribute type 10 has an invalid length. [ 397.587408][ T9453] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1432'. [ 397.911611][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1437'. [ 397.936652][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 397.989831][ T9471] device syzkaller0 entered promiscuous mode [ 398.163355][ T9478] device bridge5 entered promiscuous mode [ 398.316293][ T9482] loop0: detected capacity change from 0 to 1024 [ 398.332709][ T9482] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.399460][ T9482] EXT4-fs: Ignoring removed oldalloc option [ 398.473978][ T9482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 398.494456][ T9482] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.314601][ T9510] loop5: detected capacity change from 0 to 128 [ 399.334620][ T9510] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 399.432355][ T9512] ucma_write: process 573 (syz.5.1449) changed security contexts after opening file descriptor, this is not allowed. [ 399.547761][ T9485] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 399.626568][ T9518] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1450'. [ 400.398805][ T9516] netlink: 'syz.5.1450': attribute type 10 has an invalid length. [ 400.513582][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 400.550585][ T9454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.579991][ T9520] program syz.2.1452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.748642][ T9527] device bridge2 entered promiscuous mode [ 401.498074][ T9549] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 401.531961][ T9549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1463'. [ 401.578360][ T9555] device syzkaller0 entered promiscuous mode [ 401.582095][ T9553] loop5: detected capacity change from 0 to 1024 [ 401.619430][ T9553] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.666030][ T9553] EXT4-fs: Ignoring removed oldalloc option [ 401.763344][ T9553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 401.782960][ T9553] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.951052][ T9569] loop0: detected capacity change from 0 to 1024 [ 401.977438][ T9569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.019858][ T9569] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 402.121788][ T9574] device bridge3 entered promiscuous mode [ 402.194573][ T9569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.223362][ T9569] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 402.242374][ T9569] System zones: 0-1, 3-36 [ 402.267825][ T9569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 402.327141][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 402.652563][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 402.720685][ T9586] loop2: detected capacity change from 0 to 128 [ 402.780383][ T9589] FAULT_INJECTION: forcing a failure. [ 402.780383][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 402.835530][ T9586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 402.842348][ T9589] CPU: 1 PID: 9589 Comm: syz.0.1474 Not tainted syzkaller #0 [ 402.850482][ T9586] System zones: [ 402.850815][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.850830][ T9589] Call Trace: [ 402.850837][ T9589] [ 402.854361][ T9586] 1-3 [ 402.864402][ T9589] dump_stack_lvl+0x188/0x24e [ 402.864441][ T9589] ? show_regs_print_info+0x12/0x12 [ 402.864472][ T9589] ? load_image+0x410/0x410 [ 402.887680][ T9589] ? __might_sleep+0xd0/0xd0 [ 402.892292][ T9589] ? __lock_acquire+0x7c40/0x7c40 [ 402.897350][ T9589] ? __d_lookup+0x8b/0x7c0 [ 402.901793][ T9589] should_fail_ex+0x390/0x4c0 [ 402.906502][ T9589] should_failslab+0x5/0x20 [ 402.911010][ T9589] slab_pre_alloc_hook+0x59/0x300 [ 402.916043][ T9589] kmem_cache_alloc_lru+0x49/0x2e0 [ 402.921151][ T9589] ? __d_alloc+0x2e/0x6e0 [ 402.925481][ T9589] __d_alloc+0x2e/0x6e0 [ 402.929632][ T9589] d_alloc+0x46/0x250 [ 402.933613][ T9589] lookup_one_qstr_excl+0xc6/0x240 [ 402.938722][ T9589] filename_create+0x242/0x450 [ 402.943494][ T9589] ? kern_path_create+0x50/0x50 [ 402.948349][ T9589] do_symlinkat+0xc1/0x400 [ 402.952768][ T9589] ? vfs_symlink+0x3d0/0x3d0 [ 402.957354][ T9589] ? getname_flags+0x206/0x500 [ 402.962116][ T9589] __x64_sys_symlink+0x7a/0x90 [ 402.966876][ T9589] do_syscall_64+0x4c/0xa0 [ 402.971296][ T9589] ? clear_bhb_loop+0x60/0xb0 [ 402.975978][ T9589] ? clear_bhb_loop+0x60/0xb0 [ 402.980669][ T9589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.986569][ T9589] RIP: 0033:0x7f6ad739e159 [ 402.990984][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.010587][ T9589] RSP: 002b:00007f6ad81c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 403.018998][ T9589] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e159 [ 403.026964][ T9589] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 00002000000006c0 [ 403.034929][ T9589] RBP: 00007f6ad7435024 R08: 0000000000000000 R09: 0000000000000000 [ 403.042895][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.050861][ T9589] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007ffcd3c45928 [ 403.058842][ T9589] [ 403.071271][ T9586] , 19-19, 35-36 [ 403.084449][ T9586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 403.113967][ T9586] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 403.298845][ T9597] device syzkaller0 entered promiscuous mode [ 403.340141][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 404.322185][ T9605] netlink: 'syz.5.1480': attribute type 10 has an invalid length. [ 