last executing test programs: 5.408346693s ago: executing program 4 (id=36): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x2004) 5.407862383s ago: executing program 4 (id=37): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000b80), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000380)='X', 0x1f, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x4, 0xff, 0x84, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000067c0)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) 4.489007958s ago: executing program 4 (id=60): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000200000000fe8800000000000000000000000001014e2300004e2200000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000005000000000000aa000004d533"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 4.443318405s ago: executing program 4 (id=63): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1400c, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f00000000c0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r0 = syz_open_dev$video(&(0x7f0000000640), 0x7, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./bus/file0\x00', &(0x7f00000006c0), 0x6000) close(r0) syz_mount_image$fuse(0x0, &(0x7f0000000540)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.383417707s ago: executing program 4 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x6, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000d40), 0x56) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3.800412756s ago: executing program 4 (id=71): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000380)='X', 0x1f, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x4, 0xff, 0x84, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000067c0)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) 3.724708302s ago: executing program 32 (id=71): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000380)='X', 0x1f, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x4, 0xff, 0x84, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000067c0)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) 1.04395871s ago: executing program 5 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x6, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000d40), 0x56) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (fail_nth: 3) 741.949987ms ago: executing program 0 (id=138): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r1, 0x42}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="27030200dc0f14000e0007000024", 0xe}], 0x1, 0x0, 0x0, 0x13}, 0x4005) 612.158594ms ago: executing program 3 (id=142): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) accept$nfc_llcp(r0, 0x0, 0x0) (fail_nth: 11) 611.776924ms ago: executing program 0 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6000000002060102000000000000000000000002140007800800124008060000080013400000000812000300686173683a6e65742c706f7274000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x5c, 0x65, 0x0, 0x8, 0x1, 0x0, @private=0xa010101, @remote}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x10, 0x4, 0x1, 0x8, 0x6, 0x67, 0xffff, 0x6, 0x6, 0x8, @empty, @local, {[@ssrr={0x89, 0x7, 0x90, [@broadcast]}, @lsrr={0x83, 0x7, 0x98, [@empty]}, @timestamp={0x44, 0x8, 0x3a, 0x0, 0x9, [0x1000]}, @rr={0x7, 0xf, 0x5d, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4, 0x33, 0x3, 0x4}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x85, &(0x7f00000000c0)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@noauto_da_alloc}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x52a, &(0x7f0000000240)="$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") r1 = socket$packet(0x11, 0x0, 0x300) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x180000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000008c0)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000900)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000ac0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000b00)={0x18, r5, 0x2, 0x0, &(0x7f0000000b40)=[{0x412df, 0x2000000000000004}, {0x7ff, 0x107e}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000b80)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x55}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x2481, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000f00)={'syzkaller0\x00', 0x2}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x100, 0x0) close(r13) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8922, &(0x7f0000001080)={'syzkaller0\x00', @random="440000004ec6"}) sendmsg$nl_route_sched(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 455.88645ms ago: executing program 0 (id=148): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x3, &(0x7f0000000c80)=@framed={{}, [], {0x95, 0x0, 0xfff9}}, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000d00)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x90) 438.173257ms ago: executing program 0 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debugfs\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000180)="00ffffffffffff0031d8000000003a0005160104a51f11782ade95a3544c99260f50540000000101010101010101010101010101010164190040410026301888360030e41000001800000010000000000000000000000000000000fd00324b1e5009000a202020202020000000fc00564b4d530a2020202020202020007c", 0x80) 420.983568ms ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x545d, 0x40000020000000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2d6e65089bef71342f34e3c71931407cae6b20"], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b705000000000000850000006300000015000200000000007905000000000000850000005600000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000f8"], 0x799fc0) 354.528759ms ago: executing program 3 (id=152): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000080), 0x318, 0x0) (fail_nth: 38) 334.914701ms ago: executing program 0 (id=154): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat(r0, 0x0, 0x4140, 0x12) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x413c, 0x2, 0x4, 0x4000000000028, 0x80000005, 0x10000]}, &(0x7f0000000340)=0x78) 333.722768ms ago: executing program 3 (id=155): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='appraise unc=KEXEC_KERNEL_CHECK', 0x20) 274.747036ms ago: executing program 3 (id=156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) (fail_nth: 38) 273.226187ms ago: executing program 0 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_usb_connect(0x0, 0x705, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1797], &(0x7f0000000f40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x9, 0x81, 0x75, 0x40, 0x8}, 0x64, &(0x7f0000000040)={0x5, 0xf, 0x64, 0x2, [@ssp_cap={0x0, 0x10, 0xa, 0x5, 0x0, 0x3, 0x0, 0xb6b, [0xc000, 0x0, 0xffffcf]}, @generic={0x58, 0x10, 0x2, "c20af468796b498b83ef0f49ec0ecd72f7c7bb491c6ae19d97ea12e9e5d98c55c90530c652193c5c6fad0d442653dc1fdaf464e2adbdc1eedb487b53e85370fe60b45bba94822e8d3cdc7403f3fa1fa78b0d9a825d"}]}, 0x3b, [{0xfffffffffffffd2c, &(0x7f0000000d80)=@string={0xc6, 0x3, "b7db1c3b1936f1104551977d91245ab80ca67adc04e3d85654d75b3ab6f78d9429fbb1a9c934856f60ef6b26bbf87c2b0e24acaaee04bf546a3c3ad92efc22092d88b0cf898d51ab28cdd315b7e130d66bd971e29695728c2a1f6231530da2c64de57f7faf3da176dc61d71c74ae295abf74330488a82665720a8de9961d9c09da5de2b8eac758ba3ddbfb4d0aebc154095df15f6f7f02ef21f4d20e91067f64a0f54cff60518ff1eda6ff58ebcb9cb6e791bc027a8e2728f3e6390ec3724ca794a4a807"}}, {0x8b, &(0x7f0000000e80)=@string={0x8b, 0x3, "b788ec8e809544b510187dad08e03a5842a5d727a26d1de9ffc24f6dbefa09c88225487274e7841c9628be8105ea8e70bace54cc88061113c3675e6c69fb7f8c4dcef7abb33a2c5823fbe05e9ec84ca532caf554cea2786a9090aa869af17689f2a73244b6db47ea27b87514d9d5f66ed4ea6fb02ce7b29e32ecd53f2fd52d85dd8f42465c3739a8de"}}]}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) syz_usb_connect(0x0, 0x705, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000263bf0240a50600d870f6010203010902f3060206f22000090428b4047b1b5f060e210fef397199f3ae18cfa6da4509050b01000402030809050900000202010809050710ff030c01045401573d5aba03f000b52316264d3b363ed8d040e7d306cbec00d3eec8e0b98b177655507ffe4b7587b4c3462ef416457335f6ea273bead15e6a8588eef3baa8faf04170765fd51d135955b118e1497ad7e22d2d7202caeab1365b26c0c4700f289fe4879246a5ba7081d670f25f691e71c5ab430487799110f5e1b7f7ac82cff5bf849e1172c6958d1dc0bd32d9b5619194986df2972b703fe5a21cff23ef2842aeb60bdc964327a749c4b83c121095925ec645a660c430ec2070209943bd3fb2fe8d1da4340905090600040104030904540f0cffffff0e09050400ff03030103d7005f0fbb3f42747a3a40ae7c1d6867c9b669d95c3e0ee4cd02d12ef2b28de6d1b3d2096de0a3e9b6eb3d44eed23e3c2f6c1967b6f04c2136dde810c8eba7d94a4349c416c51619007cc3b13c26c917c9a12a419f4ce06a2c68dc002f743cff0d7ccf106945abe1f5a03feac5c90d883c8e72fabb13335661dcceb1b7008db25447d1192356d30228c1a8c917bab0d5816c712687de277977004d5edfa8c4e4a7c02dd24fbc82edbef168d4eb240da20e045acab2ec9c5ac322f529743fd2359193379041e0971935d81c0905060000043403087d23cc3871e8cde7befa323550463807fca83976b62d6dca4bdf3881dc4396fe12b5f3e531015a7a7fd527ede2d60872a1a8d6441ac8bd2e8c19df11d640f346f848dfd2f35f459267a3ed2e25f276c5bb1794d7a8ad380b2a7ea1dd8c6e51fbc1fcb2ad7ddb0fcf1f58e5bf1561169017ea01d3a685966bc2ca11409bc601544336ea16848e82d8f7fc25c6eaae11bccb59b2f9c3ed32b8f2b69f3868c8122c9709b4986cd7696bd0a45307e92e39bfe3459e3ae46a7438caaba9acb381b2a4bdad96ce45d757e8ce739cc7bd49180d9aa9c51128972ffb783f49436dd723bfc17e9cd4bbd1fa1686af70624ce4cd91dc39c92cb89ad4a7103f3aca4da12a9b1dcbfc17fd92734d6e41ea10a4eefba8db4aa0480fa312307e9bff7db81393b32ded5e77af1e1702541631f1d1aa551bb1a9f78ad0bf69a5e2364224b859316c01aa9409050910ff0302a0a31c0078df6519763344e92b5d66c98c18324582ca78e7a559579fd8a2af3e5d44905720f36c9f4bc49fd56f0a34732881e173b275869e6fdebcce68d99309b1787773e10149d799e00ca46184b83fa3048e2693da24553901d733e53a267c6eb7f004f7ab14880fe95b26f00f8e633b636daceed3d16146b52915cbb0defeab9de9f814d50832d9be4a9317227ab61c4d5f27881e216ebfcb1de248b65cd1ba712fdffab985cf5351c80b9cfd4049becbd1731488e2d9a3c3b62b415d502dc88b4a6c1e61301268ac71bdb50905081000048004074d05445eec947e286e42927015d2e430475727ffeb9d59eec5c1b56bc4961bd1aec4be534a489f958bd4ee590e92b06287e4b9b7b4453beacc59f2e544f27e52655ef74a73b54997b828b6df9ca8216ee20371489a218c39a978a8b26196378dd5f89160c29bb4b329f7ef7b0ab4452949f8f2c3151cde3e10d2e17abfa4a10688862ded800b0e22119f214b2e9516666fdb058a53fd55617e94c20a95b5518264eb3e74007e11527c465c399961ec990cf39259396b74c996ca68008e6807fe25d2116e9ec7ed90c8e6164ee36890e39cacb7dd51e30df99918810fee47271f27ef5b4698171dd30a99c7c376a83eea8146b15c660ce0287940000108010905030040000002020725010c0405000905000c10000d05097411e0b7359103ea27ff3b036ded61d410c760c4a5083e132b3a83590c8097c71e78af3bb0aaa2f834133aea1107273ebf4ffcc1faf42679b120e17e2d461349cd1008c8dca55760304d1c54e4119d74830d283383adc2d8550d2273d63585ff3e28887f743048cc5a109e5a04bc46d7b77e6cff0725010007ff7f09050610000403405f0725010c03f75b09050e04080003fa060725010c02040009050f000800050905b103d31360dca57b8f0ce618dcb45139a5fb53b955eb9657d41bb220285b0fff5931dc2c6d39cd34bc9465517fd3bdea267d0394de7805b93d76651f8932054659b31cdc584d69642642a405132c7feacc4d3e1596f5497535e44b6ac6b18fb48351d17867f35de8394faf2de537057c5985f485d627dc2c651dfe7ec0a279e7c8b8845bbcf961fbe8dc776d6c82ace2fe59a32733a421b31635287b53beea46fd70dbba091f0f1638067407020725010c02000009050a10ff0304ca075221887230285f59619251086b183e51894ab5cc2a38c0f81039b35ec7d51dd9077a5b0c9721d7daa3e3afefac2ef316206db8f3e3b57ccf386514d1f8b76396b9d4c66b7f4006692839bff663cdcc028ecf00"/1797], &(0x7f0000000f40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x9, 0x81, 0x75, 0x40, 0x8}, 0x64, &(0x7f0000000040)={0x5, 0xf, 0x64, 0x2, [@ssp_cap={0x0, 0x10, 0xa, 0x5, 0x0, 0x3, 0x0, 0xb6b, [0xc000, 0x0, 0xffffcf]}, @generic={0x58, 0x10, 0x2, "c20af468796b498b83ef0f49ec0ecd72f7c7bb491c6ae19d97ea12e9e5d98c55c90530c652193c5c6fad0d442653dc1fdaf464e2adbdc1eedb487b53e85370fe60b45bba94822e8d3cdc7403f3fa1fa78b0d9a825d"}]}, 0x3b, [{0xfffffffffffffd2c, &(0x7f0000000d80)=@string={0xc6, 0x3, "b7db1c3b1936f1104551977d91245ab80ca67adc04e3d85654d75b3ab6f78d9429fbb1a9c934856f60ef6b26bbf87c2b0e24acaaee04bf546a3c3ad92efc22092d88b0cf898d51ab28cdd315b7e130d66bd971e29695728c2a1f6231530da2c64de57f7faf3da176dc61d71c74ae295abf74330488a82665720a8de9961d9c09da5de2b8eac758ba3ddbfb4d0aebc154095df15f6f7f02ef21f4d20e91067f64a0f54cff60518ff1eda6ff58ebcb9cb6e791bc027a8e2728f3e6390ec3724ca794a4a807"}}, {0x8b, &(0x7f0000000e80)=@string={0x8b, 0x3, "b788ec8e809544b510187dad08e03a5842a5d727a26d1de9ffc24f6dbefa09c88225487274e7841c9628be8105ea8e70bace54cc88061113c3675e6c69fb7f8c4dcef7abb33a2c5823fbe05e9ec84ca532caf554cea2786a9090aa869af17689f2a73244b6db47ea27b87514d9d5f66ed4ea6fb02ce7b29e32ecd53f2fd52d85dd8f42465c3739a8de"}}]}) (async) 232.138615ms ago: executing program 2 (id=160): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, &(0x7f00000006c0)={[{@journal_async_commit}, {@oldalloc}], [{@uid_gt}, {@hash}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x73a, &(0x7f0000000c80)="$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") (fail_nth: 38) 176.339203ms ago: executing program 1 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file4\x00', 0x8) mknodat(r0, &(0x7f0000000200)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000500)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000005c0)={0xc0000003}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40400c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c000) 