last executing test programs: 37.8582397s ago: executing program 4 (id=1317): write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 34.762567847s ago: executing program 4 (id=1335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0xfffffed4, 0x20}}, 0x20) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x60, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076652568315f746f5f626f0164000000050053"], 0x54}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000b73a8d4369e2b0b714d5bfb201480599206467dda8bb9d000000000000000000001e4abfe5c54caf5a9c3f92d601b2bbbb2f4418bf605ab15f0b5016e629ae6b868c7174f0100020f39f9c263eb7462fe78cf478e628d55e6b8fa54840b783d86d8b3a33343d35bb417188fc969f17", @ANYRES16=r4, @ANYBLOB="00042dbd7000fddbdf257f00000008000300", @ANYRES32=r7, @ANYBLOB="0a00f500505050505050000006004800400000001400550051181c4704e76ab68b5c919accfa8afa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x881) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$bt_hci(r9, 0x0, 0x1, &(0x7f00000004c0)=""/12, &(0x7f0000000500)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r11, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="08000800a9"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x8000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8818}, 0x20048000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 31.676564107s ago: executing program 4 (id=1352): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x3747cdd6243d8d7c) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001400)=""/4092, 0xffc}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r1, 0x2005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000540)="6dd5a5adf9b147c7b948e27138dd56263157a9868349731c4a36e444ce", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000028c0)="f2990e196a67", 0x6}, {&(0x7f0000000400)="1f562a5a1f089a76a744fd73d1aed3655cb6105e5d63692569195e", 0x1b}], 0x2}}], 0x2, 0x48045) close_range(r1, 0xffffffffffffffff, 0x0) 30.454696894s ago: executing program 4 (id=1355): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@jqfmt_vfsold}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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") syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) wait4(0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000880)=ANY=[], 0x200001d0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) splice(r5, 0x0, r4, 0x0, 0x800000000010002, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 29.635801344s ago: executing program 4 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000"], 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000340), &(0x7f0000000380)=ANY=[], 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 28.480311821s ago: executing program 1 (id=1367): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, 0x0, 0x4000000) socket(0x10, 0x803, 0x0) 27.633752126s ago: executing program 4 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) fsopen(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 27.073564313s ago: executing program 32 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) fsopen(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 26.94369149s ago: executing program 1 (id=1372): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) (fail_nth: 2) 26.895808257s ago: executing program 1 (id=1373): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) close(0x4) r2 = socket(0x2, 0x80002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 25.972432049s ago: executing program 1 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde05, 0x8000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r3, 0x838a4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x84, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000030101010000000000000000010000021000158009000100736e6d7000000000"], 0x24}, 0x1, 0x0, 0x0, 0x815}, 0x4004004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r5, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r5, &(0x7f00000008c0)}, 0x20) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000180)='./file0/file0/../file0\x00') umount2(&(0x7f00000002c0)='./file0/file0/../file0\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6b2a01, 0x10) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xe7f89) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) capget(&(0x7f0000000080), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000000009008ac200007a32000000008c96f00f4ab1e936a5000000000000000100000208000b4000000000640004fddc0001800b000100657874686472000024000280080001400000000c08000340000000020805000200070000002c00018008000100636d7000200002800c0003800500010026000000080001400000000208000240000000040900010073797a3000000000140000001100010000000000000000000000000a00"/256], 0x100}}, 0x0) 25.401381028s ago: executing program 1 (id=1383): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@local}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0xfffffe00) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) r1 = getuid() quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000200)={0x1, 0x0, 0x8, 0x80000001, 0x4d2, 0x2, 0x6, 0x7}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 24.232380971s ago: executing program 1 (id=1389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18190001000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x0, 0x2, 0x400, {{0x1d, 0x4, 0x1, 0x5, 0x74, 0x6, 0x0, 0x4, 0x29, 0x0, @loopback, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xea, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x5c, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x4c, 0x87, 0x3, 0x2, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x802}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x1}, {@multicast2, 0x6}, {@empty, 0xcdc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@multicast1, 0x80000001}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0xc}]}, {0x0, [0x30, 0x3e, 0x0, 0x30]}}, &(0x7f0000000680)=""/4096, 0x2a, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r1, r2, 0x5, 0x2, 0x4}, 0x50) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x7fff, 0x0, 0x4, {0xc, @sdr={0x20363059, 0x1}}}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x82) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}]}, 0x24}}, 0xea5bc50b6199d77e) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x16, 0x0, @void}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0x108, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x1800840, &(0x7f0000000780)=ANY=[@ANYBLOB="757466383d312c6e66732c6e6f6e756d7461696c3d302c726f6469722c756e695f786c6174653d302c6e6f6e756d7461696c3d302c696f636861727365743d6d6163677265656b2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c757466383d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c008ee2ca87fdce57fa6ceb1123dd1661bea36aacca4e599f4c06542bf407ce57eed9fea8c624e1a21388228feff453e6e7559c540f7caa676079136e038c77dc18cc6e5656570f4a2cc654b14ed37b66cbf43c6b2c220ab3a0ad085ef3cfba1555912e"], 0x1, 0x360, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r11, 0x0, 0x0) setsockopt$inet6_tcp_buf(r7, 0x29, 0x4e, 0x0, 0xe80167985de45f57) 24.119401256s ago: executing program 33 (id=1389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18190001000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x0, 0x2, 0x400, {{0x1d, 0x4, 0x1, 0x5, 0x74, 0x6, 0x0, 0x4, 0x29, 0x0, @loopback, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xea, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x5c, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x4c, 0x87, 0x3, 0x2, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x802}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x1}, {@multicast2, 0x6}, {@empty, 0xcdc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@multicast1, 0x80000001}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0xc}]}, {0x0, [0x30, 0x3e, 0x0, 0x30]}}, &(0x7f0000000680)=""/4096, 0x2a, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r1, r2, 0x5, 0x2, 0x4}, 0x50) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x7fff, 0x0, 0x4, {0xc, @sdr={0x20363059, 0x1}}}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x82) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}]}, 0x24}}, 0xea5bc50b6199d77e) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x16, 0x0, @void}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0x108, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x1800840, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0x360, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r11, 0x0, 0x0) setsockopt$inet6_tcp_buf(r7, 0x29, 0x4e, 0x0, 0xe80167985de45f57) 5.936574427s ago: executing program 5 (id=1475): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0xb, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x24}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300070e0000000000000000000000020001000000000000000002000000b0030005006c00000002000000e000000100000000000000000100140001000000010015004e204e2200000005ff0100000000000000000000000000010900"/112], 0x70}}, 0x0) dup(r0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}]}]}, {0x0, [0x2e, 0x30, 0x61, 0x2e, 0x5f, 0x5f, 0x0, 0x0]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) connect$rds(r3, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) getpid() 5.935143329s ago: executing program 2 (id=1476): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x80fd, 0x0, 0xfffe}}}}}}}, 0x0) 5.694086413s ago: executing program 2 (id=1478): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x3747cdd6243d8d7c) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001400)=""/4092, 0xffc}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r1, 0x2005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000028c0)="f2990e196a679b77", 0x8}, {0x0}], 0x2}}], 0x1, 0x48045) close_range(r1, 0xffffffffffffffff, 0x0) 5.636663712s ago: executing program 5 (id=1479): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 5.626566596s ago: executing program 5 (id=1480): prlimit64(0x0, 0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x6, 0x8, 0x9, 0x0, 0x5}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.50856016s ago: executing program 3 (id=1483): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) (fail_nth: 2) 4.587334423s ago: executing program 2 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x410008a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r0, 0xd224c000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000000)) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.540457569s ago: executing program 3 (id=1486): write(0xffffffffffffffff, &(0x7f0000000240)="0a7e8ada77a799dece2f1ffa", 0xc) r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "a422c381527d1e63e89dd343e443271a9b91c3e2b6fc7f27726f885386be119d"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) dup3(r5, r4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xf88, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e6e}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x1ff) write$cgroup_devices(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:\x00 rwm\x00'], 0xa) 4.114165512s ago: executing program 5 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0404fb01000000"], 0xd) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x80005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast2, 0x16, 0x4, 'ovf\x00', 0x1, 0x7, 0x72}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xa838, 0xfff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r5 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x0, 0xa, 0x8, &(0x7f0000000040)={0x10, "c1a9389d59abcf123cf359580768f57cd4a976dd5dab9f2a98c7b92dd3b2a333cf"}}) 3.959304673s ago: executing program 0 (id=1489): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0x1, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x207d) acct(&(0x7f0000000040)='./file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x52588107, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r5 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) ftruncate(r5, 0x6000000) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0xa4000061) getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "1280c1a7993aeb6c460bc36396fe9fdc000000000000ff00", "f41af0ab978316a01758909dd254df3fe261fb530f63dedce471c90814830ebc", "9a46cb165a83699432ee5acc6bab59e04a0a996591a8be5ff5eb12143a576911", "856ffce7319432263571fa8b9e59187f3a48bb631ffaf8ee756a3285f3d23aa6", "34203ff2d6abfb7ec6acd7198b7f7e15bb1b751323cdb644bf49c7f833d86bc5", "8b5dbeb337afd02fcb6f58e4", 0x0, 0x0, 0x0, 0x0, 0x6}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x3, {0x1, 0x1000000000000, 0x7, 0x1000000000003, 0x0, 0xfffffff8, {0xfffffffffffffffa, 0x4, 0x7fffffffffffffff, 0x8000000000007, 0xc28d, 0x8000000000000004, 0x4, 0x6, 0x23, 0x2000, 0x248b1, r3, r4, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.900392152s ago: executing program 3 (id=1490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000100000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a30dc420c61abddc1501100010000000000000000000300000a13611b4e01c71b080409a47977c82649bd83b699f0e87f9fa7d5b0251730be56b2bbca434ae661edb8e80dae9a3c04919dfb256cc992698722b92a15cbd986426e109e9ed2155f93abc237e4873980caa959b47d86f0b130f5f7c7fc41442c78a67a204974f1"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000100)={0x1, 0x3ff, {0x54, 0x9, 0x7, {0x4, 0x800}, {0x2, 0x9}, @const={0x9eb, {0x7, 0x41, 0x4}}}, {0x56, 0x0, 0xffff, {0x40, 0x6}, {0x401, 0x9}, @const={0x9, {0x52, 0x8, 0x9, 0x7}}}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x3fffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000550000012dbd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRESHEX=r4, @ANYBLOB="00000200e00000010000000000000000000000000800000020000100", @ANYRES32=r2, @ANYBLOB="010004000a0101020000000000000000000000008add000020000100", @ANYRES32=r6, @ANYBLOB="000101007f0000010000000000000000000000000800000020000100", @ANYRES32=r7, @ANYBLOB="000304000000000000000000000000000000000086dd000020000100", @ANYRES32=r2, @ANYBLOB="01010100fe8800000000000000000000000001010800000020000100", @ANYRES32=r6, @ANYBLOB="01010200fe8800000000000000000000000001010800000020000100", @ANYRES32=r6, @ANYBLOB="4a478aa62bdff37a1300000000000000c20000000000000000000000a5e4eea17d99455a00b4e8eb80d3658e48a4adc624689ec6b627949ea833e8cf19", @ANYRES32=r2, @ANYBLOB="3e010400000000000000000000000000000000018edd000020000100", @ANYRES32=r6, @ANYBLOB="000004000000000000000000000000000000000096dd0000"], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x28084) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0x8) 3.491750977s ago: executing program 3 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0404fb010000000000000000d5"], 0xd) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast2, 0x16, 0x4, 'ovf\x00', 0x1, 0x7, 0x72}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xa838, 0xfff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x0, 0xa, 0x8, &(0x7f0000000040)={0x10, "c1a9389d59abcf123cf359580768f57cd4a976dd5dab9f2a98c7b92dd3b2a333cf"}}) 3.154740124s ago: executing program 2 (id=1496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x4, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x3, 0xfffffffa, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0xc, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x1, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x81}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0xa, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0xffffffff}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x3, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x11, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.128734962s ago: executing program 5 (id=1498): prlimit64(0x0, 0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x6, 0x8, 0x9, 0x0, 0x5}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.841810927s ago: executing program 0 (id=1499): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x58, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0x1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (fail_nth: 1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x4000040) 2.240829917s ago: executing program 3 (id=1500): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) socket(0x10, 0x803, 0x0) 2.22020804s ago: executing program 2 (id=1502): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000840)='/dev/comedi0\x00', 0x20840, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001800010000000000feffffff0a002000000000000000000005001400000000000c00090000ff100e", @ANYRES32=0x0, @ANYBLOB="b50f81df65d64544b713d22235731f36e2c73c74b502a94e4123a757d77e2f8da4a84d83f98a3f55a41eb55e2ac4379670b7e74f8260224f085a48cfce63089180271fe87fc94ec090a7bdcfe0b369b94ad7e4c50e55fa8e53f6da7a94ca41f750585b52a46c29da05b987d1b0e02fc4fed8630ebc5fbb7969b7a08951adb50e958a98e5216686205292546f33dd9ceeaadb4c644057c7a427c8490b0bb674b9c40cff1e0255093e7d2ab8d8b10d9a5d7b3070a45a0fa96df6463df3e231d36631954e9c045a95e9d6bf8e4ba606e8cbc35dd06296fae3fc1389b74099492c5a2fffde3d2f74ec63514d31dfa49ba4272d08da6f1637410c5f5414b5c28bd074961dec62"], 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e20, 0xc170b6cc, @remote, 0x4}}}, 0x3a) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000600)={r3, r3, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9], 0x1, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x2, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) socket$packet(0x11, 0x2, 0x300) 1.278744454s ago: executing program 0 (id=1503): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_ublk_setup_io_uring(0x71bf, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) dup(r2) socket$inet6(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r7, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x20, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7681, 0x8000, 0x1, 0x3df}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 1.277406744s ago: executing program 5 (id=1504): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000840)='/dev/comedi0\x00', 0x20840, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001800010000000000feffffff0a002000000000000000000005001400000000000c00090000ff100e", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e20, 