404.400991][ T9605] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1480'. [ 404.425151][ T9607] loop0: detected capacity change from 0 to 1024 [ 404.472019][ T9607] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.478512][ T9607] EXT4-fs: Ignoring removed oldalloc option [ 404.566762][ T9616] device bridge8 entered promiscuous mode [ 404.602514][ T9607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 404.623551][ T9607] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.082052][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 405.295701][ T9634] loop3: detected capacity change from 0 to 1024 [ 405.309472][ T9635] device syzkaller0 entered promiscuous mode [ 405.353390][ T9634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.416626][ T9634] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.479940][ T9634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 405.531409][ T9634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 405.563668][ T9634] System zones: 0-1, 3-36 [ 405.591066][ T9634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 405.888500][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 406.068553][ T9653] device bridge4 entered promiscuous mode [ 406.366831][ T9658] netlink: 'syz.1.1497': attribute type 10 has an invalid length. [ 406.419713][ T9659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1497'. [ 406.704763][ T9663] loop0: detected capacity change from 0 to 1024 [ 406.763590][ T9663] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.810573][ T9663] EXT4-fs: Ignoring removed oldalloc option [ 406.876290][ T9663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 406.900613][ T9663] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.252014][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 407.345754][ T9669] device syzkaller0 entered promiscuous mode [ 407.425982][ T9691] device bridge3 entered promiscuous mode [ 407.675624][ T9695] loop2: detected capacity change from 0 to 1024 [ 407.722040][ T9695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.770295][ T9695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 407.836969][ T9695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 407.900017][ T9695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 407.928637][ T9695] System zones: 0-1, 3-36 [ 407.982421][ T9695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 408.198660][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 408.209846][ T9710] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1513'. [ 408.812239][ T9719] loop2: detected capacity change from 0 to 1024 [ 408.819908][ T9719] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.843535][ T9719] EXT4-fs: Ignoring removed oldalloc option [ 408.894214][ T9719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 408.922948][ T9719] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.440796][ T9729] loop0: detected capacity change from 0 to 512 [ 410.529637][ T9729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 410.565361][ T9729] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.675248][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 411.080820][ T9707] netlink: 'syz.5.1513': attribute type 10 has an invalid length. [ 411.160594][ T9733] device bridge4 entered promiscuous mode [ 411.292753][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 411.492392][ T9748] loop1: detected capacity change from 0 to 1024 [ 411.566592][ T9748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.643652][ T9748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.710965][ T9748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 411.752023][ T9748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 411.896262][ T9760] device syzkaller0 entered promiscuous mode [ 411.898672][ T9748] System zones: 0-1, 3-36 [ 411.916350][ T9748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 412.123078][ T9774] netlink: 'syz.0.1534': attribute type 10 has an invalid length. [ 412.160943][ T9774] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1534'. [ 412.259208][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 412.398064][ T9779] loop3: detected capacity change from 0 to 1024 [ 412.477365][ T9779] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.494057][ T9782] device bridge5 entered promiscuous mode [ 412.526653][ T9779] EXT4-fs: Ignoring removed oldalloc option [ 412.633795][ T9779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 412.642613][ T9779] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.876224][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 412.946630][ T9793] à [ 412.989513][ T9795] loop2: detected capacity change from 0 to 1024 [ 413.036835][ T9795] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.081239][ T9795] EXT4-fs: Ignoring removed oldalloc option [ 413.148265][ T9795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 413.160723][ T9795] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.260959][ T9807] loop5: detected capacity change from 0 to 128 [ 413.349579][ T9807] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 413.381198][ T9807] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 413.600172][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 413.616909][ T9809] device syzkaller0 entered promiscuous mode [ 413.652724][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 413.672790][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 414.126075][ T9836] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 