last executing test programs: 4m5.196745589s ago: executing program 2 (id=218): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3c4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x398, 0x2, [@TCA_BPF_ACT={0x394, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x0, 0x9, 0xffff0000}, {0xb, 0xf6, 0x5, 0xfffffffc}, {0x6092, 0x70, 0x6, 0x1ff}]}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x34, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}]}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x38, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m5.177767708s ago: executing program 2 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000340)="9bbf5461023b709072e176d4872d344f92037c08f229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a73900fe0424d515c71198c9147f9b35d9d4fce6151034b3cc75c8aca6952d0c41a46aaf645", 0x50}], 0x1, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r1, r1, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x36a1, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = epoll_create1(0x0) r9 = userfaultfd(0x80801) unshare(0x22020600) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r8, r9, &(0x7f0000000040)={0x2000}, 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x103, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="2f00000010000000040000", @ANYBLOB="b21465fcf16a"], 0x20) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x4}]}, 0x18}}, 0x1000) 4m5.11169794s ago: executing program 2 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000077100250428bd70507e00000007000000", @ANYRES32=r1, @ANYBLOB="0c0001800800010063000100100001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m5.109856411s ago: executing program 2 (id=224): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) read$FUSE(0xffffffffffffffff, &(0x7f00000044c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r5, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="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", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x78, 0x0, 0x1, {0x1ff, 0x4, 0x0, {0x2, 0x5, 0x4, 0x4, 0x2000000016f, 0x8, 0xa4ab, 0x49f4, 0x2f84d11b, 0x1000, 0x7, r3, r4, 0x73c, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000003680)={0x78, 0x0, 0x0, {0x6, 0x6, 0x0, {0x0, 0x5, 0x7fffffffffffffff, 0x9, 0xe, 0x9, 0xb, 0x2737e400, 0x5f98c2eb, 0x8000, 0x6, r3, r7, 0x3f84, 0x40}}}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) open_tree(r8, &(0x7f00000000c0)='./file0\x00', 0x800) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$set_timeout(0xf, r1, 0xc1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x509, &(0x7f0000001100)="$eJzs3c9vW0kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADYiD0Xt+Sd3UbrxpYkf15yM9vZk3jr/fafpm6nHtCWBkXY2I/YiYiIhPI2I2u57LjviofSSPe3xwb+Xw4N5KLlqtT/6RS9uTa9HxM4kr2XMWI+IH34n4ce7ZuI3dvY3larWyndXnm7Wt+cbu3o312vJaZa2yWS4vLS4tfHDz/fK59fWt2kRW+vKj3+9/46dJWjPZlc5+nKd21wvHcRLjEfG9iwg2BGNZfyaGnQhnko+I1yPi7fT+n42x9LcJALzMWq3ZaM121gGAl10+XQPL5UvZWsBM5POlUnsN742Yzlfrjeb12/WdzdX2WtlcFPK316uVhWytcC4KuaS+mJaf1Msn6jcj4rWI+PnkVFovrdSrq8P8hw8AjLArJ+b/f0+25/9uioNODgC4OCZ2ABg9Z5//8+eaBwAwOF7/A8DoMf8DwOhpz/9Tw04DABggr/8BYPSY/wFgpHz/44+To3WYff/16p3dnY36nRurlcZGqbazUlqpb2+V1ur1tfQ7e2qnPV+1Xt9afC927s59c6vRnG/s7t2q1Xc2m7fS7/W+VSmkj9ofQM8AgF5ee+vhn3LJjPzhVHpEx14OhaFmBly0fj7AuzeAPIDBGxt2AsDQ2O0LRtdnfo0/efYfBS6nLlv0PqXY7QNCrVardXEpARfs2hes/8Oo6lj/97+AYcRY/4fRZf0fRlerlet3z//o94EAwOVmjR/o8f7/69n5N9mbAz9aPfmIBxeZFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxuR/v/lrK9wGciny+VIl6JiLko5G6vVysLEfFqRPxxsjCZ1BeHnDMA8KLyf81l+39dm3135qmmN68cFyci4ie//OQXd5ebze0/REzk/jl5dL35ILteHnz2AMDpjubp9NzxQv7xwb2Vo2OQ+fzt2xFRbMc/PJiIw+P44zGenotRiIjpf+WyeluuY+3iRezfj4jPd+t/LmbSNZD2zqcn4yexXxlo/PxT8fNpW/uc/Fl87hxygVHzMBl/Pup2/+Xjanrufv8X0xHqxWXjX/JUK4fpGPgk/tH4N9Zj/Lvab4z3fvfddmnq2bb7EV8cjziKfdgx/hzFz/WI/26f8f/8pTff7tXW+lXEtegevzPWfLO2Nd/Y3buxXlteq6xVNsvlpcWlhQ9uvl/+b7pGPd97Nvj7h9df7dWW9H+6R/ziKf3/ap/9//X/Pv3hV54T/+vvdIufjzeeEz+ZE7/WZ/zl6d8We7Ul8Vd79P+03//1PuM/+sveM9uGAwDD09jd21iuVivbCgqXv5D8lb0EaXQtfGtQsSaie9PP3mnf0yeaWq0zxeo1YpzHqhtwGRzf9BHxn2EnAwAAAAAAAAAAAAAAdDWITywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vP4fAAD//3T20Hg=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f0000000200)="18857440950877d76898717a2e049c4bd2b317778a8252acdc3bf26305984fc3b10c1d91cdef0dc5b0e218d59eca727def4f7df5c0d1185f8cdfcce300bdc4d636f2895a4c28945443854334b17e03bbd03a2bec4ec810394f394345994a9e490588e1b2dc3aeedd3449c76e0990ecac0f7b796cfdb0336a489056285357a58ba3643accb2d7d19043bd11a9dd0cf0174d7611d7199ec76dbe95721b8b1a2af3ff98a8e6d966298b11e2ead5d0bbd4469ea8c420e2b9206ba64295b4c1ada2", &(0x7f00000002c0)=""/227, &(0x7f00000003c0)="aa9e9e5b465d0d27058e74378d73029d867b6cf6ef47e8664cfe79bd9a73ef1b810bf445ed56732c1ed3256cbebfd77439d04025f36966946ab0ad0813c461b7", &(0x7f0000000400)="4f8171b630840f484226bb0336e04454d07977140528b94f5b47253e139ba114c37b4eb99bdccf855999887a63ffd63ea6f615693260c2e4b0c12b73ee434708cc343a4d3321138eb8aa45d5cb74f88ba8", 0xc2, r10}, 0x38) write$cgroup_int(r10, &(0x7f00000000c0)=0x8, 0x12) pwrite64(r9, &(0x7f0000000140)='\"', 0x1, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x14, &(0x7f0000003780)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4m4.966545377s ago: executing program 2 (id=229): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0xed, 0x2}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) 4m2.663051102s ago: executing program 2 (id=303): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$mtd(&(0x7f0000000840), 0xa, 0x2000) close(r1) capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 4m2.600323972s ago: executing program 32 (id=303): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$mtd(&(0x7f0000000840), 0xa, 0x2000) close(r1) capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 3m23.343318265s ago: executing program 0 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000060033f03003000640000ac11"], 0x34) 3m23.273243301s ago: executing program 0 (id=847): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)="c4", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18, 0x24048001}}], 0x1, 0x44080) accept4(r0, 0x0, 0x0, 0x80800) 3m23.243882634s ago: executing program 0 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}]}) 3m23.243430334s ago: executing program 0 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, 0x0) 3m23.131875226s ago: executing program 0 (id=854): socketpair$unix(0x1, 0x734de575b0fcc366, 0x0, 0x0) 3m22.971330976s ago: executing program 0 (id=860): semop(0x0, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 3m22.949966266s ago: executing program 33 (id=860): semop(0x0, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 1m56.362423531s ago: executing program 5 (id=3797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000060033f03003000640000ac11"], 0x34) 1m56.267722814s ago: executing program 5 (id=3798): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1m56.228812705s ago: executing program 5 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="04000000000000000000000038010000380100"/48) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r0, 0xc138fd04, &(0x7f0000000700)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") 1m56.163248729s ago: executing program 5 (id=3804): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042088be"], 0x76) 1m55.899584254s ago: executing program 5 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000004c0)={0x11, 0x300, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r2, &(0x7f0000000500)="08021100950108021100ff", 0xb) 1m55.769437822s ago: executing program 5 (id=3818): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)='\x00'/16) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) write$tun(r1, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0xfffe, 0x3, 0x9, 0x9}, @ipv6=@generic={0x7, 0x6, "9fd60f", 0x96, 0x2b, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], "780464b426696554ae3f702b079ba0cb2a3d656a7e098c52ffa59553f58ceae1af76da2712a959278b246fad1383882d510fdb742de0c93da8925f0d8d5a2e63f1c593d8e94707a77d1ef3bf4d625c971b94ad168ab3161b2ce1c61ddb6bd7cb8603b54c8e8716817f4e7f8be0798f7cfb798e985b54b88193bb337984b2c828ce25d6e8c3a50d4f132366be8d8a93961c3e1ab5005c"}}}, 0xc8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m54.999284123s ago: executing program 6 (id=3844): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r0, 0xc138fd04, &(0x7f0000000700)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") 1m54.962944198s ago: executing program 6 (id=3846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m54.893932295s ago: executing program 6 (id=3848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) sendmsg(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="ec", 0x1}], 0x1}, 0x8084) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.043285984s ago: executing program 6 (id=3877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x0, 0x8}, {0xd, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 1m53.986449924s ago: executing program 3 (id=3878): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1m53.931364397s ago: executing program 3 (id=3880): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1m53.930984425s ago: executing program 6 (id=3881): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042088be"], 0x76) 1m53.859380469s ago: executing program 3 (id=3883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m53.85903241s ago: executing program 3 (id=3884): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70617468") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r0, 0xc138fd04, &(0x7f0000000700)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") 1m53.795815218s ago: executing program 3 (id=3887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) setsockopt(r2, 0x2f8b62e0, 0x8000, &(0x7f00000002c0)="36518447f363ac3f580a4aa6cd82b86d537748cba3ffb9680ca44eb099ada41e7a1829e6c5959d369c1a56", 0x2b) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2e, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0xa0302, 0x65) sendfile(r3, r3, 0x0, 0x2) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.678103187s ago: executing program 3 (id=3889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) sendmsg(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="ec", 0x1}], 0x1}, 0x8084) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.377736643s ago: executing program 4 (id=3900): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) socket$alg(0x26, 0x5, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.280852012s ago: executing program 4 (id=3901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1m53.277678106s ago: executing program 1 (id=3902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) readv(r0, 0x0, 0x0) 1m53.199434865s ago: executing program 1 (id=3903): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1m53.191702818s ago: executing program 1 (id=3904): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r3, 0x3e}, 0x80, 0x0}, 0x0) 1m53.17388352s ago: executing program 4 (id=3905): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0x1, @remote}}, 0x1e) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 1m53.116546989s ago: executing program 1 (id=3906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m53.114676068s ago: executing program 4 (id=3907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 1m53.088954586s ago: executing program 1 (id=3908): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0x1, 