176.081199ms ago: executing program 1 (id=162): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat(r0, 0x0, 0x4140, 0x12) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x11, 0x0, [0x413c, 0x2, 0x5, 0x4000000000008, 0x80000005, 0x10001]}, &(0x7f0000000340)=0x78) 170.223442ms ago: executing program 3 (id=163): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0xe1015000) syz_emit_vhci(0x0, 0x7) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xc, 0x81, 0x5, 0xfffffffffffffff9, 0x3, 0x0, 0xfff, 0x1a1, 0x40, 0x166, 0x5, 0xfe, 0x38, 0x1, 0x2, 0x90, 0xfff6}, [{0x2, 0x5, 0x1, 0x1, 0x8, 0x9, 0x10, 0x1}], "f152caae25adfe401d686c3feece3fd23e02a5"}, 0x8b) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/4096, 0x24000}], 0x2, 0x0, 0x1b00, 0x9) 144.820777ms ago: executing program 1 (id=164): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000100)={r1, 0x8000}, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffff9, 0x3, 0xcb}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000001c0)) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write(r3, &(0x7f0000000240)="377b74166df211eb54aadb4c612eb519fa0a052445d0e07e7caae0c33112aa9332fd9053926d1f01107f25102b1e861d7df0649b0e176a273c7e1395c6ac3c267032fee2b327", 0x46) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c851}, 0x40080) r5 = socket(0x9, 0x800, 0xd7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff1, 0xc}, {0x5, 0x7}}, [{0x8, 0xb, 0xe7d0}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={r2, 0x4, 0x2, 0x1, 0x3, 0x1, 0x8000, 0x8, {r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x83, 0x7b1b, 0x9, 0x4, 0x7}}, &(0x7f0000000600)=0xb0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000640)={0x0, @bt={0xa, 0x0, 0x0, 0x2, 0x5d61, 0x2, 0x4, 0x7ff, 0xffffeca0, 0x6, 0x2, 0x101, 0xba, 0x1, 0x30, 0x4, {0x2, 0x9}, 0x9, 0x7}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) bind$packet(r5, &(0x7f0000000780)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @random="6f0298091575"}, 0x14) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x41) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44005}, 0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r10, 0x0, 0x70bd26, 0x7, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x61b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) mount(&(0x7f0000000c40)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='hpfs\x00', 0x1, &(0x7f0000000d00)='\'!#\x00') setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000d40)={0x1, 0x2}, 0x4) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000000d80)={r8, 0x1}, &(0x7f0000000dc0)=0x8) delete_module(&(0x7f0000000e00)='\x00', 0x0) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000e40)={'veth1_to_bond\x00', @ifru_map={0x7ff, 0x0, 0xf, 0xda, 0x7, 0x6}}) delete_module(&(0x7f0000000e80)='batadv0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000f00)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x60, r10, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="249f202b9d8f"}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x60}}, 0x4008000) 108.674147ms ago: executing program 2 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007c, 0x80001) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000d57f5b4d67243274835742b0b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 104.833429ms ago: executing program 1 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='appraise unc=KEXEC_KERNEL_CHECK', 0x20) 104.671983ms ago: executing program 2 (id=167): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="49d3", 0x2}], 0x1}}], 0x1, 0x20008000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) close_range(r0, r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debugfs\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x4eb36, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/system/memory/memory9/state\x00', 0x81, 0x0) write(r2, &(0x7f0000000280)='offline~', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0)='FROZEN\x00', 0x7) write(r3, &(0x7f0000000180)="00ffffffffffff0031d8000000003a0005160104a51f11782ade95a3544c99260f50540000000101010101010101010101010101010164190040410026301888360030e41000001800000010000000000000000000000000000000fd00324b1e5009000a202020202020000000fc00564b4d530a2020202020202020007c", 0x80) 104.34663ms ago: executing program 1 (id=168): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x341ff689dd308fe7, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x80282) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100) (async) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r2, 0x21, &(0x7f00000025c0)={0x21, 0x4, 0x7}) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mtd(&(0x7f0000000540), 0x0, 0x8000) readv(r5, &(0x7f00000026c0)=[{&(0x7f0000002740)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) r6 = gettid() tkill(r6, 0x21) r7 = syz_ublk_setup_io_uring(0x7501, &(0x7f0000002ac0)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000002b40), &(0x7f0000002b80), &(0x7f0000002bc0)) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000002c00)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r7}, &(0x7f0000002c80)=0x0, &(0x7f0000002cc0)=0x0, &(0x7f0000002d00)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000002d40)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002dc0)=@new_dev={0x4, 0x2e3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc3}}}, &(0x7f0000002e00)=0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000002e40)={0x0, 0x6951, 0x3a, 0x0, 0x36d, 0x0, r7}, &(0x7f0000002ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ad7, 0x4000, 0x2, 0x3b6, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x10000, 0x2, 0x100027c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x8000, 0x1, 0x388, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc377, 0x8, 0x2000002, 0x44}}], 0x1, &(0x7f0000003140)={0x2e, 0x6, 0x4500, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r12, '\x00', {0x1, 0xb66, 0x0, 0x0}}, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xfffe, @any, 0xff}, 0xe) (async) mount(0x0, &(0x7f0000002640)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)='proc\x00', 0xac000, 0x0) (async) r16 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x101902, 0x165) pidfd_getfd(r16, r0, 0x0) socket$tipc(0x1e, 0x0, 0x0) (async) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) mount(&(0x7f0000002840)=@nullb, &(0x7f0000002880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002980)='exofs\x00', 0x1222008, &(0x7f00000029c0)='&\'\\\x00') (async) write(r16, &(0x7f0000000340)='10', 0x2) 60.389872ms ago: executing program 2 (id=169): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0xfffffffc}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r3, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000ad9b701b020000000200000041100300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00n\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000050000000400000006000400000000ae00000014a74692877a204dfc56b1d8c61eea4541fa38360341973e283c4e093e9f0d66c4aba9db43d1e93859f54a6d777de4c93c8e3c9a35f79277470028d1846450f3e818aec3e8629936422437bdda31063e2fdcc4defd3b8f000000", @ANYRES32=r5, @ANYBLOB], 0x50) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 59.690132ms ago: executing program 2 (id=170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x280440e, &(0x7f0000000140)={[{@debug}, {@test_dummy_encryption_v1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@orlov}]}, 0x1, 0xbdb, &(0x7f0000000340)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000100)='.\x00', 0x4000772) syz_mount_image$fuse(0x0, &(0x7f0000000f40)='./bus\x00', 0x20034, 0x0, 0x1, 0x0, 0x0) 9.545644ms ago: executing program 2 (id=171): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x10, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x70f, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x58e, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000140)=0x2004) 0s ago: executing program 1 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='reno\x00', 0x5) write$tcp_congestion(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x2, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x8388}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x72}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 29.008932][ T4706] cgroup: Unknown subsys name 'net' [ 29.169130][ T4706] cgroup: Unknown subsys name 'cpuset' [ 29.171775][ T4706] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.322350][ T4706] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.151897][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.152352][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.175859][ T4731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.177328][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.178424][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.178607][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.178833][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.179112][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.179477][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.179688][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.179874][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.180050][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.180473][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.180700][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.181535][ T4728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.181574][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.181773][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.182135][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.185397][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.187276][ T4733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.189167][ T4732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.190054][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.192014][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.192650][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.195446][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.379624][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.379895][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.380254][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.389419][ T4717] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.396833][ T4726] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.397153][ T4718] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.416791][ T4725] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.455606][ T4724] infiniband rxe0: set active [ 30.456530][ T1166] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.456595][ T4724] infiniband rxe0: added rxe_eth0 [ 30.469895][ T4724] RDS/IB: rxe0: added [ 30.469971][ T4724] smc: adding ib device rxe0 with port count 1 [ 30.469998][ T4724] smc: ib device rxe0 port 1 has no pnetid [ 30.470938][ T1166] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.479433][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.537327][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.609710][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.634301][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.634657][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.634730][ T4725] bridge_slave_0: entered allmulticast mode [ 30.635277][ T4725] bridge_slave_0: entered promiscuous mode [ 30.657673][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.657702][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.657766][ T4725] bridge_slave_1: entered allmulticast mode [ 30.658360][ T4725] bridge_slave_1: entered promiscuous mode [ 30.667294][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.707428][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.721385][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.721483][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.721541][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.721648][ T4726] bridge_slave_0: entered allmulticast mode [ 30.722271][ T4726] bridge_slave_0: entered promiscuous mode [ 30.725476][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.725505][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.725560][ T4718] bridge_slave_0: entered allmulticast mode [ 30.726010][ T4718] bridge_slave_0: entered promiscuous mode [ 30.733304][ T4725] team0: Port device team_slave_0 added [ 30.734038][ T4725] team0: Port device team_slave_1 added [ 30.739628][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.739637][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.739650][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.740422][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.740428][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.740439][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.750727][ T4725] hsr_slave_0: entered promiscuous mode [ 30.751032][ T4725] hsr_slave_1: entered promiscuous mode [ 30.772099][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.772126][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.772191][ T4726] bridge_slave_1: entered allmulticast mode [ 30.772597][ T4726] bridge_slave_1: entered promiscuous mode [ 30.784575][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.784605][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.784697][ T4717] bridge_slave_0: entered allmulticast mode [ 30.785084][ T4717] bridge_slave_0: entered promiscuous mode [ 30.786737][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.786758][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.786847][ T4717] bridge_slave_1: entered allmulticast mode [ 30.787217][ T4717] bridge_slave_1: entered promiscuous mode [ 30.789414][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.789443][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.789507][ T4718] bridge_slave_1: entered allmulticast mode [ 30.789896][ T4718] bridge_slave_1: entered promiscuous mode [ 30.800860][ T4724] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.805967][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.815085][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.823348][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.838042][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.847427][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.853019][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.853683][ T4718] team0: Port device team_slave_0 added [ 30.856622][ T4718] team0: Port device team_slave_1 added [ 30.860771][ T4726] team0: Port device team_slave_0 added [ 30.861595][ T4726] team0: Port device team_slave_1 added [ 30.877869][ T4717] team0: Port device team_slave_0 added [ 30.879419][ T4717] team0: Port device team_slave_1 added [ 30.879616][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.879625][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.879638][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.882346][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.882355][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.882368][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.886471][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.886480][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.886494][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.887081][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.887088][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.887099][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.917794][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.917804][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.917817][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.918386][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.918393][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.918408][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.920870][ T4725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.923187][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.923510][ T4725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.929779][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.944032][ T4726] hsr_slave_0: entered promiscuous mode [ 30.944310][ T4726] hsr_slave_1: entered promiscuous mode [ 30.944505][ T4726] debugfs: 'hsr0' already exists in 'hsr' [ 30.944513][ T4726] Cannot create hsr debugfs directory [ 30.951962][ T4725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.954282][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.954688][ T4725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.957243][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.969856][ T4717] hsr_slave_0: entered promiscuous mode [ 30.970459][ T4717] hsr_slave_1: entered promiscuous mode [ 30.970671][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.970679][ T4717] Cannot create hsr debugfs directory [ 30.984628][ T4718] hsr_slave_0: entered promiscuous mode [ 30.984988][ T4718] hsr_slave_1: entered promiscuous mode [ 30.985190][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.985198][ T4718] Cannot create hsr debugfs directory [ 31.043326][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.043375][ T4725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.043520][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.043549][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.073785][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.073842][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.073931][ T4724] bridge_slave_0: entered allmulticast mode [ 31.074301][ T4724] bridge_slave_0: entered promiscuous mode [ 31.076949][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.076974][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.077035][ T4724] bridge_slave_1: entered allmulticast mode [ 31.077390][ T4724] bridge_slave_1: entered promiscuous mode [ 31.098989][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.103349][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.114106][ T4724] team0: Port device team_slave_0 added [ 31.114933][ T4724] team0: Port device team_slave_1 added [ 31.133993][ T4726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.135031][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.135366][ T4726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.136381][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.136697][ T4726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.138574][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.139206][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.139215][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.139230][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.139815][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.139822][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.139833][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.141744][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.145342][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.168527][ T4726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.179401][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.194112][ T4717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.195043][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.195341][ T4717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.196636][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.208950][ T4717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.216199][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.216499][ T4717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.217306][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.232568][ T4724] hsr_slave_0: entered promiscuous mode [ 31.232872][ T4724] hsr_slave_1: entered promiscuous mode [ 31.233044][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 31.233052][ T4724] Cannot create hsr debugfs directory [ 31.263942][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.265004][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.265494][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.266491][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.266960][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.269000][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.290985][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.292274][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.342412][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.363149][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.364278][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.369118][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.375517][ T4724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.376751][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.387172][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.387210][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.391627][ T4724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.392643][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.397178][ T4724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.398405][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.399369][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.408590][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.408639][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.409788][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.409810][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.410350][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.410374][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.412931][ T4725] veth0_vlan: entered promiscuous mode [ 31.413302][ T4724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.414240][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.421330][ T4726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.421342][ T4726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.445739][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.445754][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.473086][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.480546][ T4725] veth1_vlan: entered promiscuous mode [ 31.497238][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.505072][ T4725] veth0_macvtap: entered promiscuous mode [ 31.506624][ T4725] veth1_macvtap: entered promiscuous mode [ 31.523394][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.523421][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.527406][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.537373][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.537402][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.545859][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.565608][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.569763][ T1200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570066][ T1200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570084][ T1200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570101][ T1200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.596902][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.623887][ T4726] veth0_vlan: entered promiscuous mode [ 31.636919][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.641340][ T4726] veth1_vlan: entered promiscuous mode [ 31.646345][ T4726] veth0_macvtap: entered promiscuous mode [ 31.647356][ T4726] veth1_macvtap: entered promiscuous mode [ 31.653313][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.653322][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.659802][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.674763][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.675923][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.680077][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.680103][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.680658][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.680678][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.682100][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682412][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682493][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.682501][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.682661][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683095][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.693446][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.735119][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.735136][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.772680][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.772692][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.785482][ T4725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.803487][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.803503][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.838598][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.839898][ T4895] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 31.839914][ T4895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 31.840406][ T4895] vhci_hcd vhci_hcd.0: Device attached [ 31.856559][ T4895] mmap: syz.3.4 (4895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.881004][ T4717] veth0_vlan: entered promiscuous mode [ 31.882663][ T4717] veth1_vlan: entered promiscuous mode [ 31.894293][ T4717] veth0_macvtap: entered promiscuous mode [ 31.896629][ T4718] veth0_vlan: entered promiscuous mode [ 31.899260][ T4718] veth1_vlan: entered promiscuous mode [ 31.918788][ T4718] veth0_macvtap: entered promiscuous mode [ 31.921253][ T4718] veth1_macvtap: entered promiscuous mode [ 31.924548][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.926277][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.928181][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928670][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928879][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.929105][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.948943][ T4717] veth1_macvtap: entered promiscuous mode [ 31.956462][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.959395][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.961989][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962060][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962271][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963324][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.008695][ T4724] veth0_vlan: entered promiscuous mode [ 32.019047][ T4803] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 32.020834][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.020847][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.027476][ T4724] veth1_vlan: entered promiscuous mode [ 32.028909][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.028921][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.052223][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.052235][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.055010][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.055020][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.066102][ T4724] veth0_macvtap: entered promiscuous mode [ 32.067296][ T4724] veth1_macvtap: entered promiscuous mode [ 32.073927][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.074883][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.081000][ T4803] usb 8-1: new full-speed USB device number 2 using vhci_hcd [ 32.111210][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.111227][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.128236][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.139755][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.139767][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.148414][ T1200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.148698][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.148873][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.149027][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.268623][ T4919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 32.268760][ T4919] overlayfs: failed to set xattr on upper [ 32.268776][ T4919] overlayfs: ...falling back to redirect_dir=nofollow. [ 32.268792][ T4919] overlayfs: ...falling back to uuid=null. [ 32.307804][ T4721] Bluetooth: hci1: command tx timeout [ 32.308111][ T4721] Bluetooth: hci4: command tx timeout [ 32.308327][ T4721] Bluetooth: hci0: command tx timeout [ 32.308483][ T4721] Bluetooth: hci3: command tx timeout [ 32.308645][ T4721] Bluetooth: hci2: command tx timeout [ 32.534634][ T30] audit: type=1807 audit(32.510:2): action=appraise UNKNOWN=unc=KEXEC_KERNEL_CHECK res=0 [ 32.534806][ T30] audit: type=1802 audit(32.510:3): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.6" res=0 errno=-22 [ 32.535094][ T4929] ima: policy update failed [ 32.535271][ T30] audit: type=1802 audit(32.510:4): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.6" res=0 errno=-22 [ 32.576196][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.580053][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.630073][ T4933] lo: entered allmulticast mode [ 32.632136][ T4933] tunl0: entered allmulticast mode [ 32.635356][ T4933] gre0: entered allmulticast mode [ 32.642045][ T4933] gretap0: entered allmulticast mode [ 32.642306][ T4933] erspan0: entered allmulticast mode [ 32.642528][ T4933] ip_vti0: entered allmulticast mode [ 32.642759][ T4933] ip6_vti0: entered allmulticast mode [ 32.642950][ T4933] sit0: entered allmulticast mode [ 32.644326][ T4933] ip6tnl0: entered allmulticast mode [ 32.644768][ T4933] ip6gre0: entered allmulticast mode [ 32.644974][ T4933] syz_tun: entered allmulticast mode [ 32.645201][ T4933] ip6gretap0: entered allmulticast mode [ 32.645457][ T4933] bridge0: entered allmulticast mode [ 32.646282][ T4933] vcan0: entered allmulticast mode [ 32.646515][ T4933] bond0: entered allmulticast mode [ 32.646523][ T4933] bond_slave_0: entered allmulticast mode [ 32.646533][ T4933] bond_slave_1: entered allmulticast mode [ 32.647295][ T4933] team0: entered allmulticast mode [ 32.647305][ T4933] team_slave_0: entered allmulticast mode [ 32.647315][ T4933] team_slave_1: entered allmulticast mode [ 32.672499][ T4933] dummy0: entered allmulticast mode [ 32.672822][ T4933] nlmon0: entered allmulticast mode [ 32.673036][ T4933] batadv0: entered allmulticast mode [ 32.673519][ T4933] vxcan0: entered allmulticast mode [ 32.673743][ T4933] vxcan1: entered allmulticast mode [ 32.673943][ T4933] veth0: entered allmulticast mode [ 32.674173][ T4933] veth1: entered allmulticast mode [ 32.674447][ T4933] wg0: entered allmulticast mode [ 32.675178][ T4933] wg1: entered allmulticast mode [ 32.675367][ T4933] wg2: entered allmulticast mode [ 32.675785][ T4933] veth0_to_bridge: entered allmulticast mode [ 32.676122][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.676154][ T4933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.676629][ T4933] veth1_to_bridge: entered allmulticast mode [ 32.676943][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.676966][ T4933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.677472][ T4933] veth0_to_bond: entered allmulticast mode [ 32.711794][ T4933] veth1_to_bond: entered allmulticast mode [ 32.712546][ T4933] veth0_to_team: entered allmulticast mode [ 32.725924][ T4933] veth1_to_team: entered allmulticast mode [ 32.726598][ T4933] veth0_to_batadv: entered allmulticast mode [ 32.726814][ T4933] batadv_slave_0: entered allmulticast mode [ 32.727034][ T4933] veth1_to_batadv: entered allmulticast mode [ 32.727258][ T4933] batadv_slave_1: entered allmulticast mode [ 32.727474][ T4933] xfrm0: entered allmulticast mode [ 32.731295][ T4937] loop0: detected capacity change from 0 to 1024 [ 32.738586][ T4933] veth0_to_hsr: entered allmulticast mode [ 32.738824][ T4933] hsr_slave_0: entered allmulticast mode [ 32.739217][ T4933] veth1_to_hsr: entered allmulticast mode [ 32.739453][ T4933] hsr_slave_1: entered allmulticast mode [ 32.740191][ T4933] hsr0: entered allmulticast mode [ 32.740336][ T4933] veth1_virt_wifi: entered allmulticast mode [ 32.740561][ T4933] veth0_virt_wifi: entered allmulticast mode [ 32.740785][ T4933] virt_wifi0: entered allmulticast mode [ 32.740827][ T4933] veth1_vlan: entered allmulticast mode [ 32.741125][ T4933] veth0_vlan: entered allmulticast mode [ 32.741564][ T4933] vlan0: entered allmulticast mode [ 32.741802][ T4933] vlan1: entered allmulticast mode [ 32.742258][ T4933] macvlan0: entered allmulticast mode [ 32.742607][ T4933] macvlan1: entered allmulticast mode [ 32.742834][ T4933] ipvlan0: entered allmulticast mode [ 32.742878][ T4933] ipvlan1: entered allmulticast mode [ 32.742916][ T4933] veth1_macvtap: entered allmulticast mode [ 32.743284][ T4937] ======================================================= [ 32.743284][ T4937] WARNING: The mand mount option has been deprecated and [ 32.743284][ T4937] and is ignored by this kernel. Remove the mand [ 32.743284][ T4937] option from the mount to silence this warning. [ 32.743284][ T4937] ======================================================= [ 32.744700][ T4933] veth0_macvtap: entered allmulticast mode [ 32.744945][ T4933] macvtap0: entered allmulticast mode [ 32.745177][ T4933] macsec0: entered allmulticast mode [ 32.745384][ T4933] geneve0: entered allmulticast mode [ 32.746777][ T4933] geneve1: entered allmulticast mode [ 32.747013][ T4933] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 32.747422][ T4933] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 32.781380][ T4933] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 32.809138][ T4933] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 32.809759][ T4933] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 32.810033][ T4933] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 32.811047][ T4937] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.836354][ T4937] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #3: block 1: comm syz.0.7: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.836405][ T4937] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 32.836962][ T4937] EXT4-fs (loop0): Remounting filesystem read-only [ 32.836984][ T4937] Quota error (device loop0): write_blk: dquota write failed [ 32.836998][ T4937] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 32.837137][ T4937] EXT4-fs (loop0): 1 orphan inode deleted [ 32.853541][ T4937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.997258][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.805879][ T4961] syzkaller0: entered promiscuous mode [ 33.805897][ T4961] syzkaller0: entered allmulticast mode [ 33.819876][ T4961] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11'. [ 34.242098][ T4966] FAULT_INJECTION: forcing a failure. [ 34.242098][ T4966] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.242120][ T4966] CPU: 1 UID: 0 PID: 4966 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT [ 34.242132][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 34.242137][ T4966] Call trace: [ 34.242140][ T4966] show_stack+0x2c/0x3c (C) [ 34.242155][ T4966] __dump_stack+0x30/0x40 [ 34.242163][ T4966] dump_stack_lvl+0xd8/0x12c [ 34.242170][ T4966] dump_stack+0x1c/0x28 [ 34.242176][ T4966] should_fail_ex+0x3fc/0x570 [ 34.242188][ T4966] should_fail_alloc_page+0xec/0x10c [ 34.242196][ T4966] prepare_alloc_pages+0x194/0x484 [ 34.242204][ T4966] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 34.242212][ T4966] alloc_pages_mpol+0x1fc/0x3d0 [ 34.242221][ T4966] folio_alloc_mpol_noprof+0x4c/0x248 [ 34.242229][ T4966] shmem_alloc_folio+0xa0/0x150 [ 34.242239][ T4966] shmem_alloc_and_add_folio+0x28c/0xb30 [ 34.242249][ T4966] shmem_get_folio_gfp+0x4c4/0x1108 [ 34.242258][ T4966] shmem_fault+0x15c/0x32c [ 34.242267][ T4966] __do_fault+0xf4/0x4a8 [ 34.242274][ T4966] do_pte_missing+0x1764/0x28bc [ 34.242281][ T4966] handle_mm_fault+0x14d0/0x2b58 [ 34.242291][ T4966] __get_user_pages+0x82c/0x13b0 [ 34.242299][ T4966] populate_vma_page_range+0x2a4/0x388 [ 34.242307][ T4966] __mm_populate+0x204/0x328 [ 34.242314][ T4966] vm_mmap_pgoff+0x37c/0x4a4 [ 34.242321][ T4966] ksys_mmap_pgoff+0xd0/0x5b4 [ 34.242329][ T4966] __arm64_sys_mmap+0x110/0x12c [ 34.242336][ T4966] invoke_syscall+0x98/0x244 [ 34.242344][ T4966] el0_svc_common+0xec/0x23c [ 34.242350][ T4966] do_el0_svc+0x4c/0x5c [ 34.242357][ T4966] el0_svc+0x60/0x1d8 [ 34.242366][ T4966] el0t_64_sync_handler+0x44/0x104 [ 34.242375][ T4966] el0t_64_sync+0x198/0x19c [ 34.277203][ T4971] loop0: detected capacity change from 0 to 512 [ 34.295479][ T4971] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.16: inode has both inline data and extents flags [ 34.295505][ T4971] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.296688][ T4971] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.16: couldn't read orphan inode 15 (err -117) [ 34.296752][ T4971] loop0: lost filesystem error report for type 5 error -117 [ 34.297256][ T4971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.330551][ T4731] Bluetooth: hci2: command tx timeout [ 34.330567][ T4721] Bluetooth: hci3: command tx timeout [ 34.330582][ T4731] Bluetooth: hci0: command tx timeout [ 34.330595][ T4721] Bluetooth: hci4: command tx timeout [ 34.330602][ T4731] Bluetooth: hci1: command tx timeout [ 34.376372][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.409338][ T4977] loop0: detected capacity change from 0 to 1024 [ 34.420592][ T4977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.428645][ T4977] syzkaller0: entered promiscuous mode [ 34.428657][ T4977] syzkaller0: entered allmulticast mode [ 34.449806][ T4981] FAULT_INJECTION: forcing a failure. [ 34.449806][ T4981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 34.449821][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT [ 34.449831][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 34.449835][ T4981] Call trace: [ 34.449838][ T4981] show_stack+0x2c/0x3c (C) [ 34.449851][ T4981] __dump_stack+0x30/0x40 [ 34.449859][ T4981] dump_stack_lvl+0xd8/0x12c [ 34.449866][ T4981] dump_stack+0x1c/0x28 [ 34.449872][ T4981] should_fail_ex+0x3fc/0x570 [ 34.449885][ T4981] should_fail_alloc_page+0xec/0x10c [ 34.449892][ T4981] prepare_alloc_pages+0x194/0x484 [ 34.449900][ T4981] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 34.449908][ T4981] alloc_pages_mpol+0x1fc/0x3d0 [ 34.449917][ T4981] folio_alloc_mpol_noprof+0x4c/0x248 [ 34.449925][ T4981] shmem_alloc_folio+0xa0/0x150 [ 34.449935][ T4981] shmem_alloc_and_add_folio+0x28c/0xb30 [ 34.449945][ T4981] shmem_get_folio_gfp+0x4c4/0x1108 [ 34.449954][ T4981] shmem_fault+0x15c/0x32c [ 34.449963][ T4981] __do_fault+0xf4/0x4a8 [ 34.449970][ T4981] do_pte_missing+0x1764/0x28bc [ 34.449977][ T4981] handle_mm_fault+0x14d0/0x2b58 [ 34.449987][ T4981] __get_user_pages+0x82c/0x13b0 [ 34.449995][ T4981] populate_vma_page_range+0x2a4/0x388 [ 34.450003][ T4981] __mm_populate+0x204/0x328 [ 34.450010][ T4981] vm_mmap_pgoff+0x37c/0x4a4 [ 34.450017][ T4981] ksys_mmap_pgoff+0xd0/0x5b4 [ 34.450025][ T4981] __arm64_sys_mmap+0x110/0x12c [ 34.450032][ T4981] invoke_syscall+0x98/0x244 [ 34.450040][ T4981] el0_svc_common+0xec/0x23c [ 34.450046][ T4981] do_el0_svc+0x4c/0x5c [ 34.450053][ T4981] el0_svc+0x60/0x1d8 [ 34.450062][ T4981] el0t_64_sync_handler+0x44/0x104 [ 34.450071][ T4981] el0t_64_sync+0x198/0x19c [ 34.607382][ T4986] loop1: detected capacity change from 0 to 512 [ 34.610331][ T4986] EXT4-fs: Ignoring removed nobh option [ 34.615705][ T4986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.621257][ T4986] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.21: missing EA_INODE flag [ 34.621276][ T4986] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 34.623860][ T4986] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.21: error while reading EA inode 12 err=-117 [ 34.623882][ T4986] loop1: lost filesystem error report for type 5 error -117 [ 34.624103][ T4986] EXT4-fs (loop1): 1 orphan inode deleted [ 34.624483][ T4986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.834591][ T4898] vhci_hcd: connection reset by peer [ 34.839756][ T1200] vhci_hcd vhci_hcd.3: stop threads [ 34.839905][ T1200] vhci_hcd vhci_hcd.3: release socket [ 34.844489][ T1200] vhci_hcd vhci_hcd.3: disconnect device [ 34.907312][ T4999] ip6t_frag: unknown flags 4 [ 35.549319][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.915470][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.916735][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.944700][ T5026] lo: entered allmulticast mode [ 35.945062][ T5026] tunl0: entered allmulticast mode [ 35.945339][ T5026] gre0: entered allmulticast mode [ 35.945602][ T5026] gretap0: entered allmulticast mode [ 35.945858][ T5026] erspan0: entered allmulticast mode [ 35.946104][ T5026] ip_vti0: entered allmulticast mode [ 35.946580][ T5026] ip6_vti0: entered allmulticast mode [ 35.946828][ T5026] sit0: entered allmulticast mode [ 35.947063][ T5026] ip6tnl0: entered allmulticast mode [ 35.947304][ T5026] ip6gre0: entered allmulticast mode [ 35.947855][ T5026] syz_tun: entered allmulticast mode [ 35.948149][ T5026] ip6gretap0: entered allmulticast mode [ 35.948458][ T5026] bridge0: entered allmulticast mode [ 35.948938][ T5026] vcan0: entered allmulticast mode [ 35.949176][ T5026] bond0: entered allmulticast mode [ 35.949184][ T5026] bond_slave_0: entered allmulticast mode [ 35.949193][ T5026] bond_slave_1: entered allmulticast mode [ 35.949681][ T5026] team0: entered allmulticast mode [ 35.949689][ T5026] team_slave_0: entered allmulticast mode [ 35.949697][ T5026] team_slave_1: entered allmulticast mode [ 35.949965][ T5026] dummy0: entered allmulticast mode [ 35.950317][ T5026] nlmon0: entered allmulticast mode [ 35.950577][ T5026] batadv0: entered allmulticast mode [ 35.951030][ T5026] vxcan0: entered allmulticast mode [ 35.951279][ T5026] vxcan1: entered allmulticast mode [ 35.951510][ T5026] veth0: entered allmulticast mode [ 35.951765][ T5026] veth1: entered allmulticast mode [ 35.952019][ T5026] wg0: entered allmulticast mode [ 35.952237][ T5026] wg1: entered allmulticast mode [ 35.952468][ T5026] wg2: entered allmulticast mode [ 35.952698][ T5026] veth0_to_bridge: entered allmulticast mode [ 35.953802][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.953828][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.954289][ T5026] veth1_to_bridge: entered allmulticast mode [ 35.954651][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.954697][ T5026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.955106][ T5026] veth0_to_bond: entered allmulticast mode [ 35.955669][ T5026] veth1_to_bond: entered allmulticast mode [ 35.956234][ T5026] veth0_to_team: entered allmulticast mode [ 35.957229][ T5026] veth1_to_team: entered allmulticast mode [ 35.958489][ T5026] veth0_to_batadv: entered allmulticast mode [ 35.958761][ T5026] batadv_slave_0: entered allmulticast mode [ 35.959010][ T5026] veth1_to_batadv: entered allmulticast mode [ 35.959257][ T5026] batadv_slave_1: entered allmulticast mode [ 35.959503][ T5026] xfrm0: entered allmulticast mode [ 35.959751][ T5026] veth0_to_hsr: entered allmulticast mode [ 35.960218][ T5026] hsr_slave_0: entered allmulticast mode [ 35.960681][ T5026] veth1_to_hsr: entered allmulticast mode [ 35.960935][ T5026] hsr_slave_1: entered allmulticast mode [ 35.961185][ T5026] hsr0: entered allmulticast mode [ 35.961345][ T5026] veth1_virt_wifi: entered allmulticast mode [ 35.961598][ T5026] veth0_virt_wifi: entered allmulticast mode [ 35.961849][ T5026] virt_wifi0: entered allmulticast mode [ 35.961897][ T5026] veth1_vlan: entered allmulticast mode [ 35.962167][ T5026] veth0_vlan: entered allmulticast mode [ 35.963175][ T5026] vlan0: entered allmulticast mode [ 35.963447][ T5026] vlan1: entered allmulticast mode [ 35.963710][ T5026] macvlan0: entered allmulticast mode [ 35.963968][ T5026] macvlan1: entered allmulticast mode [ 35.964225][ T5026] ipvlan0: entered allmulticast mode [ 35.964263][ T5026] ipvlan1: entered allmulticast mode [ 35.964299][ T5026] veth1_macvtap: entered allmulticast mode [ 35.964543][ T5026] veth0_macvtap: entered allmulticast mode [ 35.964807][ T5026] macvtap0: entered allmulticast mode [ 35.965060][ T5026] macsec0: entered allmulticast mode [ 35.965308][ T5026] geneve0: entered allmulticast mode [ 35.965557][ T5026] geneve1: entered allmulticast mode [ 35.965816][ T5026] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 35.966237][ T5026] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 35.966908][ T5026] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 35.967341][ T5026] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 35.968439][ T5026] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 35.968754][ T5026] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 35.994317][ T5026] loop2: detected capacity change from 0 to 1024 [ 36.000904][ T5026] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.019179][ T5026] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.29: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.019199][ T5026] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 36.019366][ T5026] EXT4-fs (loop2): Remounting filesystem read-only [ 36.019377][ T5026] Quota error (device loop2): write_blk: dquota write failed [ 36.019391][ T5026] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 36.019452][ T5026] EXT4-fs (loop2): 1 orphan inode deleted [ 36.019934][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.060618][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.533062][ T4721] Bluetooth: hci1: command tx timeout [ 36.533092][ T4721] Bluetooth: hci4: command tx timeout [ 36.533109][ T4721] Bluetooth: hci0: command tx timeout [ 36.533123][ T4721] Bluetooth: hci3: command tx timeout [ 36.533137][ T4721] Bluetooth: hci2: command tx timeout [ 36.536436][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.567026][ T5044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 36.567041][ T5044] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 36.570257][ T5047] Zero length message leads to an empty skb [ 36.571561][ T5047] FAULT_INJECTION: forcing a failure. [ 36.571561][ T5047] name failslab, interval 1, probability 0, space 0, times 1 [ 36.571577][ T5047] CPU: 1 UID: 0 PID: 5047 Comm: syz.4.35 Not tainted syzkaller #0 PREEMPT [ 36.571595][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.571603][ T5047] Call trace: [ 36.571607][ T5047] show_stack+0x2c/0x3c (C) [ 36.571625][ T5047] __dump_stack+0x30/0x40 [ 36.571636][ T5047] dump_stack_lvl+0xd8/0x12c [ 36.571645][ T5047] dump_stack+0x1c/0x28 [ 36.571653][ T5047] should_fail_ex+0x3fc/0x570 [ 36.571667][ T5047] should_failslab+0xc4/0x120 [ 36.571676][ T5047] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 36.571685][ T5047] sock_alloc_inode+0x30/0x180 [ 36.571698][ T5047] alloc_inode+0x68/0x198 [ 36.571710][ T5047] sock_alloc+0x4c/0x1f4 [ 36.571718][ T5047] __sock_create+0x108/0x670 [ 36.571727][ T5047] sock_create_kern+0x4c/0x64 [ 36.571736][ T5047] mptcp_subflow_create_socket+0xe4/0x61c [ 36.571750][ T5047] __mptcp_nmpc_sk+0x138/0x57c [ 36.571759][ T5047] mptcp_setsockopt+0xd84/0x219c [ 36.571769][ T5047] sock_common_setsockopt+0xb0/0xcc [ 36.571778][ T5047] do_sock_setsockopt+0x1f0/0x330 [ 36.571788][ T5047] __sys_setsockopt+0x104/0x170 [ 36.571798][ T5047] __arm64_sys_setsockopt+0xc8/0xe4 [ 36.571808][ T5047] invoke_syscall+0x98/0x244 [ 36.571817][ T5047] el0_svc_common+0xec/0x23c [ 36.571825][ T5047] do_el0_svc+0x4c/0x5c [ 36.571833][ T5047] el0_svc+0x60/0x1d8 [ 36.571842][ T5047] el0t_64_sync_handler+0x44/0x104 [ 36.571852][ T5047] el0t_64_sync+0x198/0x19c [ 36.571973][ T5047] socket: no more sockets [ 36.579111][ T5044] vhci_hcd vhci_hcd.0: Device attached [ 36.631479][ T5050] syzkaller0: entered promiscuous mode [ 36.631566][ T5050] syzkaller0: entered allmulticast mode [ 36.645523][ T5050] netlink: 76 bytes leftover after parsing attributes in process `syz.3.34'. [ 36.768506][ T4848] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 36.827569][ T4848] usb 2-1: new full-speed USB device number 2 using vhci_hcd [ 36.904604][ T5058] loop1: detected capacity change from 0 to 128 [ 36.914242][ T5058] vfat: Unknown parameter 'nnonumtail' [ 36.919803][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 36.967292][ T5060] syzkaller0: entered promiscuous mode [ 36.967308][ T5060] syzkaller0: entered allmulticast mode [ 36.970966][ T5060] FAULT_INJECTION: forcing a failure. [ 36.970966][ T5060] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.970980][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT [ 36.970989][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.970994][ T5060] Call trace: [ 36.970997][ T5060] show_stack+0x2c/0x3c (C) [ 36.971011][ T5060] __dump_stack+0x30/0x40 [ 36.971019][ T5060] dump_stack_lvl+0xd8/0x12c [ 36.971027][ T5060] dump_stack+0x1c/0x28 [ 36.971033][ T5060] should_fail_ex+0x3fc/0x570 [ 36.971045][ T5060] should_fail+0x14/0x24 [ 36.971055][ T5060] should_fail_usercopy+0x20/0x30 [ 36.971062][ T5060] _copy_from_iter+0x188/0x1050 [ 36.971071][ T5060] packet_sendmsg+0x2704/0x40c8 [ 36.971082][ T5060] __sock_sendmsg+0xc8/0x188 [ 36.971091][ T5060] ____sys_sendmsg+0x3d0/0x6c8 [ 36.971099][ T5060] ___sys_sendmsg+0x198/0x224 [ 36.971108][ T5060] __sys_sendmsg+0x158/0x204 [ 36.971116][ T5060] __arm64_sys_sendmsg+0x88/0x9c [ 36.971125][ T5060] invoke_syscall+0x98/0x244 [ 36.971132][ T5060] el0_svc_common+0xec/0x23c [ 36.971139][ T5060] do_el0_svc+0x4c/0x5c [ 36.971146][ T5060] el0_svc+0x60/0x1d8 [ 36.971156][ T5060] el0t_64_sync_handler+0x44/0x104 [ 36.971164][ T5060] el0t_64_sync+0x198/0x19c [ 37.148761][ T5070] loop0: detected capacity change from 0 to 4096 [ 37.181040][ T5070] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 37.181059][ T5070] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 37.181066][ T5070] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 37.181090][ T5070] loop0: [ 37.197852][ T4803] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 37.290057][ T5088] syzkaller0: entered promiscuous mode [ 37.290076][ T5088] syzkaller0: entered allmulticast mode [ 37.412120][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 37.450872][ T5104] ip_tables: iptables: counters copy to user failed while replacing table [ 37.480285][ T5106] loop2: detected capacity change from 0 to 128 [ 37.480628][ T5106] EXT4-fs: Ignoring removed i_version option [ 37.498767][ T5106] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.505915][ T5106] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 37.509349][ T5106] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 37.536802][ T4726] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.587879][ T5125] loop4: detected capacity change from 0 to 512 [ 37.592742][ T5125] EXT4-fs: Ignoring removed bh option [ 37.592756][ T5125] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.595435][ T5125] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 37.595453][ T5125] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.595463][ T5125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.601813][ T5125] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.63: bad orphan inode 131083 [ 37.601835][ T5125] loop4: lost filesystem error report for type 5 error -117 [ 37.602944][ T5125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.624185][ T5125] overlayfs: upper fs needs to support d_type. [ 37.640254][ T4717] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /9/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 37.654481][ T5129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.64'. [ 37.910045][ T5140] loop1: detected capacity change from 0 to 128 [ 37.930699][ T5140] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.034141][ T5147] loop2: detected capacity change from 0 to 512 [ 38.036999][ T5147] EXT4-fs: Ignoring removed i_version option [ 38.044510][ T5147] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 38.044542][ T5147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.183684][ T5147] EXT4-fs (loop2): 1 truncate cleaned up [ 38.184098][ T5147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.207362][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.250334][ T638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.310814][ T638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.318187][ T5153] FAULT_INJECTION: forcing a failure. [ 38.318187][ T5153] name failslab, interval 1, probability 0, space 0, times 0 [ 38.318203][ T5153] CPU: 0 UID: 0 PID: 5153 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT [ 38.318217][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.318223][ T5153] Call trace: [ 38.318226][ T5153] show_stack+0x2c/0x3c (C) [ 38.318242][ T5153] __dump_stack+0x30/0x40 [ 38.318250][ T5153] dump_stack_lvl+0xd8/0x12c [ 38.318257][ T5153] dump_stack+0x1c/0x28 [ 38.318264][ T5153] should_fail_ex+0x3fc/0x570 [ 38.318279][ T5153] should_failslab+0xc4/0x120 [ 38.318288][ T5153] __kmalloc_cache_noprof+0x94/0x5fc [ 38.318297][ T5153] device_add+0xb4/0x9e0 [ 38.318305][ T5153] device_register+0x28/0x38 [ 38.318316][ T5153] tty_register_device_attr+0x31c/0x600 [ 38.318328][ T5153] tty_port_register_device_attr+0x12c/0x164 [ 38.318338][ T5153] tty_port_register_device+0x44/0x58 [ 