last executing test programs: 4m6.031028406s ago: executing program 0 (id=157): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x7fd8}], 0x20}, 0x40040) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)='op', 0x2}], 0x1}, 0x4000080) 4m5.695761654s ago: executing program 0 (id=161): pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="ff46", 0x2}], 0x1, 0x5404, 0x0, 0x2) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x1000}, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fddbdf251a0000000600210062000000180022800400008004"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000429bd7000fedbdf253d00000008000304", @ANYRES32=r3, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0xc815) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2b95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) connect$pppl2tp(r1, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x4, @loopback, 0x101}}}, 0x32) 4m5.237913925s ago: executing program 0 (id=164): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) write(0xffffffffffffffff, &(0x7f0000000140)="5585683f0c00ed70d3ad681481b82237565d0dd863aac1106a957fcc4e4e3bc4573abfb1c84ac1a9e736a272b92d238c996dcb87053ec3659643c502f69a67566c", 0x41) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 4m4.313729357s ago: executing program 0 (id=176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd36, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) 4m4.045711323s ago: executing program 0 (id=180): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000500), &(0x7f0000000280)}, 0x20) mount(0x0, 0x0, 0x0, 0x410, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000340), &(0x7f0000000780)=""/172}, 0x20) 4m3.906932057s ago: executing program 0 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) 3m55.710771843s ago: executing program 1 (id=246): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3c2, 0x5, 0x80, 0x4, 0x1, "f2d3926f00"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) 3m55.40011082s ago: executing program 1 (id=247): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x3f00}) 3m55.161822976s ago: executing program 1 (id=249): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) 3m55.049958669s ago: executing program 1 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000580)='./file0\x00') 3m54.666356867s ago: executing program 1 (id=253): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(r0, &(0x7f00000001c0)="02", 0xbb7, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) 3m54.010221523s ago: executing program 1 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x549b3dbed2d31cc3}, 0x804) 3m53.511905765s ago: executing program 32 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x549b3dbed2d31cc3}, 0x804) 3m48.521072874s ago: executing program 33 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) 8.977554655s ago: executing program 3 (id=1765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='+ 1 0 0', 0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 8.870956327s ago: executing program 3 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f0000000d00)=ANY=[@ANYBLOB='mpol=interleave']) 8.479885727s ago: executing program 3 (id=1768): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2004c011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0x0, 0x6c8) 6.857787035s ago: executing program 4 (id=1776): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 6.703846889s ago: executing program 4 (id=1778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040000", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff00000008000100"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6.400487256s ago: executing program 4 (id=1782): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) set_mempolicy(0x6, 0x0, 0xe0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x1c, 0x0, 0x0) 6.24265621s ago: executing program 3 (id=1783): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 6.053781165s ago: executing program 4 (id=1785): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0xc02, &(0x7f0000002200)=ANY=[], 0x5, 0x2a6, &(0x7f0000000b80)="$eJzs3T9rc2UUAPBzk7xp1CFFXBTBCzo4lbeuLo1SQeykRFAHDbYFSUKhhYAVjJ36CRz9Hn4EFxe/geAquLVD5crNvTdJbfqHNqZgf7/p9D73nOfkPiWZcvLV68P+7kESJ2e/R6uVRG0rtuI8ifWoReWHaAQA8P9xnmXxV3afzEZt+d0AAKtQfP4XHrsXAGA1Pvns8486OzvbH6dpK15tn466SUQMT0fdYr2zH9/EIPbiebTjIiKbKuIPPtzZjkaaW4+3huNRN88cfvlrWb/zZ8QkfzPasb44fzMtTPNfrLpLo7P/rPqjHa8szn/n3/kxHEe3GW+/Odf/RrTjt6/jIAaxG3nuLP/7zTR9P/vx7Lsv8m3y/KQW3bXJfTNZfUVHAgAAAAAAAAAAAAAAAAAAAADAE7CRpkkxvmcyvye/NJmfM+rWLybrG2llfr7PuJoPlFSFivlAWZQjesZZ/FTN13mepmlW3jjLb8RrDT8sAAAAAAAAAAAAAAAAAAAAALmjb4/7vcFg73ApQTUNoPpa/33rbM1deSOO+7369QXX7r7X/LSBvNeFN08nGjQasaTHclvwQt7P0iuvzQ730yiC6mCWutfL7xVFj/u9tFyqHmG/l9y2V6s6uJ/nl5rx0Mayyb/ERXZpKVrTVi9nNZf0NJovLVz6O8uyu9V594/ijMoryWTExt12f1YGC19gHrSunsUv1xe89i2j/tD3HAAAAAAAAAAAAAAAAAAAYLHZl34XLJ7cmFr7z5oCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBWb/f5/FbQi4vKVK8G4TL7pnjJoxuHRI79EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnoB/AgAA//9690rW") bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 5.682366574s ago: executing program 4 (id=1788): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r0, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00100004000000", @ANYRES32, @ANYBLOB="000000e800000000f7010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setrlimit(0x1, &(0x7f0000019080)={0x8, 0xa943}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 5.257556934s ago: executing program 3 (id=1790): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.891828582s ago: executing program 2 (id=1791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.660302298s ago: executing program 2 (id=1792): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1401"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 4.398071794s ago: executing program 2 (id=1794): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da"], 0x0, 0x4e, 0x0, 0x1}, 0x28) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) personality(0x5400004) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0xfffffffffffffffe, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0xc1, 0x761c9023, 0x403, 0x1ff, 0x5, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a2, 0xe}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r0, &(0x7f00000035c0)=[{&(0x7f0000000200)='\"', 0x1}], 0x1) 3.841412138s ago: executing program 5 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x70}}, 0x0) 3.568118504s ago: executing program 5 (id=1798): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet(0x2, 0xa, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) 3.145747664s ago: executing program 2 (id=1799): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2.975904668s ago: executing program 5 (id=1800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.608982547s ago: executing program 5 (id=1801): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 2.417769492s ago: executing program 2 (id=1802): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x8, 0x1) 2.409711702s ago: executing program 3 (id=1803): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1401"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 1.748190957s ago: executing program 34 (id=1803): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1401"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 324.887352ms ago: executing program 2 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000054) 323.890822ms ago: executing program 35 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000054) 281.749353ms ago: executing program 5 (id=1812): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 123.520667ms ago: executing program 5 (id=1807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x70}}, 0x0) 0s ago: executing program 4 (id=1808): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@newtaction={0x100, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0xb4, 0x1, [@m_bpf={0xb0, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x6, 0x0, 0x785}}]}, {0x5d, 0x6, "a8170aa8efda4435392ca0c7a8ddab5f4bb282260238e86f95383b25e3a5ff42ba2e6fe2a567a11d08cb8219da53d0402f5e6040243ddb3c66a2cfd90935df146cc397f33f9f14b53b633f5b8900"/89}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): ] ? __lock_acquire+0x7d80/0x7d80 [ 168.370347][ T7742] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 168.376363][ T7742] ? __lock_acquire+0x7d80/0x7d80 [ 168.381420][ T7742] should_fail_ex+0x394/0x4c0 [ 168.386137][ T7742] should_failslab+0x9/0x20 [ 168.390672][ T7742] slab_pre_alloc_hook+0x59/0x300 [ 168.395734][ T7742] ? copy_net_ns+0x10f/0x5d0 [ 168.400330][ T7742] ? copy_net_ns+0x10f/0x5d0 [ 168.404922][ T7742] __kmem_cache_alloc_node+0x53/0x250 [ 168.410329][ T7742] ? copy_net_ns+0x10f/0x5d0 [ 168.414922][ T7742] __kmalloc+0xa7/0x240 [ 168.419092][ T7742] copy_net_ns+0x10f/0x5d0 [ 168.423526][ T7742] create_new_namespaces+0x3ce/0x700 [ 168.428836][ T7742] unshare_nsproxy_namespaces+0x11a/0x160 [ 168.434563][ T7742] ksys_unshare+0x4fa/0x8f0 [ 168.439073][ T7742] ? sighand_ctor+0x50/0x50 [ 168.443575][ T7742] ? lock_chain_count+0x20/0x20 [ 168.448427][ T7742] ? syscall_enter_from_user_mode+0x25/0x80 [ 168.454325][ T7742] __x64_sys_unshare+0x38/0x40 [ 168.459088][ T7742] do_syscall_64+0x55/0xb0 [ 168.463504][ T7742] ? clear_bhb_loop+0x40/0x90 [ 168.468178][ T7742] ? clear_bhb_loop+0x40/0x90 [ 168.472855][ T7742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.478747][ T7742] RIP: 0033:0x7fccb679e159 [ 168.483158][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.502767][ T7742] RSP: 002b:00007fccb763c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.511182][ T7742] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e159 [ 168.519149][ T7742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 168.527121][ T7742] RBP: 00007fccb6835024 R08: 0000000000000000 R09: 0000000000000000 [ 168.535098][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.543070][ T7742] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007ffccd13d318 [ 168.551056][ T7742] [ 169.233426][ T7773] loop4: detected capacity change from 0 to 512 [ 169.414730][ T7773] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.510783][ T7773] EXT4-fs (loop4): 1 truncate cleaned up [ 169.560945][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.823452][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.190161][ T7798] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 170.341641][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 170.363182][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 170.595140][ T5802] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.617566][ T7809] FAULT_INJECTION: forcing a failure. [ 170.617566][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 170.643806][ T7809] CPU: 1 PID: 7809 Comm: syz.5.602 Not tainted syzkaller #0 [ 170.651156][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.661244][ T7809] Call Trace: [ 170.664547][ T7809] [ 170.667499][ T7809] dump_stack_lvl+0x18c/0x250 [ 170.672208][ T7809] ? show_regs_print_info+0x20/0x20 [ 170.677436][ T7809] ? load_image+0x420/0x420 [ 170.681993][ T7809] ? __lock_acquire+0x7d80/0x7d80 [ 170.687063][ T7809] ? __se_sys_ioctl+0xfd/0x170 [ 170.691864][ T7809] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.697971][ T7809] should_fail_ex+0x394/0x4c0 [ 170.702694][ T7809] should_failslab+0x9/0x20 [ 170.707241][ T7809] slab_pre_alloc_hook+0x59/0x300 [ 170.712335][ T7809] ? kobject_get_path+0xc3/0x2c0 [ 170.717319][ T7809] ? kobject_get_path+0xc3/0x2c0 [ 170.722305][ T7809] __kmem_cache_alloc_node+0x53/0x250 [ 170.727726][ T7809] ? kobject_get_path+0xc3/0x2c0 [ 170.732705][ T7809] __kmalloc+0xa7/0x240 [ 170.736914][ T7809] kobject_get_path+0xc3/0x2c0 [ 170.741735][ T7809] kobject_uevent_env+0x291/0x890 [ 170.746804][ T7809] ? dummy_pullup+0x120/0x120 [ 170.751514][ T7809] ? dummy_udc_set_speed+0xe0/0xe0 [ 170.756670][ T7809] gadget_bind_driver+0x5d3/0x770 [ 170.761749][ T7809] ? gadget_match_driver+0x130/0x130 [ 170.767068][ T7809] really_probe+0x247/0xae0 [ 170.771607][ T7809] ? pm_runtime_barrier+0x14b/0x1c0 [ 170.776846][ T7809] __driver_probe_device+0x1f5/0x390 [ 170.782175][ T7809] driver_probe_device+0x4f/0x420 [ 170.787230][ T7809] __driver_attach+0x444/0x6d0 [ 170.792078][ T7809] bus_for_each_dev+0x235/0x2b0 [ 170.796960][ T7809] ? driver_attach+0x50/0x50 [ 170.801578][ T7809] ? bus_remove_file+0x140/0x140 [ 170.806544][ T7809] ? do_raw_spin_unlock+0x121/0x230 [ 170.811771][ T7809] bus_add_driver+0x340/0x630 [ 170.816483][ T7809] driver_register+0x23a/0x310 [ 170.821275][ T7809] usb_gadget_register_driver_owner+0xf9/0x270 [ 170.827467][ T7809] raw_ioctl+0x1613/0x3d80 [ 170.831917][ T7809] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 170.837589][ T7809] ? tomoyo_path_number_perm+0x217/0x5e0 [ 170.843273][ T7809] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 170.848773][ T7809] ? make_qualifier+0x260/0x260 [ 170.853707][ T7809] ? __fget_files+0x28/0x460 [ 170.858364][ T7809] ? bpf_lsm_file_ioctl+0x9/0x10 [ 170.863339][ T7809] ? security_file_ioctl+0x80/0xa0 [ 170.868491][ T7809] ? make_qualifier+0x260/0x260 [ 170.873367][ T7809] __se_sys_ioctl+0xfd/0x170 [ 170.877998][ T7809] do_syscall_64+0x55/0xb0 [ 170.882447][ T7809] ? clear_bhb_loop+0x40/0x90 [ 170.887153][ T7809] ? clear_bhb_loop+0x40/0x90 [ 170.891865][ T7809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.897787][ T7809] RIP: 0033:0x7fbef799ddeb [ 170.902227][ T7809] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 170.921869][ T7809] RSP: 002b:00007fbef87fff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.930321][ T7809] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbef799ddeb [ 170.938327][ T7809] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 170.946334][ T7809] RBP: 00007fbef8800fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 170.954337][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.962341][ T7809] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 170.970380][ T7809] [ 171.064521][ T5802] usb 5-1: device descriptor read/64, error -71 [ 171.154205][ T7818] random: crng reseeded on system resumption [ 171.164740][ T28] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.334435][ T28] usb 6-1: device descriptor read/64, error -71 [ 171.354417][ T5802] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.554542][ T5802] usb 5-1: device descriptor read/64, error -71 [ 171.624625][ T28] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.685849][ T5802] usb usb5-port1: attempt power cycle [ 171.784572][ T28] usb 6-1: device descriptor read/64, error -71 [ 171.914683][ T28] usb usb6-port1: attempt power cycle [ 172.124515][ T5802] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.181845][ T7848] loop2: detected capacity change from 0 to 128 [ 172.200856][ T5802] usb 5-1: device descriptor read/8, error -71 [ 172.246832][ T7848] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 172.261680][ T7848] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.344343][ T28] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 172.396658][ T28] usb 6-1: device descriptor read/8, error -71 [ 172.457151][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.501484][ T5802] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 172.565011][ T5802] usb 5-1: device descriptor read/8, error -71 [ 172.684759][ T5802] usb usb5-port1: unable to enumerate USB device [ 172.704586][ T28] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.765563][ T28] usb 6-1: device descriptor read/8, error -71 [ 172.904924][ T28] usb usb6-port1: unable to enumerate USB device [ 172.976744][ T7872] FAULT_INJECTION: forcing a failure. [ 172.976744][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 172.993804][ T7872] CPU: 1 PID: 7872 Comm: syz.3.617 Not tainted syzkaller #0 [ 173.001157][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.011250][ T7872] Call Trace: [ 173.014565][ T7872] [ 173.017537][ T7872] dump_stack_lvl+0x18c/0x250 [ 173.022269][ T7872] ? show_regs_print_info+0x20/0x20 [ 173.027517][ T7872] ? load_image+0x420/0x420 [ 173.032072][ T7872] ? __might_sleep+0xe0/0xe0 [ 173.036705][ T7872] ? __lock_acquire+0x7d80/0x7d80 [ 173.041785][ T7872] should_fail_ex+0x394/0x4c0 [ 173.046524][ T7872] should_failslab+0x9/0x20 [ 173.051095][ T7872] slab_pre_alloc_hook+0x59/0x300 [ 173.056180][ T7872] ? __lock_acquire+0x7d80/0x7d80 [ 173.061253][ T7872] ? do_raw_spin_lock+0x11f/0x2b0 [ 173.066328][ T7872] ? qdisc_get_rtab+0x105/0x470 [ 173.071236][ T7872] __kmem_cache_alloc_node+0x53/0x250 [ 173.076682][ T7872] ? qdisc_get_rtab+0x105/0x470 [ 173.081596][ T7872] kmalloc_trace+0x2a/0xe0 [ 173.086086][ T7872] qdisc_get_rtab+0x105/0x470 [ 173.090823][ T7872] tcf_police_init+0x5b9/0x1530 [ 173.095721][ T7872] ? tc_ctl_action+0x43f/0xbc0 [ 173.100519][ T7872] ? rtnetlink_rcv_msg+0x843/0xf90 [ 173.105682][ T7872] ? netlink_rcv_skb+0x235/0x4c0 [ 173.110662][ T7872] ? ____sys_sendmsg+0x61b/0x980 [ 173.115791][ T7872] ? tcf_police_cleanup+0x60/0x60 [ 173.120908][ T7872] ? __asan_memcpy+0x40/0x70 [ 173.125560][ T7872] tcf_action_init_1+0x458/0x6d0 [ 173.130553][ T7872] ? tc_action_load_ops+0x540/0x540 [ 173.135796][ T7872] ? _raw_read_unlock+0x28/0x40 [ 173.140691][ T7872] ? tc_action_load_ops+0x233/0x540 [ 173.145958][ T7872] ? __skb_flow_dissect+0x1eb/0x6e70 [ 173.151300][ T7872] ? __nla_parse+0x40/0x50 [ 173.155779][ T7872] tcf_action_init+0x287/0x970 [ 173.160609][ T7872] ? tcf_action_init_1+0x6d0/0x6d0 [ 173.165805][ T7872] ? __nla_validate+0x50/0x50 [ 173.170554][ T7872] tc_ctl_action+0x43f/0xbc0 [ 173.175216][ T7872] ? tca_get_fill+0x550/0x550 [ 173.179956][ T7872] ? trace_raw_output_contention_end+0xd0/0xd0 [ 173.186233][ T7872] ? tca_get_fill+0x550/0x550 [ 173.190959][ T7872] rtnetlink_rcv_msg+0x843/0xf90 [ 173.195945][ T7872] ? rtnetlink_rcv_msg+0x220/0xf90 [ 173.201111][ T7872] ? rtnetlink_bind+0x80/0x80 [ 173.205841][ T7872] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 173.211868][ T7872] ? lock_chain_count+0x20/0x20 [ 173.216769][ T7872] ? __local_bh_enable_ip+0x13a/0x1c0 [ 173.222216][ T7872] ? lockdep_hardirqs_on+0x98/0x150 [ 173.227468][ T7872] ? __local_bh_enable_ip+0x13a/0x1c0 [ 173.232882][ T7872] ? _local_bh_enable+0xa0/0xa0 [ 173.237802][ T7872] ? __dev_queue_xmit+0x272/0x37e0 [ 173.242969][ T7872] ? __dev_queue_xmit+0x1329/0x37e0 [ 173.248246][ T7872] ? __dev_queue_xmit+0x272/0x37e0 [ 173.253426][ T7872] ? ref_tracker_free+0x686/0x830 [ 173.258483][ T7872] netlink_rcv_skb+0x235/0x4c0 [ 173.263253][ T7872] ? rtnetlink_bind+0x80/0x80 [ 173.267959][ T7872] ? netlink_ack+0x1160/0x1160 [ 173.272775][ T7872] ? __lock_acquire+0x7d80/0x7d80 [ 173.277765][ T7878] FAULT_INJECTION: forcing a failure. [ 173.277765][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 173.290436][ T7872] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.290480][ T7872] netlink_unicast+0x7b1/0x930 [ 173.290518][ T7872] netlink_sendmsg+0x8d0/0xbf0 [ 173.290545][ T7872] ? netlink_getsockopt+0x590/0x590 [ 173.290567][ T7872] ? apparmor_socket_sendmsg+0x8e/0x330 [ 173.290591][ T7872] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 173.290615][ T7872] ? security_socket_sendmsg+0x80/0xa0 [ 173.290631][ T7872] ? netlink_getsockopt+0x590/0x590 [ 173.290648][ T7872] ____sys_sendmsg+0x61b/0x980 [ 173.337179][ T7872] ? __asan_memset+0x22/0x40 [ 173.341807][ T7872] ? __sys_sendmsg_sock+0x30/0x30 [ 173.346852][ T7872] ? __import_iovec+0x5f2/0x850 [ 173.351731][ T7872] ? import_iovec+0x73/0xa0 [ 173.356267][ T7872] ___sys_sendmsg+0x2a6/0x360 [ 173.360981][ T7872] ? __sys_sendmsg+0x2b0/0x2b0 [ 173.365807][ T7872] __se_sys_sendmsg+0x1d0/0x2c0 [ 173.370691][ T7872] ? __x64_sys_sendmsg+0x80/0x80 [ 173.375680][ T7872] ? lockdep_hardirqs_on+0x98/0x150 [ 173.380920][ T7872] do_syscall_64+0x55/0xb0 [ 173.385354][ T7872] ? clear_bhb_loop+0x40/0x90 [ 173.390045][ T7872] ? clear_bhb_loop+0x40/0x90 [ 173.394734][ T7872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.400637][ T7872] RIP: 0033:0x7effe919e159 [ 173.405058][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.424681][ T7872] RSP: 002b:00007effea0e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.433201][ T7872] RAX: ffffffffffffffda RBX: 00007effe9425fa0 RCX: 00007effe919e159 [ 173.441199][ T7872] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 173.449189][ T7872] RBP: 00007effe9235024 R08: 0000000000000000 R09: 0000000000000000 [ 173.457174][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.465187][ T7872] R13: 00007effe9426038 R14: 00007effe9425fa0 R15: 00007ffe13cf6768 [ 173.473192][ T7872] [ 173.476219][ T7878] CPU: 0 PID: 7878 Comm: syz.2.619 Not tainted syzkaller #0 [ 173.483534][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.493624][ T7878] Call Trace: [ 173.496942][ T7878] [ 173.499904][ T7878] dump_stack_lvl+0x18c/0x250 [ 173.504621][ T7878] ? show_regs_print_info+0x20/0x20 [ 173.510030][ T7878] ? load_image+0x420/0x420 [ 173.514557][ T7878] ? __might_sleep+0xe0/0xe0 [ 173.519171][ T7878] ? __lock_acquire+0x7d80/0x7d80 [ 173.524382][ T7878] should_fail_ex+0x394/0x4c0 [ 173.529089][ T7878] should_failslab+0x9/0x20 [ 173.533601][ T7878] slab_pre_alloc_hook+0x59/0x300 [ 173.538633][ T7878] ? call_usermodehelper_setup+0x8e/0x260 [ 173.544364][ T7878] __kmem_cache_alloc_node+0x53/0x250 [ 173.549748][ T7878] ? call_usermodehelper_setup+0x8e/0x260 [ 173.555469][ T7878] kmalloc_trace+0x2a/0xe0 [ 173.559895][ T7878] call_usermodehelper_setup+0x8e/0x260 [ 173.565440][ T7878] ? __request_module+0x600/0x600 [ 173.570469][ T7878] __request_module+0x3bb/0x600 [ 173.575322][ T7878] ? __lock_acquire+0x7d80/0x7d80 [ 173.580354][ T7878] ? module_enforce_rwx_sections+0x150/0x150 [ 173.586339][ T7878] ? mutex_lock_nested+0x20/0x20 [ 173.591380][ T7878] ? simple_fill_super+0x584/0x650 [ 173.596492][ T7878] bpf_fill_super+0x1d7/0x700 [ 173.601175][ T7878] ? bpf_get_tree+0x20/0x20 [ 173.605685][ T7878] ? sget_fc+0x7f5/0x8d0 [ 173.609922][ T7878] ? kill_litter_super+0xb0/0xb0 [ 173.614856][ T7878] ? bpf_get_tree+0x20/0x20 [ 173.619361][ T7878] get_tree_nodev+0xb5/0x140 [ 173.623953][ T7878] vfs_get_tree+0x8c/0x280 [ 173.628398][ T7878] vfs_cmd_create+0xe3/0x230 [ 173.632997][ T7878] __se_sys_fsconfig+0x70a/0x850 [ 173.637941][ T7878] ? __x64_sys_fsconfig+0xc0/0xc0 [ 173.642983][ T7878] ? lockdep_hardirqs_on+0x98/0x150 [ 173.648183][ T7878] ? __x64_sys_fsconfig+0x20/0xc0 [ 173.653212][ T7878] do_syscall_64+0x55/0xb0 [ 173.657627][ T7878] ? clear_bhb_loop+0x40/0x90 [ 173.662310][ T7878] ? clear_bhb_loop+0x40/0x90 [ 173.666989][ T7878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.672880][ T7878] RIP: 0033:0x7fab88b9e159 [ 173.677294][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.697074][ T7878] RSP: 002b:00007fab89b15028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 173.705486][ T7878] RAX: ffffffffffffffda RBX: 00007fab88e25fa0 RCX: 00007fab88b9e159 [ 173.713454][ T7878] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 173.721430][ T7878] RBP: 00007fab88c35024 R08: 0000000000000000 R09: 0000000000000000 [ 173.729425][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.737424][ T7878] R13: 00007fab88e26038 R14: 00007fab88e25fa0 R15: 00007ffd9da4dba8 [ 173.745417][ T7878] [ 174.121829][ T7895] loop4: detected capacity change from 0 to 512 [ 174.198283][ T7895] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.239005][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 174.263160][ T7895] EXT4-fs (loop4): 1 truncate cleaned up [ 174.299777][ T7895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.394422][ T7895] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.625: inode #2: comm syz.4.625: iget: illegal inode # [ 174.469089][ T7895] EXT4-fs (loop4): Remounting filesystem read-only [ 174.487068][ T7912] FAULT_INJECTION: forcing a failure. [ 174.487068][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 174.520874][ T7912] CPU: 0 PID: 7912 Comm: syz.2.628 Not tainted syzkaller #0 [ 174.528222][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.538309][ T7912] Call Trace: [ 174.541704][ T7912] [ 174.544669][ T7912] dump_stack_lvl+0x18c/0x250 [ 174.549391][ T7912] ? show_regs_print_info+0x20/0x20 [ 174.549656][ T7913] loop5: detected capacity change from 0 to 2048 [ 174.554607][ T7912] ? load_image+0x420/0x420 [ 174.554678][ T7912] ? __might_sleep+0xe0/0xe0 [ 174.570110][ T7913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.576743][ T7912] ? __lock_acquire+0x7d80/0x7d80 [ 174.581809][ T7912] should_fail_ex+0x394/0x4c0 [ 174.586536][ T7912] should_failslab+0x9/0x20 [ 174.591080][ T7912] slab_pre_alloc_hook+0x59/0x300 [ 174.596146][ T7912] kmem_cache_alloc_lru+0x4d/0x2b0 [ 174.601384][ T7912] ? __d_alloc+0x31/0x710 [ 174.605735][ T7912] __d_alloc+0x31/0x710 [ 174.609907][ T7912] d_alloc+0x4a/0x250 [ 174.613913][ T7912] lookup_one_qstr_excl+0xca/0x250 [ 174.619053][ T7912] filename_create+0x246/0x450 [ 174.623829][ T7912] ? kern_path_create+0x50/0x50 [ 174.628679][ T7912] ? __virt_addr_valid+0x10c/0x380 [ 174.633798][ T7912] ? __virt_addr_valid+0x10c/0x380 [ 174.638919][ T7912] do_symlinkat+0xc5/0x400 [ 174.643379][ T7912] ? vfs_symlink+0x2b0/0x2b0 [ 174.647975][ T7912] ? getname_flags+0x20a/0x500 [ 174.652745][ T7912] __x64_sys_symlink+0x7e/0x90 [ 174.657509][ T7912] do_syscall_64+0x55/0xb0 [ 174.661934][ T7912] ? clear_bhb_loop+0x40/0x90 [ 174.666618][ T7912] ? clear_bhb_loop+0x40/0x90 [ 174.671301][ T7912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.677204][ T7912] RIP: 0033:0x7fab88b9e159 [ 174.681619][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.701318][ T7912] RSP: 002b:00007fab89b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 174.709763][ T7912] RAX: ffffffffffffffda RBX: 00007fab88e25fa0 RCX: 00007fab88b9e159 [ 174.717740][ T7912] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 00002000000006c0 [ 174.725710][ T7912] RBP: 00007fab88c35024 R08: 0000000000000000 R09: 0000000000000000 [ 174.733679][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.741647][ T7912] R13: 00007fab88e26038 R14: 00007fab88e25fa0 R15: 00007ffd9da4dba8 [ 174.749632][ T7912] [ 174.782672][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.810629][ T7913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.898061][ T7913] EXT4-fs error (device loop5): empty_inline_dir:1875: inode #12: block 5: comm syz.5.629: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 174.994088][ T7921] program syz.3.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.039139][ T7913] EXT4-fs (loop5): Remounting filesystem read-only [ 175.074120][ T7913] EXT4-fs warning (device loop5): empty_inline_dir:1882: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 175.217193][ T7930] loop3: detected capacity change from 0 to 128 [ 175.245401][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.280208][ T7930] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 175.488800][ T7937] netem: change failed [ 176.697351][ T7977] loop5: detected capacity change from 0 to 1024 [ 176.734160][ T7977] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 176.869683][ T7977] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.647: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.885210][ T7977] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 176.893612][ T7977] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.647: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.920249][ T7977] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 176.929669][ T7977] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.647: Failed to acquire dquot type 0 [ 176.944958][ T7977] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 176.957844][ T7977] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.647: mark_inode_dirty error [ 176.981538][ T7977] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 176.992398][ T7977] EXT4-fs (loop5): 1 orphan inode deleted [ 177.011231][ T7977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.146238][ T3473] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 177.233089][ T3473] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 177.241813][ T3473] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 177.386682][ T7986] loop2: detected capacity change from 0 to 128 [ 177.440713][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.514610][ T6613] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 177.556251][ T6613] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 177.573950][ T6613] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 177.643760][ T7992] md: array md0 already has disks! [ 177.816172][ T8000] autofs4:pid:8000:autofs_fill_super: called with bogus options [ 178.173803][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 178.293413][ T8014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.401193][ T8021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.430761][ T8021] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 178.460239][ T8021] bond1: (slave