0x5a3, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m53.063466261s ago: executing program 4 (id=3909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r2, 0x811, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 1m52.991617087s ago: executing program 6 (id=3910): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) 1m52.99080743s ago: executing program 4 (id=3911): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f00000004c0)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') 1m52.939429861s ago: executing program 1 (id=3912): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) socket$alg(0x26, 0x5, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 34 (id=3910): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) kernel console output (not intermixed with test programs): write+0x84/0x98 [ 120.392800][T11571] invoke_syscall+0x98/0x244 [ 120.392812][T11571] el0_svc_common+0xec/0x23c [ 120.392824][T11571] do_el0_svc+0x4c/0x5c [ 120.392835][T11571] el0_svc+0x60/0x1d8 [ 120.392847][T11571] el0t_64_sync_handler+0x44/0x104 [ 120.392858][T11571] el0t_64_sync+0x198/0x19c [ 120.732989][T11616] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 120.748073][T11618] loop5: detected capacity change from 0 to 2048 [ 120.861086][T11618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.901226][ T6027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.937207][T11668] FAULT_INJECTION: forcing a failure. [ 120.937207][T11668] name failslab, interval 1, probability 0, space 0, times 0 [ 120.937224][T11668] CPU: 1 UID: 0 PID: 11668 Comm: syz.5.2185 Tainted: G L syzkaller #0 PREEMPT [ 120.937237][T11668] Tainted: [L]=SOFTLOCKUP [ 120.937241][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 120.937254][T11668] Call trace: [ 120.937257][T11668] show_stack+0x2c/0x3c (C) [ 120.937277][T11668] __dump_stack+0x30/0x40 [ 120.937290][T11668] dump_stack_lvl+0xd8/0x12c [ 120.937301][T11668] dump_stack+0x1c/0x28 [ 120.937313][T11668] should_fail_ex+0x418/0x58c [ 120.937326][T11668] should_failslab+0xc4/0x120 [ 120.937339][T11668] __kmalloc_noprof+0x108/0x6c8 [ 120.937348][T11668] kernfs_fop_write_iter+0x144/0x3b8 [ 120.937360][T11668] vfs_write+0x51c/0xa0c [ 120.937373][T11668] ksys_write+0x12c/0x228 [ 120.937385][T11668] __arm64_sys_write+0x84/0x98 [ 120.937398][T11668] invoke_syscall+0x98/0x244 [ 120.937410][T11668] el0_svc_common+0xec/0x23c [ 120.937422][T11668] do_el0_svc+0x4c/0x5c [ 120.937433][T11668] el0_svc+0x60/0x1d8 [ 120.937445][T11668] el0t_64_sync_handler+0x44/0x104 [ 120.937456][T11668] el0t_64_sync+0x198/0x19c [ 121.127134][T11711] FAULT_INJECTION: forcing a failure. [ 121.127134][T11711] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.127151][T11711] CPU: 0 UID: 0 PID: 11711 Comm: syz.4.2196 Tainted: G L syzkaller #0 PREEMPT [ 121.127164][T11711] Tainted: [L]=SOFTLOCKUP [ 121.127167][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 121.127180][T11711] Call trace: [ 121.127183][T11711] show_stack+0x2c/0x3c (C) [ 121.127203][T11711] __dump_stack+0x30/0x40 [ 121.127216][T11711] dump_stack_lvl+0xd8/0x12c [ 121.127227][T11711] dump_stack+0x1c/0x28 [ 121.127239][T11711] should_fail_ex+0x418/0x58c [ 121.127252][T11711] should_fail+0x14/0x24 [ 121.127263][T11711] get_futex_key+0x1ec/0x12b0 [ 121.127275][T11711] futex_wait_setup+0x58/0x674 [ 121.127286][T11711] __futex_wait+0x108/0x25c [ 121.127297][T11711] futex_wait+0x108/0x2c0 [ 121.127308][T11711] do_futex+0x320/0x378 [ 121.127318][T11711] __arm64_sys_futex+0x2e4/0x418 [ 121.127329][T11711] invoke_syscall+0x98/0x244 [ 121.127341][T11711] el0_svc_common+0xec/0x23c [ 121.127353][T11711] do_el0_svc+0x4c/0x5c [ 121.127364][T11711] el0_svc+0x60/0x1d8 [ 121.127376][T11711] el0t_64_sync_handler+0x44/0x104 [ 121.127387][T11711] el0t_64_sync+0x198/0x19c [ 121.192869][T11711] FAULT_INJECTION: forcing a failure. [ 121.192869][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 121.192882][T11711] CPU: 0 UID: 0 PID: 11711 Comm: syz.4.2196 Tainted: G L syzkaller #0 PREEMPT [ 121.192893][T11711] Tainted: [L]=SOFTLOCKUP [ 121.192896][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 121.192906][T11711] Call trace: [ 121.192909][T11711] show_stack+0x2c/0x3c (C) [ 121.192921][T11711] __dump_stack+0x30/0x40 [ 121.192931][T11711] dump_stack_lvl+0xd8/0x12c [ 121.192941][T11711] dump_stack+0x1c/0x28 [ 121.192950][T11711] should_fail_ex+0x418/0x58c [ 121.192961][T11711] should_failslab+0xc4/0x120 [ 121.192972][T11711] __kmalloc_noprof+0x108/0x6c8 [ 121.192984][T11711] __register_sysctl_table+0x898/0xb4c [ 121.192996][T11711] register_net_sysctl_sz+0x29c/0x38c [ 121.193007][T11711] __devinet_sysctl_register+0x19c/0x274 [ 121.193016][T11711] devinet_sysctl_register+0x164/0x1c0 [ 121.193024][T11711] inetdev_init+0x250/0x49c [ 121.193031][T11711] inetdev_event+0x248/0x1184 [ 121.193039][T11711] notifier_call_chain+0x1a4/0x4cc [ 121.193049][T11711] raw_notifier_call_chain+0x3c/0x50 [ 121.193059][T11711] call_netdevice_notifiers_info+0xb8/0x120 [ 121.193070][T11711] register_netdevice+0x1018/0x14c0 [ 121.193080][T11711] __ip_tunnel_create+0x34c/0x4b0 [ 121.193091][T11711] ip_tunnel_init_net+0x238/0x49c [ 121.193104][T11711] erspan_init_net+0x38/0x48 [ 121.193112][T11711] ops_init+0x2cc/0x528 [ 121.193121][T11711] setup_net+0x118/0x2fc [ 121.193130][T11711] copy_net_ns+0x454/0x698 [ 121.193138][T11711] create_new_namespaces+0x304/0x50c [ 121.193147][T11711] unshare_nsproxy_namespaces+0x120/0x170 [ 121.193156][T11711] ksys_unshare+0x438/0x6cc [ 121.193164][T11711] __arm64_sys_unshare+0x40/0x54 [ 121.193172][T11711] invoke_syscall+0x98/0x244 [ 121.193182][T11711] el0_svc_common+0xec/0x23c [ 121.193192][T11711] do_el0_svc+0x4c/0x5c [ 121.193201][T11711] el0_svc+0x60/0x1d8 [ 121.193211][T11711] el0t_64_sync_handler+0x44/0x104 [ 121.193220][T11711] el0t_64_sync+0x198/0x19c [ 121.193918][T11711] sysctl could not get directory: /net/ipv4/conf/erspan0 -12 [ 121.288189][T11580] nvme nvme1: failed to connect socket: -512 [ 121.301527][T11711] FAULT_INJECTION: forcing a failure. [ 121.301527][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 121.301540][T11711] CPU: 1 UID: 0 PID: 11711 Comm: syz.4.2196 Tainted: G L syzkaller #0 PREEMPT [ 121.301551][T11711] Tainted: [L]=SOFTLOCKUP [ 121.301553][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 121.301564][T11711] Call trace: [ 121.301567][T11711] show_stack+0x2c/0x3c (C) [ 121.301583][T11711] __dump_stack+0x30/0x40 [ 121.301596][T11711] dump_stack_lvl+0xd8/0x12c [ 121.301606][T11711] dump_stack+0x1c/0x28 [ 121.301615][T11711] should_fail_ex+0x418/0x58c [ 121.301629][T11711] should_failslab+0xc4/0x120 [ 121.301641][T11711] __kmalloc_noprof+0x108/0x6c8 [ 121.301649][T11711] kobject_get_path+0xbc/0x2a4 [ 121.301660][T11711] kobject_uevent_env+0x264/0x944 [ 121.301668][T11711] kobject_uevent+0x2c/0x3c [ 121.301675][T11711] __kobject_del+0xd4/0x1c8 [ 121.301685][T11711] kobject_put+0x1f4/0x4b8 [ 121.301695][T11711] net_rx_queue_update_kobjects+0x5ac/0x66c [ 121.301706][T11711] netdev_unregister_kobject+0xe8/0x39c [ 121.301716][T11711] unregister_netdevice_many_notify+0x123c/0x1760 [ 121.301728][T11711] default_device_exit_batch+0x42c/0x4ac [ 121.301736][T11711] ops_undo_list+0x434/0x81c [ 121.301746][T11711] setup_net+0x2a0/0x2fc [ 121.301755][T11711] copy_net_ns+0x454/0x698 [ 121.301763][T11711] create_new_namespaces+0x304/0x50c [ 121.301773][T11711] unshare_nsproxy_namespaces+0x120/0x170 [ 121.301782][T11711] ksys_unshare+0x438/0x6cc [ 121.301790][T11711] __arm64_sys_unshare+0x40/0x54 [ 121.301798][T11711] invoke_syscall+0x98/0x244 [ 121.301809][T11711] el0_svc_common+0xec/0x23c [ 121.301819][T11711] do_el0_svc+0x4c/0x5c [ 121.301828][T11711] el0_svc+0x60/0x1d8 [ 121.301838][T11711] el0t_64_sync_handler+0x44/0x104 [ 121.301848][T11711] el0t_64_sync+0x198/0x19c [ 121.716063][ T140] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.716114][ T140] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.716138][ T140] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.716154][ T140] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.734807][T11769] __nla_validate_parse: 4 callbacks suppressed [ 121.734818][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 121.811007][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.811955][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.989029][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2222'. [ 122.004014][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2223'. [ 122.021465][T11815] net_ratelimit: 358 callbacks suppressed [ 122.027669][T11814] syzkaller0: entered promiscuous mode [ 122.027680][T11814] syzkaller0: entered allmulticast mode [ 122.101176][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2232'. [ 122.249114][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2237'. [ 122.389730][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 122.429183][ T30] audit: type=1326 audit(123.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.3.2248" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b78868 code=0x0 [ 122.583652][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 122.973664][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 122.973675][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2266'. [ 122.992418][T11961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.044197][T11961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.060985][T11973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2270'. [ 123.075466][T11961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.107056][T11961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.177768][ T1347] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.177794][ T1347] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.177811][ T1347] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.195958][ T1347] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.762927][T11957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.763085][T11957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.763196][T11957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.763305][T11957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.841607][T12029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.011335][T12056] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.813111][T12049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.813327][T12049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.813442][T12049] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.813617][T12049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.938104][T12085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.004322][T12085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.021131][T12101] loop2: detected capacity change from 0 to 7 [ 125.021910][T12101] Dev loop2: unable to read RDB block 7 [ 125.021926][T12101] loop2: AHDI p1 p2 p3 [ 125.021936][T12101] loop2: partition table partially beyond EOD, truncated [ 125.022116][T12101] loop2: p1 start 1601398130 is beyond EOD, truncated [ 125.022128][T12101] loop2: p2 start 1702059890 is beyond EOD, truncated [ 125.107103][T12085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.154159][T12085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.179354][T12112] netlink: 'syz.5.2323': attribute type 4 has an invalid length. [ 125.246810][ T3355] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.247016][ T3355] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.256355][T11630] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.256380][T11630] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.268957][T12121] FAULT_INJECTION: forcing a failure. [ 125.268957][T12121] name failslab, interval 1, probability 5, space 0, times 0 [ 125.268976][T12121] CPU: 0 UID: 0 PID: 12121 Comm: syz.5.2326 Tainted: G L syzkaller #0 PREEMPT [ 125.268996][T12121] Tainted: [L]=SOFTLOCKUP [ 125.269001][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 125.269017][T12121] Call trace: [ 125.269021][T12121] show_stack+0x2c/0x3c (C) [ 125.269040][T12121] __dump_stack+0x30/0x40 [ 125.269053][T12121] dump_stack_lvl+0xd8/0x12c [ 125.269065][T12121] dump_stack+0x1c/0x28 [ 125.269076][T12121] should_fail_ex+0x418/0x58c [ 125.269089][T12121] should_failslab+0xc4/0x120 [ 125.269102][T12121] __kmalloc_noprof+0x108/0x6c8 [ 125.269111][T12121] security_sb_alloc+0x54/0x304 [ 125.269120][T12121] sget_fc+0x7f4/0x1520 [ 125.269130][T12121] kernfs_get_tree+0x1b0/0x7dc [ 125.269140][T12121] vfs_get_tree+0x90/0x28c [ 125.269150][T12121] fc_mount+0x24/0xac [ 125.269160][T12121] do_new_mount+0x2a4/0x538 [ 125.269171][T12121] path_mount+0x5f0/0xa88 [ 125.269181][T12121] do_mount+0xe8/0x148 [ 125.269191][T12121] __arm64_sys_mount+0x33c/0x388 [ 125.269202][T12121] invoke_syscall+0x98/0x244 [ 125.269214][T12121] el0_svc_common+0xec/0x23c [ 125.269226][T12121] do_el0_svc+0x4c/0x5c [ 125.269238][T12121] el0_svc+0x60/0x1d8 [ 125.269249][T12121] el0t_64_sync_handler+0x44/0x104 [ 125.269261][T12121] el0t_64_sync+0x198/0x19c [ 125.779483][T12131] loop3: detected capacity change from 0 to 2048 [ 125.780033][T12131] EXT4-fs: Ignoring removed nobh option [ 125.806936][T12131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.927184][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927215][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.928298][T12106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.928458][T12106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.928765][T12106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.928880][T12106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.935177][T12129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.935473][T12129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.946241][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.946485][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.001344][T12149] random: crng reseeded on system resumption [ 126.009331][ T30] audit: type=1326 audit(126.985:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12147 comm="syz.6.2335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x0 [ 126.041827][T12153] FAULT_INJECTION: forcing a failure. [ 126.041827][T12153] name failslab, interval 1, probability 5, space 0, times 0 [ 126.041847][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.4.2337 Tainted: G L syzkaller #0 PREEMPT [ 126.041861][T12153] Tainted: [L]=SOFTLOCKUP [ 126.041864][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 126.041877][T12153] Call trace: [ 126.041880][T12153] show_stack+0x2c/0x3c (C) [ 126.041898][T12153] __dump_stack+0x30/0x40 [ 126.041911][T12153] dump_stack_lvl+0xd8/0x12c [ 126.041922][T12153] dump_stack+0x1c/0x28 [ 126.041934][T12153] should_fail_ex+0x418/0x58c [ 126.041947][T12153] should_failslab+0xc4/0x120 [ 126.041960][T12153] __kmalloc_cache_noprof+0x94/0x5fc [ 126.041969][T12153] shrinker_alloc+0x68/0x9b0 [ 126.041987][T12153] sget_fc+0xbd0/0x1520 [ 126.041996][T12153] kernfs_get_tree+0x1b0/0x7dc [ 126.042009][T12153] vfs_get_tree+0x90/0x28c [ 126.042019][T12153] fc_mount+0x24/0xac [ 126.042030][T12153] do_new_mount+0x2a4/0x538 [ 126.042041][T12153] path_mount+0x5f0/0xa88 [ 126.042052][T12153] do_mount+0xe8/0x148 [ 126.042062][T12153] __arm64_sys_mount+0x33c/0x388 [ 126.042073][T12153] invoke_syscall+0x98/0x244 [ 126.042085][T12153] el0_svc_common+0xec/0x23c [ 126.042097][T12153] do_el0_svc+0x4c/0x5c [ 126.042108][T12153] el0_svc+0x60/0x1d8 [ 126.042120][T12153] el0t_64_sync_handler+0x44/0x104 [ 126.042131][T12153] el0t_64_sync+0x198/0x19c [ 126.105850][ T3355] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.105877][ T3355] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.105892][ T3355] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.105906][ T3355] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.322892][T12173] syzkaller0: entered promiscuous mode [ 126.322905][T12173] syzkaller0: entered allmulticast mode [ 126.339656][T12176] FAULT_INJECTION: forcing a failure. [ 126.339656][T12176] name failslab, interval 1, probability 5, space 0, times 0 [ 126.339674][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.1.2348 Tainted: G L syzkaller #0 PREEMPT [ 126.339687][T12176] Tainted: [L]=SOFTLOCKUP [ 126.339691][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 126.339705][T12176] Call trace: [ 126.339708][T12176] show_stack+0x2c/0x3c (C) [ 126.339726][T12176] __dump_stack+0x30/0x40 [ 126.339740][T12176] dump_stack_lvl+0xd8/0x12c [ 126.339752][T12176] dump_stack+0x1c/0x28 [ 126.339763][T12176] should_fail_ex+0x418/0x58c [ 126.339778][T12176] should_failslab+0xc4/0x120 [ 126.339791][T12176] __kmalloc_cache_noprof+0x94/0x5fc [ 126.339801][T12176] sysfs_init_fs_context+0xb0/0x5fc [ 126.339815][T12176] alloc_fs_context+0x7d8/0xba4 [ 126.339824][T12176] fs_context_for_mount+0x34/0x44 [ 126.339833][T12176] do_new_mount+0x158/0x538 [ 126.339845][T12176] path_mount+0x5f0/0xa88 [ 126.339855][T12176] do_mount+0xe8/0x148 [ 126.339866][T12176] __arm64_sys_mount+0x33c/0x388 [ 126.339877][T12176] invoke_syscall+0x98/0x244 [ 126.339889][T12176] el0_svc_common+0xec/0x23c [ 126.339901][T12176] do_el0_svc+0x4c/0x5c [ 126.339912][T12176] el0_svc+0x60/0x1d8 [ 126.339924][T12176] el0t_64_sync_handler+0x44/0x104 [ 126.339935][T12176] el0t_64_sync+0x198/0x19c [ 126.424426][T12187] FAULT_INJECTION: forcing a failure. [ 126.424426][T12187] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.424449][T12187] CPU: 0 UID: 0 PID: 12187 Comm: syz.4.2353 Tainted: G L syzkaller #0 PREEMPT [ 126.424467][T12187] Tainted: [L]=SOFTLOCKUP [ 126.424471][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 126.424485][T12187] Call trace: [ 126.424489][T12187] show_stack+0x2c/0x3c (C) [ 126.424509][T12187] __dump_stack+0x30/0x40 [ 126.424522][T12187] dump_stack_lvl+0xd8/0x12c [ 126.424534][T12187] dump_stack+0x1c/0x28 [ 126.424546][T12187] should_fail_ex+0x418/0x58c [ 126.424559][T12187] should_fail+0x14/0x24 [ 126.424570][T12187] get_futex_key+0x1ec/0x12b0 [ 126.424581][T12187] futex_wait_setup+0x58/0x674 [ 126.424593][T12187] __futex_wait+0x108/0x25c [ 126.424604][T12187] futex_wait+0x108/0x2c0 [ 126.424615][T12187] do_futex+0x320/0x378 [ 126.424625][T12187] __arm64_sys_futex+0x2e4/0x418 [ 126.424636][T12187] invoke_syscall+0x98/0x244 [ 126.424648][T12187] el0_svc_common+0xec/0x23c [ 126.424659][T12187] do_el0_svc+0x4c/0x5c [ 126.424670][T12187] el0_svc+0x60/0x1d8 [ 126.424682][T12187] el0t_64_sync_handler+0x44/0x104 [ 126.424693][T12187] el0t_64_sync+0x198/0x19c [ 126.483476][ T5348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.714977][T12212] syzkaller0: entered promiscuous mode [ 126.715004][T12212] syzkaller0: entered allmulticast mode [ 126.898132][T12242] __nla_validate_parse: 6 callbacks suppressed [ 126.898143][T12242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2378'. [ 127.100320][T12272] net_ratelimit: 60 callbacks suppressed [ 127.207127][ T4714] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.396909][T12306] fuse: Bad value for 'fd' [ 127.721450][T12329] fuse: Bad value for 'fd' [ 127.800317][T12337] input: syz0 as /devices/virtual/input/input9 [ 127.935153][T12357] fuse: Bad value for 'fd' [ 128.005982][ T4714] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.006015][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.027498][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 128.027509][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 128.027518][T12373] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 128.045247][T12376] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 128.056811][T12376] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.132234][T12394] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2447'. [ 128.135058][T12382] FAULT_INJECTION: forcing a failure. [ 128.135058][T12382] name failslab, interval 1, probability 5, space 0, times 0 [ 128.135082][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.1.2445 Tainted: G L syzkaller #0 PREEMPT [ 128.135101][T12382] Tainted: [L]=SOFTLOCKUP [ 128.135107][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 128.135122][T12382] Call trace: [ 128.135125][T12382] show_stack+0x2c/0x3c (C) [ 128.135144][T12382] __dump_stack+0x30/0x40 [ 128.135156][T12382] dump_stack_lvl+0xd8/0x12c [ 128.135168][T12382] dump_stack+0x1c/0x28 [ 128.135179][T12382] should_fail_ex+0x418/0x58c [ 128.135192][T12382] should_failslab+0xc4/0x120 [ 128.135205][T12382] __kmalloc_node_noprof+0x10c/0x6e4 [ 128.135214][T12382] crypto_create_tfm_node+0x94/0x304 [ 128.135226][T12382] crypto_alloc_tfm_node+0x100/0x22c [ 128.135238][T12382] crypto_alloc_aead+0x40/0x54 [ 128.135246][T12382] esp6_init_state+0x4dc/0xebc [ 128.135256][T12382] __xfrm_init_state+0x730/0xed0 [ 128.135266][T12382] xfrm_init_state+0x28/0xc0 [ 128.135274][T12382] pfkey_add+0x14c8/0x22b4 [ 128.135285][T12382] pfkey_sendmsg+0x9f4/0xdf8 [ 128.135296][T12382] __sock_sendmsg+0xc8/0x17c [ 128.135306][T12382] ____sys_sendmsg+0x3d0/0x6c8 [ 128.135316][T12382] ___sys_sendmsg+0x198/0x224 [ 128.135327][T12382] __sys_sendmsg+0x158/0x204 [ 128.135337][T12382] __arm64_sys_sendmsg+0x88/0x9c [ 128.135348][T12382] invoke_syscall+0x98/0x244 [ 128.135360][T12382] el0_svc_common+0xec/0x23c [ 128.135371][T12382] do_el0_svc+0x4c/0x5c [ 128.135383][T12382] el0_svc+0x60/0x1d8 [ 128.135394][T12382] el0t_64_sync_handler+0x44/0x104 [ 128.135405][T12382] el0t_64_sync+0x198/0x19c [ 128.169513][T12397] fuse: Bad value for 'fd' [ 128.197387][T12401] FAULT_INJECTION: forcing a failure. [ 128.197387][T12401] name failslab, interval 1, probability 5, space 0, times 0 [ 128.197404][T12401] CPU: 1 UID: 0 PID: 12401 Comm: syz.4.2450 Tainted: G L syzkaller #0 PREEMPT [ 128.197416][T12401] Tainted: [L]=SOFTLOCKUP [ 128.197420][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 128.197433][T12401] Call trace: [ 128.197436][T12401] show_stack+0x2c/0x3c (C) [ 128.197455][T12401] __dump_stack+0x30/0x40 [ 128.197468][T12401] dump_stack_lvl+0xd8/0x12c [ 128.197480][T12401] dump_stack+0x1c/0x28 [ 128.197491][T12401] should_fail_ex+0x418/0x58c [ 128.197504][T12401] should_failslab+0xc4/0x120 [ 128.197517][T12401] kmem_cache_alloc_noprof+0x94/0x5d4 [ 128.197526][T12401] vm_area_alloc+0x2c/0x144 [ 128.197537][T12401] mmap_region+0xdf4/0x1c28 [ 128.197549][T12401] do_mmap+0xb88/0x1104 [ 128.197558][T12401] vm_mmap_pgoff+0x298/0x46c [ 128.197567][T12401] ksys_mmap_pgoff+0xd0/0x5b4 [ 128.197576][T12401] __arm64_sys_mmap+0x110/0x12c [ 128.197588][T12401] invoke_syscall+0x98/0x244 [ 128.197600][T12401] el0_svc_common+0xec/0x23c [ 128.197612][T12401] do_el0_svc+0x4c/0x5c [ 128.197623][T12401] el0_svc+0x60/0x1d8 [ 128.197636][T12401] el0t_64_sync_handler+0x44/0x104 [ 128.197647][T12401] el0t_64_sync+0x198/0x19c [ 128.255478][T12410] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 128.278688][T12410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.341096][T12426] fuse: Bad value for 'fd' [ 128.498234][T12457] fuse: Bad value for 'fd' [ 128.551238][T12464] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2479'. [ 