last executing test programs: 1m12.945255431s ago: executing program 4 (id=110): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES64], 0xfc}, 0x1, 0x0, 0x0, 0x20000020}, 0x4048050) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x82, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTaC90LCFWVEBUnDm1I3CiKXUexK5rQQ3rkXolKnID/gBsHpJ44cOMGNy7lgFSgAjVIHIxmPEndxE4CceIm/v2kycx7M/X3Xtz3nudFnhfA0LoUEZsRcS4i7kTEVJ6f5Ftcb2/pdS9fPFzYevFwIYlW69bfk+x8mhcd/yb1Vv6a4xHx/e9E/CjZG7exvrEyX61W1vL0dLO2Ot1Y37i6XMhzynOzczMfX/uo3Le6vlf79fNvL9/4wW9/86Vnf9j85k/SYk3+9EJ2rrMe/dSuejEmO/JGI+LGcQQbkNH8/w+nT9raPhMR72ftfypGsncTADjLWq2paE11pgGAsy69/5+MpFDK5wImo1AoldpzeO/GRKFabzSvTNXv31uMbA7rYhQLd5erlZl8rvBiFJM0PZsdv0qXX0s/rlyLiHci4vHY+ex8aaFeXRzkBx8AGGJv7Rr//zXWHv87FQdVOADg+IwPugAAwIkz/gPA8DH+A8Dw+R/Gf98OBIAzwv0/AAwf4z8ADJ8Dx/9HJ1MOAOBEfO/mzXRrbbWff739pO6ri5XGSql2f6G0UF9bLS3V60vVSmmh1Tro9ar1+urshzvJxvrG7Vr9/r3m7eXa/FLldsWzBABg8N557+mf0kF/85Pz2RYdazkYq+FsKwy6AMDAjAy6AMDA+D4PDK9D3OObBoAzrssSvW35BEHS64InFn+F0+ry583/w7A6yvy/uQM43f6/+f9v9b0cwMkzhsPwarUSa/4DwJAxxw/0/Pt/rucjQp70vywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWkxmW1IoZWuBb6Y/C6VSxIWIuBjF5O5ytTITEW9HxB/HimNpenbQhQYAjqjw1yRf/+vy1AeTu8+eS/49lu0j4sc/v/WzB/PN5tpsmv+PnfzmkzT/fHOtfG4QFQAAOl3fm5WN3+V833Ej//LFw4Xt7SSL+PzT9uKiadytfGufGY3RbD8exYiY+GeSp9vSzysjfYi/+SgiPrdd//F40BFhMpsDaa98ujt+GvtC3+N3/v53xy+8Vt9Cdi7dF7PfxWdjV+GAAz39tN1P5m0vbeJ5+yvEpWzfvf2PZz3U0aX9X9pct/b0f4Wd/m9kT/wka/OXdtL7l+T5h7/77p7M1lT73KOIL4x2i5/sxE+697/FDw5Zxz9/8cvv9zrX+kXE5a71316RupZ1s9PN2up0Y33j6nJtfqmyVLlXLs/Nzs18fO2j8nQ2R93++ftuMf72yZW3e8VP6z/RI/74/vWPrx2y/r/8z50ffmWf+N/4avf3/9194qdj4tcPGX9+4nrP5bvT+Is96n/A+x9XDhn/2V82Fg95KQBwAhrrGyvz1Wpl7YCD9LPmQdc4OPxBem//BhQjO4jNiM6ckSO8YDYpERFdr0k/Ub8ZVT6ug2Rg0X/V7xccdM8EHLdXjX7QJQEAAAAAAAAAAAAAAHpprG+sjHX/tlbfDgZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6u/wYAAP//ydTDwA==") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x1, 0x3, 0x4, 0x1000000000001}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x3}, 0x9c) r9 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r9, 0xfffffffe) r10 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r10, 0x0, 0x0) accept4$unix(r9, 0x0, 0x0, 0x0) 1m12.048025335s ago: executing program 4 (id=118): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(r1, &(0x7f0000000a80)={0x8, {"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", 0x1000}}, 0x1006) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-+x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000003b00)={0x18, 0x0, r3, {0x6}}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1cb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) 1m11.886231444s ago: executing program 4 (id=124): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) 1m11.884219589s ago: executing program 4 (id=126): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (fail_nth: 1) 1m11.809654469s ago: executing program 4 (id=129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x0, 0xc533}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='\x9f\x00', 0x2, 0x3) syz_clone(0x80a02600, 0x0, 0xfffffffffffffe07, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x60c, &(0x7f0000000440)="$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") 1m11.715320748s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r3) 56.645277265s ago: executing program 32 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r3) 33.583284573s ago: executing program 1 (id=686): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000c8e000/0x3000)=nil], &(0x7f0000000200), &(0x7f0000000240), 0x2) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000001801000034120000000000000000000015010100341200f49400000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ef4000/0x4000)=nil, 0x1000, 0x1}) 33.548915625s ago: executing program 1 (id=687): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007", 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x3000c010}, 0x4060804) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000006, 0x1, &(0x7f0000000180)=[0x0]}) 33.542268769s ago: executing program 1 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000380)={&(0x7f0000000000)=0x5, 0x9, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000340)}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x24, 0x2d, 0x704, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x9}}}, 0x24}}, 0x0) 33.483899135s ago: executing program 1 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="aa9daaaaaaaa0000000000000800450000b0ffff000000119078000000000000000000004e20009c90780400000007740000fdffffffffffffff9c67524ed6ed15a70f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c0"], 0x0) recvfrom$inet(r2, 0x0, 0x4000, 0x42, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00010000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x158, 0x0, 0x148, 0x158, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x28, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000200)=0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x1c0) 33.44942734s ago: executing program 1 (id=690): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = fanotify_init(0x0, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e57135370cbce209229c95b948410f2bc9faba27d271a0bfe7160b9c2f8907b75285f8ba2bda905f01cc"], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000200)={0x7, 0x0, '\x00', {0x0, @reserved}}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) setns(r2, 0x80) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) madvise(0xffffffffffffffff, 0x0, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 33.026781611s ago: executing program 1 (id=695): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fb, 0x5, "5dee0000005940000000000f00"}) 32.938714686s ago: executing program 33 (id=695): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fb, 0x5, "5dee0000005940000000000f00"}) 23.358998689s ago: executing program 6 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) 23.342279946s ago: executing program 6 (id=845): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f0000000340)=[{0xc, '\x00', @st={0x4, [{0x1, @svalue=0x10001}, {0x2, @svalue=0x8}, {0x2, @svalue=0xe}, {0x0, @uvalue=0x955e}]}, 0x101}, {0x41, '\x00', @st={0x4, [{0x1, @svalue=0x200}, {0x0, @svalue=0x3}, {0x1, @uvalue=0x2}, {0x1, @svalue=0x1}]}, 0x9}, {0x1d, '\x00', @st={0x4, [{0x3, @svalue=0x2}, {0x3, @svalue=0xff}, {0x2, @svalue=0x2}, {0x0, @uvalue=0x9}]}, 0x9b13}, {0x2d, '\x00', @buffer={"007574ced660d6596cbd65bd6e7c8d395b35005a6561219d7676cd77713ce4f9", 0x20}, 0x2}]}) 23.341874011s ago: executing program 6 (id=846): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r0}, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x11, r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18001800000000000000d8000000000000009500"/40], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.322785086s ago: executing program 6 (id=847): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{}, {@user_xattr}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x30}}, 0x2000c044) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) write(r7, &(0x7f00000002c0)='online', 0x6) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23.200024256s ago: executing program 6 (id=849): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x52142, 0x8) socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[], 0x3c, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) read$smackfs_ptrace(r1, &(0x7f00000001c0), 0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14) 22.794724089s ago: executing program 6 (id=859): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000", @ANYRES32=0x1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001c80)={r1, &(0x7f0000000b80), 0x0}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20044810) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000280)={0x18}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, 0x0, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, 0x0, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000580)={0x18}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000900)={0x18, 0x0, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000100)={0x8, r3}) syz_emit_ethernet(0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000123a"], 0x0) 22.75233431s ago: executing program 34 (id=859): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000", @ANYRES32=0x1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001c80)={r1, &(0x7f0000000b80), 0x0}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20044810) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000280)={0x18}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, 0x0, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, 0x0, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000580)={0x18}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000900)={0x18, 0x0, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000100)={0x8, r3}) syz_emit_ethernet(0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000123a"], 0x0) 17.580079248s ago: executing program 5 (id=945): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xc1}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 17.374405859s ago: executing program 5 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = mq_open(&(0x7f0000000100)='\x01\x00', 0x40, 0x100, 0x0) mq_notify(r2, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close_range(r2, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r1}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x40801) 17.35861573s ago: executing program 5 (id=947): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11e, 0x1, 0x0, 0x20000000) sendto$inet(r0, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345}', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 17.290879261s ago: executing program 5 (id=948): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ndb(0x0, 0x0, 0x200c0) ioctl$BLKPG(r0, 0x1269, 0x0) 17.289948933s ago: executing program 5 (id=950): r0 = socket(0x24, 0x6, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x102, @local, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xffff8001}, 0x8) recvmmsg(r3, &(0x7f0000001a80)=[{{&(0x7f0000000440)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/95, 0x5f}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/92, 0x5c}, {&(0x7f00000016c0)=""/143, 0x8f}, {&(0x7f0000001780)=""/242, 0xf2}, {&(0x7f0000001880)=""/2, 0x2}, {&(0x7f00000018c0)=""/193, 0xc1}], 0x9}, 0x3ff}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r5, 0xc0049364, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) 15.915870564s ago: executing program 5 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 2.569052824s ago: executing program 0 (id=1117): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x24008040) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345.', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 2.444190052s ago: executing program 0 (id=1118): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0xffffffff, 0x1b, "2591ec1d5f54712228d59d688d710042cf67a36978e6ba2d786d71"}) 2.434584926s ago: executing program 0 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="2d429b0cc2", 0x5) r0 = mq_open(&(0x7f00000000c0)='kmem_cache_free\x00', 0x40, 0xe6, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x1000}) mq_timedreceive(r0, &(0x7f0000000280)=""/102, 0x66, 0x21b3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (fail_nth: 3) 2.264047167s ago: executing program 3 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0xfffffdeb, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x605, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x10000000) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xaa1414ac}, 0xe07e872420dfefca) 2.22607474s ago: executing program 3 (id=1125): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="040e05033b20"], 0x8) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde05, 0x8000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r1, 0x838a3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.874444516s ago: executing program 7 (id=1130): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 1.862630651s ago: executing program 2 (id=1131): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xe992, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x11, 0x1, 0x3, "33c500100000000040fcd817a45b729fd5085780ee0f00", 0x20363059}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000068000100000000000000000002000000000000000c000880050005000000000008000600f200000008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x7f, {{0xa, 0x4e20, 0x3, @mcast1, 0x6}}, {{0xa, 0x4e23, 0x699, @mcast1, 0x7}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)='*:mod:', 0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) shutdown(r3, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x9, 0x783, &(0x7f0000001340)="$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") chdir(&(0x7f0000000240)='./file0\x00') r8 = fanotify_init(0x8, 0x40000) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r8, 0x1, 0x8100011, r9, 0x0) close_range(r8, r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001b00)={0x0, 0x1000, "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"}, &(0x7f0000002b40)=0x1008) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000002b80)={r11, @in6={{0xa, 0x4e20, 0x8c65, @mcast1, 0x7}}}, &(0x7f0000002c40)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b908"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000100000000000008004500001c001190780a010102ac1414bb00004e200008907800000000"], 0x0) 1.815262752s ago: executing program 7 (id=1132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) 1.769416807s ago: executing program 7 (id=1133): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) shutdown(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa) shutdown(r1, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x10001, 0x0) 1.66807145s ago: executing program 2 (id=1134): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) landlock_restrict_self(r3, 0xe) 1.560088465s ago: executing program 0 (id=1135): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x140008, &(0x7f0000000240)={[{@block_validity}, {@errors_continue}, {@quota}]}, 0xd, 0x4e6, &(0x7f0000000300)="$eJzs3E1oXNUeAPD/nUyavH4lr6/vo3197+X5gcWPpE2r7UIQBcFFFUGQCi4ck7TUThtpIpgSTBSpG0EL4lYUN6JrF65ciboS3HSheykUyaa1oIzcmTvJzCQzSZpJpk1+P5jOOXPvzTn/uefMPeeezgSwZQ2k/yQROyPip4joi4hc4w4Dlacbc9Mjv81NjyRRKj33a5IeFtfnpkequybZ845KJl//h+pNTF08WygWxy5k+aHJc68OTUxdfOjMucLpsdNj54ePHz965PCxR4Yfbkucf03ruv+N8QP7nnrh8tMjJy+//N0XSU2la+OIVhVfse6YrXlPGt3bhhJuJ7tq0km+cWtvbaYdby5t0hMR+XJrTft/X3S9vXt+W188+VZHKwesq1KpVBpuvnm2BGxiSXS6BkBnVC/01+c+HEnnwNk8uHFzvRdPFJ9fj8FIB1x7vDIBSuO+kT0qk56F2xfdDfPbdpqOiJOzNz9KH7HoPgQAQPt9nY5/HqyMO2rGf+Xb9P+o2W93tjbUn62l7ImIv0XE3oj4e0R5339GxL9WWf5AQ37x+Cd3tZp6abXBrUA6/ns0W9uqPrJys6gXcrvK8Xcnp84Uxw5lWw9Gd0+aP7zkX0+ivAgUP77XrPyBmvFf+kjLr44Fs5Kv5nvqjxktTBbWGnfVtTcj9ueXij+J/EIUsS8i9t9iGWfu/+xA/Std86nl429h0TrT6pU+jrivcv5noyH+qqT1+uRQbxTHDg1VW8Vi3/9w6dlm5a8p/jZIz//2Jdv/fPz9Se167UT15flVvm3LlXHp53eazmkGIh6LVbf/Uqk0U1/464XJyZuliG3JiUWvX6i5wV3Nl58PV+LPNen/e2Lhnfh3RKSN+D8R8d+I+F927v4fEXdFxN0t4v/2iXteaRF/R89/fJ5+QlVnuvXnP3sPF85/9TxUGkKlRaSvVZvG1NKJrrPffNWs+Mb4kywf8XtcKe+Rnv+j5dTB7JjRwmTvcmFlhfdGi3rVtmYAAADYzNKZ/85IcoPz6VxucLDyf/j3xvZccXxi8oFT46+dH618R6A/unPVO119WT6y+5/9lXx59j1cfo6Yye6XHsnuG3/Q9ZdyfnBkvDja6eBhi9vRpP+nfunqdO2AddeGdTTgDtWq/39ybAMrAmy4W7/+GznAnW6ZXuwHG2ATcxWHrWup/j/TgXoAG6/59X/M0AA2uflO/v4Kdq75ulfjlzeBO4+LPGxdy/f/Z9br96+Azmn13fgVJLY1/BrABiSSpO6V+DSi9VHJBlWsvYl3N7CsP27lqMg129SzDk0iv/a22pAo3A5neflEtaNOXTybX+7HLBYSpZlCsXjly7WU3tnPJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHb5MwAA//+b2+Bz") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000180)=@caif=@rfm={0x25, 0xcc2811c0, "427a107e6c23f501734b5f245bf587f8"}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0e9bcfef24d0707bfe4ee924879849625f3526e05b9b71a5b5bbe8d47a222fa0ce4cbcb96974532a886d09e9ecdd7e26dc77630e10d914b75cc1fa6cdb1dbff169e4260c20f93c5fd474f81aa30774dcb3cbb2f1b62c6b18dc114261b3df902ac55171b5180b2ce6ef66cabccf849d647ee6abc3ccb8cc26d90a999b8a2737c2fe77329cd20a", @ANYRES16=r4, @ANYBLOB="08002cbd7000fbdbdf250a000000"], 0xfffffffffffffee6}, 0x1, 0x0, 0x0, 0x814}, 0x20004000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbb562955f056ca99ccbb86dd6a000000000c1100fe8000000000000000000000000000aa00000000000000ffff7f0000014e1d4e20000c907801080001000000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xfc, 0x3ff}, {0x20, 0x7f, 0x7, 0x68e}, {0x6, 0x4, 0x8, 0x4}]}, 0x10) 1.250021527s ago: executing program 3 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2501000000140002007767300000000000000000000000000008000500010000003c0008803800008010000980040000620400008004000080240001"], 0x6c}, 0x1, 0x0, 0x0, 0x44001}, 0x2004c0a0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004086ff5aaae3596ffbec3cc9635e97518bd093b1b201500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) chdir(&(0x7f0000000380)='./file1\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r11, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r11, 0x3, 0x52a9, 0x5) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001f40)={0x3, 0xfffffffffffffffe, @start={0x0, 