gre2): Error -95 calling set_mac_address [ 178.532431][ T8022] macvlan2: entered promiscuous mode [ 178.571488][ T8022] macvlan2: entered allmulticast mode [ 178.600786][ T8022] bond1: entered promiscuous mode [ 178.623370][ T8022] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.628068][ T8030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.665'. [ 178.643380][ T8022] bond1: left promiscuous mode [ 180.219959][ T8062] autofs4:pid:8062:autofs_fill_super: called with bogus options [ 180.369477][ T8062] loop4: detected capacity change from 0 to 256 [ 180.397590][ T8062] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.264688][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 181.719812][ T8133] loop5: detected capacity change from 0 to 512 [ 181.855447][ T27] audit: type=1800 audit(1788660954.529:38): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.695" name="bus" dev="loop5" ino=1048645 res=0 errno=0 [ 182.089541][ T8143] syz.5.695: attempt to access beyond end of device [ 182.089541][ T8143] loop5: rw=34817, sector=336, nr_sectors = 896 limit=512 [ 182.125625][ T8149] netlink: 762 bytes leftover after parsing attributes in process `syz.3.699'. [ 182.999725][ T8174] netlink: 48 bytes leftover after parsing attributes in process `syz.5.705'. [ 183.041857][ T8174] FAULT_INJECTION: forcing a failure. [ 183.041857][ T8174] name fail_futex, interval 1, probability 0, space 0, times 1 [ 183.076643][ T8174] CPU: 0 PID: 8174 Comm: syz.5.705 Not tainted syzkaller #0 [ 183.083995][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.094079][ T8174] Call Trace: [ 183.097380][ T8174] [ 183.100332][ T8174] dump_stack_lvl+0x18c/0x250 [ 183.105080][ T8174] ? show_regs_print_info+0x20/0x20 [ 183.110317][ T8174] ? load_image+0x420/0x420 [ 183.114867][ T8174] ? trace_pelt_se_tp+0x39/0x100 [ 183.119851][ T8174] should_fail_ex+0x394/0x4c0 [ 183.124568][ T8174] get_futex_key+0x136/0x1030 [ 183.129413][ T8174] ? futex_setup_timer+0xc0/0xc0 [ 183.134381][ T8174] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 183.140401][ T8174] ? __lock_acquire+0x7d80/0x7d80 [ 183.145454][ T8174] ? preempt_schedule+0xc0/0xd0 [ 183.150349][ T8174] futex_wait_setup+0xbc/0x270 [ 183.155146][ T8174] ? futex_wait_multiple+0x920/0x920 [ 183.160462][ T8174] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 183.166383][ T8174] ? _raw_spin_unlock+0x40/0x40 [ 183.171272][ T8174] futex_wait+0x1bc/0x5c0 [ 183.175636][ T8174] ? futex_wait_setup+0x270/0x270 [ 183.180722][ T8174] do_futex+0x2ff/0x3e0 [ 183.184928][ T8174] ? __ia32_sys_get_robust_list+0x110/0x110 [ 183.190855][ T8174] ? fput+0x154/0x1a0 [ 183.194877][ T8174] __se_sys_futex+0x3a9/0x440 [ 183.199595][ T8174] ? __x64_sys_futex+0xf0/0xf0 [ 183.204401][ T8174] ? __x64_sys_futex+0x21/0xf0 [ 183.209192][ T8174] do_syscall_64+0x55/0xb0 [ 183.213646][ T8174] ? clear_bhb_loop+0x40/0x90 [ 183.218352][ T8174] ? clear_bhb_loop+0x40/0x90 [ 183.223060][ T8174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.228985][ T8174] RIP: 0033:0x7fbef799e159 [ 183.233426][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.253068][ T8174] RSP: 002b:00007fbef88020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 183.261516][ T8174] RAX: ffffffffffffffda RBX: 00007fbef7c25fa8 RCX: 00007fbef799e159 [ 183.269516][ T8174] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbef7c25fa8 [ 183.277518][ T8174] RBP: 00007fbef7c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 183.285515][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.293518][ T8174] R13: 00007fbef7c26038 R14: 00007ffcb51d3230 R15: 00007ffcb51d3318 [ 183.301534][ T8174] [ 183.573958][ T8181] FAULT_INJECTION: forcing a failure. [ 183.573958][ T8181] name failslab, interval 1, probability 0, space 0, times 0 [ 183.624027][ T8181] CPU: 1 PID: 8181 Comm: syz.3.707 Not tainted syzkaller #0 [ 183.631380][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.641466][ T8181] Call Trace: [ 183.644777][ T8181] [ 183.647762][ T8181] dump_stack_lvl+0x18c/0x250 [ 183.652472][ T8181] ? show_regs_print_info+0x20/0x20 [ 183.657699][ T8181] ? load_image+0x420/0x420 [ 183.662233][ T8181] ? __might_sleep+0xe0/0xe0 [ 183.666847][ T8181] ? __lock_acquire+0x7d80/0x7d80 [ 183.671876][ T8181] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 183.677775][ T8181] should_fail_ex+0x394/0x4c0 [ 183.682464][ T8181] should_failslab+0x9/0x20 [ 183.686973][ T8181] slab_pre_alloc_hook+0x59/0x300 [ 183.692003][ T8181] ? pcpu_alloc+0x11e7/0x1880 [ 183.696703][ T8181] ? percpu_ref_init+0xc3/0x340 [ 183.701552][ T8181] __kmem_cache_alloc_node+0x53/0x250 [ 183.706938][ T8181] ? percpu_ref_init+0xc3/0x340 [ 183.711789][ T8181] ? percpu_ref_put+0x230/0x230 [ 183.716637][ T8181] kmalloc_trace+0x2a/0xe0 [ 183.721060][ T8181] percpu_ref_init+0xc3/0x340 [ 183.725739][ T8181] ioctx_alloc+0x20e/0x770 [ 183.730159][ T8181] __se_sys_io_setup+0x7b/0x190 [ 183.735007][ T8181] do_syscall_64+0x55/0xb0 [ 183.739426][ T8181] ? clear_bhb_loop+0x40/0x90 [ 183.744099][ T8181] ? clear_bhb_loop+0x40/0x90 [ 183.748776][ T8181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.754677][ T8181] RIP: 0033:0x7effe919e159 [ 183.759094][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.778702][ T8181] RSP: 002b:00007effea0e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 183.787124][ T8181] RAX: ffffffffffffffda RBX: 00007effe9425fa0 RCX: 00007effe919e159 [ 183.795109][ T8181] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 00000000000004c6 [ 183.803085][ T8181] RBP: 00007effe9235024 R08: 0000000000000000 R09: 0000000000000000 [ 183.811054][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.819024][ T8181] R13: 00007effe9426038 R14: 00007effe9425fa0 R15: 00007ffe13cf6768 [ 183.827009][ T8181] [ 184.020304][ T8191] loop3: detected capacity change from 0 to 512 [ 185.345323][ T8240] x_tables: duplicate entry at hook 3 [ 185.422212][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 185.768566][ T8245] loop4: detected capacity change from 0 to 1024 [ 185.889016][ T8245] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 185.989188][ T8245] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.722: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.004917][ T8245] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 186.013326][ T8245] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.722: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.030884][ T8245] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 186.040027][ T8245] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.722: Failed to acquire dquot type 0 [ 186.053415][ T8245] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 186.064817][ T8245] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.722: mark_inode_dirty error [ 186.078904][ T8245] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 186.089705][ T8245] EXT4-fs (loop4): 1 orphan inode deleted [ 186.101696][ T8245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.177583][ T12] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.201069][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 186.210223][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 186.487290][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.516136][ T6550] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 186.577977][ T6550] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 186.639219][ T6550] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 186.839841][ T8265] loop5: detected capacity change from 0 to 512 [ 186.877534][ T8265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.006372][ T8265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.223869][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.455652][ T790] IPVS: starting estimator thread 0... [ 187.582676][ T8287] IPVS: using max 21 ests per chain, 50400 per kthread [ 187.701076][ T8295] loop3: detected capacity change from 0 to 2048 [ 187.876405][ T8295] loop3: p2 p3 p7 [ 188.593997][ T8322] tmpfs: Bad value for 'mpol' [ 189.016716][ T8310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.298023][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 189.301384][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 189.306567][ T6029] udevd[6029]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 189.703550][ T8345] loop2: detected capacity change from 0 to 1024 [ 189.739346][ T8350] loop3: detected capacity change from 0 to 256 [ 189.755526][ T8345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.825362][ T8350] FAT-fs (loop3): Directory bread(block 64) failed [ 189.848276][ T8350] FAT-fs (loop3): Directory bread(block 65) failed [ 189.856065][ T8350] FAT-fs (loop3): Directory bread(block 66) failed [ 189.874918][ T8345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.897922][ T8350] FAT-fs (loop3): Directory bread(block 67) failed [ 189.941389][ T8350] FAT-fs (loop3): Directory bread(block 68) failed [ 189.955225][ T8357] loop4: detected capacity change from 0 to 128 [ 190.002574][ T8350] FAT-fs (loop3): Directory bread(block 69) failed [ 190.037768][ T8350] FAT-fs (loop3): Directory bread(block 70) failed [ 190.047777][ T8350] FAT-fs (loop3): Directory bread(block 71) failed [ 190.055121][ T8350] FAT-fs (loop3): Directory bread(block 72) failed [ 190.061804][ T8350] FAT-fs (loop3): Directory bread(block 73) failed [ 190.094749][ T8350] syz.3.756: attempt to access beyond end of device [ 190.094749][ T8350] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 190.096510][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.162345][ T8350] syz.3.756: attempt to access beyond end of device [ 190.162345][ T8350] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 190.231490][ T8362] 9pnet_fd: Insufficient options for proto=fd [ 190.272921][ T27] audit: type=1800 audit(1788660962.950:39): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.756" name="file1" dev="loop3" ino=1048648 res=0 errno=0 [ 191.365034][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.372783][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.802823][ T8404] loop5: detected capacity change from 0 to 1024 [ 191.845195][ T8404] EXT4-fs: inline encryption not supported [ 191.909463][ T8404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.974962][ T8404] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.068922][ T8404] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.768: bg 0: block 112: padding at end of block bitmap is not set [ 192.108850][ T8404] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 192.147690][ T8404] EXT4-fs (loop5): This should not happen!! Data will be lost [ 192.147690][ T8404] [ 192.171947][ T8404] EXT4-fs (loop5): Total free blocks count 0 [ 192.192152][ T8404] EXT4-fs (loop5): Free/Dirty block details [ 192.222096][ T8404] EXT4-fs (loop5): free_blocks=0 [ 192.259297][ T8404] EXT4-fs (loop5): dirty_blocks=64 [ 192.271930][ T8404] EXT4-fs (loop5): Block reservation details [ 192.309979][ T8404] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 192.473799][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.876137][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.953484][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.475142][ T8363] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.484403][ T8363] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.493957][ T8363] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.503038][ T8363] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.858288][ T8423] loop5: detected capacity change from 0 to 8192 [ 193.869891][ T8423] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.995508][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.003262][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.235444][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.775'. [ 194.372188][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378535][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.508868][ T8433] loop5: detected capacity change from 0 to 256 [ 194.684298][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.755520][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.784850][ T27] audit: type=1326 audit(1788660967.460:40): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8437 comm="syz.4.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccb679e159 code=0x0 [ 195.377436][ T8374] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.401719][ T8374] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.428054][ T8374] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.447142][ T8374] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.742069][ T8436] syz_tun: entered allmulticast mode [ 195.787545][ T8439] dvmrp8: entered allmulticast mode [ 195.818057][ T8436] syz_tun: left allmulticast mode [ 196.776513][ T8480] loop3: detected capacity change from 0 to 256 [ 197.365857][ T8490] syz.5.794 (8490) used greatest stack depth: 17400 bytes left [ 197.440955][ T8495] FAULT_INJECTION: forcing a failure. [ 197.440955][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.480247][ T8495] CPU: 0 PID: 8495 Comm: syz.2.795 Not tainted syzkaller #0 [ 197.487605][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.497690][ T8495] Call Trace: [ 197.500994][ T8495] [ 197.503947][ T8495] dump_stack_lvl+0x18c/0x250 [ 197.508662][ T8495] ? show_regs_print_info+0x20/0x20 [ 197.513890][ T8495] ? load_image+0x420/0x420 [ 197.518420][ T8495] ? __might_fault+0xaa/0x120 [ 197.523128][ T8495] ? __lock_acquire+0x7d80/0x7d80 [ 197.528188][ T8495] should_fail_ex+0x394/0x4c0 [ 197.532903][ T8495] _copy_from_user+0x2f/0xe0 [ 197.537877][ T8495] core_sys_select+0x680/0xa80 [ 197.542693][ T8495] ? poll_select_set_timeout+0x150/0x150 [ 197.548411][ T8495] ? sigprocmask+0x190/0x190 [ 197.553040][ T8495] __se_sys_pselect6+0x272/0x340 [ 197.558027][ T8495] ? __x64_sys_pselect6+0xf0/0xf0 [ 197.563097][ T8495] ? __x64_sys_pselect6+0x21/0xf0 [ 197.568162][ T8495] do_syscall_64+0x55/0xb0 [ 197.572609][ T8495] ? clear_bhb_loop+0x40/0x90 [ 197.577309][ T8495] ? clear_bhb_loop+0x40/0x90 [ 197.582022][ T8495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.587941][ T8495] RIP: 0033:0x7fab88b9e159 [ 197.592365][ T8495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.612148][ T8495] RSP: 002b:00007fab89b15028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 197.621026][ T8495] RAX: ffffffffffffffda RBX: 00007fab88e25fa0 RCX: 00007fab88b9e159 [ 197.629010][ T8495] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.637336][ T8495] RBP: 