128.635240][T12470] loop6: detected capacity change from 0 to 1024 [ 128.650533][T12470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.672681][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.870128][T12490] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 128.887706][T12490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.121581][T12510] FAULT_INJECTION: forcing a failure. [ 129.121581][T12510] name fail_futex, interval 1, probability 0, space 0, times 0 [ 129.121599][T12510] CPU: 1 UID: 0 PID: 12510 Comm: syz.3.2498 Tainted: G L syzkaller #0 PREEMPT [ 129.121613][T12510] Tainted: [L]=SOFTLOCKUP [ 129.121617][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 129.121630][T12510] Call trace: [ 129.121633][T12510] show_stack+0x2c/0x3c (C) [ 129.121651][T12510] __dump_stack+0x30/0x40 [ 129.121663][T12510] dump_stack_lvl+0xd8/0x12c [ 129.121675][T12510] dump_stack+0x1c/0x28 [ 129.121686][T12510] should_fail_ex+0x418/0x58c [ 129.121699][T12510] should_fail+0x14/0x24 [ 129.121711][T12510] get_futex_key+0x1ec/0x12b0 [ 129.121721][T12510] futex_wait_setup+0x58/0x674 [ 129.121733][T12510] __futex_wait+0x108/0x25c [ 129.121744][T12510] futex_wait+0x108/0x2c0 [ 129.121755][T12510] do_futex+0x320/0x378 [ 129.121766][T12510] __arm64_sys_futex+0x2e4/0x418 [ 129.121777][T12510] invoke_syscall+0x98/0x244 [ 129.121789][T12510] el0_svc_common+0xec/0x23c [ 129.121800][T12510] do_el0_svc+0x4c/0x5c [ 129.121812][T12510] el0_svc+0x60/0x1d8 [ 129.121823][T12510] el0t_64_sync_handler+0x44/0x104 [ 129.121834][T12510] el0t_64_sync+0x198/0x19c [ 129.288585][T12515] loop3: detected capacity change from 0 to 2048 [ 129.317498][T12515] loop3: p1 < > p4 [ 129.319326][T12515] loop3: p4 size 8388608 extends beyond EOD, truncated [ 129.350275][T12519] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 129.382438][T12519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 129.474150][T12534] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 129.476416][T12534] netlink: 'syz.3.2509': attribute type 10 has an invalid length. [ 129.480708][T12534] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 129.490408][T12534] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 129.541886][T12544] netlink: 'syz.6.2514': attribute type 1 has an invalid length. [ 129.558517][T12544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.596956][T12553] loop1: detected capacity change from 0 to 512 [ 129.599336][T12553] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.605281][T12553] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.605455][T12553] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.607800][T12553] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 129.607819][T12553] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 129.617107][T12553] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #16: comm syz.1.2517: casefold flag without casefold feature [ 129.617127][T12553] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.622223][T12553] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2517: couldn't read orphan inode 16 (err -117) [ 129.622243][T12553] loop1: lost filesystem error report for type 5 error -117 [ 129.625742][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 129.625760][ C0] EXT4-fs (loop1): initial error at time 130: ext4_orphan_get:1403: inode 16 [ 129.625777][ C0] EXT4-fs (loop1): last error at time 130: ext4_orphan_get:1408 [ 129.630619][T12553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.645100][ T5359] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.657292][T12560] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 129.657678][T12560] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 129.657854][T12560] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 129.658174][T12560] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 129.739992][T12572] loop1: detected capacity change from 0 to 128 [ 129.791823][T12574] syzkaller0: entered promiscuous mode [ 129.791834][T12574] syzkaller0: entered allmulticast mode [ 129.891229][T12586] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 129.891497][T12586] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 129.891670][T12586] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 129.891954][T12586] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 130.034482][T12614] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 130.035422][T12614] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 130.035608][T12614] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 130.038251][T12614] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 130.064353][T12616] syzkaller0: entered promiscuous mode [ 130.064363][T12616] syzkaller0: entered allmulticast mode [ 130.090462][T12624] loop5: detected capacity change from 0 to 256 [ 130.174518][T12635] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 130.224319][T12643] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 130.224624][T12643] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 130.224908][T12643] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 130.246927][T12645] netlink: 'syz.5.2562': attribute type 1 has an invalid length. [ 130.260833][T12645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.375248][T12664] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 130.375531][T12664] netlink: 'syz.5.2570': attribute type 10 has an invalid length. [ 130.383431][T12664] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 130.513514][T12676] loop5: detected capacity change from 0 to 512 [ 130.517239][T12676] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.529228][T12676] EXT4-fs (loop5): 1 truncate cleaned up [ 130.529688][T12676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.650722][ T6027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.678730][T12697] netlink: 'syz.3.2585': attribute type 1 has an invalid length. [ 130.680423][T12698] loop5: detected capacity change from 0 to 512 [ 130.691474][T12698] EXT4-fs (loop5): invalid #clusters per group: 95 [ 130.703772][T12697] 8021q: adding VLAN 0 to HW filter on device bond6 [ 131.197555][T12742] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 131.197841][T12742] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 131.198138][T12742] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 131.244669][T12748] syzkaller0: left promiscuous mode [ 131.244680][T12748] syzkaller0: left allmulticast mode [ 131.289058][T12755] bond4: (slave lo): Device is not bonding slave [ 131.289066][T12755] bond4: option active_slave: invalid value (lo) [ 131.290757][T12755] bond4 (unregistering): Released all slaves [ 131.370499][T12767] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 131.370793][T12767] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 131.371152][T12767] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 131.421153][T12778] loop3: detected capacity change from 0 to 128 [ 131.433038][T12778] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.457508][ T5348] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.511061][T12786] loop3: detected capacity change from 0 to 4096 [ 131.520732][T12786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.544068][ T5348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.564357][T12796] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 131.567841][T12796] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 131.568444][T12796] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 131.654911][T12812] fuse: Bad value for 'group_id' [ 131.654920][T12812] fuse: Bad value for 'group_id' [ 131.715051][T12825] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 131.722713][T12825] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 131.723027][T12825] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 131.752348][T12832] TCP: TCP_TX_DELAY enabled [ 131.773060][T12835] fuse: Bad value for 'group_id' [ 131.773069][T12835] fuse: Bad value for 'group_id' [ 131.843034][T12854] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 131.843305][T12854] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 131.844224][T12854] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 131.987065][T12880] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 131.987334][T12880] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 131.987612][T12880] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 132.071519][T12892] loop6: detected capacity change from 0 to 8192 [ 132.296512][T12908] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.297857][T12908] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 132.298237][T12908] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 132.298798][T12908] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 132.325257][T12910] netlink: 'syz.6.2681': attribute type 10 has an invalid length. [ 132.384683][T12916] netlink: 'syz.6.2684': attribute type 1 has an invalid length. [ 132.396826][T12916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.473396][T12920] net_ratelimit: 53 callbacks suppressed [ 132.681265][T12935] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.681695][T12935] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 132.681882][T12935] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 132.681956][T12936] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 132.682199][T12935] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 132.722908][T12941] loop4: detected capacity change from 0 to 1024 [ 132.723323][T12941] EXT4-fs: Ignoring removed bh option [ 132.737934][T12945] netlink: 'syz.1.2696': attribute type 1 has an invalid length. [ 132.743170][T12941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 132.768221][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 132.779593][T12945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 132.930504][T12965] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.930788][T12965] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 132.930962][T12965] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 132.931277][T12965] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 133.057241][T12976] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 133.071808][T12976] 8021q: adding VLAN 0 to HW filter on device bond9 [ 133.094223][T12979] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2710'. [ 133.098967][T12979] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2710'. [ 133.740517][T12995] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 133.740911][T12995] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 133.741209][T12995] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 133.933112][T13018] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 133.933589][T13018] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 133.933886][T13018] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 134.192815][T13052] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 134.220729][T13052] 8021q: adding VLAN 0 to HW filter on device bond10 [ 134.319792][T13070] loop3: detected capacity change from 0 to 128 [ 134.338036][T13070] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.362457][ T5348] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.897870][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2765'. [ 134.897895][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2765'. [ 134.898056][T13103] syzkaller0: left promiscuous mode [ 134.898069][T13103] syzkaller0: left allmulticast mode [ 