last executing test programs: 25.151908764s ago: executing program 3 (id=434): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000ffffff800000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) 25.098994527s ago: executing program 3 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) (async) 24.927101697s ago: executing program 3 (id=438): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') lseek(r0, 0x8, 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@stripe={'stripe', 0x3d, 0x3}}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f00000009c0)="d96a7833cbd5af455ecaa7d3de693ce927103665c39f660c0b957e0b0e8a993858b4ab1d185db729ba9be0220ff56c56dc6ff6d3affcaed8962ceac37673662caba612a426bd4d8941edaf63f4303a667fe3b5d17cc58b0f4c0645faa40fe652edd94ed3e593e8a20517b8ac8ad765f4bb76830960654c67237bd4bce151f80c56c57bb7c6fe79e58e94b01911ec02409d8d64206075bc93d2994c5e7b02a17b2276c2a6a4acfffc38b991388864146c0528bc0ef86a1bb1becc2b635dfee0383a10a002761212fcef4b70956734716e31d4c7e6b19a4dc7a2ca618e884372a2ef1865", 0xe3, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) creat(&(0x7f0000000000)='./file1\x00', 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES8=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r7, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f3, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x18, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) 24.625600454s ago: executing program 3 (id=444): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) sendmmsg$inet6(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x0, 0x40}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003000)=[{0x0}], 0x1}}], 0x2, 0x40800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x8, 0x4000, 0x4000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0x6]}, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "e9b6dde697bc3d8ac62570357872ee0dd07b08b9cff3c0e8902ba2bfbceed70dd00742b9e99f6346508ba3694888a452055647b1f7a86b85881b2855f95600", 0x32}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r2, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) (async) sendmmsg$inet6(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x0, 0x40}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003000)=[{0x0}], 0x1}}], 0x2, 0x40800) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) (async) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async) fallocate(r0, 0x8, 0x4000, 0x4000) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async) rt_sigtimedwait(&(0x7f0000000240)={[0x6]}, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, 0x8) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "e9b6dde697bc3d8ac62570357872ee0dd07b08b9cff3c0e8902ba2bfbceed70dd00742b9e99f6346508ba3694888a452055647b1f7a86b85881b2855f95600", 0x32}, 0x48, 0xfffffffffffffffd) (async) keyctl$clear(0x7, r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) (async) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r2, 0x1) (async) 24.410238267s ago: executing program 3 (id=449): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000012000000060000b95a4ebfa156f55803c6c445ead5000900000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r5, 0x4}, &(0x7f0000000100)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) 23.816711901s ago: executing program 3 (id=456): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x30, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r8}, 0xc) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00003c7000/0x2000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x40, 0x32}) r9 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r9, 0x47f3, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000180), &(0x7f00000001c0)={'U-'}, 0x16, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) 23.797717212s ago: executing program 32 (id=456): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x30, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r8}, 0xc) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00003c7000/0x2000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x40, 0x32}) r9 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r9, 0x47f3, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000180), &(0x7f00000001c0)={'U-'}, 0x16, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) 4.846234459s ago: executing program 2 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="c40000000001050500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe800000000000000000000000000029080007400000000030000e802c0001"], 0xc4}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}]}, 0x34}}, 0x0) 4.65827016s ago: executing program 2 (id=809): r0 = syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000004c0)=ANY=[@ANYRES8], 0x1, 0x30c, &(0x7f0000000100)="$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") (async, rerun: 32) r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x7c75, 0x4) (rerun: 32) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/25, 0x19}, 0x8}], 0x1, 0x1000400000de, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000140)=@ethtool_ts_info}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9100, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async, rerun: 64) pselect6(0x40, &(0x7f0000000c00)={0x7, 0x5cc, 0x4, 0x4, 0x7, 0x6, 0x8, 0x10001}, &(0x7f0000000c40)={0x10001, 0x6c2, 0x2, 0x2, 0x7fffffffffffffff, 0x80000, 0xac4, 0x8}, 0x0, &(0x7f0000000cc0)={0x77359400}, &(0x7f0000000d40)={&(0x7f0000000d00)={[0x100]}, 0x8}) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r7, r8, 0x0, 0xffffffff004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) 4.451872301s ago: executing program 2 (id=814): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) sendmsg$inet(r0, 0x0, 0x40000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000002940), &(0x7f0000000d00)=0x4) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xd1, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xfc, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) listen(r6, 0x7fff) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001c0001082abd7000fcdbdf250a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4049801}, 0x800) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) 4.411321464s ago: executing program 2 (id=815): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000020000006401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000480)=""/72, 0x48}], 0x1, 0x6, 0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r2, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000301010300000000000000000a000003100001800c00028005000100060000000c0019800800010028"], 0x30}}, 0x48050) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xffd5, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x140b, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c011}, 0x10) socket$inet(0x2, 0x1, 0x6) 3.506560596s ago: executing program 2 (id=830): syz_open_dev$tty20(0xc, 0x4, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84880) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 1.771414497s ago: executing program 4 (id=860): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000050000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) 1.696948741s ago: executing program 0 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)={0x20, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) 1.647390354s ago: executing program 4 (id=863): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x200, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000a000200ff00e000000200000000000000000d0001007564703a73797a"], 0x74}}, 0x4004004) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x1c8, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x932}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x720c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x947}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9932}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c000000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xac50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe, @local, 0x3}}}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff01}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000000) close(r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x56, r3, 0x800, 0x70bd2b, 0x25dfdbff}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x5c, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x8af, 0x7, 0x2, 0x401, 0x7fffffff}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) 1.528822651s ago: executing program 4 (id=865): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) 1.506919922s ago: executing program 0 (id=866): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) 1.452012465s ago: executing program 4 (id=867): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$packet(0x11, 0x0, 0x300) 1.37414549s ago: executing program 4 (id=868): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/241, 0xf1}, 0x3}, {{&(0x7f0000000140)=@tipc, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000002d00)=""/119, 0x77}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f0000001680)=""/184, 0xb8}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/122, 0x7a}], 0x8, &(0x7f0000002840)=""/212, 0xd4}, 0x8}, {{&(0x7f0000002940)=@alg, 0x80, &(0x7f0000002b40)=[{&(0x7f00000029c0)=""/110, 0x6e}, {&(0x7f0000002a40)=""/238, 0xee}], 0x2, &(0x7f0000002b80)=""/66, 0x42}, 0x7ff}], 0x3, 0x0, &(0x7f0000002cc0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x13) (async) keyctl$set_reqkey_keyring(0xe, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) close(0x3) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) (async) socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x3a) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000002d80)={0xa, 0x4e24, 0xfffffffd, @mcast1, 0x9}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbb7bbbbbbbbb5dd6000000000283afffe800000000000000000000000000000fe80000000000000d4f2d614d46923f5000090780000000000000000000000000000000000000001ff0200ef000000001000000000000001"], 0x0) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.251448567s ago: executing program 1 (id=869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x9c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x8}, 0x8) r4 = fcntl$getown(r3, 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee01) ioctl$sock_inet_SIOCSARP(r5, 0x8953, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x7f, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.19996244s ago: executing program 4 (id=870): unshare(0x26000400) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) r4 = fcntl$getown(r0, 0x9) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x27, 0x37, 0x2, {0x0, 0x6, 0x1af, r4, 0x9, 'trans=fd,'}}, 0x27) 1.19965418s ago: executing program 1 (id=871): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000100), 0x1001) r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './mnt\x00'}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r7 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x5, 0x3e, 0xfffffffffffffffe, 0x3, 0xa26}) 1.116483535s ago: executing program 1 (id=872): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301170000000000000000000000800049cf2979e81e563832325cdbb64bf7c8c07fd4888c16b6a3eaf41ce8368421548ac570452a07"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f000013b000/0x4000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) llistxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=""/25, 0x19) 651.784991ms ago: executing program 0 (id=874): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RLOCK(r0, &(0x7f0000000680)={0x8, 0x35, 0x1, 0x1}, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffec1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x60000010) pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_read_part_table(0x5ba, &(0x7f00000005c0)="$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") statx(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x1, {0xa, 0x4e22, 0x63b15430, @empty}}}, 0x3a) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lchown(&(0x7f0000000b80)='./file0\x00', r3, r4) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="890000", 0x3}], 0x1}, 0x0) 588.056385ms ago: executing program 5 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000003000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 587.608515ms ago: executing program 5 (id=876): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x20, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="0e", 0x1}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="741f75b58b2783a5137630b9bfdc65ccc81ab878b9a655ac48e4701593c794cd3e71abdceb1b086133e9b34a10c7226d841b0295edbf6d9b326b61e5eea8d5baa4601da8909e782020f7f55f470e646faa65c019debb4715a9e0455d83cbf7a271eef29f988d8acba9d3cf9d1346b7ada5aa07f96562380477bead0d2bac0c23eaa51912c1f6d9e9e2a7ae055bdc197d5f8532d5ca3485048ac12604d588f054c92a0615d3adde98ee6c992f29baf6f6646af6cc03e76aec3836a9036cf348a5da7dea21db6dec03c558e36f8845d639a2dd3aa719a62c", @ANYRESHEX=r5, @ANYRES8=0x0, @ANYRES64=r3], 0xfca) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000001080)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) 495.534701ms ago: executing program 0 (id=877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22, 0x8, @empty, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="801137bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 484.519891ms ago: executing program 5 (id=878): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xc0000, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$cgroup_devices(r2, 0x0, 0x0) (async) write$cgroup_devices(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r3, 0x10, 0x7, 0x10001) (async) fallocate(r3, 0x10, 0x7, 0x10001) r4 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r4, 0x8, 0x0, 0x10000) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 431.642104ms ago: executing program 0 (id=879): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x200, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000a000200ff00e000000200000000000000000d0001007564703a73797a"], 0x74}}, 0x4004004) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x184, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x932}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x720c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x947}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9932}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xabc}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xac50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe, @local, 0x3}}}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff01}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000000) close(r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x56, r3, 0x800, 0x70bd2b, 0x25dfdbff}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x5c, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x8af, 0x7, 0x2, 0x401, 0x7fffffff}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) 431.379064ms ago: executing program 2 (id=880): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0xb00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) lgetxattr(0x0, &(0x7f00000000c0)=@random={'security.', '+/,!