last executing test programs: 1m5.332875323s ago: executing program 1 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 1m5.166578711s ago: executing program 1 (id=147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x20044084, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x9, 0x1, "ae"}, 0x9) 1m5.093853234s ago: executing program 1 (id=151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1m5.026454017s ago: executing program 1 (id=152): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file2\x00', 0x3000000, &(0x7f0000000180)={[{@block={'block', 0x3d, 0x800}}, {@session={'session', 0x3d, 0x57}}, {@cruft}, {@unhide}, {@dmode={'dmode', 0x3d, 0x4}}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@uid_eq}]}, 0x2, 0x401, &(0x7f0000000840)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m4.914567353s ago: executing program 1 (id=155): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1m4.434537935s ago: executing program 1 (id=159): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000800000040"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e9e, 0x40a00, 0x1000002, 0x93, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb096, 0x8000, 0x3, 0x208, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x11, 0xffffffff}}], 0x1, 0x0, 0x0) 1m4.434245835s ago: executing program 32 (id=159): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000800000040"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e9e, 0x40a00, 0x1000002, 0x93, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb096, 0x8000, 0x3, 0x208, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x11, 0xffffffff}}], 0x1, 0x0, 0x0) 51.127635912s ago: executing program 5 (id=297): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_io_uring_setup(0x45, &(0x7f0000000180)={0x0, 0x22, 0x440, 0x1, 0x89}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) 51.067587525s ago: executing program 5 (id=298): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x800, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xa}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f0000000140)={0x0, {0x0, 0x0, @vsb}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0401041d000400"], 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04300304c900cc2c8fd74cefe3a4808882f244ffba6da800"], 0x6) 51.020464327s ago: executing program 5 (id=299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 50.941524371s ago: executing program 5 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x1214c91, &(0x7f0000000f00)=ANY=[], 0xfe, 0x879, &(0x7f0000001880)="$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") 50.711719641s ago: executing program 5 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 49.666616151s ago: executing program 5 (id=333): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x10, &(0x7f0000000080), 0x1, 0x4e8, &(0x7f00000005c0)="$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") syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=ANY=[@ANYBLOB], 0x38}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1048b, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00') 49.621767783s ago: executing program 33 (id=333): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x10, &(0x7f0000000080), 0x1, 0x4e8, &(0x7f00000005c0)="$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") syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=ANY=[@ANYBLOB], 0x38}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1048b, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00') 16.218492806s ago: executing program 6 (id=768): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x782810a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0x80800000009, 0x0, 0x7, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x120302a, 0x0) syz_fuse_handle_req(r1, &(0x7f0000007b40)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a1b5aa36019fc6cf2dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa90220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1cb93a7a144e7a8a704ce1af0657f950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88a0dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9497b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd53eecc58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.076825793s ago: executing program 6 (id=774): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x1018, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 16.010251156s ago: executing program 6 (id=777): recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(r0, 0x0, 0x24004811) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000540)=0x4) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000340)={0x2b, 0x3}) 15.794112866s ago: executing program 6 (id=780): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, 0x0, 0x0) 15.71919645s ago: executing program 6 (id=783): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) 15.590654066s ago: executing program 6 (id=784): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="0500", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000000c0)=""/30, &(0x7f0000000080)=0x1e) 2.386659038s ago: executing program 0 (id=966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x9, 0x4) 2.372975659s ago: executing program 0 (id=968): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0xe, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.405610414s ago: executing program 4 (id=989): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="4800000015", 0x5}], 0x1}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000009c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x8, 0x100, @void}}}}}}}, 0x0) 1.389194205s ago: executing program 3 (id=990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r0, 0xffffffffffffffff, 0x0) 1.311775319s ago: executing program 4 (id=991): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x13f}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed61", 0x17}], 0x3) write(r0, &(0x7f0000001e00)="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", 0x4a5) 1.239303592s ago: executing program 2 (id=993): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) sendfile(r2, r3, 0x0, 0x8) 1.238156083s ago: executing program 0 (id=994): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x200000c4, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1536, &(0x7f0000002bc0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.215286943s ago: executing program 2 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000ad04976a0000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.180855175s ago: executing program 3 (id=996): dup(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 1.100835249s ago: executing program 2 (id=997): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x5a) 1.038635052s ago: executing program 2 (id=998): socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x4c23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.038314882s ago: executing program 2 (id=999): syz_usb_connect$uac2(0x5, 0x7b, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) shmctl$IPC_INFO(0x0, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xd7c6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) 496.403307ms ago: executing program 34 (id=784): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="0500", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000000c0)=""/30, &(0x7f0000000080)=0x1e) 482.238978ms ago: executing program 2 (id=1001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f00000000c0)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)="df", 0x1}], 0x1}}], 0x1, 0x4008005) 461.145569ms ago: executing program 4 (id=1002): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r3, 0x0, 0xe3aa6ea) 349.715404ms ago: executing program 0 (id=1003): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 274.612728ms ago: executing program 3 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080004000600000000000000140000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000000) 249.346159ms ago: executing program 3 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 219.07013ms ago: executing program 0 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001940)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 218.15835ms ago: executing program 3 (id=1007): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, @TCA_FLOWER_KEY_SCTP_DST_MASK, @TCA_FLOWER_KEY_IP_TTL_MASK={0x0, 0x4c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK, @TCA_FLOWER_KEY_ARP_THA={0x0, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_FLOWER_KEY_CT_ZONE={0x0, 0x5d, 0x4}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0x7f}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x0, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xf1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 154.723553ms ago: executing program 4 (id=1008): openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0x5) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x2, 0x54a, &(0x7f00000005c0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x808008, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 82.044877ms ago: executing program 0 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x7}, {0xfff1, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x5}, {0x4}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x8, 0x0, 0xfc}]}}]}}]}, 0x58}}, 0x48000) 40.875469ms ago: executing program 4 (id=1010): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='10', 0x2) 23.95702ms ago: executing program 3 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xfffffffffffffef8, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 4 (id=1012): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r3) kernel console output (not intermixed with test programs): added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.662903][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.665921][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.667382][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.669394][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.671083][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.677031][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.680738][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.683217][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.685044][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.696049][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.698059][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.699808][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.703481][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.705300][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.709311][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.712088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.714023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.720411][ T4342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.723689][ T4342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.737133][ T4342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.738958][ T4342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.166998][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.168399][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.174836][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.190219][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.193450][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.196510][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.230608][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 34.332452][ T4341] Bluetooth: hci1: command 0x041b tx timeout [ 34.333801][ T4341] Bluetooth: hci3: command 0x041b tx timeout [ 34.342459][ T4341] Bluetooth: hci2: command 0x041b tx timeout [ 34.342687][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 34.413515][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 34.501311][ T4429] binder: 4428:4429 tried to acquire reference to desc 0, got 1 instead [ 34.506907][ T4429] binder: 4428:4429 got transaction with invalid parent offset or type [ 34.508658][ T4429] binder: 4428:4429 transaction async to 4428:0 failed 5/29201/-22, size 88-24 line 3456 [ 34.511600][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.149080][ T4431] Set syz1 is full, maxelem 65536 reached [ 36.412847][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 36.413993][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 36.415013][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 36.415978][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 36.492425][ T4341] Bluetooth: hci4: command 0x040f tx timeout [ 36.600476][ T4496] binder: 4495:4496 tried to acquire reference to desc 0, got 1 instead [ 36.617862][ T4496] binder: cannot allocate buffer [ 36.617883][ T4496] binder: 4495:4496 transaction call to 4495:0 failed 10/29201/-22, size 0-24 line 3247 [ 36.625746][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.636443][ T4500] loop1: detected capacity change from 0 to 512 [ 36.638304][ T4500] EXT4-fs: Ignoring removed nobh option [ 36.663103][ T4500] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 36.664700][ T4500] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 36.666583][ T4500] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #13: comm syz.1.28: inode has both inline data and extents flags [ 36.669494][ T4500] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.28: couldn't read orphan inode 13 (err -117) [ 36.677523][ T4500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.722883][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 36.776901][ T4509] block device autoloading is deprecated and will be removed. [ 36.787470][ T4511] loop2: detected capacity change from 0 to 2048 [ 36.814800][ T4511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.939614][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 37.285295][ T4528] loop2: detected capacity change from 0 to 128 [ 37.299004][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.495882][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 37.573508][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 37.574808][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 37.787748][ T4552] loop0: detected capacity change from 0 to 512 [ 37.811316][ T4552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.813866][ T4552] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.816012][ T4552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.820330][ T4552] EXT4-fs (loop0): 1 truncate cleaned up [ 37.821453][ T4552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.931673][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 37.986607][ T4578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.988060][ T4578] IPv6: NLM_F_CREATE should be set when creating new route [ 38.217628][ T4601] binder: 4600:4601 tried to acquire reference to desc 0, got 1 instead [ 38.219976][ T4601] binder: 4600:4601 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.225004][ T4601] binder: 4601 RLIMIT_NICE not set [ 38.226265][ T4601] binder: undelivered transaction 15, put_user failed [ 38.227765][ T4601] binder: 4600:4601 ioctl c0306201 20000680 returned -14 [ 38.230856][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 38.239703][ T4599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 38.502975][ T4341] Bluetooth: hci1: command 0x0419 tx timeout [ 38.504096][ T4341] Bluetooth: hci3: command 0x0419 tx timeout [ 38.505194][ T4341] Bluetooth: hci2: command 0x0419 tx timeout [ 38.506285][ T4341] Bluetooth: hci0: command 0x0419 tx timeout [ 38.583404][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 38.789579][ T4640] process 'syz.3.63' launched './file1' with NULL argv: empty string added [ 38.847430][ T4643] binder: 4642:4643 tried to acquire reference to desc 0, got 1 instead [ 38.849592][ T4643] binder: 4642:4643 got transaction with out-of-order buffer fixup [ 38.851473][ T4643] binder: 4642:4643 transaction call to 4642:0 failed 20/29201/-22, size 104-24 line 3469 [ 