135.003783][T13105] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 135.020844][T13105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.096653][T13113] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 135.097266][T13113] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 135.097563][T13113] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 135.117050][T13116] netlink: 'syz.6.2771': attribute type 10 has an invalid length. [ 135.302368][T13138] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 135.302933][T13138] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 135.303262][T13138] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 135.539621][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2792'. [ 135.539644][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2792'. [ 135.539667][T13163] syzkaller0: left promiscuous mode [ 135.539678][T13163] syzkaller0: left allmulticast mode [ 135.575025][T13166] FAULT_INJECTION: forcing a failure. [ 135.575025][T13166] name failslab, interval 1, probability 5, space 0, times 0 [ 135.575040][T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.1.2793 Tainted: G L syzkaller #0 PREEMPT [ 135.575053][T13166] Tainted: [L]=SOFTLOCKUP [ 135.575057][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 135.575069][T13166] Call trace: [ 135.575072][T13166] show_stack+0x2c/0x3c (C) [ 135.575092][T13166] __dump_stack+0x30/0x40 [ 135.575105][T13166] dump_stack_lvl+0xd8/0x12c [ 135.575117][T13166] dump_stack+0x1c/0x28 [ 135.575128][T13166] should_fail_ex+0x418/0x58c [ 135.575141][T13166] should_failslab+0xc4/0x120 [ 135.575155][T13166] __kmalloc_cache_noprof+0x94/0x5fc [ 135.575164][T13166] nsim_fib_event_nb+0x174/0xc5c [ 135.575174][T13166] notifier_call_chain+0x1a4/0x4cc [ 135.575186][T13166] atomic_notifier_call_chain+0xf0/0x1ac [ 135.575198][T13166] call_fib_notifiers+0x44/0x74 [ 135.575211][T13166] call_fib4_notifiers+0x88/0x118 [ 135.575222][T13166] fib_notify_alias_delete+0x314/0x428 [ 135.575231][T13166] fib_table_delete+0x588/0x7b4 [ 135.575239][T13166] fib_magic+0x294/0x344 [ 135.575251][T13166] fib_del_ifaddr+0x200/0x113c [ 135.575263][T13166] fib_inetaddr_event+0xb0/0x1c0 [ 135.575275][T13166] notifier_call_chain+0x1a4/0x4cc [ 135.575286][T13166] blocking_notifier_call_chain+0x70/0xa0 [ 135.575297][T13166] __inet_del_ifa+0x5b8/0xca0 [ 135.575306][T13166] inetdev_event+0x550/0x1184 [ 135.575315][T13166] notifier_call_chain+0x1a4/0x4cc [ 135.575326][T13166] raw_notifier_call_chain+0x3c/0x50 [ 135.575337][T13166] call_netdevice_notifiers_info+0xb8/0x120 [ 135.575351][T13166] netif_set_mtu_ext+0x39c/0x574 [ 135.575363][T13166] do_setlink+0x7dc/0x31e8 [ 135.575372][T13166] rtnl_newlink+0xf44/0x138c [ 135.575381][T13166] rtnetlink_rcv_msg+0x66c/0x9bc [ 135.575390][T13166] netlink_rcv_skb+0x238/0x414 [ 135.575401][T13166] rtnetlink_rcv+0x28/0x38 [ 135.575410][T13166] netlink_unicast+0x600/0x7f8 [ 135.575420][T13166] netlink_sendmsg+0x648/0x948 [ 135.575430][T13166] __sock_sendmsg+0xc8/0x17c [ 135.575440][T13166] ____sys_sendmsg+0x3d0/0x6c8 [ 135.575451][T13166] ___sys_sendmsg+0x198/0x224 [ 135.575461][T13166] __sys_sendmsg+0x158/0x204 [ 135.575472][T13166] __arm64_sys_sendmsg+0x88/0x9c [ 135.575483][T13166] invoke_syscall+0x98/0x244 [ 135.575495][T13166] el0_svc_common+0xec/0x23c [ 135.575507][T13166] do_el0_svc+0x4c/0x5c [ 135.575518][T13166] el0_svc+0x60/0x1d8 [ 135.575530][T13166] el0t_64_sync_handler+0x44/0x104 [ 135.575541][T13166] el0t_64_sync+0x198/0x19c [ 135.582014][T13166] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2793'. [ 135.748969][T13182] loop3: detected capacity change from 0 to 128 [ 135.823616][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2807'. [ 135.823636][T13193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2807'. [ 136.021348][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2818'. [ 136.188899][T13249] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.962491][T13239] nvme nvme1: failed to connect socket: -512 [ 137.376096][T13368] fuse: Bad value for 'user_id' [ 137.376106][T13368] fuse: Bad value for 'user_id' [ 137.608345][T13413] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 137.834076][T13449] fuse: Bad value for 'user_id' [ 137.834086][T13449] fuse: Bad value for 'user_id' [ 138.007294][T13475] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.043668][T13355] nvme nvme1: failed to connect socket: -512 [ 138.258392][T13508] loop1: detected capacity change from 0 to 512 [ 138.261870][T13508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.282755][T13508] EXT4-fs (loop1): 1 truncate cleaned up [ 138.283263][T13508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.306620][ T5359] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.393483][T13516] nvme nvme1: failed to connect socket: -101 [ 138.785614][T13558] netlink: 'syz.6.2975': attribute type 10 has an invalid length. [ 138.855618][T13566] __nla_validate_parse: 15 callbacks suppressed [ 138.855627][T13566] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2979'. [ 139.230867][T13521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.232055][T13521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.232200][T13521] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.232312][T13521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.306615][T13588] fuse: Bad value for 'fd' [ 139.307255][T13590] netlink: 'syz.3.2988': attribute type 10 has an invalid length. [ 139.359847][T13599] loop3: detected capacity change from 0 to 1024 [ 139.394553][T13599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.410567][ T5348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.206150][T13601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.206300][T13601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.206408][T13601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.206510][T13601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.264632][T13623] fuse: Bad value for 'fd' [ 140.337845][ T4714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.342751][ T4714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.349816][ T4714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.351413][ T4714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.351835][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 140.351858][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'. [ 140.352192][ T4714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.538968][T13645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.539088][T13645] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.539192][T13645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.539288][T13645] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 140.539325][T13645] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 140.545372][T13627] net_ratelimit: 4 callbacks suppressed [ 140.554593][T13645] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 140.894603][T13689] netlink: 'syz.3.3020': attribute type 10 has an invalid length. [ 140.909667][T13627] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.909735][T13627] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.909810][T13627] bridge_slave_0: entered allmulticast mode [ 140.913084][T13627] bridge_slave_0: entered promiscuous mode [ 140.917006][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.917032][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.917108][T13627] bridge_slave_1: entered allmulticast mode [ 140.917561][T13627] bridge_slave_1: entered promiscuous mode [ 140.984933][T13627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.989211][T13627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.012264][T13627] team0: Port device team_slave_0 added [ 141.016365][T13627] team0: Port device team_slave_1 added [ 141.032019][T13627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.032025][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.032036][T13627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.032593][T13627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.032599][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.032612][T13627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.083183][T13627] hsr_slave_0: entered promiscuous mode [ 141.083573][T13627] hsr_slave_1: entered promiscuous mode [ 141.083818][T13627] debugfs: 'hsr0' already exists in 'hsr' [ 141.083828][T13627] Cannot create hsr debugfs directory [ 141.172026][T13711] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3031'. [ 141.204979][T13627] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.236399][T13721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3036'. [ 141.277117][T13627] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.307714][T13627] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.338123][T13733] loop3: detected capacity change from 0 to 128 [ 141.349805][T13733] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.370108][T13734] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.374166][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3042'. [ 141.374179][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3042'. [ 141.374196][T13734] bond0: left promiscuous mode [ 141.382658][T13734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.384564][T13734] bond6: (slave bond0): making interface the new active one [ 141.387245][T13734] bond6: (slave bond0): Enslaving as an active interface with an up link [ 141.391921][T13627] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.395134][T13734] netlink: 'syz.6.3042': attribute type 4 has an invalid length. [ 141.395148][T13734] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3042'. [ 141.401241][ T5348] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.408551][T13734] .`: renamed from bond0 (while UP) [ 141.485521][T13744] syzkaller0: entered promiscuous mode [ 141.485535][T13744] syzkaller0: entered allmulticast mode [ 141.540937][T13627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.558399][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.558727][T13627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.566512][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.566812][T13627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.575405][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.575695][T13627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.586563][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.634123][T13627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.642870][T13627] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.647416][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.647438][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.653657][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.653679][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.740167][T13627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.740177][T13627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.758164][T13774] loop5: detected capacity change from 0 to 8192 [ 141.907403][T13791] fuse: Bad value for 'rootmode' [ 141.949533][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3065'. [ 141.971840][T13802] input: syz0 as /devices/virtual/input/input11 [ 142.002777][T13627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.025413][T13627] veth0_vlan: entered promiscuous mode [ 142.045493][T13627] veth1_vlan: entered promiscuous mode [ 142.051038][T13807] netlink: 'syz.5.3067': attribute type 10 has an invalid length. [ 142.074793][T13627] veth0_macvtap: entered