415.357649][ T9858] loop5: detected capacity change from 0 to 1024 [ 415.378387][ T9858] EXT4-fs: Ignoring removed mblk_io_submit option [ 415.397210][ T9858] EXT4-fs: Ignoring removed oldalloc option [ 415.452890][ T9858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 415.488338][ T9858] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.535180][ T9821] device bridge6 entered promiscuous mode [ 416.557274][ T9834] netlink: 'syz.0.1550': attribute type 10 has an invalid length. [ 416.619614][ T9867] autofs4:pid:9867:autofs_fill_super: called with bogus options [ 416.689711][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 416.753225][ T9871] loop1: detected capacity change from 0 to 8 [ 416.800077][ T9871] Dev loop1: unable to read RDB block 8 [ 416.837767][ T9871] loop1: unable to read partition table [ 416.845894][ T9873] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 416.856900][ T9871] loop1: partition table beyond EOD, truncated [ 416.896144][ T9871] loop_reread_partitions: partition scan of loop1 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 417.407972][ T9894] device bridge4 entered promiscuous mode [ 417.559176][ T9899] device syzkaller0 entered promiscuous mode [ 417.712920][ T9911] netlink: 'syz.2.1574': attribute type 10 has an invalid length. [ 417.734590][ T9911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1574'. [ 417.976607][ T9919] loop5: detected capacity change from 0 to 1024 [ 418.018182][ T9919] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.061457][ T9919] EXT4-fs: Ignoring removed oldalloc option [ 418.117257][ T9919] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 418.157334][ T9919] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.499864][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 418.572721][ T9939] FAULT_INJECTION: forcing a failure. [ 418.572721][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 418.585859][ T9939] CPU: 1 PID: 9939 Comm: syz.1.1583 Not tainted syzkaller #0 [ 418.593263][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.603352][ T9939] Call Trace: [ 418.606651][ T9939] [ 418.609604][ T9939] dump_stack_lvl+0x188/0x24e [ 418.614327][ T9939] ? driver_probe_device+0x4f/0x420 [ 418.619548][ T9939] ? show_regs_print_info+0x12/0x12 [ 418.624779][ T9939] ? load_image+0x410/0x410 [ 418.629322][ T9939] should_fail_ex+0x390/0x4c0 [ 418.634031][ T9939] should_failslab+0x5/0x20 [ 418.638555][ T9939] slab_pre_alloc_hook+0x59/0x300 [ 418.643608][ T9939] ? raw_queue_event+0x83/0x2f0 [ 418.648494][ T9939] __kmem_cache_alloc_node+0x4f/0x270 [ 418.653900][ T9939] ? raw_queue_event+0x83/0x2f0 [ 418.658784][ T9939] __kmalloc+0xa3/0x240 [ 418.662977][ T9939] raw_queue_event+0x83/0x2f0 [ 418.667692][ T9939] gadget_bind+0x46f/0x5a0 [ 418.672158][ T9939] ? gadget_disconnect+0x10/0x10 [ 418.677132][ T9939] gadget_bind_driver+0x2af/0x760 [ 418.682199][ T9939] ? gadget_match_driver+0x130/0x130 [ 418.687511][ T9939] really_probe+0x24a/0xb40 [ 418.692044][ T9939] ? pm_runtime_barrier+0x147/0x1c0 [ 418.697268][ T9939] __driver_probe_device+0x1f5/0x390 [ 418.702583][ T9939] driver_probe_device+0x4f/0x420 [ 418.707641][ T9939] __driver_attach+0x43d/0x6c0 [ 418.712424][ T9939] ? driver_attach+0x40/0x40 [ 418.717040][ T9939] bus_for_each_dev+0x182/0x1f0 [ 418.721910][ T9939] ? kobject_add+0x230/0x230 [ 418.726523][ T9939] ? bus_remove_file+0xd0/0xd0 [ 418.731310][ T9939] ? do_raw_spin_unlock+0x11d/0x230 [ 418.736536][ T9939] bus_add_driver+0x324/0x5d0 [ 418.741242][ T9939] driver_register+0x32d/0x430 [ 418.746030][ T9939] usb_gadget_register_driver_owner+0xf5/0x260 [ 418.752219][ T9939] raw_ioctl+0x13a0/0x3cd0 [ 418.756666][ T9939] ? __kmem_cache_free+0xb6/0x200 [ 418.761714][ T9939] ? tomoyo_path_number_perm+0x205/0x650 [ 418.767379][ T9939] ? tomoyo_path_number_perm+0x5a4/0x650 [ 418.773041][ T9939] ? tomoyo_path_number_perm+0x205/0x650 [ 418.778698][ T9939] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 418.784190][ T9939] ? make_qualifier+0x3b0/0x3b0 [ 418.789107][ T9939] ? __fget_files+0x28/0x460 [ 418.793746][ T9939] ? bpf_lsm_file_ioctl+0x5/0x10 [ 418.798724][ T9939] ? security_file_ioctl+0x7c/0xa0 [ 418.803865][ T9939] ? make_qualifier+0x3b0/0x3b0 [ 418.808740][ T9939] __se_sys_ioctl+0xfa/0x170 [ 418.813357][ T9939] do_syscall_64+0x4c/0xa0 [ 418.817799][ T9939] ? clear_bhb_loop+0x60/0xb0 [ 418.822501][ T9939] ? clear_bhb_loop+0x60/0xb0 [ 418.827210][ T9939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.833129][ T9939] RIP: 0033:0x7f7f9a19ddeb [ 418.837564][ T9939] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 418.857190][ T9939] RSP: 002b:00007f7f9aff9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.865626][ T9939] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7f9a19ddeb [ 418.873617][ T9939] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 418.881605][ T9939] RBP: 00007f7f9affafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 418.889594][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.897579][ T9939] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 418.905585][ T9939] [ 419.123841][ T9939] raw-gadget.0 gadget.1: failed to queue event [ 419.138272][ T9946] device bridge5 entered promiscuous mode [ 419.138322][ T9939] udc dummy_udc.1: failed to start USB Raw Gadget: -12 [ 419.280938][ T9939] raw-gadget.0: probe of gadget.1 failed with error -12 [ 419.333970][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.417556][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.478330][ T9949] device syzkaller0 entered promiscuous mode [ 419.697698][ T9959] loop3: detected capacity change from 0 to 1024 [ 419.796697][ T9959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.805970][ T9972] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 419.841552][ T9972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1593'. [ 419.850983][ T9959] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.911925][ T9974] loop2: detected capacity change from 0 to 1024 [ 419.971729][ T9974] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.043976][ T9974] EXT4-fs: Ignoring removed oldalloc option [ 420.137365][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 420.142356][ T9974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 420.161270][ T9974] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.602058][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 420.734703][ T9988] FAULT_INJECTION: forcing a failure. [ 420.734703][ T9988] name failslab, interval 1, probability 0, space 0, times 0 [ 420.842845][ T9988] CPU: 0 PID: 9988 Comm: syz.5.1598 Not tainted syzkaller #0 [ 420.850268][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.860346][ T9988] Call Trace: [ 420.861718][ T9994] device bridge7 entered promiscuous mode [ 420.863627][ T9988] [ 420.863637][ T9988] dump_stack_lvl+0x188/0x24e [ 420.876969][ T9988] ? show_regs_print_info+0x12/0x12 [ 420.882199][ T9988] ? load_image+0x410/0x410 [ 420.886706][ T9988] ? __might_sleep+0xd0/0xd0 [ 420.891294][ T9988] ? __lock_acquire+0x7c40/0x7c40 [ 420.896324][ T9988] ? lockdep_init_map_type+0x98/0x8d0 [ 420.901701][ T9988] should_fail_ex+0x390/0x4c0 [ 420.906384][ T9988] should_failslab+0x5/0x20 [ 420.910881][ T9988] slab_pre_alloc_hook+0x59/0x300 [ 420.915904][ T9988] ? io_ring_ctx_alloc+0x279/0xc85 [ 420.921017][ T9988] __kmem_cache_alloc_node+0x4f/0x270 [ 420.926391][ T9988] ? io_ring_ctx_alloc+0x279/0xc85 [ 420.931502][ T9988] kmalloc_trace+0x26/0xe0 [ 420.935920][ T9988] io_ring_ctx_alloc+0x279/0xc85 [ 420.940862][ T9988] io_uring_create+0x29f/0xd6c [ 420.945624][ T9988] ? __might_fault+0xc2/0x120 [ 420.950297][ T9988] ? __might_fault+0xa6/0x120 [ 420.954976][ T9988] __x64_sys_io_uring_setup+0x21b/0x230 [ 420.960536][ T9988] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 420.966186][ T9988] ? lockdep_hardirqs_on+0x94/0x140 [ 420.971384][ T9988] do_syscall_64+0x4c/0xa0 [ 420.975799][ T9988] ? clear_bhb_loop+0x60/0xb0 [ 420.980476][ T9988] ? clear_bhb_loop+0x60/0xb0 [ 420.985157][ T9988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.991053][ T9988] RIP: 0033:0x7fa1e399e159 [ 420.995467][ T9988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.015071][ T9988] RSP: 002b:00007fa1e48a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 421.023484][ T9988] RAX: ffffffffffffffda RBX: 00007fa1e3c25fa0 RCX: 00007fa1e399e159 [ 421.031455][ T9988] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000f08 [ 421.039421][ T9988] RBP: 00007fa1e3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 421.047388][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.055354][ T9988] R13: 00007fa1e3c26038 R14: 00007fa1e3c25fa0 R15: 00007ffe79d03818 [ 421.063332][ T9988] [ 421.066465][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.557719][T10003] device syzkaller0 entered promiscuous mode [ 421.739330][T10009] loop1: detected capacity change from 0 to 1024 [ 421.789067][T10009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 421.818150][T10009] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.901982][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 422.088987][T10021] loop5: detected capacity change from 0 to 1024 [ 422.122301][T10021] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.153578][T10021] EXT4-fs: Ignoring removed oldalloc option [ 422.194761][T10030] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1610'. [ 422.241710][T10021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 422.273157][T10021] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.550873][T10026] netlink: 'syz.2.1610': attribute type 10 has an invalid length. [ 423.387836][T10034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 424.865060][T10053] device bridge6 entered promiscuous mode [ 424.872961][T10060] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 424.912412][T10060] team0: Device ipvlan1 failed to register rx_handler [ 425.009286][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 425.071211][T10065] program syz.0.1620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.104868][T10066] device syzkaller0 entered promiscuous mode [ 425.162439][T10068] loop5: detected capacity change from 0 to 1024 [ 425.225035][T10068] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 425.236023][T10068] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.281800][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 425.405752][T10083] netlink: 'syz.0.1626': attribute type 10 has an invalid length. [ 425.437704][T10083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1626'. [ 425.975732][T10103] device bridge8 entered promiscuous mode [ 426.658533][T10123] loop2: detected capacity change from 0 to 1024 [ 426.683213][T10127] device syzkaller0 entered promiscuous mode [ 426.754696][T10123] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 426.791192][T10123] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.945205][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 