38.318346][ T5153] rfcomm_dev_ioctl+0x157c/0x1be0 [ 38.318357][ T5153] rfcomm_sock_ioctl+0x90/0x104 [ 38.318365][ T5153] sock_do_ioctl+0x100/0x254 [ 38.318376][ T5153] sock_ioctl+0x55c/0x7ec [ 38.318385][ T5153] __arm64_sys_ioctl+0x154/0x1cc [ 38.318393][ T5153] invoke_syscall+0x98/0x244 [ 38.318401][ T5153] el0_svc_common+0xec/0x23c [ 38.318408][ T5153] do_el0_svc+0x4c/0x5c [ 38.318415][ T5153] el0_svc+0x60/0x1d8 [ 38.318424][ T5153] el0t_64_sync_handler+0x44/0x104 [ 38.318433][ T5153] el0t_64_sync+0x198/0x19c [ 38.336779][ T5155] loop3: detected capacity change from 0 to 512 [ 38.344073][ T5155] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.74: bad orphan inode 13 [ 38.344089][ T5155] loop3: lost filesystem error report for type 5 error -117 [ 38.344218][ T5155] ext4_test_bit(bit=12, block=4) = 1 [ 38.344224][ T5155] is_bad_inode(inode)=0 [ 38.344228][ T5155] NEXT_ORPHAN(inode)=0 [ 38.344232][ T5155] max_ino=32 [ 38.344236][ T5155] i_nlink=1 [ 38.344648][ T5155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.373321][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.395464][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.396922][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.397999][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.401204][ T4724] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.410104][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.410524][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.415055][ T638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.491234][ T638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.519414][ T5176] ip_tables: iptables: counters copy to user failed while replacing table [ 38.522770][ T5176] loop1: detected capacity change from 0 to 512 [ 38.523744][ T5176] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.523911][ T5157] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.567744][ T4721] Bluetooth: hci2: command tx timeout [ 38.567768][ T4721] Bluetooth: hci3: command tx timeout [ 38.567782][ T4721] Bluetooth: hci4: command tx timeout [ 38.567796][ T4721] Bluetooth: hci1: command tx timeout [ 38.638348][ T638] bridge_slave_1: left allmulticast mode [ 38.638375][ T638] bridge_slave_1: left promiscuous mode [ 38.638781][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.645092][ T638] bridge_slave_0: left allmulticast mode [ 38.645109][ T638] bridge_slave_0: left promiscuous mode [ 38.645187][ T638] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.646889][ T5188] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 38.703329][ T5190] loop3: detected capacity change from 0 to 4096 [ 38.707424][ T5190] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.725495][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.734449][ T5190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.757297][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.787672][ T638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.804304][ T5202] FAULT_INJECTION: forcing a failure. [ 38.804304][ T5202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.804321][ T5202] CPU: 1 UID: 0 PID: 5202 Comm: syz.2.84 Tainted: G L syzkaller #0 PREEMPT [ 38.804333][ T5202] Tainted: [L]=SOFTLOCKUP [ 38.804336][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.804340][ T5202] Call trace: [ 38.804343][ T5202] show_stack+0x2c/0x3c (C) [ 38.804358][ T5202] __dump_stack+0x30/0x40 [ 38.804367][ T5202] dump_stack_lvl+0xd8/0x12c [ 38.804374][ T5202] dump_stack+0x1c/0x28 [ 38.804381][ T5202] should_fail_ex+0x3fc/0x570 [ 38.804393][ T5202] should_fail+0x14/0x24 [ 38.804403][ T5202] should_fail_usercopy+0x20/0x30 [ 38.804410][ T5202] _inline_copy_from_user+0x3c/0x174 [ 38.804421][ T5202] copy_msghdr_from_user+0xb8/0x194 [ 38.804430][ T5202] ___sys_recvmsg+0x11c/0x1f4 [ 38.804439][ T5202] do_recvmmsg+0x288/0x7d4 [ 38.804447][ T5202] __sys_recvmmsg+0x1e0/0x270 [ 38.804456][ T5202] __arm64_sys_recvmmsg+0xe0/0x108 [ 38.804465][ T5202] invoke_syscall+0x98/0x244 [ 38.804472][ T5202] el0_svc_common+0xec/0x23c [ 38.804479][ T5202] do_el0_svc+0x4c/0x5c [ 38.804486][ T5202] el0_svc+0x60/0x1d8 [ 38.804495][ T5202] el0t_64_sync_handler+0x44/0x104 [ 38.804503][ T5202] el0t_64_sync+0x198/0x19c [ 38.819365][ T638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.838802][ T638] bond0 (unregistering): Released all slaves [ 38.886901][ T5208] FAULT_INJECTION: forcing a failure. [ 38.886901][ T5208] name failslab, interval 1, probability 0, space 0, times 0 [ 38.886923][ T5208] CPU: 0 UID: 0 PID: 5208 Comm: syz.3.86 Tainted: G L syzkaller #0 PREEMPT [ 38.886936][ T5208] Tainted: [L]=SOFTLOCKUP [ 38.886939][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.886944][ T5208] Call trace: [ 38.886948][ T5208] show_stack+0x2c/0x3c (C) [ 38.886963][ T5208] __dump_stack+0x30/0x40 [ 38.886972][ T5208] dump_stack_lvl+0xd8/0x12c [ 38.886980][ T5208] dump_stack+0x1c/0x28 [ 38.886988][ T5208] should_fail_ex+0x3fc/0x570 [ 38.887002][ T5208] should_failslab+0xc4/0x120 [ 38.887010][ T5208] kmem_cache_alloc_noprof+0x94/0x5d4 [ 38.887019][ T5208] security_inode_alloc+0x40/0x304 [ 38.887028][ T5208] inode_init_always_gfp+0x704/0xb20 [ 38.887041][ T5208] alloc_inode+0x9c/0x198 [ 38.887049][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.887052][ T5208] sock_alloc+0x4c/0x1f4 [ 38.887062][ T5208] __sock_create+0x108/0x670 [ 38.887071][ T5208] __sys_socket_create+0xc0/0x11c [ 38.887080][ T5208] __sys_socket+0x44/0xec [ 38.887089][ T5208] __arm64_sys_socket+0x84/0x9c [ 38.887098][ T5208] invoke_syscall+0x98/0x244 [ 38.887107][ T5208] el0_svc_common+0xec/0x23c [ 38.887115][ T5208] do_el0_svc+0x4c/0x5c [ 38.887122][ T5208] el0_svc+0x60/0x1d8 [ 38.887133][ T5208] el0t_64_sync_handler+0x44/0x104 [ 38.887142][ T5208] el0t_64_sync+0x198/0x19c [ 38.887161][ T5208] socket: no more sockets [ 38.887207][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.887270][ T5157] bridge_slave_0: entered allmulticast mode [ 38.889747][ T5157] bridge_slave_0: entered promiscuous mode [ 38.892514][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.892538][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.892596][ T5157] bridge_slave_1: entered allmulticast mode [ 38.892953][ T5157] bridge_slave_1: entered promiscuous mode [ 38.908236][ T5157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.909108][ T5157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.918870][ T5157] team0: Port device team_slave_0 added [ 38.920904][ T5157] team0: Port device team_slave_1 added [ 38.934379][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.934388][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.934401][ T5157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.936227][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.936235][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.936247][ T5157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.972823][ T5157] hsr_slave_0: entered promiscuous mode [ 38.984563][ T5157] hsr_slave_1: entered promiscuous mode [ 38.984814][ T5157] debugfs: 'hsr0' already exists in 'hsr' [ 38.984823][ T5157] Cannot create hsr debugfs directory [ 39.119297][ T4408] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.155849][ T5232] loop1: detected capacity change from 0 to 512 [ 39.162086][ T5232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.162099][ T5232] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.185526][ T5232] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 39.185656][ T5232] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.190348][ T5232] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 39.190388][ T5232] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 39.190398][ T5232] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.89: Failed to acquire dquot type 1 [ 39.190409][ T5232] loop1: lost filesystem error report for type 5 error -117 [ 39.191123][ T5232] EXT4-fs (loop1): Remounting filesystem read-only [ 39.193631][ T5232] EXT4-fs (loop1): 1 truncate cleaned up [ 39.197528][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 39.197542][ C1] EXT4-fs (loop1): initial error at time 39: ext4_acquire_dquot:7120 [ 39.197557][ C1] EXT4-fs (loop1): last error at time 39: ext4_acquire_dquot:7120 [ 39.198800][ T1192] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.198814][ T1192] Quota error (device loop1): write_blk: dquota write failed [ 39.198821][ T1192] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 39.198829][ T1192] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.198838][ T1192] Quota error (device loop1): write_blk: dquota write failed [ 39.198844][ T1192] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 39.198872][ T1192] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.198880][ T1192] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 39.199847][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.281308][ T5244] FAULT_INJECTION: forcing a failure. [ 39.281308][ T5244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.281329][ T5244] CPU: 1 UID: 0 PID: 5244 Comm: syz.3.92 Tainted: G L syzkaller #0 PREEMPT [ 39.281343][ T5244] Tainted: [L]=SOFTLOCKUP [ 39.281346][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.281350][ T5244] Call trace: [ 39.281353][ T5244] show_stack+0x2c/0x3c (C) [ 39.281368][ T5244] __dump_stack+0x30/0x40 [ 39.281376][ T5244] dump_stack_lvl+0xd8/0x12c [ 39.281383][ T5244] dump_stack+0x1c/0x28 [ 39.281389][ T5244] should_fail_ex+0x3fc/0x570 [ 39.281401][ T5244] should_fail+0x14/0x24 [ 39.281411][ T5244] should_fail_usercopy+0x20/0x30 [ 39.281418][ T5244] copy_folio_from_iter_atomic+0x384/0x1534 [ 39.281427][ T5244] generic_perform_write+0x4bc/0x7a4 [ 39.281438][ T5244] shmem_file_write_iter+0x10c/0x134 [ 39.281448][ T5244] vfs_write+0x51c/0xa0c [ 39.281456][ T5244] ksys_write+0x12c/0x228 [ 39.281464][ T5244] __arm64_sys_write+0x84/0x98 [ 39.281471][ T5244] invoke_syscall+0x98/0x244 [ 39.281479][ T5244] el0_svc_common+0xec/0x23c [ 39.281486][ T5244] do_el0_svc+0x4c/0x5c [ 39.281493][ T5244] el0_svc+0x60/0x1d8 [ 39.281502][ T5244] el0t_64_sync_handler+0x44/0x104 [ 39.281510][ T5244] el0t_64_sync+0x198/0x19c [ 39.282337][ T5244] loop3: detected capacity change from 0 to 512 [ 39.285897][ T5244] EXT4-fs: Ignoring removed nobh option [ 39.288532][ T5244] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.288553][ T5244] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.288559][ T5244] EXT4-fs (loop3): can't mount with both data=journal and dax [ 39.558389][ T5250] capability: warning: `syz.3.93' uses deprecated v2 capabilities in a way that may be insecure [ 39.566015][ T5157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.584761][ T5157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.585130][ T5157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.595384][ T5045] vhci_hcd: connection reset by peer [ 39.597309][ T12] vhci_hcd vhci_hcd.0: stop threads [ 39.597327][ T12] vhci_hcd vhci_hcd.0: release socket [ 39.597353][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 39.600014][ T5157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.600327][ T5157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.624631][ T5157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.646461][ T5157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.650910][ T5259] FAULT_INJECTION: forcing a failure. [ 39.650910][ T5259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.650926][ T5259] CPU: 1 UID: 0 PID: 5259 Comm: syz.3.94 Tainted: G L syzkaller #0 PREEMPT [ 39.650937][ T5259] Tainted: [L]=SOFTLOCKUP [ 39.650940][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.650945][ T5259] Call trace: [ 39.650947][ T5259] show_stack+0x2c/0x3c (C) [ 39.650962][ T5259] __dump_stack+0x30/0x40 [ 39.650969][ T5259] dump_stack_lvl+0xd8/0x12c [ 39.650976][ T5259] dump_stack+0x1c/0x28 [ 39.650983][ T5259] should_fail_ex+0x3fc/0x570 [ 39.650995][ T5259] should_fail_alloc_page+0xec/0x10c [ 39.651003][ T5259] prepare_alloc_pages+0x194/0x484 [ 39.651011][ T5259] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 39.651019][ T5259] alloc_pages_mpol+0x1fc/0x3d0 [ 39.651028][ T5259] folio_alloc_mpol_noprof+0x4c/0x248 [ 39.651036][ T5259] vma_alloc_folio_noprof+0x100/0x1dc [ 39.651044][ T5259] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 39.651057][ T5259] folio_prealloc+0x3c/0x1b0 [ 39.651064][ T5259] do_pte_missing+0x1bd0/0x28bc [ 39.651071][ T5259] handle_mm_fault+0x14d0/0x2b58 [ 39.651082][ T5259] __get_user_pages+0x82c/0x13b0 [ 39.651090][ T5259] __gup_longterm_locked+0xa14/0xffc [ 39.651098][ T5259] gup_fast_fallback+0x2128/0x2318 [ 39.651106][ T5259] pin_user_pages_fast+0x6c/0xa8 [ 39.651114][ T5259] iov_iter_extract_pages+0x194/0x37c [ 39.651123][ T5259] iov_iter_extract_bvecs+0x1f4/0x97c [ 39.651131][ T5259] bio_iov_iter_get_pages+0x368/0xce0 [ 39.651140][ T5259] __blkdev_direct_IO+0x460/0xc7c [ 39.651147][ T5259] blkdev_direct_IO+0x4e4/0x1128 [ 39.651154][ T5259] blkdev_read_iter+0x1e0/0x4b0 [ 39.651161][ T5259] do_iter_readv_writev+0x48c/0x6f8 [ 39.651169][ T5259] vfs_readv+0x21c/0x520 [ 39.651177][ T5259] do_preadv+0x170/0x2a0 [ 39.651185][ T5259] __arm64_sys_preadv2+0xe4/0x118 [ 39.651193][ T5259] invoke_syscall+0x98/0x244 [ 39.651200][ T5259] el0_svc_common+0xec/0x23c [ 39.651207][ T5259] do_el0_svc+0x4c/0x5c [ 