promiscuous mode [ 142.082082][T13627] veth1_macvtap: entered promiscuous mode [ 142.091398][T13627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.103186][T13627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.114429][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3071'. [ 142.129773][T11635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.130020][T11635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.130042][T11635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.130058][T11635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.197439][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.197448][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.213608][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.213619][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.303062][T13832] input: syz0 as /devices/virtual/input/input12 [ 142.528375][T13860] input: syz0 as /devices/virtual/input/input13 [ 142.560833][T13866] loop4: detected capacity change from 0 to 2048 [ 142.565961][ T4713] Bluetooth: hci5: command 0x041b tx timeout [ 142.566380][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.566408][ T4713] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.566430][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.590913][T13866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.619760][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.690304][T13884] FAULT_INJECTION: forcing a failure. [ 142.690304][T13884] name failslab, interval 1, probability 5, space 0, times 0 [ 142.690321][T13884] CPU: 1 UID: 0 PID: 13884 Comm: syz.4.3102 Tainted: G L syzkaller #0 PREEMPT [ 142.690334][T13884] Tainted: [L]=SOFTLOCKUP [ 142.690338][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 142.690351][T13884] Call trace: [ 142.690354][T13884] show_stack+0x2c/0x3c (C) [ 142.690374][T13884] __dump_stack+0x30/0x40 [ 142.690387][T13884] dump_stack_lvl+0xd8/0x12c [ 142.690399][T13884] dump_stack+0x1c/0x28 [ 142.690410][T13884] should_fail_ex+0x418/0x58c [ 142.690423][T13884] should_failslab+0xc4/0x120 [ 142.690437][T13884] __kmalloc_cache_noprof+0x94/0x5fc [ 142.690445][T13884] nfs_alloc_client+0x64/0x790 [ 142.690457][T13884] nfs4_alloc_client+0xe0/0xaf8 [ 142.690468][T13884] nfs_get_client+0xa64/0xdb0 [ 142.690478][T13884] nfs4_set_client+0x324/0x52c [ 142.690490][T13884] nfs4_create_server+0x3c8/0xd88 [ 142.690501][T13884] nfs4_try_get_tree+0x4c/0x114 [ 142.690509][T13884] nfs_get_tree+0xbf0/0xf18 [ 142.690519][T13884] vfs_get_tree+0x90/0x28c [ 142.690529][T13884] fc_mount+0x24/0xac [ 142.690539][T13884] do_new_mount+0x2a4/0x538 [ 142.690550][T13884] path_mount+0x5f0/0xa88 [ 142.690561][T13884] do_mount+0xe8/0x148 [ 142.690571][T13884] __arm64_sys_mount+0x33c/0x388 [ 142.690582][T13884] invoke_syscall+0x98/0x244 [ 142.690594][T13884] el0_svc_common+0xec/0x23c [ 142.690606][T13884] do_el0_svc+0x4c/0x5c [ 142.690617][T13884] el0_svc+0x60/0x1d8 [ 142.690629][T13884] el0t_64_sync_handler+0x44/0x104 [ 142.690641][T13884] el0t_64_sync+0x198/0x19c [ 142.826283][T13891] netlink: 'syz.6.3103': attribute type 10 has an invalid length. [ 142.920839][T13927] nvme_fabrics: missing parameter 'transport=%s' [ 142.920850][T13927] nvme_fabrics: missing parameter 'nqn=%s' [ 143.017065][T13953] netlink: 'syz.5.3121': attribute type 10 has an invalid length. [ 143.125505][T13970] nvme_fabrics: missing parameter 'transport=%s' [ 143.125516][T13970] nvme_fabrics: missing parameter 'nqn=%s' [ 143.209268][T13987] syzkaller0: entered promiscuous mode [ 143.209277][T13987] syzkaller0: entered allmulticast mode [ 143.307388][T14004] loop6: detected capacity change from 0 to 1024 [ 143.319911][T14004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.339844][T14010] capability: warning: `syz.4.3141' uses 32-bit capabilities (legacy support in use) [ 143.348675][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.388156][T14014] nvme_fabrics: missing parameter 'transport=%s' [ 143.388167][T14014] nvme_fabrics: missing parameter 'nqn=%s' [ 143.451505][T14027] netlink: 'syz.6.3149': attribute type 4 has an invalid length. [ 143.487831][T14024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.488024][T14024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.488187][T14024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.488330][T14024] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 143.571441][T14043] nvme_tcp: malformed address passed: 127.0.0.:8009 [ 143.588212][T14048] fuse: Unknown parameter 'use00000000000000000000' [ 143.616270][T14050] input: syz0 as /devices/virtual/input/input14 [ 143.799419][T14069] fuse: Unknown parameter 'use00000000000000000000' [ 143.818733][T14073] input: syz0 as /devices/virtual/input/input15 [ 143.832536][T14074] nvme_tcp: malformed address passed: 127.0.0.:8009 [ 143.903361][T14084] input: syz0 as /devices/virtual/input/input16 [ 144.060772][T14097] __nla_validate_parse: 18 callbacks suppressed [ 144.060781][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 144.062069][T14094] loop4: detected capacity change from 0 to 1024 [ 144.084830][T14094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.112400][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.123861][T14107] fuse: Unknown parameter 'user_i00000000000000000000' [ 144.166841][T14113] nvme_tcp: malformed address passed: 127.0.0.:8009 [ 144.183360][T14118] input: syz0 as /devices/virtual/input/input17 [ 144.303469][T14135] fuse: Unknown parameter 'user_i00000000000000000000' [ 144.321782][T14132] netlink: 'syz.6.3192': attribute type 4 has an invalid length. [ 144.321797][T14132] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3192'. [ 144.388943][T14148] nvme_fabrics: unknown parameter or missing value 'hdr_' in ctrl creation request [ 144.442987][T14155] FAULT_INJECTION: forcing a failure. [ 144.442987][T14155] name failslab, interval 1, probability 5, space 0, times 0 [ 144.443010][T14155] CPU: 1 UID: 0 PID: 14155 Comm: syz.6.3199 Tainted: G L syzkaller #0 PREEMPT [ 144.443023][T14155] Tainted: [L]=SOFTLOCKUP [ 144.443027][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 144.443040][T14155] Call trace: [ 144.443043][T14155] show_stack+0x2c/0x3c (C) [ 144.443061][T14155] __dump_stack+0x30/0x40 [ 144.443073][T14155] dump_stack_lvl+0xd8/0x12c [ 144.443084][T14155] dump_stack+0x1c/0x28 [ 144.443095][T14155] should_fail_ex+0x418/0x58c [ 144.443108][T14155] should_failslab+0xc4/0x120 [ 144.443122][T14155] __kmalloc_cache_noprof+0x94/0x5fc [ 144.443131][T14155] xprt_alloc+0x48c/0x754 [ 144.443140][T14155] xs_setup_xprt+0xa0/0x324 [ 144.443149][T14155] xs_setup_tcp+0x8c/0x6d4 [ 144.443159][T14155] xprt_create_transport+0x164/0x61c [ 144.443168][T14155] rpc_create+0x408/0x734 [ 144.443178][T14155] nfs_create_rpc_client+0x450/0x60c [ 144.443190][T14155] nfs4_alloc_client+0x6e8/0xaf8 [ 144.443202][T14155] nfs_get_client+0xa64/0xdb0 [ 144.443211][T14155] nfs4_set_client+0x324/0x52c [ 144.443223][T14155] nfs4_create_server+0x3c8/0xd88 [ 144.443234][T14155] nfs4_try_get_tree+0x4c/0x114 [ 144.443242][T14155] nfs_get_tree+0xbf0/0xf18 [ 144.443252][T14155] vfs_get_tree+0x90/0x28c [ 144.443263][T14155] fc_mount+0x24/0xac [ 144.443273][T14155] do_new_mount+0x2a4/0x538 [ 144.443284][T14155] path_mount+0x5f0/0xa88 [ 144.443294][T14155] do_mount+0xe8/0x148 [ 144.443305][T14155] __arm64_sys_mount+0x33c/0x388 [ 144.443316][T14155] invoke_syscall+0x98/0x244 [ 144.443328][T14155] el0_svc_common+0xec/0x23c [ 144.443340][T14155] do_el0_svc+0x4c/0x5c [ 144.443351][T14155] el0_svc+0x60/0x1d8 [ 144.443362][T14155] el0t_64_sync_handler+0x44/0x104 [ 144.443373][T14155] el0t_64_sync+0x198/0x19c [ 144.503445][T14164] fuse: Unknown parameter 'user_i00000000000000000000' [ 144.514628][T14166] input: syz0 as /devices/virtual/input/input18 [ 144.544293][T14168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.548522][T14168] netlink: 'syz.4.3206': attribute type 4 has an invalid length. [ 144.548535][T14168] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3206'. [ 144.549915][T14168] .`: renamed from bond0 [ 144.603936][T14171] loop4: detected capacity change from 0 to 2048 [ 144.610167][T14171] EXT4-fs (loop4): inodes count not valid: 2336 vs 32 [ 144.658322][T14177] nvme_fabrics: unknown parameter or missing value 'hdr_' in ctrl creation request [ 144.713054][T14183] FAULT_INJECTION: forcing a failure. [ 144.713054][T14183] name failslab, interval 1, probability 5, space 0, times 0 [ 144.713249][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz.4.3213 Tainted: G L syzkaller #0 PREEMPT [ 144.713267][T14183] Tainted: [L]=SOFTLOCKUP [ 144.713271][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 144.713285][T14183] Call trace: [ 144.713289][T14183] show_stack+0x2c/0x3c (C) [ 144.713307][T14183] __dump_stack+0x30/0x40 [ 144.713319][T14183] dump_stack_lvl+0xd8/0x12c [ 144.713331][T14183] dump_stack+0x1c/0x28 [ 144.713342][T14183] should_fail_ex+0x418/0x58c [ 144.713356][T14183] should_failslab+0xc4/0x120 [ 144.713369][T14183] __kmalloc_cache_noprof+0x94/0x5fc [ 144.713378][T14183] xprt_alloc+0x48c/0x754 [ 144.713388][T14183] xs_setup_xprt+0xa0/0x324 [ 144.713397][T14183] xs_setup_tcp+0x8c/0x6d4 [ 144.713407][T14183] xprt_create_transport+0x164/0x61c [ 144.713416][T14183] rpc_create+0x408/0x734 [ 144.713427][T14183] nfs_create_rpc_client+0x450/0x60c [ 144.713438][T14183] nfs4_alloc_client+0x6e8/0xaf8 [ 144.713450][T14183] nfs_get_client+0xa64/0xdb0 [ 144.713460][T14183] nfs4_set_client+0x324/0x52c [ 144.713471][T14183] nfs4_create_server+0x3c8/0xd88 [ 144.713482][T14183] nfs4_try_get_tree+0x4c/0x114 [ 144.713490][T14183] nfs_get_tree+0xbf0/0xf18 [ 144.713501][T14183] vfs_get_tree+0x90/0x28c [ 144.713511][T14183] fc_mount+0x24/0xac [ 144.713521][T14183] do_new_mount+0x2a4/0x538 [ 144.713532][T14183] path_mount+0x5f0/0xa88 [ 144.713543][T14183] do_mount+0xe8/0x148 [ 144.713553][T14183] __arm64_sys_mount+0x33c/0x388 [ 144.713564][T14183] invoke_syscall+0x98/0x244 [ 144.713576][T14183] el0_svc_common+0xec/0x23c [ 144.713588][T14183] do_el0_svc+0x4c/0x5c [ 144.713599][T14183] el0_svc+0x60/0x1d8 [ 144.713611][T14183] el0t_64_sync_handler+0x44/0x104 [ 144.713622][T14183] el0t_64_sync+0x198/0x19c [ 144.772002][T14190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.772027][T14190] FAULT_INJECTION: forcing a failure. [ 144.772027][T14190] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.772045][T14190] CPU: 0 UID: 0 PID: 14190 Comm: syz.4.3216 Tainted: G L syzkaller #0 PREEMPT [ 144.772058][T14190] Tainted: [L]=SOFTLOCKUP [ 144.772061][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 144.772074][T14190] Call trace: [ 144.772077][T14190] show_stack+0x2c/0x3c (C) [ 144.772094][T14190] __dump_stack+0x30/0x40 [ 144.772107][T14190] dump_stack_lvl+0xd8/0x12c [ 144.772118][T14190] dump_stack+0x1c/0x28 [ 144.772129][T14190] should_fail_ex+0x418/0x58c [ 144.772142][T14190] should_fail+0x14/0x24 [ 144.772153][T14190] get_futex_key+0x1ec/0x12b0 [ 144.772164][T14190] futex_wait_setup+0x58/0x674 [ 144.772175][T14190] __futex_wait+0x108/0x25c [ 144.772187][T14190] futex_wait+0x108/0x2c0 [ 144.772197][T14190] do_futex+0x320/0x378 [ 144.772208][T14190] __arm64_sys_futex+0x2e4/0x418 [ 144.772219][T14190] invoke_syscall+0x98/0x244 [ 144.772230][T14190] el0_svc_common+0xec/0x23c [ 144.772242][T14190] do_el0_svc+0x4c/0x5c [ 144.772253][T14190] el0_svc+0x60/0x1d8 [ 144.772264][T14190] el0t_64_sync_handler+0x44/0x104 [ 144.772276][T14190] el0t_64_sync+0x198/0x19c [ 144.789351][T14192] fuse: Unknown parameter 