427.164218][T10146] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 427.253289][T10147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1645'. [ 427.413071][T10145] device bridge9 entered promiscuous mode [ 427.814359][T10163] loop5: detected capacity change from 0 to 1024 [ 427.852266][T10163] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.858758][T10163] EXT4-fs: Ignoring removed oldalloc option [ 427.981322][T10163] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 427.998693][T10163] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.206558][T10173] device syzkaller0 entered promiscuous mode [ 428.320874][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 428.896275][T10189] device bridge7 entered promiscuous mode [ 429.257031][T10204] netlink: 'syz.3.1665': attribute type 10 has an invalid length. [ 429.277311][T10205] loop2: detected capacity change from 0 to 1024 [ 429.315632][T10204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 429.324277][T10205] EXT4-fs: Ignoring removed mblk_io_submit option [ 429.335907][T10205] EXT4-fs: Ignoring removed oldalloc option [ 429.376597][T10205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 429.393891][T10205] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.777583][T10215] device syzkaller0 entered promiscuous mode [ 429.829849][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 430.199729][T10237] blk-mq: reduced tag depth (128 -> 64) [ 432.696393][T10247] loop1: detected capacity change from 0 to 1764 [ 433.825463][T10261] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1683' sets config #0 [ 434.121011][T10266] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1684'. [ 435.414974][T10244] device bridge9 entered promiscuous mode [ 435.490904][T10265] netlink: 'syz.1.1684': attribute type 10 has an invalid length. [ 435.554196][T10269] loop2: detected capacity change from 0 to 1024 [ 435.596245][T10269] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.613580][T10269] EXT4-fs: Ignoring removed oldalloc option [ 435.687040][T10269] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 435.708793][T10269] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.921281][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 436.026525][T10290] loop0: detected capacity change from 0 to 1764 [ 436.300694][T10297] device bridge5 entered promiscuous mode [ 436.674407][T10311] device syzkaller0 entered promiscuous mode [ 436.700078][T10314] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 436.737623][T10312] device syzkaller0 entered promiscuous mode [ 436.742351][T10314] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1698'. [ 437.277483][T10326] loop3: detected capacity change from 0 to 1024 [ 437.318397][T10326] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.383406][T10326] EXT4-fs: Ignoring removed oldalloc option [ 437.436340][T10326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 437.472655][T10336] loop2: detected capacity change from 0 to 1764 [ 437.535975][T10326] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.757154][T10343] device bridge6 entered promiscuous mode [ 438.051503][T10350] device syzkaller0 entered promiscuous mode [ 438.210453][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 438.466327][T10365] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 438.512433][T10360] device syzkaller0 entered promiscuous mode [ 438.532618][T10365] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1717'. [ 438.989879][T10379] loop5: detected capacity change from 0 to 1764 [ 438.997976][T10377] device syzkaller0 entered promiscuous mode [ 439.451949][T10388] device bridge7 entered promiscuous mode [ 439.681544][T10393] loop3: detected capacity change from 0 to 1024 [ 439.721499][T10393] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.735927][T10396] device syzkaller0 entered promiscuous mode [ 439.750136][T10393] EXT4-fs: Ignoring removed oldalloc option [ 439.760298][T10398] loop2: detected capacity change from 0 to 256 [ 439.782330][T10398] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.797142][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.797232][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.854190][T10398] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.907162][T10393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 439.925854][T10393] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.316697][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 440.470158][T10421] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 440.539745][T10421] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1738'. [ 440.546242][T10420] device syzkaller0 entered promiscuous mode [ 440.577956][T10427] loop5: detected capacity change from 0 to 256 [ 440.773085][T10427] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 440.798241][T10429] device bridge10 entered promiscuous mode [ 440.889026][ T27] audit: type=1800 audit(1788661361.265:12): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1741" name="file1" dev="loop5" ino=1048601 res=0 errno=0 [ 440.894927][T10427] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 441.051626][T10427] FAT-fs (loop5): Filesystem has been set read-only [ 441.381748][T10436] device syzkaller0 entered promiscuous mode [ 441.418333][T10438] loop1: detected capacity change from 0 to 2048 [ 442.308458][T10462] device bridge8 entered promiscuous mode [ 442.381408][T10465] device syzkaller0 entered promiscuous mode [ 442.452325][T10470] netlink: 