38.856015][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.918483][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 39.019344][ T4661] FAULT_INJECTION: forcing a failure. [ 39.019344][ T4661] name failslab, interval 1, probability 0, space 0, times 1 [ 39.021507][ T4661] CPU: 1 PID: 4661 Comm: syz.3.72 Not tainted syzkaller #0 [ 39.022763][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.024561][ T4661] Call trace: [ 39.025179][ T4661] dump_backtrace+0x1c4/0x1f0 [ 39.026038][ T4661] show_stack+0x2c/0x3c [ 39.026810][ T4661] __dump_stack+0x30/0x40 [ 39.027603][ T4661] dump_stack_lvl+0xf4/0x15c [ 39.028448][ T4661] dump_stack+0x1c/0x5c [ 39.029333][ T4661] should_fail_ex+0x3cc/0x524 [ 39.030311][ T4661] __should_failslab+0xc0/0x11c [ 39.031383][ T4661] should_failslab+0x10/0x28 [ 39.032344][ T4661] kmem_cache_alloc+0x88/0x310 [ 39.033373][ T4661] __kernfs_new_node+0xec/0x5fc [ 39.034275][ T4661] kernfs_new_node+0x120/0x230 [ 39.035163][ T4661] __kernfs_create_file+0x60/0x2e0 [ 39.036129][ T4661] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 39.037126][ T4661] sysfs_create_file_ns+0x10c/0x19c [ 39.038100][ T4661] device_add+0x4b0/0xe4c [ 39.038943][ T4661] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 39.039990][ T4661] wakeup_source_register+0x148/0x21c [ 39.041004][ T4661] ep_create_wakeup_source+0xec/0x230 [ 39.042024][ T4661] ep_insert+0xcb4/0x13ec [ 39.042889][ T4661] do_epoll_ctl+0x6dc/0xc60 [ 39.043723][ T4661] __arm64_sys_epoll_ctl+0x204/0x294 [ 39.044637][ T4661] invoke_syscall+0x98/0x290 [ 39.045439][ T4661] el0_svc_common+0x13c/0x258 [ 39.046281][ T4661] do_el0_svc+0x5c/0x134 [ 39.047053][ T4661] el0_svc+0x58/0x128 [ 39.047772][ T4661] el0t_64_sync_handler+0x84/0xf0 [ 39.048680][ T4661] el0t_64_sync+0x18c/0x190 [ 39.067622][ T4663] loop4: detected capacity change from 0 to 512 [ 39.078072][ T4663] EXT4-fs: Ignoring removed oldalloc option [ 39.114005][ T4663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.73: Parent and EA inode have the same ino 15 [ 39.121070][ T4663] EXT4-fs (loop4): Remounting filesystem read-only [ 39.124249][ T4663] EXT4-fs (loop4): 1 orphan inode deleted [ 39.132181][ T4663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.278399][ T4663] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.73: Invalid inode table block 1504003276 in block_group 0 [ 39.282046][ T4663] EXT4-fs (loop4): Remounting filesystem read-only [ 39.283534][ T4663] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 39.285960][ T4663] EXT4-fs (loop4): Remounting filesystem read-only [ 39.306197][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 39.321332][ T4680] loop1: detected capacity change from 0 to 512 [ 39.330228][ T4680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.332133][ T4680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.342085][ T4680] EXT4-fs (loop1): 1 truncate cleaned up [ 39.345719][ T4680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.433257][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 39.616853][ T4331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 39.686290][ T4716] loop4: detected capacity change from 0 to 8 [ 39.721223][ T4716] SQUASHFS error: zlib decompression failed, data probably corrupt [ 39.722874][ T4716] SQUASHFS error: Failed to read block 0x9b: -5 [ 39.723973][ T4716] SQUASHFS error: Unable to read metadata cache entry [99] [ 39.727060][ T4716] SQUASHFS error: Unable to read inode 0x127 [ 39.888307][ T4737] loop0: detected capacity change from 0 to 1024 [ 39.901915][ T4737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.903261][ T4737] ext4: Unknown parameter 'nouser_xattr' [ 39.908487][ T4737] xt_hashlimit: size too large, truncated to 1048576 [ 39.930024][ T4731] netlink: 'syz.3.98': attribute type 15 has an invalid length. [ 39.931473][ T4731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 39.944343][ T4731] netlink: 'syz.3.98': attribute type 4 has an invalid length. [ 40.717303][ T4775] loop2: detected capacity change from 0 to 40427 [ 40.742591][ T4775] F2FS-fs (loop2): invalid crc value [ 40.749746][ T4775] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.770362][ T4775] F2FS-fs (loop2): Start checkpoint disabled! [ 40.782612][ T4775] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.828105][ T4775] syz.2.116: attempt to access beyond end of device [ 40.828105][ T4775] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 40.851320][ T4775] syz.2.116: attempt to access beyond end of device [ 40.851320][ T4775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.893758][ T4571] kworker/u4:22: attempt to access beyond end of device [ 40.893758][ T4571] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 41.115096][ T4804] Zero length message leads to an empty skb [ 41.294337][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 41.308749][ T4806] loop1: detected capacity change from 0 to 32768 [ 41.325371][ T4806] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.128 (4806) [ 41.350690][ T4806] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 41.354643][ T4806] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 41.356437][ T4806] BTRFS info (device loop1): enabling disk space caching [ 41.357878][ T4806] BTRFS info (device loop1): force clearing of disk cache [ 41.359565][ T4806] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 41.361372][ T4806] BTRFS info (device loop1): use zstd compression, level 3 [ 41.367946][ T4806] BTRFS info (device loop1): disk space caching is enabled [ 41.446925][ T4806] BTRFS info (device loop1): enabling ssd optimizations [ 41.449871][ T4806] BTRFS info (device loop1): rebuilding free space tree [ 41.470413][ T4806] BTRFS info (device loop1): disabling free space tree [ 41.472127][ T4806] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 41.476946][ T4806] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 41.551313][ T4806] FAULT_INJECTION: forcing a failure. [ 41.551313][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 41.558900][ T4806] CPU: 0 PID: 4806 Comm: syz.1.128 Not tainted syzkaller #0 [ 41.560193][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.562052][ T4806] Call trace: [ 41.562651][ T4806] dump_backtrace+0x1c4/0x1f0 [ 41.563564][ T4806] show_stack+0x2c/0x3c [ 41.564368][ T4806] __dump_stack+0x30/0x40 [ 41.565239][ T4806] dump_stack_lvl+0xf4/0x15c [ 41.566161][ T4806] dump_stack+0x1c/0x5c [ 41.566896][ T4806] should_fail_ex+0x3cc/0x524 [ 41.567721][ T4806] __should_failslab+0xc0/0x11c [ 41.568589][ T4806] should_failslab+0x10/0x28 [ 41.569395][ T4806] __kmem_cache_alloc_node+0x7c/0x318 [ 41.570373][ T4806] __kmalloc+0xc4/0x180 [ 41.571150][ T4806] tomoyo_encode+0x260/0x484 [ 41.571941][ T4806] tomoyo_mount_permission+0x360/0x798 [ 41.572930][ T4806] tomoyo_sb_mount+0x48/0x60 [ 41.573749][ T4806] security_sb_mount+0x94/0xd4 [ 41.574580][ T4806] path_mount+0xb8/0xe6c [ 41.575331][ T4806] __arm64_sys_mount+0x4a0/0x5a0 [ 41.576203][ T4806] invoke_syscall+0x98/0x290 [ 41.577009][ T4806] el0_svc_common+0x13c/0x258 [ 41.577829][ T4806] do_el0_svc+0x5c/0x134 [ 41.578572][ T4806] el0_svc+0x58/0x128 [ 41.579282][ T4806] el0t_64_sync_handler+0x84/0xf0 [ 41.580166][ T4806] el0t_64_sync+0x18c/0x190 [ 41.690295][ T4330] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 41.757203][ T4840] loop2: detected capacity change from 0 to 32768 [ 41.808560][ T4840] XFS (loop2): Mounting V5 Filesystem [ 41.826836][ T4840] XFS (loop2): Ending clean mount [ 41.836896][ T4840] XFS (loop2): Quotacheck needed: Please wait. [ 41.865935][ T4840] XFS (loop2): Quotacheck: Done. [ 41.870870][ T4854] zram0: detected capacity change from 0 to 8 [ 41.980906][ T4337] XFS (loop2): Unmounting Filesystem [ 42.175935][ T4861] ceph: No mds server is up or the cluster is laggy [ 42.226189][ T4865] FAULT_INJECTION: forcing a failure. [ 42.226189][ T4865] name fail_futex, interval 1, probability 0, space 0, times 1 [ 42.228564][ T4865] CPU: 1 PID: 4865 Comm: syz.0.137 Not tainted syzkaller #0 [ 42.229951][ T4865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.231773][ T4865] Call trace: [ 42.232380][ T4865] dump_backtrace+0x1c4/0x1f0 [ 42.233279][ T4865] show_stack+0x2c/0x3c [ 42.234061][ T4865] __dump_stack+0x30/0x40 [ 42.234818][ T4865] dump_stack_lvl+0xf4/0x15c [ 42.235639][ T4865] dump_stack+0x1c/0x5c [ 42.236399][ T4865] should_fail_ex+0x3cc/0x524 [ 42.237263][ T4865] should_fail+0x14/0x24 [ 42.238050][ T4865] get_futex_key+0x904/0xfb0 [ 42.238891][ T4865] futex_wake+0x10c/0x458 [ 42.239706][ T4865] do_futex+0x2c4/0x340 [ 42.240500][ T4865] __arm64_sys_futex+0x390/0x414 [ 42.241396][ T4865] invoke_syscall+0x98/0x290 [ 42.242228][ T4865] el0_svc_common+0x13c/0x258 [ 42.243080][ T4865] do_el0_svc+0x5c/0x134 [ 42.243870][ T4865] el0_svc+0x58/0x128 [ 42.244604][ T4865] el0t_64_sync_handler+0x84/0xf0 [ 42.245544][ T4865] el0t_64_sync+0x18c/0x190 [ 42.280002][ T4864] ALSA: mixer_oss: invalid OSS volume '' [ 42.427873][ T4881] loop2: detected capacity change from 0 to 1024 [ 42.453749][ T4881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.465005][ T4881] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 42.492055][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 42.582243][ T4897] loop0: detected capacity change from 0 to 512 [ 42.613564][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.641109][ T4897] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.150: Invalid block bitmap block 420 in block_group 0 [ 42.649174][ T4897] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.150: Invalid block bitmap block 420 in block_group 0 [ 42.653195][ T4897] EXT4-fs error (device loop0): ext4_discard_preallocations:5132: comm syz.0.150: Error -117 reading block bitmap for 0 [ 42.670808][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 42.684460][ T4903] loop1: detected capacity change from 0 to 136 [ 43.000469][ T4341] Bluetooth: hci2: Invalid handle: 0x3700 > 0x0eff [ 43.032132][ T4915] loop0: detected capacity change from 0 to 4096 [ 43.051817][ T4915] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 43.054430][ T4915] UDF-fs: Scanning with blocksize 512 failed [ 43.071369][ T4915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 43.287335][ T4341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.289842][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.291581][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.294222][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.296799][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.298234][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.413676][ T4917] chnl_net:caif_netlink_parms(): no params data found [ 43.427043][ T4926] loop2: detected capacity change from 0 to 1764 [ 43.444802][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.446126][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.448037][ T4917] device bridge_slave_0 entered promiscuous mode [ 43.450279][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.451547][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.458928][ T4917] device bridge_slave_1 entered promiscuous mode [ 43.466035][ T4917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.473621][ T4917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.485214][ T4917] team0: Port device team_slave_0 added [ 43.487376][ T4917] team0: Port device team_slave_1 added [ 43.496874][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.498178][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.503542][ T4917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.506114][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.507548][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.511932][ T4917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.553600][ T4917] device hsr_slave_0 entered promiscuous mode [ 43.585524][ T4917] device hsr_slave_1 entered promiscuous mode [ 43.626271][ T4917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.627660][ T4917] Cannot create hsr debugfs directory [ 43.688048][ T4917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.717937][ T4917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.764129][ T4917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.803604][ T4917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.918192][ T4953] loop4: detected capacity change from 0 to 512 [ 43.948120][ T4953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.951874][ T4917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.970338][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.972047][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.976726][ T4917] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.979890][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.981969][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.986959][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.988290][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.990290][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.005144][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.007009][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.008554][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.009832][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.046518][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 44.101648][ T4969] FAULT_INJECTION: forcing a failure. [ 44.101648][ T4969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 44.105544][ T4969] CPU: 1 PID: 4969 Comm: syz.4.177 Not tainted syzkaller #0 [ 44.106777][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.108421][ T4969] Call trace: [ 44.108951][ T4969] dump_backtrace+0x1c4/0x1f0 [ 44.109727][ T4969] show_stack+0x2c/0x3c [ 44.110385][ T4969] __dump_stack+0x30/0x40 [ 44.111089][ T4969] dump_stack_lvl+0xf4/0x15c [ 44.111805][ T4969] dump_stack+0x1c/0x5c [ 44.112494][ T4969] should_fail_ex+0x3cc/0x524 [ 44.113359][ T4969] should_fail_alloc_page+0x74/0xb8 [ 44.114299][ T4969] prepare_alloc_pages+0x1b8/0x4f0 [ 44.115266][ T4969] __alloc_pages+0x134/0x544 [ 44.116100][ T4969] alloc_pages+0x434/0x6fc [ 44.116926][ T4969] __pmd_alloc+0x54/0x484 [ 44.117724][ T4969] handle_mm_fault+0x1c58/0x3018 [ 44.118584][ T4969] __get_user_pages+0x340/0x770 [ 44.119442][ T4969] __get_user_pages_remote+0x188/0x684 [ 44.119479][ T4967] capability: warning: `syz.3.176' uses 32-bit capabilities (legacy support in use) [ 44.120392][ T4969] get_user_pages_remote+0x80/0xbc [ 44.122998][ T4969] get_arg_page+0x18c/0x3b4 [ 44.123775][ T4969] copy_string_kernel+0x15c/0x254 [ 44.124631][ T4969] do_execveat_common+0x508/0x7fc [ 44.125491][ T4969] __arm64_sys_execveat+0xd8/0xf4 [ 44.126389][ T4969] invoke_syscall+0x98/0x290 [ 44.127209][ T4969] el0_svc_common+0x13c/0x258 [ 44.127999][ T4969] do_el0_svc+0x5c/0x134 [ 44.128760][ T4969] el0_svc+0x58/0x128 [ 44.129473][ T4969] el0t_64_sync_handler+0x84/0xf0 [ 44.130334][ T4969] el0t_64_sync+0x18c/0x190 [ 44.161847][ T4972] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 44.334418][ T4524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.348465][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.350493][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.353138][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.359149][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.360884][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.373567][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.414482][ T4524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.418006][ T4917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.420276][ T4917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.426162][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.427857][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.430846][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.509016][ T4524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.607366][ T4524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.614805][ T205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.616324][ T205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.622082][ T4917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.647714][ T5003] loop3: detected capacity change from 0 to 512 [ 44.671083][ T5003] FAT-fs (loop3): bogus logical sector size 0 [ 44.671616][ T5005] binder: 5004:5005 ioctl c0306201 0 returned -14 [ 44.674683][ T5003] FAT-fs (loop3): Can't find a valid FAT filesystem [ 44.682020][ T5005] binder: 5004:5005 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.690351][ T5005] binder: 5005 RLIMIT_NICE not set [ 44.732979][ T5008] binder: 5004:5008 ioctl c0306201 0 returned -14 [ 44.734736][ T5008] binder: 5004:5008 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.737041][ T5008] binder: 5008 RLIMIT_NICE not set [ 44.753928][ T4524] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.779850][ T4524] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.793362][ T4524] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.807899][ T4524] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.861654][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.863899][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.875830][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.877457][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.879314][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.885945][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.888434][ T4917] device veth0_vlan entered promiscuous mode [ 44.901523][ T4917] device veth1_vlan entered promiscuous mode [ 45.039643][ T5034] loop3: detected capacity change from 0 to 1024 [ 45.060792][ T5034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.100847][ T205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.102712][ T205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.104381][ T205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.106075][ T205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.127472][ T4917] device veth0_macvtap entered promiscuous mode [ 45.131816][ T4917] device veth1_macvtap entered promiscuous mode [ 45.141962][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.148276][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.150409][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.153076][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.154993][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.157206][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.159236][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.161540][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.163656][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.165761][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.169545][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.197307][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.199250][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.200771][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.203875][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.212426][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.214329][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.216883][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.221245][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.226648][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.230016][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.234167][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.237392][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.240484][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.251731][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.257019][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.261538][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.264380][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.316388][ T4917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.318006][ T4917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.319514][ T4917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.321073][ T4917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.375903][ T5049] fuse: root generation should be zero [ 45.382950][ T4341] Bluetooth: hci1: command 0x0409 tx timeout [ 45.419652][ T4571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.421312][ T4571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.422913][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.471291][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.476970][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.547678][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.601455][ T5073] netlink: 'syz.4.200': attribute type 11 has an invalid length. [ 45.675433][ T5074] VFS: Mount too revealing [ 45.836782][ T5090] netlink: 'syz.5.204': attribute type 1 has an invalid length. [ 45.838209][ T5090] netlink: 64787 bytes leftover after parsing attributes in process `syz.5.204'. [ 45.909381][ T5098] ======================================================= [ 45.909381][ T5098] WARNING: The mand mount option has been deprecated and [ 45.909381][ T5098] and is ignored by this kernel. Remove the mand [ 45.909381][ T5098] option from the mount to silence this warning. [ 45.909381][ T5098] ======================================================= [ 45.956407][ T5098] FAT-fs (loop0): Unrecognized mount option "sho" or missing value [ 46.440815][ T5142] binder: 5141:5142 unknown command 0 [ 46.441867][ T5142] binder: 5141:5142 ioctl c0306201 200004c0 returned -22 [ 46.463987][ T5142] binder: 5141:5142 got reply transaction with no transaction stack [ 46.470041][ T5142] binder: 5141:5142 transaction reply to 0:0 failed 23/29201/-71, size 0-0 line 2963 [ 46.509661][ T4844] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.767099][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.850156][ T5151] set_capacity_and_notify: 2 callbacks suppressed [ 46.850165][ T5151] loop0: detected capacity change from 0 to 8192 [ 47.065117][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 47.147492][ T4524] device hsr_slave_0 left promiscuous mode [ 47.194038][ T4524] device hsr_slave_1 left promiscuous mode [ 47.203538][ T5189] FAULT_INJECTION: forcing a failure. [ 47.203538][ T5189] name failslab, interval 1, probability 0, space 0, times 0 [ 47.205886][ T5189] CPU: 1 PID: 5189 Comm: syz.2.228 Not tainted syzkaller #0 [ 47.207053][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.208698][ T5189] Call trace: [ 47.209224][ T5189] dump_backtrace+0x1c4/0x1f0 [ 47.210021][ T5189] show_stack+0x2c/0x3c [ 47.210651][ T5189] __dump_stack+0x30/0x40 [ 47.211363][ T5189] dump_stack_lvl+0xf4/0x15c [ 47.212116][ T5189] dump_stack+0x1c/0x5c [ 47.212869][ T5189] should_fail_ex+0x3cc/0x524 [ 47.213732][ T5189] __should_failslab+0xc0/0x11c [ 47.214600][ T5189] should_failslab+0x10/0x28 [ 47.215451][ T5189] __kmem_cache_alloc_node+0x7c/0x318 [ 47.216440][ T5189] kmalloc_trace+0x48/0x94 [ 47.217252][ T5189] snd_seq_prioq_new+0x50/0xa4 [ 47.218105][ T5189] snd_seq_queue_alloc+0x12c/0x4cc [ 47.219050][ T5189] snd_seq_ioctl_create_queue+0x84/0x37c [ 47.220091][ T5189] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 47.221141][ T5189] snd_seq_oss_open+0x510/0xca4 [ 47.222031][ T5189] odev_open+0x84/0xbc [ 47.222801][ T5189] soundcore_open+0x2f8/0x47c [ 47.223683][ T5189] chrdev_open+0x3d0/0x51c [ 47.224517][ T5189] do_dentry_open+0x738/0xf8c [ 47.225399][ T5189] vfs_open+0x7c/0x90 [ 47.226184][ T5189] path_openat+0x1fc0/0x27a0 [ 47.227015][ T5189] do_filp_open+0x198/0x38c [ 47.227883][ T5189] do_sys_openat2+0x134/0x3fc [ 47.228776][ T5189] __arm64_sys_openat+0x11c/0x150 [ 47.229633][ T5189] invoke_syscall+0x98/0x290 [ 47.230453][ T5189] el0_svc_common+0x13c/0x258 [ 47.231308][ T5189] do_el0_svc+0x5c/0x134 [ 47.232077][ T5189] el0_svc+0x58/0x128 [ 47.232800][ T5189] el0t_64_sync_handler+0x84/0xf0 [ 47.233702][ T5189] el0t_64_sync+0x18c/0x190 [ 47.325581][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.326980][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.329557][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.331076][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.333084][ T4524] device bridge_slave_1 left promiscuous mode [ 47.335140][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.373962][ T4524] device bridge_slave_0 left promiscuous mode [ 47.375361][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.462805][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 47.492781][ T4524] device veth1_macvtap left promiscuous mode [ 47.494213][ T4524] device veth0_macvtap left promiscuous mode [ 47.495287][ T4524] device veth1_vlan left promiscuous mode [ 47.496376][ T4524] device veth0_vlan left promiscuous mode [ 49.524946][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 49.542345][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 49.673921][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 49.832771][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.033555][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.523381][ T4524] bond0 (unregistering): Released all slaves [ 51.612306][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 51.845459][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 52.028024][ T5208] loop3: detected capacity change from 0 to 1024 [ 52.029540][ T5208] EXT4-fs: inline encryption not supported [ 52.060521][ T5208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.088714][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.090760][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.133407][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 52.529072][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.545430][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.840365][ T5191] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.841786][ T5191] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.843775][ T5191] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.845473][ T5191] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.015497][ T5217] loop3: detected capacity change from 0 to 512 [ 53.023286][ T5217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.028935][ T5217] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.237: invalid indirect mapped block 32768 (level 2) [ 53.035088][ T5217] EXT4-fs (loop3): Remounting filesystem read-only [ 53.036674][ T5217] EXT4-fs (loop3): 1 orphan inode deleted [ 53.037609][ T5217] EXT4-fs (loop3): 1 truncate cleaned up [ 53.038532][ T5217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.061418][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 53.122404][ T5220] capability: warning: `syz.3.238' uses deprecated v2 capabilities in a way that may be insecure [ 53.154971][ T5228] overlayfs: upper fs does not support file handles, falling back to index=off. [ 53.262605][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 53.264171][ T5243] netlink: 'syz.2.245': attribute type 30 has an invalid length. [ 53.267172][ T5243] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.268777][ T5243] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.270385][ T5243] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.272060][ T5243] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.330325][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 53.332124][ T5243] netlink: 'syz.2.245': attribute type 30 has an invalid length. [ 53.342937][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.346072][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.478063][ T5269] loop0: detected capacity change from 0 to 256 [ 53.521850][ T5269] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d) [ 53.580497][ T5269] fuse: Invalid user_id [ 53.655547][ T5279] binder: 5278:5279 ioctl c0306201 20000080 returned -14 [ 53.661187][ T5279] binder: 5278:5279 tried to acquire reference to desc 0, got 1 instead [ 53.668461][ T5279] binder: 5278:5279 ioctl c0306201 200003c0 returned -14 [ 53.674878][ T4411] binder: release 5278:5279 transaction 28 out, still active [ 53.676393][ T4411] binder: undelivered TRANSACTION_COMPLETE [ 53.706013][ T4411] binder: send failed reply for transaction 28, target dead [ 53.793847][ T27] audit: type=1326 audit(53.780:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.254" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd782e8 code=0x0 [ 54.348633][ T5320] loop0: detected capacity change from 0 to 4095 [ 54.380170][ T5320] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 54.392866][ T5320] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 54.394371][ T5320] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 54.397167][ T5320] loop0: [ 54.445690][ T5330] overlayfs: failed to clone upperpath [ 54.452773][ T5330] overlayfs: failed to clone lowerpath [ 54.598418][ T5351] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.263'. [ 54.600377][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 54.764796][ T5370] loop2: detected capacity change from 0 to 512 [ 54.768721][ T5368] device ip6gre1 entered promiscuous mode [ 54.770718][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.772382][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.792422][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.797291][ T5368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.817347][ T5370] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.270: missing EA_INODE flag [ 54.820638][ T5370] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.270: error while reading EA inode 2 err=-117 [ 54.839814][ T5370] EXT4-fs (loop2): 1 orphan inode deleted [ 54.841000][ T5370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.879268][ T5374] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 54.891154][ T5370] syz.2.270 (pid 5370) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 54.892573][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.987747][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 55.303788][ T5397] loop0: detected capacity change from 0 to 32768 [ 55.317048][ T5397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.275 (5397) [ 55.332850][ T5397] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.334697][ T5397] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 55.336190][ T5397] BTRFS info (device loop0): using free space tree [ 55.521803][ T5397] BTRFS info (device loop0): enabling ssd optimizations [ 55.569004][ T4335] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.678497][ T5233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5233) [ 55.852733][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 56.330330][ T4341] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 56.577403][ T5492] FAULT_INJECTION: forcing a failure. [ 56.577403][ T5492] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.580192][ T5492] CPU: 0 PID: 5492 Comm: syz.5.297 Not tainted syzkaller #0 [ 56.581455][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 56.583206][ T5492] Call trace: [ 56.583775][ T5492] dump_backtrace+0x1c4/0x1f0 [ 56.584594][ T5492] show_stack+0x2c/0x3c [ 56.585344][ T5492] __dump_stack+0x30/0x40 [ 56.586127][ T5492] dump_stack_lvl+0xf4/0x15c [ 56.586936][ T5492] dump_stack+0x1c/0x5c [ 56.587679][ T5492] should_fail_ex+0x3cc/0x524 [ 56.588523][ T5492] should_fail+0x14/0x24 [ 56.589297][ T5492] should_fail_usercopy+0x20/0x30 [ 56.590209][ T5492] _copy_to_user+0x3c/0x158 [ 56.591032][ T5492] io_uring_create+0x670/0xb34 [ 56.591906][ T5492] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 56.592970][ T5492] invoke_syscall+0x98/0x290 [ 56.593837][ T5492] el0_svc_common+0x13c/0x258 [ 56.594698][ T5492] do_el0_svc+0x5c/0x134 [ 56.595473][ T5492] el0_svc+0x58/0x128 [ 56.596202][ T5492] el0t_64_sync_handler+0x84/0xf0 [ 56.597143][ T5492] el0t_64_sync+0x18c/0x190 [ 56.648417][ T4341] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 56.731091][ T5498] fuse: Bad value for 'fd' [ 56.866277][ T5504] loop5: detected capacity change from 0 to 764 [ 57.211127][ T5526] loop2: detected capacity change from 0 to 512 [ 57.260737][ T5526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.339311][ T5526] EXT4-fs (loop2): shut down requested (0) [ 57.343540][ T5536] tipc: Started in network mode [ 57.344468][ T5536] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.346214][ T5536] tipc: New replicast peer: 172.20.20.187 [ 57.351646][ T5536] tipc: Enabled bearer , priority 10 [ 57.425987][ T5546] loop3: detected capacity change from 0 to 128 [ 57.438519][ T5548] loop0: detected capacity change from 0 to 512 [ 57.446090][ T5548] EXT2-fs (loop0): (no)user_xattr optionsnot supported [ 57.448497][ T5548] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 57.452018][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.486646][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 57.504993][ T5548] EXT2-fs (loop0): error: ext2_new_inode: reserved inode or inode > inodes count - block_group = 0,inode=1 [ 57.687261][ T5560] netlink: 'syz.0.327': attribute type 11 has an invalid length. [ 57.698906][ T5233] udevd[5233]: incorrect ext4 checksum on /dev/loop3 [ 57.791241][ T5546] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:427: inode #2: comm syz.3.320: No space for directory leaf checksum. Please run e2fsck -D. [ 57.827648][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.845108][ T5233] udevd[5233]: incorrect ext4 checksum on /dev/loop3 [ 57.852368][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 57.933524][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.937086][ T5570] tipc: Started in network mode [ 57.937973][ T5570] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.939638][ T5570] tipc: New replicast peer: 172.20.20.187 [ 57.941038][ T5570] tipc: Enabled bearer , priority 10 [ 58.018459][ T5572] loop3: detected capacity change from 0 to 2364 [ 58.035114][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.053526][ T5233] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.123997][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.140117][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.144104][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.144586][ T5582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.147539][ T5582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.149297][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.151365][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.156465][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.158086][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.269620][ T39] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.282115][ T39] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.297457][ T39] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.320863][ T39] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.421792][ T5579] chnl_net:caif_netlink_parms(): no params data found [ 58.483509][ T4379] tipc: Node number set to 2886997162 [ 58.492390][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.664489][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.666116][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.668126][ T5579] device bridge_slave_0 entered promiscuous mode [ 58.672235][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.675314][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.679614][ T5579] device bridge_slave_1 entered promiscuous mode [ 58.746552][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.749663][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.758881][ T5579] team0: Port device team_slave_0 added [ 58.777717][ T5623] loop0: detected capacity change from 0 to 128 [ 58.814668][ T5623] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.837353][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.838799][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.850863][ T5579] team0: Port device team_slave_1 added [ 58.936253][ T5233] udevd[5233]: incorrect ext4 checksum on /dev/loop0 [ 58.950627][ T4379] tipc: Node number set to 2886997162 [ 58.951988][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.953859][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.962839][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.971795][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.973281][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.977295][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.079117][ T5233] udevd[5233]: incorrect ext4 checksum on /dev/loop0 [ 59.081010][ T5623] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz.0.341: No space for directory leaf checksum. Please run e2fsck -D. [ 59.094358][ T5579] device hsr_slave_0 entered promiscuous mode [ 59.107103][ T5233] udevd[5233]: incorrect ext4 checksum on /dev/loop0 [ 59.116119][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 59.122919][ T5579] device hsr_slave_1 entered promiscuous mode [ 59.227429][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 59.230312][ T5651] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.231831][ T5651] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.233864][ T5651] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.235515][ T5651] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.273960][ T4331] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 59.323161][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 59.325157][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 59.427804][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.430088][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.431486][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.523469][ T5579] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.617926][ T5579] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.643758][ T5579] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.957588][ T5579] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.172496][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 60.320908][ T4331] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 60.393384][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.456134][ T39] device hsr_slave_0 left promiscuous mode [ 60.502816][ T39] device hsr_slave_1 left promiscuous mode [ 60.563462][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.564884][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.568004][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.569425][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.570928][ T39] device bridge_slave_1 left promiscuous mode [ 60.571999][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.595251][ T39] device bridge_slave_0 left promiscuous mode [ 60.596514][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.732944][ T39] device veth1_macvtap left promiscuous mode [ 60.734332][ T39] device veth0_macvtap left promiscuous mode [ 60.735672][ T39] device veth1_vlan left promiscuous mode [ 60.736918][ T39] device veth0_vlan left promiscuous mode [ 62.262398][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 62.804907][ T39] team0 (unregistering): Port device team_slave_1 removed [ 62.963965][ T39] team0 (unregistering): Port device team_slave_0 removed [ 63.133729][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.343634][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.332317][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 64.493972][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495228][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.883339][ T39] bond0 (unregistering): Released all slaves [ 65.198548][ T5716] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 65.208517][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.239207][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.240830][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.243503][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.245361][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.251553][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.252843][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.257964][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.259931][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.264246][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.265357][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.267498][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.307006][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.309140][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.310940][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.314237][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.321467][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.323798][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.325463][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.330483][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.332861][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.335497][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.337130][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.340173][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.347164][ T5739] device ip6gre1 left promiscuous mode [ 65.382557][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.447208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.448641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.456621][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.542836][ T4377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.545433][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.547062][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.550655][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.553448][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.555336][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.557032][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.559425][ T5579] device veth0_vlan entered promiscuous mode [ 65.566938][ T5579] device veth1_vlan entered promiscuous mode [ 65.575924][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.577641][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.579285][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.580917][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.585005][ T5579] device veth0_macvtap entered promiscuous mode [ 65.587475][ T5579] device veth1_macvtap entered promiscuous mode [ 65.591908][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.594636][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.596304][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.598368][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.600330][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.602877][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605105][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.606469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.608276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.609747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.611379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.618407][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.620365][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.622099][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.624561][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.626212][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.627923][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.630781][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.634520][ T5579] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636421][ T5579] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.638025][ T5579] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639775][ T5579] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.645619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.678697][ T4571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.680133][ T4571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.681763][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.708902][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.710454][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.712038][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.808046][ T5787] netlink: 'syz.4.381': attribute type 1 has an invalid length. [ 65.827587][ T5787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.856881][ T5787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.858403][ T5787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.860108][ T5787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.862000][ T5787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.867119][ T5787] bond1: (slave geneve2): making interface the new active one [ 65.872171][ T5787] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.944362][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 66.097897][ T5806] Illegal XDP return value 4025208832 on prog (id 51) dev syz_tun, expect packet loss! [ 66.210094][ T5813] binder: 5812:5813 tried to acquire reference to desc 0, got 1 instead [ 66.211994][ T5813] binder: 5812:5813 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 66.412382][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.414172][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 66.640111][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.641550][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.706130][ T5842] loop0: detected capacity change from 0 to 128 [ 66.969515][ T5850] overlayfs: failed to clone upperpath [ 67.014637][ T5854] loop6: detected capacity change from 0 to 1024 [ 67.017372][ T5856] overlayfs: failed to clone upperpath [ 67.061912][ T5854] EXT4-fs: Ignoring removed i_version option [ 67.065708][ T5854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.070775][ T5854] EXT4-fs (loop6): Test dummy encryption mode enabled [ 67.085984][ T5854] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 67.193557][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.225100][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.580856][ T5821] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.585130][ T5821] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.586574][ T5821] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.588052][ T5821] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.759258][ T5821] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.761030][ T5821] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.762866][ T5821] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.764638][ T5821] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.823291][ T5832] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.377'. [ 67.896119][ T5844] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.915931][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984808][ T5579] EXT4-fs (loop6): unmounting filesystem. [ 68.116364][ T5903] netlink: 15143 bytes leftover after parsing attributes in process `syz.4.405'. [ 68.404527][ T5934] zram: Cannot change disksize for initialized device [ 68.725574][ T5955] CIFS: Attempting to mount \\127.0.0.1\share [ 69.074609][ T5985] zram: Cannot change disksize for initialized device [ 69.110003][ T5993] syz.3.425 uses obsolete (PF_INET,SOCK_PACKET) [ 69.304611][ T6004] loop2: detected capacity change from 0 to 512 [ 69.315049][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 69.536439][ T5955] CIFS: VFS: Error connecting to socket. Aborting operation. [ 69.537903][ T5955] CIFS: VFS: cifs_mount failed w/return code = -4 [ 69.611745][ T6024] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 69.621717][ T7] cfg80211: failed to load regulatory.db [ 70.049866][ T6033] loop3: detected capacity change from 0 to 40427 [ 70.080134][ T6033] F2FS-fs (loop3): invalid crc value [ 70.094058][ T6033] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.123871][ T6033] F2FS-fs (loop3): Start checkpoint disabled! [ 70.167970][ T6033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 70.201971][ T6074] loop0: detected capacity change from 0 to 1024 [ 70.225916][ T6033] syz.3.437: attempt to access beyond end of device [ 70.225916][ T6033] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 70.281022][ T6033] syz.3.437: attempt to access beyond end of device [ 70.281022][ T6033] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.331872][ T6016] kworker/u4:26: attempt to access beyond end of device [ 70.331872][ T6016] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 70.607087][ T4331] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 70.608828][ T4331] CPU: 0 PID: 4331 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 70.610057][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 70.611699][ T4331] Workqueue: hci0 hci_rx_work [ 70.612530][ T4331] Call trace: [ 70.613139][ T4331] dump_backtrace+0x1c4/0x1f0 [ 70.614106][ T4331] show_stack+0x2c/0x3c [ 70.614945][ T4331] __dump_stack+0x30/0x40 [ 70.615726][ T4331] dump_stack_lvl+0xf4/0x15c [ 70.616542][ T4331] dump_stack+0x1c/0x5c [ 70.617287][ T4331] sysfs_create_dir_ns+0x244/0x264 [ 70.618207][ T4331] kobject_add_internal+0x5a8/0xb18 [ 70.619171][ T4331] kobject_add+0x144/0x20c [ 70.619972][ T4331] device_add+0x3dc/0xe4c [ 70.620777][ T4331] hci_conn_add_sysfs+0xb8/0x1bc [ 70.621657][ T4331] le_conn_complete_evt+0xd08/0x12c8 [ 70.622632][ T4331] hci_le_conn_complete_evt+0x114/0x3b8 [ 70.623639][ T4331] hci_le_meta_evt+0x2c0/0x4a8 [ 70.624500][ T4331] hci_event_packet+0x64c/0xe60 [ 70.625372][ T4331] hci_rx_work+0x310/0xa70 [ 70.626177][ T4331] process_one_work+0x7e4/0x13bc [ 70.627053][ T4331] worker_thread+0x8cc/0xfe8 [ 70.627865][ T4331] kthread+0x254/0x2e0 [ 70.628613][ T4331] ret_from_fork+0x10/0x20 [ 70.631085][ T4331] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.633311][ T4331] Bluetooth: hci0: failed to register connection device [ 70.761760][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.763423][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.237638][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.268143][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.601584][ T6093] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.603538][ T6093] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.605196][ T6093] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.821011][ T6129] tipc: Started in network mode [ 71.821978][ T6129] tipc: Node identity 4, cluster identity 4711 [ 71.823323][ T6129] tipc: Node number set to 4 [ 71.917218][ T27] audit: type=1326 audit(71.