00007fab88c35024 R08: 0000200000000280 R09: 0000000000000000 [ 197.645310][ T8495] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 197.653277][ T8495] R13: 00007fab88e26038 R14: 00007fab88e25fa0 R15: 00007ffd9da4dba8 [ 197.661259][ T8495] [ 197.745965][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 198.887555][ T8537] syzkaller1: entered promiscuous mode [ 198.893891][ T8537] syzkaller1: entered allmulticast mode [ 199.979610][ T8569] loop4: detected capacity change from 0 to 512 [ 200.132840][ T8569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.175554][ T8569] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.199340][ T8577] netlink: 100 bytes leftover after parsing attributes in process `syz.2.823'. [ 201.640894][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 201.647618][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 203.522083][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.545548][ T8626] loop5: detected capacity change from 0 to 256 [ 204.689708][ T8626] FAT-fs (loop5): bogus number of directory entries (58930) [ 204.730964][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 204.781163][ T8626] FAT-fs (loop5): Can't find a valid FAT filesystem [ 205.482119][ T8417] page_pool_release_retry() stalled pool shutdown 1 inflight 121 sec [ 205.484797][ T8629] bridge_slave_1 (unregistering): left allmulticast mode [ 205.497332][ T8629] bridge_slave_1 (unregistering): left promiscuous mode [ 205.504463][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.766802][ T8647] loop4: detected capacity change from 0 to 512 [ 205.811387][ T8647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.818153][ T8647] EXT4-fs: Ignoring removed i_version option [ 205.923232][ T8647] EXT4-fs (loop4): 1 orphan inode deleted [ 205.950387][ T8647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.157210][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.890572][ T8678] loop5: detected capacity change from 0 to 512 [ 206.944664][ T8678] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 207.224453][ T8685] loop2: detected capacity change from 0 to 1024 [ 207.243502][ T8685] EXT4-fs: Ignoring removed bh option [ 207.283813][ T8685] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.367483][ T8685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.495170][ T8685] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.862: Abort forced by user [ 207.537846][ T8685] EXT4-fs (loop2): Remounting filesystem read-only [ 207.581222][ T8685] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 207.713614][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.338547][ T8728] loop2: detected capacity change from 0 to 256 [ 210.837791][ T8736] FAULT_INJECTION: forcing a failure. [ 210.837791][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 210.879924][ T8736] CPU: 1 PID: 8736 Comm: syz.3.878 Not tainted syzkaller #0 [ 210.887276][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.897359][ T8736] Call Trace: [ 210.899215][ T8738] loop4: detected capacity change from 0 to 1024 [ 210.900643][ T8736] [ 210.900655][ T8736] dump_stack_lvl+0x18c/0x250 [ 210.900686][ T8736] ? show_regs_print_info+0x20/0x20 [ 210.900709][ T8736] ? load_image+0x420/0x420 [ 210.900729][ T8736] ? __might_sleep+0xe0/0xe0 [ 210.900755][ T8736] ? __lock_acquire+0x7d80/0x7d80 [ 210.914843][ T8738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.919869][ T8736] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.919908][ T8736] should_fail_ex+0x394/0x4c0 [ 210.919938][ T8736] should_failslab+0x9/0x20 [ 210.919963][ T8736] slab_pre_alloc_hook+0x59/0x300 [ 210.919989][ T8736] ? plist_add+0x3cf/0x490 [ 210.920012][ T8736] ? futex_lock_pi+0x840/0xa00 [ 210.920034][ T8736] __kmem_cache_alloc_node+0x53/0x250 [ 210.920066][ T8736] ? futex_lock_pi+0x840/0xa00 [ 210.920086][ T8736] kmalloc_trace+0x2a/0xe0 [ 210.920115][ T8736] futex_lock_pi+0x840/0xa00 [ 210.920139][ T8736] ? futex_wait_queue+0x138/0x1b0 [ 210.920161][ T8736] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 210.920216][ T8736] ? lockdep_hardirqs_on+0x98/0x150 [ 210.920246][ T8736] do_futex+0x2c8/0x3e0 [ 210.920270][ T8736] ? __ia32_sys_get_robust_list+0x110/0x110 [ 210.920288][ T8736] ? getname_flags+0x277/0x500 [ 210.925565][ T8738] EXT4-fs: Ignoring removed i_version option [ 210.929360][ T8736] ? kmem_cache_free+0xf8/0x290 [ 210.929409][ T8736] __se_sys_futex+0x3a9/0x440 [ 210.936575][ T8738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.940991][ T8736] ? __x64_sys_futex+0xf0/0xf0 [ 210.941026][ T8736] ? __x64_sys_futex+0x21/0xf0 [ 210.941048][ T8736] do_syscall_64+0x55/0xb0 [ 210.941069][ T8736] ? clear_bhb_loop+0x40/0x90 [ 210.941090][ T8736] ? clear_bhb_loop+0x40/0x90 [ 210.941112][ T8736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.941134][ T8736] RIP: 0033:0x7effe919e159 [ 210.941153][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.941171][ T8736] RSP: 002b:00007effea0e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.941192][ T8736] RAX: ffffffffffffffda RBX: 00007effe9425fa0 RCX: 00007effe919e159 [ 210.941206][ T8736] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000000 [ 210.941217][ T8736] RBP: 00007effe9235024 R08: 0000000000000000 R09: 0000000000000001 [ 211.127553][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.135530][ T8736] R13: 00007effe9426038 R14: 00007effe9425fa0 R15: 00007ffe13cf6768 [ 211.143542][ T8736] [ 211.180061][ T8738] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.224738][ T8738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.238048][ T8738] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.260352][ T8738] EXT4-fs (loop4): shut down requested (0) [ 211.312967][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.190460][ T8758] loop4: detected capacity change from 0 to 1024 [ 212.227477][ T8758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 212.245342][ T8758] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.290733][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.471221][ T8730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.680206][ T8765] FAULT_INJECTION: forcing a failure. [ 212.680206][ T8765] name failslab, interval 1, probability 0, space 0, times 0 [ 212.719531][ T8765] CPU: 1 PID: 8765 Comm: syz.5.888 Not tainted syzkaller #0 [ 212.726873][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.736955][ T8765] Call Trace: [ 212.740260][ T8765] [ 212.743214][ T8765] dump_stack_lvl+0x18c/0x250 [ 212.747929][ T8765] ? show_regs_print_info+0x20/0x20 [ 212.753149][ T8765] ? load_image+0x420/0x420 [ 212.757676][ T8765] ? __might_sleep+0xe0/0xe0 [ 212.762300][ T8765] ? __lock_acquire+0x7d80/0x7d80 [ 212.767343][ T8765] should_fail_ex+0x394/0x4c0 [ 212.772041][ T8765] should_failslab+0x9/0x20 [ 212.776564][ T8765] slab_pre_alloc_hook+0x59/0x300 [ 212.781613][ T8765] ? blk_alloc_queue_stats+0x4c/0xf0 [ 212.786905][ T8765] __kmem_cache_alloc_node+0x53/0x250 [ 212.792301][ T8765] ? blk_alloc_queue_stats+0x4c/0xf0 [ 212.797592][ T8765] kmalloc_trace+0x2a/0xe0 [ 212.802035][ T8765] blk_alloc_queue_stats+0x4c/0xf0 [ 212.807165][ T8765] blk_alloc_queue+0xab/0x4c0 [ 212.811861][ T8765] __blk_mq_alloc_disk+0x47/0x190 [ 212.816936][ T8765] ? loop_add+0x2f7/0x990 [ 212.821296][ T8765] loop_add+0x322/0x990 [ 212.825475][ T8765] loop_control_ioctl+0x128/0x590 [ 212.830516][ T8765] ? loop_set_hw_queue_depth+0x110/0x110 [ 212.836164][ T8765] ? bpf_lsm_file_ioctl+0x9/0x10 [ 212.841114][ T8765] ? security_file_ioctl+0x80/0xa0 [ 212.846244][ T8765] ? loop_set_hw_queue_depth+0x110/0x110 [ 212.851894][ T8765] __se_sys_ioctl+0xfd/0x170 [ 212.856498][ T8765] do_syscall_64+0x55/0xb0 [ 212.860920][ T8765] ? clear_bhb_loop+0x40/0x90 [ 212.865609][ T8765] ? clear_bhb_loop+0x40/0x90 [ 212.870301][ T8765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.876202][ T8765] RIP: 0033:0x7fbef799e159 [ 212.880642][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.900275][ T8765] RSP: 002b:00007fbef8802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.908708][ T8765] RAX: ffffffffffffffda RBX: 00007fbef7c25fa0 RCX: 00007fbef799e159 [ 212.916691][ T8765] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 212.924678][ T8765] RBP: 00007fbef7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 212.932660][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.940631][ T8765] R13: 00007fbef7c26038 R14: 00007fbef7c25fa0 R15: 00007ffcb51d3318 [ 212.948627][ T8765] [ 213.174296][ T8771] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 214.272648][ T8784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.290187][ T8784] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 214.349072][ T8784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.361477][ T8784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.378020][ T8784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.385338][ T8784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.397853][ T8784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.416281][ T8784] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.429749][ T8784] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 214.438978][ T8784] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 214.558466][ T8815] FAULT_INJECTION: forcing a failure. [ 214.558466][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.576248][ T8815] CPU: 1 PID: 8815 Comm: syz.4.910 Not tainted syzkaller #0 [ 214.583595][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.593765][ T8815] Call Trace: [ 214.597065][ T8815] [ 214.600016][ T8815] dump_stack_lvl+0x18c/0x250 [ 214.604738][ T8815] ? show_regs_print_info+0x20/0x20 [ 214.609990][ T8815] ? load_image+0x420/0x420 [ 214.614531][ T8815] ? __might_fault+0xaa/0x120 [ 214.619326][ T8815] ? __lock_acquire+0x7d80/0x7d80 [ 214.624393][ T8815] ? __lock_acquire+0x7d80/0x7d80 [ 214.629464][ T8815] should_fail_ex+0x394/0x4c0 [ 214.634225][ T8815] set_fd_set+0x3a/0x90 [ 214.638422][ T8815] core_sys_select+0x8c9/0xa80 [ 214.643246][ T8815] ? poll_select_set_timeout+0x150/0x150 [ 214.648941][ T8815] ? sigprocmask+0x190/0x190 [ 214.653578][ T8815] __se_sys_pselect6+0x272/0x340 [ 214.658561][ T8815] ? __x64_sys_pselect6+0xf0/0xf0 [ 214.663630][ T8815] ? __x64_sys_pselect6+0x21/0xf0 [ 214.668695][ T8815] do_syscall_64+0x55/0xb0 [ 214.673149][ T8815] ? clear_bhb_loop+0x40/0x90 [ 214.677870][ T8815] ? clear_bhb_loop+0x40/0x90 [ 214.682582][ T8815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.688506][ T8815] RIP: 0033:0x7fccb679e159 [ 214.692952][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.712855][ T8815] RSP: 002b:00007fccb763c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 214.721305][ T8815] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e159 [ 214.729304][ T8815] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 214.737304][ T8815] RBP: 00007fccb6835024 R08: 0000200000000280 R09: 0000000000000000 [ 214.745307][ T8815] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 214.753306][ T8815] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007ffccd13d318 [ 214.761326][ T8815] [ 214.790063][ T8823] FAULT_INJECTION: forcing a failure. [ 214.790063][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 214.817020][ T8823] CPU: 0 PID: 8823 Comm: syz.5.911 Not tainted syzkaller #0 [ 214.824366][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.834443][ T8823] Call Trace: [ 214.837748][ T8823] [ 214.840706][ T8823] dump_stack_lvl+0x18c/0x250 [ 214.845418][ T8823] ? show_regs_print_info+0x20/0x20 [ 214.850640][ T8823] ? load_image+0x420/0x420 [ 214.855172][ T8823] ? __might_sleep+0xe0/0xe0 [ 214.859803][ T8823] ? __lock_acquire+0x7d80/0x7d80 [ 214.864863][ T8823] should_fail_ex+0x394/0x4c0 [ 214.869573][ T8823] should_failslab+0x9/0x20 [ 214.874099][ T8823] slab_pre_alloc_hook+0x59/0x300 [ 214.879150][ T8823] ? d_instantiate+0x6f/0x90 [ 214.883764][ T8823] kmem_cache_alloc+0x5a/0x2c0 [ 214.888560][ T8823] ? alloc_empty_file+0x9e/0x1d0 [ 214.893527][ T8823] alloc_empty_file+0x9e/0x1d0 [ 214.898312][ T8823] alloc_file+0x5b/0x600 [ 214.902581][ T8823] alloc_file_pseudo+0x184/0x210 [ 214.907544][ T8823] ? fput+0x1a0/0x1a0 [ 214.911549][ T8823] ? alloc_fd+0x590/0x640 [ 214.915893][ T8823] sock_alloc_file+0xb7/0x280 [ 214.920570][ T8823] __sys_socket+0x140/0x1b0 [ 214.925072][ T8823] __x64_sys_socket+0x7a/0x90 [ 214.929747][ T8823] do_syscall_64+0x55/0xb0 [ 214.934162][ T8823] ? clear_bhb_loop+0x40/0x90 [ 214.938834][ T8823] ? clear_bhb_loop+0x40/0x90 [ 214.943510][ T8823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.949399][ T8823] RIP: 0033:0x7fbef799e159 [ 214.953813][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.973424][ T8823] RSP: 002b:00007fbef8802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 214.981841][ T8823] RAX: ffffffffffffffda RBX: 00007fbef7c25fa0 RCX: 00007fbef799e159 [ 214.989812][ T8823] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 214.997785][ T8823] RBP: 00007fbef7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 215.005753][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.013726][ T8823] R13: 00007fbef7c26038 R14: 00007fbef7c25fa0 R15: 00007ffcb51d3318 [ 215.021709][ T8823] [ 215.116214][ T8829] syzkaller0: entered promiscuous mode [ 215.130549][ T8829] syzkaller0: entered allmulticast mode [ 215.502077][ T8846] loop3: detected capacity change from 0 to 764 [ 215.563339][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 215.590723][ T8848] FAULT_INJECTION: forcing a failure. [ 215.590723][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 215.669127][ T8848] CPU: 1 PID: 8848 Comm: syz.5.927 Not tainted syzkaller #0 [ 215.676473][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.686557][ T8848] Call Trace: [ 215.689862][ T8848] [ 215.692810][ T8848] dump_stack_lvl+0x18c/0x250 [ 215.697521][ T8848] ? show_regs_print_info+0x20/0x20 [ 215.702756][ T8848] ? load_image+0x420/0x420 [ 215.707298][ T8848] ? __lock_acquire+0x7d80/0x7d80 [ 215.712364][ T8848] should_fail_ex+0x394/0x4c0 [ 215.717095][ T8848] should_failslab+0x9/0x20 [ 215.721639][ T8848] slab_pre_alloc_hook+0x59/0x300 [ 215.726710][ T8848] ? lockdep_softirqs_off+0x440/0x440 [ 215.732116][ T8848] kmem_cache_alloc_lru+0x4d/0x2b0 [ 215.737239][ T8848] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 215.742619][ T8848] hugetlbfs_alloc_inode+0xf3/0x140 [ 215.747823][ T8848] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 215.753204][ T8848] new_inode_pseudo+0x63/0x1d0 [ 215.757976][ T8848] new_inode+0x22/0x1d0 [ 215.762138][ T8848] ? resv_map_alloc+0x1c4/0x2c0 [ 215.766997][ T8848] hugetlbfs_get_inode+0x78/0x500 [ 215.772027][ T8848] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.778018][ T8848] hugetlb_file_setup+0x215/0x610 [ 215.783052][ T8848] ksys_mmap_pgoff+0x1e6/0x720 [ 215.787823][ T8848] do_syscall_64+0x55/0xb0 [ 215.792240][ T8848] ? clear_bhb_loop+0x40/0x90 [ 215.796915][ T8848] ? clear_bhb_loop+0x40/0x90 [ 215.801596][ T8848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.807488][ T8848] RIP: 0033:0x7fbef799e159 [ 215.811912][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.831526][ T8848] RSP: 002b:00007fbef8802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 215.839947][ T8848] RAX: ffffffffffffffda RBX: 00007fbef7c25fa0 RCX: 00007fbef799e159 [ 215.847924][ T8848] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 215.855895][ T8848] RBP: 00007fbef7a35024 R08: ffffffffffffffff R09: 0000000000000000 [ 215.863863][ T8848] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 215.871833][ T8848] R13: 00007fbef7c26038 R14: 00007fbef7c25fa0 R15: 00007ffcb51d3318 [ 215.879819][ T8848] [ 216.377046][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 216.439314][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.439476][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.723498][ T8870] loop3: detected capacity change from 0 to 2048 [ 216.826245][ T8874] loop2: detected capacity change from 0 to 512 [ 216.986862][ T8874] EXT4-fs (loop2): 1 orphan inode deleted [ 217.005711][ T8874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.039222][ T6672] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 217.089667][ T8874] ext4 filesystem being mounted at /244/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.119283][ T6672] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 217.209608][ T8881] syzkaller0: entered promiscuous mode [ 217.215312][ T8881] syzkaller0: entered allmulticast mode [ 217.352392][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.503663][ T8890] loop4: detected capacity change from 0 to 512 [ 217.565336][ T8890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.637327][ T8890] EXT4-fs (loop4): 1 truncate cleaned up [ 217.649084][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 217.672807][ T8890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.833953][ T8890] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5960: inode #15: comm syz.4.945: bad extra_isize 62 (inode size 256) [ 217.858899][ T27] audit: type=1800 audit(1788660990.513:41): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 217.932107][ T8890] EXT4-fs (loop4): Remounting filesystem read-only [ 218.094059][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.318125][ T8901] loop2: detected capacity change from 0 to 256 [ 218.467073][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 218.527752][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.534552][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 219.071457][ T27] audit: type=1804 audit(1788660991.743:42): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.948" name="/newroot/247/bus/file0" dev="loop2" ino=1048650 res=1 errno=0 [ 219.459182][ T8911] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 219.694923][ T8914] loop2: detected capacity change from 0 to 512 [ 219.732190][ T8914] ext4: Bad value for 'mb_optimize_scan' [ 220.607503][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.607547][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 221.206265][ T8922] loop5: detected capacity change from 0 to 512 [ 221.256662][ T8922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 221.283023][ T8922] EXT4-fs (loop5): 1 truncate cleaned up [ 221.309934][ T8922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.431663][ T27] audit: type=1800 audit(1788660994.114:43): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.954" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 221.470629][ T8922] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5960: inode #15: comm syz.5.954: bad extra_isize 62 (inode size 256) [ 221.533229][ T8922] EXT4-fs (loop5): Remounting filesystem read-only [ 221.601590][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.780880][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 222.829905][ T8905] bridge_slave_1 (unregistering): left allmulticast mode [ 222.837006][ T8905] bridge_slave_1 (unregistering): left promiscuous mode [ 222.845551][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.860594][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 223.053028][ T8941] FAULT_INJECTION: forcing a failure. [ 223.053028][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 223.078871][ T8941] CPU: 1 PID: 8941 Comm: syz.4.961 Not tainted syzkaller #0 [ 223.086205][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.096278][ T8941] Call Trace: [ 223.099581][ T8941] [ 223.102529][ T8941] dump_stack_lvl+0x18c/0x250 [ 223.107241][ T8941] ? show_regs_print_info+0x20/0x20 [ 223.112473][ T8941] ? load_image+0x420/0x420 [ 223.117015][ T8941] ? __lock_acquire+0x7d80/0x7d80 [ 223.122088][ T8941] should_fail_ex+0x394/0x4c0 [ 223.126814][ T8941] should_failslab+0x9/0x20 [ 223.129938][ T8947] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 223.131336][ T8941] slab_pre_alloc_hook+0x59/0x300 [ 223.146725][ T8941] ? string+0x257/0x290 [ 223.150886][ T8941] ? kasprintf+0xe3/0x140 [ 223.155229][ T8941] ? kasprintf+0xe3/0x140 [ 223.159586][ T8941] __kmem_cache_alloc_node+0x53/0x250 [ 223.165004][ T8941] ? kasprintf+0xe3/0x140 [ 223.169374][ T8941] __kmalloc_node_track_caller+0xa4/0x230 [ 223.175145][ T8941] kvasprintf+0xec/0x1a0 [ 223.179427][ T8941] ? bust_spinlocks+0xd0/0xd0 [ 223.184128][ T8941] ? lockdep_lock+0xf5/0x230 [ 223.188750][ T8941] ? lockdep_unlock+0x146/0x2e0 [ 223.193634][ T8941] kasprintf+0xe3/0x140 [ 223.197826][ T8941] ? kvasprintf_const+0x240/0x240 [ 223.202894][ T8941] ? __raw_spin_lock_init+0x45/0x100 [ 223.208229][ T8941] alloc_workqueue+0x57f/0x1380 [ 223.213094][ T8941] ? __asan_memcpy+0x40/0x70 [ 223.217720][ T8941] ? snprintf+0xe9/0x140 [ 223.221977][ T8941] ? lockdep_init_map_type+0x9c/0x8e0 [ 223.227367][ T8941] ? apply_workqueue_attrs+0x180/0x180 [ 223.232819][ T8941] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 223.238742][ T8941] nci_register_device+0x400/0xa00 [ 223.243873][ T8941] ? nci_free_device+0x90/0x90 [ 223.248662][ T8941] ? __init_waitqueue_head+0xa8/0x140 [ 223.254031][ T8941] virtual_ncidev_open+0x12c/0x1a0 [ 223.259146][ T8941] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 223.264369][ T8941] misc_open+0x326/0x3a0 [ 223.268640][ T8941] chrdev_open+0x58c/0x600 [ 223.273056][ T8941] ? cd_forget+0x160/0x160 [ 223.277472][ T8941] ? fsnotify_perm+0x3ed/0x5e0 [ 223.282249][ T8941] do_dentry_open+0x880/0x14b0 [ 223.287037][ T8941] ? cd_forget+0x160/0x160 [ 223.291450][ T8941] path_openat+0x284f/0x3270 [ 223.296049][ T8941] ? do_sys_openat2+0xda/0x1d0 [ 223.300818][ T8941] ? __x64_sys_openat+0x139/0x160 [ 223.305859][ T8941] ? verify_lock_unused+0x140/0x140 [ 223.311051][ T8941] ? do_filp_open+0x430/0x430 [ 223.315733][ T8941] do_filp_open+0x1f2/0x430 [ 223.320244][ T8941] ? vfs_tmpfile+0x620/0x620 [ 223.324862][ T8941] ? _raw_spin_unlock+0x28/0x40 [ 223.329708][ T8941] ? alloc_fd+0x590/0x640 [ 223.334037][ T8941] do_sys_openat2+0x134/0x1d0 [ 223.338729][ T8941] ? do_sys_open+0xe0/0xe0 [ 223.343176][ T8941] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 223.349159][ T8941] ? lock_chain_count+0x20/0x20 [ 223.354008][ T8941] __x64_sys_openat+0x139/0x160 [ 223.358876][ T8941] do_syscall_64+0x55/0xb0 [ 223.363312][ T8941] ? clear_bhb_loop+0x40/0x90 [ 223.367986][ T8941] ? clear_bhb_loop+0x40/0x90 [ 223.372657][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.378553][ T8941] RIP: 0033:0x7fccb679e159 [ 223.382975][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.402595][ T8941] RSP: 002b:00007fccb763c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.411037][ T8941] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e159 [ 223.419017][ T8941] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 223.427001][ T8941] RBP: 00007fccb6835024 R08: 0000000000000000 R09: 0000000000000000 [ 223.434981][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.442998][ T8941] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007ffccd13d318 [ 223.450995][ T8941] [ 223.460675][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 223.656628][ T8958] loop2: detected capacity change from 0 to 512 [ 223.676466][ T8958] EXT4-fs: Ignoring removed oldalloc option [ 223.746140][ T8958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.794792][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 224.006152][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.034708][ T8973] loop4: detected capacity change from 0 to 512 [ 224.256536][ T8979] netlink: 'syz.2.974': attribute type 21 has an invalid length. [ 224.288053][ T27] audit: type=1326 audit(1788660996.954:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.299411][ T8979] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.393297][ T27] audit: type=1326 audit(1788660996.964:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.461464][ T27] audit: type=1326 audit(1788660996.974:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.532428][ T27] audit: type=1326 audit(1788660996.974:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.536529][ T8987] autofs4:pid:8987:autofs_fill_super: called with bogus options [ 224.607559][ T27] audit: type=1326 audit(1788660996.974:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.698315][ T27] audit: type=1326 audit(1788660996.974:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.775754][ T27] audit: type=1326 audit(1788660996.974:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.874802][ T27] audit: type=1326 audit(1788660996.984:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 224.908584][ T8998] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)' [ 224.976853][ T27] audit: type=1326 audit(1788660996.984:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 225.072904][ T27] audit: type=1326 audit(1788660997.004:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb679e159 code=0x7ffc0000 [ 226.540429][ T9044] program syz.2.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.847858][ T9097] can0: slcan on ttyS3. [ 228.929108][ T9096] can0 (unregistered): slcan off ttyS3. [ 230.206906][ T9123] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 231.580325][ T9157] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 233.404502][ T9189] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 234.633278][ T9211] loop3: detected capacity change from 0 to 512 [ 234.642619][ T9207] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 234.753586][ T9211] EXT4-fs (loop3): 1 orphan inode deleted [ 234.771665][ T12] __quota_error: 4 callbacks suppressed [ 234.771680][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 234.818388][ T9211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.846977][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 234.879563][ T9211] ext4 filesystem being mounted at /276/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.940860][ T9211] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #12: block 13: comm syz.3.1065: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 235.192822][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.226984][ T79] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 235.256621][ T79] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 237.452412][ T9260] loop3: detected capacity change from 0 to 1024 [ 237.702913][ T9260] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 237.753029][ T9260] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1083: lblock 2 mapped to illegal pblock 2 (length 1) [ 237.768809][ T9260] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 237.777205][ T9260] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1083: lblock 0 mapped to illegal pblock 48 (length 1) [ 237.792807][ T9260] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 237.801937][ T9260] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1083: Failed to acquire dquot type 0 [ 237.822769][ T9260] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 237.839403][ T9260] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1083: mark_inode_dirty error [ 237.852171][ T9260] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 237.862839][ T9260] EXT4-fs (loop3): 1 orphan inode deleted [ 237.869993][ T9260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.891541][ T12] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 237.976685][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 238.011417][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 238.112488][ T9270] random: crng reseeded on system resumption [ 238.367425][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.506142][ T5770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 238.741031][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 238.982340][ T5770] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 239.259069][ T9281] tipc: Failed to remove unknown binding: 66,0,0/2886997162:169504280/169504282 [ 239.286454][ T9281] tipc: Failed to remove unknown binding: 66,0,0/2886997162:169504280/169504281 [ 239.631663][ T9286] loop2: detected capacity change from 0 to 512 [ 239.691005][ T9286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.724348][ T9286] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 240.686686][ T9302] loop4: detected capacity change from 0 to 1024 [ 240.795257][ T9302] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 240.880304][ T9302] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.1099: lblock 2 mapped to illegal pblock 2 (length 1) [ 240.896033][ T9302] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 240.904767][ T9302] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.1099: lblock 0 mapped to illegal pblock 48 (length 1) [ 240.924060][ T9302] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 240.933118][ T9302] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1099: Failed to acquire dquot type 0 [ 240.962671][ T9302] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 240.975876][ T9302] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1099: mark_inode_dirty error [ 240.995071][ T9302] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 