0x1, "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", "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"}, [0x1ff, 0x3ff, 0x6, 0x8, 0x9, 0x1000, 0xb, 0x6, 0x3, 0x8dc6, 0x18, 0x7fffffffffffffff, 0x6, 0x7ff, 0xba48, 0x80000000, 0x6, 0x9, 0x10000, 0x3, 0x0, 0xffff, 0xf5, 0x9, 0x8, 0x4, 0x1000000, 0x9, 0x0, 0x8000000000000001, 0x6, 0x2, 0x6, 0xffffffff, 0x9, 0x2, 0x81, 0x10, 0x0, 0x5, 0x80, 0x90, 0x8, 0x0, 0xffff, 0x1, 0xb90d, 0x7, 0x2, 0x6, 0xf559, 0x4, 0x1, 0x1, 0x2, 0x8, 0x5, 0xff, 0x1, 0x1000, 0xffffffffffffa607, 0x40, 0x4000000000000, 0x6b]}) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r12, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}}, 0x400400c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800020"], 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYRES64], 0x1b) 884.398816ms ago: executing program 7 (id=1137): msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x100d0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r7, 0x0, 0xacb6, 0x8) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0), 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x0) write(r3, &(0x7f0000000c00)="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", 0x2e8) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r12, 0x0, 0x0) 873.639277ms ago: executing program 35 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 784.779362ms ago: executing program 2 (id=1139): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) 667.165916ms ago: executing program 0 (id=1140): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/net/ip_vs_conn\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r1, 0x7800, 0x8000, 0x1, 0xff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x61, 0x0, 0x10, 0x9, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@end, @ssrr={0x89, 0x1b, 0x85, [@multicast1, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}, @ssrr={0x89, 0x13, 0xea, [@multicast2, @loopback, @remote, @empty]}, @noop]}}}}}) 537.878718ms ago: executing program 3 (id=1141): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000380)=[{0x6, 0x5, 0x21, 0xfffff034}, {0x800, 0xb6, 0xad}]}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0xc040480) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c000100080c100000000100ffffffff", 0x58}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x500, 0x18, 0x4, 0x1000000000000}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r2 = socket(0x8, 0x2, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f3, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 387.779434ms ago: executing program 0 (id=1142): r0 = socket$inet(0x2, 0x1, 0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1fa) (async) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1,soft,timeo=1']) (async) r1 = syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000340)={[{@nodioread_nolock}, {@data_err_ignore}, {@nobh}, {@resgid}, {@lazytime}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nfs4\x00'}}, {@permit_directio}]}, 0x38, 0x568, &(0x7f0000000780)="$eJzs3c9vHFcdAPDvjL3+kTixKzhAJdpCi9IIso5rtbE4lCIhOFUClXtw7bVlZW1H9rqNrUpxxB+AhFBB4salFyT+ACSo1AvHCqkSXAEBEqoghQNI0EGznl279qyzOOtdJ/58pMm892bfft+b9czOvJ3MBHBuvVJMH2dZdjUiJovytJi+kGd2I56JiI/uv7WQT0lk2Wt/SyIpylrvlTWNxsW9KvkbjMQ3I15Pjsbd3N65NV+v1zaK/HRj9fb05vbOtZXV+eXacm1tdnbmpbkbcy/OXX+Y7i1dLBKXIuLlr//l7e+/842Xf/nlN/94869DrVbfjUP9+D8Nlxcf7HQlxvLZ+H7JxgmDnUWtFZAc6vVx7hV/IgAA9NdYcViaH+dfjckY6nQ4CwAAADyysq9OxH+S1m93R4x0KAcAAAAeIWlETESSVovrfSciTavVaF7D++m4kNbXNxtfWlrfWlvMl0VMRSVdWqnXrhfXCk9FJcnzM830fv6FQ/nZiHgijfjh5HgzX11Yry8OevADAAAAzomLh87//zmZpqODbhQAAADQe1ODbgAAAABw6pz/AwAAwOPP+T8AAAA81r716qv5lLWef734xvbWrfU3ri3WNm9VV7cWqgvrG7ery+vry8179q0e+2btRweubd2ZbtQ2G2MRcXN1fWutcXNl7xHYAAAAQP898fS7v0siYvcr480pN3Jg+b+L5wQMrIHAqWkP2UVSzEeOvugPl/fmf+5To4C+GDqYeXtw7QD6r/n9P36iqierBZwZlUE3ABi4ZD85WbZ8LBkur/h+Mf98t5EcNgAAwKBc+Wzn3//TY2vuHr8YOPNsxHB+DQ26AcDANEf1Sy75K+VgAR4rlfYRQDLglgCD8qCtv+PNO97vNsKB/0M02m0dAACglyaaU5JWi+G9iUjTajXiUvOxAJVkaaVeux4RlyPit5OV0Tw/06yZGDEAAAAAAAAAAAAAAAAAAAAAAAAAgC5lWRIZAAAA8FiLSEeT9/bu5X9l8rmJw+MDI8m/JqN4ROibP3ntR3fmG42Nmbz87+3yxo+L8heOji8M92UUAwAAAM6Hbh+p3TpPb53HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvfXT/rYXW1M+4H34tIqbK4g/HWHM+FpWIuPCPJIYP1EsiYqgH8XfvRcRnyuInebPaIcvij59+/Jgq1kJZ/Is9iA/n2bv5/ueVsu0vjWea8/LtbzjiE/mT6rz/i/b+b6jD9n+pyxhPfvDz6U8UvLO/5/zwXsSTw+X7n1b8pEP8Z7uM/93v7OyULxlrp8riH4w13Vi9Pb25vXNtZXV+ubZcW5udnXlp7sbci3PXp5dW6rXi34i4cWS3+IPP/eLjTm3L+3+hQ/ypB/T/uS77/98P7tz/VLyeJytl8Z9/tiT+r3/aXkeH46fFd98Xi3S+/EorvbuXPuipn/3mqeP6v9ih/w/6/J/vsv9Xv/29P3X5UgCgDza3d27N1+u1jUcmkQ1FlC0a7lArP0vvc1MjzsKKOppIiw/9rLRn4Im7+yW/+v3eunk6Tv6XmWXZQ67eJMuyuz3o4ETxSXdd68rlvRcn7ZIB7ZAAAIBTs38acODXicsDbhQAAAAAAAAAAAAAAAAAAACcM5vb7536XdYOx9xtp5Je3EIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAn/hcAAP//eYvaZw==") r2 = openat$incfs(r1, 0x0, 0x14040, 0xb) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000002c0)=0xcaf8, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b33, 0xffffffffffffffff) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) accept4$tipc(r2, &(0x7f0000000140), &(0x7f0000000240)=0x10, 0x80800) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 382.292355ms ago: executing program 2 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = syz_open_dev$video4linux(&(0x7f00000015c0), 0x1000, 0x2) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000001600)={0x0, {0x3, 0x7f}}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write$make_it_fail(0xffffffffffffffff, &(0x7f00000000c0)='Y\x00', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='/dev/nullb1', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) 317.613528ms ago: executing program 7 (id=1144): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000300)=0x60) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 234.29702ms ago: executing program 2 (id=1145): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x296801, 0x0) close(r1) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/155, 0x9b}], 0x1, 0x0, 0x3) read$FUSE(r0, &(0x7f00000059c0)={0x2020}, 0x2020) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='noac,,smackfstransmuteC']) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300024dd0000019078ac1e0001ac1414aa0304907812"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) 140.213095ms ago: executing program 3 (id=1146): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, 0x0, 0x34004894) 17.368013ms ago: executing program 2 (id=1147): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) shutdown(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa) shutdown(r1, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x10001, 0x0) 3.604327ms ago: executing program 7 (id=1148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x21, 0xa, 0xffffffff) sendmsg$nl_route(r0, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbde, 0x13500, 0x0, 0x100}, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x10800) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc0000}], 0x1c, 0xa00, 0x0, 0x22) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0xffffffffffffff2b, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x40, 0x0, 0x400, 0x10400], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0xf]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r6, 0x0, 0x5, 0x10001, 0x2, [], [0xfffff000, 0x1, 0xf28, 0x8], [0x692, 0x5, 0xb100d69, 0x1], [0x8, 0x4, 0x770, 0x75]}) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000200)=0x6, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000240)=0x391) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @local}, 0x14) 0s ago: executing program 3 (id=1149): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x40004000}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='12:%0.0.1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x5, '\x00', @st={0x4, [{0x1, @uvalue=0xfff}, {0x0, @uvalue=0x100000001}, {0x3, @svalue=0x8}, {0x1, @uvalue=0x9}]}, 0x6}, {0xd, '\x00', @buffer={"7ef57be0d63ca670482863d9ab6cabac235f5cc6a2722c93df2a2339cc9db924", 0x20}, 0x5}, {0x13, '\x00', @data=0xd4a, 0x3}, {0x40}, {0x26, '\x00', @data=0x8, 0x3}]}) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r6, &(0x7f0000000000)={@icresp={{0x1, 0x8, 0x80, 0x10, 0x6}, 0x0, 0x0, 0x2, 0x100}, @void}, 0x80, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): h an up link [ 48.898283][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.918907][ T5975] team0: Port device team_slave_0 added [ 48.919264][ T6011] nvme_fabrics: nùîo¥øfåÌ]bÁÆED Ôô³E¹¿ÐÈ=Ô˜¦¼Ø¨]OŠ™0!WSº×œ¿Þ·“Ä}Íÿƒ“FðØÏö'5—mæ[¡Þ•wh}ö1ón@ä ®—7’éºE aoVµMY•²mñ¨ý0;Õyl:&1µ¨ßàã†È<ò„À¨7ë¾-h:S©XèœÝl7Z·‹S`.ð7–ÀP»h\–òfP¿ÖõGû4«õÄ`5™¬á_*–Ñváæ¡]¾Ý\Ïy™þu$Çáê[&sÿÛ_ßM ÌîÌü«ûºî needs to be < 223 bytes [ 48.919957][ T5975] team0: Port device team_slave_1 added [ 48.926817][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.926827][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.926839][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.927422][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.927429][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.927444][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.945354][ T5975] hsr_slave_0: entered promiscuous mode [ 48.945662][ T5975] hsr_slave_1: entered promiscuous mode [ 48.945942][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 48.946021][ T5975] Cannot create hsr debugfs directory [ 48.986639][ T5476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.038938][ T6020] FAULT_INJECTION: forcing a failure. [ 49.038938][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 49.038958][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.3.346 Tainted: G L syzkaller #0 PREEMPT [ 49.038970][ T6020] Tainted: [L]=SOFTLOCKUP [ 49.038974][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.038978][ T6020] Call trace: [ 49.038981][ T6020] show_stack+0x2c/0x3c (C) [ 49.038997][ T6020] __dump_stack+0x30/0x40 [ 49.039008][ T6020] dump_stack_lvl+0xd8/0x12c [ 49.039017][ T6020] dump_stack+0x1c/0x28 [ 49.039026][ T6020] should_fail_ex+0x418/0x58c [ 49.039038][ T6020] should_failslab+0xc4/0x120 [ 49.039048][ T6020] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 49.039056][ T6020] sock_alloc_inode+0x30/0x180 [ 49.039067][ T6020] alloc_inode+0x68/0x198 [ 49.039075][ T6020] sock_alloc+0x4c/0x204 [ 49.039083][ T6020] __sock_create+0x108/0x670 [ 49.039091][ T6020] sock_create_kern+0x4c/0x64 [ 49.039098][ T6020] mptcp_subflow_create_socket+0xe4/0x61c [ 49.039110][ T6020] __mptcp_nmpc_sk+0x138/0x57c [ 49.039122][ T6020] mptcp_sendmsg_fastopen+0xbc/0x4c0 [ 49.039132][ T6020] mptcp_sendmsg+0x16a4/0x190c [ 49.039142][ T6020] inet_sendmsg+0xb4/0xd8 [ 49.039152][ T6020] __sock_sendmsg+0xc8/0x17c [ 49.039160][ T6020] ____sys_sendmsg+0x3d0/0x6c8 [ 49.039169][ T6020] ___sys_sendmsg+0x198/0x224 [ 49.039177][ T6020] __sys_sendmsg+0x158/0x204 [ 49.039186][ T6020] __arm64_sys_sendmsg+0x88/0x9c [ 49.039194][ T6020] invoke_syscall+0x98/0x244 [ 49.039204][ T6020] el0_svc_common+0xec/0x23c [ 49.039213][ T6020] do_el0_svc+0x4c/0x5c [ 49.039222][ T6020] el0_svc+0x60/0x1d8 [ 49.039231][ T6020] el0t_64_sync_handler+0x44/0x104 [ 49.039240][ T6020] el0t_64_sync+0x198/0x19c [ 49.039321][ T6020] socket: no more sockets [ 49.054900][ T6022] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 49.054911][ T6022] unable to read xattr id index table [ 49.055261][ T6022] SQUASHFS error: zlib decompression failed, data probably corrupt [ 49.055272][ T6022] SQUASHFS error: Failed to read block 0x9b: -5 [ 49.055278][ T6022] SQUASHFS error: Unable to read metadata cache entry [99] [ 49.055284][ T6022] SQUASHFS error: Unable to read inode 0x127 [ 49.056512][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 49.086401][ T6022] rpc_pipefs: Unknown parameter 'contextg``øû±&™A€ x.002°000¨3BĘ Ôz(ÿ”ž •¶ò›¡ôB(]qK{ÝšS~gNzêj-“efhõÔ–G“Kí1rccà‘`fM' [ 49.088244][ T6026] rpc_pipefs: Unknown parameter 'contextg``øû±&™A€ x.002°000¨3BĘ Ôz(ÿ”ž •¶ò›¡ôB(]qK{ÝšS~gNzêj-“efhõÔ–G“Kí1rccà‘`fM' [ 49.088353][ T5476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.088569][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 49.095092][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.095254][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.100064][ T6025] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 49.100075][ T6025] unable to read xattr id index table [ 49.108085][ T5975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.115516][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.115823][ T5975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.118834][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.121807][ T5975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.129838][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.130133][ T5975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.143238][ T5975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.152434][ T5476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.172506][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.172534][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.172606][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.172634][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.192483][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.196193][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.196961][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.208733][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.215473][ T5476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.224959][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.224995][ T5496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.226815][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.226837][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.317473][ T5476] bridge_slave_1: left allmulticast mode [ 49.317503][ T5476] bridge_slave_1: left promiscuous mode [ 49.317945][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.326326][ T5476] bridge_slave_0: left allmulticast mode [ 49.326340][ T5476] bridge_slave_0: left promiscuous mode [ 49.326401][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.394640][ T5476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.433766][ T5476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.472507][ T5476] bond0 (unregistering): Released all slaves [ 49.507506][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.650913][ T5975] veth0_vlan: entered promiscuous mode [ 49.654805][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 49.658373][ T5975] veth1_vlan: entered promiscuous mode [ 49.676255][ T5975] veth0_macvtap: entered promiscuous mode [ 49.681128][ T5975] veth1_macvtap: entered promiscuous mode [ 49.709485][ T6087] trusted_key: encrypted_key: insufficient parameters specified [ 49.717242][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.722872][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.725363][ T5497] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.725614][ T5497] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.725695][ T5497] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.725775][ T5497] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.759902][ T5477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.759914][ T5477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.773978][ T5481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.773989][ T5481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.088897][ T5476] hsr_slave_0: left promiscuous mode [ 50.089612][ T5476] hsr_slave_1: left promiscuous mode [ 50.089909][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.089924][ T5476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.090962][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.090972][ T5476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.100597][ T5476] veth1_macvtap: left promiscuous mode [ 50.100633][ T5476] veth0_macvtap: left promiscuous mode [ 50.100899][ T5476] veth1_vlan: left promiscuous mode [ 50.100947][ T5476] veth0_vlan: left promiscuous mode [ 50.190003][ T6115] FAULT_INJECTION: forcing a failure. [ 50.190003][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 50.190025][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.0.363 Tainted: G L syzkaller #0 PREEMPT [ 50.190038][ T6115] Tainted: [L]=SOFTLOCKUP [ 50.190042][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.190047][ T6115] Call trace: [ 50.190050][ T6115] show_stack+0x2c/0x3c (C) [ 50.190067][ T6115] __dump_stack+0x30/0x40 [ 50.190078][ T6115] dump_stack_lvl+0xd8/0x12c [ 50.190087][ T6115] dump_stack+0x1c/0x28 [ 50.190096][ T6115] should_fail_ex+0x418/0x58c [ 50.190108][ T6115] should_failslab+0xc4/0x120 [ 50.190118][ T6115] kmem_cache_alloc_noprof+0x94/0x5d4 [ 50.190125][ T6115] prepare_creds+0x34/0x7d0 [ 50.190135][ T6115] lookup_user_key+0x284/0xd4c [ 50.190144][ T6115] __arm64_sys_add_key+0x34c/0x43c [ 50.190152][ T6115] invoke_syscall+0x98/0x244 [ 50.190162][ T6115] el0_svc_common+0xec/0x23c [ 50.190171][ T6115] do_el0_svc+0x4c/0x5c [ 50.190180][ T6115] el0_svc+0x60/0x1d8 [ 50.190190][ T6115] el0t_64_sync_handler+0x44/0x104 [ 50.190198][ T6115] el0t_64_sync+0x198/0x19c [ 50.271123][ T6128] set_capacity_and_notify: 4 callbacks suppressed [ 50.271139][ T6128] loop3: detected capacity change from 0 to 2048 [ 50.294939][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.332784][ T5476] team0 (unregistering): Port device team_slave_1 removed [ 50.337936][ T5476] team0 (unregistering): Port device team_slave_0 removed [ 50.399374][ T6117] syzkaller0: entered promiscuous mode [ 50.399392][ T6117] syzkaller0: entered allmulticast mode [ 50.400977][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 50.420067][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.828231][ T6147] openvswitch: netlink: Actions may not be safe on all matching packets [ 50.938705][ T6163] binder: 6160:6163 tried to acquire reference to desc 0, got 1 instead [ 50.939010][ T6163] binder: 6160:6163 got transaction with invalid parent offset or type [ 50.939052][ T6163] binder: 6160:6163 transaction call to 6160:0 failed 20/29201/-22, code 0 size 120-24 line 3617 [ 50.948420][ T4807] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.993371][ T6175] loop1: detected capacity change from 0 to 1024 [ 50.995355][ T6175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.995379][ T6175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.995397][ T6175] EXT4-fs: Ignoring removed nobh option [ 51.026775][ T6156] could not allocate digest TFM handle tgr128 [ 51.043377][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.068901][ T6175] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.379: bg 0: block 112: padding at end of block bitmap is not set [ 51.070632][ T6183] warning: `syz.5.380' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.083377][ T6175] EXT4-fs (loop1): Remounting filesystem read-only [ 51.098105][ T6183] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 51.104733][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.115376][ T6185] loop2: detected capacity change from 0 to 512 [ 51.145890][ T6185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.232234][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.279410][ T6197] loop5: detected capacity change from 0 to 128 [ 51.521707][ T6197] vfat: Unknown parameter 'nnonumtail' [ 51.691248][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 51.739812][ T6215] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 51.817027][ T6227] loop0: detected capacity change from 0 to 1024 [ 51.835025][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.845233][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.849421][ T6227] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 51.849459][ T6227] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.849459][ T6227] [ 51.850663][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.855667][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.855912][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.856065][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.856212][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.856444][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.856599][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.856780][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.857317][ T6227] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 6) [ 52.164912][ T6242] FAULT_INJECTION: forcing a failure. [ 52.164912][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.164933][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.5.391 Tainted: G L syzkaller #0 PREEMPT [ 52.164944][ T6242] Tainted: [L]=SOFTLOCKUP [ 52.164947][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.164951][ T6242] Call trace: [ 52.164953][ T6242] show_stack+0x2c/0x3c (C) [ 52.164970][ T6242] __dump_stack+0x30/0x40 [ 52.164980][ T6242] dump_stack_lvl+0xd8/0x12c [ 52.164989][ T6242] dump_stack+0x1c/0x28 [ 52.164998][ T6242] should_fail_ex+0x418/0x58c [ 52.165009][ T6242] should_fail+0x14/0x24 [ 52.165018][ T6242] should_fail_usercopy+0x20/0x30 [ 52.165028][ T6242] copy_from_bpfptr_offset+0x84/0x1e8 [ 52.165039][ T6242] fd_array_get_map_idx+0x1d4/0x2c4 [ 52.165046][ T6242] check_and_resolve_insns+0x668/0x1bb4 [ 52.165056][ T6242] bpf_check+0x1a64/0x2428 [ 52.165065][ T6242] bpf_prog_load+0xf4c/0x1554 [ 52.165073][ T6242] __sys_bpf+0x7d4/0x82c [ 52.165080][ T6242] __arm64_sys_bpf+0xd0/0xec [ 52.165088][ T6242] invoke_syscall+0x98/0x244 [ 52.165097][ T6242] el0_svc_common+0xec/0x23c [ 52.165107][ T6242] do_el0_svc+0x4c/0x5c [ 52.165116][ T6242] el0_svc+0x60/0x1d8 [ 52.165125][ T6242] el0t_64_sync_handler+0x44/0x104 [ 52.165134][ T6242] el0t_64_sync+0x198/0x19c [ 52.278002][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.278164][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.318557][ T6263] loop2: detected capacity change from 0 to 128 [ 52.318902][ T6263] vfat: Unknown parameter 'nnonumtail' [ 52.386189][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.386338][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.664341][ T5481] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 52.664362][ T5481] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.664362][ T5481] [ 52.664369][ T5481] EXT4-fs (loop0): Total free blocks count 0 [ 52.664376][ T5481] EXT4-fs (loop0): Free/Dirty block details [ 52.664385][ T5481] EXT4-fs (loop0): free_blocks=0 [ 52.664396][ T5481] EXT4-fs (loop0): dirty_blocks=32 [ 52.664401][ T5481] EXT4-fs (loop0): Block reservation details [ 53.234527][ T6293] loop3: detected capacity change from 0 to 2048 [ 53.298601][ T6295] syz_tun: entered allmulticast mode [ 53.302931][ T6295] FAULT_INJECTION: forcing a failure. [ 53.302931][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 53.302953][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.3.407 Tainted: G L syzkaller #0 PREEMPT [ 53.302968][ T6295] Tainted: [L]=SOFTLOCKUP [ 53.302972][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.302978][ T6295] Call trace: [ 53.302982][ T6295] show_stack+0x2c/0x3c (C) [ 53.303004][ T6295] __dump_stack+0x30/0x40 [ 53.303018][ T6295] dump_stack_lvl+0xd8/0x12c [ 53.303030][ T6295] dump_stack+0x1c/0x28 [ 53.303041][ T6295] should_fail_ex+0x418/0x58c [ 53.303057][ T6295] should_failslab+0xc4/0x120 [ 53.303071][ T6295] __kmalloc_noprof+0x108/0x6c8 [ 53.303080][ T6295] security_shm_alloc+0x54/0x304 [ 53.303092][ T6295] newseg+0x2e0/0x904 [ 53.303102][ T6295] ipcget+0x920/0xce4 [ 53.303110][ T6295] __arm64_sys_shmget+0x128/0x17c [ 53.303121][ T6295] invoke_syscall+0x98/0x244 [ 53.303133][ T6295] el0_svc_common+0xec/0x23c [ 53.303144][ T6295] do_el0_svc+0x4c/0x5c [ 53.303155][ T6295] el0_svc+0x60/0x1d8 [ 53.303167][ T6295] el0t_64_sync_handler+0x44/0x104 [ 53.303178][ T6295] el0t_64_sync+0x198/0x19c [ 53.342898][ T6294] syz_tun: left allmulticast mode [ 53.348497][ T6297] syzkaller0: entered promiscuous mode [ 53.348509][ T6297] syzkaller0: entered allmulticast mode [ 53.352969][ T6297] tipc: Started in network mode [ 53.352988][ T6297] tipc: Node identity 6a3870dc6c6, cluster identity 4711 [ 53.353069][ T6297] tipc: Enabled bearer , priority 0 [ 53.356904][ T6297] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 53.363052][ T6296] tipc: Resetting bearer [ 53.378931][ T6296] tipc: Disabling bearer [ 53.531737][ T4722] Bluetooth: hci5: command tx timeout [ 53.709244][ T6342] loop3: detected capacity change from 0 to 512 [ 53.709853][ T6342] EXT4-fs (loop3): Test dummy encryption mode enabled [ 53.711852][ T6342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e029, mo2=0003] [ 53.711893][ T6342] System zones: 1-12 [ 53.711981][ T6342] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.712231][ T6342] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.418: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 53.712244][ T6342] loop3: lost filesystem error report for type 5 error -117 [ 53.713997][ T6342] EXT4-fs (loop3): Remounting filesystem read-only [ 53.714054][ T6342] EXT4-fs (loop3): 1 orphan inode deleted [ 53.714499][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.742462][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.944995][ T6364] Invalid ELF header magic: != ELF [ 54.020003][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.068463][ T6374] loop2: detected capacity change from 0 to 1024 [ 54.072092][ T6374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.093740][ T6374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 54.093777][ T6374] System zones: 0-1, 3-36 [ 54.095027][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.121181][ T6374] netlink: 252 bytes leftover after parsing attributes in process `syz.2.426'. [ 54.148650][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.226163][ T6384] lo speed is unknown, defaulting to 1000 [ 54.337268][ T6397] loop2: detected capacity change from 0 to 2048 [ 54.373278][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.483173][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.556562][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'. [ 55.018634][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.043904][ T6420] x_tables: duplicate underflow at hook 1 [ 55.052105][ T5476] wlan1: Trigger new scan to find an IBSS to join [ 55.091009][ T6424] futex_wake_op: syz.1.436 tries to shift op by 144; fix this program [ 55.097999][ T6423] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 55.168034][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.216277][ T6432] FAULT_INJECTION: forcing a failure. [ 55.216277][ T6432] name failslab, interval 1, probability 0, space 0, times 0 [ 55.216306][ T6432] CPU: 1 UID: 0 PID: 6432 Comm: syz.2.440 Tainted: G L syzkaller #0 PREEMPT [ 55.216319][ T6432] Tainted: [L]=SOFTLOCKUP [ 55.216323][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 55.216328][ T6432] Call trace: [ 55.216331][ T6432] show_stack+0x2c/0x3c (C) [ 55.216350][ T6432] __dump_stack+0x30/0x40 [ 55.216363][ T6432] dump_stack_lvl+0xd8/0x12c [ 55.216374][ T6432] dump_stack+0x1c/0x28 [ 55.216385][ T6432] should_fail_ex+0x418/0x58c [ 55.216398][ T6432] should_failslab+0xc4/0x120 [ 55.216411][ T6432] kmem_cache_alloc_noprof+0x94/0x5d4 [ 55.216419][ T6432] do_getname+0x48/0x234 [ 55.216428][ T6432] __getname_maybe_null+0xe8/0x1b0 [ 55.216436][ T6432] __arm64_sys_statx+0xf4/0x174 [ 55.216447][ T6432] invoke_syscall+0x98/0x244 [ 55.216459][ T6432] el0_svc_common+0xec/0x23c [ 55.216471][ T6432] do_el0_svc+0x4c/0x5c [ 55.216482][ T6432] el0_svc+0x60/0x1d8 [ 55.216494][ T6432] el0t_64_sync_handler+0x44/0x104 [ 55.216505][ T6432] el0t_64_sync+0x198/0x19c [ 55.256826][ T6437] FAULT_INJECTION: forcing a failure. [ 55.256826][ T6437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.256845][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.3.441 Tainted: G L syzkaller #0 PREEMPT [ 55.256856][ T6437] Tainted: [L]=SOFTLOCKUP [ 55.256859][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 55.256864][ T6437] Call trace: [ 55.256867][ T6437] show_stack+0x2c/0x3c (C) [ 55.256885][ T6437] __dump_stack+0x30/0x40 [ 55.256895][ T6437] dump_stack_lvl+0xd8/0x12c [ 55.256905][ T6437] dump_stack+0x1c/0x28 [ 55.256913][ T6437] should_fail_ex+0x418/0x58c [ 55.256925][ T6437] should_fail+0x14/0x24 [ 55.256934][ T6437] should_fail_usercopy+0x20/0x30 [ 55.256944][ T6437] simple_read_from_buffer+0xc4/0x238 [ 55.256954][ T6437] proc_fail_nth_read+0x1a8/0x248 [ 55.256962][ T6437] vfs_read+0x230/0x8c8 [ 55.256973][ T6437] ksys_read+0x12c/0x228 [ 55.256982][ T6437] __arm64_sys_read+0x84/0x98 [ 55.256992][ T6437] invoke_syscall+0x98/0x244 [ 55.257002][ T6437] el0_svc_common+0xec/0x23c [ 55.257011][ T6437] do_el0_svc+0x4c/0x5c [ 55.257020][ T6437] el0_svc+0x60/0x1d8 [ 55.257030][ T6437] el0t_64_sync_handler+0x44/0x104 [ 55.257039][ T6437] el0t_64_sync+0x198/0x19c [ 55.293349][ T6440] set_capacity_and_notify: 1 callbacks suppressed [ 55.293361][ T6440] loop3: detected capacity change from 0 to 512 [ 55.298889][ T6440] EXT4-fs: Ignoring removed bh option [ 55.313302][ T6440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.480216][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.518627][ T6460] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.452'. [ 55.518644][ T6460] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 55.541193][ T6463] FAULT_INJECTION: forcing a failure. [ 55.541193][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 55.541219][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.0.453 Tainted: G L syzkaller #0 PREEMPT [ 55.541233][ T6463] Tainted: [L]=SOFTLOCKUP [ 55.541236][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 55.541242][ T6463] Call trace: [ 55.541245][ T6463] show_stack+0x2c/0x3c (C) [ 55.541268][ T6463] __dump_stack+0x30/0x40 [ 55.541283][ T6463] dump_stack_lvl+0xd8/0x12c [ 55.541295][ T6463] dump_stack+0x1c/0x28 [ 55.541306][ T6463] should_fail_ex+0x418/0x58c [ 55.541320][ T6463] should_failslab+0xc4/0x120 [ 55.541333][ T6463] __kmalloc_noprof+0x108/0x6c8 [ 55.541342][ T6463] tomoyo_realpath_from_path+0xbc/0x4dc [ 55.541355][ T6463] tomoyo_path_perm+0x218/0x460 [ 55.541364][ T6463] tomoyo_inode_getattr+0x28/0x38 [ 55.541376][ T6463] security_inode_getattr+0x114/0x2c0 [ 55.541386][ T6463] vfs_statx_path+0x34/0x22c [ 55.541398][ T6463] do_statx_fd+0x118/0x1e8 [ 55.541409][ T6463] __arm64_sys_statx+0x124/0x174 [ 55.541420][ T6463] invoke_syscall+0x98/0x244 [ 55.541432][ T6463] el0_svc_common+0xec/0x23c [ 55.541444][ T6463] do_el0_svc+0x4c/0x5c [ 55.541455][ T6463] el0_svc+0x60/0x1d8 [ 55.541467][ T6463] el0t_64_sync_handler+0x44/0x104 [ 55.541478][ T6463] el0t_64_sync+0x198/0x19c [ 55.541488][ T6463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.543539][ T6464] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.451'. [ 55.590730][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 55.621836][ T4722] Bluetooth: hci5: command tx timeout [ 55.631004][ T6472] loop0: detected capacity change from 0 to 512 [ 55.637060][ T6471] loop3: detected capacity change from 0 to 512 [ 55.643251][ T6471] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.456: bg 0: block 5: invalid block bitmap [ 55.643269][ T6471] loop3: lost filesystem error report for type 5 error -117 [ 55.644477][ T6471] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 55.644493][ T6471] loop3: lost filesystem error report for type 5 error -117 [ 55.644637][ T6471] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.456: invalid indirect mapped block 3 (level 2) [ 55.644652][ T6471] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.644833][ T6471] EXT4-fs (loop3): 1 orphan inode deleted [ 55.644841][ T6471] EXT4-fs (loop3): 1 truncate cleaned up [ 55.645278][ T6471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.799233][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.821426][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.460'. [ 56.166074][ T6486] loop3: detected capacity change from 0 to 128 [ 56.167085][ T6486] vfat: Unknown parameter 'nnonumtail' [ 56.177531][ T4722] Bluetooth: hci4: unexpected event for opcode 0x200a [ 56.275319][ T6493] netlink: 888 bytes leftover after parsing attributes in process `syz.1.463'. [ 56.557819][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.557915][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.557993][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558061][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558127][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558201][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558265][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558329][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558396][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.558466][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.593181][ T6500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.465'. [ 56.644547][ T6504] loop0: detected capacity change from 0 to 128 [ 56.645532][ T6504] FAT-fs (loop0): bogus logical sector size 0 [ 56.645558][ T6504] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 56.645577][ T6504] FAT-fs (loop0): Can't find a valid FAT filesystem [ 56.736347][ T6511] binder: Bad value for 'max' [ 56.946897][ T6522] netlink: 112 bytes leftover after parsing attributes in process `syz.5.474'. ** 10863 printk messages dropped ** [ 57.215649][ T6533] nfs: Unknown parameter '' [ 57.215733][ T6533] nfs: Unknown parameter '' [ 57.215808][ T6533] nfs: Unknown parameter '' [ 57.215869][ T6533] nfs: Unknown parameter '' [ 57.215929][ T6533] nfs: Unknown parameter '' [ 57.215990][ T6533] nfs: Unknown parameter '' [ 57.216046][ T6533] nfs: Unknown parameter '' [ 57.216100][ T6533] nfs: Unknown parameter '' [ 57.216155][ T6533] nfs: Unknown parameter '' [ 57.216207][ T6533] nfs: Unknown parameter '' [ 57.216263][ T6533] nfs: Unknown parameter '' [ 57.216316][ T6533] nfs: Unknown parameter '' [ 57.216370][ T6533] nfs: Unknown parameter '' [ 57.216427][ T6533] nfs: Unknown parameter '' [ 57.216481][ T6533] nfs: Unknown parameter '' [ 57.216533][ T6533] nfs: Unknown parameter '' [ 57.216592][ T6533] nfs: Unknown parameter '' [ 57.216646][ T6533] nfs: Unknown parameter '' [ 57.216714][ T6533] nfs: Unknown parameter '' [ 57.216774][ T6533] nfs: Unknown parameter '' [ 57.216830][ T6533] nfs: Unknown parameter '' [ 57.216889][ T6533] nfs: Unknown parameter '' [ 57.216943][ T6533] nfs: Unknown parameter '' [ 57.217002][ T6533] nfs: Unknown parameter '' [ 57.217058][ T6533] nfs: Unknown parameter '' [ 57.217113][ T6533] nfs: Unknown parameter '' [ 57.217174][ T6533] nfs: Unknown parameter '' [ 57.217227][ T6533] nfs: Unknown parameter '' [ 57.217283][ T6533] nfs: Unknown parameter '' [ 57.217336][ T6533] nfs: Unknown parameter '' [ 57.217392][ T6533] nfs: Unknown parameter '' [ 57.217445][ T6533] nfs: Unknown parameter '' [ 57.217509][ T6533] nfs: Unknown parameter '' [ 57.296775][ T6543] FAULT_INJECTION: forcing a failure. [ 57.296775][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.296794][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.2.480 Tainted: G L syzkaller #0 PREEMPT [ 57.296806][ T6543] Tainted: [L]=SOFTLOCKUP [ 57.296809][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.296821][ T6543] Call trace: [ 57.296824][ T6543] show_stack+0x2c/0x3c (C) [ 57.296845][ T6543] __dump_stack+0x30/0x40 [ 57.296856][ T6543] dump_stack_lvl+0xd8/0x12c [ 57.296866][ T6543] dump_stack+0x1c/0x28 [ 57.296876][ T6543] should_fail_ex+0x418/0x58c [ 57.296888][ T6543] should_fail+0x14/0x24 [ 57.296898][ T6543] should_fail_usercopy+0x20/0x30 [ 57.296908][ T6543] _copy_from_iter+0x188/0x1064 [ 57.296916][ T6543] netlink_sendmsg+0x570/0x948 [ 57.296927][ T6543] __sock_sendmsg+0xc8/0x17c [ 57.296935][ T6543] ____sys_sendmsg+0x3d0/0x6c8 [ 57.296944][ T6543] ___sys_sendmsg+0x198/0x224 [ 57.296952][ T6543] __sys_sendmsg+0x158/0x204 [ 57.296961][ T6543] __arm64_sys_sendmsg+0x88/0x9c [ 57.296970][ T6543] invoke_syscall+0x98/0x244 [ 57.296980][ T6543] el0_svc_common+0xec/0x23c [ 57.296990][ T6543] do_el0_svc+0x4c/0x5c [ 57.296999][ T6543] el0_svc+0x60/0x1d8 [ 57.297009][ T6543] el0t_64_sync_handler+0x44/0x104 [ 57.297018][ T6543] el0t_64_sync+0x198/0x19c [ 57.349329][ T6545] loop3: detected capacity change from 0 to 128 [ 57.824283][ T6572] loop1: detected capacity change from 0 to 512 [ 57.883976][ T6577] loop5: detected capacity change from 0 to 1024 [ 58.122323][ T5496] wlan1: Trigger new scan to find an IBSS to join [ 58.128421][ T6577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 58.130709][ T6577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 58.138384][ T6579] loop1: detected capacity change from 0 to 128 [ 58.143633][ T6579] vfat: Unknown parameter 'nnonumtail' [ 58.208417][ T6584] FAULT_INJECTION: forcing a failure. [ 58.208417][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 58.208437][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.3.493 Tainted: G L syzkaller #0 PREEMPT [ 58.208452][ T6584] Tainted: [L]=SOFTLOCKUP [ 58.208456][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.208470][ T6584] Call trace: [ 58.208474][ T6584] show_stack+0x2c/0x3c (C) [ 58.208492][ T6584] __dump_stack+0x30/0x40 [ 58.208505][ T6584] dump_stack_lvl+0xd8/0x12c [ 58.208518][ T6584] dump_stack+0x1c/0x28 [ 58.208529][ T6584] should_fail_ex+0x418/0x58c [ 58.208543][ T6584] should_failslab+0xc4/0x120 [ 58.208557][ T6584] kmem_cache_alloc_noprof+0x94/0x5d4 [ 58.208566][ T6584] skb_clone+0x1ac/0x320 [ 58.208579][ T6584] bpf_clone_redirect+0x130/0x3f4 [ 58.208592][ T6584] bpf_prog_3e1cbbed0c4acd81+0x7c/0xa8 [ 58.208602][ T6584] bpf_test_run+0x2d0/0x7f0 [ 58.208612][ T6584] bpf_prog_test_run_skb+0xcd0/0x1ed0 [ 58.208621][ T6584] bpf_prog_test_run+0x1e0/0x250 [ 58.208632][ T6584] __sys_bpf+0x6bc/0x82c [ 58.208643][ T6584] __arm64_sys_bpf+0xd0/0xec [ 58.208652][ T6584] invoke_syscall+0x98/0x244 [ 58.208665][ T6584] el0_svc_common+0xec/0x23c [ 58.208682][ T6584] do_el0_svc+0x4c/0x5c [ 58.208693][ T6584] el0_svc+0x60/0x1d8 [ 58.208704][ T6584] el0t_64_sync_handler+0x44/0x104 [ 58.208714][ T6584] el0t_64_sync+0x198/0x19c [ 58.224416][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.492'. [ 58.303160][ T6593] FAULT_INJECTION: forcing a failure. [ 58.303160][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 58.303178][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.3.497 Tainted: G L syzkaller #0 PREEMPT [ 58.303194][ T6593] Tainted: [L]=SOFTLOCKUP [ 58.303199][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.303212][ T6593] Call trace: [ 58.303215][ T6593] show_stack+0x2c/0x3c (C) [ 58.303231][ T6593] __dump_stack+0x30/0x40 [ 58.303242][ T6593] dump_stack_lvl+0xd8/0x12c [ 58.303251][ T6593] dump_stack+0x1c/0x28 [ 58.303260][ T6593] should_fail_ex+0x418/0x58c [ 58.303271][ T6593] should_failslab+0xc4/0x120 [ 58.303282][ T6593] __kmalloc_noprof+0x108/0x6c8 [ 58.303290][ T6593] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 58.303302][ T6593] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 58.303312][ T6593] genl_rcv_msg+0x43c/0x620 [ 58.303321][ T6593] netlink_rcv_skb+0x238/0x414 [ 58.303330][ T6593] genl_rcv+0x38/0x50 [ 58.303339][ T6593] netlink_unicast+0x600/0x7f8 [ 58.303347][ T6593] netlink_sendmsg+0x648/0x948 [ 58.303356][ T6593] __sock_sendmsg+0xc8/0x17c [ 58.303364][ T6593] ____sys_sendmsg+0x3d0/0x6c8 [ 58.303373][ T6593] ___sys_sendmsg+0x198/0x224 [ 58.303385][ T6593] __sys_sendmsg+0x158/0x204 [ 58.303394][ T6593] __arm64_sys_sendmsg+0x88/0x9c [ 58.303404][ T6593] invoke_syscall+0x98/0x244 [ 58.303414][ T6593] el0_svc_common+0xec/0x23c [ 58.303424][ T6593] do_el0_svc+0x4c/0x5c [ 58.303434][ T6593] el0_svc+0x60/0x1d8 [ 58.303444][ T6593] el0t_64_sync_handler+0x44/0x104 [ 58.303453][ T6593] el0t_64_sync+0x198/0x19c ** 10680 printk messages dropped ** ** 79 printk messages dropped ** [ 58.694375][ T6605] loop0: detected capacity change from 0 to 2048 [ 58.698753][ T6605] ext4: Unknown parameter 'noacl' [ 58.866836][ T6612] FAULT_INJECTION: forcing a failure. [ 58.866836][ T6612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.866849][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.0.503 Tainted: G L syzkaller #0 PREEMPT [ 58.866860][ T6612] Tainted: [L]=SOFTLOCKUP [ 58.866862][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.866873][ T6612] Call trace: [ 58.866876][ T6612] show_stack+0x2c/0x3c (C) [ 58.866895][ T6612] __dump_stack+0x30/0x40 [ 58.866906][ T6612] dump_stack_lvl+0xd8/0x12c [ 58.866916][ T6612] dump_stack+0x1c/0x28 [ 58.866925][ T6612] should_fail_ex+0x418/0x58c [ 58.866937][ T6612] should_fail+0x14/0x24 [ 58.866946][ T6612] should_fail_usercopy+0x20/0x30 [ 58.866956][ T6612] simple_read_from_buffer+0xc4/0x238 [ 58.866967][ T6612] proc_fail_nth_read+0x1a8/0x248 [ 58.866975][ T6612] vfs_read+0x230/0x8c8 [ 58.866986][ T6612] ksys_read+0x12c/0x228 [ 58.866995][ T6612] __arm64_sys_read+0x84/0x98 [ 58.867005][ T6612] invoke_syscall+0x98/0x244 [ 58.867015][ T6612] el0_svc_common+0xec/0x23c [ 58.867025][ T6612] do_el0_svc+0x4c/0x5c [ 58.867034][ T6612] el0_svc+0x60/0x1d8 [ 58.867044][ T6612] el0t_64_sync_handler+0x44/0x104 [ 58.867053][ T6612] el0t_64_sync+0x198/0x19c [ 59.087036][ T6624] lo speed is unknown, defaulting to 1000 [ 59.162143][ T14] wlan1: Creating new IBSS network, BSSID ee:4d:2d:2a:25:6d [ 59.170765][ T6626] netlink: 'syz.5.508': attribute type 15 has an invalid length. [ 59.170777][ T6626] __nla_validate_parse: 1 callbacks suppressed [ 59.170784][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.508'. [ 59.204606][ T6624] netlink: 'syz.5.508': attribute type 4 has an invalid length. [ 59.208032][ T6626] netlink: 'syz.5.508': attribute type 4 has an invalid length. [ 59.226452][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 59.261192][ T6641] netlink: 'syz.3.513': attribute type 21 has an invalid length. [ 59.261205][ T6641] netlink: 128 bytes leftover after parsing attributes in process `syz.3.513'. [ 59.285981][ T6641] netlink: 'syz.3.513': attribute type 5 has an invalid length. [ 59.286062][ T6641] netlink: 3 bytes leftover after parsing attributes in process `syz.3.513'. [ 59.399833][ T6651] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 59.399842][ T6651] unable to read xattr id index table [ 59.439960][ T6657] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 59.439970][ T6657] unable to read xattr id index table [ 59.492893][ T30] audit: type=1326 audit(59.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.5.520" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1d79368 code=0x0 [ 59.507462][ T6663] netlink: 236 bytes leftover after parsing attributes in process `syz.1.523'. [ 59.507478][ T6663] netlink: 236 bytes leftover after parsing attributes in process `syz.1.523'. [ 59.520238][ T6664] vfat: Unknown parameter 'nnonumtail' [ 59.533292][ T4722] Bluetooth: hci4: unexpected event for opcode 0x200a [ 59.923811][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 59.948958][ T6679] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 59.958064][ T6679] EXT4-fs (loop0): 1 truncate cleaned up [ 59.958737][ T6679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.988650][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.015671][ T6682] binder: 6681:6682 tried to acquire reference to desc 0, got 1 instead [ 60.034920][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 60.952799][ T6710] set_capacity_and_notify: 4 callbacks suppressed [ 60.952806][ T6710] loop0: detected capacity change from 0 to 128 [ 60.956880][ T6710] EXT4-fs (loop0): Test dummy encryption mode enabled [ 60.958948][ T6710] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.985553][ T6710] fscrypt: AES-256-XTS using blk-crypto-fallback [ 61.024964][ T6718] loop3: detected capacity change from 0 to 256 [ 61.027924][ T6718] vfat: Unknown parameter 'u' [ 61.537422][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 61.539422][ T6748] netlink: 236 bytes leftover after parsing attributes in process `syz.1.545'. [ 61.610695][ T6757] net_ratelimit: 131 callbacks suppressed [ 61.833762][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.858053][ T6770] loop0: detected capacity change from 0 to 512 [ 61.875396][ T6770] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.875411][ T6770] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 61.877289][ T6770] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.549: attempt to clear invalid blocks 2 len 1 [ 61.877307][ T6770] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.878718][ T6770] EXT4-fs (loop0): Remounting filesystem read-only [ 61.879143][ T6770] EXT4-fs (loop0): 1 truncate cleaned up [ 61.879807][ T6770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.942687][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.976804][ T6775] loop3: detected capacity change from 0 to 512 [ 61.979933][ T6775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.011715][ T6775] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 62.282948][ T4722] Bluetooth: hci4: SCO packet for unknown connection handle 1536 [ 62.821128][ T6822] FAULT_INJECTION: forcing a failure. [ 62.821128][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.821146][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.0.564 Tainted: G L syzkaller #0 PREEMPT [ 62.821161][ T6822] Tainted: [L]=SOFTLOCKUP [ 62.821165][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.821181][ T6822] Call trace: [ 62.821186][ T6822] show_stack+0x2c/0x3c (C) [ 62.821205][ T6822] __dump_stack+0x30/0x40 [ 62.821216][ T6822] dump_stack_lvl+0xd8/0x12c [ 62.821226][ T6822] dump_stack+0x1c/0x28 [ 62.821235][ T6822] should_fail_ex+0x418/0x58c [ 62.821247][ T6822] should_fail+0x14/0x24 [ 62.821256][ T6822] should_fail_usercopy+0x20/0x30 [ 62.821266][ T6822] _inline_copy_from_user+0x3c/0x188 [ 62.821276][ T6822] video_usercopy+0x2d0/0xe88 [ 62.821284][ T6822] video_ioctl2+0x3c/0x50 [ 62.821291][ T6822] v4l2_ioctl+0x148/0x18c [ 62.821297][ T6822] __arm64_sys_ioctl+0x154/0x1cc [ 62.821308][ T6822] invoke_syscall+0x98/0x244 [ 62.821318][ T6822] el0_svc_common+0xec/0x23c [ 62.821328][ T6822] do_el0_svc+0x4c/0x5c [ 62.821337][ T6822] el0_svc+0x60/0x1d8 [ 62.821347][ T6822] el0t_64_sync_handler+0x44/0x104 [ 62.821356][ T6822] el0t_64_sync+0x198/0x19c [ 62.830211][ T6824] tipc: Enabling of bearer rejected, failed to enable media [ 63.427765][ T6855] loop3: detected capacity change from 0 to 8192 [ 63.428565][ T6855] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.095748][ T6879] binder: 6875:6879 ioctl 400c620e 20000300 returned -22 [ 64.314282][ T4723] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 64.314296][ T4723] FAT-fs (loop3): Filesystem has been set read-only [ 64.503199][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503230][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.504568][ T10] cfg80211: failed to load regulatory.db [ 65.467252][ T6859] netlink: 'syz.0.576': attribute type 3 has an invalid length. [ 65.467444][ T6870] netlink: 'syz.0.576': attribute type 3 has an invalid length. [ 65.527787][ T6893] __nla_validate_parse: 3 callbacks suppressed [ 65.527798][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 65.533245][ T6893] netlink: 236 bytes leftover after parsing attributes in process `syz.0.581'. [ 65.533260][ T6893] netlink: 236 bytes leftover after parsing attributes in process `syz.0.581'. [ 65.537404][ T6895] loop3: detected capacity change from 0 to 1024 [ 65.567285][ T6895] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.569253][ T6906] FAULT_INJECTION: forcing a failure. [ 65.569253][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 65.569272][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.1.585 Tainted: G L syzkaller #0 PREEMPT [ 65.569284][ T6906] Tainted: [L]=SOFTLOCKUP [ 65.569287][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.569299][ T6906] Call trace: [ 65.569302][ T6906] show_stack+0x2c/0x3c (C) [ 65.569318][ T6906] __dump_stack+0x30/0x40 [ 65.569328][ T6906] dump_stack_lvl+0xd8/0x12c [ 65.569338][ T6906] dump_stack+0x1c/0x28 [ 65.569347][ T6906] should_fail_ex+0x418/0x58c [ 65.569358][ T6906] should_failslab+0xc4/0x120 [ 65.569369][ T6906] __kmalloc_noprof+0x108/0x6c8 [ 65.569377][ T6906] security_prepare_creds+0x60/0x35c [ 65.569386][ T6906] prepare_creds+0x500/0x7d0 [ 65.569396][ T6906] lookup_user_key+0x284/0xd4c [ 65.569405][ T6906] __arm64_sys_add_key+0x34c/0x43c [ 65.569413][ T6906] invoke_syscall+0x98/0x244 [ 65.569423][ T6906] el0_svc_common+0xec/0x23c [ 65.569432][ T6906] do_el0_svc+0x4c/0x5c [ 65.569441][ T6906] el0_svc+0x60/0x1d8 [ 65.569451][ T6906] el0t_64_sync_handler+0x44/0x104 [ 65.569460][ T6906] el0t_64_sync+0x198/0x19c [ 65.581449][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.581798][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.589022][ T6904] loop2: detected capacity change from 0 to 1024 [ 65.610024][ T6895] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.582: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.610048][ T6895] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.611577][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 65.611592][ C0] EXT4-fs (loop3): initial error at time 65: ext4_map_blocks:790: inode 3: block 2 [ 65.611616][ C0] EXT4-fs (loop3): last error at time 65: ext4_map_blocks:790: inode 3: block 2 [ 65.623893][ T6895] EXT4-fs (loop3): Remounting filesystem read-only [ 65.623919][ T6895] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 65.623967][ T6895] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 65.624026][ T6895] EXT4-fs (loop3): 1 orphan inode deleted [ 65.624492][ T6895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.637683][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.656493][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.044064][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.044462][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.415613][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 66.415629][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 66.600622][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.770190][ T6974] FAULT_INJECTION: forcing a failure. [ 66.770190][ T6974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.770207][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.3.602 Tainted: G L syzkaller #0 PREEMPT [ 66.770220][ T6974] Tainted: [L]=SOFTLOCKUP [ 66.770224][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.770237][ T6974] Call trace: [ 66.770240][ T6974] show_stack+0x2c/0x3c (C) [ 66.770258][ T6974] __dump_stack+0x30/0x40 [ 66.770271][ T6974] dump_stack_lvl+0xd8/0x12c [ 66.770282][ T6974] dump_stack+0x1c/0x28 [ 66.770294][ T6974] should_fail_ex+0x418/0x58c [ 66.770307][ T6974] should_fail+0x14/0x24 [ 66.770319][ T6974] should_fail_usercopy+0x20/0x30 [ 66.770332][ T6974] copy_from_sockptr+0x7c/0x1e0 [ 66.770344][ T6974] do_ip_setsockopt+0x153c/0x2628 [ 66.770355][ T6974] ip_setsockopt+0x80/0x128 [ 66.770366][ T6974] udp_setsockopt+0xa8/0xc0 [ 66.770377][ T6974] sock_common_setsockopt+0xb0/0xcc [ 66.770388][ T6974] do_sock_setsockopt+0x1f0/0x330 [ 66.770399][ T6974] __sys_setsockopt+0x104/0x170 [ 66.770409][ T6974] __arm64_sys_setsockopt+0xc8/0xe4 [ 66.770420][ T6974] invoke_syscall+0x98/0x244 [ 66.770432][ T6974] el0_svc_common+0xec/0x23c [ 66.770444][ T6974] do_el0_svc+0x4c/0x5c [ 66.770456][ T6974] el0_svc+0x60/0x1d8 [ 66.770468][ T6974] el0t_64_sync_handler+0x44/0x104 [ 66.770479][ T6974] el0t_64_sync+0x198/0x19c [ 66.775421][ T6975] loop2: detected capacity change from 0 to 128 [ 66.784228][ T6975] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.858464][ T6988] net_ratelimit: 3428 callbacks suppressed [ 66.910053][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.041865][ T7011] binder: tried to use weak ref as strong ref [ 67.041875][ T7011] binder: 7010:7011 Acquire 1 refcount change on invalid ref 0 ret -22 [ 67.041895][ T7011] binder: 7010:7011 got transaction to invalid handle, 1 [ 67.041905][ T7011] binder: 7010:7011 cannot find target node [ 67.041923][ T7011] binder: 7010:7011 transaction call to 0:0 failed 29/29201/-22, code 0 size 104-24 line 3252 [ 67.042200][ T7011] binder: 7010:7011 ioctl 5646 0 returned -22 [ 67.042637][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.050470][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 67.323532][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.612'. [ 67.404980][ T7034] loop1: detected capacity change from 0 to 128 [ 67.408865][ T7032] binder: 7030:7032 ioctl c0306201 20000100 returned -14 [ 67.430277][ T7034] netlink: 'syz.1.616': attribute type 16 has an invalid length. [ 67.430292][ T7034] netlink: 'syz.1.616': attribute type 3 has an invalid length. [ 67.430303][ T7034] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.616'. [ 67.496451][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 67.711970][ T7071] loop9: detected capacity change from 0 to 7 [ 67.727258][ T7071] Dev loop9: unable to read RDB block 7 [ 67.727279][ T7071] loop9: unable to read partition table [ 67.727343][ T7071] loop9: partition table beyond EOD, truncated [ 67.727366][ T7071] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 67.777066][ T7071] loop9: detected capacity change from 7 to 8 [ 67.782715][ T7079] loop0: detected capacity change from 0 to 256 [ 67.826508][ T7079] nvme_tcp: malformed address passed: ::È!