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.463" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc7782e8 code=0x0 [ 72.110549][ T6157] FAULT_INJECTION: forcing a failure. [ 72.110549][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 72.130551][ T6157] CPU: 0 PID: 6157 Comm: syz.0.465 Not tainted syzkaller #0 [ 72.131964][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 72.133801][ T6157] Call trace: [ 72.134522][ T6157] dump_backtrace+0x1c4/0x1f0 [ 72.135494][ T6157] show_stack+0x2c/0x3c [ 72.136342][ T6157] __dump_stack+0x30/0x40 [ 72.137236][ T6157] dump_stack_lvl+0xf4/0x15c [ 72.138249][ T6157] dump_stack+0x1c/0x5c [ 72.139168][ T6157] should_fail_ex+0x3cc/0x524 [ 72.140180][ T6157] __should_failslab+0xc0/0x11c [ 72.141185][ T6157] should_failslab+0x10/0x28 [ 72.142178][ T6157] kmem_cache_alloc+0x88/0x310 [ 72.143208][ T6157] dst_alloc+0xfc/0x16c [ 72.144098][ T6157] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 72.145324][ T6157] ip_route_output_key_hash+0x1b0/0x2fc [ 72.146415][ T6157] ip_route_output_flow+0x3c/0x158 [ 72.147462][ T6157] ip_route_newports+0x114/0x1ac [ 72.148510][ T6157] tcp_v4_connect+0x9e8/0x1460 [ 72.149493][ T6157] tcp_v6_connect+0x7a8/0x12ac [ 72.150475][ T6157] __inet_stream_connect+0x1f8/0xc48 [ 72.151567][ T6157] inet_stream_connect+0x74/0xb0 [ 72.152583][ T6157] __sys_connect+0x28c/0x2b4 [ 72.153456][ T6157] __arm64_sys_connect+0x7c/0x94 [ 72.154380][ T6157] invoke_syscall+0x98/0x290 [ 72.155253][ T6157] el0_svc_common+0x13c/0x258 [ 72.156126][ T6157] do_el0_svc+0x5c/0x134 [ 72.156912][ T6157] el0_svc+0x58/0x128 [ 72.157655][ T6157] el0t_64_sync_handler+0x84/0xf0 [ 72.158607][ T6157] el0t_64_sync+0x18c/0x190 [ 72.309792][ T6184] loop6: detected capacity change from 0 to 256 [ 72.606940][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.608523][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.014702][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.034912][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.235009][ T6225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'. [ 73.393390][ T6196] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.394924][ T6196] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.396401][ T6196] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.397954][ T6196] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.616463][ T6236] loop2: detected capacity change from 0 to 128 [ 73.626140][ T6236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 73.740053][ T6241] FAULT_INJECTION: forcing a failure. [ 73.740053][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 73.749990][ T6241] CPU: 1 PID: 6241 Comm: syz.6.483 Not tainted syzkaller #0 [ 73.751280][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.752958][ T6241] Call trace: [ 73.753552][ T6241] dump_backtrace+0x1c4/0x1f0 [ 73.754422][ T6241] show_stack+0x2c/0x3c [ 73.755204][ T6241] __dump_stack+0x30/0x40 [ 73.756007][ T6241] dump_stack_lvl+0xf4/0x15c [ 73.756875][ T6241] dump_stack+0x1c/0x5c [ 73.757641][ T6241] should_fail_ex+0x3cc/0x524 [ 73.758489][ T6241] __should_failslab+0xc0/0x11c [ 73.759381][ T6241] should_failslab+0x10/0x28 [ 73.760261][ T6241] kmem_cache_alloc+0x88/0x310 [ 73.761132][ T6241] dst_alloc+0xfc/0x16c [ 73.761885][ T6241] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 73.762986][ T6241] ip_route_output_key_hash+0x1b0/0x2fc [ 73.763991][ T6241] ip_route_output_flow+0x3c/0x158 [ 73.764929][ T6241] ip_route_newports+0x114/0x1ac [ 73.765843][ T6241] tcp_v4_connect+0x9e8/0x1460 [ 73.766729][ T6241] tcp_v6_connect+0x7a8/0x12ac [ 73.767616][ T6241] __inet_stream_connect+0x1f8/0xc48 [ 73.768577][ T6241] inet_stream_connect+0x74/0xb0 [ 73.769484][ T6241] __sys_connect+0x28c/0x2b4 [ 73.770314][ T6241] __arm64_sys_connect+0x7c/0x94 [ 73.771197][ T6241] invoke_syscall+0x98/0x290 [ 73.772040][ T6241] el0_svc_common+0x13c/0x258 [ 73.772894][ T6241] do_el0_svc+0x5c/0x134 [ 73.773658][ T6241] el0_svc+0x58/0x128 [ 73.774379][ T6241] el0t_64_sync_handler+0x84/0xf0 [ 73.775300][ T6241] el0t_64_sync+0x18c/0x190 [ 73.808850][ T6252] binder: 6248:6252 tried to acquire reference to desc 0, got 1 instead [ 73.811064][ T6252] binder: 6248:6252 not enough space to store 8 fds in buffer [ 73.815229][ T6252] binder: 6252:6248 translate fd array failed [ 73.816341][ T6252] binder: 6248:6252 transaction async to 6248:0 failed 37/29201/-22, size 96-24 line 3503 [ 73.818928][ T5438] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.952930][ T6263] FAULT_INJECTION: forcing a failure. [ 73.952930][ T6263] name fail_futex, interval 1, probability 0, space 0, times 0 [ 73.957646][ T6263] CPU: 0 PID: 6263 Comm: syz.3.493 Not tainted syzkaller #0 [ 73.958926][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.960809][ T6263] Call trace: [ 73.961398][ T6263] dump_backtrace+0x1c4/0x1f0 [ 73.962317][ T6263] show_stack+0x2c/0x3c [ 73.963139][ T6263] __dump_stack+0x30/0x40 [ 73.964005][ T6263] dump_stack_lvl+0xf4/0x15c [ 73.964920][ T6263] dump_stack+0x1c/0x5c [ 73.965777][ T6263] should_fail_ex+0x3cc/0x524 [ 73.966725][ T6263] should_fail+0x14/0x24 [ 73.967667][ T6263] get_futex_key+0x904/0xfb0 [ 73.968667][ T6263] futex_wake+0x10c/0x458 [ 73.969535][ T6263] do_futex+0x2c4/0x340 [ 73.970363][ T6263] __arm64_sys_futex+0x390/0x414 [ 73.971312][ T6263] invoke_syscall+0x98/0x290 [ 73.972124][ T6263] el0_svc_common+0x13c/0x258 [ 73.972955][ T6263] do_el0_svc+0x5c/0x134 [ 73.973723][ T6263] el0_svc+0x58/0x128 [ 73.974435][ T6263] el0t_64_sync_handler+0x84/0xf0 [ 73.975350][ T6263] el0t_64_sync+0x18c/0x190 [ 74.021844][ T6272] FAULT_INJECTION: forcing a failure. [ 74.021844][ T6272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.024501][ T6272] CPU: 1 PID: 6272 Comm: syz.0.495 Not tainted syzkaller #0 [ 74.025742][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 74.027512][ T6272] Call trace: [ 74.028099][ T6272] dump_backtrace+0x1c4/0x1f0 [ 74.028966][ T6272] show_stack+0x2c/0x3c [ 74.029738][ T6272] __dump_stack+0x30/0x40 [ 74.030544][ T6272] dump_stack_lvl+0xf4/0x15c [ 74.031394][ T6272] dump_stack+0x1c/0x5c [ 74.032166][ T6272] should_fail_ex+0x3cc/0x524 [ 74.033030][ T6272] should_fail+0x14/0x24 [ 74.033823][ T6272] should_fail_usercopy+0x20/0x30 [ 74.034755][ T6272] iovec_from_user+0xcc/0x60c [ 74.035606][ T6272] __import_iovec+0x80/0x4d4 [ 74.036441][ T6272] import_iovec+0x88/0xa4 [ 74.037195][ T6272] copy_msghdr_from_user+0x34c/0x4e0 [ 74.038144][ T6272] __sys_sendmmsg+0x2f4/0x7ec [ 74.038989][ T6272] __arm64_sys_sendmmsg+0xa4/0xc0 [ 74.039944][ T6272] invoke_syscall+0x98/0x290 [ 74.040809][ T6272] el0_svc_common+0x13c/0x258 [ 74.041681][ T6272] do_el0_svc+0x5c/0x134 [ 74.042472][ T6272] el0_svc+0x58/0x128 [ 74.043199][ T6272] el0t_64_sync_handler+0x84/0xf0 [ 74.044156][ T6272] el0t_64_sync+0x18c/0x190 [ 74.148570][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.150082][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.616716][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.635164][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.931143][ T6251] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.933086][ T6251] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.934592][ T6251] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.936164][ T6251] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.222431][ T6251] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.224036][ T6251] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.225603][ T6251] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.227193][ T6251] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.273726][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.500'. [ 75.361350][ T6317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.505'. [ 75.393393][ T6311] cgroup: Setting release_agent not allowed [ 75.663333][ T6349] FAULT_INJECTION: forcing a failure. [ 75.663333][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 75.665512][ T6349] CPU: 1 PID: 6349 Comm: syz.2.513 Not tainted syzkaller #0 [ 75.666830][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.668706][ T6349] Call trace: [ 75.669299][ T6349] dump_backtrace+0x1c4/0x1f0 [ 75.670174][ T6349] show_stack+0x2c/0x3c [ 75.670939][ T6349] __dump_stack+0x30/0x40 [ 75.671739][ T6349] dump_stack_lvl+0xf4/0x15c [ 75.672583][ T6349] dump_stack+0x1c/0x5c [ 75.673357][ T6349] should_fail_ex+0x3cc/0x524 [ 75.674225][ T6349] __should_failslab+0xc0/0x11c [ 75.675131][ T6349] should_failslab+0x10/0x28 [ 75.675964][ T6349] __kmem_cache_alloc_node+0x7c/0x318 [ 75.676988][ T6349] kmalloc_trace+0x48/0x94 [ 75.677819][ T6349] sctp_add_bind_addr+0x9c/0x2e8 [ 75.678711][ T6349] sctp_copy_local_addr_list+0x2d4/0x474 [ 75.679700][ T6349] sctp_copy_one_addr+0xb0/0x33c [ 75.680573][ T6349] sctp_bind_addr_copy+0x178/0x39c [ 75.681482][ T6349] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 75.682651][ T6349] sctp_connect_new_asoc+0x28c/0x5f4 [ 75.683607][ T6349] sctp_sendmsg+0x10f4/0x20f4 [ 75.684459][ T6349] inet_sendmsg+0x154/0x27c [ 75.685221][ T6349] __sys_sendto+0x324/0x440 [ 75.686027][ T6349] __arm64_sys_sendto+0xe4/0x104 [ 75.686921][ T6349] invoke_syscall+0x98/0x290 [ 75.687742][ T6349] el0_svc_common+0x13c/0x258 [ 75.688553][ T6349] do_el0_svc+0x5c/0x134 [ 75.689307][ T6349] el0_svc+0x58/0x128 [ 75.690030][ T6349] el0t_64_sync_handler+0x84/0xf0 [ 75.690927][ T6349] el0t_64_sync+0x18c/0x190 [ 75.776187][ T6360] loop6: detected capacity change from 0 to 2048 [ 75.864179][ T6360] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 75.909389][ T6376] FAULT_INJECTION: forcing a failure. [ 75.909389][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 75.911848][ T6376] CPU: 0 PID: 6376 Comm: syz.3.520 Not tainted syzkaller #0 [ 75.913106][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.914827][ T6376] Call trace: [ 75.915377][ T6376] dump_backtrace+0x1c4/0x1f0 [ 75.916207][ T6376] show_stack+0x2c/0x3c [ 75.916962][ T6376] __dump_stack+0x30/0x40 [ 75.917776][ T6376] dump_stack_lvl+0xf4/0x15c [ 75.918594][ T6376] dump_stack+0x1c/0x5c [ 75.919310][ T6376] should_fail_ex+0x3cc/0x524 [ 75.920116][ T6376] __should_failslab+0xc0/0x11c [ 75.920957][ T6376] should_failslab+0x10/0x28 [ 75.921748][ T6376] kmem_cache_alloc_node+0x8c/0x344 [ 75.922638][ T6376] __alloc_skb+0x128/0x728 [ 75.923394][ T6376] skb_segment+0xc14/0x35e4 [ 75.924189][ T6376] __udp_gso_segment+0xac8/0x3060 [ 75.925076][ T6376] udp4_ufo_fragment+0x38c/0x6a4 [ 75.925926][ T6376] inet_gso_segment+0x4c0/0x1110 [ 75.926822][ T6376] skb_mac_gso_segment+0x2b8/0x5a0 [ 75.927720][ T6376] __skb_gso_segment+0x264/0x3f8 [ 75.928602][ T6376] validate_xmit_skb+0x328/0xbf8 [ 75.929489][ T6376] validate_xmit_skb_list+0x84/0x120 [ 75.930427][ T6376] sch_direct_xmit+0xd4/0x4ac [ 75.931260][ T6376] __dev_queue_xmit+0x1394/0x3154 [ 75.932153][ T6376] neigh_resolve_output+0x568/0x664 [ 75.933065][ T6376] ip_finish_output2+0xc50/0x10a8 [ 75.933962][ T6376] __ip_finish_output+0x1b0/0x448 [ 75.934869][ T6376] ip_finish_output+0x40/0x264 [ 75.935686][ T6376] ip_mc_output+0x554/0x6f4 [ 75.936479][ T6376] ip_send_skb+0x138/0x2b4 [ 75.937308][ T6376] udp_send_skb+0x7dc/0x12c8 [ 75.938130][ T6376] udp_sendmsg+0x147c/0x1db0 [ 75.938910][ T6376] udpv6_sendmsg+0x8dc/0x20d0 [ 75.939719][ T6376] inet6_sendmsg+0xb4/0xd8 [ 75.940523][ T6376] sock_write_iter+0x268/0x368 [ 75.941374][ T6376] vfs_write+0x3c8/0x7c8 [ 75.942090][ T6376] ksys_write+0x12c/0x228 [ 75.942852][ T6376] __arm64_sys_write+0x7c/0x90 [ 75.943670][ T6376] invoke_syscall+0x98/0x290 [ 75.944460][ T6376] el0_svc_common+0x13c/0x258 [ 75.945279][ T6376] do_el0_svc+0x5c/0x134 [ 75.946030][ T6376] el0_svc+0x58/0x128 [ 75.946753][ T6376] el0t_64_sync_handler+0x84/0xf0 [ 75.947658][ T6376] el0t_64_sync+0x18c/0x190 [ 75.948537][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.024312][ T5579] EXT4-fs (loop6): unmounting filesystem. [ 76.058988][ T6388] netlink: 'syz.2.524': attribute type 2 has an invalid length. [ 76.060408][ T6388] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 76.061714][ T6388] netlink: 198032 bytes leftover after parsing attributes in process `syz.2.524'. [ 76.346902][ T6425] loop6: detected capacity change from 0 to 512 [ 76.371781][ T6425] EXT4-fs: Ignoring removed nobh option [ 76.374146][ T6425] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 76.390495][ T6425] EXT4-fs (loop6): 1 truncate cleaned up [ 76.391663][ T6425] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 76.488350][ T5579] EXT4-fs (loop6): unmounting filesystem. [ 76.798244][ T6466] loop3: detected capacity change from 0 to 256 [ 77.121677][ T6488] FAULT_INJECTION: forcing a failure. [ 77.121677][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 77.141548][ T6488] CPU: 1 PID: 6488 Comm: syz.3.551 Not tainted syzkaller #0 [ 77.142863][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.144867][ T6488] Call trace: [ 77.145512][ T6488] dump_backtrace+0x1c4/0x1f0 [ 77.146449][ T6488] show_stack+0x2c/0x3c [ 77.147242][ T6488] __dump_stack+0x30/0x40 [ 77.147991][ T6488] dump_stack_lvl+0xf4/0x15c [ 77.148814][ T6488] dump_stack+0x1c/0x5c [ 77.149568][ T6488] should_fail_ex+0x3cc/0x524 [ 77.150419][ T6488] __should_failslab+0xc0/0x11c [ 77.151300][ T6488] should_failslab+0x10/0x28 [ 77.152133][ T6488] __kmem_cache_alloc_node+0x7c/0x318 [ 77.153100][ T6488] kmalloc_trace+0x48/0x94 [ 77.153891][ T6488] alloc_mnt_ns+0xc0/0x3b4 [ 77.154647][ T6488] __arm64_sys_fsmount+0x528/0x8c4 [ 77.155515][ T6488] invoke_syscall+0x98/0x290 [ 77.156304][ T6488] el0_svc_common+0x13c/0x258 [ 77.157098][ T6488] do_el0_svc+0x5c/0x134 [ 77.157831][ T6488] el0_svc+0x58/0x128 [ 77.158531][ T6488] el0t_64_sync_handler+0x84/0xf0 [ 77.159418][ T6488] el0t_64_sync+0x18c/0x190 [ 77.168560][ T6494] netlink: 168 bytes leftover after parsing attributes in process `syz.6.553'. [ 77.168847][ T6495] FAULT_INJECTION: forcing a failure. [ 77.168847][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 77.175474][ T6495] CPU: 0 PID: 6495 Comm: syz.2.552 Not tainted syzkaller #0 [ 77.176957][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.178935][ T6495] Call trace: [ 77.179541][ T6495] dump_backtrace+0x1c4/0x1f0 [ 77.180438][ T6495] show_stack+0x2c/0x3c [ 77.181155][ T6495] __dump_stack+0x30/0x40 [ 77.181931][ T6495] dump_stack_lvl+0xf4/0x15c [ 77.182755][ T6495] dump_stack+0x1c/0x5c [ 77.183465][ T6495] should_fail_ex+0x3cc/0x524 [ 77.184447][ T6495] __should_failslab+0xc0/0x11c [ 77.185402][ T6495] should_failslab+0x10/0x28 [ 77.186307][ T6495] __kmem_cache_alloc_node+0x7c/0x318 [ 77.187351][ T6495] kmalloc_trace+0x48/0x94 [ 77.188227][ T6495] snd_midi_event_new+0x7c/0x1d4 [ 77.189185][ T6495] snd_virmidi_input_open+0xe4/0x350 [ 77.190313][ T6495] open_substream+0x310/0x618 [ 77.191258][ T6495] rawmidi_open_priv+0x8c/0x574 [ 77.192239][ T6495] snd_rawmidi_open+0x348/0x8b0 [ 77.193215][ T6495] soundcore_open+0x2f8/0x47c [ 77.194067][ T6495] chrdev_open+0x3d0/0x51c [ 77.194876][ T6495] do_dentry_open+0x738/0xf8c [ 77.195692][ T6495] vfs_open+0x7c/0x90 [ 77.196410][ T6495] path_openat+0x1fc0/0x27a0 [ 77.197237][ T6495] do_filp_open+0x198/0x38c [ 77.198013][ T6495] do_sys_openat2+0x134/0x3fc [ 77.198813][ T6495] __arm64_sys_openat+0x11c/0x150 [ 77.199679][ T6495] invoke_syscall+0x98/0x290 [ 77.200483][ T6495] el0_svc_common+0x13c/0x258 [ 77.201363][ T6495] do_el0_svc+0x5c/0x134 [ 77.202156][ T6495] el0_svc+0x58/0x128 [ 77.202863][ T6495] el0t_64_sync_handler+0x84/0xf0 [ 77.203793][ T6495] el0t_64_sync+0x18c/0x190 [ 77.204656][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.288660][ T6509] binder: 6508:6509 tried to acquire reference to desc 0, got 1 instead [ 77.291068][ T6509] binder: 6508:6509 got transaction with too large buffer [ 77.293852][ T6509] binder: 6508:6509 transaction call to 6508:0 failed 43/29201/-22, size 120-24 line 3521 [ 77.296518][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.556886][ T6541] loop2: detected capacity change from 0 to 256 [ 77.848409][ T6568] FAULT_INJECTION: forcing a failure. [ 77.848409][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 77.860902][ T6568] CPU: 1 PID: 6568 Comm: syz.0.565 Not tainted syzkaller #0 [ 77.862240][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.864184][ T6568] Call trace: [ 77.864768][ T6568] dump_backtrace+0x1c4/0x1f0 [ 77.865625][ T6568] show_stack+0x2c/0x3c [ 77.866384][ T6568] __dump_stack+0x30/0x40 [ 77.867187][ T6568] dump_stack_lvl+0xf4/0x15c [ 77.868032][ T6568] dump_stack+0x1c/0x5c [ 77.868797][ T6568] should_fail_ex+0x3cc/0x524 [ 77.869655][ T6568] __should_failslab+0xc0/0x11c [ 77.870551][ T6568] should_failslab+0x10/0x28 [ 77.871435][ T6568] kmem_cache_alloc+0x88/0x310 [ 77.872325][ T6568] __alloc_file+0x30/0x234 [ 77.873166][ T6568] alloc_empty_file+0xa0/0x184 [ 77.874049][ T6568] dentry_open+0x60/0x130 [ 77.874800][ T6568] __arm64_sys_fsmount+0x6a0/0x8c4 [ 77.875631][ T6568] invoke_syscall+0x98/0x290 [ 77.876432][ T6568] el0_svc_common+0x13c/0x258 [ 77.877263][ T6568] do_el0_svc+0x5c/0x134 [ 77.878014][ T6568] el0_svc+0x58/0x128 [ 77.878727][ T6568] el0t_64_sync_handler+0x84/0xf0 [ 77.879621][ T6568] el0t_64_sync+0x18c/0x190 [ 78.212807][ T6614] loop6: detected capacity change from 0 to 512 [ 78.216956][ T6614] ext4: Unknown parameter 'dont_hash' [ 78.255812][ T6620] loop3: detected capacity change from 0 to 2048 [ 78.277756][ T6620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.319553][ T6620] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.577: bg 0: block 345: padding at end of block bitmap is not set [ 78.324548][ T6620] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 497 with error 117 [ 78.326857][ T6620] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.326857][ T6620] [ 78.361996][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 78.367125][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.367125][ T39] [ 78.368697][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 78.369734][ T39] EXT4-fs (loop3): Free/Dirty block details [ 78.372853][ T39] EXT4-fs (loop3): free_blocks=0 [ 78.373617][ T39] EXT4-fs (loop3): dirty_blocks=16 [ 78.374428][ T39] EXT4-fs (loop3): Block reservation details [ 79.205341][ T6657] binder: 6655:6657 tried to acquire reference to desc 0, got 1 instead [ 79.207435][ T6657] binder: 6655:6657 got transaction with invalid offset (48, min 48 max 72) or object. [ 79.209692][ T6657] binder: 6655:6657 transaction call to 6655:0 failed 48/29201/-22, size 72-24 line 3363 [ 79.212103][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.235820][ T6660] loop6: detected capacity change from 0 to 128 [ 79.307582][ T6669] binder: 6668:6669 ioctl c0306201 20000080 returned -14 [ 79.322703][ T6669] binder: 6668:6669 tried to acquire reference to desc 0, got 1 instead [ 79.324226][ T6669] binder: 6668:6669 ioctl c0306201 200003c0 returned -14 [ 79.330425][ T5436] binder: release 6668:6669 transaction 57 out, still active [ 79.331703][ T5436] binder: undelivered TRANSACTION_COMPLETE [ 79.341473][ T5436] binder: send failed reply for transaction 57, target dead [ 79.359075][ T6672] loop0: detected capacity change from 0 to 4095 [ 79.396038][ T6672] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 79.397963][ T6672] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 79.399704][ T6672] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 79.401093][ T6672] loop0: [ 79.742236][ T6685] ip_tables: iptables: counters copy to user failed while replacing table [ 80.412327][ T4341] Bluetooth: hci1: command 0x2016 tx timeout [ 80.842923][ T6703] overlayfs: failed to clone upperpath [ 80.849252][ T6705] loop2: detected capacity change from 0 to 128 [ 81.019604][ T6722] overlayfs: failed to clone upperpath [ 81.318363][ T6743] FAULT_INJECTION: forcing a failure. [ 81.318363][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 81.320651][ T6743] CPU: 1 PID: 6743 Comm: syz.3.614 Not tainted syzkaller #0 [ 81.321847][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.323517][ T6743] Call trace: [ 81.324085][ T6743] dump_backtrace+0x1c4/0x1f0 [ 81.324671][ T6741] netlink: 'syz.6.615': attribute type 10 has an invalid length. [ 81.324910][ T6743] show_stack+0x2c/0x3c [ 81.327045][ T6743] __dump_stack+0x30/0x40 [ 81.327358][ T6741] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 81.327804][ T6743] dump_stack_lvl+0xf4/0x15c [ 81.330126][ T6743] dump_stack+0x1c/0x5c [ 81.330837][ T6743] should_fail_ex+0x3cc/0x524 [ 81.331635][ T6743] __should_failslab+0xc0/0x11c [ 81.332467][ T6743] should_failslab+0x10/0x28 [ 81.333268][ T6743] __kmem_cache_alloc_node+0x7c/0x318 [ 81.334207][ T6743] __kmalloc_node+0xc8/0x184 [ 81.335016][ T6743] memcg_alloc_slab_cgroups+0x90/0x164 [ 81.335982][ T6743] slab_post_alloc_hook+0xc0/0x430 [ 81.336869][ T6743] kmem_cache_alloc_node+0x258/0x344 [ 81.337799][ T6743] __alloc_skb+0x128/0x728 [ 81.338586][ T6743] alloc_skb_with_frags+0xa8/0x598 [ 81.339487][ T6743] sock_alloc_send_pskb+0x784/0x898 [ 81.340393][ T6743] unix_dgram_sendmsg+0x450/0x13e4 [ 81.341291][ T6743] unix_seqpacket_sendmsg+0x108/0x1cc [ 81.342239][ T6743] sock_write_iter+0x268/0x368 [ 81.343097][ T6743] vfs_write+0x3c8/0x7c8 [ 81.343852][ T6743] ksys_write+0x12c/0x228 [ 81.344624][ T6743] __arm64_sys_write+0x7c/0x90 [ 81.345460][ T6743] invoke_syscall+0x98/0x290 [ 81.346295][ T6743] el0_svc_common+0x13c/0x258 [ 81.347106][ T6743] do_el0_svc+0x5c/0x134 [ 81.347858][ T6743] el0_svc+0x58/0x128 [ 81.347916][ T6741] netlink: 'syz.6.615': attribute type 11 has an invalid length. [ 81.348534][ T6743] el0t_64_sync_handler+0x84/0xf0 [ 81.350702][ T6743] el0t_64_sync+0x18c/0x190 [ 81.690196][ T6765] loop6: detected capacity change from 0 to 512 [ 81.698816][ T6763] tipc: Enabled bearer , priority 0 [ 81.744007][ T6765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 81.755677][ T6765] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.626: corrupted inode contents [ 81.765270][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.766427][ T6765] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.626: mark_inode_dirty error [ 81.768605][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.770208][ T6765] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.626: corrupted inode contents [ 81.779723][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.786427][ T6765] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.626: corrupted inode contents [ 81.789676][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.790741][ T6765] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.626: mark_inode_dirty error [ 81.793333][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.794450][ T6765] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.626: corrupted inode contents [ 81.801573][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.803142][ T6765] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.626: mark_inode_dirty error [ 81.808859][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.810163][ T6765] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.626: corrupted inode contents [ 81.815719][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.816929][ T6765] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.626: mark_inode_dirty error [ 81.819380][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 81.889353][ T6765] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.626: Invalid inode bitmap blk 2908739610 in block_group 0 [ 82.277331][ T6755] loop2: detected capacity change from 0 to 131072 [ 82.280169][ T6755] F2FS-fs (loop2): invalid crc value [ 82.297687][ T6755] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.315314][ T6755] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 82.320975][ T6755] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 82.340814][ T6805] input: syz1 as /devices/virtual/input/input4 [ 82.783102][ T6775] loop3: detected capacity change from 0 to 131072 [ 82.794596][ T6775] F2FS-fs (loop3): Test dummy encryption mode enabled [ 82.806557][ T6775] F2FS-fs (loop3): invalid crc value [ 82.838866][ T6775] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.852993][ T6775] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 82.871385][ T6775] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 82.881582][ T6775] F2FS-fs (loop3): Start checkpoint disabled! [ 83.247873][ T6775] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 83.421115][ T39] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 83.853896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.001675][ T6932] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 84.005529][ T6932] netlink: 'syz.0.660': attribute type 2 has an invalid length. [ 84.779610][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.668'. [ 84.818339][ T6973] loop0: detected capacity change from 0 to 512 [ 84.820495][ T6973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.824490][ T6973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.828919][ T6973] EXT4-fs (loop0): 1 truncate cleaned up [ 84.830261][ T6973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.918232][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 85.559439][ T7016] loop6: detected capacity change from 0 to 512 [ 85.582507][ T7016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.584626][ T7016] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 85.598048][ T7016] EXT4-fs (loop6): 1 truncate cleaned up [ 85.599152][ T7016] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 86.036691][ T5579] EXT4-fs (loop6): unmounting filesystem. [ 86.181395][ T7031] loop2: detected capacity change from 0 to 32768 [ 86.189443][ T7031] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.687 (7031) [ 86.206599][ T7031] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 86.208469][ T7031] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.220382][ T7031] BTRFS info (device loop2): using free space tree [ 86.305263][ T7031] BTRFS info (device loop2): enabling ssd optimizations [ 86.572862][ T4337] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 86.983474][ T7112] loop6: detected capacity change from 0 to 1024 [ 87.023404][ T7112] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 87.158154][ T7112] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 87.194705][ T7112] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #15: comm syz.6.705: mark_inode_dirty error [ 87.205723][ T7112] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 87.217502][ T7112] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #15: comm syz.6.705: mark_inode_dirty error [ 87.227964][ T7112] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 87.258188][ T7112] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.705: mark_inode_dirty error [ 87.266028][ T7112] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 87.268597][ T7112] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.268597][ T7112] [ 87.307427][ T5579] EXT4-fs (loop6): unmounting filesystem. [ 87.556542][ T7154] device syzkaller0 entered promiscuous mode [ 87.646138][ T7156] loop2: detected capacity change from 0 to 2048 [ 87.684566][ T7156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.822597][ T7156] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.716: Invalid inode table block 8700909665223251601 in block_group 0 [ 87.842603][ T7156] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.716: Invalid inode table block 8700909665223251601 in block_group 0 [ 87.863252][ T7156] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 87.865889][ T7156] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.716: mark_inode_dirty error [ 87.897280][ T7199] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm kworker/u4:74: Invalid inode table block 8700909665223251601 in block_group 0 [ 87.901572][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 87.913625][ T7160] nvme_fabrics: missing parameter 'nqn=%s' [ 87.931331][ T7211] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 88.412376][ T4341] Bluetooth: hci1: command 0x0405 tx timeout [ 88.503317][ T4331] Bluetooth: hci2: command 0x2016 tx timeout [ 88.915254][ T7239] device syzkaller0 entered promiscuous mode [ 88.919724][ T7239] tipc: Enabled bearer , priority 0 [ 89.017872][ T7250] loop2: detected capacity change from 0 to 2048 [ 89.046299][ T7250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.071097][ T7250] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 89.074428][ T7250] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #15: comm syz.2.735: mark_inode_dirty error [ 89.076857][ T7250] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 1803188595: comm syz.2.735: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 89.081412][ T7250] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.086281][ T7250] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.086281][ T7250] [ 89.097499][ T7182] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm kworker/u4:57: Invalid block bitmap block 2 in block_group 0 [ 89.103736][ T7182] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 89.106035][ T7182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.106035][ T7182] [ 89.107655][ T7182] EXT4-fs (loop2): Total free blocks count 0 [ 89.108650][ T7182] EXT4-fs (loop2): Free/Dirty block details [ 89.109682][ T7182] EXT4-fs (loop2): free_blocks=0 [ 89.110521][ T7182] EXT4-fs (loop2): dirty_blocks=32 [ 89.111394][ T7182] EXT4-fs (loop2): Block reservation details [ 89.416461][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 89.664474][ T7294] xt_hashlimit: max too large, truncated to 1048576 [ 89.914774][ T7314] input: syz1 as /devices/virtual/input/input5 [ 90.004508][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.067842][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.121958][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.218713][ T7329] device syzkaller0 left promiscuous mode [ 90.249493][ T7331] loop3: detected capacity change from 0 to 2048 [ 90.273755][ T7331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.321567][ T7331] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.751: Invalid inode table block 8700909665223251601 in block_group 0 [ 90.341208][ T7331] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.751: Invalid inode table block 8700909665223251601 in block_group 0 [ 90.346575][ T7331] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 90.348408][ T7331] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.751: mark_inode_dirty error [ 90.368525][ T7199] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:74: Invalid inode table block 8700909665223251601 in block_group 0 [ 90.385687][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 90.448189][ T7335] loop3: detected capacity change from 0 to 8192 [ 90.453743][ T7335] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.456134][ T7335] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 90.457731][ T7335] REISERFS (device loop3): using ordered data mode [ 90.458917][ T7335] reiserfs: using flush barriers [ 90.461474][ T7335] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.465612][ T7335] REISERFS (device loop3): checking transaction log (loop3) [ 90.499797][ T7335] REISERFS (device loop3): Using tea hash to sort names [ 90.502153][ T7335] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 90.512531][ T7335] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 91.318105][ T7396] overlayfs: failed to clone upperpath [ 91.339836][ T7398] loop0: detected capacity change from 0 to 1024 [ 91.395490][ T7398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.477479][ T7398] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 91.481462][ T7398] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.763: mark_inode_dirty error [ 91.485232][ T7398] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 91.487216][ T7398] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.763: mark_inode_dirty error [ 91.489485][ T7398] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 91.494913][ T7398] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.763: mark_inode_dirty error [ 91.497476][ T7398] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 91.500915][ T7398] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.500915][ T7398] [ 91.525820][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 91.631594][ T7424] binder: 7421:7424 tried to acquire reference to desc 0, got 1 instead [ 91.637668][ T7424] binder: 7421:7424 got transaction with invalid offset (48, min 0 max 1792) or object. [ 91.639622][ T7424] binder: 7421:7424 transaction call to 7421:0 failed 62/29201/-22, size 1792-4120 line 3363 [ 91.647245][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.827557][ T7420] netlink: 'syz.0.773': attribute type 15 has an invalid length. [ 91.829107][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 91.844559][ T7420] netlink: 'syz.0.773': attribute type 4 has an invalid length. [ 91.993149][ T7448] loop6: detected capacity change from 0 to 1024 [ 92.319596][ T7463] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 92.339724][ T7465] binder: 7464:7465 tried to acquire reference to desc 0, got 1 instead [ 92.341915][ T7465] binder: 7464:7465 got transaction with invalid offsets ptr [ 92.343658][ T7465] binder: 7464:7465 transaction call to 7464:0 failed 67/29201/-22, size 120-24 line 3593 [ 92.345745][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.420041][ T7199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.444661][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 92.474932][ T7469] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 92.477102][ T7469] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 93.276228][ T7477] netlink: 'syz.4.793': attribute type 15 has an invalid length. [ 93.277564][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'. [ 93.281032][ T7477] netlink: 'syz.4.793': attribute type 4 has an invalid length. [ 95.292380][ T7460] block2mtd: error: cannot open device ./dev/loop0 [ 95.312180][ T7491] 9pnet_fd: Insufficient options for proto=fd [ 95.316688][ T7492] binder: 7489:7492 tried to acquire reference to desc 0, got 1 instead [ 95.318602][ T7492] binder: 7489:7492 got transaction with out-of-order buffer fixup [ 95.320199][ T7492] binder: 7492:7489 failed to fixup parent [ 95.321247][ T7492] binder: 7489:7492 transaction call to 7489:0 failed 72/29201/-22, size 120-24 line 3557 [ 95.323921][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.417631][ T4377] kernel write not supported for file [eventfd] (pid: 4377 comm: kworker/0:5) [ 95.877439][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.879984][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.249639][ T7530] binder: 7529:7530 tried to acquire reference to desc 0, got 1 instead [ 96.252187][ T7530] binder: 7529:7530 got transaction with invalid offset (36, min 0 max 112) or object. [ 96.254510][ T7530] binder: 7529:7530 transaction call to 7529:0 failed 77/29201/-22, size 112-24 line 3363 [ 96.256737][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.501979][ T7541] FAULT_INJECTION: forcing a failure. [ 96.501979][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.504652][ T7541] CPU: 0 PID: 7541 Comm: syz.2.822 Not tainted syzkaller #0 [ 96.505907][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 96.507810][ T7541] Call trace: [ 96.508442][ T7541] dump_backtrace+0x1c4/0x1f0 [ 96.509347][ T7541] show_stack+0x2c/0x3c [ 96.510147][ T7541] __dump_stack+0x30/0x40 [ 96.510945][ T7541] dump_stack_lvl+0xf4/0x15c [ 96.511782][ T7541] dump_stack+0x1c/0x5c [ 96.512542][ T7541] should_fail_ex+0x3cc/0x524 [ 96.513392][ T7541] should_fail+0x14/0x24 [ 96.514173][ T7541] should_fail_usercopy+0x20/0x30 [ 96.515102][ T7541] do_notify_resume+0x1194/0x2c84 [ 96.516038][ T7541] el0_svc+0x98/0x128 [ 96.516755][ T7541] el0t_64_sync_handler+0x84/0xf0 [ 96.517655][ T7541] el0t_64_sync+0x18c/0x190 [ 96.617530][ T7549] loop3: detected capacity change from 0 to 4096 [ 96.685518][ T7551] loop2: detected capacity change from 0 to 164 [ 96.899399][ T7558] overlayfs: failed to clone upperpath [ 96.904039][ T7558] overlayfs: failed to clone upperpath [ 96.918096][ T7549] ntfs3: loop3: mft corrupted [ 97.002712][ T7556] loop2: detected capacity change from 0 to 32768 [ 97.011401][ T7556] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 97.049831][ T5233] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 97.188116][ T7571] loop0: detected capacity change from 0 to 256 [ 97.421598][ T7582] device bond2 entered promiscuous mode [ 98.058625][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.060629][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.190799][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 98.209249][ T7611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.239586][ T7611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.240880][ T7611] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 98.249803][ T7611] bond1: (slave gre1): Error -95 calling set_mac_address [ 98.280426][ T7613] device macvlan2 entered promiscuous mode [ 98.281629][ T7613] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 98.357278][ T7615] loop0: detected capacity change from 0 to 512 [ 98.379679][ T7615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.409152][ T7615] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.850: invalid indirect mapped block 32768 (level 2) [ 98.411862][ T7615] EXT4-fs (loop0): Remounting filesystem read-only [ 98.427173][ T7615] EXT4-fs (loop0): 1 orphan inode deleted [ 98.428100][ T7615] EXT4-fs (loop0): 1 truncate cleaned up [ 98.429115][ T7615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.476619][ T7615] EXT4-fs error (device loop0): ext4_lookup:1860: inode #15: comm syz.0.850: iget: bad extra_isize 46 (inode size 256) [ 98.487744][ T7615] EXT4-fs (loop0): Remounting filesystem read-only [ 98.493840][ T7615] EXT4-fs error (device loop0): ext4_nfs_get_inode:1512: inode #15: comm syz.0.850: iget: bad extra_isize 46 (inode size 256) [ 98.501677][ T7615] EXT4-fs (loop0): Remounting filesystem read-only [ 98.510182][ T7605] loop3: detected capacity change from 0 to 131072 [ 98.514558][ T7605] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 98.515919][ T7605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 98.517576][ T7605] F2FS-fs (loop3): Test dummy encryption mode enabled [ 98.519260][ T7605] F2FS-fs (loop3): invalid crc value [ 98.548449][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 98.567512][ T7605] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.577690][ T7605] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 98.586523][ T7605] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 98.589708][ T7605] F2FS-fs (loop3): Start checkpoint disabled! [ 98.614247][ T7605] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 98.615822][ T7605] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 98.643855][ T7628] loop2: detected capacity change from 0 to 8192 [ 98.734500][ T7640] overlayfs: failed to clone upperpath [ 99.756390][ T7676] binder: 7674:7676 tried to acquire reference to desc 0, got 1 instead [ 99.764611][ T7676] binder: 7674:7676 got transaction with invalid offsets ptr [ 99.766161][ T7676] binder: 7674:7676 transaction async to 7674:0 failed 82/29201/-22, size 104-24 line 3593 [ 99.769360][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.849250][ T7682] loop2: detected capacity change from 0 to 4096 [ 99.907438][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 99.910982][ T7688] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.912761][ T7688] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.914333][ T7688] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.915783][ T7688] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.925016][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 99.963513][ T7690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.973662][ T7690] bond3: (slave ip6erspan0): making interface the new active one [ 99.976137][ T7690] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 99.978151][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 100.866004][ T7737] FAULT_INJECTION: forcing a failure. [ 100.866004][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 100.875546][ T7737] CPU: 1 PID: 7737 Comm: syz.2.890 Not tainted syzkaller #0 [ 100.876863][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 100.878549][ T7737] Call trace: [ 100.879116][ T7737] dump_backtrace+0x1c4/0x1f0 [ 100.879918][ T7737] show_stack+0x2c/0x3c [ 100.880612][ T7737] __dump_stack+0x30/0x40 [ 100.881343][ T7737] dump_stack_lvl+0xf4/0x15c [ 100.882152][ T7737] dump_stack+0x1c/0x5c [ 100.882913][ T7737] should_fail_ex+0x3cc/0x524 [ 100.883779][ T7737] __should_failslab+0xc0/0x11c [ 100.884680][ T7737] should_failslab+0x10/0x28 [ 100.885535][ T7737] __kmem_cache_alloc_node+0x7c/0x318 [ 100.886494][ T7737] kmalloc_trace+0x48/0x94 [ 100.887280][ T7737] snd_seq_oss_writeq_new+0xcc/0x2dc [ 100.888227][ T7737] snd_seq_oss_open+0x6bc/0xca4 [ 100.889114][ T7737] odev_open+0x84/0xbc [ 100.889986][ T7737] soundcore_open+0x2f8/0x47c [ 100.890945][ T7737] chrdev_open+0x3d0/0x51c [ 100.891885][ T7737] do_dentry_open+0x738/0xf8c [ 100.892915][ T7737] vfs_open+0x7c/0x90 [ 100.893727][ T7737] path_openat+0x1fc0/0x27a0 [ 100.894724][ T7737] do_filp_open+0x198/0x38c [ 100.895675][ T7737] do_sys_openat2+0x134/0x3fc [ 100.896652][ T7737] __arm64_sys_openat+0x11c/0x150 [ 100.897721][ T7737] invoke_syscall+0x98/0x290 [ 100.898632][ T7737] el0_svc_common+0x13c/0x258 [ 100.899546][ T7737] do_el0_svc+0x5c/0x134 [ 100.900382][ T7737] el0_svc+0x58/0x128 [ 100.901163][ T7737] el0t_64_sync_handler+0x84/0xf0 [ 100.902180][ T7737] el0t_64_sync+0x18c/0x190 [ 100.918313][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 100.938191][ T7744] loop2: detected capacity change from 0 to 512 [ 100.941613][ T7744] EXT4-fs: Ignoring removed bh option [ 100.947218][ T7744] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.957037][ T7744] EXT4-fs (loop2): 1 truncate cleaned up [ 100.958024][ T7744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.990587][ T7744] EXT4-fs error (device loop2): __ext4_new_inode:1083: comm syz.2.892: reserved inode found cleared - inode=3 [ 101.033377][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 101.054391][ T4341] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 101.055933][ T4341] Bluetooth: hci3: Injecting HCI hardware error event [ 101.059900][ T4331] Bluetooth: hci3: hardware error 0x00 [ 101.880992][ T7758] netlink: 'syz.0.897': attribute type 39 has an invalid length. [ 102.338548][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 102.795923][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'. [ 102.824334][ T7811] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 102.836387][ T7811] team0: Port device netdevsim0 added [ 102.963685][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.965342][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.971286][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.974522][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.977929][ T7829] netlink: 14 bytes leftover after parsing attributes in process `syz.2.922'. [ 103.104189][ T7829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.146199][ T7829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.183529][ T7829] bond0 (unregistering): Released all slaves [ 103.186603][ T7832] loop0: detected capacity change from 0 to 65536 [ 103.216920][ T7832] XFS (loop0): Mounting V5 Filesystem [ 103.249107][ T7832] XFS (loop0): Ending clean mount [ 103.251564][ T7832] XFS (loop0): Quotacheck needed: Please wait. [ 103.258789][ T4380] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x160/0x234, xfs_agi block 0x8002 [ 103.261227][ T4380] XFS (loop0): Unmount and run xfs_repair [ 103.262185][ T4380] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 103.264378][ T4380] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 103.265933][ T4380] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 103.267490][ T4380] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 103.268963][ T4380] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 103.270471][ T4380] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 103.284106][ T7182] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x6 [ 103.286861][ T7182] XFS (loop0): Unmount and run xfs_repair [ 103.287958][ T4380] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 103.287968][ T7849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.927'. [ 103.290941][ T4380] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 103.293334][ T7182] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 103.294691][ T7182] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 103.296287][ T7182] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 103.304166][ T4380] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 103.305807][ T7182] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 103.305868][ T7173] XFS (loop0): metadata I/O error in "xfs_read_agi+0x24c/0x66c" at daddr 0x8002 len 1 error 74 [ 103.307388][ T7182] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 103.317010][ T7182] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 103.318433][ T7182] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 103.319909][ T7182] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.329680][ T7182] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.331422][ T7182] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x6 len 2 error 74 [ 103.337189][ T7832] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 103.374679][ T4382] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x6 [ 103.376757][ T4382] XFS (loop0): Unmount and run xfs_repair [ 103.377818][ T4382] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 103.379241][ T4382] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 103.380662][ T4382] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 103.384345][ T4382] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 103.385842][ T4382] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 103.387328][ T4382] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 103.388831][ T4382] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 103.402524][ T4382] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.404372][ T4382] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.422243][ T7832] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x6 len 2 error 74 [ 103.436948][ T7832] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x584/0xae8 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 103.439724][ T7832] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 103.445681][ T7857] overlayfs: failed to clone upperpath [ 103.460881][ T4335] XFS (loop0): Unmounting Filesystem [ 103.505100][ T7860] overlayfs: failed to clone upperpath [ 103.506944][ T7860] overlayfs: failed to clone upperpath [ 103.615828][ T7870] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 103.670827][ T7872] loop3: detected capacity change from 0 to 1024 [ 103.672555][ T7872] EXT4-fs: Ignoring removed bh option [ 103.683852][ T7872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.787859][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 103.880020][ T7886] overlayfs: statfs failed on './file0' [ 103.924498][ T7888] loop0: detected capacity change from 0 to 512 [ 103.929446][ T7879] loop2: detected capacity change from 0 to 32768 [ 103.931958][ T7890] loop3: detected capacity change from 0 to 1024 [ 103.935607][ T7879] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.938 (7879) [ 103.944598][ T7890] hfsplus: invalid length 32517 has been corrected to 255 [ 103.948955][ T7879] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.951111][ T7879] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 103.955485][ T7879] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 103.958246][ T5233] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.962155][ T7879] BTRFS info (device loop2): use zstd compression, level 3 [ 103.965932][ T7879] BTRFS info (device loop2): using free space tree [ 104.012627][ T4331] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 104.047455][ T7879] BTRFS info (device loop2): enabling ssd optimizations [ 104.117081][ T7199] hfsplus: b-tree write err: -5, ino 4 [ 104.118506][ T7199] hfsplus: b-tree write err: -5, ino 2 [ 104.120839][ T7199] hfsplus: b-tree write err: -5, ino 25 [ 104.201868][ T4337] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.218772][ T7917] binder: 7916:7917 tried to acquire reference to desc 0, got 1 instead [ 104.224377][ T7917] binder: 7916:7917 got transaction with invalid parent offset [ 104.225790][ T7917] binder: 7917:7916 failed to fixup parent [ 104.229711][ T7917] binder: 7916:7917 transaction call to 7916:0 failed 88/29201/-22, size 120-24 line 3557 [ 104.232504][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.332390][ T4331] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.334176][ T4331] Bluetooth: hci0: Injecting HCI hardware error event [ 104.337554][ T4341] Bluetooth: hci0: hardware error 0x00 [ 104.583354][ T4331] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 104.585423][ T4331] Bluetooth: hci4: Injecting HCI hardware error event [ 104.589919][ T4331] Bluetooth: hci4: hardware error 0x00 [ 105.060511][ T7956] device-mapper: ioctl: Invalid target message parameters. [ 105.163266][ T7954] loop2: detected capacity change from 0 to 40427 [ 105.175840][ T7954] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 105.180048][ T7954] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.188277][ T7954] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.216206][ T7954] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.217759][ T7954] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.354632][ T7973] overlayfs: failed to clone upperpath [ 105.659240][ T7954] syz.2.963: attempt to access beyond end of device [ 105.659240][ T7954] loop2: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 106.178828][ T8010] binder: 8009:8010 tried to acquire reference to desc 0, got 1 instead [ 106.180819][ T8010] binder: 8009:8010 got transaction with invalid parent offset [ 106.182132][ T8010] binder: 8010:8009 failed to fixup parent [ 106.184099][ T8010] binder: 8009:8010 transaction call to 8009:0 failed 93/29201/-22, size 120-24 line 3557 [ 106.187169][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.264805][ T8019] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 106.272707][ T8019] team0: Port device dummy0 added [ 106.460368][ T8035] loop0: detected capacity change from 0 to 256 [ 106.470059][ T8035] exfat: Unknown parameter '9Ò$IHnÉú?S:NÿÎï\þçüÎsæý<Ïzf½{×Úïžwæû]{ïgæÛ®#j7­S£1Á¿ý’' [ 106.612432][ T8048] Bluetooth: MGMT ver 1.22 [ 106.812380][ T4341] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.972533][ T4331] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 107.244950][ T4341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.248639][ T4341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.250496][ T4341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.253460][ T4341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.256036][ T4341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.257325][ T4341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.414827][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 107.490054][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.492596][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.496144][ T8056] device bridge_slave_0 entered promiscuous mode [ 107.498056][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1007'. [ 107.504380][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'. [ 107.511257][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.528340][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.532049][ T8056] device bridge_slave_1 entered promiscuous mode [ 107.580740][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.594960][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1007'. [ 107.600849][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.688908][ T8056] team0: Port device team_slave_0 added [ 107.693539][ C1] ------------[ cut here ]------------ [ 107.694605][ C1] WARNING: CPU: 1 PID: 8056 at net/core/flow_dissector.c:1027 __skb_flow_dissect+0x91c/0x5898 [ 107.696243][ C1] Modules linked in: [ 107.696902][ C1] CPU: 1 PID: 8056 Comm: syz-executor Not tainted syzkaller #0 [ 107.698120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 107.699695][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 107.701018][ C1] pc : __skb_flow_dissect+0x91c/0x5898 [ 107.701958][ C1] lr : __skb_flow_dissect+0x91c/0x5898 [ 107.702917][ C1] sp : ffff800008016840 [ 107.703645][ C1] x29: ffff800008016df0 x28: ffff0000f6d7a8b4 x27: 0000000000000002 [ 107.705068][ C1] x26: ffff800008016b70 x25: dfff800000000000 x24: 0000000000000000 [ 107.706451][ C1] x23: 1ffff00002a78a3c x22: 1ffff00002a78a3c x21: ffff8000153c51dc [ 107.707867][ C1] x20: 0000000000000000 x19: ffff700001002d38 x18: 0000000036fcddac [ 107.709271][ C1] x17: dfff800000000000 x16: ffff800011bb65f8 x15: ffff800018508000 [ 107.710668][ C1] x14: 000000000000000a x13: 1ffff00002a78071 x12: 0000000042cf841a [ 107.712072][ C1] x11: ff0080000fef3378 x10: 0000000000000000 x9 : ffff80000fef3378 [ 107.713488][ C1] x8 : ffff0000d93b0000 x7 : ffff80000fefa1b0 x6 : 0000000000000000 [ 107.714864][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 107.716272][ C1] x2 : 0000000000000008 x1 : ffff800012212780 x0 : 0000000000000001 [ 107.717666][ C1] Call trace: [ 107.718232][ C1] __skb_flow_dissect+0x91c/0x5898 [ 107.719126][ C1] ___skb_get_hash+0x7c/0x5e0 [ 107.719944][ C1] __skb_get_hash+0xb8/0x22c [ 107.720749][ C1] nft_trace_init+0x190/0x36c [ 107.721553][ C1] nft_do_chain+0x12d4/0x1364 [ 107.722367][ C1] nft_do_chain_ipv4+0x128/0x1e8 [ 107.723245][ C1] nf_hook_slow+0xc8/0x208 [ 107.724033][ C1] nf_hook+0x1d0/0x338 [ 107.724764][ C1] __ip_local_out+0x4b8/0x5fc [ 107.725641][ C1] ip_local_out+0x3c/0x15c [ 107.726428][ C1] iptunnel_xmit+0x3c4/0x860 [ 107.727267][ C1] udp_tunnel_xmit_skb+0x1c0/0x2f0 [ 107.728185][ C1] tipc_udp_xmit+0x70c/0x930 [ 107.728986][ C1] tipc_udp_send_msg+0x214/0x36c [ 107.729835][ C1] tipc_bearer_xmit_skb+0x240/0x380 [ 107.730762][ C1] tipc_disc_timeout+0x4e8/0x630 [ 107.731642][ C1] call_timer_fn+0x1b8/0x96c [ 107.732462][ C1] __run_timers+0x478/0x6d8 [ 107.733262][ C1] run_timer_softirq+0x7c/0x114 [ 107.734125][ C1] handle_softirqs+0x318/0xc90 [ 107.734961][ C1] __do_softirq+0x14/0x20 [ 107.735724][ C1] ____do_softirq+0x14/0x20 [ 107.736549][ C1] call_on_irq_stack+0x30/0x48 [ 107.737376][ C1] do_softirq_own_stack+0x20/0x2c [ 107.738252][ C1] __irq_exit_rcu+0x23c/0x430 [ 107.739071][ C1] irq_exit_rcu+0x14/0x84 [ 107.739814][ C1] el1_interrupt+0x38/0x54 [ 107.740563][ C1] el1h_64_irq_handler+0x18/0x24 [ 107.741398][ C1] el1h_64_irq+0x64/0x68 [ 107.742098][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 107.743023][ C1] skb_dequeue+0x108/0x144 [ 107.743787][ C1] unix_release_sock+0x7c8/0xc38 [ 107.744606][ C1] unix_release+0x98/0xd0 [ 107.745351][ C1] sock_close+0xac/0x1ec [ 107.746085][ C1] __fput+0x1b4/0x7b0 [ 107.746775][ C1] ____fput+0x20/0x30 [ 107.747483][ C1] task_work_run+0x1f4/0x280 [ 107.748292][ C1] do_notify_resume+0x20f8/0x2c84 [ 107.749154][ C1] el0_svc+0x98/0x128 [ 107.749850][ C1] el0t_64_sync_handler+0x84/0xf0 [ 107.750711][ C1] el0t_64_sync+0x18c/0x190 [ 107.751488][ C1] irq event stamp: 33125 [ 107.752214][ C1] hardirqs last enabled at (33124): [] exit_to_kernel_mode+0xcc/0xfc [ 107.753887][ C1] hardirqs last disabled at (33125): [] el1_dbg+0x24/0x80 [ 107.755349][ C1] softirqs last enabled at (33082): [] unix_release_sock+0x3ac/0xc38 [ 107.756977][ C1] softirqs last disabled at (33089): [] __do_softirq+0x14/0x20 [ 107.758535][ C1] ---[ end trace 0000000000000000 ]--- [ 107.766694][ T8085] netlink: 'syz.0.1009': attribute type 4 has an invalid length. [ 107.865193][ T8056] team0: Port device team_slave_1 added [ 107.919394][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.920787][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.929305][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.933252][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.934387][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.938455][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.964681][ T8056] device hsr_slave_0 entered promiscuous mode [ 108.003065][ T8056] device hsr_slave_1 entered promiscuous mode [ 108.046105][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.047720][ T8056] Cannot create hsr debugfs directory [ 108.114543][ T4568] bond0: (slave netdevsim0): Releasing backup interface [ 108.194944][ T8056] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.213903][ T8056] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.253625][ T8056] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.293728][ T8056] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.357208][ T4568] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.363180][ T4568] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.373948][ T4568] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.389188][ T4568] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.398100][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.401878][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.403957][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.406594][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.409151][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.411168][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.413612][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.414902][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.416506][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.433692][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.435528][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.437531][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.438917][ T7183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.441836][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.452753][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.462664][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.466290][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.471756][ T8056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.473853][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.476511][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.478144][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.481147][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.484728][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.486415][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.488184][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.489879][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.491758][ T4568] tipc: Left network mode [ 108.495045][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.555620][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.557959][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.559379][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.785563][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.787413][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.827037][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.828755][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.830511][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.832004][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.837515][ T8056] device veth0_vlan entered promiscuous mode [ 108.845962][ T8056] device veth1_vlan entered promiscuous mode [ 108.853759][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.855500][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.857017][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.860262][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.863247][ T8056] device veth0_macvtap entered promiscuous mode [ 108.897347][ T8056] device veth1_macvtap entered promiscuous mode [ 108.906304][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.907879][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.909538][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.911126][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.913182][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.916646][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.918214][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.919935][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.926219][ T8056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.927855][ T8056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.929549][ T8056] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.931222][ T8056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.992013][ T7166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.993659][ T7166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.995532][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.010228][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.011777][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.084871][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.302485][ T4341] Bluetooth: hci5: command 0x0409 tx timeout [ 110.061314][ T4568] device hsr_slave_0 left promiscuous mode [ 110.105671][ T4568] device hsr_slave_1 left promiscuous mode [ 110.162508][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.165027][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.166581][ T4568] device bridge_slave_1 left promiscuous mode [ 110.167839][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.192875][ T4568] device bridge_slave_0 left promiscuous mode [ 110.194170][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.372360][ T4341] Bluetooth: hci5: command 0x041b tx timeout [ 112.285513][ T4568] team0 (unregistering): Port device team_slave_1 removed [ 112.443335][ T4568] team0 (unregistering): Port device team_slave_0 removed [ 112.613180][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.842984][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.452322][ T4341] Bluetooth: hci5: command 0x040f tx timeout [ 114.363367][ T4568] bond0 (unregistering): Released all slaves [ 115.542556][ T4331] Bluetooth: hci5: command 0x0419 tx timeout