'syz.5.1757': attribute type 10 has an invalid length. [ 442.473106][T10473] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1757'. [ 442.876661][T10482] device syzkaller0 entered promiscuous mode [ 443.337870][T10495] loop5: detected capacity change from 0 to 1024 [ 443.368466][T10495] EXT4-fs: Ignoring removed mblk_io_submit option [ 443.405800][T10495] EXT4-fs: Ignoring removed oldalloc option [ 443.635710][T10495] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 443.645034][T10495] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.803300][T10502] device bridge8 entered promiscuous mode [ 443.869563][T10505] device syzkaller0 entered promiscuous mode [ 444.009597][T10512] device syzkaller0 entered promiscuous mode [ 444.201061][T10517] loop1: detected capacity change from 0 to 256 [ 444.441065][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 444.660011][T10536] netlink: 'syz.5.1778': attribute type 10 has an invalid length. [ 444.680101][T10536] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1778'. [ 444.862807][T10538] device syzkaller0 entered promiscuous mode [ 444.915296][T10545] device bridge9 entered promiscuous mode [ 445.171952][T10551] device syzkaller0 entered promiscuous mode [ 445.301979][T10555] loop3: detected capacity change from 0 to 1024 [ 445.346829][T10555] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.361142][T10555] EXT4-fs: Ignoring removed oldalloc option [ 445.427265][T10555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 445.460724][T10555] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.811446][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 446.242100][T10583] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 446.282887][T10583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1799'. [ 446.301137][T10582] device syzkaller0 entered promiscuous mode [ 446.608616][T10590] device syzkaller0 entered promiscuous mode [ 446.909628][T10599] loop1: detected capacity change from 0 to 1024 [ 446.961522][T10599] EXT4-fs: Ignoring removed mblk_io_submit option [ 446.990492][T10599] EXT4-fs: Ignoring removed oldalloc option [ 447.142456][T10599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 447.160678][T10599] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.295940][T10617] device bridge9 entered promiscuous mode [ 447.447794][T10623] device syzkaller0 entered promiscuous mode [ 447.554282][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 447.850049][T10631] device syzkaller0 entered promiscuous mode [ 448.069412][T10639] netlink: 'syz.1.1820': attribute type 10 has an invalid length. [ 448.088037][T10639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1820'. [ 448.606259][T10654] loop3: detected capacity change from 0 to 1024 [ 448.669081][T10654] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.691648][T10656] device syzkaller0 entered promiscuous mode [ 448.704865][T10654] EXT4-fs: Ignoring removed oldalloc option [ 448.798265][T10654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 448.820756][T10654] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.046679][ T27] audit: type=1800 audit(1788661369.425:13): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1833" name=0A dev="sda1" ino=1478 res=0 errno=0 [ 449.125414][T10675] device syzkaller0 entered promiscuous mode [ 449.194906][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 449.456369][T10688] FAULT_INJECTION: forcing a failure. [ 449.456369][T10688] name failslab, interval 1, probability 0, space 0, times 0 [ 449.497698][T10688] CPU: 1 PID: 10688 Comm: syz.0.1840 Not tainted syzkaller #0 [ 449.505214][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.515287][T10688] Call Trace: [ 449.518581][T10688] [ 449.521528][T10688] dump_stack_lvl+0x188/0x24e [ 449.526247][T10688] ? show_regs_print_info+0x12/0x12 [ 449.531487][T10688] ? load_image+0x410/0x410 [ 449.536026][T10688] ? __might_sleep+0xd0/0xd0 [ 449.540643][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 449.545695][T10688] ? __lock_acquire+0x1465/0x7c40 [ 449.550738][T10688] should_fail_ex+0x390/0x4c0 [ 449.555432][T10688] should_failslab+0x5/0x20 [ 449.559936][T10688] slab_pre_alloc_hook+0x59/0x300 [ 449.564964][T10688] ? __kernfs_new_node+0xa6/0x7f0 [ 449.570004][T10688] __kmem_cache_alloc_node+0x4f/0x270 [ 449.575424][T10688] ? __kernfs_new_node+0xa6/0x7f0 [ 449.580460][T10688] __kmalloc_node_track_caller+0xa0/0x240 [ 449.586194][T10688] kstrdup_const+0x56/0x90 [ 449.590632][T10688] __kernfs_new_node+0xa6/0x7f0 [ 449.595490][T10688] ? kernfs_new_node+0x250/0x250 [ 449.600440][T10688] ? sysfs_do_create_link_sd+0x75/0x110 [ 449.605991][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 449.611027][T10688] kernfs_new_node+0x148/0x250 [ 449.615798][T10688] kernfs_create_link+0xa3/0x200 [ 449.620743][T10688] sysfs_do_create_link_sd+0x83/0x110 [ 449.626125][T10688] driver_sysfs_add+0xda/0x260 [ 449.630898][T10688] really_probe+0x13f/0xb40 [ 449.635406][T10688] ? pm_runtime_barrier+0x147/0x1c0 [ 449.640620][T10688] __driver_probe_device+0x1f5/0x390 [ 449.645920][T10688] driver_probe_device+0x4f/0x420 [ 449.650954][T10688] __driver_attach+0x43d/0x6c0 [ 449.655723][T10688] ? driver_attach+0x40/0x40 [ 449.660331][T10688] bus_for_each_dev+0x182/0x1f0 [ 449.665193][T10688] ? kobject_add+0x230/0x230 [ 449.669789][T10688] ? bus_remove_file+0xd0/0xd0 [ 449.674557][T10688] ? do_raw_spin_unlock+0x11d/0x230 [ 449.679761][T10688] bus_add_driver+0x324/0x5d0 [ 449.684445][T10688] driver_register+0x32d/0x430 [ 449.689217][T10688] usb_gadget_register_driver_owner+0xf5/0x260 [ 449.695388][T10688] raw_ioctl+0x13a0/0x3cd0 [ 449.699823][T10688] ? __kmem_cache_free+0xb6/0x200 [ 449.704876][T10688] ? tomoyo_path_number_perm+0x205/0x650 [ 449.710527][T10688] ? tomoyo_path_number_perm+0x5a4/0x650 [ 449.716175][T10688] ? tomoyo_path_number_perm+0x205/0x650 [ 449.721814][T10688] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 449.727277][T10688] ? make_qualifier+0x3b0/0x3b0 [ 449.732164][T10688] ? __fget_files+0x28/0x460 [ 449.736776][T10688] ? bpf_lsm_file_ioctl+0x5/0x10 [ 449.741723][T10688] ? security_file_ioctl+0x7c/0xa0 [ 449.746843][T10688] ? make_qualifier+0x3b0/0x3b0 [ 449.751706][T10688] __se_sys_ioctl+0xfa/0x170 [ 449.756307][T10688] do_syscall_64+0x4c/0xa0 [ 449.760736][T10688] ? clear_bhb_loop+0x60/0xb0 [ 449.765420][T10688] ? clear_bhb_loop+0x60/0xb0 [ 449.770108][T10688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.776006][T10688] RIP: 0033:0x7f6ad739ddeb [ 449.780429][T10688] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 449.800039][T10688] RSP: 002b:00007f6ad81c4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.808461][T10688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6ad739ddeb [ 449.816445][T10688] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 449.824414][T10688] RBP: 00007f6ad81c5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 449.832407][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.840395][T10688] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.848389][T10688] [ 449.873053][T10697] netlink: 'syz.3.1841': attribute type 10 has an invalid length. [ 449.894203][T10697] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1841'. [ 449.950535][T10688] really_probe: driver_sysfs_add(gadget.0) failed [ 449.950985][T10695] device bridge11 entered promiscuous mode [ 449.961181][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.011346][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.310633][T10705] device syzkaller0 entered promiscuous mode [ 450.462179][T10709] loop3: detected capacity change from 0 to 1024 [ 450.475325][T10709] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.502579][T10709] EXT4-fs: Ignoring removed oldalloc option [ 450.546123][T10709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 450.570377][T10709] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.777729][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 450.851371][T10717] device syzkaller0 entered promiscuous mode [ 451.366016][T10734] loop5: detected capacity change from 0 to 256 [ 451.540689][ T27] audit: type=1800 audit(1788661371.915:14): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1853" name="bus" dev="loop5" ino=1048604 res=0 errno=0 [ 451.649634][ T27] audit: type=1804 audit(1788661371.915:15): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1853" name="/newroot/300/file0/bus" dev="loop5" ino=1048604 res=1 errno=0 [ 452.371966][T10746] netlink: 'syz.2.1857': attribute type 10 has an invalid length. [ 452.426019][T10747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1857'. [ 452.635416][T10750] device syzkaller0 entered promiscuous mode [ 453.106789][T10763] loop2: detected capacity change from 0 to 256 [ 453.442732][T10770] device bridge10 entered promiscuous mode [ 453.529500][T10769] device syzkaller0 entered promiscuous mode [ 455.342831][T10784] device syzkaller0 entered promiscuous mode [ 456.131006][T10792] netlink: 'syz.5.1876': attribute type 10 has an invalid length. [ 456.181426][T10792] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1876'. [ 456.849708][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1881'. [ 457.148841][T10809] loop1: detected capacity change from 0 to 256 [ 457.379507][ T27] audit: type=1800 audit(1788661377.755:16): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1883" name="bus" dev="loop1" ino=1048605 res=0 errno=0 [ 457.692460][ T27] audit: type=1804 audit(1788661377.755:17): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1883" name="/newroot/381/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 458.881185][T10828] device syzkaller0 entered promiscuous mode [ 459.881510][T10841] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 459.925582][T10841] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1893'. [ 460.935872][T10852] loop5: detected capacity change from 0 to 512 [ 460.996254][T10852] EXT4-fs: Ignoring removed oldalloc option [ 461.097366][T10852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 461.405884][ T5595] EXT4-fs (loop5): unmounting filesystem. [ 468.578509][T10858] loop1: detected capacity change from 0 to 1024 [ 468.604102][T10860] device syzkaller0 entered promiscuous mode [ 468.654294][T10858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 468.734952][T10858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 468.766147][T10858] System zones: 0-1, 3-12 [ 468.786751][T10858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 469.110108][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 469.906732][T10876] device syzkaller0 entered promiscuous mode [ 471.153772][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.347716][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.503205][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.626806][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=6 req=1897 state=1 status=67 (errno 9: Bad file descriptor) [ 473.229960][ T47] device hsr_slave_0 left promiscuous mode [ 473.327740][ T47] device hsr_slave_1 left promiscuous mode [ 473.346925][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.386742][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.429488][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.449999][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.458020][ T47] device bridge_slave_1 left promiscuous mode [ 473.470753][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.479982][ T47] device bridge_slave_0 left promiscuous mode [ 473.491713][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.546963][ T47] device veth1_macvtap left promiscuous mode [ 473.555603][ T47] device veth0_macvtap left promiscuous mode [ 473.567160][ T47] device veth1_vlan left promiscuous mode [ 473.577198][ T47] device veth0_vlan left promiscuous mode [ 474.744669][ T47] team0 (unregistering): Port device team_slave_1 removed [ 474.776771][ T47] team0 (unregistering): Port device team_slave_0 removed [ 474.809177][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.842823][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.076871][ T47] bond0 (unregistering): Released all slaves [ 475.583398][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.635121][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.684434][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.743295][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.857565][ T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.923228][ T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.992643][ T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.051011][ T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.163379][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.226514][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.265002][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.323649][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.693159][ T47] device hsr_slave_0 left promiscuous mode [ 477.699372][ T47] device hsr_slave_1 left promiscuous mode [ 477.706456][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.714664][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.722541][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.729940][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.737509][ T47] device bridge_slave_1 left promiscuous mode [ 477.743749][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.752175][ T47] device bridge_slave_0 left promiscuous mode [ 477.758330][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.771335][ T47] device hsr_slave_0 left promiscuous mode [ 477.777562][ T47] device hsr_slave_1 left promiscuous mode [ 477.784593][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.795539][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.803360][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.810899][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.818490][ T47] device bridge_slave_1 left promiscuous mode [ 477.824699][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.832866][ T47] device bridge_slave_0 left promiscuous mode [ 477.838988][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.855746][ T47] device hsr_slave_0 left promiscuous mode [ 477.862327][ T47] device hsr_slave_1 left promiscuous mode [ 477.868538][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.876103][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.883745][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.891216][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.898671][ T47] device bridge_slave_1 left promiscuous mode [ 477.905775][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.913839][ T47] device bridge_slave_0 left promiscuous mode [ 477.919996][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.968926][ T47] device veth1_macvtap left promiscuous mode [ 477.975013][ T47] device veth0_macvtap left promiscuous mode [ 477.981231][ T47] device veth1_vlan left promiscuous mode [ 477.987009][ T47] device veth0_vlan left promiscuous mode [ 477.996599][ T47] device veth1_macvtap left promiscuous mode [ 478.002684][ T47] device veth0_macvtap left promiscuous mode [ 478.009319][ T47] device veth1_vlan left promiscuous mode [ 478.015303][ T47] device veth0_vlan left promiscuous mode [ 478.023487][ T47] device veth1_macvtap left promiscuous mode [ 478.029491][ T47] device veth0_macvtap left promiscuous mode [ 478.035862][ T47] device veth1_vlan left promiscuous mode [ 478.042208][ T47] device veth0_vlan left promiscuous mode [ 479.088004][ T47] team0 (unregistering): Port device team_slave_1 removed [ 479.120437][ T47] team0 (unregistering): Port device team_slave_0 removed [ 479.155268][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.187745][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.402423][ T47] bond0 (unregistering): Released all slaves [ 480.013214][ T47] team0 (unregistering): Port device team_slave_1 removed [ 480.047413][ T47] team0 (unregistering): Port device team_slave_0 removed [ 480.078303][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.112908][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.344201][ T47] bond0 (unregistering): Released all slaves [ 481.183561][ T47] team0 (unregistering): Port device team_slave_1 removed [ 481.215161][ T47] team0 (unregistering): Port device team_slave_0 removed [ 481.252729][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.286763][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.504519][ T47] bond0 (unregistering): Released all slaves