0xc170b6cc, @remote, 0x4}}}, 0x3a) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000600)={r3, r3, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9], 0x1, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x2, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) socket$packet(0x11, 0x2, 0x300) 1.239888786s ago: executing program 6 (id=1505): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x23) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 1.072598827s ago: executing program 0 (id=1506): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x16, 0x0, @void}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x2, 0x3e8, 0x100, 0x100, 0xa00, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x434) 743.53493ms ago: executing program 2 (id=1507): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x3747cdd6243d8d7c) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001400)=""/4092, 0xffc}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r1, 0x2005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000028c0)="f2990e196a679b77", 0x8}, {0x0}], 0x2}}], 0x1, 0x48045) close_range(r1, 0xffffffffffffffff, 0x0) 676.600767ms ago: executing program 0 (id=1508): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x169a82, 0x4c) sendfile(r0, r0, 0x0, 0xb) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) pwrite64(r1, &(0x7f0000000840)="e67ab166972ce298f4681ef5", 0xc, 0x1) (async) unshare(0x20000400) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r3, 0x0, &(0x7f00000006c0)=""/46}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) (async) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x48, r5}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x4, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@getlink={0x320, 0x12, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKMODE={0x5, 0x11, 0xfc}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x8001}, @IFLA_VF_PORTS={0x48, 0x18, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1fc977525d164b656e85ee64f8d217d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e3ae8b18234654fe4cb99d37cc21d275"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_VFINFO_LIST={0x274, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x7fffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2e07}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fff, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4968, 0xa}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x1000, 0x10001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xdca, 0xb}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x90e, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000001, 0x6536, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xcf9, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x5000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x80000000}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x9, 0x5}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xd7f}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @multicast}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @random="f071d9de566d"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1ff, 0xc2f, 0x4}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x17}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xeb24, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x5}}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x7fffffff, 0xab}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1000, 0x171}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3ff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xc, 0x260}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x83, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x6c339698}}, @IFLA_VF_TRUST={0xc, 0x9, {0x95a, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffffa0d2, 0xa}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x101, 0x870a}}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}]}, 0x320}}, 0x0) 568.612068ms ago: executing program 0 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063113700000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) eventfd2(0x0, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 495.707812ms ago: executing program 6 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0xc014) 101.145394ms ago: executing program 3 (id=1511): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mremap(&(0x7f0000833000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000bfb000/0x2000)=nil) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8, 0x1, 0x14, 0xe, 0xfe, "00000000000000fdffffffffffffff00", 0xfffffffe, 0x9}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) 44.664992ms ago: executing program 6 (id=1512): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="23e92ae17a15c591a931", 0xa}, {&(0x7f0000000280)="e921bce912cc", 0x6}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4800}], 0x1, 0x4ad660ee03514e5c) recvfrom$inet_nvme(r1, &(0x7f0000000040)=""/37, 0x25, 0x40000061, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8f93", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x4f, 0x3b00, 0x0, 0xfffffffffffffdfd) 44.191536ms ago: executing program 6 (id=1513): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff108a5f83b18c650c0000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000400)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x60, 0x0, 0x1, 0x3, 0x0, 0xff, 0x8, 0x0, 0x85, 0x2, 0x3, 0x10, 0x7}, 0xe) 26.07665ms ago: executing program 6 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 0s ago: executing program 6 (id=1515): prlimit64(0x0, 0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x6, 0x8, 0x9, 0x0, 0x5}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): . Quota mode: none. [ 148.335242][ T7088] syzkaller0: entered promiscuous mode [ 148.335273][ T7088] syzkaller0: entered allmulticast mode [ 148.342371][ T7086] syzkaller0: entered promiscuous mode [ 148.342401][ T7086] syzkaller0: entered allmulticast mode [ 148.515247][ T7091] binder: 7089:7091 ioctl 40305828 200003c0 returned -22 [ 148.593844][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.643778][ T7091] binder: 7089:7091 ioctl 540f 20000380 returned -22 [ 148.652138][ T7091] binder: 7089:7091 BC_DEAD_BINDER_DONE 00000000000000fc not found [ 148.653396][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.038552][ T7118] FAULT_INJECTION: forcing a failure. [ 149.038552][ T7118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.038704][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.4.627 Not tainted syzkaller #0 PREEMPT [ 149.038720][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.038725][ T7118] Call trace: [ 149.038729][ T7118] show_stack+0x2c/0x3c (C) [ 149.038753][ T7118] __dump_stack+0x30/0x40 [ 149.038765][ T7118] dump_stack_lvl+0xd8/0x12c [ 149.038774][ T7118] dump_stack+0x1c/0x28 [ 149.038784][ T7118] should_fail_ex+0x414/0x588 [ 149.038793][ T7118] should_fail+0x14/0x24 [ 149.038801][ T7118] should_fail_usercopy+0x20/0x30 [ 149.038810][ T7118] _inline_copy_from_user+0x40/0x180 [ 149.038819][ T7118] copy_msghdr_from_user+0xb8/0x194 [ 149.038826][ T7118] ___sys_sendmsg+0x14c/0x224 [ 149.038833][ T7118] __sys_sendmsg+0x160/0x214 [ 149.038840][ T7118] __arm64_sys_sendmsg+0x80/0x94 [ 149.038847][ T7118] invoke_syscall+0x98/0x244 [ 149.038857][ T7118] el0_svc_common+0xe8/0x23c [ 149.038866][ T7118] do_el0_svc+0x48/0x58 [ 149.038876][ T7118] el0_svc+0x64/0x260 [ 149.038883][ T7118] el0t_64_sync_handler+0x48/0x148 [ 149.038890][ T7118] el0t_64_sync+0x198/0x19c [ 149.605973][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.942848][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.979926][ T7133] syzkaller0: entered promiscuous mode [ 149.979958][ T7133] syzkaller0: entered allmulticast mode [ 150.657536][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.699110][ T7157] syzkaller0: entered promiscuous mode [ 150.700508][ T7157] syzkaller0: entered allmulticast mode [ 150.850685][ T7167] loop1: detected capacity change from 0 to 256 [ 150.863366][ T7167] FAT-fs (loop1): Directory bread(block 64) failed [ 150.865018][ T7167] FAT-fs (loop1): Directory bread(block 65) failed [ 150.867934][ T7167] FAT-fs (loop1): Directory bread(block 66) failed [ 150.869698][ T7167] FAT-fs (loop1): Directory bread(block 67) failed [ 150.869750][ T7167] FAT-fs (loop1): Directory bread(block 68) failed [ 150.869771][ T7167] FAT-fs (loop1): Directory bread(block 69) failed [ 150.869810][ T7167] FAT-fs (loop1): Directory bread(block 70) failed [ 150.869826][ T7167] FAT-fs (loop1): Directory bread(block 71) failed [ 150.869855][ T7167] FAT-fs (loop1): Directory bread(block 72) failed [ 150.869870][ T7167] FAT-fs (loop1): Directory bread(block 73) failed [ 150.885766][ T4793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.263520][ T7177] syzkaller0: entered promiscuous mode [ 151.265633][ T7177] syzkaller0: entered allmulticast mode [ 151.361250][ T7183] capability: warning: `syz.0.651' uses 32-bit capabilities (legacy support in use) [ 151.423487][ T7186] syzkaller0: entered promiscuous mode [ 151.423515][ T7186] syzkaller0: entered allmulticast mode [ 151.685682][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.688844][ T7200] syzkaller0: entered promiscuous mode [ 151.688873][ T7200] syzkaller0: entered allmulticast mode [ 151.793362][ T7205] FAULT_INJECTION: forcing a failure. [ 151.793362][ T7205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.793393][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.0.657 Not tainted syzkaller #0 PREEMPT [ 151.793406][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.793412][ T7205] Call trace: [ 151.793416][ T7205] show_stack+0x2c/0x3c (C) [ 151.793435][ T7205] __dump_stack+0x30/0x40 [ 151.793446][ T7205] dump_stack_lvl+0xd8/0x12c [ 151.793456][ T7205] dump_stack+0x1c/0x28 [ 151.793465][ T7205] should_fail_ex+0x414/0x588 [ 151.793475][ T7205] should_fail+0x14/0x24 [ 151.793483][ T7205] should_fail_usercopy+0x20/0x30 [ 151.793491][ T7205] _inline_copy_from_user+0x40/0x180 [ 151.793500][ T7205] copy_msghdr_from_user+0xb8/0x194 [ 151.793508][ T7205] ___sys_sendmsg+0x14c/0x224 [ 151.793515][ T7205] __sys_sendmsg+0x160/0x214 [ 151.793521][ T7205] __arm64_sys_sendmsg+0x80/0x94 [ 151.793528][ T7205] invoke_syscall+0x98/0x244 [ 151.793538][ T7205] el0_svc_common+0xe8/0x23c [ 151.793548][ T7205] do_el0_svc+0x48/0x58 [ 151.793557][ T7205] el0_svc+0x64/0x260 [ 151.793565][ T7205] el0t_64_sync_handler+0x48/0x148 [ 151.793572][ T7205] el0t_64_sync+0x198/0x19c [ 151.842863][ T7193] Bluetooth: unknown link type 213 [ 151.842894][ T7193] Bluetooth: hci3: connection err: -111 [ 151.902203][ T7193] Bluetooth: unknown link type 213 [ 151.902237][ T7193] Bluetooth: hci4: connection err: -111 [ 152.351122][ T7216] loop1: detected capacity change from 0 to 512 [ 152.364848][ T7216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.400247][ T7219] FAULT_INJECTION: forcing a failure. [ 152.400247][ T7219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.403195][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.2.661 Not tainted syzkaller #0 PREEMPT [ 152.403217][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.403223][ T7219] Call trace: [ 152.403227][ T7219] show_stack+0x2c/0x3c (C) [ 152.403250][ T7219] __dump_stack+0x30/0x40 [ 152.403263][ T7219] dump_stack_lvl+0xd8/0x12c [ 152.403275][ T7219] dump_stack+0x1c/0x28 [ 152.403285][ T7219] should_fail_ex+0x414/0x588 [ 152.403295][ T7219] should_fail+0x14/0x24 [ 152.403303][ T7219] should_fail_usercopy+0x20/0x30 [ 152.403312][ T7219] _inline_copy_from_user+0x40/0x180 [ 152.403321][ T7219] copy_msghdr_from_user+0xb8/0x194 [ 152.403328][ T7219] ___sys_sendmsg+0x14c/0x224 [ 152.403335][ T7219] __sys_sendmsg+0x160/0x214 [ 152.403342][ T7219] __arm64_sys_sendmsg+0x80/0x94 [ 152.403348][ T7219] invoke_syscall+0x98/0x244 [ 152.403358][ T7219] el0_svc_common+0xe8/0x23c [ 152.403368][ T7219] do_el0_svc+0x48/0x58 [ 152.403377][ T7219] el0_svc+0x64/0x260 [ 152.403385][ T7219] el0t_64_sync_handler+0x48/0x148 [ 152.403392][ T7219] el0t_64_sync+0x198/0x19c [ 152.725627][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.769614][ T7235] syzkaller0: entered promiscuous mode [ 152.771405][ T7235] syzkaller0: entered allmulticast mode [ 152.969189][ T4793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.147391][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.174842][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.177586][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.180000][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.182413][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.605515][ T7193] Bluetooth: hci2: command 0x0406 tx timeout [ 153.605591][ T7193] Bluetooth: hci0: command 0x0406 tx timeout [ 153.605623][ T7193] Bluetooth: hci4: command 0x0406 tx timeout [ 153.605648][ T7193] Bluetooth: hci1: command 0x0406 tx timeout [ 153.605671][ T7193] Bluetooth: hci3: command 0x0406 tx timeout [ 153.765618][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.882202][ T7261] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 153.939889][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.940003][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.940119][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.940408][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.940512][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.941263][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.946320][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.083595][ T4716] Bluetooth: unknown link type 213 [ 154.083630][ T4716] Bluetooth: hci4: connection err: -111 [ 154.781685][ T7282] loop2: detected capacity change from 0 to 512 [ 154.797941][ T7282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.860274][ T7290] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 154.871310][ T7290] loop3: detected capacity change from 0 to 2048 [ 154.911108][ T7290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.207332][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.234032][ T7300] FAULT_INJECTION: forcing a failure. [ 155.234032][ T7300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.234063][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.3.687 Not tainted syzkaller #0 PREEMPT [ 155.234077][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.234083][ T7300] Call trace: [ 155.234087][ T7300] show_stack+0x2c/0x3c (C) [ 155.234113][ T7300] __dump_stack+0x30/0x40 [ 155.234125][ T7300] dump_stack_lvl+0xd8/0x12c [ 155.234135][ T7300] dump_stack+0x1c/0x28 [ 155.234145][ T7300] should_fail_ex+0x414/0x588 [ 155.234155][ T7300] should_fail+0x14/0x24 [ 155.234163][ T7300] should_fail_usercopy+0x20/0x30 [ 155.234171][ T7300] _inline_copy_from_user+0x40/0x180 [ 155.234181][ T7300] copy_msghdr_from_user+0xb8/0x194 [ 155.234189][ T7300] ___sys_sendmsg+0x14c/0x224 [ 155.234196][ T7300] __sys_sendmsg+0x160/0x214 [ 155.234202][ T7300] __arm64_sys_sendmsg+0x80/0x94 [ 155.234209][ T7300] invoke_syscall+0x98/0x244 [ 155.234219][ T7300] el0_svc_common+0xe8/0x23c [ 155.234229][ T7300] do_el0_svc+0x48/0x58 [ 155.234238][ T7300] el0_svc+0x64/0x260 [ 155.234247][ T7300] el0t_64_sync_handler+0x48/0x148 [ 155.234254][ T7300] el0t_64_sync+0x198/0x19c [ 155.286476][ T7302] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 155.407806][ T7315] syzkaller0: entered promiscuous mode [ 155.407832][ T7315] syzkaller0: entered allmulticast mode [ 155.496366][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.075940][ T7335] FAULT_INJECTION: forcing a failure. [ 156.075940][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 156.075970][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.4.699 Not tainted syzkaller #0 PREEMPT [ 156.075981][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.075986][ T7335] Call trace: [ 156.075989][ T7335] show_stack+0x2c/0x3c (C) [ 156.076008][ T7335] __dump_stack+0x30/0x40 [ 156.076019][ T7335] dump_stack_lvl+0xd8/0x12c [ 156.076028][ T7335] dump_stack+0x1c/0x28 [ 156.076038][ T7335] should_fail_ex+0x414/0x588 [ 156.076047][ T7335] should_failslab+0xc4/0x124 [ 156.076056][ T7335] kmem_cache_alloc_lru_noprof+0x94/0x618 [ 156.076065][ T7335] sock_alloc_inode+0x30/0x168 [ 156.076074][ T7335] alloc_inode+0x68/0x198 [ 156.076083][ T7335] sock_alloc+0x4c/0x204 [ 156.076092][ T7335] __sock_create+0x108/0x66c [ 156.076107][ T7335] __sys_socket_create+0xc0/0x11c [ 156.076118][ T7335] __sys_socket+0x44/0xec [ 156.076127][ T7335] __arm64_sys_socket+0x7c/0x94 [ 156.076137][ T7335] invoke_syscall+0x98/0x244 [ 156.076147][ T7335] el0_svc_common+0xe8/0x23c [ 156.076157][ T7335] do_el0_svc+0x48/0x58 [ 156.076166][ T7335] el0_svc+0x64/0x260 [ 156.076174][ T7335] el0t_64_sync_handler+0x48/0x148 [ 156.076181][ T7335] el0t_64_sync+0x198/0x19c [ 157.846432][ T4470] net_ratelimit: 192 callbacks suppressed [ 157.846466][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.885659][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.964765][ T7358] syzkaller0: entered promiscuous mode [ 159.972797][ T7358] syzkaller0: entered allmulticast mode [ 160.315649][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.727180][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.120340][ T7376] syzkaller0: entered promiscuous mode [ 161.121504][ T7376] syzkaller0: entered allmulticast mode [ 161.245957][ T7386] FAULT_INJECTION: forcing a failure. [ 161.245957][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 161.249114][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT [ 161.249151][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.249157][ T7386] Call trace: [ 161.249161][ T7386] show_stack+0x2c/0x3c (C) [ 161.249183][ T7386] __dump_stack+0x30/0x40 [ 161.249194][ T7386] dump_stack_lvl+0xd8/0x12c [ 161.249204][ T7386] dump_stack+0x1c/0x28 [ 161.249213][ T7386] should_fail_ex+0x414/0x588 [ 161.249223][ T7386] should_failslab+0xc4/0x124 [ 161.249231][ T7386] __kmalloc_noprof+0x100/0x6f0 [ 161.249240][ T7386] tomoyo_realpath_from_path+0xbc/0x4cc [ 161.249251][ T7386] tomoyo_path_number_perm+0x1f4/0x514 [ 161.249261][ T7386] tomoyo_file_ioctl+0x2c/0x3c [ 161.249268][ T7386] security_file_ioctl+0xdc/0x2b0 [ 161.249277][ T7386] __arm64_sys_ioctl+0xa8/0x1c4 [ 161.249287][ T7386] invoke_syscall+0x98/0x244 [ 161.249297][ T7386] el0_svc_common+0xe8/0x23c [ 161.249307][ T7386] do_el0_svc+0x48/0x58 [ 161.249316][ T7386] el0_svc+0x64/0x260 [ 161.249324][ T7386] el0t_64_sync_handler+0x48/0x148 [ 161.249331][ T7386] el0t_64_sync+0x198/0x19c [ 161.249355][ T7386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.494074][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.882504][ T7399] syzkaller0: entered promiscuous mode [ 161.882532][ T7399] syzkaller0: entered allmulticast mode [ 162.565801][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.936564][ T4716] Bluetooth: unknown link type 213 [ 162.936596][ T4716] Bluetooth: hci1: connection err: -111 [ 163.617644][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.983509][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.011404][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 164.254337][ T4716] Bluetooth: unknown link type 213 [ 164.254371][ T4716] Bluetooth: hci0: connection err: -111 [ 164.322625][ T7451] loop2: detected capacity change from 0 to 8 [ 164.618965][ T4794] IPVS: starting estimator thread 0... [ 164.643300][ T7451] Page size > filesystem block size (0). This is currently not supported! [ 164.740622][ T7455] IPVS: using max 59 ests per chain, 141600 per kthread [ 164.998584][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.127494][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.134365][ T7461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.395916][ T4716] block nbd0: Receive control failed (result -32) [ 166.398592][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.443388][ T7488] loop3: detected capacity change from 0 to 8 [ 166.445650][ T7488] Page size > filesystem block size (0). This is currently not supported! [ 166.453230][ T7488] loop3: detected capacity change from 0 to 512 [ 166.456771][ T7488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.458006][ T7486] syzkaller0: entered promiscuous mode [ 166.458020][ T7486] syzkaller0: entered allmulticast mode [ 166.472332][ T7488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.657629][ T7498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.887489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.896610][ T7501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.501568][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.503578][ T4793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.570031][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.671203][ T7500] syz.2.732 (7500): drop_caches: 2 [ 168.120976][ T4716] Bluetooth: Wrong link type (-71) [ 168.165605][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.165763][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.288991][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.648780][ T4470] net_ratelimit: 6 callbacks suppressed [ 168.648817][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.698968][ T7533] syzkaller0: entered promiscuous mode [ 168.700137][ T7533] syzkaller0: entered allmulticast mode [ 169.140196][ T7541] loop4: detected capacity change from 0 to 128 [ 169.148523][ T4716] Bluetooth: Wrong link type (-71) [ 169.685738][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.973081][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.020848][ T7567] loop4: detected capacity change from 0 to 256 [ 171.044536][ T7567] FAT-fs (loop4): Directory bread(block 64) failed [ 171.055491][ T7567] FAT-fs (loop4): Directory bread(block 65) failed [ 171.055553][ T7567] FAT-fs (loop4): Directory bread(block 66) failed [ 171.055576][ T7567] FAT-fs (loop4): Directory bread(block 67) failed [ 171.055605][ T7567] FAT-fs (loop4): Directory bread(block 68) failed [ 171.055621][ T7567] FAT-fs (loop4): Directory bread(block 69) failed [ 171.055649][ T7567] FAT-fs (loop4): Directory bread(block 70) failed [ 171.055664][ T7567] FAT-fs (loop4): Directory bread(block 71) failed [ 171.055690][ T7567] FAT-fs (loop4): Directory bread(block 72) failed [ 171.055705][ T7567] FAT-fs (loop4): Directory bread(block 73) failed [ 171.205610][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.020917][ T4716] Bluetooth: Wrong link type (-71) [ 172.117214][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.120181][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 172.134872][ T7585] syzkaller0: entered promiscuous mode [ 172.139439][ T7585] syzkaller0: entered allmulticast mode [ 172.780586][ T7614] syzkaller0: entered promiscuous mode [ 172.781954][ T7614] syzkaller0: entered allmulticast mode [ 173.085013][ T7630] loop1: detected capacity change from 0 to 256 [ 173.096767][ T7630] FAT-fs (loop1): Directory bread(block 64) failed [ 173.098267][ T7630] FAT-fs (loop1): Directory bread(block 65) failed [ 173.099855][ T7630] FAT-fs (loop1): Directory bread(block 66) failed [ 173.101487][ T7630] FAT-fs (loop1): Directory bread(block 67) failed [ 173.103046][ T7630] FAT-fs (loop1): Directory bread(block 68) failed [ 173.104839][ T7630] FAT-fs (loop1): Directory bread(block 69) failed [ 173.104906][ T7630] FAT-fs (loop1): Directory bread(block 70) failed [ 173.104928][ T7630] FAT-fs (loop1): Directory bread(block 71) failed [ 173.104966][ T7630] FAT-fs (loop1): Directory bread(block 72) failed [ 173.104988][ T7630] FAT-fs (loop1): Directory bread(block 73) failed [ 173.125972][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.446449][ T7639] syzkaller0: entered promiscuous mode [ 173.448867][ T7639] syzkaller0: entered allmulticast mode [ 173.743442][ T7644] syzkaller0: entered promiscuous mode [ 173.743474][ T7644] syzkaller0: entered allmulticast mode [ 173.985621][ T4716] Bluetooth: Wrong link type (-71) [ 173.986501][ T4716] Bluetooth: hci4: link tx timeout [ 173.986776][ T4716] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.027214][ T6516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.087876][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.099400][ T4793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.106706][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.779'. [ 174.165695][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.254894][ T4793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.206068][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.377843][ T4716] Bluetooth: unknown link type 213 [ 175.377875][ T4716] Bluetooth: hci2: connection err: -111 [ 175.660348][ T7701] loop3: detected capacity change from 0 to 256 [ 175.678319][ T4716] Bluetooth: unknown link type 213 [ 175.679549][ T4716] Bluetooth: hci4: connection err: -111 [ 175.740961][ T7705] loop1: detected capacity change from 0 to 512 [ 175.742703][ T7701] FAT-fs (loop3): Directory bread(block 64) failed [ 175.742741][ T7701] FAT-fs (loop3): Directory bread(block 65) failed [ 175.742768][ T7701] FAT-fs (loop3): Directory bread(block 66) failed [ 175.742780][ T7701] FAT-fs (loop3): Directory bread(block 67) failed [ 175.742804][ T7701] FAT-fs (loop3): Directory bread(block 68) failed [ 175.742815][ T7701] FAT-fs (loop3): Directory bread(block 69) failed [ 175.742838][ T7701] FAT-fs (loop3): Directory bread(block 70) failed [ 175.742849][ T7701] FAT-fs (loop3): Directory bread(block 71) failed [ 175.742871][ T7701] FAT-fs (loop3): Directory bread(block 72) failed [ 175.742881][ T7701] FAT-fs (loop3): Directory bread(block 73) failed [ 176.006150][ T4716] Bluetooth: hci4: command 0x0406 tx timeout [ 176.064518][ T7712] FAULT_INJECTION: forcing a failure. [ 176.064518][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.067624][ T7712] CPU: 0 UID: 0 PID: 7712 Comm: syz.1.796 Not tainted syzkaller #0 PREEMPT [ 176.067644][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.067651][ T7712] Call trace: [ 176.067655][ T7712] show_stack+0x2c/0x3c (C) [ 176.067679][ T7712] __dump_stack+0x30/0x40 [ 176.067690][ T7712] dump_stack_lvl+0xd8/0x12c [ 176.067700][ T7712] dump_stack+0x1c/0x28 [ 176.067709][ T7712] should_fail_ex+0x414/0x588 [ 176.067719][ T7712] should_fail+0x14/0x24 [ 176.067727][ T7712] should_fail_usercopy+0x20/0x30 [ 176.067735][ T7712] _inline_copy_from_user+0x40/0x180 [ 176.067744][ T7712] copy_msghdr_from_user+0xb8/0x194 [ 176.067752][ T7712] ___sys_sendmsg+0x14c/0x224 [ 176.067759][ T7712] __sys_sendmsg+0x160/0x214 [ 176.067766][ T7712] __arm64_sys_sendmsg+0x80/0x94 [ 176.067773][ T7712] invoke_syscall+0x98/0x244 [ 176.067783][ T7712] el0_svc_common+0xe8/0x23c [ 176.067793][ T7712] do_el0_svc+0x48/0x58 [ 176.067802][ T7712] el0_svc+0x64/0x260 [ 176.067810][ T7712] el0t_64_sync_handler+0x48/0x148 [ 176.067817][ T7712] el0t_64_sync+0x198/0x19c [ 176.120510][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.797'. [ 176.246600][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.349127][ T7721] syzkaller0: entered promiscuous mode [ 176.349161][ T7721] syzkaller0: entered allmulticast mode [ 176.920852][ T4715] Bluetooth: Wrong link type (-71) [ 177.286278][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.286329][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.401157][ T4715] Bluetooth: unknown link type 213 [ 177.402100][ T4715] Bluetooth: hci3: connection err: -111 [ 177.672381][ T4715] Bluetooth: unknown link type 213 [ 177.673544][ T4715] Bluetooth: hci0: connection err: -111 [ 177.696245][ T7766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.813'. [ 177.698297][ T7766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.813'. [ 177.742778][ T7770] syzkaller0: entered promiscuous mode [ 177.742806][ T7770] syzkaller0: entered allmulticast mode [ 178.406854][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.065520][ T4794] net_ratelimit: 1 callbacks suppressed [ 179.065555][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.702599][ T7776] syzkaller0: entered promiscuous mode [ 179.702635][ T7776] syzkaller0: entered allmulticast mode [ 180.634744][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.805848][ T7811] 9pnet_fd: Insufficient options for proto=fd [ 180.866911][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.992872][ T4715] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 181.316280][ T7810] tipc: Started in network mode [ 181.316311][ T7810] tipc: Node identity 6eade0448b05, cluster identity 4711 [ 181.316648][ T7810] tipc: Enabled bearer , priority 0 [ 181.323952][ T7810] tipc: Disabling bearer [ 181.357840][ T4715] Bluetooth: unknown link type 213 [ 181.357869][ T4715] Bluetooth: hci1: connection err: -111 [ 181.404143][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.827'. [ 181.485206][ T7826] syzkaller0: entered promiscuous mode [ 181.486789][ T7826] syzkaller0: entered allmulticast mode [ 181.689576][ T7832] loop2: detected capacity change from 0 to 512 [ 181.720797][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.726609][ T7832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.546317][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.626763][ T7848] bridge0: port 3(wlan1) entered blocking state [ 182.626985][ T7848] bridge0: port 3(wlan1) entered disabled state [ 182.628104][ T7848] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 182.633978][ T7848] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 182.687983][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.729111][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.391760][ T7852] syzkaller0: entered promiscuous mode [ 183.391798][ T7852] syzkaller0: entered allmulticast mode [ 183.397774][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 183.444666][ T4715] Bluetooth: unknown link type 213 [ 183.445979][ T4715] Bluetooth: hci0: connection err: -111 [ 183.535672][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.540260][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.563810][ T30] audit: type=1326 audit(183.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7849 comm="syz.3.835" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f977aa8 code=0x7fc00000 [ 183.776006][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.926384][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.351847][ T4715] Bluetooth: unknown link type 213 [ 184.353029][ T4715] Bluetooth: hci1: connection err: -111 [ 184.429147][ T7867] netlink: 'syz.1.840': attribute type 12 has an invalid length. [ 184.430468][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 184.441645][ T7877] syzkaller0: entered promiscuous mode [ 184.441677][ T7877] syzkaller0: entered allmulticast mode [ 184.450785][ T7877] FAULT_INJECTION: forcing a failure. [ 184.450785][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.450814][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.4.843 Not tainted syzkaller #0 PREEMPT [ 184.450827][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.450833][ T7877] Call trace: [ 184.450836][ T7877] show_stack+0x2c/0x3c (C) [ 184.450855][ T7877] __dump_stack+0x30/0x40 [ 184.450866][ T7877] dump_stack_lvl+0xd8/0x12c [ 184.450876][ T7877] dump_stack+0x1c/0x28 [ 184.450885][ T7877] should_fail_ex+0x414/0x588 [ 184.450895][ T7877] should_fail+0x14/0x24 [ 184.450903][ T7877] should_fail_usercopy+0x20/0x30 [ 184.450912][ T7877] _inline_copy_from_user+0x40/0x180 [ 184.450920][ T7877] move_addr_to_kernel+0x88/0x168 [ 184.450931][ T7877] __copy_msghdr+0x2d4/0x3c8 [ 184.450937][ T7877] copy_msghdr_from_user+0xe8/0x194 [ 184.450945][ T7877] ___sys_sendmsg+0x14c/0x224 [ 184.450951][ T7877] __sys_sendmsg+0x160/0x214 [ 184.450958][ T7877] __arm64_sys_sendmsg+0x80/0x94 [ 184.450965][ T7877] invoke_syscall+0x98/0x244 [ 184.450975][ T7877] el0_svc_common+0xe8/0x23c [ 184.450985][ T7877] do_el0_svc+0x48/0x58 [ 184.450994][ T7877] el0_svc+0x64/0x260 [ 184.451003][ T7877] el0t_64_sync_handler+0x48/0x148 [ 184.451009][ T7877] el0t_64_sync+0x198/0x19c [ 184.707169][ T7900] loop1: detected capacity change from 0 to 512 [ 184.807392][ T7900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.835381][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.838235][ T7913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.847'. [ 185.873680][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 185.989678][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.029853][ T4715] Bluetooth: unknown link type 213 [ 186.029889][ T4715] Bluetooth: hci0: connection err: -111 [ 186.584255][ T4715] Bluetooth: Wrong link type (-71) [ 186.915116][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.830350][ T1533] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.830394][ T1533] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.835584][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.996604][ T4715] Bluetooth: unknown link type 213 [ 187.997682][ T4715] Bluetooth: hci3: connection err: -111 [ 188.033965][ T7947] loop2: detected capacity change from 0 to 8 [ 188.831731][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.836966][ T7947] Page size > filesystem block size (0). This is currently not supported! [ 188.854242][ T7947] loop2: detected capacity change from 0 to 512 [ 188.855706][ T7947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.871854][ T7947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.874910][ T7951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.301007][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.548539][ T4715] Bluetooth: unknown link type 213 [ 189.548575][ T4715] Bluetooth: hci1: connection err: -111 [ 189.664496][ T7963] loop1: detected capacity change from 0 to 512 [ 189.668990][ T7963] EXT4-fs: Ignoring removed i_version option [ 189.670788][ T7963] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 189.687134][ T7963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 189.688926][ T7963] System zones: 1-12 [ 189.690080][ T7963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.694140][ T7963] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.863: invalid indirect mapped block 12 (level 1) [ 189.700780][ T7963] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.705430][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 189.705458][ C1] EXT4-fs (loop1): initial error at time 189: ext4_free_branches:1023: inode 11 [ 189.705493][ C1] EXT4-fs (loop1): last error at time 189: ext4_free_branches:1023: inode 11 [ 189.727020][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.736079][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'. [ 189.761975][ T7963] EXT4-fs (loop1): Remounting filesystem read-only [ 189.762266][ T7963] EXT4-fs (loop1): 1 truncate cleaned up [ 189.763399][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.768730][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 189.841416][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 189.845667][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.981519][ T7983] loop1: detected capacity change from 0 to 128 [ 190.018151][ T7983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.392496][ T7989] bridge0: port 3(wlan1) entered blocking state [ 190.392535][ T7989] bridge0: port 3(wlan1) entered disabled state [ 190.392676][ T7989] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 190.397159][ T7989] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 190.887222][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.928947][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.984747][ T7990] EXT4-fs (loop1): shut down requested (1) [ 191.743661][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.855839][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.959680][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.040936][ T8012] nfs: Unknown parameter 'fsuuid' [ 192.081485][ T8026] vlan0: entered promiscuous mode [ 192.085249][ T8026] team0: Port device vlan0 added [ 192.110324][ T8026] tipc: Enabled bearer , priority 0 [ 192.262101][ T8035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.552053][ T8037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.799244][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.799501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.951773][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.951988][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.966215][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.126158][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.128231][ T8051] loop1: detected capacity change from 0 to 8 [ 193.129804][ T8051] Page size > filesystem block size (0). This is currently not supported! [ 193.138648][ T8051] loop1: detected capacity change from 0 to 512 [ 193.400759][ T8051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.411445][ T8051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.522015][ T8063] loop2: detected capacity change from 0 to 7 [ 193.524250][ T8063] Dev loop2: unable to read RDB block 7 [ 193.528348][ T8063] loop2: AHDI p1 p2 p3 [ 193.529719][ T8063] loop2: partition table partially beyond EOD, truncated [ 193.531893][ T8063] loop2: p1 start 1601398130 is beyond EOD, truncated [ 193.533581][ T8063] loop2: p2 start 1702059890 is beyond EOD, truncated [ 193.704433][ T8074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.710798][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.006181][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.657615][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.078737][ T6513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.774287][ T8113] loop4: detected capacity change from 0 to 8 [ 195.777305][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 195.791435][ T8113] Page size > filesystem block size (0). This is currently not supported! [ 195.819810][ T8113] loop4: detected capacity change from 0 to 512 [ 195.828440][ T8113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.850252][ T8113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.944756][ T8120] loop2: detected capacity change from 0 to 2048 [ 196.027696][ T8121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.098338][ T8122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.249667][ T4470] net_ratelimit: 1 callbacks suppressed [ 196.249697][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.297188][ T8120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.304253][ T8120] fuse: Unknown parameter 'Ð_ø+' [ 196.359781][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.390596][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.910110][ T8146] loop2: detected capacity change from 0 to 512 [ 196.944960][ T8144] Injecting memory failure for pfn 0x132556 at process virtual address 0x20000000 [ 196.965207][ T8146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.332286][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.419609][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.529153][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 197.558487][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.880818][ T8144] Memory failure: 0x132556: recovery action for dirty LRU page: Recovered [ 197.883057][ T8144] Injecting memory failure for pfn 0x132202 at process virtual address 0x20001000 [ 197.921829][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.924150][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.924975][ T8144] Memory failure: 0x132202: recovery action for dirty LRU page: Recovered [ 198.053825][ T8175] loop2: detected capacity change from 0 to 256 [ 198.075026][ T8178] loop3: detected capacity change from 0 to 8 [ 198.075724][ T8175] FAT-fs (loop2): Directory bread(block 64) failed [ 198.075742][ T8175] FAT-fs (loop2): Directory bread(block 65) failed [ 198.075765][ T8175] FAT-fs (loop2): Directory bread(block 66) failed [ 198.075776][ T8175] FAT-fs (loop2): Directory bread(block 67) failed [ 198.075799][ T8175] FAT-fs (loop2): Directory bread(block 68) failed [ 198.075809][ T8175] FAT-fs (loop2): Directory bread(block 69) failed [ 198.075830][ T8175] FAT-fs (loop2): Directory bread(block 70) failed [ 198.075840][ T8175] FAT-fs (loop2): Directory bread(block 71) failed [ 198.075861][ T8175] FAT-fs (loop2): Directory bread(block 72) failed [ 198.075872][ T8175] FAT-fs (loop2): Directory bread(block 73) failed [ 198.093969][ T8178] Page size > filesystem block size (0). This is currently not supported! [ 198.474747][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.480219][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.575641][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.762764][ T8195] loop4: detected capacity change from 0 to 8 [ 198.774757][ T8195] Page size > filesystem block size (0). This is currently not supported! [ 198.843677][ T8195] loop4: detected capacity change from 0 to 512 [ 198.845743][ T8195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.860143][ T8195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.049941][ T8199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.136833][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.283405][ T8202] loop1: detected capacity change from 0 to 256 [ 199.283871][ T8202] vfat: Unknown parameter 'utf' [ 199.605815][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.634893][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'. [ 199.672696][ T8215] Injecting memory failure for pfn 0x141003 at process virtual address 0x20003000 [ 199.686520][ T8215] Memory failure: 0x141003: recovery action for dirty LRU page: Recovered [ 199.700759][ T8215] pimreg1: entered allmulticast mode [ 199.742295][ T8222] loop3: detected capacity change from 0 to 512 [ 199.743435][ T8222] EXT4-fs: Ignoring removed orlov option [ 199.743447][ T8222] EXT4-fs: Ignoring removed nobh option [ 199.746146][ T8222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.776979][ T8222] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.929: bg 0: block 248: padding at end of block bitmap is not set [ 199.777030][ T8222] loop3: lost filesystem error report for type 5 error -117 [ 199.777277][ T8222] Quota error (device loop3): write_blk: dquota write failed [ 199.777300][ T8222] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 199.777312][ T8222] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.929: Failed to acquire dquot type 1 [ 199.777321][ T8222] loop3: lost filesystem error report for type 5 error -117 [ 199.778307][ T8222] EXT4-fs (loop3): 1 truncate cleaned up [ 199.778745][ T8222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.869543][ T8228] loop2: detected capacity change from 0 to 512 [ 199.892319][ T8229] FAULT_INJECTION: forcing a failure. [ 199.892319][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.892348][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.3.929 Not tainted syzkaller #0 PREEMPT [ 199.892358][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.892365][ T8229] Call trace: [ 199.892368][ T8229] show_stack+0x2c/0x3c (C) [ 199.892389][ T8229] __dump_stack+0x30/0x40 [ 199.892400][ T8229] dump_stack_lvl+0xd8/0x12c [ 199.892410][ T8229] dump_stack+0x1c/0x28 [ 199.892419][ T8229] should_fail_ex+0x414/0x588 [ 199.892429][ T8229] should_fail+0x14/0x24 [ 199.892436][ T8229] should_fail_usercopy+0x20/0x30 [ 199.892445][ T8229] _inline_copy_from_user+0x40/0x180 [ 199.892456][ T8229] vt_do_kdsk_ioctl+0xc0/0x974 [ 199.892464][ T8229] vt_ioctl+0xb2c/0x1dfc [ 199.892471][ T8229] tty_ioctl+0x880/0xd4c [ 199.892480][ T8229] __arm64_sys_ioctl+0x14c/0x1c4 [ 199.892490][ T8229] invoke_syscall+0x98/0x244 [ 199.892500][ T8229] el0_svc_common+0xe8/0x23c [ 199.892510][ T8229] do_el0_svc+0x48/0x58 [ 199.892520][ T8229] el0_svc+0x64/0x260 [ 199.892528][ T8229] el0t_64_sync_handler+0x48/0x148 [ 199.892535][ T8229] el0t_64_sync+0x198/0x19c [ 199.920070][ T8228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.033945][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.129389][ T8239] binder: 8236:8239 ioctl c0306201 20000100 returned -14 [ 200.148839][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.312067][ T8239] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 200.536342][ T4715] Bluetooth: Wrong link type (-71) [ 200.603530][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.627401][ T8253] loop3: detected capacity change from 0 to 256 [ 200.643320][ T8253] FAT-fs (loop3): Directory bread(block 64) failed [ 200.645004][ T8253] FAT-fs (loop3): Directory bread(block 65) failed [ 200.647430][ T8253] FAT-fs (loop3): Directory bread(block 66) failed [ 200.648883][ T8253] FAT-fs (loop3): Directory bread(block 67) failed [ 200.650620][ T8253] FAT-fs (loop3): Directory bread(block 68) failed [ 200.652216][ T8253] FAT-fs (loop3): Directory bread(block 69) failed [ 200.653724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.655709][ T8253] FAT-fs (loop3): Directory bread(block 70) failed [ 200.657231][ T8253] FAT-fs (loop3): Directory bread(block 71) failed [ 200.658622][ T8253] FAT-fs (loop3): Directory bread(block 72) failed [ 200.660138][ T8253] FAT-fs (loop3): Directory bread(block 73) failed [ 200.805751][ T6513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.940810][ T8257] loop2: detected capacity change from 0 to 1024 [ 200.941805][ T8257] EXT4-fs: Ignoring removed orlov option [ 200.941838][ T8257] ext4: Unknown parameter 'fsname' [ 200.969234][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.014555][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 201.789695][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.426598][ T8289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.809171][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.245156][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.263227][ T8301] loop1: detected capacity change from 0 to 256 [ 203.265282][ T8301] FAT-fs (loop1): bogus sectors per cluster 0 [ 203.265331][ T8301] FAT-fs (loop1): Can't find a valid FAT filesystem [ 203.537631][ T8304] loop1: detected capacity change from 0 to 256 [ 203.556844][ T8304] FAT-fs (loop1): Directory bread(block 64) failed [ 203.556872][ T8304] FAT-fs (loop1): Directory bread(block 65) failed [ 203.556909][ T8304] FAT-fs (loop1): Directory bread(block 66) failed [ 203.556925][ T8304] FAT-fs (loop1): Directory bread(block 67) failed [ 203.556949][ T8304] FAT-fs (loop1): Directory bread(block 68) failed [ 203.556964][ T8304] FAT-fs (loop1): Directory bread(block 69) failed [ 203.556987][ T8304] FAT-fs (loop1): Directory bread(block 70) failed [ 203.557001][ T8304] FAT-fs (loop1): Directory bread(block 71) failed [ 203.557024][ T8304] FAT-fs (loop1): Directory bread(block 72) failed [ 203.557037][ T8304] FAT-fs (loop1): Directory bread(block 73) failed [ 203.574561][ T8304] FAULT_INJECTION: forcing a failure. [ 203.574561][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 203.574594][ T8304] CPU: 0 UID: 0 PID: 8304 Comm: syz.1.948 Not tainted syzkaller #0 PREEMPT [ 203.574606][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.574612][ T8304] Call trace: [ 203.574616][ T8304] show_stack+0x2c/0x3c (C) [ 203.574635][ T8304] __dump_stack+0x30/0x40 [ 203.574646][ T8304] dump_stack_lvl+0xd8/0x12c [ 203.574656][ T8304] dump_stack+0x1c/0x28 [ 203.574665][ T8304] should_fail_ex+0x414/0x588 [ 203.574675][ T8304] should_failslab+0xc4/0x124 [ 203.574684][ T8304] kmem_cache_alloc_noprof+0x8c/0x610 [ 203.574693][ T8304] security_file_alloc+0x38/0x2f8 [ 203.574703][ T8304] init_file+0x90/0x274 [ 203.574710][ T8304] alloc_empty_file+0x80/0x1cc [ 203.574717][ T8304] path_openat+0xd4/0x2a6c [ 203.574725][ T8304] do_file_open+0x1c4/0x2e4 [ 203.574732][ T8304] do_sys_openat2+0x114/0x1e8 [ 203.574742][ T8304] do_sys_open+0xac/0xdc [ 203.574750][ T8304] __arm64_sys_openat+0x9c/0xb8 [ 203.574759][ T8304] invoke_syscall+0x98/0x244 [ 203.574769][ T8304] el0_svc_common+0xe8/0x23c [ 203.574779][ T8304] do_el0_svc+0x48/0x58 [ 203.574788][ T8304] el0_svc+0x64/0x260 [ 203.574796][ T8304] el0t_64_sync_handler+0x48/0x148 [ 203.574803][ T8304] el0t_64_sync+0x198/0x19c [ 203.855593][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.006095][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.051059][ T8272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.900603][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.292214][ T8337] loop1: detected capacity change from 0 to 256 [ 205.640310][ T8341] syzkaller0: entered promiscuous mode [ 205.641497][ T8341] syzkaller0: entered allmulticast mode [ 205.702441][ T8337] FAT-fs (loop1): Directory bread(block 64) failed [ 205.702477][ T8337] FAT-fs (loop1): Directory bread(block 65) failed [ 205.702505][ T8337] FAT-fs (loop1): Directory bread(block 66) failed [ 205.702518][ T8337] FAT-fs (loop1): Directory bread(block 67) failed [ 205.702541][ T8337] FAT-fs (loop1): Directory bread(block 68) failed [ 205.702552][ T8337] FAT-fs (loop1): Directory bread(block 69) failed [ 205.702574][ T8337] FAT-fs (loop1): Directory bread(block 70) failed [ 205.702585][ T8337] FAT-fs (loop1): Directory bread(block 71) failed [ 205.702606][ T8337] FAT-fs (loop1): Directory bread(block 72) failed [ 205.702617][ T8337] FAT-fs (loop1): Directory bread(block 73) failed [ 205.812121][ T8349] loop4: detected capacity change from 0 to 8 [ 205.814413][ T8349] Page size > filesystem block size (0). This is currently not supported! [ 205.838948][ T8349] loop4: detected capacity change from 0 to 512 [ 205.849818][ T8349] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.868794][ T8349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.933322][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.054898][ T8357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.412575][ T8364] loop2: detected capacity change from 0 to 512 [ 206.412946][ T8364] EXT4-fs: user quota file already specified [ 206.510003][ T8368] loop2: detected capacity change from 0 to 128 [ 206.510341][ T8368] vfat: Unknown parameter 'nl80211' [ 206.566058][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.646735][ T8348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.975598][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.046373][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.184792][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.208776][ T8388] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.098293][ T8405] misc userio: Invalid payload size [ 208.098417][ T8405] misc userio: No port type given on /dev/userio [ 208.614080][ T8410] loop4: detected capacity change from 0 to 256 [ 208.643158][ T8412] netlink: 'syz.0.981': attribute type 31 has an invalid length. [ 208.666045][ T8410] FAT-fs (loop4): Directory bread(block 64) failed [ 208.666077][ T8410] FAT-fs (loop4): Directory bread(block 65) failed [ 208.666119][ T8410] FAT-fs (loop4): Directory bread(block 66) failed [ 208.666136][ T8410] FAT-fs (loop4): Directory bread(block 67) failed [ 208.666165][ T8410] FAT-fs (loop4): Directory bread(block 68) failed [ 208.666180][ T8410] FAT-fs (loop4): Directory bread(block 69) failed [ 208.666206][ T8410] FAT-fs (loop4): Directory bread(block 70) failed [ 208.666221][ T8410] FAT-fs (loop4): Directory bread(block 71) failed [ 208.666246][ T8410] FAT-fs (loop4): Directory bread(block 72) failed [ 208.666260][ T8410] FAT-fs (loop4): Directory bread(block 73) failed [ 208.728584][ T8415] netlink: 'syz.2.978': attribute type 8 has an invalid length. [ 209.203886][ T8419] bridge0: port 3(syz_tun) entered blocking state [ 209.206982][ T8419] bridge0: port 3(syz_tun) entered disabled state [ 209.207116][ T8419] syz_tun: entered allmulticast mode [ 209.211635][ T8419] syz_tun: entered promiscuous mode [ 209.212948][ T8419] bridge0: port 3(syz_tun) entered blocking state [ 209.213027][ T8419] bridge0: port 3(syz_tun) entered forwarding state [ 209.217869][ T8421] loop1: detected capacity change from 0 to 8 [ 209.227392][ T8421] Page size > filesystem block size (0). This is currently not supported! [ 209.244524][ T8421] loop1: detected capacity change from 0 to 512 [ 209.250921][ T8421] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.271243][ T8421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.518079][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.830258][ T8441] loop3: detected capacity change from 0 to 128 [ 209.981275][ T8450] FAULT_INJECTION: forcing a failure. [ 209.981275][ T8450] name failslab, interval 1, probability 0, space 0, times 0 [ 209.981311][ T8450] CPU: 1 UID: 0 PID: 8450 Comm: syz.4.990 Not tainted syzkaller #0 PREEMPT [ 209.981322][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.981328][ T8450] Call trace: [ 209.981332][ T8450] show_stack+0x2c/0x3c (C) [ 209.981355][ T8450] __dump_stack+0x30/0x40 [ 209.981366][ T8450] dump_stack_lvl+0xd8/0x12c [ 209.981376][ T8450] dump_stack+0x1c/0x28 [ 209.981385][ T8450] should_fail_ex+0x414/0x588 [ 209.981395][ T8450] should_failslab+0xc4/0x124 [ 209.981403][ T8450] __kmalloc_noprof+0x100/0x6f0 [ 209.981412][ T8450] ethnl_default_notify+0x174/0x8d8 [ 209.981421][ T8450] ethnl_notify+0xd0/0x1dc [ 209.981427][ T8450] ethnl_netdev_event+0xd4/0x14c [ 209.981435][ T8450] notifier_call_chain+0x194/0x60c [ 209.981444][ T8450] raw_notifier_call_chain+0x3c/0x50 [ 209.981453][ T8450] call_netdevice_notifiers_info+0xb8/0x120 [ 209.981462][ T8450] netdev_features_change+0x84/0xcc [ 209.981471][ T8450] dev_ethtool+0xed4/0x12a8 [ 209.981480][ T8450] dev_ioctl+0x2a4/0xcec [ 209.981487][ T8450] sock_do_ioctl+0x198/0x254 [ 209.981494][ T8450] sock_ioctl+0x558/0x7e8 [ 209.981501][ T8450] __arm64_sys_ioctl+0x14c/0x1c4 [ 209.981512][ T8450] invoke_syscall+0x98/0x244 [ 209.981522][ T8450] el0_svc_common+0xe8/0x23c [ 209.981531][ T8450] do_el0_svc+0x48/0x58 [ 209.981541][ T8450] el0_svc+0x64/0x260 [ 209.981549][ T8450] el0t_64_sync_handler+0x48/0x148 [ 209.981556][ T8450] el0t_64_sync+0x198/0x19c [ 210.084410][ T8420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.718685][ T8467] loop4: detected capacity change from 0 to 512 [ 210.830304][ T8467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.568085][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.572346][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.583118][ T8476] misc userio: Invalid payload size [ 211.583225][ T8476] misc userio: No port type given on /dev/userio [ 212.382286][ T8490] FAULT_INJECTION: forcing a failure. [ 212.382286][ T8490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.382321][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.4.1000 Not tainted syzkaller #0 PREEMPT [ 212.382334][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.382341][ T8490] Call trace: [ 212.382344][ T8490] show_stack+0x2c/0x3c (C) [ 212.382364][ T8490] __dump_stack+0x30/0x40 [ 212.382374][ T8490] dump_stack_lvl+0xd8/0x12c [ 212.382384][ T8490] dump_stack+0x1c/0x28 [ 212.382393][ T8490] should_fail_ex+0x414/0x588 [ 212.382403][ T8490] should_fail+0x14/0x24 [ 212.382411][ T8490] should_fail_usercopy+0x20/0x30 [ 212.382420][ T8490] _inline_copy_from_user+0x3c/0x204 [ 212.382430][ T8490] csum_and_copy_from_iter_full+0x420/0x1590 [ 212.382439][ T8490] ip_generic_getfrag+0x128/0x278 [ 212.382450][ T8490] raw6_getfrag+0x234/0x338 [ 212.382459][ T8490] __ip6_append_data+0x2b44/0x37d0 [ 212.382467][ T8490] ip6_append_data+0x100/0x27c [ 212.382474][ T8490] rawv6_sendmsg+0xe78/0x1454 [ 212.382482][ T8490] inet_sendmsg+0xb4/0xd8 [ 212.382491][ T8490] __sock_sendmsg+0xc8/0x138 [ 212.382500][ T8490] ____sys_sendmsg+0x43c/0x70c [ 212.382507][ T8490] ___sys_sendmsg+0x198/0x224 [ 212.382514][ T8490] __sys_sendmmsg+0x210/0x588 [ 212.382520][ T8490] __arm64_sys_sendmmsg+0xa0/0xbc [ 212.382527][ T8490] invoke_syscall+0x98/0x244 [ 212.382537][ T8490] el0_svc_common+0xe8/0x23c [ 212.382547][ T8490] do_el0_svc+0x48/0x58 [ 212.382556][ T8490] el0_svc+0x64/0x260 [ 212.382564][ T8490] el0t_64_sync_handler+0x48/0x148 [ 212.382571][ T8490] el0t_64_sync+0x198/0x19c [ 212.462485][ T8493] loop2: detected capacity change from 0 to 512 [ 212.538262][ T8493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.599744][ T8500] FAULT_INJECTION: forcing a failure. [ 212.599744][ T8500] name failslab, interval 1, probability 0, space 0, times 0 [ 212.599776][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.0.1003 Not tainted syzkaller #0 PREEMPT [ 212.599791][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.599799][ T8500] Call trace: [ 212.599803][ T8500] show_stack+0x2c/0x3c (C) [ 212.599823][ T8500] __dump_stack+0x30/0x40 [ 212.599836][ T8500] dump_stack_lvl+0xd8/0x12c [ 212.599846][ T8500] dump_stack+0x1c/0x28 [ 212.599855][ T8500] should_fail_ex+0x414/0x588 [ 212.599865][ T8500] should_failslab+0xc4/0x124 [ 212.599874][ T8500] kmem_cache_alloc_noprof+0x8c/0x610 [ 212.599883][ T8500] security_file_alloc+0x38/0x2f8 [ 212.599893][ T8500] init_file+0x90/0x274 [ 212.599900][ T8500] alloc_empty_file+0x80/0x1cc [ 212.599907][ T8500] alloc_file+0x58/0x98 [ 212.599914][ T8500] alloc_file_pseudo+0x118/0x1ec [ 212.599921][ T8500] __anon_inode_getfile+0x118/0x1c4 [ 212.599931][ T8500] __anon_inode_getfd+0x70/0xf4 [ 212.599940][ T8500] anon_inode_getfd+0x44/0x58 [ 212.599949][ T8500] bpf_map_new_fd+0x64/0x88 [ 212.599958][ T8500] map_create+0xdb8/0x123c [ 212.599967][ T8500] __sys_bpf+0x1d4/0x5f0 [ 212.599976][ T8500] __arm64_sys_bpf+0x80/0x98 [ 212.599985][ T8500] invoke_syscall+0x98/0x244 [ 212.599996][ T8500] el0_svc_common+0xe8/0x23c [ 212.600006][ T8500] do_el0_svc+0x48/0x58 [ 212.600015][ T8500] el0_svc+0x64/0x260 [ 212.600023][ T8500] el0t_64_sync_handler+0x48/0x148 [ 212.600030][ T8500] el0t_64_sync+0x198/0x19c [ 212.639832][ T30] audit: type=1400 audit(212.630:4): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=w pid=8492 comm="syz.2.1001" name="file0" dev="loop2" ino=12 [ 212.685810][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.859592][ T8512] loop3: detected capacity change from 0 to 8 [ 212.861664][ T8512] Page size > filesystem block size (0). This is currently not supported! [ 212.870271][ T8512] loop3: detected capacity change from 0 to 512 [ 212.874501][ T8514] loop2: detected capacity change from 0 to 256 [ 212.877939][ T8512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.878946][ T8514] FAT-fs (loop2): bogus sectors per cluster 0 [ 212.878969][ T8514] FAT-fs (loop2): Can't find a valid FAT filesystem [ 212.904466][ T8512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.099404][ T8525] loop2: detected capacity change from 0 to 256 [ 213.363942][ T8525] FAT-fs (loop2): Directory bread(block 64) failed [ 213.363971][ T8525] FAT-fs (loop2): Directory bread(block 65) failed [ 213.364003][ T8525] FAT-fs (loop2): Directory bread(block 66) failed [ 213.364019][ T8525] FAT-fs (loop2): Directory bread(block 67) failed [ 213.364079][ T8525] FAT-fs (loop2): Directory bread(block 68) failed [ 213.364094][ T8525] FAT-fs (loop2): Directory bread(block 69) failed [ 213.364128][ T8525] FAT-fs (loop2): Directory bread(block 70) failed [ 213.364143][ T8525] FAT-fs (loop2): Directory bread(block 71) failed [ 213.364170][ T8525] FAT-fs (loop2): Directory bread(block 72) failed [ 213.364184][ T8525] FAT-fs (loop2): Directory bread(block 73) failed [ 213.438851][ T8522] syz.2.1006: attempt to access beyond end of device [ 213.438851][ T8522] loop2: rw=2049, sector=1192, nr_sectors = 68 limit=256 [ 213.563203][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 213.872099][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.996578][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.193303][ T8555] FAULT_INJECTION: forcing a failure. [ 214.193303][ T8555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.193334][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.4.1016 Not tainted syzkaller #0 PREEMPT [ 214.193344][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.193350][ T8555] Call trace: [ 214.193353][ T8555] show_stack+0x2c/0x3c (C) [ 214.193373][ T8555] __dump_stack+0x30/0x40 [ 214.193384][ T8555] dump_stack_lvl+0xd8/0x12c [ 214.193393][ T8555] dump_stack+0x1c/0x28 [ 214.193402][ T8555] should_fail_ex+0x414/0x588 [ 214.193412][ T8555] should_fail+0x14/0x24 [ 214.193420][ T8555] should_fail_usercopy+0x20/0x30 [ 214.193428][ T8555] video_usercopy+0xad4/0xe90 [ 214.193441][ T8555] video_ioctl2+0x3c/0x50 [ 214.193450][ T8555] v4l2_ioctl+0x148/0x18c [ 214.193458][ T8555] __arm64_sys_ioctl+0x14c/0x1c4 [ 214.193469][ T8555] invoke_syscall+0x98/0x244 [ 214.193480][ T8555] el0_svc_common+0xe8/0x23c [ 214.193489][ T8555] do_el0_svc+0x48/0x58 [ 214.193499][ T8555] el0_svc+0x64/0x260 [ 214.193507][ T8555] el0t_64_sync_handler+0x48/0x148 [ 214.193514][ T8555] el0t_64_sync+0x198/0x19c [ 214.265915][ T8554] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1017'. [ 214.573993][ T8562] misc userio: Invalid payload size [ 215.416551][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.495295][ T4715] Bluetooth: unknown link type 213 [ 215.495327][ T4715] Bluetooth: hci1: connection err: -111 [ 216.133681][ T8592] 9p: Bad value for 'wfdno' [ 216.147999][ T8592] loop1: detected capacity change from 0 to 512 [ 216.174378][ T8592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.190916][ T4808] hid-generic 000F:0003:0007.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 216.222438][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.244319][ T8601] fido_id[8601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.017719][ T8607] syz.3.1032 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 217.060348][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 217.068234][ T8621] loop2: detected capacity change from 0 to 8 [ 217.068335][ T8619] hsr_slave_0 (unregistering): left promiscuous mode [ 217.071571][ T8621] Page size > filesystem block size (0). This is currently not supported! [ 217.150095][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 217.377138][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.450606][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.813101][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 218.029738][ T8649] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20160000 [ 218.033878][ T8649] Memory failure: 0x21cf58: unhandlable page. [ 218.035774][ T8649] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored [ 218.596403][ T8670] netlink: 'syz.3.1049': attribute type 83 has an invalid length. [ 219.486490][ T4715] Bluetooth: Wrong link type (-71) [ 219.741782][ T8696] loop1: detected capacity change from 0 to 8 [ 219.800255][ T8696] Page size > filesystem block size (0). This is currently not supported! [ 219.815742][ T8696] loop1: detected capacity change from 0 to 512 [ 219.821640][ T8696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.832474][ T8696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.984817][ T4715] Bluetooth: Wrong link type (-71) [ 220.096594][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.152777][ T8703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.418122][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 220.709611][ T8726] syzkaller0: entered promiscuous mode [ 220.709645][ T8726] syzkaller0: entered allmulticast mode [ 220.711372][ T8726] FAULT_INJECTION: forcing a failure. [ 220.711372][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.711387][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.2.1064 Not tainted syzkaller #0 PREEMPT [ 220.711396][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.711400][ T8726] Call trace: [ 220.711403][ T8726] show_stack+0x2c/0x3c (C) [ 220.711423][ T8726] __dump_stack+0x30/0x40 [ 220.711433][ T8726] dump_stack_lvl+0xd8/0x12c [ 220.711442][ T8726] dump_stack+0x1c/0x28 [ 220.711452][ T8726] should_fail_ex+0x414/0x588 [ 220.711461][ T8726] should_fail+0x14/0x24 [ 220.711469][ T8726] should_fail_usercopy+0x20/0x30 [ 220.711477][ T8726] _inline_copy_from_user+0x40/0x180 [ 220.711486][ T8726] move_addr_to_kernel+0x88/0x168 [ 220.711496][ T8726] __sys_sendto+0x1b4/0x338 [ 220.711505][ T8726] __arm64_sys_sendto+0xd8/0xf8 [ 220.711515][ T8726] invoke_syscall+0x98/0x244 [ 220.711525][ T8726] el0_svc_common+0xe8/0x23c [ 220.711535][ T8726] do_el0_svc+0x48/0x58 [ 220.711544][ T8726] el0_svc+0x64/0x260 [ 220.711552][ T8726] el0t_64_sync_handler+0x48/0x148 [ 220.711559][ T8726] el0t_64_sync+0x198/0x19c [ 221.112578][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.245674][ T4715] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 221.807382][ T8743] loop2: detected capacity change from 0 to 512 [ 221.879481][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.389339][ T8750] syzkaller0: entered promiscuous mode [ 222.389370][ T8750] syzkaller0: entered allmulticast mode [ 222.742047][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.745229][ T8748] FAULT_INJECTION: forcing a failure. [ 222.745229][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.748362][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.0.1069 Not tainted syzkaller #0 PREEMPT [ 222.748387][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.748393][ T8748] Call trace: [ 222.748397][ T8748] show_stack+0x2c/0x3c (C) [ 222.748422][ T8748] __dump_stack+0x30/0x40 [ 222.748434][ T8748] dump_stack_lvl+0xd8/0x12c [ 222.748444][ T8748] dump_stack+0x1c/0x28 [ 222.748453][ T8748] should_fail_ex+0x414/0x588 [ 222.748462][ T8748] should_fail+0x14/0x24 [ 222.748470][ T8748] should_fail_usercopy+0x20/0x30 [ 222.748479][ T8748] _inline_copy_from_user+0x40/0x180 [ 222.748489][ T8748] do_handle_open+0xe4/0x7a8 [ 222.748496][ T8748] __arm64_sys_open_by_handle_at+0x80/0x94 [ 222.748504][ T8748] invoke_syscall+0x98/0x244 [ 222.748514][ T8748] el0_svc_common+0xe8/0x23c [ 222.748524][ T8748] do_el0_svc+0x48/0x58 [ 222.748533][ T8748] el0_svc+0x64/0x260 [ 222.748542][ T8748] el0t_64_sync_handler+0x48/0x148 [ 222.748549][ T8748] el0t_64_sync+0x198/0x19c [ 223.753770][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'. [ 224.491790][ T8796] gre1: entered allmulticast mode [ 225.538960][ T4715] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 225.792795][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1088'. [ 225.827125][ T8819] binder: 8818:8819 BC_FREE_BUFFER no match for buffer at offset 20ffa000 [ 225.829115][ T8819] binder: 8818:8819 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 225.832019][ T8819] binder: 8819 RLIMIT_NICE not set [ 225.901497][ T8824] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20001 [ 225.916723][ T8826] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1093'. [ 225.918590][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 225.924185][ T8826] loop3: detected capacity change from 0 to 1024 [ 225.972592][ T8827] loop2: detected capacity change from 0 to 2048 [ 225.974246][ T8827] EXT4-fs: Ignoring removed i_version option [ 226.030822][ T8826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.072293][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.075865][ T8837] binder: 8836:8837 tried to acquire reference to desc 0, got 1 instead [ 226.076772][ T8837] binder: 8836:8837 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 226.076792][ T8837] binder: 8837 RLIMIT_NICE not set [ 226.076809][ T8837] binder: 8837 RLIMIT_NICE not set [ 226.077104][ T8837] binder: 8837 RLIMIT_NICE not set [ 226.077275][ T8837] binder: 8836:8837 got transaction with invalid fd, -1 [ 226.077291][ T8837] binder: 8837:8836 translate fd failed [ 226.077343][ T8837] binder: 8836:8837 transaction reply to 8836:8837 failed 14/29201/-9, code 0 size 72-24 line 3578 [ 226.077369][ T8837] binder: send failed reply for transaction 13 to 8836:8837 [ 226.121235][ T5024] binder: undelivered TRANSACTION_ERROR: 29190 [ 226.122994][ T5024] binder: undelivered TRANSACTION_COMPLETE [ 226.125322][ T5024] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.017782][ T8868] loop3: detected capacity change from 0 to 512 [ 228.093441][ T8868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.120146][ T8877] FAULT_INJECTION: forcing a failure. [ 228.120146][ T8877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.120182][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.1.1106 Not tainted syzkaller #0 PREEMPT [ 228.120193][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.120198][ T8877] Call trace: [ 228.120202][ T8877] show_stack+0x2c/0x3c (C) [ 228.120219][ T8877] __dump_stack+0x30/0x40 [ 228.120231][ T8877] dump_stack_lvl+0xd8/0x12c [ 228.120240][ T8877] dump_stack+0x1c/0x28 [ 228.120249][ T8877] should_fail_ex+0x414/0x588 [ 228.120260][ T8877] should_fail+0x14/0x24 [ 228.120268][ T8877] should_fail_usercopy+0x20/0x30 [ 228.120276][ T8877] simple_read_from_buffer+0xc4/0x240 [ 228.120286][ T8877] proc_fail_nth_read+0x1a8/0x248 [ 228.120294][ T8877] vfs_read+0x230/0x8e4 [ 228.120304][ T8877] ksys_read+0x12c/0x224 [ 228.120313][ T8877] __arm64_sys_read+0x7c/0x90 [ 228.120323][ T8877] invoke_syscall+0x98/0x244 [ 228.120333][ T8877] el0_svc_common+0xe8/0x23c [ 228.120343][ T8877] do_el0_svc+0x48/0x58 [ 228.120352][ T8877] el0_svc+0x64/0x260 [ 228.120360][ T8877] el0t_64_sync_handler+0x48/0x148 [ 228.120367][ T8877] el0t_64_sync+0x198/0x19c [ 228.239631][ T8880] loop1: detected capacity change from 0 to 512 [ 228.408235][ T8882] FAULT_INJECTION: forcing a failure. [ 228.408235][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 228.408276][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.1.1107 Not tainted syzkaller #0 PREEMPT [ 228.408285][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.408290][ T8882] Call trace: [ 228.408293][ T8882] show_stack+0x2c/0x3c (C) [ 228.408312][ T8882] __dump_stack+0x30/0x40 [ 228.408322][ T8882] dump_stack_lvl+0xd8/0x12c [ 228.408332][ T8882] dump_stack+0x1c/0x28 [ 228.408341][ T8882] should_fail_ex+0x414/0x588 [ 228.408350][ T8882] should_failslab+0xc4/0x124 [ 228.408359][ T8882] kmem_cache_alloc_noprof+0x8c/0x610 [ 228.408368][ T8882] skb_clone+0x1a8/0x31c [ 228.408376][ T8882] __netlink_deliver_tap+0x36c/0x6f8 [ 228.408387][ T8882] netlink_deliver_tap+0x1d8/0x1dc [ 228.408396][ T8882] netlink_unicast+0x5e8/0x800 [ 228.408406][ T8882] netlink_sendmsg+0x63c/0x920 [ 228.408415][ T8882] __sock_sendmsg+0xc8/0x138 [ 228.408425][ T8882] ____sys_sendmsg+0x418/0x70c [ 228.408431][ T8882] ___sys_sendmsg+0x198/0x224 [ 228.408438][ T8882] __sys_sendmsg+0x160/0x214 [ 228.408445][ T8882] __arm64_sys_sendmsg+0x80/0x94 [ 228.408452][ T8882] invoke_syscall+0x98/0x244 [ 228.408461][ T8882] el0_svc_common+0xe8/0x23c [ 228.408471][ T8882] do_el0_svc+0x48/0x58 [ 228.408480][ T8882] el0_svc+0x64/0x260 [ 228.408488][ T8882] el0t_64_sync_handler+0x48/0x148 [ 228.408495][ T8882] el0t_64_sync+0x198/0x19c [ 228.872908][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.036571][ T8827] EXT4-fs warning (device loop2): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 229.036571][ T8827] [ 229.111145][ T8893] loop3: detected capacity change from 0 to 128 [ 229.218471][ T4715] Bluetooth: Wrong link type (-71) [ 230.068272][ T8906] loop4: detected capacity change from 0 to 128 [ 230.111429][ T8916] tipc: Enabling of bearer rejected, already enabled [ 230.128756][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'. [ 230.132481][ T8918] loop1: detected capacity change from 0 to 8 [ 230.134467][ T8918] Page size > filesystem block size (0). This is currently not supported! [ 230.144306][ T8918] loop1: detected capacity change from 0 to 512 [ 230.150923][ T8918] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.210629][ T8918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.405290][ T8926] loop4: detected capacity change from 0 to 512 [ 231.776907][ T8928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.984713][ T8929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.026581][ T8926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.186862][ T8933] loop2: detected capacity change from 0 to 512 [ 232.942214][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.948337][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.145611][ T4715] Bluetooth: Wrong link type (-71) [ 235.431934][ T8979] loop4: detected capacity change from 0 to 256 [ 235.441861][ T8979] FAT-fs (loop4): Directory bread(block 64) failed [ 235.443183][ T8979] FAT-fs (loop4): Directory bread(block 65) failed [ 235.472234][ T8979] FAT-fs (loop4): Directory bread(block 66) failed [ 235.472332][ T8979] FAT-fs (loop4): Directory bread(block 67) failed [ 235.472499][ T8979] FAT-fs (loop4): Directory bread(block 68) failed [ 235.472562][ T8979] FAT-fs (loop4): Directory bread(block 69) failed [ 235.472699][ T8979] FAT-fs (loop4): Directory bread(block 70) failed [ 