--/-}\x00'}, &(0x7f00000001c0)=""/158, 0x9e) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3c}, 0x0, &(0x7f0000000040)={0x3fc, 0x0, 0x0, 0x1, 0x100, 0x0, 0x80000003}, 0x0, 0x0) 378.582488ms ago: executing program 5 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0x5, 0xffff}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0xffffffffffff, 0x800}, 0x20044000) 378.397537ms ago: executing program 5 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xfff7}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 377.375017ms ago: executing program 0 (id=883): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000004000000000000000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000200050000000204000000000000000800000000000000000000df85b052971034c2efee6bd9af7eb7cf"], 0x50) read(r3, &(0x7f0000000000)=""/14, 0xe) write(r2, &(0x7f00000001c0)="f1", 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000340)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 252.056105ms ago: executing program 5 (id=884): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x40000000, 0x0) 165.830389ms ago: executing program 1 (id=885): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x80005, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x80005, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x40, 0xfffff038}, {0x30, 0x0, 0x0, 0xffffb024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 111.380043ms ago: executing program 1 (id=886): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x551, &(0x7f0000000d40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0x890, 0x6000404) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x5a, 0x0, 0xfffffffffe000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000a98df622a8a5fcffd1dd24e6073d8a25172364069b2d1bbb47f77012fdf743218d6be2d5a9ec0bb1413747c4e92d44eedf81403f6c15eefbf82fd65afbfe2236094f06d381bd7b41fcfe886ec3f90000000000000000", @ANYRES16=r3, @ANYBLOB="000428bd7000fedbdf25030000000500050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 0s ago: executing program 1 (id=887): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x6, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): ted (0) [ 49.012247][ T4440] EXT4-fs: Ignoring removed nobh option [ 49.018589][ T4440] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 49.057841][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 49.082963][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.091760][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.116606][ T4445] netlink: 'syz.3.272': attribute type 8 has an invalid length. [ 49.155825][ T4453] FAULT_INJECTION: forcing a failure. [ 49.155825][ T4453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 49.169289][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.1.275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.169331][ T4453] Tainted: [W]=WARN [ 49.169339][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.169352][ T4453] Call Trace: [ 49.169360][ T4453] [ 49.169369][ T4453] __dump_stack+0x1d/0x30 [ 49.169438][ T4453] dump_stack_lvl+0x95/0xd0 [ 49.169462][ T4453] dump_stack+0x15/0x1b [ 49.169524][ T4453] should_fail_ex+0x263/0x280 [ 49.169595][ T4453] should_fail_alloc_page+0xf2/0x100 [ 49.169621][ T4453] __alloc_frozen_pages_noprof+0x108/0x350 [ 49.169660][ T4453] alloc_pages_mpol+0xb3/0x260 [ 49.169731][ T4453] folio_alloc_mpol_noprof+0x39/0x80 [ 49.169763][ T4453] shmem_get_folio_gfp+0x3da/0xd60 [ 49.169861][ T4453] shmem_write_begin+0xfc/0x1f0 [ 49.169888][ T4453] generic_perform_write+0x183/0x490 [ 49.169920][ T4453] shmem_file_write_iter+0xc5/0xf0 [ 49.169981][ T4453] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 49.170012][ T4453] vfs_write+0x5a6/0x9f0 [ 49.170061][ T4453] ksys_write+0xdc/0x1a0 [ 49.170084][ T4453] __x64_sys_write+0x40/0x50 [ 49.170104][ T4453] x64_sys_call+0x2847/0x3000 [ 49.170130][ T4453] do_syscall_64+0xc0/0x2a0 [ 49.170233][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.170327][ T4453] RIP: 0033:0x7f2db83eb78e [ 49.170343][ T4453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.170360][ T4453] RSP: 002b:00007f2db6e86da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.170379][ T4453] RAX: ffffffffffffffda RBX: 00007f2db6e876c0 RCX: 00007f2db83eb78e [ 49.170391][ T4453] RDX: 0000000000040000 RSI: 00007f2daea67000 RDI: 0000000000000004 [ 49.170405][ T4453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.170441][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.170453][ T4453] R13: 00007f2db6e86ee0 R14: 00007f2db6e86ea0 R15: 00007f2daea67000 [ 49.170475][ T4453] [ 49.424769][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.437868][ T4459] dvmrp0: entered allmulticast mode [ 49.465517][ T4462] netlink: 'syz.2.279': attribute type 3 has an invalid length. [ 49.473222][ T4462] netlink: 'syz.2.279': attribute type 3 has an invalid length. [ 49.491362][ T4459] dvmrp0: left allmulticast mode [ 49.496910][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.512487][ T4462] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 49.526074][ T4462] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 49.699930][ T4498] FAULT_INJECTION: forcing a failure. [ 49.699930][ T4498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.713052][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: syz.2.288 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.713087][ T4498] Tainted: [W]=WARN [ 49.713095][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.713120][ T4498] Call Trace: [ 49.713128][ T4498] [ 49.713137][ T4498] __dump_stack+0x1d/0x30 [ 49.713164][ T4498] dump_stack_lvl+0x95/0xd0 [ 49.713188][ T4498] dump_stack+0x15/0x1b [ 49.713246][ T4498] should_fail_ex+0x263/0x280 [ 49.713273][ T4498] should_fail+0xb/0x20 [ 49.713299][ T4498] should_fail_usercopy+0x1a/0x20 [ 49.713411][ T4498] copy_folio_from_iter_atomic+0x269/0x1170 [ 49.713439][ T4498] ? shmem_write_begin+0xfc/0x1f0 [ 49.713539][ T4498] ? shmem_write_begin+0x135/0x1f0 [ 49.713570][ T4498] generic_perform_write+0x2c1/0x490 [ 49.713628][ T4498] shmem_file_write_iter+0xc5/0xf0 [ 49.713680][ T4498] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 49.713710][ T4498] vfs_write+0x5a6/0x9f0 [ 49.713731][ T4498] ksys_write+0xdc/0x1a0 [ 49.713749][ T4498] __x64_sys_write+0x40/0x50 [ 49.713816][ T4498] x64_sys_call+0x2847/0x3000 [ 49.713842][ T4498] do_syscall_64+0xc0/0x2a0 [ 49.713876][ T4498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.713897][ T4498] RIP: 0033:0x7f9ea53db78e [ 49.713976][ T4498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.713998][ T4498] RSP: 002b:00007f9ea3e76da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.714094][ T4498] RAX: ffffffffffffffda RBX: 00007f9ea3e776c0 RCX: 00007f9ea53db78e [ 49.714111][ T4498] RDX: 0000000000040000 RSI: 00007f9e9ba57000 RDI: 0000000000000004 [ 49.714126][ T4498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.714169][ T4498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.714184][ T4498] R13: 00007f9ea3e76ee0 R14: 00007f9ea3e76ea0 R15: 00007f9e9ba57000 [ 49.714205][ T4498] [ 49.910180][ T4498] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 49.979964][ T4513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.022644][ T4513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.074891][ T4521] EXT4-fs: Ignoring removed bh option [ 50.104945][ T4531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4531 comm=syz.4.299 [ 50.131303][ T4521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.159898][ T4521] raw_sendmsg: syz.0.296 forgot to set AF_INET. Fix it! [ 50.171892][ T4532] lo speed is unknown, defaulting to 1000 [ 50.191898][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.201900][ T4543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4543 comm=syz.4.301 [ 50.224199][ T4538] lo speed is unknown, defaulting to 1000 [ 50.341716][ T4559] EXT4-fs: Ignoring removed oldalloc option [ 50.348346][ T4559] EXT4-fs: inline encryption not supported [ 50.356184][ T4559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.366013][ T4559] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.397925][ T4559] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.307: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.411976][ T4559] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.307: Failed to acquire dquot type 0 [ 50.423843][ T4559] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.307: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.454425][ T4559] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.307: Invalid inode bitmap blk 0 in block_group 0 [ 50.467157][ T4559] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 50.476670][ T41] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.477338][ T4559] EXT4-fs (loop0): 1 orphan inode deleted [ 50.497536][ T4559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.500143][ T4569] team0: Port device syz_tun added [ 50.528490][ T41] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 50.550427][ T4570] team0: Port device syz_tun removed [ 50.557688][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.571699][ T4570] bridge_slave_0: left allmulticast mode [ 50.577387][ T4570] bridge_slave_0: left promiscuous mode [ 50.583094][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.593176][ T4570] bridge_slave_1: left allmulticast mode [ 50.599028][ T4570] bridge_slave_1: left promiscuous mode [ 50.604822][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.616365][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'. [ 50.633068][ T4574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.647097][ T4579] EXT4-fs: Ignoring removed orlov option [ 50.652759][ T4579] EXT4-fs: inline encryption not supported [ 50.659077][ T4570] bond0: (slave bond_slave_0): Releasing backup interface [ 50.659331][ T4579] EXT4-fs: dax option not supported [ 50.708012][ T4570] bond0: (slave bond_slave_1): Releasing backup interface [ 50.731230][ T4570] team0: Port device team_slave_0 removed [ 50.734750][ T4588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.313'. [ 50.748816][ T4570] team0: Port device team_slave_1 removed [ 50.755777][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.763325][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.782646][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.790136][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.840288][ T4570] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.939514][ T4574] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 50.948865][ T4574] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 50.967039][ T4592] netlink: 52 bytes leftover after parsing attributes in process `syz.0.315'. [ 50.981978][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 50.994218][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.994218][ T41] [ 51.003979][ T41] EXT4-fs (loop1): Total free blocks count 0 [ 51.009979][ T41] EXT4-fs (loop1): Free/Dirty block details [ 51.015875][ T41] EXT4-fs (loop1): free_blocks=0 [ 51.020987][ T41] EXT4-fs (loop1): dirty_blocks=0 [ 51.026264][ T41] EXT4-fs (loop1): Block reservation details [ 51.032292][ T41] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 51.044338][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.167215][ T4608] FAULT_INJECTION: forcing a failure. [ 51.167215][ T4608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.180396][ T4608] CPU: 1 UID: 0 PID: 4608 Comm: syz.3.322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.180445][ T4608] Tainted: [W]=WARN [ 51.180452][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.180463][ T4608] Call Trace: [ 51.180470][ T4608] [ 51.180478][ T4608] __dump_stack+0x1d/0x30 [ 51.180504][ T4608] dump_stack_lvl+0x95/0xd0 [ 51.180617][ T4608] dump_stack+0x15/0x1b [ 51.180709][ T4608] should_fail_ex+0x263/0x280 [ 51.180777][ T4608] should_fail+0xb/0x20 [ 51.180809][ T4608] should_fail_usercopy+0x1a/0x20 [ 51.180873][ T4608] _copy_from_iter+0xcf/0xea0 [ 51.180893][ T4608] ? __alloc_skb+0x397/0x4b0 [ 51.181002][ T4608] ? __alloc_skb+0x219/0x4b0 [ 51.181106][ T4608] netlink_sendmsg+0x4ae/0x6f0 [ 51.181126][ T4608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.181187][ T4608] ____sys_sendmsg+0x5af/0x600 [ 51.181207][ T4608] ___sys_sendmsg+0x195/0x1e0 [ 51.181233][ T4608] __x64_sys_sendmsg+0xd4/0x160 [ 51.181255][ T4608] x64_sys_call+0x17ba/0x3000 [ 51.181339][ T4608] do_syscall_64+0xc0/0x2a0 [ 51.181430][ T4608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.181450][ T4608] RIP: 0033:0x7f709f79aeb9 [ 51.181465][ T4608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.181536][ T4608] RSP: 002b:00007f709e1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.181558][ T4608] RAX: ffffffffffffffda RBX: 00007f709fa15fa0 RCX: 00007f709f79aeb9 [ 51.181572][ T4608] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000003 [ 51.181586][ T4608] RBP: 00007f709e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.181600][ T4608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.181613][ T4608] R13: 00007f709fa16038 R14: 00007f709fa15fa0 R15: 00007ffdb2bd4a68 [ 51.181700][ T4608] [ 51.391671][ T4610] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.392686][ T4613] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 51.401007][ T4610] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.413034][ T4613] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.429805][ T4613] EXT4-fs (loop2): invalid journal inode [ 51.442271][ T4610] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.323: corrupted inode contents [ 51.454494][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 51.461109][ T4610] EXT4-fs (loop1): 1 truncate cleaned up [ 51.467118][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.477897][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.500806][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.511796][ T4610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.536175][ T4610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.551441][ T29] kauditd_printk_skb: 990 callbacks suppressed [ 51.551456][ T29] audit: type=1326 audit(1770827409.184:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.581035][ T29] audit: type=1326 audit(1770827409.184:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.604452][ T29] audit: type=1326 audit(1770827409.184:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.627772][ T29] audit: type=1326 audit(1770827409.184:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.631094][ T4623] netlink: 152 bytes leftover after parsing attributes in process `syz.2.328'. [ 51.651137][ T29] audit: type=1326 audit(1770827409.184:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.661340][ T4628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 51.700379][ T29] audit: type=1326 audit(1770827409.323:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.723749][ T29] audit: type=1326 audit(1770827409.323:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.747162][ T29] audit: type=1326 audit(1770827409.323:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709f79aeb9 code=0x7ffc0000 [ 51.865932][ T4654] set_capacity_and_notify: 14 callbacks suppressed [ 51.865961][ T4654] loop3: detected capacity change from 0 to 1024 [ 51.883644][ T4656] loop0: detected capacity change from 0 to 512 [ 51.898670][ T4656] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.915622][ T4654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.928659][ T4656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.972794][ T4656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.985716][ T4656] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.008866][ T4627] capability: warning: `syz.4.329' uses 32-bit capabilities (legacy support in use) [ 52.022692][ T29] audit: type=1400 audit(1770827409.660:3160): avc: denied { getopt } for pid=4653 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.042231][ T29] audit: type=1400 audit(1770827409.660:3161): avc: denied { remount } for pid=4653 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.065956][ T4668] loop2: detected capacity change from 0 to 764 [ 52.080355][ T4668] __nla_validate_parse: 1 callbacks suppressed [ 52.080367][ T4668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 52.126872][ T381] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.135978][ T381] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.151212][ T381] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.160026][ T381] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.181212][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.243333][ T4681] lo speed is unknown, defaulting to 1000 [ 52.249085][ T4681] lo speed is unknown, defaulting to 1000 [ 52.253287][ T4684] lo speed is unknown, defaulting to 1000 [ 52.265400][ T4681] lo speed is unknown, defaulting to 1000 [ 52.283663][ T4681] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 52.311199][ T4681] lo speed is unknown, defaulting to 1000 [ 52.338904][ T4681] lo speed is unknown, defaulting to 1000 [ 52.375284][ T4697] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 52.383085][ T4697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.343'. [ 52.394092][ T4698] netlink: 32 bytes leftover after parsing attributes in process `syz.4.346'. [ 52.403595][ T4698] tipc: Invalid UDP bearer configuration [ 52.403606][ T4698] tipc: Enabling of bearer rejected, failed to enable media [ 52.417528][ T4681] lo speed is unknown, defaulting to 1000 [ 52.429960][ T4681] lo speed is unknown, defaulting to 1000 [ 52.446356][ T4681] lo speed is unknown, defaulting to 1000 [ 52.452442][ T4681] lo speed is unknown, defaulting to 1000 [ 52.454945][ T4697] team0: entered promiscuous mode [ 52.463245][ T4697] team_slave_0: entered promiscuous mode [ 52.469011][ T4697] team_slave_1: entered promiscuous mode [ 52.474839][ T4697] team0: entered allmulticast mode [ 52.479994][ T4697] team_slave_0: entered allmulticast mode [ 52.485794][ T4697] team_slave_1: entered allmulticast mode [ 52.568714][ T4697] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 52.706406][ T4715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.716510][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.725501][ T4715] team0: Failed to send port change of device bond1 via netlink (err -105) [ 52.725564][ T4715] team0: Failed to send options change via netlink (err -105) [ 52.725644][ T4715] team0: Port device bond1 added [ 52.784883][ T4727] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 52.834455][ T4708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.347'. [ 52.865442][ T4731] loop4: detected capacity change from 0 to 512 [ 52.899453][ T4735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.357'. [ 52.911779][ T4731] journal_path: Non-blockdev passed as './file0' [ 52.918237][ T4731] EXT4-fs: error: could not find journal device path [ 52.925074][ T4735] tipc: Invalid UDP bearer configuration [ 52.925087][ T4735] tipc: Enabling of bearer rejected, failed to enable media [ 52.946345][ T4731] loop4: detected capacity change from 0 to 512 [ 52.966246][ T4731] journal_path: Non-blockdev passed as './file0' [ 52.972669][ T4731] EXT4-fs: error: could not find journal device path [ 53.011814][ T4741] loop0: detected capacity change from 0 to 1024 [ 53.021359][ T4731] loop4: detected capacity change from 0 to 512 [ 53.043835][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.050244][ T4731] EXT4-fs: error: could not find journal device path [ 53.059828][ T4741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.099663][ T4731] loop4: detected capacity change from 0 to 512 [ 53.109528][ T4741] random: crng reseeded on system resumption [ 53.130548][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.136912][ T4731] EXT4-fs: error: could not find journal device path [ 53.157088][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.169893][ T4731] loop4: detected capacity change from 0 to 512 [ 53.177197][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.183602][ T4731] EXT4-fs: error: could not find journal device path [ 53.229265][ T4731] loop4: detected capacity change from 0 to 512 [ 53.257848][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.264307][ T4731] EXT4-fs: error: could not find journal device path [ 53.311801][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.318288][ T4731] EXT4-fs: error: could not find journal device path [ 53.349974][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.356381][ T4731] EXT4-fs: error: could not find journal device path [ 53.398414][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.405023][ T4731] EXT4-fs: error: could not find journal device path [ 53.442353][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.448800][ T4731] EXT4-fs: error: could not find journal device path [ 53.505219][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.511592][ T4731] EXT4-fs: error: could not find journal device path [ 53.580858][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.587272][ T4731] EXT4-fs: error: could not find journal device path [ 53.642837][ T4780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 53.643011][ T4731] journal_path: Non-blockdev passed as './file0' [ 53.658154][ T4731] EXT4-fs: error: could not find journal device path [ 53.665949][ T4780] tipc: Invalid UDP bearer configuration [ 53.665963][ T4780] tipc: Enabling of bearer rejected, failed to enable media [ 53.764685][ T4788] FAULT_INJECTION: forcing a failure. [ 53.764685][ T4788] name failslab, interval 1, probability 0, space 0, times 0 [ 53.777380][ T4788] CPU: 1 UID: 0 PID: 4788 Comm: syz.4.371 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.777412][ T4788] Tainted: [W]=WARN [ 53.777420][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.777438][ T4788] Call Trace: [ 53.777450][ T4788] [ 53.777460][ T4788] __dump_stack+0x1d/0x30 [ 53.777485][ T4788] dump_stack_lvl+0x95/0xd0 [ 53.777505][ T4788] dump_stack+0x15/0x1b [ 53.777523][ T4788] should_fail_ex+0x263/0x280 [ 53.777669][ T4788] should_failslab+0x8c/0xb0 [ 53.777740][ T4788] __kmalloc_noprof+0xb8/0x580 [ 53.777765][ T4788] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 53.777798][ T4788] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 53.777826][ T4788] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 53.777923][ T4788] ? selinux_capable+0x31/0x40 [ 53.777942][ T4788] ? security_capable+0x7b/0x90 [ 53.777968][ T4788] ? ns_capable+0x7c/0xb0 [ 53.778050][ T4788] genl_rcv_msg+0x432/0x470 [ 53.778073][ T4788] ? __pfx_wg_set_device_doit+0x10/0x10 [ 53.778100][ T4788] netlink_rcv_skb+0x123/0x220 [ 53.778168][ T4788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.778239][ T4788] genl_rcv+0x28/0x40 [ 53.778260][ T4788] netlink_unicast+0x5c0/0x690 [ 53.778287][ T4788] netlink_sendmsg+0x5c8/0x6f0 [ 53.778327][ T4788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.778344][ T4788] ____sys_sendmsg+0x5af/0x600 [ 53.778367][ T4788] ___sys_sendmsg+0x195/0x1e0 [ 53.778409][ T4788] __x64_sys_sendmsg+0xd4/0x160 [ 53.778430][ T4788] x64_sys_call+0x17ba/0x3000 [ 53.778469][ T4788] do_syscall_64+0xc0/0x2a0 [ 53.778497][ T4788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.778692][ T4788] RIP: 0033:0x7f805366aeb9 [ 53.778707][ T4788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.778726][ T4788] RSP: 002b:00007f80520c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.778748][ T4788] RAX: ffffffffffffffda RBX: 00007f80538e5fa0 RCX: 00007f805366aeb9 [ 53.778764][ T4788] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000003 [ 53.778779][ T4788] RBP: 00007f80520c7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.778830][ T4788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.778844][ T4788] R13: 00007f80538e6038 R14: 00007f80538e5fa0 R15: 00007ffe2e9f1108 [ 53.778864][ T4788] [ 53.812441][ T4791] netlink: 136 bytes leftover after parsing attributes in process `syz.3.370'. [ 53.952584][ T4801] 9p: Invalid uid '0x00000000ffffffff' [ 53.967805][ T4791] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 54.038392][ T4790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.071736][ T4807] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.099712][ T4790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.113738][ T4807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.139685][ T4790] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.178436][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.190013][ T4790] EXT4-fs (loop1): shut down requested (0) [ 54.212048][ T4823] uprobe: syz.3.380:4823 failed to unregister, leaking uprobe [ 54.246198][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.254924][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.288873][ T4819] uprobe: syz.3.380:4819 failed to unregister, leaking uprobe [ 54.319507][ T4757] syz.0.366 (4757) used greatest stack depth: 9048 bytes left [ 54.367256][ T4845] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.383'. [ 54.722627][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.764823][ T4899] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.880415][ T4919] EXT4-fs: Ignoring removed oldalloc option [ 54.895630][ T4919] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.398: corrupted in-inode xattr: e_value size too large [ 54.933558][ T4928] team0: entered promiscuous mode [ 54.938644][ T4928] team_slave_0: entered promiscuous mode [ 54.944524][ T4928] team_slave_1: entered promiscuous mode [ 54.953756][ T4927] team0: left promiscuous mode [ 54.958579][ T4927] team_slave_0: left promiscuous mode [ 54.964191][ T4927] team_slave_1: left promiscuous mode [ 54.969726][ T4931] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 54.979093][ T4919] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.398: couldn't read orphan inode 15 (err -117) [ 55.080708][ T4947] 9p: Bad value for 'wfdno' [ 55.088648][ T4937] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.401: inode has both inline data and extents flags [ 55.123645][ T4937] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.401: couldn't read orphan inode 15 (err -117) [ 55.163171][ T4954] FAULT_INJECTION: forcing a failure. [ 55.163171][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.176302][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.4.411 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.176335][ T4954] Tainted: [W]=WARN [ 55.176342][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.176395][ T4954] Call Trace: [ 55.176403][ T4954] [ 55.176410][ T4954] __dump_stack+0x1d/0x30 [ 55.176432][ T4954] dump_stack_lvl+0x95/0xd0 [ 55.176455][ T4954] dump_stack+0x15/0x1b [ 55.176536][ T4954] should_fail_ex+0x263/0x280 [ 55.176564][ T4954] should_fail+0xb/0x20 [ 55.176627][ T4954] should_fail_usercopy+0x1a/0x20 [ 55.176735][ T4954] _copy_to_user+0x20/0xa0 [ 55.176755][ T4954] simple_read_from_buffer+0xb5/0x130 [ 55.176787][ T4954] proc_fail_nth_read+0x10e/0x150 [ 55.176847][ T4954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.176878][ T4954] vfs_read+0x1ab/0x7f0 [ 55.176896][ T4954] ? __rcu_read_unlock+0x4e/0x70 [ 55.176972][ T4954] ? __fget_files+0x184/0x1c0 [ 55.176996][ T4954] ? mutex_lock+0x57/0x90 [ 55.177067][ T4954] ksys_read+0xdc/0x1a0 [ 55.177090][ T4954] __x64_sys_read+0x40/0x50 [ 55.177163][ T4954] x64_sys_call+0x2889/0x3000 [ 55.177186][ T4954] do_syscall_64+0xc0/0x2a0 [ 55.177213][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.177299][ T4954] RIP: 0033:0x7f805362b78e [ 55.177314][ T4954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.177331][ T4954] RSP: 002b:00007f80520c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.177352][ T4954] RAX: ffffffffffffffda RBX: 00007f80520c76c0 RCX: 00007f805362b78e [ 55.177368][ T4954] RDX: 000000000000000f RSI: 00007f80520c70a0 RDI: 0000000000000004 [ 55.177383][ T4954] RBP: 00007f80520c7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.177415][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.177428][ T4954] R13: 00007f80538e6038 R14: 00007f80538e5fa0 R15: 00007ffe2e9f1108 [ 55.177473][ T4954] [ 55.181145][ T4956] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 55.206645][ T36] lo speed is unknown, defaulting to 1000 [ 55.206674][ T36] syz0: Port: 1 Link DOWN [ 55.208263][ T4956] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 55.210511][ T36] lo speed is unknown, defaulting to 1000 [ 55.210527][ T36] syz0: Port: 1 Link ACTIVE [ 55.273367][ T4964] syz.1.410 uses obsolete (PF_INET,SOCK_PACKET) [ 55.300250][ T4960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.498915][ T4960] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.523458][ T4960] EXT4-fs (loop2): shut down requested (0) [ 55.750418][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 55.776172][ T4998] bond2: option ad_user_port_key: invalid value (1136) [ 55.783115][ T4998] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 55.802746][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 55.816039][ T4998] bond2 (unregistering): Released all slaves [ 55.832687][ T5001] team1: entered promiscuous mode [ 55.837764][ T5001] team1: entered allmulticast mode [ 55.843298][ T5001] 8021q: adding VLAN 0 to HW filter on device team1 [ 55.869878][ T4998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.902315][ T4998] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.425: Invalid block bitmap block 0 in block_group 0 [ 55.904123][ T5010] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 55.929697][ T4998] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 