Þò1%9OâO6Iw­ð)áâhOÔ|£F˜¬5¡+ÏûÜÉåœÌǠνՊ:8009 [ 67.958248][ T7100] netlink: 236 bytes leftover after parsing attributes in process `syz.5.631'. [ 68.013891][ T7106] loop0: detected capacity change from 0 to 128 [ 68.014327][ T7106] vfat: Unknown parameter 'nnonumtail' [ 68.364671][ T7132] FAULT_INJECTION: forcing a failure. [ 68.364671][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 68.364692][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.2.635 Tainted: G L syzkaller #0 PREEMPT [ 68.364704][ T7132] Tainted: [L]=SOFTLOCKUP [ 68.364708][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.364719][ T7132] Call trace: [ 68.364722][ T7132] show_stack+0x2c/0x3c (C) [ 68.364739][ T7132] __dump_stack+0x30/0x40 [ 68.364750][ T7132] dump_stack_lvl+0xd8/0x12c [ 68.364759][ T7132] dump_stack+0x1c/0x28 [ 68.364769][ T7132] should_fail_ex+0x418/0x58c [ 68.364780][ T7132] should_failslab+0xc4/0x120 [ 68.364791][ T7132] kmem_cache_alloc_node_noprof+0x98/0x604 [ 68.364799][ T7132] __alloc_skb+0x1f0/0x610 [ 68.364808][ T7132] create_monitor_ctrl_event+0x50/0x3dc [ 68.364817][ T7132] mgmt_cmd_status+0x158/0x494 [ 68.364825][ T7132] hci_mgmt_cmd+0x4b8/0xc54 [ 68.364832][ T7132] hci_sock_sendmsg+0x54c/0xc44 [ 68.364840][ T7132] __sock_sendmsg+0xc8/0x17c [ 68.364848][ T7132] sock_write_iter+0x220/0x310 [ 68.364857][ T7132] vfs_write+0x51c/0xa0c [ 68.364870][ T7132] ksys_write+0x12c/0x228 [ 68.364880][ T7132] __arm64_sys_write+0x84/0x98 [ 68.364891][ T7132] invoke_syscall+0x98/0x244 [ 68.364901][ T7132] el0_svc_common+0xec/0x23c [ 68.364911][ T7132] do_el0_svc+0x4c/0x5c [ 68.364920][ T7132] el0_svc+0x60/0x1d8 [ 68.364930][ T7132] el0t_64_sync_handler+0x44/0x104 [ 68.364939][ T7132] el0t_64_sync+0x198/0x19c [ 69.011031][ T4722] Bluetooth: hci4: unexpected event 0x03 length: 13 > 11 [ 69.023835][ T7158] loop1: detected capacity change from 0 to 8192 [ 69.024633][ T7158] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.473934][ T7171] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 69.527001][ T5476] IPVS: starting estimator thread 0... [ 69.611837][ T7177] IPVS: using max 60 ests per chain, 144000 per kthread [ 69.638944][ T7186] loop0: detected capacity change from 0 to 8 [ 69.675325][ T7189] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 69.749098][ T7198] loop0: detected capacity change from 0 to 256 [ 69.880284][ T4710] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 69.880296][ T4710] FAT-fs (loop1): Filesystem has been set read-only [ 70.005887][ T7232] loop1: detected capacity change from 0 to 512 [ 70.016718][ T7232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.068507][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.151189][ T7252] vfat: Unknown parameter 'nnonumtail' [ 70.287034][ T7262] FAULT_INJECTION: forcing a failure. [ 70.287034][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 70.287054][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.2.665 Tainted: G L syzkaller #0 PREEMPT [ 70.287069][ T7262] Tainted: [L]=SOFTLOCKUP [ 70.287073][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.287088][ T7262] Call trace: [ 70.287092][ T7262] show_stack+0x2c/0x3c (C) [ 70.287111][ T7262] __dump_stack+0x30/0x40 [ 70.287124][ T7262] dump_stack_lvl+0xd8/0x12c [ 70.287137][ T7262] dump_stack+0x1c/0x28 [ 70.287148][ T7262] should_fail_ex+0x418/0x58c [ 70.287162][ T7262] should_failslab+0xc4/0x120 [ 70.287176][ T7262] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.287186][ T7262] do_getname+0x48/0x234 [ 70.287196][ T7262] __getname_maybe_null+0xe8/0x1b0 [ 70.287206][ T7262] __arm64_sys_statx+0xf4/0x174 [ 70.287218][ T7262] invoke_syscall+0x98/0x244 [ 70.287230][ T7262] el0_svc_common+0xec/0x23c [ 70.287243][ T7262] do_el0_svc+0x4c/0x5c [ 70.287255][ T7262] el0_svc+0x60/0x1d8 [ 70.287267][ T7262] el0t_64_sync_handler+0x44/0x104 [ 70.287279][ T7262] el0t_64_sync+0x198/0x19c [ 70.384285][ T7268] bridge_slave_0: left allmulticast mode [ 70.384298][ T7268] bridge_slave_0: left promiscuous mode [ 70.384374][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.389982][ T7268] bridge_slave_1: left allmulticast mode [ 70.389990][ T7268] bridge_slave_1: left promiscuous mode [ 70.390043][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.396461][ T7268] bond0: (slave bond_slave_0): Releasing backup interface [ 70.412769][ T4722] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 70.412797][ T4722] Bluetooth: hci5: Injecting HCI hardware error event [ 70.413895][ T4711] Bluetooth: hci5: hardware error 0x00 [ 70.426116][ T7268] bond0: (slave bond_slave_1): Releasing backup interface [ 70.429352][ T7269] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 70.467199][ T7268] team0: Port device team_slave_0 removed [ 70.469366][ T7268] team0: Port device team_slave_1 removed [ 70.469801][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.469812][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.470496][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.470504][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.487041][ T7269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.488653][ T7269] team0: Port device netdevsim1 added [ 70.594576][ T7274] FAULT_INJECTION: forcing a failure. [ 70.594576][ T7274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.594594][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: syz.3.671 Tainted: G L syzkaller #0 PREEMPT [ 70.594606][ T7274] Tainted: [L]=SOFTLOCKUP [ 70.594609][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.594620][ T7274] Call trace: [ 70.594624][ T7274] show_stack+0x2c/0x3c (C) [ 70.594642][ T7274] __dump_stack+0x30/0x40 [ 70.594653][ T7274] dump_stack_lvl+0xd8/0x12c [ 70.594669][ T7274] dump_stack+0x1c/0x28 [ 70.594678][ T7274] should_fail_ex+0x418/0x58c [ 70.594690][ T7274] should_fail+0x14/0x24 [ 70.594699][ T7274] should_fail_usercopy+0x20/0x30 [ 70.594710][ T7274] _inline_copy_from_user+0x3c/0x174 [ 70.594719][ T7274] bpf_test_init+0xd8/0x154 [ 70.594726][ T7274] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 70.594733][ T7274] bpf_prog_test_run+0x1e0/0x250 [ 70.594743][ T7274] __sys_bpf+0x6bc/0x82c [ 70.594751][ T7274] __arm64_sys_bpf+0xd0/0xec [ 70.594758][ T7274] invoke_syscall+0x98/0x244 [ 70.594769][ T7274] el0_svc_common+0xec/0x23c [ 70.594778][ T7274] do_el0_svc+0x4c/0x5c [ 70.594787][ T7274] el0_svc+0x60/0x1d8 [ 70.594797][ T7274] el0t_64_sync_handler+0x44/0x104 [ 70.594807][ T7274] el0t_64_sync+0x198/0x19c [ 70.757809][ T7292] FAULT_INJECTION: forcing a failure. [ 70.757809][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 70.757825][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.3.677 Tainted: G L syzkaller #0 PREEMPT [ 70.757839][ T7292] Tainted: [L]=SOFTLOCKUP [ 70.757843][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.757855][ T7292] Call trace: [ 70.757858][ T7292] show_stack+0x2c/0x3c (C) [ 70.757877][ T7292] __dump_stack+0x30/0x40 [ 70.757888][ T7292] dump_stack_lvl+0xd8/0x12c [ 70.757897][ T7292] dump_stack+0x1c/0x28 [ 70.757907][ T7292] should_fail_ex+0x418/0x58c [ 70.757918][ T7292] should_failslab+0xc4/0x120 [ 70.757929][ T7292] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.757936][ T7292] skb_clone+0x1ac/0x320 [ 70.757947][ T7292] __netlink_deliver_tap+0x364/0x6f4 [ 70.757956][ T7292] netlink_deliver_tap+0x1d8/0x1dc [ 70.757965][ T7292] __netlink_sendskb+0x78/0xd0 [ 70.757973][ T7292] netlink_sendskb+0x2c/0xdc [ 70.757981][ T7292] netlink_unicast+0x2c0/0x7f8 [ 70.757989][ T7292] netlink_ack+0x570/0x890 [ 70.757998][ T7292] netlink_rcv_skb+0x21c/0x414 [ 70.758006][ T7292] genl_rcv+0x38/0x50 [ 70.758015][ T7292] netlink_unicast+0x600/0x7f8 [ 70.758023][ T7292] netlink_sendmsg+0x648/0x948 [ 70.758032][ T7292] __sock_sendmsg+0xc8/0x17c [ 70.758040][ T7292] ____sys_sendmsg+0x3d0/0x6c8 [ 70.758049][ T7292] ___sys_sendmsg+0x198/0x224 [ 70.758058][ T7292] __sys_sendmsg+0x158/0x204 [ 70.758066][ T7292] __arm64_sys_sendmsg+0x88/0x9c [ 70.758075][ T7292] invoke_syscall+0x98/0x244 [ 70.758086][ T7292] el0_svc_common+0xec/0x23c [ 70.758095][ T7292] do_el0_svc+0x4c/0x5c [ 70.758104][ T7292] el0_svc+0x60/0x1d8 [ 70.758114][ T7292] el0t_64_sync_handler+0x44/0x104 [ 70.758123][ T7292] el0t_64_sync+0x198/0x19c [ 70.807417][ T7295] __nla_validate_parse: 2 callbacks suppressed [ 70.807426][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 70.862744][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 70.908731][ T7299] ext4: Unknown parameter 'dont_hash' [ 71.776387][ T7331] binder: 7330:7331 tried to acquire reference to desc 0, got 1 instead [ 71.867729][ T7336] net_ratelimit: 117 callbacks suppressed [ 72.094619][ T7342] set_capacity_and_notify: 3 callbacks suppressed [ 72.094628][ T7342] loop5: detected capacity change from 0 to 128 [ 72.096768][ T7342] vfat: Unknown parameter 'nnonumtail' [ 72.106086][ T4722] Bluetooth: hci5: unexpected event for opcode 0x200a [ 72.229177][ T5496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.293749][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.294775][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.295484][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.298172][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.298597][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.310941][ T5496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.378934][ T5496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.428290][ T7355] netlink: 236 bytes leftover after parsing attributes in process `syz.2.697'. [ 72.428305][ T7355] netlink: 236 bytes leftover after parsing attributes in process `syz.2.697'. [ 72.439729][ T7344] lo speed is unknown, defaulting to 1000 [ 72.483442][ T5496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.561019][ T7363] loop0: detected capacity change from 0 to 8 [ 72.572110][ T7363] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 72.572121][ T7363] unable to read xattr id index table [ 72.592800][ T30] audit: type=1326 audit(72.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7362 comm="syz.0.700" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3379368 code=0x0 [ 72.653591][ T4711] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 72.813932][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.817086][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.817199][ T7344] bridge_slave_0: entered allmulticast mode [ 72.820345][ T7344] bridge_slave_0: entered promiscuous mode [ 72.844092][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.844158][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.844266][ T7344] bridge_slave_1: entered allmulticast mode [ 72.846026][ T7344] bridge_slave_1: entered promiscuous mode [ 72.903615][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.904765][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.912004][ T7373] FAULT_INJECTION: forcing a failure. [ 72.912004][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.912026][ T7373] CPU: 1 UID: 0 PID: 7373 Comm: syz.3.702 Tainted: G L syzkaller #0 PREEMPT [ 72.912039][ T7373] Tainted: [L]=SOFTLOCKUP [ 72.912043][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.912056][ T7373] Call trace: [ 72.912059][ T7373] show_stack+0x2c/0x3c (C) [ 72.912078][ T7373] __dump_stack+0x30/0x40 [ 72.912090][ T7373] dump_stack_lvl+0xd8/0x12c [ 72.912101][ T7373] dump_stack+0x1c/0x28 [ 72.912112][ T7373] should_fail_ex+0x418/0x58c [ 72.912125][ T7373] should_fail+0x14/0x24 [ 72.912137][ T7373] should_fail_usercopy+0x20/0x30 [ 72.912149][ T7373] arch_do_signal_or_restart+0xf80/0x444c [ 72.912161][ T7373] exit_to_user_mode_loop+0x70/0x17c [ 72.912173][ T7373] el0_svc+0x12c/0x1d8 [ 72.912184][ T7373] el0t_64_sync_handler+0x44/0x104 [ 72.912195][ T7373] el0t_64_sync+0x198/0x19c [ 72.946262][ T7344] team0: Port device team_slave_0 added [ 72.948614][ T7344] team0: Port device team_slave_1 added [ 73.041150][ T5496] bridge_slave_1: left allmulticast mode [ 73.041168][ T5496] bridge_slave_1: left promiscuous mode [ 73.041253][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.078377][ T5496] bridge_slave_0: left allmulticast mode [ 73.078389][ T5496] bridge_slave_0: left promiscuous mode [ 73.078463][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.096369][ T7400] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 73.510444][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.546450][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.552958][ T5496] bond0 (unregistering): Released all slaves [ 73.582250][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.582545][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.582566][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.584073][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.592039][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.592044][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.592055][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.650899][ T7421] FAULT_INJECTION: forcing a failure. [ 73.650899][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.650917][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.3.712 Tainted: G L syzkaller #0 PREEMPT [ 73.650931][ T7421] Tainted: [L]=SOFTLOCKUP [ 73.650935][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.650948][ T7421] Call trace: [ 73.650951][ T7421] show_stack+0x2c/0x3c (C) [ 73.650966][ T7421] __dump_stack+0x30/0x40 [ 73.650976][ T7421] dump_stack_lvl+0xd8/0x12c [ 73.650986][ T7421] dump_stack+0x1c/0x28 [ 73.650995][ T7421] should_fail_ex+0x418/0x58c [ 73.651006][ T7421] should_fail+0x14/0x24 [ 73.651015][ T7421] should_fail_usercopy+0x20/0x30 [ 73.651025][ T7421] simple_read_from_buffer+0xc4/0x238 [ 73.651035][ T7421] proc_fail_nth_read+0x1a8/0x248 [ 73.651044][ T7421] vfs_read+0x230/0x8c8 [ 73.651054][ T7421] ksys_read+0x12c/0x228 [ 73.651064][ T7421] __arm64_sys_read+0x84/0x98 [ 73.651074][ T7421] invoke_syscall+0x98/0x244 [ 73.651083][ T7421] el0_svc_common+0xec/0x23c [ 73.651093][ T7421] do_el0_svc+0x4c/0x5c [ 73.651102][ T7421] el0_svc+0x60/0x1d8 [ 73.651112][ T7421] el0t_64_sync_handler+0x44/0x104 [ 73.651122][ T7421] el0t_64_sync+0x198/0x19c [ 73.743234][ T7418] loop2: detected capacity change from 0 to 32768 [ 73.778265][ T7418] loop2: p1 < > p3 < p5 p6 p7 > p4[DM] [ 73.786702][ T7418] loop2: p5 size 50331648 extends beyond EOD, truncated ** 43 printk messages dropped ** ** 1 printk messages dropped ** ** 4 printk messages dropped ** ** 5 printk messages dropped ** [ 73.796611][ T7344] hsr_slave_0: entered promiscuous mode [ 73.800336][ T7344] hsr_slave_1: entered promiscuous mode [ 73.800608][ T7344] debugfs: 'hsr0' already exists in 'hsr' [ 73.800617][ T7344] Cannot create hsr debugfs directory [ 73.818667][ T7418] loop2: p7 size 1048576 extends beyond EOD, truncated [ 74.009643][ T7434] loop3: detected capacity change from 0 to 128 [ 74.039025][ T7434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 74.039051][ T7434] System zones: 1-3, 19-19, 35-36 [ 74.041017][ T7434] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.086739][ T7434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.091423][ T7433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.091731][ T4711] Bluetooth: hci4: command 0x0405 tx timeout [ 74.278812][ T5496] hsr_slave_0: left promiscuous mode [ 74.280652][ T5496] hsr_slave_1: left promiscuous mode [ 74.285336][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.285348][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.288015][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.288024][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.291274][ T4723] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.301195][ T5496] veth1_macvtap: left promiscuous mode [ 74.301223][ T5496] veth0_macvtap: left promiscuous mode [ 74.301271][ T5496] veth1_vlan: left promiscuous mode [ 74.301309][ T5496] veth0_vlan: left promiscuous mode [ 74.331775][ T4718] Bluetooth: hci0: command tx timeout [ 74.422992][ T7455] binder: 7447:7455 tried to acquire reference to desc 0, got 1 instead [ 74.423389][ T7455] binder: 7447:7455 ioctl c0205867 20000340 returned -22 [ 74.612243][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 74.613005][ T7468] loop2: detected capacity change from 0 to 8 [ 74.618703][ T7468] SQUASHFS error: Unable to read inode 0xa7 [ 74.641516][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 74.667040][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 74.756679][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.907350][ T7344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 74.923073][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.728'. [ 74.931185][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.935513][ T7344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 74.938856][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.939205][ T7344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 74.948388][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.948773][ T7344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 74.972992][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.030873][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.037728][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.042555][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.042578][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.043223][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.043242][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.139550][ T7503] se_dev->se_dev_ptr already set for storage object [ 75.221126][ T30] audit: type=1400 audit(75.200:8): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7513 comm="syz.2.734" name="163" dev="tmpfs" ino=916 [ 75.226324][ T30] audit: type=1400 audit(75.210:9): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7513 comm="syz.2.734" name="163" dev="tmpfs" ino=916 [ 75.315086][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.350168][ T7535] binder: 7532:7535 tried to acquire reference to desc 0, got 1 instead [ 75.350327][ T7535] binder: 7532:7535 got transaction with out-of-order buffer fixup [ 75.350364][ T7535] binder: 7532:7535 transaction call to 7532:0 failed 43/29201/-22, code 0 size 120-24 line 3630 [ 75.350634][ T4823] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.364919][ T7534] netlink: 'syz.3.736': attribute type 15 has an invalid length. [ 75.364936][ T7534] netlink: 666 bytes leftover after parsing attributes in process `syz.3.736'. [ 75.393955][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 75.428556][ T7547] random: crng reseeded on system resumption [ 75.444235][ T7534] syzkaller0: entered promiscuous mode [ 75.444247][ T7534] syzkaller0: entered allmulticast mode [ 75.510729][ T7344] veth0_vlan: entered promiscuous mode [ 75.533341][ T7344] veth1_vlan: entered promiscuous mode [ 75.544173][ T83] IPVS: starting estimator thread 0... [ 75.566549][ T7344] veth0_macvtap: entered promiscuous mode [ 75.586738][ T7344] veth1_macvtap: entered promiscuous mode [ 75.594874][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.598201][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.631726][ T7560] IPVS: using max 59 ests per chain, 141600 per kthread [ 75.665396][ T7572] FAULT_INJECTION: forcing a failure. [ 75.665396][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 75.665418][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.0.744 Tainted: G L syzkaller #0 PREEMPT [ 75.665431][ T7572] Tainted: [L]=SOFTLOCKUP [ 75.665434][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.665447][ T7572] Call trace: [ 75.665450][ T7572] show_stack+0x2c/0x3c (C) [ 75.665468][ T7572] __dump_stack+0x30/0x40 [ 75.665480][ T7572] dump_stack_lvl+0xd8/0x12c [ 75.665491][ T7572] dump_stack+0x1c/0x28 [ 75.665503][ T7572] should_fail_ex+0x418/0x58c [ 75.665516][ T7572] should_failslab+0xc4/0x120 [ 75.665529][ T7572] kmem_cache_alloc_noprof+0x94/0x5d4 [ 75.665537][ T7572] skb_clone+0x1ac/0x320 [ 75.665549][ T7572] bpf_clone_redirect+0x130/0x3f4 [ 75.665561][ T7572] bpf_prog_3e1cbbed0c4acd81+0x7c/0xa8 [ 75.665569][ T7572] bpf_test_run+0x2d0/0x7f0 [ 75.665577][ T7572] bpf_prog_test_run_skb+0xcd0/0x1ed0 [ 75.665586][ T7572] bpf_prog_test_run+0x1e0/0x250 [ 75.665597][ T7572] __sys_bpf+0x6bc/0x82c [ 75.665606][ T7572] __arm64_sys_bpf+0xd0/0xec [ 75.665614][ T7572] invoke_syscall+0x98/0x244 [ 75.665626][ T7572] el0_svc_common+0xec/0x23c [ 75.665638][ T7572] do_el0_svc+0x4c/0x5c [ 75.665649][ T7572] el0_svc+0x60/0x1d8 [ 75.665661][ T7572] el0t_64_sync_handler+0x44/0x104 [ 75.665672][ T7572] el0t_64_sync+0x198/0x19c [ 75.692503][ T5496] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.705771][ T5496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.706060][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708221][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.708230][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.726693][ T5496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.726702][ T5496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.734920][ T5496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.841436][ T7583] loop0: detected capacity change from 0 to 2048 [ 76.090839][ T7583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.112175][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 76.236787][ T7598] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 1441 [ 76.236823][ T7598] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 76.323979][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.749'. [ 76.412225][ T4718] Bluetooth: hci0: command tx timeout [ 76.595898][ T7583] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 22912 [ 76.595940][ T7583] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 76.658561][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.659018][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.682704][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.728161][ T7624] loop0: detected capacity change from 0 to 1024 [ 76.733735][ T7624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.798959][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. ** 3464 printk messages dropped ** ** 84 printk messages dropped ** ** 2 printk messages dropped ** ** 2 printk messages dropped ** ** 4 printk messages dropped ** [ 76.931937][ T9] net_ratelimit: 404 callbacks suppressed [ 76.996127][ T7633] netlink: 31 bytes leftover after parsing attributes in process `syz.6.760'. [ 77.081243][ T7637] loop6: detected capacity change from 0 to 128 [ 77.084038][ T7637] vfat: Unknown parameter 'nnonumtail' [ 77.277528][ T7641] sctp: [Deprecated]: syz.5.764 (pid 7641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.277528][ T7641] Use struct sctp_sack_info instead [ 77.448575][ T7651] netlink: 'syz.5.769': attribute type 10 has an invalid length. [ 77.454185][ T7651] team0: Port device dummy0 added [ 77.485823][ T4718] block nbd2: Receive control failed (result -32) [ 77.488388][ T7615] block nbd2: shutting down sockets [ 77.572550][ T7655] FAULT_INJECTION: forcing a failure. [ 77.572550][ T7655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.572571][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.2.771 Tainted: G L syzkaller #0 PREEMPT [ 77.572587][ T7655] Tainted: [L]=SOFTLOCKUP [ 77.572592][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.572605][ T7655] Call trace: [ 77.572609][ T7655] show_stack+0x2c/0x3c (C) [ 77.572631][ T7655] __dump_stack+0x30/0x40 [ 77.572642][ T7655] dump_stack_lvl+0xd8/0x12c [ 77.572652][ T7655] dump_stack+0x1c/0x28 [ 77.572661][ T7655] should_fail_ex+0x418/0x58c [ 77.572672][ T7655] should_fail+0x14/0x24 [ 77.572688][ T7655] should_fail_usercopy+0x20/0x30 [ 77.572699][ T7655] _copy_from_iter+0x188/0x1064 [ 77.572707][ T7655] netlink_sendmsg+0x570/0x948 [ 77.572718][ T7655] __sock_sendmsg+0xc8/0x17c [ 77.572728][ T7655] ____sys_sendmsg+0x3d0/0x6c8 [ 77.572737][ T7655] ___sys_sendmsg+0x198/0x224 [ 77.572745][ T7655] __sys_sendmsg+0x158/0x204 [ 77.572754][ T7655] __arm64_sys_sendmsg+0x88/0x9c [ 77.572763][ T7655] invoke_syscall+0x98/0x244 [ 77.572773][ T7655] el0_svc_common+0xec/0x23c [ 77.572783][ T7655] do_el0_svc+0x4c/0x5c [ 77.572792][ T7655] el0_svc+0x60/0x1d8 [ 77.572803][ T7655] el0t_64_sync_handler+0x44/0x104 [ 77.572812][ T7655] el0t_64_sync+0x198/0x19c [ 77.577373][ T7659] loop5: detected capacity change from 0 to 1024 [ 77.600032][ T7659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.608149][ T7659] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.772: lblock 0 mapped to illegal pblock 0 (length 6) [ 77.608464][ T7659] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 77.608480][ T7659] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.608480][ T7659] [ 77.610921][ T7659] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.772: bg 0: block 112: padding at end of block bitmap is not set [ 77.615307][ T7659] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 16 with error 28 [ 77.615326][ T7659] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.615326][ T7659] [ 77.615337][ T7659] EXT4-fs (loop5): Total free blocks count 0 [ 77.615346][ T7659] EXT4-fs (loop5): Free/Dirty block details [ 77.615365][ T7659] EXT4-fs (loop5): free_blocks=0 [ 77.615380][ T7659] EXT4-fs (loop5): dirty_blocks=32 [ 77.615387][ T7659] EXT4-fs (loop5): Block reservation details [ 77.670830][ T7667] loop5: detected capacity change from 0 to 512 [ 77.707637][ T7667] EXT4-fs: Ignoring removed i_version option [ 77.717098][ T7669] tmpfs: Unknown parameter 'epd¬' [ 77.718404][ T7667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 77.718441][ T7667] System zones: 1-12 [ 77.718872][ T7667] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.774: missing EA_INODE flag [ 77.718888][ T7667] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 77.720148][ T7667] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.774: error while reading EA inode 12 err=-117 [ 77.720171][ T7667] loop5: lost filesystem error report for type 5 error -117 [ 77.720327][ T7667] EXT4-fs (loop5): 1 orphan inode deleted [ 77.720805][ T7667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.766122][ T7681] vlan1: entered allmulticast mode [ 77.766134][ T7681] veth0_vlan: entered allmulticast mode [ 77.769870][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 77.769884][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 77.777334][ T7681] vxcan3: entered promiscuous mode [ 77.777341][ T7681] vxcan3: entered allmulticast mode [ 78.123619][ T7691] loop2: detected capacity change from 0 to 512 [ 78.129271][ T7691] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 78.145920][ T7694] loop0: detected capacity change from 0 to 128 [ 78.147496][ T7698] loop6: detected capacity change from 0 to 128 [ 78.147872][ T7698] vfat: Unknown parameter 'nnonumtail' [ 78.148112][ T7694] FAT-fs (loop0): bogus number of reserved sectors [ 78.148132][ T7694] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 78.148140][ T7694] FAT-fs (loop0): Can't find a valid FAT filesystem [ 78.207769][ T7703] se_dev->se_dev_ptr already set for storage object [ 78.246195][ T7705] overlayfs: conflicting lowerdir path ** 1252 printk messages dropped ** ** 48 printk messages dropped ** ** 34 printk messages dropped ** ** 4 printk messages dropped ** ** 15 printk messages dropped ** ** 69 printk messages dropped ** ** 46 printk messages dropped ** ** 48 printk messages dropped ** ** 11 printk messages dropped ** [ 78.536799][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.583755][ T869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.590525][ T30] audit: type=1326 audit(78.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7710 comm="syz.5.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1d79368 code=0x0 [ 78.690683][ T7691] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 78.736497][ T7719] loop6: detected capacity change from 0 to 256 [ 78.781087][ T7705] loop0: detected capacity change from 0 to 512 [ 78.781540][ T7705] EXT4-fs: Ignoring removed bh option [ 78.790616][ T7705] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.814848][ T7705] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 78.818138][ T7705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.789: bg 0: block 248: padding at end of block bitmap is not set [ 78.818172][ T7705] loop0: lost filesystem error report for type 5 error -117 [ 78.820098][ T7705] Quota error (device loop0): write_blk: dquota write failed [ 78.820136][ T7705] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 78.820159][ T7705] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.789: Failed to acquire dquot type 1 [ 78.820172][ T7705] loop0: lost filesystem error report for type 5 error -28 [ 78.821605][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 78.821622][ C0] EXT4-fs (loop0): last error at time 78: ext4_acquire_dquot:7069 [ 78.829426][ T7705] EXT4-fs (loop0): 1 truncate cleaned up [ 78.830010][ T7705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 78.854471][ T869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.854534][ T869] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 78.854560][ T869] usb 1-1: no configurations [ 78.854565][ T869] usb 1-1: can't read configurations, error -22 [ 79.053235][ T7732] loop3: detected capacity change from 0 to 512 [ 79.060024][ T7732] EXT4-fs (loop3): Test dummy encryption mode enabled [ 79.060042][ T7732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.060784][ T7732] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.797: bad orphan inode 131072 [ 79.060803][ T7732] loop3: lost filesystem error report for type 5 error -117 [ 79.061433][ T7732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.077092][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.098659][ T7737] FAULT_INJECTION: forcing a failure. [ 79.098659][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 79.098685][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.6.799 Tainted: G L syzkaller #0 PREEMPT [ 79.098698][ T7737] Tainted: [L]=SOFTLOCKUP [ 79.098701][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.098713][ T7737] Call trace: [ 79.098716][ T7737] show_stack+0x2c/0x3c (C) [ 79.098733][ T7737] __dump_stack+0x30/0x40 [ 79.098743][ T7737] dump_stack_lvl+0xd8/0x12c [ 79.098753][ T7737] dump_stack+0x1c/0x28 [ 79.098762][ T7737] should_fail_ex+0x418/0x58c [ 79.098773][ T7737] should_failslab+0xc4/0x120 [ 79.098784][ T7737] kmem_cache_alloc_noprof+0x94/0x5d4 [ 79.098792][ T7737] skb_clone+0x1ac/0x320 [ 79.098802][ T7737] __netlink_deliver_tap+0x364/0x6f4 [ 79.098812][ T7737] netlink_deliver_tap+0x1d8/0x1dc [ 79.098820][ T7737] netlink_unicast+0x5dc/0x7f8 [ 79.098828][ T7737] netlink_sendmsg+0x648/0x948 [ 79.098837][ T7737] __sock_sendmsg+0xc8/0x17c [ 79.098845][ T7737] ____sys_sendmsg+0x3d0/0x6c8 [ 79.098854][ T7737] ___sys_sendmsg+0x198/0x224 [ 79.098863][ T7737] __sys_sendmsg+0x158/0x204 [ 79.098872][ T7737] __arm64_sys_sendmsg+0x88/0x9c [ 79.098881][ T7737] invoke_syscall+0x98/0x244 [ 79.098890][ T7737] el0_svc_common+0xec/0x23c [ 79.098900][ T7737] do_el0_svc+0x4c/0x5c [ 79.098909][ T7737] el0_svc+0x60/0x1d8 [ 79.098919][ T7737] el0t_64_sync_handler+0x44/0x104 [ 79.098929][ T7737] el0t_64_sync+0x198/0x19c [ 79.500533][ T7753] se_dev->se_dev_ptr already set for storage object [ 79.530605][ T7758] loop5: detected capacity change from 0 to 128 [ 79.535010][ T7758] vfat: Unknown parameter 'nnonumtail' [ 79.582449][ T7705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 79.707561][ T7764] FAULT_INJECTION: forcing a failure. [ 79.707561][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 79.707582][ T7764] CPU: 0 UID: 0 PID: 7764 Comm: syz.0.806 Tainted: G L syzkaller #0 PREEMPT [ 79.707598][ T7764] Tainted: [L]=SOFTLOCKUP [ 79.707602][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.707618][ T7764] Call trace: [ 79.707622][ T7764] show_stack+0x2c/0x3c (C) [ 79.707641][ T7764] __dump_stack+0x30/0x40 [ 79.707655][ T7764] dump_stack_lvl+0xd8/0x12c [ 79.707673][ T7764] dump_stack+0x1c/0x28 [ 79.707685][ T7764] should_fail_ex+0x418/0x58c [ 79.707699][ T7764] should_failslab+0xc4/0x120 [ 79.707712][ T7764] kmem_cache_alloc_noprof+0x94/0x5d4 [ 79.707722][ T7764] do_getname+0x48/0x234 [ 79.707732][ T7764] __getname_maybe_null+0xe8/0x1b0 [ 79.707743][ T7764] __arm64_sys_statx+0xf4/0x174 [ 79.707754][ T7764] invoke_syscall+0x98/0x244 [ 79.707767][ T7764] el0_svc_common+0xec/0x23c [ 79.707779][ T7764] do_el0_svc+0x4c/0x5c [ 79.707791][ T7764] el0_svc+0x60/0x1d8 [ 79.707806][ T7764] el0t_64_sync_handler+0x44/0x104 [ 79.707818][ T7764] el0t_64_sync+0x198/0x19c [ 79.736770][ T7766] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 79.737793][ T7766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.807'. [ 79.739314][ T5477] IPVS: starting estimator thread 0... [ 79.746507][ T7766] loop0: detected capacity change from 0 to 512 [ 79.746552][ T7766] FAULT_INJECTION: forcing a failure. [ 79.746552][ T7766] name failslab, interval 1, probability 0, space 0, times 0 [ 79.746565][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.0.807 Tainted: G L syzkaller #0 PREEMPT [ 79.746577][ T7766] Tainted: [L]=SOFTLOCKUP [ 79.746581][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.746593][ T7766] Call trace: [ 79.746596][ T7766] show_stack+0x2c/0x3c (C) [ 79.746615][ T7766] __dump_stack+0x30/0x40 [ 79.746628][ T7766] dump_stack_lvl+0xd8/0x12c [ 79.746640][ T7766] dump_stack+0x1c/0x28 [ 79.746651][ T7766] should_fail_ex+0x418/0x58c [ 79.746664][ T7766] should_failslab+0xc4/0x120 [ 79.746687][ T7766] __kmalloc_noprof+0x108/0x6c8 [ 79.746697][ T7766] kobject_get_path+0xbc/0x2a4 [ 79.746710][ T7766] kobject_uevent_env+0x264/0x944 [ 79.746718][ T7766] kobject_uevent+0x2c/0x3c [ 79.746727][ T7766] loop_configure+0x908/0xbb8 [ 79.746737][ T7766] lo_ioctl+0x218/0x1740 [ 79.746745][ T7766] blkdev_ioctl+0x574/0x904 [ 79.746758][ T7766] __arm64_sys_ioctl+0x154/0x1cc [ 79.746771][ T7766] invoke_syscall+0x98/0x244 [ 79.746783][ T7766] el0_svc_common+0x19c/0x23c [ 79.746795][ T7766] do_el0_svc+0x4c/0x5c [ 79.746806][ T7766] el0_svc+0x60/0x1d8 [ 79.746818][ T7766] el0t_64_sync_handler+0x44/0x104 [ 79.746832][ T7766] el0t_64_sync+0x198/0x19c [ 79.748233][ T7766] EXT4-fs: Ignoring removed oldalloc option [ 79.749073][ T7766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.753218][ T7766] EXT4-fs (loop0): 1 truncate cleaned up [ 79.753702][ T7766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.812777][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.832382][ T7767] IPVS: using max 60 ests per chain, 144000 per kthread [ 79.871377][ T7772] FAT-fs (loop6): bogus number of reserved sectors [ 79.871404][ T7772] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 79.871417][ T7772] FAT-fs (loop6): Can't find a valid FAT filesystem [ 79.876157][ T7772] tipc: Enabling of bearer rejected, failed to enable media [ 79.904419][ T7776] FAULT_INJECTION: forcing a failure. [ 79.904419][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 79.904436][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.0.811 Tainted: G L syzkaller #0 PREEMPT [ 79.904448][ T7776] Tainted: [L]=SOFTLOCKUP [ 79.904451][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.904462][ T7776] Call trace: [ 79.904465][ T7776] show_stack+0x2c/0x3c (C) [ 79.904481][ T7776] __dump_stack+0x30/0x40 [ 79.904492][ T7776] dump_stack_lvl+0xd8/0x12c [ 79.904502][ T7776] dump_stack+0x1c/0x28 [ 79.904511][ T7776] should_fail_ex+0x418/0x58c [ 79.904523][ T7776] should_failslab+0xc4/0x120 [ 79.904535][ T7776] __kmalloc_noprof+0x108/0x6c8 [ 79.904542][ T7776] sk_prot_alloc+0xc4/0x1e8 [ 79.904550][ T7776] sk_alloc+0x44/0x320 [ 79.904557][ T7776] bpf_prog_test_run_skb+0x314/0x1ed0 [ 79.904565][ T7776] bpf_prog_test_run+0x1e0/0x250 [ 79.904574][ T7776] __sys_bpf+0x6bc/0x82c [ 79.904581][ T7776] __arm64_sys_bpf+0xd0/0xec [ 79.904589][ T7776] invoke_syscall+0x98/0x244 [ 79.904599][ T7776] el0_svc_common+0xec/0x23c [ 79.904608][ T7776] do_el0_svc+0x4c/0x5c [ 79.904617][ T7776] el0_svc+0x60/0x1d8 [ 79.904627][ T7776] el0t_64_sync_handler+0x44/0x104 [ 79.904636][ T7776] el0t_64_sync+0x198/0x19c [ 79.962346][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.042902][ T7785] tipc: Started in network mode [ 80.043862][ T7785] tipc: Node identity ac14140f, cluster identity 4711 [ 80.052225][ T7785] tipc: New replicast peer: 255.255.255.255 [ 80.052492][ T7785] tipc: Enabled bearer , priority 10 [ 80.057270][ T7785] netlink: 105 bytes leftover after parsing attributes in process `syz.3.814'. [ 80.171923][ T4718] Bluetooth: hci4: command 0x0405 tx timeout [ 80.342624][ T7791] netlink: 'syz.5.816': attribute type 1 has an invalid length. [ 80.787326][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.824'. [ 80.918985][ T7824] IPv6: NLM_F_REPLACE set, but no existing node found! [ 81.202646][ T4790] tipc: Node number set to 2886997007 [ 81.216956][ T7827] ubi0: attaching mtd0 [ 81.218953][ T7827] ubi0: scanning is finished [ 81.218958][ T7827] ubi0: empty MTD device detected [ 81.346420][ T7827] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 81.346433][ T7827] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 81.346440][ T7827] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 81.346446][ T7827] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 81.346453][ T7827] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 81.346459][ T7827] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 81.346466][ T7827] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3546572146 [ 81.346474][ T7827] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 81.346751][ T7829] ubi0: background thread "ubi_bgt0d" started, PID 7829 [ 81.455008][ T7834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.461953][ T7834] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 97 vs 96 free clusters [ 81.464590][ T7834] Quota error (device loop0): write_blk: dquota write failed [ 81.464632][ T7834] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 81.464649][ T7834] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.830: Failed to acquire dquot type 1 [ 81.483339][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.515652][ T7847] FAULT_INJECTION: forcing a failure. [ 81.515652][ T7847] name failslab, interval 1, probability 0, space 0, times 0 [ 81.515675][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.5.834 Tainted: G L syzkaller #0 PREEMPT [ 81.515691][ T7847] Tainted: [L]=SOFTLOCKUP [ 81.515696][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.515708][ T7847] Call trace: [ 81.515711][ T7847] show_stack+0x2c/0x3c (C) [ 81.515728][ T7847] __dump_stack+0x30/0x40 [ 81.515740][ T7847] dump_stack_lvl+0xd8/0x12c [ 81.515749][ T7847] dump_stack+0x1c/0x28 [ 81.515758][ T7847] should_fail_ex+0x418/0x58c [ 81.515770][ T7847] should_failslab+0xc4/0x120 [ 81.515781][ T7847] kmem_cache_alloc_noprof+0x94/0x5d4 [ 81.515789][ T7847] skb_clone+0x1ac/0x320 [ 81.515799][ T7847] __netlink_deliver_tap+0x364/0x6f4 [ 81.515809][ T7847] netlink_deliver_tap+0x1d8/0x1dc [ 81.515818][ T7847] netlink_unicast+0x5dc/0x7f8 [ 81.515826][ T7847] netlink_sendmsg+0x648/0x948 [ 81.515834][ T7847] __sock_sendmsg+0xc8/0x17c [ 81.515843][ T7847] ____sys_sendmsg+0x3d0/0x6c8 [ 81.515851][ T7847] ___sys_sendmsg+0x198/0x224 [ 81.515860][ T7847] __sys_sendmsg+0x158/0x204 [ 81.515869][ T7847] __arm64_sys_sendmsg+0x88/0x9c [ 81.515877][ T7847] invoke_syscall+0x98/0x244 [ 81.515888][ T7847] el0_svc_common+0xec/0x23c [ 81.515897][ T7847] do_el0_svc+0x4c/0x5c [ 81.515906][ T7847] el0_svc+0x60/0x1d8 [ 81.515917][ T7847] el0t_64_sync_handler+0x44/0x104 [ 81.515926][ T7847] el0t_64_sync+0x198/0x19c [ 81.515940][ T7847] netlink: 236 bytes leftover after parsing attributes in process `syz.5.834'. [ 81.515949][ T7847] netlink: 236 bytes leftover after parsing attributes in process `syz.5.834'. [ 81.528475][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.533119][ T7843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.574812][ T7853] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.605243][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.636858][ T7862] vfat: Unknown parameter 'nnonumtail' [ 81.676233][ T7871] netlink: 236 bytes leftover after parsing attributes in process `syz.0.841'. [ 81.676246][ T7871] netlink: 236 bytes leftover after parsing attributes in process `syz.0.841'. [ 81.812092][ T7876] netlink: 236 bytes leftover after parsing attributes in process `syz.6.843'. [ 81.812107][ T7876] netlink: 236 bytes leftover after parsing attributes in process `syz.6.843'. [ 81.898102][ T7884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.904747][ T7884] EXT4-fs (loop6): 1 truncate cleaned up [ 81.905203][ T7884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.956593][ T7344] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 81.958687][ T7344] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 81.959634][ T7344] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 82.115541][ T4400] net_ratelimit: 315 callbacks suppressed [ 82.306794][ T7904] netlink: 236 bytes leftover after parsing attributes in process `syz.0.856'. [ 82.306807][ T7904] netlink: 236 bytes leftover after parsing attributes in process `syz.0.856'. [ 82.362185][ T7344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.413109][ T5496] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.434559][ T7915] vfat: Unknown parameter 'nnonumtail' [ 82.478122][ T7919] FAULT_INJECTION: forcing a failure. [ 82.478122][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 82.478137][ T7919] CPU: 1 UID: 0 PID: 7919 Comm: syz.3.863 Tainted: G L syzkaller #0 PREEMPT [ 82.478150][ T7919] Tainted: [L]=SOFTLOCKUP [ 82.478154][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.478167][ T7919] Call trace: [ 82.478170][ T7919] show_stack+0x2c/0x3c (C) [ 82.478189][ T7919] __dump_stack+0x30/0x40 [ 82.478201][ T7919] dump_stack_lvl+0xd8/0x12c [ 82.478212][ T7919] dump_stack+0x1c/0x28 [ 82.478223][ T7919] should_fail_ex+0x418/0x58c [ 82.478237][ T7919] should_failslab+0xc4/0x120 [ 82.478250][ T7919] kmem_cache_alloc_noprof+0x94/0x5d4 [ 82.478259][ T7919] security_inode_alloc+0x40/0x304 [ 82.478268][ T7919] inode_init_always_gfp+0x704/0xb20 [ 82.478280][ T7919] alloc_inode+0x9c/0x198 [ 82.478290][ T7919] new_inode+0x20/0x50 [ 82.478300][ T7919] debugfs_get_inode+0x20/0x7c [ 82.478313][ T7919] debugfs_create_symlink+0x98/0x17c [ 82.478326][ T7919] ref_tracker_dir_symlink+0x21c/0x39c [ 82.478337][ T7919] net_ns_net_debugfs+0x70/0x100 [ 82.478349][ T7919] net_ns_net_init+0x20/0x34 [ 82.478359][ T7919] ops_init+0x2cc/0x528 [ 82.478369][ T7919] setup_net+0x118/0x2fc [ 82.478378][ T7919] copy_net_ns+0x454/0x698 [ 82.478388][ T7919] create_new_namespaces+0x304/0x50c [ 82.478399][ T7919] unshare_nsproxy_namespaces+0x120/0x170 [ 82.478410][ T7919] ksys_unshare+0x438/0x6cc [ 82.478419][ T7919] __arm64_sys_unshare+0x40/0x54 [ 82.478429][ T7919] invoke_syscall+0x98/0x244 [ 82.478441][ T7919] el0_svc_common+0xec/0x23c [ 82.478452][ T7919] do_el0_svc+0x4c/0x5c [ 82.478464][ T7919] el0_svc+0x60/0x1d8 [ 82.478475][ T7919] el0t_64_sync_handler+0x44/0x104 [ 82.478492][ T7919] el0t_64_sync+0x198/0x19c [ 82.480352][ T7919] debugfs: out of free dentries, can not create symlink 'netns-8b-4026532087-refcnt' [ 82.543816][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.544005][ T5496] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.547190][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.550079][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.551536][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.552522][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.619418][ T5496] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.644774][ T7934] 9p: Bad value for 'rfdno' [ 82.698584][ T5496] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.855084][ T7945] netlink: 236 bytes leftover after parsing attributes in process `syz.3.869'. [ 82.996995][ T5496] bridge_slave_1: left allmulticast mode [ 82.997007][ T5496] bridge_slave_1: left promiscuous mode [ 82.997088][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.011350][ T5496] bridge_slave_0: left allmulticast mode [ 83.011360][ T5496] bridge_slave_0: left promiscuous mode [ 83.011425][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.068554][ T7963] set_capacity_and_notify: 7 callbacks suppressed [ 83.068561][ T7963] loop2: detected capacity change from 0 to 512 [ 83.068970][ T7963] EXT4-fs: Ignoring removed i_version option [ 83.083789][ T7963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 83.083826][ T7963] System zones: 1-12 [ 83.083838][ T7963] [ 83.084782][ T7963] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.873: missing EA_INODE flag [ 83.084803][ T7963] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 83.088360][ T7963] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.873: error while reading EA inode 12 err=-117 [ 83.088382][ T7963] loop2: lost filesystem error report for type 5 error -117 [ 83.089642][ T7963] EXT4-fs (loop2): 1 orphan inode deleted [ 83.114043][ T7963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.178412][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.214103][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.225550][ T5496] bond0 (unregistering): Released all slaves [ 83.576827][ T7978] se_dev->se_dev_ptr already set for storage object [ 83.670435][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.671534][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.671687][ T7922] bridge_slave_0: entered allmulticast mode [ 83.672189][ T7922] bridge_slave_0: entered promiscuous mode [ 83.674601][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.674653][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.674786][ T7922] bridge_slave_1: entered allmulticast mode [ 83.675228][ T7922] bridge_slave_1: entered promiscuous mode [ 83.694035][ T4718] Bluetooth: hci1: command tx timeout [ 83.696831][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.701926][ T7992] loop0: detected capacity change from 0 to 128 [ 83.707767][ T7994] netlink: 236 bytes leftover after parsing attributes in process `syz.3.883'. [ 83.715924][ T7992] vfat: Unknown parameter 'nnonumtail' [ 83.754645][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.795780][ T8003] loop3: detected capacity change from 0 to 128 [ 83.806322][ T8003] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.845365][ T7922] team0: Port device team_slave_0 added [ 83.859169][ T7922] team0: Port device team_slave_1 added [ 83.914468][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.944472][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 84.019511][ T8012] loop2: detected capacity change from 0 to 512 [ 84.035679][ T8012] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.046682][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.046689][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.046761][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.056823][ T8012] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.058795][ T8012] EXT4-fs (loop2): mount failed [ 84.066350][ T5496] hsr_slave_0: left promiscuous mode [ 84.066742][ T5496] hsr_slave_1: left promiscuous mode [ 84.067130][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.067139][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.067668][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.067676][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.090805][ T5496] veth1_macvtap: left promiscuous mode [ 84.090831][ T5496] veth0_macvtap: left promiscuous mode [ 84.090879][ T5496] veth1_vlan: left promiscuous mode [ 84.090973][ T5496] veth0_vlan: left promiscuous mode [ 84.223547][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 84.229245][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 84.293123][ T8016] loop0: detected capacity change from 0 to 1024 [ 84.293552][ T8016] EXT4-fs: Invalid want_extra_isize 3 [ 84.301352][ T8016] netlink: 'syz.0.888': attribute type 11 has an invalid length. [ 84.358807][ T8018] loop0: detected capacity change from 0 to 1024 [ 84.359204][ T8018] ext4: Unknown parameter 'appraise' [ 84.432052][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.432059][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.432075][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.572483][ T4711] Bluetooth: hci0: command tx timeout [ 84.737317][ T7922] hsr_slave_0: entered promiscuous mode [ 84.737741][ T7922] hsr_slave_1: entered promiscuous mode [ 84.854762][ T8026] se_dev->se_dev_ptr already set for storage object [ 84.964898][ T30] audit: type=1400 audit(84.950:11): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerd)r<" requested=r pid=8043 comm="syz.5.895" name="file0" dev="tmpfs" ino=578 [ 85.126141][ T8059] loop5: detected capacity change from 0 to 128 [ 85.127013][ T8059] vfat: Unknown parameter 'nnonumtail' [ 85.156685][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 85.157179][ T7922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 85.170161][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.170463][ T7922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 85.198768][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.199114][ T7922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 85.214539][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.214844][ T7922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 85.225602][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.328024][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.368331][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.375091][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.375112][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.392796][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.392816][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.452109][ T8082] netlink: 'syz.3.903': attribute type 7 has an invalid length. [ 85.452123][ T8082] netlink: 'syz.3.903': attribute type 8 has an invalid length. [ 85.703662][ T8123] loop0: detected capacity change from 0 to 1024 [ 85.741339][ T8128] fuse: Unknown parameter 'grouprŠV3ÚZ]‡ü•÷rA*sZ`\GË1ã8]’uÍØ·ì;E¿/6' [ 85.749323][ T8128] fuse: Unknown parameter 'úì0x0000000000000007' [ 85.755246][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.786314][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 85.949678][ T7922] veth0_vlan: entered promiscuous mode [ 85.957771][ T7922] veth1_vlan: entered promiscuous mode [ 86.004426][ T7922] veth0_macvtap: entered promiscuous mode [ 86.023072][ T7922] veth1_macvtap: entered promiscuous mode [ 86.040196][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.054793][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.082570][ T5496] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.082755][ T5496] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.082774][ T5496] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.082790][ T5496] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.119923][ T5496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.119933][ T5496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.148701][ T5497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.148709][ T5497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.219989][ T8172] loop7: detected capacity change from 0 to 512 [ 86.235537][ T8172] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.861: Attempting to read directory block (0) that is past i_size (256) [ 86.235556][ T8172] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 86.240110][ T8172] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 86.240575][ T8172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.268437][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 86.275076][ T8172] EXT4-fs error (device loop7): ext4_xattr_set_entry:1676: inode #2: comm syz.7.861: corrupted xattr entries [ 86.374536][ T7922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.409763][ T8188] se_dev->se_dev_ptr already set for storage object [ 86.428619][ T8190] tipc: Can't bind to reserved service type 0 [ 86.431242][ T8190] loop7: detected capacity change from 0 to 256 [ 86.652872][ T4711] Bluetooth: hci0: command tx timeout [ 86.864152][ T8205] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.884271][ T7922] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.924349][ T8208] __nla_validate_parse: 5 callbacks suppressed [ 86.924359][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.927'. [ 87.007348][ T8220] se_dev->se_dev_ptr already set for storage object [ 87.129218][ T8231] EXT4-fs: Ignoring removed nobh option [ 87.131606][ C1] net_ratelimit: 333 callbacks suppressed [ 87.138060][ T8231] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 87.138088][ T8231] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 87.138196][ T8231] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.936: inode has both inline data and extents flags [ 87.138213][ T8231] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.138377][ T8231] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.936: couldn't read orphan inode 13 (err -117) [ 87.138390][ T8231] loop3: lost filesystem error report for type 5 error -117 [ 87.139034][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.183957][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.284285][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.284579][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.368805][ T8245] netlink: 'syz.3.941': attribute type 26 has an invalid length. [ 87.496082][ T8249] se_dev->se_dev_ptr already set for storage object [ 87.562844][ T8251] FAULT_INJECTION: forcing a failure. [ 87.562844][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 87.562867][ T8251] CPU: 0 UID: 0 PID: 8251 Comm: syz.5.944 Tainted: G L syzkaller #0 PREEMPT [ 87.562880][ T8251] Tainted: [L]=SOFTLOCKUP [ 87.562884][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.562897][ T8251] Call trace: [ 87.562900][ T8251] show_stack+0x2c/0x3c (C) [ 87.562919][ T8251] __dump_stack+0x30/0x40 [ 87.562929][ T8251] dump_stack_lvl+0xd8/0x12c [ 87.562939][ T8251] dump_stack+0x1c/0x28 [ 87.562948][ T8251] should_fail_ex+0x418/0x58c [ 87.562959][ T8251] should_failslab+0xc4/0x120 [ 87.562970][ T8251] kmem_cache_alloc_noprof+0x94/0x5d4 [ 87.562977][ T8251] skb_clone+0x1ac/0x320 [ 87.562988][ T8251] __netlink_deliver_tap+0x364/0x6f4 [ 87.562998][ T8251] netlink_deliver_tap+0x1d8/0x1dc [ 87.563007][ T8251] netlink_unicast+0x5dc/0x7f8 [ 87.563015][ T8251] netlink_sendmsg+0x648/0x948 [ 87.563024][ T8251] __sock_sendmsg+0xc8/0x17c [ 87.563032][ T8251] ____sys_sendmsg+0x3d0/0x6c8 [ 87.563041][ T8251] ___sys_sendmsg+0x198/0x224 [ 87.563050][ T8251] __sys_sendmsg+0x158/0x204 [ 87.563059][ T8251] __arm64_sys_sendmsg+0x88/0x9c [ 87.563067][ T8251] invoke_syscall+0x98/0x244 [ 87.563078][ T8251] el0_svc_common+0xec/0x23c [ 87.563087][ T8251] do_el0_svc+0x4c/0x5c [ 87.563097][ T8251] el0_svc+0x60/0x1d8 [ 87.563107][ T8251] el0t_64_sync_handler+0x44/0x104 [ 87.563116][ T8251] el0t_64_sync+0x198/0x19c [ 88.052965][ T8277] FAULT_INJECTION: forcing a failure. [ 88.052965][ T8277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.052985][ T8277] CPU: 0 UID: 0 PID: 8277 Comm: syz.7.953 Tainted: G L syzkaller #0 PREEMPT [ 88.053000][ T8277] Tainted: [L]=SOFTLOCKUP [ 88.053004][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.053018][ T8277] Call trace: [ 88.053021][ T8277] show_stack+0x2c/0x3c (C) [ 88.053040][ T8277] __dump_stack+0x30/0x40 [ 88.053050][ T8277] dump_stack_lvl+0xd8/0x12c [ 88.053060][ T8277] dump_stack+0x1c/0x28 [ 88.053069][ T8277] should_fail_ex+0x418/0x58c [ 88.053081][ T8277] should_fail+0x14/0x24 [ 88.053090][ T8277] should_fail_usercopy+0x20/0x30 [ 88.053100][ T8277] _inline_copy_from_user+0x3c/0x174 [ 88.053108][ T8277] kstrtouint_from_user+0xcc/0x174 [ 88.053115][ T8277] proc_fail_nth_write+0x9c/0x234 [ 88.053124][ T8277] vfs_write+0x2a4/0xa0c [ 88.053135][ T8277] ksys_write+0x12c/0x228 [ 88.053144][ T8277] __arm64_sys_write+0x84/0x98 [ 88.053154][ T8277] invoke_syscall+0x98/0x244 [ 88.053164][ T8277] el0_svc_common+0xec/0x23c [ 88.053174][ T8277] do_el0_svc+0x4c/0x5c [ 88.053183][ T8277] el0_svc+0x60/0x1d8 [ 88.053193][ T8277] el0t_64_sync_handler+0x44/0x104 [ 88.053202][ T8277] el0t_64_sync+0x198/0x19c [ 88.146413][ T8289] set_capacity_and_notify: 2 callbacks suppressed [ 88.146423][ T8289] loop7: detected capacity change from 0 to 512 [ 88.146869][ T8289] ext4: Unknown parameter 'defcontext' [ 88.202094][ T4711] block nbd3: Receive control failed (result -32) [ 88.204634][ T8245] block nbd3: shutting down sockets [ 88.248176][ T8303] FAULT_INJECTION: forcing a failure. [ 88.248176][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 88.248196][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.3.958 Tainted: G L syzkaller #0 PREEMPT [ 88.248208][ T8303] Tainted: [L]=SOFTLOCKUP [ 88.248212][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.248224][ T8303] Call trace: [ 88.248227][ T8303] show_stack+0x2c/0x3c (C) [ 88.248246][ T8303] __dump_stack+0x30/0x40 [ 88.248257][ T8303] dump_stack_lvl+0xd8/0x12c [ 88.248267][ T8303] dump_stack+0x1c/0x28 [ 88.248276][ T8303] should_fail_ex+0x418/0x58c [ 88.248287][ T8303] should_failslab+0xc4/0x120 [ 88.248298][ T8303] __kmalloc_cache_noprof+0x94/0x5fc [ 88.248306][ T8303] nfnl_err_add+0x68/0x194 [ 88.248314][ T8303] nfnetlink_rcv+0xb68/0x16ec [ 88.248321][ T8303] netlink_unicast+0x600/0x7f8 [ 88.248331][ T8303] netlink_sendmsg+0x648/0x948 [ 88.248339][ T8303] __sock_sendmsg+0xc8/0x17c [ 88.248348][ T8303] ____sys_sendmsg+0x3d0/0x6c8 [ 88.248356][ T8303] ___sys_sendmsg+0x198/0x224 [ 88.248365][ T8303] __sys_sendmsg+0x158/0x204 [ 88.248374][ T8303] __arm64_sys_sendmsg+0x88/0x9c [ 88.248382][ T8303] invoke_syscall+0x98/0x244 [ 88.248393][ T8303] el0_svc_common+0xec/0x23c [ 88.248402][ T8303] do_el0_svc+0x4c/0x5c [ 88.248411][ T8303] el0_svc+0x60/0x1d8 [ 88.248421][ T8303] el0t_64_sync_handler+0x44/0x104 [ 88.248431][ T8303] el0t_64_sync+0x198/0x19c [ 88.282946][ T8306] se_dev->se_dev_ptr already set for storage object [ 88.315958][ T8309] Could not find key with description: [syz] [ 88.315967][ T8309] process_request_key_err: No key [ 88.315972][ T8309] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 88.315977][ T8309] One or more global auth toks could not properly register; rc = [-2] [ 88.315993][ T8309] Error validating options; rc = [-2] [ 88.319412][ T8310] loop3: detected capacity change from 0 to 1024 [ 88.345607][ T8310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.367474][ T8309] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.960: lblock 0 mapped to illegal pblock 0 (length 6) [ 88.399873][ T8320] random: crng reseeded on system resumption [ 88.410275][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.517795][ T8338] FAULT_INJECTION: forcing a failure. [ 88.517795][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.517812][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.3.966 Tainted: G L syzkaller #0 PREEMPT [ 88.517824][ T8338] Tainted: [L]=SOFTLOCKUP [ 88.517826][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.517837][ T8338] Call trace: [ 88.517840][ T8338] show_stack+0x2c/0x3c (C) [ 88.517857][ T8338] __dump_stack+0x30/0x40 [ 88.517868][ T8338] dump_stack_lvl+0xd8/0x12c [ 88.517878][ T8338] dump_stack+0x1c/0x28 [ 88.517887][ T8338] should_fail_ex+0x418/0x58c [ 88.517902][ T8338] should_fail+0x14/0x24 [ 88.517912][ T8338] should_fail_usercopy+0x20/0x30 [ 88.517922][ T8338] _inline_copy_from_user+0x3c/0x188 [ 88.517935][ T8338] proc_do_submiturb+0x590/0x2660 [ 88.517943][ T8338] proc_submiturb+0x118/0x17c [ 88.517951][ T8338] usbdev_ioctl+0xcf0/0x1990 [ 88.517959][ T8338] __arm64_sys_ioctl+0x154/0x1cc [ 88.517970][ T8338] invoke_syscall+0x98/0x244 [ 88.517981][ T8338] el0_svc_common+0xec/0x23c [ 88.517990][ T8338] do_el0_svc+0x4c/0x5c [ 88.518000][ T8338] el0_svc+0x60/0x1d8 [ 88.518010][ T8338] el0t_64_sync_handler+0x44/0x104 [ 88.518019][ T8338] el0t_64_sync+0x198/0x19c [ 88.575341][ T8347] FAULT_INJECTION: forcing a failure. [ 88.575341][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 88.575359][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.3.968 Tainted: G L syzkaller #0 PREEMPT [ 88.575370][ T8347] Tainted: [L]=SOFTLOCKUP [ 88.575373][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.575384][ T8347] Call trace: [ 88.575387][ T8347] show_stack+0x2c/0x3c (C) [ 88.575401][ T8347] __dump_stack+0x30/0x40 [ 88.575411][ T8347] dump_stack_lvl+0xd8/0x12c [ 88.575421][ T8347] dump_stack+0x1c/0x28 [ 88.575430][ T8347] should_fail_ex+0x418/0x58c [ 88.575441][ T8347] should_failslab+0xc4/0x120 [ 88.575451][ T8347] __kmalloc_noprof+0x108/0x6c8 [ 88.575459][ T8347] sk_prot_alloc+0xc4/0x1e8 [ 88.575466][ T8347] sk_alloc+0x44/0x320 [ 88.575473][ T8347] bpf_prog_test_run_skb+0x314/0x1ed0 [ 88.575481][ T8347] bpf_prog_test_run+0x1e0/0x250 [ 88.575489][ T8347] __sys_bpf+0x6bc/0x82c [ 88.575497][ T8347] __arm64_sys_bpf+0xd0/0xec [ 88.575505][ T8347] invoke_syscall+0x98/0x244 [ 88.575515][ T8347] el0_svc_common+0xec/0x23c [ 88.575524][ T8347] do_el0_svc+0x4c/0x5c [ 88.575533][ T8347] el0_svc+0x60/0x1d8 [ 88.575542][ T8347] el0t_64_sync_handler+0x44/0x104 [ 88.575552][ T8347] el0t_64_sync+0x198/0x19c [ 88.584128][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 88.584161][ T8343] FAULT_INJECTION: forcing a failure. [ 88.584161][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 88.584174][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.2.967 Tainted: G L syzkaller #0 PREEMPT [ 88.584186][ T8343] Tainted: [L]=SOFTLOCKUP [ 88.584190][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.584202][ T8343] Call trace: [ 88.584205][ T8343] show_stack+0x2c/0x3c (C) [ 88.584220][ T8343] __dump_stack+0x30/0x40 [ 88.584232][ T8343] dump_stack_lvl+0xd8/0x12c [ 88.584247][ T8343] dump_stack+0x1c/0x28 [ 88.584258][ T8343] should_fail_ex+0x418/0x58c [ 88.584271][ T8343] should_failslab+0xc4/0x120 [ 88.584283][ T8343] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 88.584293][ T8343] kstrdup+0x50/0x104 [ 88.584301][ T8343] __request_module+0x2f0/0x670 [ 88.584311][ T8343] tcf_proto_lookup_ops+0x5c/0x11c [ 88.584321][ T8343] tcf_proto_create+0x90/0x2e8 [ 88.584330][ T8343] tc_new_tfilter+0xf34/0x1320 [ 88.584339][ T8343] rtnetlink_rcv_msg+0x66c/0x9bc [ 88.584349][ T8343] netlink_rcv_skb+0x238/0x414 [ 88.584360][ T8343] rtnetlink_rcv+0x28/0x38 [ 88.584368][ T8343] netlink_unicast+0x600/0x7f8 [ 88.584378][ T8343] netlink_sendmsg+0x648/0x948 [ 88.584388][ T8343] __sock_sendmsg+0xc8/0x17c [ 88.584398][ T8343] ____sys_sendmsg+0x3d0/0x6c8 [ 88.584408][ T8343] ___sys_sendmsg+0x198/0x224 [ 88.584419][ T8343] __sys_sendmsg+0x158/0x204 [ 88.584429][ T8343] __arm64_sys_sendmsg+0x88/0x9c [ 88.584440][ T8343] invoke_syscall+0x98/0x244 [ 88.584452][ T8343] el0_svc_common+0xec/0x23c [ 88.584463][ T8343] do_el0_svc+0x4c/0x5c [ 88.584475][ T8343] el0_svc+0x60/0x1d8 [ 88.584486][ T8343] el0t_64_sync_handler+0x44/0x104 [ 88.584497][ T8343] el0t_64_sync+0x198/0x19c [ 88.731660][ T4711] Bluetooth: hci0: command tx timeout [ 88.750869][ T8363] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.853798][ T8380] Bluetooth: MGMT ver 1.23 [ 89.203142][ T5497] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) ** 40555 printk messages dropped ** [ 104.476789][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.478897][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.480006][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.482334][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.484060][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.732867][ T83] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.884697][ T9096] set_capacity_and_notify: 4 callbacks suppressed [ 104.884705][ T9096] loop3: detected capacity change from 0 to 512 [ 104.886018][ T9102] loop0: detected capacity change from 0 to 512 [ 104.923817][ T9096] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1141: corrupted in-inode xattr: invalid ea_ino [ 104.923839][ T9096] fserror_report: 2 callbacks suppressed [ 104.923846][ T9096] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.923979][ T9096] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1141: couldn't read orphan inode 15 (err -117) [ 104.923992][ T9096] loop3: lost filesystem error report for type 5 error -117 [ 104.924767][ T9096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.019826][ T5481] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.025585][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.130098][ T9109] se_dev->se_dev_ptr already set for storage object [ 105.261032][ T5481] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.387757][ T9121] ------------[ cut here ]------------ [ 105.387761][ T9121] field width 1073758208 out of range [ 105.388027][ T9121] WARNING: lib/vsprintf.c:2654 at vsnprintf+0xb9c/0xd10, CPU#0: syz.3.1149/9121 [ 105.425163][ T9121] Modules linked in: [ 105.425882][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.3.1149 Tainted: G L syzkaller #0 PREEMPT [ 105.427761][ T9121] Tainted: [L]=SOFTLOCKUP [ 105.428517][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.430295][ T9121] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 105.431655][ T9121] pc : vsnprintf+0xb9c/0xd10 [ 105.432468][ T9121] lr : vsnprintf+0xb9c/0xd10 [ 105.433286][ T9121] sp : ffff800097a66b10 [ 105.434047][ T9121] x29: ffff800097a66b60 x28: 00000000007fffff x27: ffff8000873e69e2 [ 105.435548][ T9121] x26: 0000000040004000 x25: ffff800097a66bd8 x24: 0000000000000402 [ 105.436959][ T9121] x23: ffff800097a66f1d x22: ffff800087acdf80 x21: ffff800097a66bf0 [ 105.438400][ T9121] x20: ffff800097a66ecb x19: dfff800000000000 x18: 0000000000000000 [ 105.439899][ T9121] x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200000c0 [ 105.441386][ T9121] x14: 0000000000031f27 x13: 0000000000000001 x12: 0000000000000003 [ 105.442881][ T9121] x11: 0000000000000000 x10: 0000000000080000 x9 : 4e40dd708af69000 [ 105.444324][ T9121] x8 : 4e40dd708af69000 x7 : ffff800080483190 x6 : 0000000000000000 [ 105.445875][ T9121] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f3e60 [ 105.447362][ T9121] x2 : 0000000100000000 x1 : ffff0000ccd6bb00 x0 : 0000000000000001 [ 105.448887][ T9121] Call trace: [ 105.449495][ T9121] vsnprintf+0xb9c/0xd10 (P) [ 105.450368][ T9121] pointer+0x5e8/0x6b4 [ 105.451125][ T9121] vsnprintf+0x618/0xd10 [ 105.451924][ T9121] vprintk_store+0x344/0xb94 [ 105.452805][ T9121] vprintk_emit+0x1bc/0x514 [ 105.453606][ T9121] dev_vprintk_emit+0x2ec/0x3b4 [ 105.454475][ T9121] dev_printk_emit+0xe0/0x130 [ 105.455332][ T9121] __dynamic_dev_dbg+0x1b4/0x254 [ 105.456272][ T9121] dtv_property_process_get+0x26bc/0x2838 [ 105.457317][ T9121] dvb_frontend_handle_ioctl+0x1644/0x2424 [ 105.458364][ T9121] dvb_frontend_do_ioctl+0x124/0x278 [ 105.459325][ T9121] dvb_usercopy+0x2a4/0x4d4 [ 105.460169][ T9121] dvb_frontend_ioctl+0x68/0x8c [ 105.461080][ T9121] __arm64_sys_ioctl+0x154/0x1cc [ 105.461998][ T9121] invoke_syscall+0x98/0x244 [ 105.462855][ T9121] el0_svc_common+0xec/0x23c [ 105.463715][ T9121] do_el0_svc+0x4c/0x5c [ 105.464481][ T9121] el0_svc+0x60/0x1d8 [ 105.465253][ T9121] el0t_64_sync_handler+0x44/0x104 [ 105.466182][ T9121] el0t_64_sync+0x198/0x19c [ 105.467047][ T9121] irq event stamp: 326 [ 105.467835][ T9121] hardirqs last enabled at (325): [] vprintk_store+0x924/0xb94 [ 105.469590][ T9121] hardirqs last disabled at (326): [] vprintk_store+0x13c/0xb94 [ 105.471303][ T9121] softirqs last enabled at (288): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 105.473213][ T9121] softirqs last disabled at (286): [] fpsimd_restore_current_state+0x44/0x9c8 [ 105.475205][ T9121] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)