241.007437][ T9302] EXT4-fs (loop4): 1 orphan inode deleted [ 241.019050][ T9302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.206176][ T4959] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 241.380241][ T4959] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 241.440928][ T4959] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 241.707499][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.736797][ T6550] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 241.795872][ T6550] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 241.831757][ T6550] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 242.116125][ T9316] tipc: Failed to remove unknown binding: 66,0,0/0:2187214255/2187214257 [ 242.124614][ T9316] tipc: Failed to remove unknown binding: 66,0,0/0:2187214255/2187214256 [ 242.604039][ T9333] random: crng reseeded on system resumption [ 242.893814][ T9341] netlink: 'syz.5.1115': attribute type 10 has an invalid length. [ 242.989552][ T9341] team0: Device wg1 is of different type [ 243.621790][ T9349] loop5: detected capacity change from 0 to 1024 [ 243.673710][ T9349] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 243.775083][ T9349] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.1117: lblock 2 mapped to illegal pblock 2 (length 1) [ 243.796343][ T9349] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 243.804759][ T9349] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.1117: lblock 0 mapped to illegal pblock 48 (length 1) [ 243.823494][ T9349] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 243.832443][ T9349] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1117: Failed to acquire dquot type 0 [ 243.848653][ T9349] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 243.862977][ T9349] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1117: mark_inode_dirty error [ 243.892042][ T9349] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 243.902956][ T9349] EXT4-fs (loop5): 1 orphan inode deleted [ 243.915095][ T9349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.990195][ T3473] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 244.006969][ T3473] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 244.030178][ T3473] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 244.154727][ T9333] loop4: detected capacity change from 0 to 512 [ 244.165086][ T9333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.177576][ T9333] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 244.303204][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.315032][ T6001] blk_print_req_error: 179 callbacks suppressed [ 244.315049][ T6001] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.317324][ T6613] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 244.365842][ T6613] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 244.389866][ T6613] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 244.586356][ T9359] tipc: Failed to remove unknown binding: 66,0,0/0:263699652/263699654 [ 244.630342][ T9359] tipc: Failed to remove unknown binding: 66,0,0/0:263699652/263699653 [ 245.011652][ T9365] team0 (unregistering): Port device team_slave_0 removed [ 245.072950][ T9365] team0 (unregistering): Port device team_slave_1 removed [ 245.181937][ T9374] netlink: 'syz.4.1129': attribute type 10 has an invalid length. [ 245.242985][ T9374] team0: Device wg1 is of different type [ 245.866164][ T9383] loop3: detected capacity change from 0 to 1024 [ 245.893572][ T9383] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 245.937042][ T9383] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1130: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.952501][ T9383] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 245.961004][ T9383] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1130: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.977017][ T9383] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 245.986040][ T9383] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1130: Failed to acquire dquot type 0 [ 246.002248][ T9383] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 246.013074][ T9383] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1130: mark_inode_dirty error [ 246.025844][ T9383] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 246.037134][ T9383] EXT4-fs (loop3): 1 orphan inode deleted [ 246.049038][ T9383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.242855][ T11] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 246.263718][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 246.345422][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 246.437378][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.472061][ T5770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 246.500234][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 246.565913][ T5770] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 246.723974][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1137'. [ 246.736475][ T9396] random: crng reseeded on system resumption [ 247.034926][ T9404] team0 (unregistering): Port device team_slave_0 removed [ 247.064259][ T9404] team0 (unregistering): Port device team_slave_1 removed [ 247.162697][ T9412] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 247.669340][ T9424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1150'. [ 248.049190][ T9396] loop3: detected capacity change from 0 to 512 [ 248.067870][ T9396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.099495][ T9396] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 248.194180][ T9441] tipc: Failed to remove unknown binding: 66,0,0/0:2804635758/2804635760 [ 248.210686][ T9441] tipc: Failed to remove unknown binding: 66,0,0/0:2804635758/2804635759 [ 248.598445][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1159'. [ 248.627010][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.634770][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.873152][ T9477] random: crng reseeded on system resumption [ 250.995510][ T9482] loop4: detected capacity change from 0 to 1024 [ 251.016851][ T9482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.056498][ T9482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.317357][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.110335][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1175'. [ 252.672351][ T9477] loop5: detected capacity change from 0 to 512 [ 252.699812][ T9477] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.723415][ T9477] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 254.162998][ T9539] loop2: detected capacity change from 0 to 1024 [ 254.193407][ T9539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.271236][ T9539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.432085][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.656064][ T9553] team0 (unregistering): Port device team_slave_0 removed [ 254.688222][ T9553] team0 (unregistering): Port device team_slave_1 removed [ 254.698568][ T9556] random: crng reseeded on system resumption [ 255.955527][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.961905][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.151792][ T9596] random: crng reseeded on system resumption [ 258.842472][ T9644] random: crng reseeded on system resumption [ 258.881887][ T9645] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 259.564550][ T9672] netlink: 'syz.2.1240': attribute type 83 has an invalid length. [ 259.694674][ T9679] loop3: detected capacity change from 0 to 512 [ 259.789022][ T9679] syz.3.1243: attempt to access beyond end of device [ 259.789022][ T9679] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 259.849232][ T9688] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 259.881185][ T9679] syz.3.1243: attempt to access beyond end of device [ 259.881185][ T9679] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 259.910850][ T9693] random: crng reseeded on system resumption [ 259.917018][ T9688] FAT-fs (loop3): Filesystem has been set read-only [ 259.944311][ T27] audit: type=1800 audit(1788662056.631:58): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1243" name="file2" dev="loop3" ino=1048651 res=0 errno=0 [ 260.847758][ T9693] loop5: detected capacity change from 0 to 512 [ 260.886223][ T9693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 260.907417][ T9693] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 261.707167][ T9743] random: crng reseeded on system resumption [ 262.125910][ T9756] tipc: Failed to remove unknown binding: 66,0,0/0:1222641730/1222641731 [ 262.179416][ T9756] tipc: Failed to remove unknown binding: 66,0,0/0:1222641730/1222641731 [ 262.666503][ T9743] loop4: detected capacity change from 0 to 512 [ 262.686509][ T9743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.711150][ T9743] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 263.625941][ T9804] random: crng reseeded on system resumption [ 264.418672][ T9808] loop2: detected capacity change from 0 to 1024 [ 264.464685][ T9808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.553845][ T9808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.857694][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.485172][ T9824] loop4: detected capacity change from 0 to 1024 [ 265.514243][ T9824] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 265.654007][ T9824] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.1297: lblock 2 mapped to illegal pblock 2 (length 1) [ 265.669917][ T9824] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 265.678316][ T9824] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.1297: lblock 0 mapped to illegal pblock 48 (length 1) [ 265.694308][ T9824] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 265.703157][ T9824] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1297: Failed to acquire dquot type 0 [ 265.716544][ T9824] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 265.727048][ T9824] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1297: mark_inode_dirty error [ 265.739686][ T9824] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 265.750610][ T9824] EXT4-fs (loop4): 1 orphan inode deleted [ 265.763463][ T9824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.113066][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.163667][ T4959] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 266.226977][ T4959] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 266.264101][ T4959] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 266.309489][ T6550] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 266.328019][ T6550] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 266.353763][ T28] page_pool_release_retry() stalled pool shutdown 1 inflight 182 sec [ 266.394446][ T6550] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 266.761942][ T9804] loop5: detected capacity change from 0 to 512 [ 267.096124][ T9804] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.437798][ T9804] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 267.475136][ T9848] loop3: detected capacity change from 0 to 1024 [ 267.532589][ T9848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.635101][ T9848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.753129][ T9853] tipc: Failed to remove unknown binding: 66,0,0/0:2313466660/2313466661 [ 267.967964][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.006583][ T9876] random: crng reseeded on system resumption [ 269.865150][ T9885] tipc: Failed to remove unknown binding: 66,0,0/0:4111310959/4111310960 [ 270.138554][ T9891] loop4: detected capacity change from 0 to 1024 [ 270.184352][ T9891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.308723][ T9891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.543311][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.144347][ T9924] loop5: detected capacity change from 0 to 1024 [ 272.164069][ T9924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.218889][ T9924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.454275][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.275991][ T9962] random: crng reseeded on system resumption [ 275.675000][ T9987] loop5: detected capacity change from 0 to 1024 [ 275.683096][ T9987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.778059][ T9987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.892759][ T9995] can0: slcan on ptm0. [ 275.922808][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.973832][ T9994] can0 (unregistered): slcan off ptm0. [ 276.036752][ T9962] loop4: detected capacity change from 0 to 512 [ 276.090333][ T9962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.122850][ T9962] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 276.264081][T10003] tipc: Failed to remove unknown binding: 66,0,0/0:856870801/856870802 [ 276.299855][T10005] loop2: detected capacity change from 0 to 128 [ 276.376111][T10005] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 276.456643][T10005] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.769321][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.921048][T10027] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1254448752/1254448753 [ 278.108365][T10032] random: crng reseeded on system resumption [ 280.134384][T10061] tipc: Failed to remove unknown binding: 66,0,0/0:867988824/867988825 [ 280.372918][T10064] loop4: detected capacity change from 0 to 1024 [ 280.403039][T10064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.468475][T10064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.577361][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.604757][T10032] loop2: detected capacity change from 0 to 512 [ 280.652448][T10032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.706870][T10032] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 281.442703][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1391'. [ 281.480731][T10089] netlink: 'syz.5.1391': attribute type 1 has an invalid length. [ 281.521797][T10089] netlink: 'syz.5.1391': attribute type 2 has an invalid length. [ 281.890605][T10099] loop5: detected capacity change from 0 to 1024 [ 281.932763][T10099] EXT4-fs: Ignoring removed orlov option [ 282.023705][T10099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.398138][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.932272][T10121] random: crng reseeded on system resumption [ 283.954409][T10120] loop5: detected capacity change from 0 to 1024 [ 