55.949679][ T4998] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.425: attempt to clear invalid blocks 983261 len 1 [ 55.973728][ T4998] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.425: Invalid inode table block 0 in block_group 0 [ 55.990563][ T5018] EXT4-fs: Ignoring removed nobh option [ 56.000625][ T4998] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 56.022959][ T4998] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 56.037177][ T5023] gre0: entered promiscuous mode [ 56.044019][ T5018] EXT4-fs (loop0): 1 orphan inode deleted [ 56.051246][ T4998] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.425: Invalid inode table block 0 in block_group 0 [ 56.064372][ T4998] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 56.074132][ T4998] EXT4-fs error (device loop4): ext4_truncate:4635: inode #11: comm syz.4.425: mark_inode_dirty error [ 56.085677][ T4998] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 56.117082][ T5031] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.118605][ T5031] @0Ù: renamed from bond_slave_1 (while UP) [ 56.118615][ T4998] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.425: Invalid inode table block 0 in block_group 0 [ 56.118722][ T4998] EXT4-fs (loop4): 1 truncate cleaned up [ 56.231219][ T5034] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.281070][ T5037] EXT4-fs: quotafile must be on filesystem root [ 56.518731][ T5052] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.534452][ T5052] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.442: bg 0: block 4: invalid block bitmap [ 56.547665][ T5052] EXT4-fs (loop4): Remounting filesystem read-only [ 56.554448][ T5052] EXT4-fs (loop4): 1 truncate cleaned up [ 56.610501][ T5058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.616984][ T5060] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.626161][ T5063] syz_tun: entered allmulticast mode [ 56.655796][ T5058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.715270][ T5067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5067 comm=syz.4.448 [ 56.728106][ T5067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5067 comm=syz.4.448 [ 56.744137][ T5067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5067 comm=syz.4.448 [ 56.756596][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 56.756611][ T29] audit: type=1400 audit(1770827414.333:3785): avc: denied { audit_write } for pid=5066 comm="syz.4.448" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.757396][ T5067] netlink: 'syz.4.448': attribute type 5 has an invalid length. [ 56.796437][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 56.810914][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 56.825732][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 56.826338][ T29] audit: type=1400 audit(1770827414.422:3786): avc: denied { rmdir } for pid=3310 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.839032][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 56.887376][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 56.901748][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 56.916208][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 56.940518][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 56.954767][ T5075] set_capacity_and_notify: 25 callbacks suppressed [ 56.954783][ T5075] loop1: detected capacity change from 0 to 256 [ 56.968398][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 56.985238][ T5073] loop4: detected capacity change from 0 to 512 [ 56.991793][ T29] audit: type=1326 audit(1770827414.581:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.014476][ T3310] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 57.015220][ T29] audit: type=1326 audit(1770827414.581:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.034618][ T5073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.052690][ T29] audit: type=1326 audit(1770827414.581:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.052722][ T29] audit: type=1326 audit(1770827414.581:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.052744][ T29] audit: type=1326 audit(1770827414.581:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.131064][ T29] audit: type=1326 audit(1770827414.581:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.146577][ T5073] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.154505][ T29] audit: type=1326 audit(1770827414.581:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.188379][ T29] audit: type=1326 audit(1770827414.581:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 57.211699][ T5073] EXT4-fs (loop4): shut down requested (0) [ 57.255184][ T5082] __nla_validate_parse: 2 callbacks suppressed [ 57.255199][ T5082] netlink: 182 bytes leftover after parsing attributes in process `syz.1.453'. [ 57.273986][ T5082] netlink: 168 bytes leftover after parsing attributes in process `syz.1.453'. [ 57.298851][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 57.307802][ T5084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 57.318855][ T5084] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 57.371180][ T381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.426292][ T381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.431099][ T5096] loop2: detected capacity change from 0 to 512 [ 57.469257][ T5096] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.492224][ T5096] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.459: Failed to acquire dquot type 0 [ 57.520205][ T381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.576873][ T381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.649509][ T5130] loop0: detected capacity change from 0 to 128 [ 57.673808][ T5130] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.691999][ T5101] lo speed is unknown, defaulting to 1000 [ 57.720522][ T5101] lo speed is unknown, defaulting to 1000 [ 57.722893][ T5130] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 57.773092][ T5139] loop2: detected capacity change from 0 to 7 [ 57.785481][ T381] bridge_slave_1: left allmulticast mode [ 57.791201][ T381] bridge_slave_1: left promiscuous mode [ 57.797080][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.814700][ T381] bridge_slave_0: left allmulticast mode [ 57.820356][ T381] bridge_slave_0: left promiscuous mode [ 57.826160][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.853374][ T5140] xt_recent: Unsupported userspace flags (000000b1) [ 57.944316][ T5153] netlink: 182 bytes leftover after parsing attributes in process `syz.2.470'. [ 58.066510][ T381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.076614][ T381] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 58.085606][ T381] bond0 (unregistering): Released all slaves [ 58.121025][ T5153] netlink: 168 bytes leftover after parsing attributes in process `syz.2.470'. [ 58.186943][ T5171] loop0: detected capacity change from 0 to 8192 [ 58.196057][ T381] hsr_slave_0: left promiscuous mode [ 58.225425][ T381] hsr_slave_1: left promiscuous mode [ 58.233732][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.241228][ T381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.328551][ T5182] uprobe: syz.4.476:5182 failed to unregister, leaking uprobe [ 58.338382][ T5188] loop1: detected capacity change from 0 to 512 [ 58.353501][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.361013][ T381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.375085][ T5188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.399326][ T5181] uprobe: syz.4.476:5181 failed to unregister, leaking uprobe [ 58.415657][ T381] veth1_macvtap: left promiscuous mode [ 58.426909][ T381] veth0_macvtap: left promiscuous mode [ 58.433018][ T381] veth1_vlan: left promiscuous mode [ 58.455117][ T5188] EXT4-fs (loop1): 1 truncate cleaned up [ 58.470323][ T381] veth0_vlan: left promiscuous mode [ 58.544395][ T5207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.481'. [ 58.646643][ T381] team0 (unregistering): Port device team_slave_1 removed [ 58.660214][ T381] team0 (unregistering): Port device team_slave_0 removed [ 58.753772][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 58.905458][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.912837][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.985418][ T5101] bridge_slave_0: entered allmulticast mode [ 59.003604][ T5101] bridge_slave_0: entered promiscuous mode [ 59.007123][ T5244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.487'. [ 59.016432][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.025591][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.039490][ T5101] bridge_slave_1: entered allmulticast mode [ 59.046476][ T5101] bridge_slave_1: entered promiscuous mode [ 59.059912][ T5244] tipc: Invalid UDP bearer configuration [ 59.059951][ T5244] tipc: Enabling of bearer rejected, failed to enable media [ 59.118357][ T5256] loop4: detected capacity change from 0 to 512 [ 59.127575][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.158377][ T5256] netlink: 'syz.4.491': attribute type 13 has an invalid length. [ 59.166211][ T5256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.491'. [ 59.179126][ T5254] syzkaller1: entered promiscuous mode [ 59.184798][ T5254] syzkaller1: entered allmulticast mode [ 59.226316][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 59.239386][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.276511][ T5273] loop1: detected capacity change from 0 to 2048 [ 59.285363][ T5273] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.315830][ T5101] team0: Port device team_slave_0 added [ 59.340937][ T5266] loop2: detected capacity change from 0 to 512 [ 59.383124][ T5266] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.394338][ T5101] team0: Port device team_slave_1 added [ 59.445244][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.452265][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.478213][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.491530][ T5288] lo speed is unknown, defaulting to 1000 [ 59.495733][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.504291][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.530255][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.602162][ T5101] hsr_slave_0: entered promiscuous mode [ 59.621210][ T5101] hsr_slave_1: entered promiscuous mode [ 59.664153][ T5101] debugfs: 'hsr0' already exists in 'hsr' [ 59.669907][ T5101] Cannot create hsr debugfs directory [ 59.804961][ T5328] EXT4-fs (loop0): 1 orphan inode deleted [ 59.928954][ T5354] tipc: Invalid UDP bearer configuration [ 59.928967][ T5354] tipc: Enabling of bearer rejected, failed to enable media [ 60.002266][ T5101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.026806][ T5101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.043828][ T5357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.073833][ T5101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.143556][ T5101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.183407][ T5357] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.249099][ T5357] EXT4-fs (loop1): shut down requested (0) [ 60.298145][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.302402][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.318930][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.326069][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.347032][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.347064][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.565570][ T5442] syz_tun: entered promiscuous mode [ 60.643309][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.774530][ T5101] veth0_vlan: entered promiscuous mode [ 60.783288][ T5101] veth1_vlan: entered promiscuous mode [ 60.828940][ T5101] veth0_macvtap: entered promiscuous mode [ 60.845436][ T5101] veth1_macvtap: entered promiscuous mode [ 60.875942][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.894526][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.902031][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 60.916063][ T5472] uprobe: syz.4.516:5472 failed to unregister, leaking uprobe [ 60.922407][ T3423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.941589][ T3423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.958560][ T3423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.967805][ T3423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.453907][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 61.461352][ T3404] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 61.462204][ T5508] binfmt_misc: register: failed to install interpreter file ./file0 [ 61.472543][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.485709][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.493126][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.500593][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.508034][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.515490][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.522945][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.530379][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.537797][ T3404] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.572068][ T3404] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.619813][ T5516] uprobe: syz.4.530:5516 failed to unregister, leaking uprobe [ 61.637633][ T5518] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.724823][ T5514] fido_id[5514]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.795144][ T5527] delete_channel: no stack [ 61.802752][ T29] kauditd_printk_skb: 910 callbacks suppressed [ 61.802767][ T29] audit: type=1326 audit(1770827419.364:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.832348][ T29] audit: type=1326 audit(1770827419.364:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.872935][ T29] audit: type=1326 audit(1770827419.374:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.896202][ T29] audit: type=1326 audit(1770827419.374:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.919595][ T29] audit: type=1326 audit(1770827419.374:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.942970][ T29] audit: type=1326 audit(1770827419.404:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.966360][ T29] audit: type=1326 audit(1770827419.404:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 61.989818][ T29] audit: type=1326 audit(1770827419.404:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f805362b78e code=0x7ffc0000 [ 62.013201][ T29] audit: type=1326 audit(1770827419.404:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f805366c1d7 code=0x7ffc0000 [ 62.036587][ T29] audit: type=1326 audit(1770827419.404:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f805366aeb9 code=0x7ffc0000 [ 62.080838][ T5501] set_capacity_and_notify: 20 callbacks suppressed [ 62.080882][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.107771][ T5535] loop4: detected capacity change from 0 to 512 [ 62.123568][ T5538] loop5: detected capacity change from 0 to 512 [ 62.150920][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.162022][ T5538] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.168110][ T5544] FAULT_INJECTION: forcing a failure. [ 62.168110][ T5544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.184398][ T5544] CPU: 0 UID: 0 PID: 5544 Comm: syz.1.539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.184460][ T5544] Tainted: [W]=WARN [ 62.184466][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.184477][ T5544] Call Trace: [ 62.184484][ T5544] [ 62.184491][ T5544] __dump_stack+0x1d/0x30 [ 62.184560][ T5544] dump_stack_lvl+0x95/0xd0 [ 62.184579][ T5544] dump_stack+0x15/0x1b [ 62.184597][ T5544] should_fail_ex+0x263/0x280 [ 62.184625][ T5544] should_fail+0xb/0x20 [ 62.184725][ T5544] should_fail_usercopy+0x1a/0x20 [ 62.184767][ T5544] _copy_from_iter+0xcf/0xea0 [ 62.184784][ T5544] ? __alloc_skb+0x397/0x4b0 [ 62.185008][ T5544] ? __alloc_skb+0x219/0x4b0 [ 62.185033][ T5544] netlink_sendmsg+0x4ae/0x6f0 [ 62.185053][ T5544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.185070][ T5544] ____sys_sendmsg+0x5af/0x600 [ 62.185090][ T5544] ___sys_sendmsg+0x195/0x1e0 [ 62.185198][ T5544] __x64_sys_sendmsg+0xd4/0x160 [ 62.185219][ T5544] x64_sys_call+0x17ba/0x3000 [ 62.185242][ T5544] do_syscall_64+0xc0/0x2a0 [ 62.185288][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.185308][ T5544] RIP: 0033:0x7f2db842aeb9 [ 62.185329][ T5544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.185406][ T5544] RSP: 002b:00007f2db6e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.185428][ T5544] RAX: ffffffffffffffda RBX: 00007f2db86a5fa0 RCX: 00007f2db842aeb9 [ 62.185441][ T5544] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 62.185463][ T5544] RBP: 00007f2db6e87090 R08: 0000000000000000 R09: 0000000000000000 [ 62.185475][ T5544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.185487][ T5544] R13: 00007f2db86a6038 R14: 00007f2db86a5fa0 R15: 00007ffff869c158 [ 62.185544][ T5544] [ 62.396513][ T5535] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.420284][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.460322][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.512743][ T5549] loop1: detected capacity change from 0 to 1024 [ 62.529378][ T5550] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.538: corrupted inode contents [ 62.557358][ T5553] __nla_validate_parse: 19 callbacks suppressed [ 62.557372][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 62.578248][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.579427][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 62.585779][ T5550] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.538: mark_inode_dirty error [ 62.593771][ T5402] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.618075][ T5402] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.632696][ T5385] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.652738][ T5385] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.665011][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.676800][ T5550] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.538: corrupted inode contents [ 62.691098][ T5550] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.538: mark_inode_dirty error [ 62.715587][ T5550] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.538: mark inode dirty (error -117) [ 62.730734][ T5550] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 62.744260][ T5501] loop2: detected capacity change from 0 to 1024 [ 62.835591][ T5385] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.921203][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.950390][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.080005][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.551'. [ 63.140756][ T5589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.555'. [ 63.176818][ T5591] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.548'. [ 63.185915][ T5591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 63.203777][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.555'. [ 63.386059][ T5604] netlink: 168 bytes leftover after parsing attributes in process `syz.0.559'. [ 63.699175][ T5615] EXT4-fs: Ignoring removed bh option [ 63.704673][ T5615] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.796519][ T5622] netlink: 'syz.4.566': attribute type 58 has an invalid length. [ 63.807045][ T5622] netlink: 152 bytes leftover after parsing attributes in process `syz.4.566'. [ 63.812871][ T5624] bio_check_eod: 5626 callbacks suppressed [ 63.812889][ T5624] syz.2.567: attempt to access beyond end of device [ 63.812889][ T5624] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 63.837014][ T5624] syz.2.567: attempt to access beyond end of device [ 63.837014][ T5624] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 63.852316][ T5624] syz.2.567: attempt to access beyond end of device [ 63.852316][ T5624] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 63.865993][ T5624] buffer_io_error: 5626 callbacks suppressed [ 63.866064][ T5624] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 63.869096][ T5622] netlink: 'syz.4.566': attribute type 13 has an invalid length. [ 63.874425][ T5624] syz.2.567: attempt to access beyond end of device [ 63.874425][ T5624] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 63.905724][ T5624] syz.2.567: attempt to access beyond end of device [ 63.905724][ T5624] loop2: rw=8912896, sector=138, nr_sectors = 16 limit=128 [ 63.920916][ T5624] syz.2.567: attempt to access beyond end of device [ 63.920916][ T5624] loop2: rw=8912896, sector=170, nr_sectors = 16 limit=128 [ 63.940609][ T5624] syz.2.567: attempt to access beyond end of device [ 63.940609][ T5624] loop2: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 63.955365][ T5624] syz.2.567: attempt to access beyond end of device [ 63.955365][ T5624] loop2: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 63.955859][ T5623] syz.2.567: attempt to access beyond end of device [ 63.955859][ T5623] loop2: rw=8388608, sector=146, nr_sectors = 8 limit=128 [ 63.987915][ T5627] lo speed is unknown, defaulting to 1000 [ 63.999352][ T5623] syz.2.567: attempt to access beyond end of device [ 63.999352][ T5623] loop2: rw=8388608, sector=146, nr_sectors = 8 limit=128 [ 64.026079][ T5630] FAULT_INJECTION: forcing a failure. [ 64.026079][ T5630] name failslab, interval 1, probability 0, space 0, times 0 [ 64.038855][ T5630] CPU: 1 UID: 0 PID: 5630 Comm: syz.5.569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.038883][ T5630] Tainted: [W]=WARN [ 64.038894][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.038906][ T5630] Call Trace: [ 64.038912][ T5630] [ 64.038919][ T5630] __dump_stack+0x1d/0x30 [ 64.038942][ T5630] dump_stack_lvl+0x95/0xd0 [ 64.038962][ T5630] dump_stack+0x15/0x1b [ 64.038984][ T5630] should_fail_ex+0x263/0x280 [ 64.039013][ T5630] should_failslab+0x8c/0xb0 [ 64.039034][ T5630] kmem_cache_alloc_noprof+0x68/0x490 [ 64.039055][ T5630] ? vm_area_dup+0x33/0x2c0 [ 64.039077][ T5630] vm_area_dup+0x33/0x2c0 [ 64.039098][ T5630] dup_mmap+0x4c5/0xf00 [ 64.039135][ T5630] copy_mm+0x119/0x370 [ 64.039158][ T5630] copy_process+0xcbd/0x1f10 [ 64.039192][ T5630] kernel_clone+0x16b/0x5b0 [ 64.039208][ T5630] ? vfs_write+0x86e/0x9f0 [ 64.039225][ T5630] __x64_sys_clone+0x143/0x180 [ 64.039250][ T5630] x64_sys_call+0x12d0/0x3000 [ 64.039283][ T5630] do_syscall_64+0xc0/0x2a0 [ 64.039314][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.039336][ T5630] RIP: 0033:0x7f998978aeb9 [ 64.039350][ T5630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.039366][ T5630] RSP: 002b:00007f99881e6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 64.039384][ T5630] RAX: ffffffffffffffda RBX: 00007f9989a05fa0 RCX: 00007f998978aeb9 [ 64.039397][ T5630] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 64.039411][ T5630] RBP: 00007f99881e7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.039425][ T5630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 64.039438][ T5630] R13: 00007f9989a06038 R14: 00007f9989a05fa0 R15: 00007fffd371b468 [ 64.039458][ T5630] [ 64.287038][ T5630] Alternate GPT is invalid, using primary GPT. [ 64.293336][ T5630] loop5: p1 p2 p3 [ 64.297113][ T5630] loop5: partition table partially beyond EOD, truncated [ 64.305423][ T5633] Symlink component flag not implemented [ 64.311120][ T5633] Symlink component flag not implemented [ 64.317573][ T5633] Symlink component flag not implemented (129) [ 64.323740][ T5633] Symlink component flag not implemented (6) [ 64.353485][ T5636] netlink: 32 bytes leftover after parsing attributes in process `syz.5.571'. [ 64.354940][ T4539] udevd[4539]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 64.363617][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 64.383517][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 64.400307][ T5636] tipc: Invalid UDP bearer configuration [ 64.400322][ T5636] tipc: Enabling of bearer rejected, failed to enable media [ 64.423271][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.431862][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.472347][ T5627] netlink: 'syz.0.568': attribute type 13 has an invalid length. [ 64.500086][ T5627] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.593513][ T5655] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.749016][ T5670] tipc: Invalid UDP bearer configuration [ 64.749029][ T5670] tipc: Enabling of bearer rejected, failed to enable media [ 64.820463][ T5674] uprobe: syz.0.585:5674 failed to unregister, leaking uprobe [ 64.887992][ T5683] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.016517][ T5680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.037947][ T5681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.064709][ T3423] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.074876][ T5680] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.101704][ T5680] EXT4-fs (loop1): shut down requested (0) [ 65.126877][ T5681] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.152726][ T5681] EXT4-fs (loop2): shut down requested (0) [ 65.190713][ T5708] ext4: Unknown parameter 'smackfsroot' [ 65.282838][ T5710] tipc: Invalid UDP bearer configuration [ 65.282855][ T5710] tipc: Enabling of bearer rejected, failed to enable media [ 65.461741][ T5720] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 65.472420][ T5720] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 65.539707][ T5725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.555816][ T5727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.562881][ T5727] EXT4-fs: Invalid want_extra_isize 3 [ 65.579635][ T5725] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.594145][ T5725] EXT4-fs (loop1): shut down requested (0) [ 65.601071][ T5731] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.614201][ T5731] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 65.733623][ T5734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5734 comm=syz.4.605 [ 65.757748][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.766578][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.109929][ T5743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.130646][ T5743] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.144255][ T5743] EXT4-fs (loop0): shut down requested (0) [ 66.483330][ T5765] netlink: 'syz.2.616': attribute type 13 has an invalid length. [ 66.662456][ T5778] ISOFS: Bad logical zone size 65280 [ 66.680476][ T5778] ISOFS: Bad logical zone size 65280 [ 66.699688][ T5778] ISOFS: Bad logical zone size 65280 [ 66.719926][ T5778] ISOFS: Bad logical zone size 65280 [ 66.758809][ T5776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.770242][ T5778] ISOFS: Bad logical zone size 65280 [ 66.797273][ T5776] EXT4-fs mount: 55 callbacks suppressed [ 66.797291][ T5776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.815883][ T5776] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.826891][ T5778] ISOFS: Bad logical zone size 65280 [ 66.832378][ T29] kauditd_printk_skb: 1770 callbacks suppressed [ 66.832495][ T29] audit: type=1326 audit(1770827424.373:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd53dceb78e code=0x7ffc0000 [ 66.862280][ T29] audit: type=1326 audit(1770827424.373:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd53dceb78e code=0x7ffc0000 [ 66.862370][ T5776] EXT4-fs (loop1): shut down requested (0) [ 66.885699][ T29] audit: type=1326 audit(1770827424.373:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd53dceb78e code=0x7ffc0000 [ 66.900899][ T5789] bond3: option ad_user_port_key: invalid value (1136) [ 66.915173][ T29] audit: type=1326 audit(1770827424.373:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd53dceb78e code=0x7ffc0000 [ 66.922080][ T5789] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 66.952648][ T29] audit: type=1326 audit(1770827424.373:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2db83eb78e code=0x7ffc0000 [ 66.977358][ T29] audit: type=1326 audit(1770827424.373:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2db8429367 code=0x7ffc0000 [ 67.000690][ T5778] ISOFS: Bad logical zone size 65280 [ 67.000689][ T29] audit: type=1326 audit(1770827424.373:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2db83eb78e code=0x7ffc0000 [ 67.029273][ T29] audit: type=1326 audit(1770827424.373:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db842aeb9 code=0x7ffc0000 [ 67.052673][ T29] audit: type=1326 audit(1770827424.373:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db842aeb9 code=0x7ffc0000 [ 67.075977][ T29] audit: type=1326 audit(1770827424.383:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5742 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd53dceb78e code=0x7ffc0000 [ 67.075986][ T5778] ISOFS: Bad logical zone size 65280 [ 67.077071][ T5789] bond3 (unregistering): Released all slaves [ 67.111029][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.117149][ T4011] Bluetooth: hci0: command 0x1003 tx timeout [ 67.179021][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.222116][ T5801] batadv_slave_1: entered promiscuous mode [ 67.334643][ T5809] FAULT_INJECTION: forcing a failure. [ 67.334643][ T5809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.347957][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.4.630 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.347987][ T5809] Tainted: [W]=WARN [ 67.347997][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.348007][ T5809] Call Trace: [ 67.348014][ T5809] [ 67.348020][ T5809] __dump_stack+0x1d/0x30 [ 67.348042][ T5809] dump_stack_lvl+0x95/0xd0 [ 67.348061][ T5809] dump_stack+0x15/0x1b [ 67.348077][ T5809] should_fail_ex+0x263/0x280 [ 67.348102][ T5809] should_fail_alloc_page+0xf2/0x100 [ 67.348123][ T5809] __alloc_frozen_pages_noprof+0x108/0x350 [ 67.348151][ T5809] alloc_pages_mpol+0xb3/0x260 [ 67.348175][ T5809] alloc_pages_noprof+0x8f/0x130 [ 67.348200][ T5809] pte_alloc_one+0x1e/0xd0 [ 67.348224][ T5809] __pte_alloc+0x32/0x2c0 [ 67.348247][ T5809] copy_page_range+0x3681/0x3cf0 [ 67.348286][ T5809] ? vma_interval_tree_insert_after+0x197/0x1b0 [ 67.348320][ T5809] dup_mmap+0x852/0xf00 [ 67.348352][ T5809] copy_mm+0x119/0x370 [ 67.348368][ T5809] copy_process+0xcbd/0x1f10 [ 67.348400][ T5809] kernel_clone+0x16b/0x5b0 [ 67.348420][ T5809] ? vfs_write+0x86e/0x9f0 [ 67.348442][ T5809] __x64_sys_clone+0x143/0x180 [ 67.348463][ T5809] x64_sys_call+0x12d0/0x3000 [ 67.348484][ T5809] do_syscall_64+0xc0/0x2a0 [ 67.348517][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.348535][ T5809] RIP: 0033:0x7f805366aeb9 [ 67.348549][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.348564][ T5809] RSP: 002b:00007f80520c6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 67.348582][ T5809] RAX: ffffffffffffffda RBX: 00007f80538e5fa0 RCX: 00007f805366aeb9 [ 67.348594][ T5809] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 67.348605][ T5809] RBP: 00007f80520c7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.348616][ T5809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 67.348627][ T5809] R13: 00007f80538e6038 R14: 00007f80538e5fa0 R15: 00007ffe2e9f1108 [ 67.348647][ T5809] [ 67.356418][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.402263][ T5809] set_capacity_and_notify: 36 callbacks suppressed [ 67.402278][ T5809] loop4: detected capacity change from 0 to 2048 [ 67.493017][ T5816] netlink: 'syz.5.632': attribute type 21 has an invalid length. [ 67.497627][ T5817] tipc: Invalid UDP bearer configuration [ 67.595490][ T5817] tipc: Enabling of bearer rejected, failed to enable media [ 67.653246][ T5809] Alternate GPT is invalid, using primary GPT. [ 67.659630][ T5809] loop4: p1 p2 p3 [ 67.663351][ T5809] loop4: partition table partially beyond EOD, truncated [ 67.738672][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 67.750448][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.761315][ T4539] udevd[4539]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.790563][ T5841] loop4: detected capacity change from 0 to 256 [ 67.864911][ T5852] __nla_validate_parse: 12 callbacks suppressed [ 67.864928][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 67.943823][ T5858] loop5: detected capacity change from 0 to 164 [ 67.989468][ T5860] loop1: detected capacity change from 0 to 2048 [ 68.007299][ T5862] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 68.008252][ T5860] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.030755][ T5862] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.063453][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.075695][ T5799] batadv_slave_1: left promiscuous mode [ 68.225571][ T5875] loop2: detected capacity change from 0 to 1024 [ 68.308829][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.335229][ T5888] loop0: detected capacity change from 0 to 1230 [ 68.335495][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 68.385951][ T5875] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.434248][ T5875] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.652: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.473821][ T5896] uprobe: syz.0.656:5896 failed to unregister, leaking uprobe [ 68.491681][ T5875] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.504195][ T5875] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.504195][ T5875] [ 68.531844][ T5875] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.652: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.586590][ T5875] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.599246][ T5875] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.599246][ T5875] [ 68.611910][ T5907] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 68.623206][ T5907] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.733755][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.803888][ T5853] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 68.875558][ T5853] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1440 with error 28 [ 68.888091][ T5853] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.888091][ T5853] [ 68.897968][ T5853] EXT4-fs (loop1): Total free blocks count 0 [ 68.904004][ T5853] EXT4-fs (loop1): Free/Dirty block details [ 68.910004][ T5853] EXT4-fs (loop1): free_blocks=2415919504 [ 68.915776][ T5853] EXT4-fs (loop1): dirty_blocks=1440 [ 68.921156][ T5853] EXT4-fs (loop1): Block reservation details [ 68.927215][ T5853] EXT4-fs (loop1): i_reserved_data_blocks=90 [ 68.940876][ T5933] uprobe: syz.5.670:5933 failed to unregister, leaking uprobe [ 68.963917][ T5936] FAULT_INJECTION: forcing a failure. [ 68.963917][ T5936] name failslab, interval 1, probability 0, space 0, times 0 [ 68.976992][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: syz.2.671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.977028][ T5936] Tainted: [W]=WARN [ 68.977035][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.977048][ T5936] Call Trace: [ 68.977056][ T5936] [ 68.977065][ T5936] __dump_stack+0x1d/0x30 [ 68.977090][ T5936] dump_stack_lvl+0x95/0xd0 [ 68.977113][ T5936] dump_stack+0x15/0x1b [ 68.977134][ T5936] should_fail_ex+0x263/0x280 [ 68.977165][ T5936] should_failslab+0x8c/0xb0 [ 68.977190][ T5936] kmem_cache_alloc_noprof+0x68/0x490 [ 68.977214][ T5936] ? vm_area_dup+0x33/0x2c0 [ 68.977240][ T5936] vm_area_dup+0x33/0x2c0 [ 68.977263][ T5936] dup_mmap+0x4c5/0xf00 [ 68.977298][ T5936] copy_mm+0x119/0x370 [ 68.977322][ T5936] copy_process+0xcbd/0x1f10 [ 68.977355][ T5936] kernel_clone+0x16b/0x5b0 [ 68.977371][ T5936] ? vfs_write+0x86e/0x9f0 [ 68.977392][ T5936] __x64_sys_clone+0x143/0x180 [ 68.977417][ T5936] x64_sys_call+0x12d0/0x3000 [ 68.977440][ T5936] do_syscall_64+0xc0/0x2a0 [ 68.977471][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.977490][ T5936] RIP: 0033:0x7f9ea541aeb9 [ 68.977505][ T5936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.977521][ T5936] RSP: 002b:00007f9ea3e76fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 68.977542][ T5936] RAX: ffffffffffffffda RBX: 00007f9ea5695fa0 RCX: 00007f9ea541aeb9 [ 68.977558][ T5936] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 68.977571][ T5936] RBP: 00007f9ea3e77090 R08: 0000000000000000 R09: 0000000000000000 [ 68.977583][ T5936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 68.977594][ T5936] R13: 00007f9ea5696038 R14: 00007f9ea5695fa0 R15: 00007ffe04e1e808 [ 68.977622][ T5936] [ 69.192132][ T3423] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1440 with max blocks 2048 with error 28 [ 69.237104][ T5936] loop2: detected capacity change from 0 to 2048 [ 69.253141][ T5941] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 69.268595][ T5941] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.294907][ T3301] Alternate GPT is invalid, using primary GPT. [ 69.301376][ T3301] loop2: p1 p2 p3 [ 69.305565][ T3301] loop2: partition table partially beyond EOD, truncated [ 69.333756][ T5945] loop1: detected capacity change from 0 to 512 [ 69.351767][ T5945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.366208][ T5936] Alternate GPT is invalid, using primary GPT. [ 69.372549][ T5936] loop2: p1 p2 p3 [ 69.376383][ T5936] loop2: partition table partially beyond EOD, truncated [ 69.393061][ T5945] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.673: iget: bad i_size value: 38620345925642 [ 69.433730][ T5952] Illegal XDP return value 4294967294 on prog (id 133) dev N/A, expect packet loss! [ 69.454264][ T5945] EXT4-fs (loop1): Remounting filesystem read-only [ 69.461389][ T5945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.489699][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.519374][ T3654] udevd[3654]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.529767][ T4539] udevd[4539]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.551132][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.573908][ T4539] udevd[4539]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.591288][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.602704][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.696796][ T5983] FAULT_INJECTION: forcing a failure. [ 69.696796][ T5983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.710174][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.2.689 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.710208][ T5983] Tainted: [W]=WARN [ 69.710215][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.710228][ T5983] Call Trace: [ 69.710236][ T5983] [ 69.710244][ T5983] __dump_stack+0x1d/0x30 [ 69.710266][ T5983] dump_stack_lvl+0x95/0xd0 [ 69.710284][ T5983] dump_stack+0x15/0x1b [ 69.710302][ T5983] should_fail_ex+0x263/0x280 [ 69.710332][ T5983] should_fail_alloc_page+0xf2/0x100 [ 69.710355][ T5983] __alloc_frozen_pages_noprof+0x108/0x350 [ 69.710388][ T5983] alloc_pages_mpol+0xb3/0x260 [ 69.710421][ T5983] alloc_pages_noprof+0x8f/0x130 [ 69.710448][ T5983] pte_alloc_one+0x1e/0xd0 [ 69.710473][ T5983] __pte_alloc+0x32/0x2c0 [ 69.710498][ T5983] copy_page_range+0x3681/0x3cf0 [ 69.710546][ T5983] ? vma_interval_tree_insert_after+0x197/0x1b0 [ 69.710578][ T5983] dup_mmap+0x852/0xf00 [ 69.710616][ T5983] copy_mm+0x119/0x370 [ 69.710633][ T5983] copy_process+0xcbd/0x1f10 [ 69.710665][ T5983] kernel_clone+0x16b/0x5b0 [ 69.710682][ T5983] ? vfs_write+0x86e/0x9f0 [ 69.710701][ T5983] __x64_sys_clone+0x143/0x180 [ 69.710724][ T5983] x64_sys_call+0x12d0/0x3000 [ 69.710748][ T5983] do_syscall_64+0xc0/0x2a0 [ 69.710780][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.710802][ T5983] RIP: 0033:0x7f9ea541aeb9 [ 69.710819][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.710838][ T5983] RSP: 002b:00007f9ea3e76fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 69.710859][ T5983] RAX: ffffffffffffffda RBX: 00007f9ea5695fa0 RCX: 00007f9ea541aeb9 [ 69.710873][ T5983] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 69.710887][ T5983] RBP: 00007f9ea3e77090 R08: 0000000000000000 R09: 0000000000000000 [ 69.710901][ T5983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 69.710913][ T5983] R13: 00007f9ea5696038 R14: 00007f9ea5695fa0 R15: 00007ffe04e1e808 [ 69.710937][ T5983] [ 69.720744][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 69.764426][ T5983] loop2: detected capacity change from 0 to 2048 [ 69.769581][ T5985] netlink: 108 bytes leftover after parsing attributes in process `syz.1.690'. [ 69.948649][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 70.038208][ T3301] Alternate GPT is invalid, using primary GPT. [ 70.044562][ T3301] loop2: p1 p2 p3 [ 70.048453][ T3301] loop2: partition table partially beyond EOD, truncated [ 70.062819][ T6000] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 70.081820][ T6000] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 70.105787][ T5983] Alternate GPT is invalid, using primary GPT. [ 70.112279][ T5983] loop2: p1 p2 p3 [ 70.116022][ T5983] loop2: partition table partially beyond EOD, truncated [ 70.143106][ T6011] loop1: detected capacity change from 0 to 4096 [ 70.144041][ T6010] netlink: 'syz.5.696': attribute type 1 has an invalid length. [ 70.158342][ T6013] netlink: 'syz.0.697': attribute type 4 has an invalid length. [ 70.176423][ T6013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.177532][ T2999] Alternate GPT is invalid, using primary GPT. [ 70.192773][ T2999] loop2: p1 p2 p3 [ 70.196509][ T2999] loop2: partition table partially beyond EOD, truncated [ 70.210581][ T6013] EXT4-fs (loop0): 1 truncate cleaned up [ 70.219821][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.226964][ T6013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.236372][ T6011] EXT4-fs (loop1): shut down requested (1) [ 70.252651][ T6010] bond1: entered promiscuous mode [ 70.258022][ T6010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.259940][ T6013] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.697: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.269222][ T6011] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 70.293503][ T6011] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 70.315944][ T6010] bond1: (slave bridge1): making interface the new active one [ 70.323472][ T6010] bridge1: entered promiscuous mode [ 70.345175][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.363593][ T6013] EXT4-fs (loop0): Remounting filesystem read-only [ 70.371686][ T4539] udevd[4539]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 70.381359][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.391816][ T3654] udevd[3654]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 70.408913][ T6010] bridge1: left promiscuous mode [ 70.431141][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 70.443585][ T10] hid_parser_main: 12 callbacks suppressed [ 70.443605][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.487670][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.557940][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.703'. [ 70.566839][ T6043] tipc: Invalid UDP bearer configuration [ 70.566851][ T6043] tipc: Enabling of bearer rejected, failed to enable media [ 70.584893][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.586954][ T6043] lo: Caught tx_queue_len zero misconfig [ 70.662749][ T6055] netlink: 168 bytes leftover after parsing attributes in process `syz.0.705'. [ 70.756472][ T6065] team0: Device veth0_vlan failed to register rx_handler [ 70.828870][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 70.848064][ T6068] batadv_slave_0: Caught tx_queue_len zero misconfig [ 70.957980][ T6097] netlink: 'syz.2.715': attribute type 2 has an invalid length. [ 70.988895][ T6102] netlink: 'syz.2.715': attribute type 3 has an invalid length. [ 70.996585][ T6102] netlink: 'syz.2.715': attribute type 8 has an invalid length. [ 71.004281][ T6102] netlink: 199720 bytes leftover after parsing attributes in process `syz.2.715'. [ 71.053388][ T6097] ext4: Unknown parameter 'subj_type' [ 71.205977][ T6122] uprobe: syz.1.718:6122 failed to unregister, leaking uprobe [ 71.221556][ T6125] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 71.233326][ T6126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.717'. [ 71.243166][ T6126] tipc: Invalid UDP bearer configuration [ 71.243180][ T6126] tipc: Enabling of bearer rejected, failed to enable media [ 71.432919][ T6145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.445234][ T6146] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.474149][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.474223][ T6146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.474329][ T6145] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.560781][ T6145] EXT4-fs (loop2): shut down requested (0) [ 71.757043][ T6153] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 