'user_id00000000000000000000' [ 144.806600][T14194] input: syz0 as /devices/virtual/input/input19 [ 144.837341][T14196] netlink: 'syz.4.3219': attribute type 4 has an invalid length. [ 144.837355][T14196] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3219'. [ 144.882502][T14202] loop4: detected capacity change from 0 to 512 [ 144.896057][T14202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 144.896120][T14202] System zones: 1-12 [ 144.897858][T14202] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.3221: missing EA_INODE flag [ 144.897872][T14202] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 144.899395][T14202] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3221: error while reading EA inode 12 err=-117 [ 144.899416][T14202] loop4: lost filesystem error report for type 5 error -117 [ 144.900383][T14202] EXT4-fs (loop4): 1 orphan inode deleted [ 144.900851][T14202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.910160][T14205] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3223'. [ 144.910657][T14208] nvme_fabrics: unknown parameter or missing value 'hdr_' in ctrl creation request [ 145.022484][T14216] FAULT_INJECTION: forcing a failure. [ 145.022484][T14216] name failslab, interval 1, probability 5, space 0, times 0 [ 145.022503][T14216] CPU: 0 UID: 0 PID: 14216 Comm: syz.6.3227 Tainted: G L syzkaller #0 PREEMPT [ 145.022516][T14216] Tainted: [L]=SOFTLOCKUP [ 145.022520][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 145.022534][T14216] Call trace: [ 145.022537][T14216] show_stack+0x2c/0x3c (C) [ 145.022555][T14216] __dump_stack+0x30/0x40 [ 145.022568][T14216] dump_stack_lvl+0xd8/0x12c [ 145.022579][T14216] dump_stack+0x1c/0x28 [ 145.022591][T14216] should_fail_ex+0x418/0x58c [ 145.022604][T14216] should_failslab+0xc4/0x120 [ 145.022617][T14216] __kmalloc_cache_noprof+0x94/0x5fc [ 145.022626][T14216] xprt_alloc+0x48c/0x754 [ 145.022636][T14216] xs_setup_xprt+0xa0/0x324 [ 145.022645][T14216] xs_setup_tcp+0x8c/0x6d4 [ 145.022655][T14216] xprt_create_transport+0x164/0x61c [ 145.022664][T14216] rpc_create+0x408/0x734 [ 145.022674][T14216] nfs_create_rpc_client+0x450/0x60c [ 145.022685][T14216] nfs4_alloc_client+0x6e8/0xaf8 [ 145.022697][T14216] nfs_get_client+0xa64/0xdb0 [ 145.022707][T14216] nfs4_set_client+0x324/0x52c [ 145.022718][T14216] nfs4_create_server+0x3c8/0xd88 [ 145.022729][T14216] nfs4_try_get_tree+0x4c/0x114 [ 145.022737][T14216] nfs_get_tree+0xbf0/0xf18 [ 145.022748][T14216] vfs_get_tree+0x90/0x28c [ 145.022758][T14216] fc_mount+0x24/0xac [ 145.022768][T14216] do_new_mount+0x2a4/0x538 [ 145.022779][T14216] path_mount+0x5f0/0xa88 [ 145.022789][T14216] do_mount+0xe8/0x148 [ 145.022799][T14216] __arm64_sys_mount+0x33c/0x388 [ 145.022811][T14216] invoke_syscall+0x98/0x244 [ 145.022823][T14216] el0_svc_common+0xec/0x23c [ 145.022834][T14216] do_el0_svc+0x4c/0x5c [ 145.022846][T14216] el0_svc+0x60/0x1d8 [ 145.022857][T14216] el0t_64_sync_handler+0x44/0x104 [ 145.022868][T14216] el0t_64_sync+0x198/0x19c [ 145.026825][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.027807][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.028264][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.028889][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.029780][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.977694][ T4714] Bluetooth: hci5: command 0x041b tx timeout [ 145.977734][ T4714] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.978305][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.979890][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.131493][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.165502][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 146.165528][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'. [ 146.165557][T14226] syzkaller0: left promiscuous mode [ 146.165571][T14226] syzkaller0: left allmulticast mode [ 146.235609][T14234] syzkaller0: entered promiscuous mode [ 146.235619][T14234] syzkaller0: entered allmulticast mode [ 146.240803][T14239] nvme_fabrics: unknown parameter or missing value 'da' in ctrl creation request [ 146.267443][T14240] input: syz0 as /devices/virtual/input/input20 [ 146.274545][T11896] bond0: (slave syz_tun): Releasing backup interface [ 146.332661][T14213] net_ratelimit: 219 callbacks suppressed [ 146.626865][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 146.626954][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 146.678567][T14262] FAULT_INJECTION: forcing a failure. [ 146.678567][T14262] name failslab, interval 1, probability 5, space 0, times 0 [ 146.678586][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.6.3241 Tainted: G L syzkaller #0 PREEMPT [ 146.678599][T14262] Tainted: [L]=SOFTLOCKUP [ 146.678603][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 146.678616][T14262] Call trace: [ 146.678619][T14262] show_stack+0x2c/0x3c (C) [ 146.678639][T14262] __dump_stack+0x30/0x40 [ 146.678651][T14262] dump_stack_lvl+0xd8/0x12c [ 146.678663][T14262] dump_stack+0x1c/0x28 [ 146.678674][T14262] should_fail_ex+0x418/0x58c [ 146.678688][T14262] should_failslab+0xc4/0x120 [ 146.678701][T14262] __kmalloc_cache_noprof+0x94/0x5fc [ 146.678710][T14262] xprt_switch_alloc+0x88/0x314 [ 146.678723][T14262] rpc_create_xprt+0x160/0x6e0 [ 146.678734][T14262] rpc_create+0x4dc/0x734 [ 146.678744][T14262] nfs_create_rpc_client+0x450/0x60c [ 146.678755][T14262] nfs4_alloc_client+0x6e8/0xaf8 [ 146.678767][T14262] nfs_get_client+0xa64/0xdb0 [ 146.678777][T14262] nfs4_set_client+0x324/0x52c [ 146.678789][T14262] nfs4_create_server+0x3c8/0xd88 [ 146.678800][T14262] nfs4_try_get_tree+0x4c/0x114 [ 146.678808][T14262] nfs_get_tree+0xbf0/0xf18 [ 146.678819][T14262] vfs_get_tree+0x90/0x28c [ 146.678829][T14262] fc_mount+0x24/0xac [ 146.678839][T14262] do_new_mount+0x2a4/0x538 [ 146.678850][T14262] path_mount+0x5f0/0xa88 [ 146.678860][T14262] do_mount+0xe8/0x148 [ 146.678870][T14262] __arm64_sys_mount+0x33c/0x388 [ 146.678881][T14262] invoke_syscall+0x98/0x244 [ 146.678893][T14262] el0_svc_common+0xec/0x23c [ 146.678905][T14262] do_el0_svc+0x4c/0x5c [ 146.678916][T14262] el0_svc+0x60/0x1d8 [ 146.678928][T14262] el0t_64_sync_handler+0x44/0x104 [ 146.678939][T14262] el0t_64_sync+0x198/0x19c [ 146.680765][T14263] netlink: 'syz.1.3239': attribute type 4 has an invalid length. [ 146.680776][T14263] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3239'. [ 146.695828][T14253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.712188][T14263] .`: renamed from bond0 [ 146.823983][T14273] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 146.890883][T14278] syzkaller0: entered promiscuous mode [ 146.890897][T14278] syzkaller0: entered allmulticast mode [ 146.920028][T14285] loop1: detected capacity change from 0 to 128 [ 146.991595][T14213] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.991661][T14213] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.991745][T14213] bridge_slave_0: entered allmulticast mode [ 146.992248][T14213] bridge_slave_0: entered promiscuous mode [ 146.993951][T14213] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.994787][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.994867][T14213] bridge_slave_1: entered allmulticast mode [ 146.995338][T14213] bridge_slave_1: entered promiscuous mode [ 147.046407][T14213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.054066][T14213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.115905][T11635] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.116149][T11635] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.116166][T11635] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.116183][T11635] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.120863][T14213] team0: Port device team_slave_0 added [ 147.145926][T14213] team0: Port device team_slave_1 added [ 147.224405][T14213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.224414][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.224425][T14213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.225364][T14213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.225371][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.225385][T14213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.233133][T14300] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 147.282440][T14213] hsr_slave_0: entered promiscuous mode [ 147.282813][T14213] hsr_slave_1: entered promiscuous mode [ 147.283039][T14213] debugfs: 'hsr0' already exists in 'hsr' [ 147.283047][T14213] Cannot create hsr debugfs directory [ 147.373620][T14303] netlink: 'syz.1.3255': attribute type 4 has an invalid length. [ 147.425890][T14314] syzkaller0: entered promiscuous mode [ 147.425901][T14314] syzkaller0: entered allmulticast mode [ 147.449344][T14319] loop4: detected capacity change from 0 to 512 [ 147.449729][T14319] EXT4-fs: Ignoring removed bh option [ 147.481781][T14319] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 147.482466][T14319] EXT4-fs (loop4): 1 truncate cleaned up [ 147.490658][T14319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.495116][T14319] EXT4-fs (loop4): shut down requested (2) [ 147.530395][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.568419][T14329] loop4: detected capacity change from 0 to 512 [ 147.568850][T14329] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.606848][T14329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.663387][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.668431][T14333] input: syz0 as /devices/virtual/input/input21 [ 147.672384][T14337] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 147.703670][T14213] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.714840][ T30] audit: type=1326 audit(148.685:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.714926][ T30] audit: type=1326 audit(148.685:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.715669][ T30] audit: type=1326 audit(148.685:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.716998][ T30] audit: type=1326 audit(148.695:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=229 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.718057][ T30] audit: type=1326 audit(148.695:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.718291][T14340] fuse: Unknown parameter '0x0000000000000003' [ 147.718671][ T30] audit: type=1326 audit(148.695:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.718995][ T30] audit: type=1326 audit(148.695:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.719982][ T30] audit: type=1326 audit(148.695:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.720138][ T30] audit: type=1326 audit(148.695:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14338 comm="syz.6.3270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 147.773920][T14213] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.820402][T14347] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.820848][T14347] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 147.821853][T14347] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 147.860764][T14213] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.916886][T14362] loop1: detected capacity change from 0 to 128 [ 147.930706][T14362] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.964382][T13627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.965457][T14213] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.005853][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.005887][ T4713] Bluetooth: hci5: command 0x041b tx timeout [ 