283.981948][T10120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.039906][T10120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.264790][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.515287][T10121] loop3: detected capacity change from 0 to 512 [ 285.747904][T10121] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.965673][T10121] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 286.264726][T10153] loop5: detected capacity change from 0 to 1024 [ 286.292457][T10153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.390215][T10153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.625876][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.971805][T10181] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2001532664/2001532666 [ 288.033334][T10181] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2001532664/2001532665 [ 288.180657][T10183] random: crng reseeded on system resumption [ 288.286813][T10185] loop2: detected capacity change from 0 to 1024 [ 288.312147][T10185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.426631][T10185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.638655][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.294431][T10203] ip_tables: iptables: counters copy to user failed while replacing table [ 289.926194][T10183] loop5: detected capacity change from 0 to 512 [ 289.958674][T10183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 290.800705][T10183] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 291.525404][T10216] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3657542227/3657542228 [ 292.320306][T10232] syzkaller0: entered promiscuous mode [ 292.329415][T10232] syzkaller0: entered allmulticast mode [ 293.510448][T10249] random: crng reseeded on system resumption [ 293.517373][T10250] tipc: Failed to remove unknown binding: 66,0,0/2886997162:455943234/455943235 [ 293.951410][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1448'. [ 295.389638][T10285] loop5: detected capacity change from 0 to 1024 [ 295.512540][T10285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.517722][T10249] loop2: detected capacity change from 0 to 512 [ 295.596695][T10285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.604824][T10249] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 295.692831][T10249] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 295.954040][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.010120][T10293] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1457'. [ 296.862196][T10308] tipc: Failed to remove unknown binding: 66,0,0/0:1989473717/1989473718 [ 298.253293][T10321] loop2: detected capacity change from 0 to 1024 [ 298.262886][T10323] random: crng reseeded on system resumption [ 298.311339][T10321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.349226][T10325] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1468'. [ 298.477061][T10321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.708845][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.310383][T10326] loop5: detected capacity change from 0 to 512 [ 300.339835][T10326] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 300.370005][T10326] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 300.379841][T10361] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1480'. [ 300.516627][T10364] loop3: detected capacity change from 0 to 1024 [ 300.550834][T10364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.635076][T10364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.971920][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.470442][T10394] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1493'. [ 301.489682][T10397] random: crng reseeded on system resumption [ 302.730925][T10407] loop2: detected capacity change from 0 to 1024 [ 302.738378][T10407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.809192][T10407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.884167][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.984486][T10412] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1507'. [ 303.839650][T10397] loop4: detected capacity change from 0 to 512 [ 303.878465][T10397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.910022][T10397] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 304.474216][T10439] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1509'. [ 304.721119][T10444] loop4: detected capacity change from 0 to 1024 [ 304.744260][T10444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.797182][T10444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.036263][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.518865][T10460] random: crng reseeded on system resumption [ 305.574514][T10463] loop5: detected capacity change from 0 to 512 [ 305.625680][T10463] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1516: iget: bad i_size value: 38620345925642 [ 305.743080][T10463] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1516: couldn't read orphan inode 15 (err -117) [ 305.851717][T10463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.050216][T10473] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1520'. [ 306.160622][T10463] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1516: bg 0: block 5: invalid block bitmap [ 306.193233][T10463] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 356 with error 28 [ 306.216022][T10463] EXT4-fs (loop5): This should not happen!! Data will be lost [ 306.216022][T10463] [ 306.259737][T10463] EXT4-fs (loop5): Total free blocks count 0 [ 306.265788][T10463] EXT4-fs (loop5): Free/Dirty block details [ 306.289161][T10463] EXT4-fs (loop5): free_blocks=0 [ 306.294167][T10463] EXT4-fs (loop5): dirty_blocks=360 [ 306.329282][T10463] EXT4-fs (loop5): Block reservation details [ 306.359206][T10463] EXT4-fs (loop5): i_reserved_data_blocks=360 [ 306.566189][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.438104][T10509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1531'. [ 308.111889][T10521] random: crng reseeded on system resumption [ 308.531918][T10538] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1543'. [ 309.822274][T10573] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1553'. [ 310.051475][T10582] random: crng reseeded on system resumption [ 310.161303][T10584] wg1 speed is unknown, defaulting to 1000 [ 311.162586][T10612] loop3: detected capacity change from 0 to 1024 [ 311.184151][T10612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.269667][T10612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.456258][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.651362][T10622] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1569'. [ 312.716940][T10643] loop5: detected capacity change from 0 to 1024 [ 312.740078][T10643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.773727][T10649] program syz.3.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.836729][T10643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.969885][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.086832][T10656] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1581'. [ 313.366269][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1579'. [ 313.663954][T10670] random: crng reseeded on system resumption [ 313.719418][T10672] loop5: detected capacity change from 0 to 1024 [ 313.727232][T10672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.837220][T10672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.490963][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.421110][T10688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1593'. [ 315.974748][T10709] loop5: detected capacity change from 0 to 1024 [ 316.013020][T10709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.160965][T10709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.294430][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.328367][T10718] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 316.589980][T10724] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1602'. [ 317.233458][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241983][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.300862][T10745] random: crng reseeded on system resumption [ 317.330074][T10746] loop3: detected capacity change from 0 to 1024 [ 317.337459][T10746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.463548][T10746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.481563][T10751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1612'. [ 318.032997][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.941598][T10778] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 319.246296][T10787] loop4: detected capacity change from 0 to 1024 [ 319.274280][T10787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.309724][T10788] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1623'. [ 319.413337][T10787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.081461][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.961780][T10819] random: crng reseeded on system resumption [ 321.020454][T10822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1635'. [ 322.124187][T10845] program syz.5.1642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.215648][T10849] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1645'. [ 322.495063][T10859] loop4: detected capacity change from 0 to 1024 [ 322.502762][T10859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.541599][T10859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.849940][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.534549][T10881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1654'. [ 323.636345][T10884] random: crng reseeded on system resumption [ 323.858530][T10892] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 323.899580][T10894] loop4: detected capacity change from 0 to 1024 [ 323.907027][T10894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.955098][T10894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.218675][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.370930][T10902] loop2: detected capacity change from 0 to 1024 [ 324.391491][T10902] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 324.422713][T10902] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.1660: lblock 2 mapped to illegal pblock 2 (length 1) [ 324.437805][T10902] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 324.446125][T10902] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.1660: lblock 0 mapped to illegal pblock 48 (length 1) [ 324.461847][T10902] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 324.471143][T10902] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1660: Failed to acquire dquot type 0 [ 324.483856][T10902] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 324.495098][T10902] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1660: mark_inode_dirty error [ 324.507841][T10902] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 324.518969][T10902] EXT4-fs (loop2): 1 orphan inode deleted [ 324.530539][T10902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.773358][ T3473] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.957854][ T3473] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 324.966355][ T3473] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 325.008705][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.034141][ T5775] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 325.091451][ T5775] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 325.123105][ T5775] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 326.021715][T10925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1668'. [ 326.302935][T10931] loop3: detected capacity change from 0 to 1024 [ 326.333978][T10931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.412845][T10931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.700998][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.037854][T10923] md: array md0 already has disks! [ 327.067185][ T8414] page_pool_release_retry() stalled pool shutdown 1 inflight 242 sec [ 327.132837][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'. [ 327.339387][T10952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.525971][T10960] random: crng reseeded on system resumption [ 327.550826][T10954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.601751][T10954] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 327.644584][T10954] bond1: (slave gre1): Error -95 calling set_mac_address [ 327.870883][T10955] macvlan2: entered promiscuous mode [ 327.906910][T10955] macvlan2: entered allmulticast mode [ 327.967273][T10955] bond1: entered promiscuous mode [ 327.986966][T10955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.089416][T10955] bond1: left promiscuous mode [ 328.394800][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1685'. [ 328.429522][T10977] loop4: detected capacity change from 0 to 1024 [ 328.455637][T10977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.560619][T10977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.960509][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.241912][T10994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.275224][T10994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.550303][T10994] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.559552][T10994] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.568779][T10994] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.577731][T10994] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.744203][T11009] netlink: 'syz.4.1695': attribute type 83 has an invalid length. [ 330.808448][T11012] loop2: detected capacity change from 0 to 1024 [ 330.820795][T11012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.892036][T11012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.302090][T11025] random: crng reseeded on system resumption [ 331.710274][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.923229][T11038] loop4: detected capacity change from 0 to 512 [ 332.070086][T11042] netlink: 'syz.5.1707': attribute type 83 has an invalid length. [ 332.136864][T11038] syz.4.1706: attempt to access beyond end of device [ 332.136864][T11038] loop4: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 332.170797][T11043] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 332.226449][T11043] FAT-fs (loop4): Filesystem has been set read-only [ 332.227203][T11038] syz.4.1706: attempt to access beyond end of device [ 332.227203][T11038] loop4: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 332.318370][ T27] audit: type=1800 audit(1788667249.012:59): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1706" name="file2" dev="loop4" ino=1048653 res=0 errno=0 [ 332.559551][T11051] loop2: detected capacity change from 0 to 1024 [ 332.609190][T11051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.723835][T11051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.019678][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.809884][T11075] FAULT_INJECTION: forcing a failure. [ 333.809884][T11075] name failslab, interval 1, probability 0, space 0, times 0 [ 333.852380][T11075] CPU: 0 PID: 11075 Comm: syz.4.1717 Not tainted syzkaller #0 [ 333.859917][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.870012][T11075] Call Trace: [ 333.873315][T11075] [ 333.876265][T11075] dump_stack_lvl+0x18c/0x250 [ 333.880978][T11075] ? show_regs_print_info+0x20/0x20 [ 333.886206][T11075] ? load_image+0x420/0x420 [ 333.890738][T11075] ? __lock_acquire+0x7d80/0x7d80 [ 333.895797][T11075] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 333.901818][T11075] should_fail_ex+0x394/0x4c0 [ 333.906538][T11075] should_failslab+0x9/0x20 [ 333.911077][T11075] slab_pre_alloc_hook+0x59/0x300 [ 333.916141][T11075] ? exc_page_fault+0x8c/0x100 [ 333.920948][T11075] kmem_cache_alloc+0x5a/0x2c0 [ 333.925751][T11075] ? ioctx_alloc+0x105/0x770 [ 333.930381][T11075] ioctx_alloc+0x105/0x770 [ 333.934833][T11075] __se_sys_io_setup+0x7b/0x190 [ 333.939721][T11075] do_syscall_64+0x55/0xb0 [ 333.944166][T11075] ? clear_bhb_loop+0x40/0x90 [ 333.948878][T11075] ? clear_bhb_loop+0x40/0x90 [ 333.953582][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.959506][T11075] RIP: 0033:0x7fccb679e159 [ 333.963938][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.983553][T11075] RSP: 002b:00007fccb763c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 333.991974][T11075] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e159 [ 333.999941][T11075] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 00000000000004c6 [ 334.007917][T11075] RBP: 00007fccb6835024 R08: 0000000000000000 R09: 0000000000000000 [ 334.015892][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.023881][T11075] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007ffccd13d318 [ 334.031894][T11075] [ 334.602798][T11096] loop2: detected capacity change from 0 to 1024 [ 334.661104][T11096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.850727][T11096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.897028][T11105] random: crng reseeded on system resumption [ 335.038426][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.613547][T11120] x_tables: duplicate entry at hook 3 [ 337.127135][T11144] loop4: detected capacity change from 0 to 1024 [ 337.148770][T11144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.380607][T11144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.482016][T11160] loop2: detected capacity change from 0 to 512 [ 337.567503][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.582282][T11160] syz.2.1744: attempt to access beyond end of device [ 337.582282][T11160] loop2: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 337.643368][T11160] syz.2.1744: attempt to access beyond end of device [ 337.643368][T11160] loop2: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 337.689333][ T27] audit: type=1800 audit(1788667510.388:60): pid=11160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1744" name="file2" dev="loop2" ino=1048655 res=0 errno=0 [ 337.757106][T11160] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 337.813757][T11160] FAT-fs (loop2): Filesystem has been set read-only [ 338.373779][T11178] random: crng reseeded on system resumption [ 338.791954][T11185] loop2: detected capacity change from 0 to 1024 [ 338.827380][T11185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.919530][T11185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.110275][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.758945][T11214] loop5: detected capacity change from 0 to 512 [ 341.033933][T11214] syz.5.1762: attempt to access beyond end of device [ 341.033933][T11214] loop5: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 341.085950][T11220] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 341.125865][T11214] syz.5.1762: attempt to access beyond end of device [ 341.125865][T11214] loop5: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 341.175640][T11220] FAT-fs (loop5): Filesystem has been set read-only [ 341.231390][ T27] audit: type=1800 audit(1788667769.906:61): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1762" name="file2" dev="loop5" ino=1048657 res=0 errno=0 [ 341.308531][T11229] loop2: detected capacity change from 0 to 128 [ 341.330493][T11227] loop4: detected capacity change from 0 to 1024 [ 341.400617][T11227] EXT4-fs: inline encryption not supported [ 341.515112][T11227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 341.565840][T11227] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.749057][T11227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1777: bg 0: block 112: padding at end of block bitmap is not set [ 341.752092][T11237] random: crng reseeded on system resumption [ 341.851903][T11227] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 341.895452][T11227] EXT4-fs (loop4): This should not happen!! Data will be lost [ 341.895452][T11227] [ 341.930680][T11227] EXT4-fs (loop4): Total free blocks count 0 [ 341.972539][T11227] EXT4-fs (loop4): Free/Dirty block details [ 341.999314][T11227] EXT4-fs (loop4): free_blocks=0 [ 342.024648][T11227] EXT4-fs (loop4): dirty_blocks=64 [ 342.062188][T11227] EXT4-fs (loop4): Block reservation details [ 342.068625][T11227] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 342.160422][T11242] loop5: detected capacity change from 0 to 1024 [ 342.186594][T11242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.219519][ T6550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 342.270255][T11242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.518526][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.945679][T11252] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1778'. [ 342.984735][T11256] loop5: detected capacity change from 0 to 512 [ 343.051652][T11256] syz.5.1780: attempt to access beyond end of device [ 343.051652][T11256] loop5: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 343.110351][T11256] syz.5.1780: attempt to access beyond end of device [ 343.110351][T11256] loop5: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 343.203350][ T27] audit: type=1800 audit(1788668027.880:62): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1780" name="file2" dev="loop5" ino=1048661 res=0 errno=0 [ 343.246095][T11257] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 343.275688][T11257] FAT-fs (loop5): Filesystem has been set read-only [ 343.469326][T11264] loop3: detected capacity change from 0 to 2048 [ 343.577810][T11267] loop4: detected capacity change from 0 to 256 [ 343.617602][T11264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.780351][T11276] netlink: 'syz.5.1787': attribute type 15 has an invalid length. [ 343.806128][T11264] loop3: detected capacity change from 2048 to 0 [ 343.860186][T11264] syz.3.1783: attempt to access beyond end of device [ 343.860186][T11264] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 343.913145][T11264] EXT4-fs error (device loop3): __ext4_find_entry:1685: inode #2: comm syz.3.1783: reading directory lblock 0 [ 343.953252][T11264] syz.3.1783: attempt to access beyond end of device [ 343.953252][T11264] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 344.004693][T11264] buffer_io_error: 158 callbacks suppressed [ 344.004708][T11264] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 344.080825][T11264] EXT4-fs (loop3): I/O error while writing superblock [ 344.235829][ T5770] syz-executor: attempt to access beyond end of device [ 344.235829][ T5770] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 344.306055][ T5770] syz-executor: attempt to access beyond end of device [ 344.306055][ T5770] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 344.330768][ T5770] syz-executor: attempt to access beyond end of device [ 344.330768][ T5770] loop3: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 344.391063][ T5770] syz-executor: attempt to access beyond end of device [ 344.391063][ T5770] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 344.443881][ T5770] syz-executor: attempt to access beyond end of device [ 344.443881][ T5770] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 344.475288][ T5770] syz-executor: attempt to access beyond end of device [ 344.475288][ T5770] loop3: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 344.508230][ T5770] EXT4-fs error (device loop3): ext4_get_inode_loc:4635: inode #2: block 4: comm syz-executor: unable to read itable block [ 344.537298][ T5770] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 344.556351][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 344.570957][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: IO failure [ 344.613773][ T5770] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 344.653221][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 344.684842][ T5770] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error [ 344.733626][ T5770] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 344.742988][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 344.760572][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 344.825231][T11271] EXT4-fs error (device loop3): ext4_wait_block_bitmap:576: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 344.875477][T11271] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 344.883777][T11271] EXT4-fs (loop3): I/O error while writing superblock [ 344.926069][ T11] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4620: inode #2: block 4: comm kworker/u4:0: unable to read itable block [ 344.984870][ T11] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 345.010053][ T11] EXT4-fs (loop3): I/O error while writing superblock [ 345.032832][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.105746][ T5770] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 345.114059][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 345.175354][T11293] random: crng reseeded on system resumption [ 345.181489][T11268] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 345.846880][T11300] netlink: 'syz.5.1797': attribute type 15 has an invalid length. [ 346.622410][ T12] tipc: Disabling bearer [ 346.653069][ T12] tipc: Left network mode [ 346.655424][T11308] loop2: detected capacity change from 0 to 2048 [ 346.693755][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1800'. [ 346.819480][T11308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.976606][T11308] loop2: detected capacity change from 2048 to 0 [ 347.071273][ T5775] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /470/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 347.137596][ T5775] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 347.165190][ T5775] EXT4-fs (loop2): I/O error while writing superblock [ 347.188085][ T5775] EXT4-fs error (device loop2): ext4_get_inode_loc:4635: inode #2: block 4: comm syz-executor: unable to read itable block [ 347.229377][ T5775] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 347.254949][ T5775] EXT4-fs (loop2): I/O error while writing superblock [ 347.278162][ T5775] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: IO failure [ 347.306234][ T5775] EXT4-fs (loop2): I/O error while writing superblock [ 347.328469][ T5775] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error [ 347.363482][ T5775] EXT4-fs (loop2): I/O error while writing superblock [ 347.493926][ T11] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4620: inode #2: block 4: comm kworker/u4:0: unable to read itable block [ 347.559945][ T11] EXT4-fs (loop2): I/O error while writing superblock [ 347.593743][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.638109][ T5775] EXT4-fs (loop2): I/O error while writing superblock [ 348.991639][ T12] hsr_slave_0: left promiscuous mode [ 349.010997][ T12] hsr_slave_1: left promiscuous mode [ 349.029608][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.045821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.065146][ T12] bridge_slave_0: left allmulticast mode [ 349.071026][ T12] bridge_slave_0: left promiscuous mode [ 349.084712][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.520170][ T12] bond1 (unregistering): Released all slaves [ 350.484226][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=6 req=1804 state=1 status=67 (errno 9: Bad file descriptor) [ 350.559543][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.974602][ T12] bond0 (unregistering): Released all slaves [ 351.062348][T11332] netlink: 'syz.5.1807': attribute type 15 has an invalid length. [ 351.503291][ T12] IPVS: stop unused estimator thread 0... [ 353.282264][ T12] hsr_slave_0: left promiscuous mode [ 353.302339][ T12] hsr_slave_1: left promiscuous mode [ 353.308824][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.317042][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.324889][ T12] bridge_slave_0: left allmulticast mode [ 353.330541][ T12] bridge_slave_0: left promiscuous mode [ 353.337669][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.863941][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.908059][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.168456][ T12] bond0 (unregistering): Released all slaves [ 355.532610][ T12] dvmrp8 (unregistering): left allmulticast mode [ 355.802332][ T12] hsr_slave_0: left promiscuous mode [ 355.817558][ T12] hsr_slave_1: left promiscuous mode [ 355.824260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.831840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.839848][ T12] bridge_slave_1: left allmulticast mode [ 355.845811][ T12] bridge_slave_1: left promiscuous mode [ 355.851522][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.860143][ T12] bridge_slave_0: left allmulticast mode [ 355.866447][ T12] bridge_slave_0: left promiscuous mode [ 355.872207][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.987899][ T12] bond1 (unregistering): Released all slaves [ 356.513540][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.561639][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.871295][ T12] bond0 (unregistering): Released all slaves