71.790787][ T6153] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 71.850825][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 71.850840][ T29] audit: type=1326 audit(1770827429.378:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 71.981503][ T6155] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.988109][ T6155] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 71.995791][ T6155] audit: backlog limit exceeded [ 72.010860][ T29] audit: type=1326 audit(1770827429.418:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 72.034657][ T29] audit: type=1326 audit(1770827429.418:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 72.058149][ T29] audit: type=1326 audit(1770827429.418:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 72.081476][ T29] audit: type=1326 audit(1770827429.418:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 72.104838][ T29] audit: type=1326 audit(1770827429.418:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 72.128263][ T29] audit: type=1326 audit(1770827429.418:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ea53db78e code=0x7ffc0000 [ 72.192771][ T6159] 9p: Could not find request transport: fä|›iÙ<'#dr°o±Ù7 [ 72.221457][ T5405] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.234531][ T6163] uprobe: syz.1.730:6163 failed to unregister, leaking uprobe [ 72.280687][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.343016][ T6166] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.411778][ T6166] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.733: Directory hole found for htree leaf block 0 [ 72.429759][ T6139] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 72.446204][ T6175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6175 comm=syz.2.735 [ 72.460483][ T6139] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 72.473754][ T6139] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.473754][ T6139] [ 72.483616][ T6139] EXT4-fs (loop4): Total free blocks count 0 [ 72.489598][ T6139] EXT4-fs (loop4): Free/Dirty block details [ 72.495527][ T6139] EXT4-fs (loop4): free_blocks=2415919504 [ 72.501265][ T6139] EXT4-fs (loop4): dirty_blocks=2240 [ 72.506601][ T6139] EXT4-fs (loop4): Block reservation details [ 72.512610][ T6139] EXT4-fs (loop4): i_reserved_data_blocks=140 [ 72.558514][ T3314] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 72.589001][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 478 with error 28 [ 72.613740][ T6179] set_capacity_and_notify: 7 callbacks suppressed [ 72.613755][ T6179] loop2: detected capacity change from 0 to 128 [ 72.748428][ T6191] syz_tun: entered promiscuous mode [ 72.946083][ T6207] lo speed is unknown, defaulting to 1000 [ 73.028946][ T6207] netlink: 'syz.1.742': attribute type 2 has an invalid length. [ 73.148106][ T6207] loop1: detected capacity change from 0 to 8192 [ 73.163514][ T6207] __nla_validate_parse: 2 callbacks suppressed [ 73.163532][ T6207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.742'. [ 73.294065][ T6224] uprobe: syz.1.743:6224 failed to unregister, leaking uprobe [ 73.346295][ T6227] netlink: 168 bytes leftover after parsing attributes in process `syz.1.744'. [ 73.521072][ T6235] loop1: detected capacity change from 0 to 512 [ 73.545034][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.568392][ T6235] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.591414][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.708835][ T6251] tipc: Started in network mode [ 73.713755][ T6251] tipc: Node identity 0a82807da44d, cluster identity 4711 [ 73.721054][ T6251] tipc: Enabled bearer , priority 0 [ 73.729406][ T6249] loop1: detected capacity change from 0 to 2048 [ 73.737130][ T6251] .N: renamed from syzkaller0 [ 73.744691][ T6249] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.753900][ T6251] tipc: Disabling bearer [ 73.769548][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.789231][ T6251] loop4: detected capacity change from 0 to 256 [ 73.803875][ T6251] FAT-fs (loop4): Directory bread(block 1285) failed [ 73.813269][ T6251] FAT-fs (loop4): Directory bread(block 1285) failed [ 73.989912][ T6265] loop4: detected capacity change from 0 to 128 [ 74.004206][ T6265] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.027359][ T6265] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.041075][ T6265] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 74.106513][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.194265][ T6274] loop0: detected capacity change from 0 to 512 [ 74.205004][ T6274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.236499][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.242774][ T4011] Bluetooth: hci0: command 0x1003 tx timeout [ 74.254582][ T6274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.293485][ T6274] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.336974][ T6274] EXT4-fs (loop0): shut down requested (0) [ 74.467708][ T6284] xt_CT: No such helper "snmp" [ 74.501879][ T6240] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 74.524121][ T6240] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 74.536656][ T6240] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.536656][ T6240] [ 74.546569][ T6240] EXT4-fs (loop1): Total free blocks count 0 [ 74.552678][ T6240] EXT4-fs (loop1): Free/Dirty block details [ 74.558823][ T6240] EXT4-fs (loop1): free_blocks=2415919504 [ 74.564705][ T6240] EXT4-fs (loop1): dirty_blocks=2720 [ 74.570033][ T6240] EXT4-fs (loop1): Block reservation details [ 74.576042][ T6240] EXT4-fs (loop1): i_reserved_data_blocks=196 [ 74.579781][ T6291] loop2: detected capacity change from 0 to 512 [ 74.599532][ T6291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.767: ea_inode with extended attributes [ 74.624182][ T6291] EXT4-fs (loop2): Remounting filesystem read-only [ 74.635929][ T6291] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 74.648743][ T6291] EXT4-fs (loop2): 1 orphan inode deleted [ 74.655134][ T6291] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.760807][ T6291] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 74.794578][ T3423] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 75.053269][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.064214][ T6304] 9p: Bad value for 'wfdno' [ 75.091728][ T6308] netlink: 'syz.0.773': attribute type 3 has an invalid length. [ 75.200855][ T6320] FAULT_INJECTION: forcing a failure. [ 75.200855][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.214122][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.2.779 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.214207][ T6320] Tainted: [W]=WARN [ 75.214215][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.214230][ T6320] Call Trace: [ 75.214238][ T6320] [ 75.214248][ T6320] __dump_stack+0x1d/0x30 [ 75.214276][ T6320] dump_stack_lvl+0x95/0xd0 [ 75.214332][ T6320] dump_stack+0x15/0x1b [ 75.214416][ T6320] should_fail_ex+0x263/0x280 [ 75.214450][ T6320] should_fail+0xb/0x20 [ 75.214478][ T6320] should_fail_usercopy+0x1a/0x20 [ 75.214515][ T6320] _copy_from_user+0x1c/0xb0 [ 75.214586][ T6320] ___sys_sendmsg+0xc1/0x1e0 [ 75.214621][ T6320] __x64_sys_sendmsg+0xd4/0x160 [ 75.214646][ T6320] x64_sys_call+0x17ba/0x3000 [ 75.214673][ T6320] do_syscall_64+0xc0/0x2a0 [ 75.214782][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.214804][ T6320] RIP: 0033:0x7f9ea541aeb9 [ 75.214820][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.214879][ T6320] RSP: 002b:00007f9ea3e77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.214898][ T6320] RAX: ffffffffffffffda RBX: 00007f9ea5695fa0 RCX: 00007f9ea541aeb9 [ 75.214912][ T6320] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 75.214925][ T6320] RBP: 00007f9ea3e77090 R08: 0000000000000000 R09: 0000000000000000 [ 75.214940][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.215001][ T6320] R13: 00007f9ea5696038 R14: 00007f9ea5695fa0 R15: 00007ffe04e1e808 [ 75.215024][ T6320] [ 75.570021][ T6340] lo speed is unknown, defaulting to 1000 [ 75.798975][ T6352] sctp: [Deprecated]: syz.2.790 (pid 6352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.798975][ T6352] Use struct sctp_sack_info instead [ 75.823404][ T6348] loop0: detected capacity change from 0 to 2048 [ 75.845461][ T6348] loop0: detected capacity change from 0 to 512 [ 75.867511][ T6354] FAULT_INJECTION: forcing a failure. [ 75.867511][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 75.880272][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.1.792 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.880304][ T6354] Tainted: [W]=WARN [ 75.880311][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.880324][ T6354] Call Trace: [ 75.880331][ T6354] [ 75.880339][ T6354] __dump_stack+0x1d/0x30 [ 75.880406][ T6354] dump_stack_lvl+0x95/0xd0 [ 75.880428][ T6354] dump_stack+0x15/0x1b [ 75.880476][ T6354] should_fail_ex+0x263/0x280 [ 75.880559][ T6354] should_failslab+0x8c/0xb0 [ 75.880582][ T6354] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 75.880604][ T6354] ? __alloc_skb+0x2f0/0x4b0 [ 75.880742][ T6354] __alloc_skb+0x2f0/0x4b0 [ 75.880777][ T6354] ? __alloc_skb+0x219/0x4b0 [ 75.880867][ T6354] netlink_alloc_large_skb+0xbf/0xf0 [ 75.880913][ T6354] netlink_sendmsg+0x40c/0x6f0 [ 75.880933][ T6354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.880951][ T6354] ____sys_sendmsg+0x5af/0x600 [ 75.881023][ T6354] ___sys_sendmsg+0x195/0x1e0 [ 75.881050][ T6354] __x64_sys_sendmsg+0xd4/0x160 [ 75.881070][ T6354] x64_sys_call+0x17ba/0x3000 [ 75.881094][ T6354] do_syscall_64+0xc0/0x2a0 [ 75.881126][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.881201][ T6354] RIP: 0033:0x7f2db842aeb9 [ 75.881258][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.881275][ T6354] RSP: 002b:00007f2db6e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.881299][ T6354] RAX: ffffffffffffffda RBX: 00007f2db86a5fa0 RCX: 00007f2db842aeb9 [ 75.881314][ T6354] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 75.881327][ T6354] RBP: 00007f2db6e87090 R08: 0000000000000000 R09: 0000000000000000 [ 75.881356][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.881438][ T6354] R13: 00007f2db86a6038 R14: 00007f2db86a5fa0 R15: 00007ffff869c158 [ 75.881455][ T6354] [ 76.093473][ T6351] netlink: 72 bytes leftover after parsing attributes in process `syz.5.791'. [ 76.373542][ T6387] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 76.381333][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'. [ 76.445326][ T6395] vfat: Unknown parameter 'ÿ' [ 76.460530][ T6393] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 76.484313][ T6393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6393 comm=syz.5.811 [ 76.541771][ T6399] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 76.557656][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 76.567013][ T6405] FAULT_INJECTION: forcing a failure. [ 76.567013][ T6405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.580239][ T6405] CPU: 0 UID: 0 PID: 6405 Comm: syz.5.813 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.580271][ T6405] Tainted: [W]=WARN [ 76.580277][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.580288][ T6405] Call Trace: [ 76.580294][ T6405] [ 76.580301][ T6405] __dump_stack+0x1d/0x30 [ 76.580326][ T6405] dump_stack_lvl+0x95/0xd0 [ 76.580412][ T6405] dump_stack+0x15/0x1b [ 76.580431][ T6405] should_fail_ex+0x263/0x280 [ 76.580463][ T6405] should_fail+0xb/0x20 [ 76.580487][ T6405] should_fail_usercopy+0x1a/0x20 [ 76.580574][ T6405] _copy_from_user+0x1c/0xb0 [ 76.580629][ T6405] ___sys_recvmsg+0xaa/0x3b0 [ 76.580658][ T6405] do_recvmmsg+0x1ef/0x560 [ 76.580686][ T6405] ? fput+0x8f/0xc0 [ 76.580715][ T6405] __x64_sys_recvmmsg+0xe5/0x170 [ 76.580740][ T6405] x64_sys_call+0x2b75/0x3000 [ 76.580833][ T6405] do_syscall_64+0xc0/0x2a0 [ 76.580924][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.580948][ T6405] RIP: 0033:0x7f998978aeb9 [ 76.580965][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.580982][ T6405] RSP: 002b:00007f99881e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.581083][ T6405] RAX: ffffffffffffffda RBX: 00007f9989a05fa0 RCX: 00007f998978aeb9 [ 76.581098][ T6405] RDX: 0000000000000001 RSI: 0000200000005840 RDI: 0000000000000004 [ 76.581110][ T6405] RBP: 00007f99881e7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.581128][ T6405] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.581142][ T6405] R13: 00007f9989a06038 R14: 00007f9989a05fa0 R15: 00007fffd371b468 [ 76.581185][ T6405] [ 76.769709][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 76.858567][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=6416 comm=syz.2.815 [ 76.881483][ T6418] netlink: 'syz.5.818': attribute type 39 has an invalid length. [ 76.885505][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 76.885519][ T29] audit: type=1400 audit(1770827434.407:7364): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.933943][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.947236][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.969895][ T6421] tipc: Started in network mode [ 76.974916][ T6421] tipc: Node identity 4246, cluster identity 4711 [ 76.981349][ T6421] tipc: Node number set to 16966 [ 76.996834][ T6430] EXT4-fs: Ignoring removed bh option [ 77.003116][ T6430] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 77.018722][ T6430] EXT4-fs (loop4): 1 truncate cleaned up [ 77.024818][ T6430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.043072][ T6430] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 77.151057][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.194952][ T29] audit: type=1400 audit(1770827434.716:7365): avc: denied { module_load } for pid=6435 comm="syz.4.824" path="/sys/power/reserved_size" dev="sysfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 77.221605][ T29] audit: type=1400 audit(1770827434.746:7366): avc: denied { relabelfrom } for pid=6435 comm="syz.4.824" name="" dev="pipefs" ino=14521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.258145][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.825'. [ 77.269962][ T6439] Cannot find add_set index 0 as target [ 77.312934][ T3301] loop4: p1 p2 p4 [ 77.316823][ T3301] loop4: p1 start 4294967280 is beyond EOD, truncated [ 77.323640][ T3301] loop4: p2 size 590592 extends beyond EOD, truncated [ 77.330824][ T3301] loop4: p4 size 33554432 extends beyond EOD, truncated [ 77.340382][ T6436] loop4: p1 p2 p4 [ 77.344352][ T6436] loop4: p1 start 4294967280 is beyond EOD, truncated [ 77.351203][ T6436] loop4: p2 size 590592 extends beyond EOD, truncated [ 77.358864][ T6436] loop4: p4 size 33554432 extends beyond EOD, truncated [ 77.418762][ T6445] FAULT_INJECTION: forcing a failure. [ 77.418762][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 77.431544][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.1.828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.431581][ T6445] Tainted: [W]=WARN [ 77.431588][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.431600][ T6445] Call Trace: [ 77.431606][ T6445] [ 77.431614][ T6445] __dump_stack+0x1d/0x30 [ 77.431706][ T6445] dump_stack_lvl+0x95/0xd0 [ 77.431808][ T6445] dump_stack+0x15/0x1b [ 77.431826][ T6445] should_fail_ex+0x263/0x280 [ 77.431902][ T6445] should_failslab+0x8c/0xb0 [ 77.431928][ T6445] __kmalloc_cache_noprof+0x64/0x4a0 [ 77.431967][ T6445] ? v9fs_init_fs_context+0x34/0x220 [ 77.432044][ T6445] v9fs_init_fs_context+0x34/0x220 [ 77.432118][ T6445] alloc_fs_context+0x4a3/0x590 [ 77.432142][ T6445] fs_context_for_mount+0x22/0x30 [ 77.432165][ T6445] do_new_mount+0xea/0x700 [ 77.432187][ T6445] ? security_capable+0x7b/0x90 [ 77.432239][ T6445] path_mount+0x4d0/0xbc0 [ 77.432295][ T6445] ? user_path_at+0xbf/0x130 [ 77.432391][ T6445] __se_sys_mount+0x28c/0x2e0 [ 77.432410][ T6445] ? fput+0x8f/0xc0 [ 77.432437][ T6445] __x64_sys_mount+0x67/0x80 [ 77.432461][ T6445] x64_sys_call+0x2cca/0x3000 [ 77.432535][ T6445] do_syscall_64+0xc0/0x2a0 [ 77.432568][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.432604][ T6445] RIP: 0033:0x7f2db842aeb9 [ 77.432622][ T6445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.432642][ T6445] RSP: 002b:00007f2db6e87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.432665][ T6445] RAX: ffffffffffffffda RBX: 00007f2db86a5fa0 RCX: 00007f2db842aeb9 [ 77.432684][ T6445] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 77.432708][ T6445] RBP: 00007f2db6e87090 R08: 0000200000000040 R09: 0000000000000000 [ 77.432723][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.432808][ T6445] R13: 00007f2db86a6038 R14: 00007f2db86a5fa0 R15: 00007ffff869c158 [ 77.432826][ T6445] [ 77.678512][ T6452] netlink: 72 bytes leftover after parsing attributes in process `syz.0.829'. [ 77.688083][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 77.701947][ T6452] netlink: 312 bytes leftover after parsing attributes in process `syz.0.829'. [ 77.731708][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 77.742586][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 77.755916][ T6455] set_capacity_and_notify: 4 callbacks suppressed [ 77.755933][ T6455] loop1: detected capacity change from 0 to 128 [ 77.787993][ T6457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.813237][ T29] audit: type=1400 audit(1770827435.325:7367): avc: denied { remount } for pid=6454 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 77.837830][ T6452] 9p: Bad value for 'rfdno' [ 77.942436][ T6462] tipc: Invalid UDP bearer configuration [ 77.942450][ T6462] tipc: Enabling of bearer rejected, failed to enable media [ 78.010187][ T29] audit: type=1400 audit(1770827435.385:7368): avc: denied { mounton } for pid=6454 comm="syz.1.832" path="/166/file1/file0" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 78.033160][ T29] audit: type=1400 audit(1770827435.385:7369): avc: denied { setopt } for pid=6447 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.060046][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.074284][ T6473] loop0: detected capacity change from 0 to 512 [ 78.081631][ T6473] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.092629][ T6473] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24509!=33349) [ 78.094284][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.120844][ T6473] EXT4-fs (loop0): failed to initialize system zone (-117) [ 78.125796][ T6471] loop2: detected capacity change from 0 to 7 [ 78.142124][ T6473] EXT4-fs (loop0): mount failed [ 78.161690][ T29] audit: type=1326 audit(1770827435.675:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998978aeb9 code=0x7ffc0000 [ 78.161926][ T29] audit: type=1326 audit(1770827435.675:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998978aeb9 code=0x7ffc0000 [ 78.162218][ T29] audit: type=1326 audit(1770827435.675:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f998978aeb9 code=0x7ffc0000 [ 78.162563][ T29] audit: type=1326 audit(1770827435.675:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998978aeb9 code=0x7ffc0000 [ 78.269720][ T6480] __nla_validate_parse: 3 callbacks suppressed [ 78.269740][ T6480] netlink: 80 bytes leftover after parsing attributes in process `syz.5.842'. [ 78.271100][ T6480] netlink: 64 bytes leftover after parsing attributes in process `syz.5.842'. [ 78.417347][ T6482] loop0: detected capacity change from 0 to 512 [ 78.490459][ T6482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.546543][ T6492] FAULT_INJECTION: forcing a failure. [ 78.546543][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 78.559233][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.1.847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.559267][ T6492] Tainted: [W]=WARN [ 78.559273][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.559288][ T6492] Call Trace: [ 78.559296][ T6492] [ 78.559305][ T6492] __dump_stack+0x1d/0x30 [ 78.559332][ T6492] dump_stack_lvl+0x95/0xd0 [ 78.559352][ T6492] dump_stack+0x15/0x1b [ 78.559370][ T6492] should_fail_ex+0x263/0x280 [ 78.559492][ T6492] should_failslab+0x8c/0xb0 [ 78.559517][ T6492] kmem_cache_alloc_noprof+0x68/0x490 [ 78.559544][ T6492] ? skb_clone+0x151/0x1f0 [ 78.559563][ T6492] skb_clone+0x151/0x1f0 [ 78.559682][ T6492] __netlink_deliver_tap+0x2c9/0x500 [ 78.559767][ T6492] ? netlink_attachskb+0x2e2/0x660 [ 78.559837][ T6492] netlink_sendskb+0x126/0x150 [ 78.559862][ T6492] netlink_unicast+0x2a2/0x690 [ 78.559970][ T6492] netlink_ack+0x4c8/0x500 [ 78.560005][ T6492] netlink_rcv_skb+0x192/0x220 [ 78.560038][ T6492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.560078][ T6492] rtnetlink_rcv+0x1c/0x30 [ 78.560164][ T6492] netlink_unicast+0x5c0/0x690 [ 78.560246][ T6492] netlink_sendmsg+0x5c8/0x6f0 [ 78.560266][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.560285][ T6492] ____sys_sendmsg+0x5af/0x600 [ 78.560305][ T6492] ___sys_sendmsg+0x195/0x1e0 [ 78.560331][ T6492] __x64_sys_sendmsg+0xd4/0x160 [ 78.560422][ T6492] x64_sys_call+0x17ba/0x3000 [ 78.560449][ T6492] do_syscall_64+0xc0/0x2a0 [ 78.560480][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.560553][ T6492] RIP: 0033:0x7f2db842aeb9 [ 78.560567][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.560583][ T6492] RSP: 002b:00007f2db6e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.560605][ T6492] RAX: ffffffffffffffda RBX: 00007f2db86a5fa0 RCX: 00007f2db842aeb9 [ 78.560622][ T6492] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 78.560679][ T6492] RBP: 00007f2db6e87090 R08: 0000000000000000 R09: 0000000000000000 [ 78.560694][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.560706][ T6492] R13: 00007f2db86a6038 R14: 00007f2db86a5fa0 R15: 00007ffff869c158 [ 78.560723][ T6492] [ 78.792834][ T6482] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.850478][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.849'. [ 78.945159][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.002525][ T6506] loop4: detected capacity change from 0 to 128 [ 79.029647][ T6506] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.055734][ T6506] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.144752][ T6521] FAULT_INJECTION: forcing a failure. [ 79.144752][ T6521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.157977][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.0.858 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.158011][ T6521] Tainted: [W]=WARN [ 79.158018][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.158030][ T6521] Call Trace: [ 79.158037][ T6521] [ 79.158045][ T6521] __dump_stack+0x1d/0x30 [ 79.158125][ T6521] dump_stack_lvl+0x95/0xd0 [ 79.158148][ T6521] dump_stack+0x15/0x1b [ 79.158171][ T6521] should_fail_ex+0x263/0x280 [ 79.158206][ T6521] should_fail+0xb/0x20 [ 79.158292][ T6521] should_fail_usercopy+0x1a/0x20 [ 79.158326][ T6521] _copy_to_user+0x20/0xa0 [ 79.158419][ T6521] simple_read_from_buffer+0xb5/0x130 [ 79.158454][ T6521] proc_fail_nth_read+0x10e/0x150 [ 79.158545][ T6521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.158569][ T6521] vfs_read+0x1ab/0x7f0 [ 79.158600][ T6521] ? __rcu_read_unlock+0x4e/0x70 [ 79.158633][ T6521] ? __fget_files+0x184/0x1c0 [ 79.158661][ T6521] ? mutex_lock+0x57/0x90 [ 79.158685][ T6521] ksys_read+0xdc/0x1a0 [ 79.158745][ T6521] __x64_sys_read+0x40/0x50 [ 79.158767][ T6521] x64_sys_call+0x2889/0x3000 [ 79.158874][ T6521] do_syscall_64+0xc0/0x2a0 [ 79.158961][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.159028][ T6521] RIP: 0033:0x7fd53dceb78e [ 79.159046][ T6521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.159074][ T6521] RSP: 002b:00007fd53c786fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.159148][ T6521] RAX: ffffffffffffffda RBX: 00007fd53c7876c0 RCX: 00007fd53dceb78e [ 79.159162][ T6521] RDX: 000000000000000f RSI: 00007fd53c7870a0 RDI: 0000000000000005 [ 79.159176][ T6521] RBP: 00007fd53c787090 R08: 0000000000000000 R09: 0000000000000000 [ 79.159188][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.159252][ T6521] R13: 00007fd53dfa6038 R14: 00007fd53dfa5fa0 R15: 00007fff514a5588 [ 79.159274][ T6521] [ 79.398676][ T6527] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.411532][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.462839][ T6533] mmap: syz.5.861 (6533) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.533337][ T6537] dummy0: entered promiscuous mode [ 79.539737][ T6537] bond0: entered promiscuous mode [ 79.544859][ T6537] bond_slave_0: entered promiscuous mode [ 79.550731][ T6537] bond_slave_1: entered promiscuous mode [ 79.556610][ T6537] vlan2: entered promiscuous mode [ 79.568158][ T6543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.863'. [ 79.583365][ T6537] hsr1: entered allmulticast mode [ 79.596380][ T6537] dummy0: entered allmulticast mode [ 79.601620][ T6537] bond0: entered allmulticast mode [ 79.606812][ T6537] bond_slave_0: entered allmulticast mode [ 79.612541][ T6537] bond_slave_1: entered allmulticast mode [ 79.618316][ T6537] vlan2: entered allmulticast mode [ 79.623427][ T6537] batadv0: entered allmulticast mode [ 79.647933][ T6543] tipc: Invalid UDP bearer configuration [ 79.647950][ T6543] tipc: Enabling of bearer rejected, failed to enable media [ 79.734966][ T6551] loop4: detected capacity change from 0 to 1024 [ 79.783379][ T6551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.831140][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.229698][ T6570] loop1: detected capacity change from 0 to 512 [ 80.261040][ T6570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.281108][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.297543][ T6570] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.448236][ T6575] netlink: 'syz.5.873': attribute type 6 has an invalid length. [ 80.455909][ T6575] netlink: 56 bytes leftover after parsing attributes in process `syz.5.873'. [ 80.565684][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'. [ 80.594454][ T6578] loop0: detected capacity change from 0 to 2048 [ 80.639235][ T6582] netlink: 64 bytes leftover after parsing attributes in process `syz.5.876'. [ 80.648720][ T3301] loop0: p1 [ 80.655217][ T6578] loop0: p1 [ 80.666846][ T6578] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.874'. [ 80.727106][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 80.777405][ T6589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.879'. [ 80.789799][ T6589] tipc: Invalid UDP bearer configuration [ 80.789815][ T6589] tipc: Enabling of bearer rejected, failed to enable media [ 80.840288][ T6599] loop0: detected capacity change from 0 to 1024 [ 80.847148][ T6599] EXT4-fs: Ignoring removed oldalloc option [ 80.853214][ T6599] EXT4-fs: Ignoring removed bh option [ 80.871842][ T6599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.047065][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.106544][ T6611] loop1: detected capacity change from 0 to 512 [ 81.123737][ T6611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.136532][ T6611] ext4 filesystem being mounted at /181/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.164159][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.249652][ T6599] ================================================================== [ 81.257775][ T6599] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 81.265773][ T6599] [ 81.268097][ T6599] write to 0xffff88811a05376c of 4 bytes by task 6606 on cpu 1: [ 81.275722][ T6599] xas_set_mark+0x12b/0x140 [ 81.280234][ T6599] tag_pages_for_writeback+0xe3/0x2e0 [ 81.285618][ T6599] ext4_do_writepages+0x6a8/0x2800 [ 81.290727][ T6599] ext4_writepages+0x18f/0x320 [ 81.295481][ T6599] do_writepages+0x1c6/0x310 [ 81.300072][ T6599] file_write_and_wait_range+0x178/0x2f0 [ 81.305713][ T6599] generic_buffers_fsync_noflush+0x45/0x130 [ 81.311610][ T6599] ext4_sync_file+0x1aa/0x680 [ 81.316295][ T6599] vfs_fsync_range+0x10d/0x130 [ 81.321230][ T6599] ext4_buffered_write_iter+0x34f/0x3c0 [ 81.327052][ T6599] ext4_file_write_iter+0x380/0xf70 [ 81.332354][ T6599] iter_file_splice_write+0x6bc/0xa80 [ 81.337723][ T6599] direct_splice_actor+0x156/0x2a0 [ 81.342826][ T6599] splice_direct_to_actor+0x311/0x670 [ 81.348197][ T6599] do_splice_direct+0x119/0x1a0 [ 81.353035][ T6599] do_sendfile+0x382/0x650 [ 81.357447][ T6599] __x64_sys_sendfile64+0x105/0x150 [ 81.362640][ T6599] x64_sys_call+0x2db1/0x3000 [ 81.367309][ T6599] do_syscall_64+0xc0/0x2a0 [ 81.371812][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.377695][ T6599] [ 81.380005][ T6599] read to 0xffff88811a05376c of 4 bytes by task 6599 on cpu 0: [ 81.387557][ T6599] file_write_and_wait_range+0x130/0x2f0 [ 81.393186][ T6599] generic_buffers_fsync_noflush+0x45/0x130 [ 81.399074][ T6599] ext4_sync_file+0x1aa/0x680 [ 81.403743][ T6599] vfs_fsync_range+0x10d/0x130 [ 81.408498][ T6599] ext4_buffered_write_iter+0x34f/0x3c0 [ 81.414056][ T6599] ext4_file_write_iter+0x380/0xf70 [ 81.419274][ T6599] iter_file_splice_write+0x6bc/0xa80 [ 81.424649][ T6599] direct_splice_actor+0x156/0x2a0 [ 81.429759][ T6599] splice_direct_to_actor+0x311/0x670 [ 81.435121][ T6599] do_splice_direct+0x119/0x1a0 [ 81.439978][ T6599] do_sendfile+0x382/0x650 [ 81.444393][ T6599] __x64_sys_sendfile64+0x105/0x150 [ 81.449582][ T6599] x64_sys_call+0x2db1/0x3000 [ 81.454255][ T6599] do_syscall_64+0xc0/0x2a0 [ 81.458783][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.464665][ T6599] [ 81.466978][ T6599] value changed: 0x02000021 -> 0x04000021 [ 81.472689][ T6599] [ 81.474995][ T6599] Reported by Kernel Concurrency Sanitizer on: [ 81.481135][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.0.883 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.492327][ T6599] Tainted: [W]=WARN [ 81.496119][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.506293][ T6599] ================================================================== [ 81.690451][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.