235.472789][ T8979] FAT-fs (loop4): Directory bread(block 71) failed [ 235.473091][ T8979] FAT-fs (loop4): Directory bread(block 72) failed [ 235.473200][ T8979] FAT-fs (loop4): Directory bread(block 73) failed [ 236.181425][ T8992] loop1: detected capacity change from 0 to 8 [ 236.200792][ T8992] Page size > filesystem block size (0). This is currently not supported! [ 236.221605][ T8992] loop1: detected capacity change from 0 to 512 [ 236.226358][ T8992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.301657][ T8992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.496606][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.582936][ T9010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.681942][ T9005] loop3: detected capacity change from 0 to 512 [ 236.691576][ T9005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.697215][ T9005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.746499][ T9020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.079811][ T9031] syz.0.1145 (9031): drop_caches: 2 [ 237.904797][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.282173][ T9066] input: syz0 as /devices/virtual/input/input7 [ 239.360224][ T9067] loop2: detected capacity change from 0 to 8192 [ 239.406131][ T9067] loop2: p1 < > p3 < > p4 [ 239.406154][ T9067] loop2: partition table partially beyond EOD, truncated [ 239.406262][ T9067] loop2: p1 start 4294967040 is beyond EOD, truncated [ 239.412021][ T9067] loop2: p4 size 851974 extends beyond EOD, truncated [ 239.861255][ T9026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.148383][ T9077] loop1: detected capacity change from 0 to 256 [ 240.180716][ T9077] FAT-fs (loop1): Directory bread(block 64) failed [ 240.180752][ T9077] FAT-fs (loop1): Directory bread(block 65) failed [ 240.180785][ T9077] FAT-fs (loop1): Directory bread(block 66) failed [ 240.180803][ T9077] FAT-fs (loop1): Directory bread(block 67) failed [ 240.180832][ T9077] FAT-fs (loop1): Directory bread(block 68) failed [ 240.180848][ T9077] FAT-fs (loop1): Directory bread(block 69) failed [ 240.180875][ T9077] FAT-fs (loop1): Directory bread(block 70) failed [ 240.180889][ T9077] FAT-fs (loop1): Directory bread(block 71) failed [ 240.180915][ T9077] FAT-fs (loop1): Directory bread(block 72) failed [ 240.180929][ T9077] FAT-fs (loop1): Directory bread(block 73) failed [ 240.309824][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 240.419250][ T9085] loop2: detected capacity change from 0 to 8 [ 240.420747][ T9085] Page size > filesystem block size (0). This is currently not supported! [ 240.437498][ T9085] loop2: detected capacity change from 0 to 512 [ 240.440688][ T9085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 240.470865][ T9085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.641641][ T9090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.698396][ T9091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.091465][ T4715] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 242.119979][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.270870][ T9120] syzkaller0: entered promiscuous mode [ 242.270906][ T9120] syzkaller0: entered allmulticast mode [ 242.605524][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1171'. [ 243.705133][ T9151] loop2: detected capacity change from 0 to 8 [ 243.709834][ T9151] Page size > filesystem block size (0). This is currently not supported! [ 243.773554][ T9152] syzkaller0: entered promiscuous mode [ 243.774380][ T9154] loop2: detected capacity change from 0 to 512 [ 243.774884][ T9152] syzkaller0: entered allmulticast mode [ 243.781322][ T9154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.799833][ T9154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.297425][ T9123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.350186][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.354006][ T9171] netlink: 'syz.3.1183': attribute type 32 has an invalid length. [ 245.390645][ T4715] Bluetooth: unknown link type 213 [ 245.390680][ T4715] Bluetooth: hci1: connection err: -111 [ 245.407568][ T9176] syzkaller0: entered promiscuous mode [ 245.407599][ T9176] syzkaller0: entered allmulticast mode [ 245.696322][ T4715] Bluetooth: Wrong link type (-71) [ 245.795084][ T9199] 9p: Bad value for 'wfdno' [ 246.831009][ T9216] loop4: detected capacity change from 0 to 8 [ 246.836860][ T9216] Page size > filesystem block size (0). This is currently not supported! [ 246.891059][ T9217] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 246.939094][ T9217] syz.1.1193 (9217): drop_caches: 2 [ 247.027291][ T9221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.101186][ T9222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.464534][ T9237] syzkaller0: entered promiscuous mode [ 247.464567][ T9237] syzkaller0: entered allmulticast mode [ 247.757162][ T4715] Bluetooth: Wrong link type (-71) [ 248.835830][ T1533] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.835888][ T1533] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.505614][ T9224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.377245][ T9285] loop4: detected capacity change from 0 to 8 [ 251.377865][ T9285] Page size > filesystem block size (0). This is currently not supported! [ 251.387724][ T9285] loop4: detected capacity change from 0 to 512 [ 251.390762][ T9285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.404258][ T9285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.306585][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.394672][ T9299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.481819][ T9305] loop3: detected capacity change from 0 to 512 [ 252.487475][ T9305] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 252.490512][ T9305] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.1218: invalid block [ 252.490558][ T9305] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 252.493853][ T9305] EXT4-fs (loop3): 1 truncate cleaned up [ 252.494913][ T9305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.518517][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.546974][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 253.582877][ T9324] loop1: detected capacity change from 0 to 256 [ 253.923127][ T9324] FAT-fs (loop1): Directory bread(block 64) failed [ 253.923163][ T9324] FAT-fs (loop1): Directory bread(block 65) failed [ 253.923201][ T9324] FAT-fs (loop1): Directory bread(block 66) failed [ 253.923217][ T9324] FAT-fs (loop1): Directory bread(block 67) failed [ 253.923243][ T9324] FAT-fs (loop1): Directory bread(block 68) failed [ 253.923258][ T9324] FAT-fs (loop1): Directory bread(block 69) failed [ 253.923285][ T9324] FAT-fs (loop1): Directory bread(block 70) failed [ 253.923299][ T9324] FAT-fs (loop1): Directory bread(block 71) failed [ 253.923325][ T9324] FAT-fs (loop1): Directory bread(block 72) failed [ 253.923340][ T9324] FAT-fs (loop1): Directory bread(block 73) failed [ 254.838933][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.916471][ T9332] syzkaller0: entered promiscuous mode [ 254.916498][ T9332] syzkaller0: entered allmulticast mode [ 254.920799][ T9332] tc_dump_action: action bad kind [ 255.552899][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1230'. [ 255.552934][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 255.567242][ T9350] netlink: 'syz.0.1228': attribute type 3 has an invalid length. [ 255.660621][ T9362] loop2: detected capacity change from 0 to 512 [ 255.673657][ T9362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.693557][ T9362] syzkaller0: entered promiscuous mode [ 255.693587][ T9362] syzkaller0: entered allmulticast mode [ 255.713848][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 255.781809][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.950311][ T9381] syzkaller0: entered promiscuous mode [ 255.950343][ T9381] syzkaller0: entered allmulticast mode [ 255.954799][ T9381] tc_dump_action: action bad kind [ 255.973078][ T9376] 9p: Bad value for 'rfdno' [ 255.979724][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 256.213930][ T4715] Bluetooth: Wrong link type (-71) [ 257.284695][ T9401] smc: net device wlan0 applied user defined pnetid SYZ0 [ 258.296273][ T9413] loop3: detected capacity change from 0 to 512 [ 259.303671][ T9413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.325295][ T4715] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 259.390919][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1247'. [ 259.473409][ T9424] loop1: detected capacity change from 0 to 512 [ 259.481205][ T9424] EXT4-fs (loop1): Invalid default hash set in the superblock [ 259.511655][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.688804][ T26] kernel read not supported for file /sysvipc/msg (pid: 26 comm: kworker/1:1) [ 259.924057][ T9447] FAULT_INJECTION: forcing a failure. [ 259.924057][ T9447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.924094][ T9447] CPU: 0 UID: 0 PID: 9447 Comm: syz.0.1259 Not tainted syzkaller #0 PREEMPT [ 259.924108][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.924114][ T9447] Call trace: [ 259.924117][ T9447] show_stack+0x2c/0x3c (C) [ 259.924134][ T9447] __dump_stack+0x30/0x40 [ 259.924145][ T9447] dump_stack_lvl+0xd8/0x12c [ 259.924154][ T9447] dump_stack+0x1c/0x28 [ 259.924164][ T9447] should_fail_ex+0x414/0x588 [ 259.924173][ T9447] should_fail+0x14/0x24 [ 259.924183][ T9447] should_fail_usercopy+0x20/0x30 [ 259.924193][ T9447] strncpy_from_user+0x48/0x38c [ 259.924205][ T9447] do_getname+0x84/0x230 [ 259.924212][ T9447] getname_flags+0x2c/0x3c [ 259.924219][ T9447] ksys_truncate+0xa8/0x190 [ 259.924228][ T9447] __arm64_sys_truncate+0x5c/0x74 [ 259.924236][ T9447] invoke_syscall+0x98/0x244 [ 259.924246][ T9447] el0_svc_common+0xe8/0x23c [ 259.924256][ T9447] do_el0_svc+0x48/0x58 [ 259.924265][ T9447] el0_svc+0x64/0x260 [ 259.924273][ T9447] el0t_64_sync_handler+0x48/0x148 [ 259.924280][ T9447] el0t_64_sync+0x198/0x19c [ 260.752655][ T9456] loop1: detected capacity change from 0 to 8 [ 260.760284][ T9456] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 260.776741][ T9456] netlink: 'syz.1.1262': attribute type 4 has an invalid length. [ 261.879099][ T9486] loop3: detected capacity change from 0 to 512 [ 261.881120][ T9486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.881167][ T9486] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.884507][ T9486] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 261.887930][ T9486] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.1269: casefold flag without casefold feature [ 261.887975][ T9486] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 261.888296][ T9486] EXT4-fs (loop3): get root inode failed [ 261.888303][ T9486] EXT4-fs (loop3): mount failed [ 261.897744][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1268'. [ 261.912722][ T9484] bond2: (slave ip6gretap1): making interface the new active one [ 261.914646][ T9484] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 261.915784][ T9492] loop3: detected capacity change from 0 to 512 [ 261.915981][ T9492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.919230][ T9492] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.920733][ T9492] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 261.921633][ T9492] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.1269: casefold flag without casefold feature [ 261.921651][ T9492] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 261.921857][ T9492] EXT4-fs (loop3): get root inode failed [ 261.921864][ T9492] EXT4-fs (loop3): mount failed [ 261.930171][ T9478] binder: Bad value for 'stats' [ 262.090025][ T4715] Bluetooth: unknown link type 213 [ 262.090979][ T4715] Bluetooth: hci1: connection err: -111 [ 264.500113][ T9527] loop4: detected capacity change from 0 to 1024 [ 264.502314][ T9527] EXT4-fs: Ignoring removed i_version option [ 264.504193][ T9527] EXT4-fs: Ignoring removed orlov option [ 264.506115][ T9527] ext4: Unknown parameter 'fowner>00000000000000000001' [ 265.062680][ T9550] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 266.072026][ T9563] netlink: 'syz.0.1287': attribute type 21 has an invalid length. [ 266.072067][ T9563] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.072232][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 266.286179][ T4715] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 266.366144][ T9572] binder: 9571:9572 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 266.448450][ T4715] Bluetooth: unknown link type 213 [ 266.448488][ T4715] Bluetooth: hci3: connection err: -111 [ 267.028821][ T9590] loop1: detected capacity change from 0 to 2048 [ 267.245161][ T4715] Bluetooth: unknown link type 213 [ 267.245190][ T4715] Bluetooth: hci0: connection err: -111 [ 268.151814][ T9534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.404669][ T9617] loop3: detected capacity change from 0 to 1024 [ 268.451089][ T9617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.471698][ T9617] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1305: lblock 0 mapped to illegal pblock 0 (length 6) [ 268.558423][ T9630] loop2: detected capacity change from 0 to 256 [ 268.592511][ T9630] FAT-fs (loop2): Directory bread(block 64) failed [ 268.592548][ T9630] FAT-fs (loop2): Directory bread(block 65) failed [ 268.592576][ T9630] FAT-fs (loop2): Directory bread(block 66) failed [ 268.592588][ T9630] FAT-fs (loop2): Directory bread(block 67) failed [ 268.592612][ T9630] FAT-fs (loop2): Directory bread(block 68) failed [ 268.592623][ T9630] FAT-fs (loop2): Directory bread(block 69) failed [ 268.592644][ T9630] FAT-fs (loop2): Directory bread(block 70) failed [ 268.592655][ T9630] FAT-fs (loop2): Directory bread(block 71) failed [ 268.592676][ T9630] FAT-fs (loop2): Directory bread(block 72) failed [ 268.592687][ T9630] FAT-fs (loop2): Directory bread(block 73) failed [ 268.846008][ T4715] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 269.122773][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 269.263296][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.753059][ T9669] FAULT_INJECTION: forcing a failure. [ 269.753059][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 269.753101][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.0.1320 Not tainted syzkaller #0 PREEMPT [ 269.753112][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 269.753119][ T9669] Call trace: [ 269.753122][ T9669] show_stack+0x2c/0x3c (C) [ 269.753142][ T9669] __dump_stack+0x30/0x40 [ 269.753152][ T9669] dump_stack_lvl+0xd8/0x12c [ 269.753162][ T9669] dump_stack+0x1c/0x28 [ 269.753171][ T9669] should_fail_ex+0x414/0x588 [ 269.753181][ T9669] should_failslab+0xc4/0x124 [ 269.753189][ T9669] __kmalloc_noprof+0x100/0x6f0 [ 269.753198][ T9669] io_cache_alloc_new+0x58/0x114 [ 269.753208][ T9669] __io_prep_rw+0x268/0xc20 [ 269.753217][ T9669] io_prep_rw+0x44/0x124 [ 269.753225][ T9669] io_prep_rwv+0x9c/0x2fc [ 269.753233][ T9669] io_prep_readv+0x2c/0x3c [ 269.753241][ T9669] io_submit_sqes+0x8a8/0x1e48 [ 269.753248][ T9669] __arm64_sys_io_uring_enter+0x290/0x1674 [ 269.753255][ T9669] invoke_syscall+0x98/0x244 [ 269.753265][ T9669] el0_svc_common+0xe8/0x23c [ 269.753275][ T9669] do_el0_svc+0x48/0x58 [ 269.753284][ T9669] el0_svc+0x64/0x260 [ 269.753292][ T9669] el0t_64_sync_handler+0x48/0x148 [ 269.753299][ T9669] el0t_64_sync+0x198/0x19c [ 270.229820][ T9685] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1326'. [ 270.281574][ T9688] loop2: detected capacity change from 0 to 4096 [ 270.284585][ T9688] EXT4-fs (loop2): Test dummy encryption mode enabled [ 270.301368][ T9688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.314877][ T9656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.338728][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.551877][ T9717] FAULT_INJECTION: forcing a failure. [ 272.551877][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 272.551913][ T9717] CPU: 1 UID: 0 PID: 9717 Comm: syz.3.1336 Not tainted syzkaller #0 PREEMPT [ 272.551925][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.551932][ T9717] Call trace: [ 272.551935][ T9717] show_stack+0x2c/0x3c (C) [ 272.551957][ T9717] __dump_stack+0x30/0x40 [ 272.551968][ T9717] dump_stack_lvl+0xd8/0x12c [ 272.551977][ T9717] dump_stack+0x1c/0x28 [ 272.551987][ T9717] should_fail_ex+0x414/0x588 [ 272.551996][ T9717] should_failslab+0xc4/0x124 [ 272.552005][ T9717] kmem_cache_alloc_noprof+0x8c/0x610 [ 272.552013][ T9717] skb_clone+0x1a8/0x31c [ 272.552022][ T9717] __netlink_deliver_tap+0x36c/0x6f8 [ 272.552033][ T9717] netlink_deliver_tap+0x1d8/0x1dc [ 272.552043][ T9717] netlink_unicast+0x5e8/0x800 [ 272.552052][ T9717] netlink_sendmsg+0x63c/0x920 [ 272.552062][ T9717] __sock_sendmsg+0xc8/0x138 [ 272.552071][ T9717] ____sys_sendmsg+0x418/0x70c [ 272.552078][ T9717] ___sys_sendmsg+0x198/0x224 [ 272.552085][ T9717] __sys_sendmsg+0x160/0x214 [ 272.552091][ T9717] __arm64_sys_sendmsg+0x80/0x94 [ 272.552104][ T9717] invoke_syscall+0x98/0x244 [ 272.552115][ T9717] el0_svc_common+0xe8/0x23c [ 272.552125][ T9717] do_el0_svc+0x48/0x58 [ 272.552134][ T9717] el0_svc+0x64/0x260 [ 272.552142][ T9717] el0t_64_sync_handler+0x48/0x148 [ 272.552149][ T9717] el0t_64_sync+0x198/0x19c [ 272.552166][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 272.588282][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.592234][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.594459][ T9720] netlink: 'syz.4.1335': attribute type 11 has an invalid length. [ 272.594490][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 272.649872][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 272.649911][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 272.923742][ T9726] bridge0: entered promiscuous mode [ 272.931526][ T9726] batadv_slave_1: entered promiscuous mode [ 272.931614][ T9726] batadv_slave_1: left promiscuous mode [ 272.934531][ T9726] bridge0: left promiscuous mode [ 273.188104][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 273.289207][ T9745] FAULT_INJECTION: forcing a failure. [ 273.289207][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 273.289244][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: syz.3.1340 Not tainted syzkaller #0 PREEMPT [ 273.289258][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 273.289264][ T9745] Call trace: [ 273.289268][ T9745] show_stack+0x2c/0x3c (C) [ 273.289288][ T9745] __dump_stack+0x30/0x40 [ 273.289301][ T9745] dump_stack_lvl+0xd8/0x12c [ 273.289310][ T9745] dump_stack+0x1c/0x28 [ 273.289319][ T9745] should_fail_ex+0x414/0x588 [ 273.289329][ T9745] should_failslab+0xc4/0x124 [ 273.289338][ T9745] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 273.289347][ T9745] __alloc_skb+0x1f0/0x5f8 [ 273.289358][ T9745] alloc_skb_with_frags+0xb8/0x660 [ 273.289367][ T9745] sock_alloc_send_pskb+0x730/0x840 [ 273.289376][ T9745] unix_dgram_sendmsg+0x41c/0x1020 [ 273.289386][ T9745] __sock_sendmsg+0xc8/0x138 [ 273.289396][ T9745] ____sys_sendmsg+0x418/0x70c [ 273.289402][ T9745] ___sys_sendmsg+0x198/0x224 [ 273.289409][ T9745] __sys_sendmsg+0x160/0x214 [ 273.289415][ T9745] __arm64_sys_sendmsg+0x80/0x94 [ 273.289422][ T9745] invoke_syscall+0x98/0x244 [ 273.289432][ T9745] el0_svc_common+0xe8/0x23c [ 273.289442][ T9745] do_el0_svc+0x48/0x58 [ 273.289452][ T9745] el0_svc+0x64/0x260 [ 273.289460][ T9745] el0t_64_sync_handler+0x48/0x148 [ 273.289467][ T9745] el0t_64_sync+0x198/0x19c [ 274.938943][ T4715] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 276.713496][ T9790] loop4: detected capacity change from 0 to 512 [ 276.870299][ T9755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.330047][ T9790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 277.352214][ T9795] netlink: 'syz.0.1357': attribute type 27 has an invalid length. [ 277.358335][ T9790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.386811][ T9795] bond0: (slave bond_slave_1): Releasing backup interface [ 277.429504][ T9804] loop2: detected capacity change from 0 to 4096 [ 277.433551][ T9804] EXT4-fs: inline encryption not supported [ 277.436385][ T9804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 277.441492][ T9804] EXT4-fs (loop2): Test dummy encryption mode enabled [ 277.460216][ T9804] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 277.460275][ T9804] System zones: 0-5 [ 277.469288][ T9804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.478189][ T9804] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.501162][ T4721] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 277.804747][ T4721] EXT4-fs (loop4): Remounting filesystem read-only [ 278.484730][ T6248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.487092][ T6066] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 278.487112][ T6066] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 278.506191][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.506331][ T4715] Bluetooth: unknown link type 213 [ 278.506345][ T4715] Bluetooth: hci4: connection err: -111 [ 278.552408][ T9817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 280.195173][ T4716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.197927][ T4716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.199755][ T4716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.201864][ T4716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.204371][ T4716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.619675][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.621432][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.623066][ T9839] bridge_slave_0: entered allmulticast mode [ 280.625011][ T9839] bridge_slave_0: entered promiscuous mode [ 280.627914][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.629595][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.631305][ T9839] bridge_slave_1: entered allmulticast mode [ 280.633077][ T9839] bridge_slave_1: entered promiscuous mode [ 280.642827][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.651704][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.661183][ T9839] team0: Port device team_slave_0 added [ 280.665293][ T9839] team0: Port device team_slave_1 added [ 280.683359][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.683394][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.683406][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.686513][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.686521][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.686532][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.727304][ T9839] hsr_slave_0: entered promiscuous mode [ 280.731027][ T9839] hsr_slave_1: entered promiscuous mode [ 280.731325][ T9839] debugfs: 'hsr0' already exists in 'hsr' [ 280.731336][ T9839] Cannot create hsr debugfs directory [ 280.918219][ T9839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.921419][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.921824][ T9839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.926324][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.926597][ T9839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.927952][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.928454][ T9839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.931107][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.960636][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.960684][ T9839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.960777][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.960813][ T9839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.009334][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.018784][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.020799][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.029888][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.035885][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.035926][ T8094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.043960][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.043996][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.212500][ T9887] loop1: detected capacity change from 0 to 512 [ 281.221748][ T9887] EXT4-fs (loop1): Test dummy encryption mode enabled [ 281.221787][ T9887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 281.239036][ T9887] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1381: bad orphan inode 131083 [ 281.239067][ T9887] loop1: lost filesystem error report for type 5 error -117 [ 281.242255][ T9887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.247892][ T9887] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 281.268851][ T9887] netlink: 'syz.1.1381': attribute type 21 has an invalid length. [ 281.316646][ T9887] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.334566][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'. [ 281.382979][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.535761][ T9839] veth0_vlan: entered promiscuous mode [ 281.542634][ T9839] veth1_vlan: entered promiscuous mode [ 281.567510][ T9839] veth0_macvtap: entered promiscuous mode [ 281.571798][ T9839] veth1_macvtap: entered promiscuous mode [ 281.587222][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.593131][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.602324][ T6513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.602372][ T6513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.602402][ T6513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.602431][ T6513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.663535][ T3770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.663559][ T3770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.691558][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.691586][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.743922][ T4710] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /266/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 281.860896][ T9889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.265849][ T4716] Bluetooth: hci3: command tx timeout [ 282.421986][ T9889] bond0: (slave syz_tun): Releasing backup interface [ 282.727375][ T4716] Bluetooth: unknown link type 213 [ 282.727412][ T4716] Bluetooth: hci2: connection err: -111 [ 283.126370][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.135485][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.137365][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.139447][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.141357][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.839605][ T6066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.394814][ T4716] Bluetooth: hci3: command tx timeout [ 284.405532][ T4715] Bluetooth: Wrong link type (-71) [ 284.546063][ T6066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.753284][ T6066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.155381][ T6066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.208526][ T4715] Bluetooth: hci0: command tx timeout [ 285.219407][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.222562][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.222662][ T9939] bridge_slave_0: entered allmulticast mode [ 285.573798][ T4715] Bluetooth: Wrong link type (-71) [ 285.803453][ T9939] bridge_slave_0: entered promiscuous mode [ 285.804571][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.804595][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.804660][ T9939] bridge_slave_1: entered allmulticast mode [ 285.805111][ T9939] bridge_slave_1: entered promiscuous mode [ 285.835304][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.838896][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.860442][ T9939] team0: Port device team_slave_0 added [ 285.866877][ T9939] team0: Port device team_slave_1 added [ 285.881337][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.881375][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.881432][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.883520][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.883557][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.883675][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.920861][ T9939] hsr_slave_0: entered promiscuous mode [ 285.922456][ T9939] hsr_slave_1: entered promiscuous mode [ 285.924286][ T9939] debugfs: 'hsr0' already exists in 'hsr' [ 285.926024][ T9939] Cannot create hsr debugfs directory [ 286.405476][ T4715] Bluetooth: hci3: command tx timeout [ 286.445585][ T6066] bridge_slave_1: left allmulticast mode [ 286.445684][ T6066] bridge_slave_1: left promiscuous mode [ 286.446480][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.450623][ T6066] bridge_slave_0: left allmulticast mode [ 286.450651][ T6066] bridge_slave_0: left promiscuous mode [ 286.450719][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.557239][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.597774][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.616598][ T6066] bond0 (unregistering): Released all slaves [ 286.674025][ T6066] tipc: Disabling bearer [ 286.674381][ T6066] tipc: Disabling bearer [ 286.677713][ T6066] tipc: Left network mode [ 286.739845][ T4715] Bluetooth: unknown link type 213 [ 286.739882][ T4715] Bluetooth: hci3: connection err: -111 [ 286.878321][T10018] 9pnet: p9_errstr2errno: server reported unknown error  [ 286.904254][ T4793] IPVS: starting estimator thread 0... [ 286.995748][T10022] IPVS: using max 58 ests per chain, 139200 per kthread [ 287.200613][ T6066] hsr_slave_0: left promiscuous mode [ 287.201856][ T6066] hsr_slave_1: left promiscuous mode [ 287.203287][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.203303][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.207126][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.207140][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.213456][ T6066] veth1_macvtap: left promiscuous mode [ 287.213501][ T6066] veth0_macvtap: left promiscuous mode [ 287.213547][ T6066] veth1_vlan: left promiscuous mode [ 287.278752][ T6066] team0 (unregistering): Port device vlan0 removed [ 287.285551][ T4715] Bluetooth: hci0: command tx timeout [ 287.322688][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 287.327159][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 287.599111][ T6066] IPVS: stop unused estimator thread 0... [ 287.989365][ T9968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.227738][ T9939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.631948][ T4716] Bluetooth: hci3: command tx timeout [ 288.649574][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 288.649934][ T9939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.666353][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 288.671893][ T9939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.682706][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.683111][ T9939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.685242][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.784972][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.788552][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.796917][ T9939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.796941][ T9939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.823402][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.823446][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.824038][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.824059][ T6513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.456398][ T4715] Bluetooth: hci0: command tx timeout [ 289.680329][T10058] FAULT_INJECTION: forcing a failure. [ 289.680329][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 289.680346][T10058] CPU: 1 UID: 0 PID: 10058 Comm: syz.5.1415 Not tainted syzkaller #0 PREEMPT [ 289.680356][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 289.680361][T10058] Call trace: [ 289.680364][T10058] show_stack+0x2c/0x3c (C) [ 289.680381][T10058] __dump_stack+0x30/0x40 [ 289.680393][T10058] dump_stack_lvl+0xd8/0x12c [ 289.680402][T10058] dump_stack+0x1c/0x28 [ 289.680411][T10058] should_fail_ex+0x414/0x588 [ 289.680421][T10058] should_failslab+0xc4/0x124 [ 289.680430][T10058] __kmalloc_noprof+0x100/0x6f0 [ 289.680439][T10058] tomoyo_encode2+0x10c/0x33c [ 289.680450][T10058] tomoyo_encode+0x34/0x50 [ 289.680460][T10058] tomoyo_realpath_from_path+0x478/0x4cc [ 289.680470][T10058] tomoyo_path_number_perm+0x1f4/0x514 [ 289.680480][T10058] tomoyo_file_ioctl+0x2c/0x3c [ 289.680487][T10058] security_file_ioctl+0xdc/0x2b0 [ 289.680497][T10058] __arm64_sys_ioctl+0xa8/0x1c4 [ 289.680507][T10058] invoke_syscall+0x98/0x244 [ 289.680517][T10058] el0_svc_common+0xe8/0x23c [ 289.680527][T10058] do_el0_svc+0x48/0x58 [ 289.680536][T10058] el0_svc+0x64/0x260 [ 289.680544][T10058] el0t_64_sync_handler+0x48/0x148 [ 289.680551][T10058] el0t_64_sync+0x198/0x19c [ 289.680563][T10058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.830864][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1418'. [ 289.836578][T10069] loop2: detected capacity change from 0 to 512 [ 290.136495][T10069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.181989][T10084] FAULT_INJECTION: forcing a failure. [ 290.181989][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 290.185018][T10084] CPU: 1 UID: 0 PID: 10084 Comm: syz.0.1419 Not tainted syzkaller #0 PREEMPT [ 290.185036][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 290.185042][T10084] Call trace: [ 290.185045][T10084] show_stack+0x2c/0x3c (C) [ 290.185065][T10084] __dump_stack+0x30/0x40 [ 290.185075][T10084] dump_stack_lvl+0xd8/0x12c [ 290.185088][T10084] dump_stack+0x1c/0x28 [ 290.185102][T10084] should_fail_ex+0x414/0x588 [ 290.185113][T10084] should_failslab+0xc4/0x124 [ 290.185122][T10084] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 290.185132][T10084] __alloc_skb+0x1f0/0x5f8 [ 290.185143][T10084] netlink_alloc_large_skb+0xd4/0x114 [ 290.185154][T10084] netlink_sendmsg+0x4bc/0x920 [ 290.185164][T10084] __sock_sendmsg+0xc8/0x138 [ 290.185173][T10084] ____sys_sendmsg+0x418/0x70c [ 290.185180][T10084] ___sys_sendmsg+0x198/0x224 [ 290.185187][T10084] __sys_sendmsg+0x160/0x214 [ 290.185194][T10084] __arm64_sys_sendmsg+0x80/0x94 [ 290.185201][T10084] invoke_syscall+0x98/0x244 [ 290.185211][T10084] el0_svc_common+0xe8/0x23c [ 290.185220][T10084] do_el0_svc+0x48/0x58 [ 290.185230][T10084] el0_svc+0x64/0x260 [ 290.185238][T10084] el0t_64_sync_handler+0x48/0x148 [ 290.185245][T10084] el0t_64_sync+0x198/0x19c [ 290.306822][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 290.316736][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.338775][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.407196][ T9939] veth0_vlan: entered promiscuous mode [ 291.411151][ T9939] veth1_vlan: entered promiscuous mode [ 291.420158][ T9939] veth0_macvtap: entered promiscuous mode [ 291.421312][ T9939] veth1_macvtap: entered promiscuous mode [ 291.430801][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.435199][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.444795][ T6512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.444884][ T6512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.444917][ T6512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.444936][ T6512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.500112][T10128] loop2: detected capacity change from 0 to 512 [ 291.528951][ T4715] Bluetooth: hci0: command tx timeout [ 291.530420][T10128] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.1428: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 291.534377][T10128] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 291.534732][T10128] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.1428: Bad quota inode: 4, type: 1 [ 291.536659][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 291.536674][ C0] EXT4-fs (loop2): initial error at time 291: ext4_ext_check_inode:521: inode 4 [ 291.536697][ C0] EXT4-fs (loop2): last error at time 291: ext4_ext_check_inode:521: inode 4 [ 291.542937][T10128] loop2: lost filesystem error report for type 5 error -117 [ 291.547025][T10128] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.552908][T10128] EXT4-fs (loop2): mount failed [ 293.089007][T10138] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.278036][T10095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.299271][ T7878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.301111][ T7878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.349705][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.349733][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.377783][T10143] FAULT_INJECTION: forcing a failure. [ 293.377783][T10143] name failslab, interval 1, probability 0, space 0, times 0 [ 293.377819][T10143] CPU: 1 UID: 0 PID: 10143 Comm: syz.0.1432 Not tainted syzkaller #0 PREEMPT [ 293.377831][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.377838][T10143] Call trace: [ 293.377842][T10143] show_stack+0x2c/0x3c (C) [ 293.377861][T10143] __dump_stack+0x30/0x40 [ 293.377872][T10143] dump_stack_lvl+0xd8/0x12c [ 293.377882][T10143] dump_stack+0x1c/0x28 [ 293.377891][T10143] should_fail_ex+0x414/0x588 [ 293.377901][T10143] should_failslab+0xc4/0x124 [ 293.377910][T10143] __kmalloc_noprof+0x100/0x6f0 [ 293.377919][T10143] tomoyo_encode2+0x10c/0x33c [ 293.377931][T10143] tomoyo_encode+0x34/0x50 [ 293.377940][T10143] tomoyo_realpath_from_path+0x478/0x4cc [ 293.377951][T10143] tomoyo_path_number_perm+0x1f4/0x514 [ 293.377961][T10143] tomoyo_file_ioctl+0x2c/0x3c [ 293.377968][T10143] security_file_ioctl+0xdc/0x2b0 [ 293.377978][T10143] __arm64_sys_ioctl+0xa8/0x1c4 [ 293.377988][T10143] invoke_syscall+0x98/0x244 [ 293.377999][T10143] el0_svc_common+0xe8/0x23c [ 293.378009][T10143] do_el0_svc+0x48/0x58 [ 293.378018][T10143] el0_svc+0x64/0x260 [ 293.378026][T10143] el0t_64_sync_handler+0x48/0x148 [ 293.378034][T10143] el0t_64_sync+0x198/0x19c [ 293.378047][T10143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.251036][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 295.948810][T10205] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 295.948844][T10205] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.123040][T10215] netlink: 'syz.6.1447': attribute type 39 has an invalid length. [ 296.398422][T10217] lo speed is unknown, defaulting to 1000 [ 296.398478][T10217] lo speed is unknown, defaulting to 1000 [ 296.399343][T10217] lo speed is unknown, defaulting to 1000 [ 296.400406][T10217] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 296.401847][T10217] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 296.408676][T10217] lo speed is unknown, defaulting to 1000 [ 296.409075][T10217] lo speed is unknown, defaulting to 1000 [ 296.409425][T10217] lo speed is unknown, defaulting to 1000 [ 296.417985][T10217] lo speed is unknown, defaulting to 1000 [ 296.418337][T10217] lo speed is unknown, defaulting to 1000 [ 296.418657][T10217] lo speed is unknown, defaulting to 1000 [ 297.805149][T10188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.912878][T10250] loop5: detected capacity change from 0 to 128 [ 297.917844][T10250] FAT-fs (loop5): bogus number of reserved sectors [ 297.917882][T10250] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 297.917892][T10250] FAT-fs (loop5): Can't find a valid FAT filesystem [ 297.984508][T10257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.988563][T10257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.240945][ T4715] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 299.255678][T10264] syz.5.1455 (10264): drop_caches: 2 [ 299.957051][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 300.752477][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 300.752514][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1468'. [ 300.768196][T10299] x_tables: ip_tables: ah match: only valid for protocol 51 [ 300.959792][T10311] loop5: detected capacity change from 0 to 512 [ 301.011575][T10311] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.1470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 301.011614][T10311] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 301.015549][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 301.015565][ C0] EXT4-fs (loop5): initial error at time 301: ext4_ext_check_inode:521: inode 4 [ 301.015585][ C0] EXT4-fs (loop5): last error at time 301: ext4_ext_check_inode:521: inode 4 [ 301.026678][T10311] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.1470: Bad quota inode: 4, type: 1 [ 301.026710][T10311] loop5: lost filesystem error report for type 5 error -117 [ 301.029332][T10311] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 301.034633][T10311] EXT4-fs (loop5): mount failed [ 301.078070][ T4715] Bluetooth: unknown link type 213 [ 301.078118][ T4715] Bluetooth: hci0: connection err: -111 [ 301.415852][ T4470] IPVS: starting estimator thread 0... [ 301.485307][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 301.525578][T10334] IPVS: using max 57 ests per chain, 136800 per kthread [ 303.074302][T10373] loop2: detected capacity change from 0 to 1024 [ 303.074671][T10373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.081919][ T4715] Bluetooth: hci3: connection err: -111 [ 303.110020][T10373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 303.110073][T10373] System zones: 0-1, 3-12 [ 303.110903][T10373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.514062][T10394] Injecting memory failure for pfn 0x1377b9 at process virtual address 0x20000000 [ 303.580009][T10394] Memory failure: 0x1377b9: recovery action for dirty LRU page: Recovered [ 303.580048][T10394] Injecting memory failure for pfn 0x135160 at process virtual address 0x20001000 [ 303.580602][T10394] Memory failure: 0x135160: recovery action for dirty LRU page: Recovered [ 303.628861][ T4715] Bluetooth: unknown link type 213 [ 303.628897][ T4715] Bluetooth: hci1: connection err: -111 [ 303.995029][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.063692][T10416] syzkaller0: entered promiscuous mode [ 304.063727][T10416] syzkaller0: entered allmulticast mode [ 304.069433][T10413] loop6: detected capacity change from 0 to 512 [ 304.076990][T10416] tc action pedit offset must be on 32 bit boundaries [ 304.081149][T10413] netlink: 'syz.6.1497': attribute type 12 has an invalid length. [ 305.110752][T10430] FAULT_INJECTION: forcing a failure. [ 305.110752][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.110811][T10430] CPU: 1 UID: 0 PID: 10430 Comm: syz.0.1499 Tainted: G L syzkaller #0 PREEMPT [ 305.110824][T10430] Tainted: [L]=SOFTLOCKUP [ 305.110828][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.110832][T10430] Call trace: [ 305.110835][T10430] show_stack+0x2c/0x3c (C) [ 305.110852][T10430] __dump_stack+0x30/0x40 [ 305.110863][T10430] dump_stack_lvl+0xd8/0x12c [ 305.110872][T10430] dump_stack+0x1c/0x28 [ 305.110882][T10430] should_fail_ex+0x414/0x588 [ 305.110891][T10430] should_fail+0x14/0x24 [ 305.110899][T10430] should_fail_usercopy+0x20/0x30 [ 305.110908][T10430] _inline_copy_from_user+0x40/0x180 [ 305.110917][T10430] copy_msghdr_from_user+0xb8/0x194 [ 305.110925][T10430] ___sys_sendmsg+0x14c/0x224 [ 305.110931][T10430] __sys_sendmsg+0x160/0x214 [ 305.110938][T10430] __arm64_sys_sendmsg+0x80/0x94 [ 305.110945][T10430] invoke_syscall+0x98/0x244 [ 305.110955][T10430] el0_svc_common+0xe8/0x23c [ 305.110965][T10430] do_el0_svc+0x48/0x58 [ 305.110974][T10430] el0_svc+0x64/0x260 [ 305.110982][T10430] el0t_64_sync_handler+0x48/0x148 [ 305.110989][T10430] el0t_64_sync+0x198/0x19c [ 305.315954][ T4715] Bluetooth: Wrong link type (-71) [ 306.016691][T10452] loop6: detected capacity change from 0 to 2048 [ 306.364582][T10452] loop6: p1 p2 p3 [ 306.665529][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 306.927510][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 306.928463][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 307.605866][ T5024] ------------[ cut here ]------------ [ 307.605892][ T5024] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 307.608928][ T5024] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x40c/0x43c, CPU#1: kworker/1:6/5024 [ 307.611087][ T5024] Modules linked in: [ 307.611839][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT [ 307.613864][ T5024] Tainted: [L]=SOFTLOCKUP [ 307.614696][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.616750][ T5024] Workqueue: events drm_fb_helper_damage_work [ 307.618022][ T5024] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 307.619524][ T5024] pc : drm_crtc_wait_one_vblank+0x40c/0x43c [ 307.620664][ T5024] lr : drm_crtc_wait_one_vblank+0x404/0x43c [ 307.621783][ T5024] sp : ffff800096d778e0 [ 307.622568][ T5024] x29: ffff800096d77990 x28: dfff800000000000 x27: ffff0000c78c8080 [ 307.624131][ T5024] x26: ffff800096d778e0 x25: dfff800000000000 x24: ffff700012daef1c [ 307.625712][ T5024] x23: ffff800086de7300 x22: ffff0000c78b6000 x21: ffff800086e69b40 [ 307.627272][ T5024] x20: ffff0000c7abe000 x19: 0000000000000000 x18: 1fffe00035c0cc20 [ 307.628881][ T5024] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae06610c [ 307.630405][ T5024] x14: ffff0001ae066108 x13: 0000000000000001 x12: 0000000000000000 [ 307.631994][ T5024] x11: ffff80008a3fcd08 x10: 0000000000000003 x9 : 134745994c001d00 [ 307.633569][ T5024] x8 : 134745994c001d00 x7 : 0000000000000000 x6 : 0000000000000000 [ 307.635215][ T5024] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080154bd4 [ 307.636811][ T5024] x2 : 0000000000000006 x1 : 0000000000000000 x0 : ffff0000c7abe000 [ 307.638424][ T5024] Call trace: [ 307.639073][ T5024] drm_crtc_wait_one_vblank+0x40c/0x43c (P) [ 307.640243][ T5024] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 307.641455][ T5024] drm_fb_helper_damage_work+0x100/0x5d0 [ 307.642537][ T5024] process_scheduled_works+0x79c/0x1098 [ 307.643616][ T5024] worker_thread+0x754/0xba0 [ 307.644534][ T5024] kthread+0x2f8/0x3c8 [ 307.645363][ T5024] ret_from_fork+0x10/0x20 [ 307.646260][ T5024] irq event stamp: 382282 [ 307.647099][ T5024] hardirqs last enabled at (382281): [] finish_task_switch+0x22c/0x768 [ 307.649051][ T5024] hardirqs last disabled at (382282): [] el1_brk64+0x20/0x54 [ 307.650786][ T5024] softirqs last enabled at (381902): [] wg_packet_decrypt_worker+0x940/0x9c0 [ 307.652926][ T5024] softirqs last disabled at (381900): [] wg_packet_decrypt_worker+0x600/0x9c0 [ 307.655110][ T5024] ---[ end trace 0000000000000000 ]--- [ 309.125 ** replaying previous printk message ** [ 309.125459][ T5024] ------------[ cut here ]------------ [ 309.125485][ T5024] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 309.125835][ T5024] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x40c/0x43c, CPU#1: kworker/1:6/5024 [ 309.131198][ T5024] Modules linked in: [ 309.131919][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: kworker/1:6 Tainted: G W L syzkaller #0 PREEMPT [ 309.133887][ T5024] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 309.134838][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 309.136862][ T5024] Workqueue: events drm_fb_helper_damage_work [ 309.138139][ T5024] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 309.139777][ T5024] pc : drm_crtc_wait_one_vblank+0x40c/0x43c [ 309.140958][ T5024] lr : drm_crtc_wait_one_vblank+0x404/0x43c [ 309.142194][ T5024] sp : ffff800096d778e0 [ 309.143035][ T5024] x29: ffff800096d77990 x28: dfff800000000000 x27: ffff0000c78c8080 [ 309.144710][ T5024] x26: ffff800096d778e0 x25: dfff800000000000 x24: ffff700012daef1c [ 309.146290][ T5024] x23: ffff800086de7300 x22: ffff0000c78b6000 x21: ffff800086e69b40 [ 309.147893][ T5024] x20: ffff0000c7abe000 x19: 0000000000000000 x18: 1fffe00035c0cc20 [ 309.149449][ T5024] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae06610c [ 309.151057][ T5024] x14: ffff0001ae066108 x13: 0000000000000001 x12: 0000000000000000 [ 309.152710][ T5024] x11: ffff80008a3fcd08 x10: 0000000000000003 x9 : 134745994c001d00 [ 309.154284][ T5024] x8 : 134745994c001d00 x7 : 0000000000000000 x6 : 0000000000000000 [ 309.155921][ T5024] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080154bd4 [ 309.157556][ T5024] x2 : 0000000000000006 x1 : 0000000000000000 x0 : ffff0000c7abe000 [ 309.159228][ T5024] Call trace: [ 309.159881][ T5024] drm_crtc_wait_one_vblank+0x40c/0x43c (P) [ 309.161060][ T5024] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 309.162346][ T5024] drm_fb_helper_damage_work+0x100/0x5d0 [ 309.163385][ T5024] process_scheduled_works+0x79c/0x1098 [ 309.164510][ T5024] worker_thread+0x754/0xba0 [ 309.165438][ T5024] kthread+0x2f8/0x3c8 [ 309.166264][ T5024] ret_from_fork+0x10/0x20 [ 309.167138][ T5024] irq event stamp: 382480 [ 309.168002][ T5024] hardirqs last enabled at (382479): [] finish_task_switch+0x22c/0x768 [ 309.169977][ T5024] hardirqs last disabled at (382480): [] el1_brk64+0x20/0x54 [ 309.171724][ T5024] softirqs last enabled at (382424): [] handle_softirqs+0xbc4/0xd34 [ 309.173612][ T5024] softirqs last disabled at (382285): [] __do_softirq+0x14/0x20 [ 309.175447][ T5024] ---[ end trace 0000000000000000 ]--- [ 310.247629][ T1533] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.248990][ T1533] ieee802154 phy1 wpan1: encryption failed: -22 [ 310. ** replaying previous printk message ** [ 310.485466][ T5024] ------------[ cut here ]------------ [ 310.485487][ T5024] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 310.485607][ T5024] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x40c/0x43c, CPU#1: kworker/1:6/5024 [ 310.490861][ T5024] Modules linked in: [ 310.491595][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: kworker/1:6 Tainted: G W L syzkaller #0 PREEMPT [ 310.493544][ T5024] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 310.494498][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.496467][ T5024] Workqueue: events drm_fb_helper_damage_work [ 310.497705][ T5024] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 310.499293][ T5024] pc : drm_crtc_wait_one_vblank+0x40c/0x43c [ 310.500509][ T5024] lr : drm_crtc_wait_one_vblank+0x404/0x43c [ 310.501695][ T5024] sp : ffff800096d778e0 [ 310.502551][ T5024] x29: ffff800096d77990 x28: dfff800000000000 x27: ffff0000c78c8080 [ 310.504185][ T5024] x26: ffff800096d778e0 x25: dfff800000000000 x24: ffff700012daef1c [ 310.505778][ T5024] x23: ffff800086de7300 x22: ffff0000c78b6000 x21: ffff800086e69b40 [ 310.507342][ T5024] x20: ffff0000c7abe000 x19: 0000000000000000 x18: 1fffe00035c0cc20 [ 310.508930][ T5024] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae06610c [ 310.510528][ T5024] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 310.512157][ T5024] x11: 0000000000000000 x10: 0000000000ff0100 x9 : 134745994c001d00 [ 310.513753][ T5024] x8 : 134745994c001d00 x7 : ffff80008047caa0 x6 : 0000000000000000 [ 310.515397][ T5024] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f1374 [ 310.517048][ T5024] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c7abe000 [ 310.518696][ T5024] Call trace: [ 310.519345][ T5024] drm_crtc_wait_one_vblank+0x40c/0x43c (P) [ 310.520524][ T5024] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 310.521755][ T5024] drm_fb_helper_damage_work+0x100/0x5d0 [ 310.522830][ T5024] process_scheduled_works+0x79c/0x1098 [ 310.523940][ T5024] worker_thread+0x754/0xba0 [ 310.524858][ T5024] kthread+0x2f8/0x3c8 [ 310.525653][ T5024] ret_from_fork+0x10/0x20 [ 310.526477][ T5024] irq event stamp: 382704 [ 310.527278][ T5024] hardirqs last enabled at (382703): [] vprintk_store+0x900/0xb70 [ 310.529108][ T5024] hardirqs last disabled at (382704): [] el1_brk64+0x20/0x54 [ 310.530895][ T5024] softirqs last enabled at (382614): [] handle_softirqs+0xbc4/0xd34 [ 310.532822][ T5024] softirqs last disabled at (382483): [] __do_softirq+0x14/0x20 [ 310.534621][ T5024] ---[ end trace 0000000000000000 ]--- [ 311.935485][ T5024] ------------[ cut here ]------------ [ 31 ** replaying previous printk message ** [ 311.935507][ T5024] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 311.937047][ T5024] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x40c/0x43c, CPU#1: kworker/1:6/5024 [ 311.941238][ T5024] Modules linked in: [ 311.941925][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: kworker/1:6 Tainted: G W L syzkaller #0 PREEMPT [ 311.943810][ T5024] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 311.944737][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 311.946684][ T5024] Workqueue: events drm_fb_helper_damage_work [ 311.947891][ T5024] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 311.949425][ T5024] pc : drm_crtc_wait_one_vblank+0x40c/0x43c [ 311.950602][ T5024] lr : drm_crtc_wait_one_vblank+0x404/0x43c [ 311.951686][ T5024] sp : ffff800096d778e0 [ 311.952456][ T5024] x29: ffff800096d77990 x28: dfff800000000000 x27: ffff0000c78c8080 [ 311.954078][ T5024] x26: ffff800096d778e0 x25: dfff800000000000 x24: ffff700012daef1c [ 311.955657][ T5024] x23: ffff800086de7300 x22: ffff0000c78b6000 x21: ffff800086e69b40 [ 311.957250][ T5024] x20: ffff0000c7abe000 x19: 0000000000000000 x18: 1fffe00035c0cc20 [ 311.958816][ T5024] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae06610c [ 311.960338][ T5024] x14: ffff0001ae066108 x13: 0000000000000001 x12: 0000000000000000 [ 311.961860][ T5024] x11: ffff80008a3fcd08 x10: 0000000000000003 x9 : 134745994c001d00 [ 311.963495][ T5024] x8 : 134745994c001d00 x7 : 0000000000000000 x6 : 0000000000000000 [ 311.965046][ T5024] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080154bd4 [ 311.966628][ T5024] x2 : 0000000000000006 x1 : 0000000000000000 x0 : ffff0000c7abe000 [ 311.968235][ T5024] Call trace: [ 311.968875][ T5024] drm_crtc_wait_one_vblank+0x40c/0x43c (P) [ 311.970058][ T5024] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 311.971273][ T5024] drm_fb_helper_damage_work+0x100/0x5d0 [ 311.972378][ T5024] process_scheduled_works+0x79c/0x1098 [ 311.973451][ T5024] worker_thread+0x754/0xba0 [ 311.974340][ T5024] kthread+0x2f8/0x3c8 [ 311.975130][ T5024] ret_from_fork+0x10/0x20 [ 311.975983][ T5024] irq event stamp: 382858 [ 311.976794][ T5024] hardirqs last enabled at (382857): [] finish_task_switch+0x22c/0x768 [ 311.978721][ T5024] hardirqs last disabled at (382858): [] el1_brk64+0x20/0x54 [ 311.980431][ T5024] softirqs last enabled at (382762): [] handle_softirqs+0xbc4/0xd34 [ 311.982311][ T5024] softirqs last disabled at (382707): [] __do_softirq+0x14/0x20 [ 311.984079][ T5024] ---[ end trace 0000000000000000 ]---