39.651213][ T5259] el0_svc+0x60/0x1d8 [ 39.651223][ T5259] el0t_64_sync_handler+0x44/0x104 [ 39.651231][ T5259] el0t_64_sync+0x198/0x19c [ 39.660798][ T5157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.724575][ T638] hsr_slave_0: left promiscuous mode [ 39.724918][ T638] hsr_slave_1: left promiscuous mode [ 39.725230][ T638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.725246][ T638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.726001][ T5273] netlink: 104 bytes leftover after parsing attributes in process `syz.3.98'. [ 39.727755][ T638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.728582][ T638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.750940][ T638] veth1_macvtap: left promiscuous mode [ 39.750976][ T638] veth0_macvtap: left promiscuous mode [ 39.751021][ T638] veth1_vlan: left promiscuous mode [ 39.751060][ T638] veth0_vlan: left promiscuous mode [ 39.793503][ T5283] Couldn't find request waiting for DGID: 0c00:5a81:0800:2c01:3e00:0000:7d16:9faa [ 39.796432][ T5285] Couldn't find request waiting for DGID: 0c00:5a81:0800:2c01:3e00:0000:7d16:9faa [ 39.823891][ T5290] FAULT_INJECTION: forcing a failure. [ 39.823891][ T5290] name failslab, interval 1, probability 0, space 0, times 0 [ 39.823908][ T5290] CPU: 0 UID: 0 PID: 5290 Comm: syz.3.102 Tainted: G L syzkaller #0 PREEMPT [ 39.823919][ T5290] Tainted: [L]=SOFTLOCKUP [ 39.823922][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.823927][ T5290] Call trace: [ 39.823929][ T5290] show_stack+0x2c/0x3c (C) [ 39.823943][ T5290] __dump_stack+0x30/0x40 [ 39.823951][ T5290] dump_stack_lvl+0xd8/0x12c [ 39.823958][ T5290] dump_stack+0x1c/0x28 [ 39.823965][ T5290] should_fail_ex+0x3fc/0x570 [ 39.823976][ T5290] should_failslab+0xc4/0x120 [ 39.823984][ T5290] __kmalloc_cache_noprof+0x94/0x5fc [ 39.823993][ T5290] device_add+0xb4/0x9e0 [ 39.824001][ T5290] device_register+0x28/0x38 [ 39.824011][ T5290] tty_register_device_attr+0x31c/0x600 [ 39.824022][ T5290] tty_port_register_device_attr+0x12c/0x164 [ 39.824031][ T5290] tty_port_register_device+0x44/0x58 [ 39.824040][ T5290] rfcomm_dev_ioctl+0x157c/0x1be0 [ 39.824050][ T5290] rfcomm_sock_ioctl+0x90/0x104 [ 39.824059][ T5290] sock_do_ioctl+0x100/0x254 [ 39.824069][ T5290] sock_ioctl+0x55c/0x7ec [ 39.824078][ T5290] __arm64_sys_ioctl+0x154/0x1cc [ 39.824086][ T5290] invoke_syscall+0x98/0x244 [ 39.824093][ T5290] el0_svc_common+0xec/0x23c [ 39.824100][ T5290] do_el0_svc+0x4c/0x5c [ 39.824107][ T5290] el0_svc+0x60/0x1d8 [ 39.824116][ T5290] el0t_64_sync_handler+0x44/0x104 [ 39.824124][ T5290] el0t_64_sync+0x198/0x19c [ 39.893253][ T5292] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.16384.0), cmd(6) [ 39.907423][ T638] team0 (unregistering): Port device team_slave_1 removed [ 39.917074][ T638] team0 (unregistering): Port device team_slave_0 removed [ 39.964979][ T5302] FAULT_INJECTION: forcing a failure. [ 39.964979][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 39.965056][ T5302] CPU: 1 UID: 0 PID: 5302 Comm: syz.3.105 Tainted: G L syzkaller #0 PREEMPT [ 39.965070][ T5302] Tainted: [L]=SOFTLOCKUP [ 39.965073][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.965078][ T5302] Call trace: [ 39.965081][ T5302] show_stack+0x2c/0x3c (C) [ 39.965095][ T5302] __dump_stack+0x30/0x40 [ 39.965103][ T5302] dump_stack_lvl+0xd8/0x12c [ 39.965110][ T5302] dump_stack+0x1c/0x28 [ 39.965116][ T5302] should_fail_ex+0x3fc/0x570 [ 39.965128][ T5302] should_failslab+0xc4/0x120 [ 39.965136][ T5302] kmem_cache_alloc_noprof+0x94/0x5d4 [ 39.965144][ T5302] vm_area_dup+0x34/0x5c4 [ 39.965153][ T5302] dup_mmap+0x72c/0x1a04 [ 39.965162][ T5302] copy_mm+0xe8/0x328 [ 39.965169][ T5302] copy_process+0x1698/0x35a0 [ 39.965176][ T5302] kernel_clone+0x234/0x8e8 [ 39.965183][ T5302] __arm64_sys_clone+0x168/0x1d4 [ 39.965190][ T5302] invoke_syscall+0x98/0x244 [ 39.965198][ T5302] el0_svc_common+0xec/0x23c [ 39.965205][ T5302] do_el0_svc+0x4c/0x5c [ 39.965212][ T5302] el0_svc+0x60/0x1d8 [ 39.965221][ T5302] el0t_64_sync_handler+0x44/0x104 [ 39.965229][ T5302] el0t_64_sync+0x198/0x19c [ 39.991283][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 39.991643][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 39.992154][ T4408] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.036370][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.087415][ T5157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.090859][ T5305] FAULT_INJECTION: forcing a failure. [ 40.090859][ T5305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.090876][ T5305] CPU: 0 UID: 0 PID: 5305 Comm: syz.3.106 Tainted: G L syzkaller #0 PREEMPT [ 40.090894][ T5305] Tainted: [L]=SOFTLOCKUP [ 40.090898][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.090903][ T5305] Call trace: [ 40.090906][ T5305] show_stack+0x2c/0x3c (C) [ 40.090921][ T5305] __dump_stack+0x30/0x40 [ 40.090930][ T5305] dump_stack_lvl+0xd8/0x12c [ 40.090937][ T5305] dump_stack+0x1c/0x28 [ 40.090944][ T5305] should_fail_ex+0x3fc/0x570 [ 40.090956][ T5305] should_fail+0x14/0x24 [ 40.090966][ T5305] should_fail_usercopy+0x20/0x30 [ 40.090973][ T5305] _inline_copy_from_user+0x3c/0x188 [ 40.090985][ T5305] dm_ctl_ioctl+0x10c/0xbbc [ 40.090994][ T5305] __arm64_sys_ioctl+0x154/0x1cc [ 40.091003][ T5305] invoke_syscall+0x98/0x244 [ 40.091011][ T5305] el0_svc_common+0xec/0x23c [ 40.091018][ T5305] do_el0_svc+0x4c/0x5c [ 40.091025][ T5305] el0_svc+0x60/0x1d8 [ 40.091034][ T5305] el0t_64_sync_handler+0x44/0x104 [ 40.091042][ T5305] el0t_64_sync+0x198/0x19c [ 40.099700][ T5308] process 'syz.0.107' launched './file0' with NULL argv: empty string added [ 40.143106][ T5157] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.149099][ T5315] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 40.151491][ T5315] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET) [ 40.152669][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.152696][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.162786][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.162812][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.196277][ T5319] device-mapper: table: 248:3: ram5 too small for target: start=0, len=9296, dev_size=8192 [ 40.196297][ T5319] device-mapper: core: Cannot calculate initial queue limits [ 40.196302][ T5319] device-mapper: ioctl: unable to set up device queue for new table. [ 40.223574][ T5332] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 40.246962][ T5315] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3716553728.1048583.4194304), cmd(3) [ 40.393557][ T5368] loop3: detected capacity change from 0 to 512 [ 40.466554][ T5157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.487741][ T4719] Bluetooth: hci0: command tx timeout [ 40.516360][ T5382] FAULT_INJECTION: forcing a failure. [ 40.516360][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 40.516379][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.3.120 Tainted: G L syzkaller #0 PREEMPT [ 40.516390][ T5382] Tainted: [L]=SOFTLOCKUP [ 40.516393][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.516398][ T5382] Call trace: [ 40.516400][ T5382] show_stack+0x2c/0x3c (C) [ 40.516414][ T5382] __dump_stack+0x30/0x40 [ 40.516422][ T5382] dump_stack_lvl+0xd8/0x12c [ 40.516429][ T5382] dump_stack+0x1c/0x28 [ 40.516436][ T5382] should_fail_ex+0x3fc/0x570 [ 40.516448][ T5382] should_failslab+0xc4/0x120 [ 40.516456][ T5382] kmem_cache_alloc_noprof+0x94/0x5d4 [ 40.516465][ T5382] anon_vma_clone+0xc88/0x19cc [ 40.516476][ T5382] anon_vma_fork+0x28c/0x914 [ 40.516486][ T5382] dup_mmap+0x7e8/0x1a04 [ 40.516494][ T5382] copy_mm+0xe8/0x328 [ 40.516502][ T5382] copy_process+0x1698/0x35a0 [ 40.516508][ T5382] kernel_clone+0x234/0x8e8 [ 40.516516][ T5382] __arm64_sys_clone+0x168/0x1d4 [ 40.516523][ T5382] invoke_syscall+0x98/0x244 [ 40.516531][ T5382] el0_svc_common+0xec/0x23c [ 40.516538][ T5382] do_el0_svc+0x4c/0x5c [ 40.516545][ T5382] el0_svc+0x60/0x1d8 [ 40.516554][ T5382] el0t_64_sync_handler+0x44/0x104 [ 40.516562][ T5382] el0t_64_sync+0x198/0x19c [ 40.551644][ T4408] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.603096][ T5396] loop3: detected capacity change from 0 to 512 [ 40.645894][ T5396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.646182][ T5157] veth0_vlan: entered promiscuous mode [ 40.651269][ T5157] veth1_vlan: entered promiscuous mode [ 40.673722][ T5157] veth0_macvtap: entered promiscuous mode [ 40.681645][ T5157] veth1_macvtap: entered promiscuous mode [ 40.684757][ T5396] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.122: corrupted xattr block 33: overlapping e_value [ 40.694193][ T5396] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.122: corrupted xattr block 33: overlapping e_value [ 40.698004][ T5396] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.122: corrupted xattr block 33: overlapping e_value [ 40.706547][ T5396] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.122: corrupted xattr block 33: overlapping e_value [ 40.719922][ T5157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.720950][ T5157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.777275][ T5415] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.789294][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.789307][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.812141][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.812155][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.826809][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.829851][ T1200] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.830498][ T1200] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.830519][ T1200] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.830534][ T1200] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.970135][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 40.973209][ T5438] loop2: detected capacity change from 0 to 2048 [ 41.000582][ T5443] syzkaller0: entered promiscuous mode [ 41.000603][ T5443] syzkaller0: entered allmulticast mode [ 41.003785][ T5438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.020445][ T5443] FAULT_INJECTION: forcing a failure. [ 41.020445][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.020467][ T5443] CPU: 1 UID: 0 PID: 5443 Comm: syz.5.72 Tainted: G L syzkaller #0 PREEMPT [ 41.020479][ T5443] Tainted: [L]=SOFTLOCKUP [ 41.020482][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.020487][ T5443] Call trace: [ 41.020489][ T5443] show_stack+0x2c/0x3c (C) [ 41.020504][ T5443] __dump_stack+0x30/0x40 [ 41.020514][ T5443] dump_stack_lvl+0xd8/0x12c [ 41.020521][ T5443] dump_stack+0x1c/0x28 [ 41.020528][ T5443] should_fail_ex+0x3fc/0x570 [ 41.020540][ T5443] should_fail+0x14/0x24 [ 41.020550][ T5443] should_fail_usercopy+0x20/0x30 [ 41.020557][ T5443] _copy_from_iter+0x188/0x1050 [ 41.020565][ T5443] packet_sendmsg+0x2704/0x40c8 [ 41.020580][ T5443] __sock_sendmsg+0xc8/0x188 [ 41.020597][ T5443] ____sys_sendmsg+0x3d0/0x6c8 [ 41.020606][ T5443] ___sys_sendmsg+0x198/0x224 [ 41.020614][ T5443] __sys_sendmsg+0x158/0x204 [ 41.020623][ T5443] __arm64_sys_sendmsg+0x88/0x9c [ 41.020631][ T5443] invoke_syscall+0x98/0x244 [ 41.020640][ T5443] el0_svc_common+0xec/0x23c [ 41.020647][ T5443] do_el0_svc+0x4c/0x5c [ 41.020654][ T5443] el0_svc+0x60/0x1d8 [ 41.020663][ T5443] el0t_64_sync_handler+0x44/0x104 [ 41.020671][ T5443] el0t_64_sync+0x198/0x19c [ 41.116545][ T4408] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.139172][ T5460] FAULT_INJECTION: forcing a failure. [ 41.139172][ T5460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.139193][ T5460] CPU: 1 UID: 0 PID: 5460 Comm: syz.1.131 Tainted: G L syzkaller #0 PREEMPT [ 41.139208][ T5460] Tainted: [L]=SOFTLOCKUP [ 41.139211][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.139215][ T5460] Call trace: [ 41.139218][ T5460] show_stack+0x2c/0x3c (C) [ 41.139232][ T5460] __dump_stack+0x30/0x40 [ 41.139240][ T5460] dump_stack_lvl+0xd8/0x12c [ 41.139247][ T5460] dump_stack+0x1c/0x28 [ 41.139254][ T5460] should_fail_ex+0x3fc/0x570 [ 41.139265][ T5460] should_fail_alloc_page+0xec/0x10c [ 41.139274][ T5460] prepare_alloc_pages+0x194/0x484 [ 41.139281][ T5460] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 41.139289][ T5460] alloc_pages_mpol+0x1fc/0x3d0 [ 41.139298][ T5460] folio_alloc_mpol_noprof+0x4c/0x248 [ 41.139307][ T5460] shmem_alloc_folio+0xa0/0x150 [ 41.139317][ T5460] shmem_alloc_and_add_folio+0x28c/0xb30 [ 41.139326][ T5460] shmem_get_folio_gfp+0x4c4/0x1108 [ 41.139335][ T5460] shmem_fault+0x15c/0x32c [ 41.139344][ T5460] __do_fault+0xf4/0x4a8 [ 41.139352][ T5460] do_pte_missing+0x1764/0x28bc [ 41.139359][ T5460] handle_mm_fault+0x14d0/0x2b58 [ 41.139369][ T5460] __get_user_pages+0x82c/0x13b0 [ 41.139377][ T5460] populate_vma_page_range+0x2a4/0x388 [ 41.139384][ T5460] __mm_populate+0x204/0x328 [ 41.139392][ T5460] vm_mmap_pgoff+0x37c/0x4a4 [ 41.139399][ T5460] ksys_mmap_pgoff+0xd0/0x5b4 [ 41.139407][ T5460] __arm64_sys_mmap+0x110/0x12c [ 41.139414][ T5460] invoke_syscall+0x98/0x244 [ 41.139421][ T5460] el0_svc_common+0xec/0x23c [ 41.139428][ T5460] do_el0_svc+0x4c/0x5c [ 41.139435][ T5460] el0_svc+0x60/0x1d8 [ 41.139444][ T5460] el0t_64_sync_handler+0x44/0x104 [ 41.139452][ T5460] el0t_64_sync+0x198/0x19c [ 41.176119][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.262245][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.343088][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.370295][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.420334][ T5498] EXT4-fs: Ignoring removed i_version option [ 41.424193][ T5498] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.424596][ T5498] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.427169][ T5498] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.427306][ T5498] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.143: bad orphan inode 12 [ 41.427319][ T5498] loop0: lost filesystem error report for type 5 error -117 [ 41.428826][ T5498] ext4_test_bit(bit=11, block=1) = 0 [ 41.429283][ T5498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.461753][ T5498] tipc: Started in network mode [ 41.461767][ T5498] tipc: Node identity , cluster identity 4711 [ 41.461775][ T5498] tipc: Failed to obtain node identity [ 41.461787][ T5498] tipc: Enabling of bearer rejected, failed to enable media [ 41.529783][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.540143][ T5512] EXT4-fs: Ignoring removed orlov option [ 41.544942][ T5512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.544962][ T5512] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.548903][ T5512] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0002] [ 41.548948][ T5512] System zones: 0-5 [ 41.549692][ T5512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.579427][ T5496] FAULT_INJECTION: forcing a failure. [ 41.579427][ T5496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.579450][ T5496] CPU: 0 UID: 0 PID: 5496 Comm: syz.3.142 Tainted: G L syzkaller #0 PREEMPT [ 41.579466][ T5496] Tainted: [L]=SOFTLOCKUP [ 41.579469][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.579474][ T5496] Call trace: [ 41.579477][ T5496] show_stack+0x2c/0x3c (C) [ 41.579493][ T5496] __dump_stack+0x30/0x40 [ 41.579501][ T5496] dump_stack_lvl+0xd8/0x12c [ 41.579509][ T5496] dump_stack+0x1c/0x28 [ 41.579515][ T5496] should_fail_ex+0x3fc/0x570 [ 41.579527][ T5496] should_fail+0x14/0x24 [ 41.579537][ T5496] should_fail_usercopy+0x20/0x30 [ 41.579545][ T5496] __arm64_sys_rt_sigreturn+0x208/0x27d0 [ 41.579552][ T5496] invoke_syscall+0x98/0x244 [ 41.579560][ T5496] el0_svc_common+0xec/0x23c [ 41.579567][ T5496] do_el0_svc+0x4c/0x5c [ 41.579574][ T5496] el0_svc+0x60/0x1d8 [ 41.579592][ T5496] el0t_64_sync_handler+0x44/0x104 [ 41.579601][ T5496] el0t_64_sync+0x198/0x19c [ 41.641386][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.645985][ T5519] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 41.717341][ T5534] FAULT_INJECTION: forcing a failure. [ 41.717341][ T5534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.717360][ T5534] CPU: 1 UID: 0 PID: 5534 Comm: syz.3.156 Tainted: G L syzkaller #0 PREEMPT [ 41.717371][ T5534] Tainted: [L]=SOFTLOCKUP [ 41.717374][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.717379][ T5534] Call trace: [ 41.717381][ T5534] show_stack+0x2c/0x3c (C) [ 41.717395][ T5534] __dump_stack+0x30/0x40 [ 41.717403][ T5534] dump_stack_lvl+0xd8/0x12c [ 41.717410][ T5534] dump_stack+0x1c/0x28 [ 41.717417][ T5534] should_fail_ex+0x3fc/0x570 [ 41.717428][ T5534] should_fail_alloc_page+0xec/0x10c [ 41.717437][ T5534] prepare_alloc_pages+0x194/0x484 [ 41.717445][ T5534] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 41.717452][ T5534] alloc_pages_mpol+0x1fc/0x3d0 [ 41.717461][ T5534] folio_alloc_mpol_noprof+0x4c/0x248 [ 41.717470][ T5534] vma_alloc_folio_noprof+0x100/0x1dc [ 41.717482][ T5534] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 41.717496][ T5534] folio_prealloc+0x3c/0x1b0 [ 41.717504][ T5534] do_pte_missing+0x1bd0/0x28bc [ 41.717511][ T5534] handle_mm_fault+0x14d0/0x2b58 [ 41.717522][ T5534] __get_user_pages+0x82c/0x13b0 [ 41.717530][ T5534] populate_vma_page_range+0x2a4/0x388 [ 41.717537][ T5534] __mm_populate+0x204/0x328 [ 41.717545][ T5534] vm_mmap_pgoff+0x37c/0x4a4 [ 41.717552][ T5534] ksys_mmap_pgoff+0xd0/0x5b4 [ 41.717560][ T5534] __arm64_sys_mmap+0x110/0x12c [ 41.717567][ T5534] invoke_syscall+0x98/0x244 [ 41.717574][ T5534] el0_svc_common+0xec/0x23c [ 41.717581][ T5534] do_el0_svc+0x4c/0x5c [ 41.717594][ T5534] el0_svc+0x60/0x1d8 [ 41.717604][ T5534] el0t_64_sync_handler+0x44/0x104 [ 41.717612][ T5534] el0t_64_sync+0x198/0x19c [ 41.790334][ T5541] FAULT_INJECTION: forcing a failure. [ 41.790334][ T5541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.790355][ T5541] CPU: 0 UID: 0 PID: 5541 Comm: syz.1.159 Tainted: G L syzkaller #0 PREEMPT [ 41.790369][ T5541] Tainted: [L]=SOFTLOCKUP [ 41.790372][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.790376][ T5541] Call trace: [ 41.790379][ T5541] show_stack+0x2c/0x3c (C) [ 41.790394][ T5541] __dump_stack+0x30/0x40 [ 41.790402][ T5541] dump_stack_lvl+0xd8/0x12c [ 41.790409][ T5541] dump_stack+0x1c/0x28 [ 41.790415][ T5541] should_fail_ex+0x3fc/0x570 [ 41.790427][ T5541] should_fail_alloc_page+0xec/0x10c [ 41.790435][ T5541] prepare_alloc_pages+0x194/0x484 [ 41.790443][ T5541] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 41.790451][ T5541] alloc_pages_mpol+0x1fc/0x3d0 [ 41.790459][ T5541] alloc_frozen_pages_noprof+0xc4/0x10c [ 41.790468][ T5541] alloc_pages_noprof+0x30/0x148 [ 41.790476][ T5541] folio_alloc_noprof+0x2c/0x148 [ 41.790484][ T5541] filemap_alloc_folio_noprof+0x108/0x424 [ 41.790494][ T5541] __filemap_get_folio_mpol+0x444/0x1054 [ 41.790503][ T5541] aio_setup_ring+0x2f4/0xaf8 [ 41.790512][ T5541] ioctx_alloc+0x2e8/0x77c [ 41.790521][ T5541] __arm64_sys_io_setup+0x14c/0x2f4 [ 41.790529][ T5541] invoke_syscall+0x98/0x244 [ 41.790537][ T5541] el0_svc_common+0xec/0x23c [ 41.790543][ T5541] do_el0_svc+0x4c/0x5c [ 41.790550][ T5541] el0_svc+0x60/0x1d8 [ 41.790559][ T5541] el0t_64_sync_handler+0x44/0x104 [ 41.790568][ T5541] el0t_64_sync+0x198/0x19c [ 41.837677][ T5547] FAULT_INJECTION: forcing a failure. [ 41.837677][ T5547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.837698][ T5547] CPU: 1 UID: 0 PID: 5547 Comm: syz.2.160 Tainted: G L syzkaller #0 PREEMPT [ 41.837710][ T5547] Tainted: [L]=SOFTLOCKUP [ 41.837713][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.837718][ T5547] Call trace: [ 41.837721][ T5547] show_stack+0x2c/0x3c (C) [ 41.837734][ T5547] __dump_stack+0x30/0x40 [ 41.837742][ T5547] dump_stack_lvl+0xd8/0x12c [ 41.837749][ T5547] dump_stack+0x1c/0x28 [ 41.837755][ T5547] should_fail_ex+0x3fc/0x570 [ 41.837767][ T5547] should_fail_alloc_page+0xec/0x10c [ 41.837775][ T5547] prepare_alloc_pages+0x194/0x484 [ 41.837783][ T5547] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 41.837791][ T5547] alloc_pages_mpol+0x1fc/0x3d0 [ 41.837799][ T5547] folio_alloc_mpol_noprof+0x4c/0x248 [ 41.837808][ T5547] shmem_alloc_folio+0xa0/0x150 [ 41.837818][ T5547] shmem_alloc_and_add_folio+0x28c/0xb30 [ 41.837827][ T5547] shmem_get_folio_gfp+0x4c4/0x1108 [ 41.837836][ T5547] shmem_write_begin+0x160/0x448 [ 41.837846][ T5547] generic_perform_write+0x23c/0x7a4 [ 41.837856][ T5547] shmem_file_write_iter+0x10c/0x134 [ 41.837865][ T5547] vfs_write+0x51c/0xa0c [ 41.837873][ T5547] ksys_write+0x12c/0x228 [ 41.837880][ T5547] __arm64_sys_write+0x84/0x98 [ 41.837888][ T5547] invoke_syscall+0x98/0x244 [ 41.837895][ T5547] el0_svc_common+0xec/0x23c [ 41.837902][ T5547] do_el0_svc+0x4c/0x5c [ 41.837909][ T5547] el0_svc+0x60/0x1d8 [ 41.837918][ T5547] el0t_64_sync_handler+0x44/0x104 [ 41.837926][ T5547] el0t_64_sync+0x198/0x19c [ 41.925732][ T30] audit: type=1326 audit(41.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5558 comm="syz.1.168" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79728 code=0x7ffc0000 [ 41.925989][ T30] audit: type=1326 audit(41.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5558 comm="syz.1.168" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff91b79728 code=0x7ffc0000 [ 41.926006][ T30] audit: type=1326 audit(41.900:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5558 comm="syz.1.168" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79728 code=0x7ffc0000 [ 41.929744][ T4848] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 41.978416][ T5569] EXT4-fs: Ignoring removed orlov option [ 41.981805][ T5569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.981821][ T5569] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.984060][ T5569] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0002] [ 41.984105][ T5569] System zones: 0-5 [ 41.986079][ T5569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.987599][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.015429][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.057869][ T1200] ------------[ cut here ]------------ [ 42.057879][ T1200] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x180/0x1b0, CPU#1: kworker/u8:7/1200 [ 42.061551][ T1200] Modules linked in: [ 42.062492][ T1200] CPU: 1 UID: 0 PID: 1200 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT [ 42.064844][ T1200] Tainted: [L]=SOFTLOCKUP [ 42.065783][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.067971][ T1200] Workqueue: iou_exit io_ring_exit_work [ 42.069205][ T1200] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.070884][ T1200] pc : io_sq_thread_stop+0x180/0x1b0 [ 42.072049][ T1200] lr : io_sq_thread_stop+0x180/0x1b0 [ 42.073208][ T1200] sp : ffff8000949e78e0 [ 42.074107][ T1200] x29: ffff8000949e78e0 x28: ffff0000f4f24ca0 x27: ffff0000f4f24c98 [ 42.075887][ T1200] x26: ffff0000f4f24c98 x25: ffff0000d6bc44d8 x24: 1fffe0001ad78890 [ 42.077716][ T1200] x23: dfff800000000000 x22: 0000000000000001 x21: dfff800000000000 [ 42.079506][ T1200] x20: ffff0000f4f24d18 x19: ffff0000f4f24c00 x18: 1fffe000359d3e28 [ 42.081253][ T1200] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b2e0 [ 42.083205][ T1200] x14: 00000000001fbc1a x13: 0000000000000001 x12: 0000000000000000 [ 42.085131][ T1200] x11: 0000000000000000 x10: ffff60001e9e4982 x9 : 0000000000000000 [ 42.087039][ T1200] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 42.088940][ T1200] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800081942848 [ 42.090655][ T1200] x2 : 0000000000000001 x1 : ffff0000c84cd880 x0 : 0000000000000000 [ 42.092481][ T1200] Call trace: [ 42.093221][ T1200] io_sq_thread_stop+0x180/0x1b0 (P) [ 42.094419][ T1200] io_put_sq_data+0x90/0x120 [ 42.095479][ T1200] io_sq_thread_finish+0x1d4/0x224 [ 42.096683][ T1200] io_ring_ctx_free+0x3c/0x5e0 [ 42.097776][ T1200] io_ring_exit_work+0x4b0/0x53c [ 42.098927][ T1200] process_scheduled_works+0x91c/0x1250 [ 42.100209][ T1200] worker_thread+0x798/0xbd0 [ 42.101272][ T1200] kthread+0x304/0x3d4 [ 42.102222][ T1200] ret_from_fork+0x10/0x20 [ 42.103241][ T1200] irq event stamp: 234430 [ 42.104184][ T1200] hardirqs last enabled at (234429): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 42.106697][ T1200] hardirqs last disabled at (234430): [] el1_brk64+0x20/0x54 [ 42.108840][ T1200] softirqs last enabled at (234338): [] ieee80211_ibss_work+0x2d4/0xdf4 [ 42.111139][ T1200] softirqs last disabled at (234336): [] ieee80211_ibss_work+0xd4/0xdf4 [ 42.113455][ T1200] ---[ end trace 0000000000000000 ]--- [ 42.160462][ T9] usb 1-1: New USB device found: idVendor=06a5, idProduct=d800, bcdDevice=f6.70 [ 42.161510][ T9] usb 1-1: config 6 has an invalid interface number: 40 but max is 1 [ 42.161525][ T9] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 42.161533][ T9] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 42.161541][ T9] usb 1-1: config 6 has an invalid interface number: 84 but max is 1 [ 42.161549][ T9] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 42.161556][ T9] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 42.161563][ T9] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 42.161570][ T9] usb 1-1: config 6 has no interface number 0 [ 42.161584][ T9] usb 1-1: config 6 has no interface number 1 [ 42.161600][ T9] usb 1-1: config 6 interface 40 altsetting 180 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 42.161611][ T9] usb 1-1: config 6 interface 40 altsetting 180 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 42.161621][ T9] usb 1-1: config 6 interface 40 altsetting 180 has a duplicate endpoint with address 0x9, skipping [ 42.161632][ T9] usb 1-1: config 6 interface 84 altsetting 15 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 42.161642][ T9] usb 1-1: config 6 interface 84 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 42.161650][ T9] usb 1-1: config 6 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 42.161661][ T9] usb 1-1: config 6 interface 84 altsetting 15 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 42.161671][ T9] usb 1-1: config 6 interface 40 has no altsetting 0 [ 42.161678][ T9] usb 1-1: config 6 interface 84 has no altsetting 0 [ 42.163689][ T9] usb 1-1: string descriptor 0 read error: -22 [ 42.163741][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.169034][ T5539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.370981][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.371173][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.373048][ T9] usb 1-1: USB disconnect, device number 2 [ 42.578395][ T4719] Bluetooth: hci0: command tx timeout [ 44.407569][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 44.659193][ T4719] Bluetooth: hci0: command tx timeout [ 46.727966][ T4719] Bluetooth: hci0: command tx timeout