148.044839][T14375] netlink: 'syz.1.3284': attribute type 7 has an invalid length. [ 148.085977][ T51] Bluetooth: hci1: command tx timeout [ 148.090120][T14213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.092733][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.093132][T14213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.107689][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.107991][T14213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.113881][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.130719][T14213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.133955][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.146035][T14379] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.155296][T14379] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 148.163042][T14379] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 148.256959][T14213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.268798][T14213] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.284134][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.284163][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.291638][T11635] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.291659][T11635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.343592][T14392] netlink: 'syz.1.3288': attribute type 4 has an invalid length. [ 148.499732][T14213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.560336][T14213] veth0_vlan: entered promiscuous mode [ 148.569099][T14213] veth1_vlan: entered promiscuous mode [ 148.591078][T14213] veth0_macvtap: entered promiscuous mode [ 148.601637][T14213] veth1_macvtap: entered promiscuous mode [ 148.613753][T14213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.622165][T14213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.632410][T11635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.632558][T11635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.632592][T11635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.632614][T11635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.638757][T14415] fuse: Unknown parameter '0x0000000000000003' [ 148.730425][T11654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.730439][T11654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.732161][T14417] device-mapper: ioctl: name not supplied when creating device [ 148.796705][T11654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.796713][T11654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.824283][T14421] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.824737][T14421] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 148.835192][T14421] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 148.848908][T14423] syzkaller0: entered promiscuous mode [ 148.848923][T14423] syzkaller0: entered allmulticast mode [ 148.934617][T14440] syzkaller0: left promiscuous mode [ 148.934631][T14440] syzkaller0: left allmulticast mode [ 148.994041][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.995192][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.995659][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.002365][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.002766][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.004821][T14444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.020374][T14444] netlink: 'syz.3.3307': attribute type 4 has an invalid length. [ 149.022377][T14444] .`: renamed from bond0 [ 149.035581][ T6027] bond0: (slave syz_tun): Releasing backup interface [ 149.070830][T14456] loop6: detected capacity change from 0 to 1024 [ 149.099112][T14456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.155482][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.168904][T11630] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.252918][T14474] __nla_validate_parse: 16 callbacks suppressed [ 149.252931][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 149.252952][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 149.264609][T11630] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.284800][T14476] loop6: detected capacity change from 0 to 512 [ 149.295335][T14476] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.3316: corrupted in-inode xattr: invalid ea_ino [ 149.295351][T14476] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.295449][T14476] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.3316: couldn't read orphan inode 15 (err -117) [ 149.295462][T14476] loop6: lost filesystem error report for type 5 error -117 [ 149.296057][T14476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.334411][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.383573][T11630] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.440314][T14482] device-mapper: ioctl: name not supplied when creating device [ 149.516632][T11630] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.535917][T11635] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.535947][T11635] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.535963][T11635] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.535977][T11635] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.600270][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.600331][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.600401][T14448] bridge_slave_0: entered allmulticast mode [ 149.600863][T14448] bridge_slave_0: entered promiscuous mode [ 149.624495][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.624528][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.624607][T14448] bridge_slave_1: entered allmulticast mode [ 149.625108][T14448] bridge_slave_1: entered promiscuous mode [ 149.643581][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.645251][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.688652][T14448] team0: Port device team_slave_0 added [ 149.689706][T14448] team0: Port device team_slave_1 added [ 149.720350][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.720357][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.720370][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.722228][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.722233][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.722244][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.797117][T11630] bridge_slave_1: left allmulticast mode [ 149.797193][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.802508][T11630] bridge_slave_0: left allmulticast mode [ 149.802576][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.818285][T14496] netlink: 'syz.3.3322': attribute type 4 has an invalid length. [ 149.818297][T14496] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3322'. [ 149.963716][T11630] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 150.030748][T11630] bond0 (unregistering): Released all slaves [ 150.034660][T11630] bond1 (unregistering): Released all slaves [ 150.048236][T11630] bond2 (unregistering): Released all slaves [ 150.055516][T11630] bond3 (unregistering): Released all slaves [ 150.069435][T11630] bond4 (unregistering): Released all slaves [ 150.083833][T14448] hsr_slave_0: entered promiscuous mode [ 150.085923][ T4713] Bluetooth: hci5: command 0x041b tx timeout [ 150.085951][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.090590][T14448] hsr_slave_1: entered promiscuous mode [ 150.090907][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 150.090917][T14448] Cannot create hsr debugfs directory [ 150.104518][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 150.168254][ T51] Bluetooth: hci1: command tx timeout [ 150.380924][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 150.380937][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 150.674880][T11630] team0 (unregistering): Port device team_slave_1 removed [ 150.682610][T11630] team0 (unregistering): Port device team_slave_0 removed [ 150.705403][T11630] team0 (unregistering): Port device veth0_to_bond removed [ 150.905922][T14568] loop4: detected capacity change from 0 to 1024 [ 150.930423][T14568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.947089][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3337'. [ 151.001596][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.046045][ T51] Bluetooth: hci0: command tx timeout [ 151.052341][T14448] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.062851][T14585] nvme_fabrics: unknown parameter or missing value 'data_diges' in ctrl creation request [ 151.125347][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.125684][T14448] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.133145][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.133590][T14448] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.146546][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.146866][T14448] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.150563][T11630] IPVS: stop unused estimator thread 0... [ 151.152739][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.411680][ T10] net_ratelimit: 256 callbacks suppressed [ 151.442789][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.451212][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.457550][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.457574][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.461760][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 151.461774][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 151.463004][T14603] netlink: 'syz.3.3342': attribute type 4 has an invalid length. [ 151.463018][T14603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3342'. [ 151.473010][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.473037][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.653151][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.744513][T14448] veth0_vlan: entered promiscuous mode [ 151.760133][T14448] veth1_vlan: entered promiscuous mode [ 151.771110][T14448] veth0_macvtap: entered promiscuous mode [ 151.774815][T14448] veth1_macvtap: entered promiscuous mode [ 151.783698][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.784823][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.836113][T11630] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.836211][T11630] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.836362][T11630] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.836498][T11630] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.837484][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.837495][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.862443][T11630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.862454][T11630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.931555][T14650] fuse: Unknown parameter '0x0000000000000003' [ 151.935083][T14652] nvme_fabrics: unknown parameter or missing value 'data_diges' in ctrl creation request [ 151.963944][T14656] netlink: 'syz.5.3352': attribute type 11 has an invalid length. [ 151.963957][T14656] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3352'. [ 151.974740][T14658] autofs4:pid:14658:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 151.990367][T14660] netlink: 'syz.5.3354': attribute type 10 has an invalid length. [ 151.990725][T14660] syz_tun: entered promiscuous mode [ 151.993685][T14660] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 152.079406][T14676] fuse: Unknown parameter '0x0000000000000003' [ 152.102852][T14681] loop6: detected capacity change from 0 to 2048 [ 152.129017][T14681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.149278][T14692] FAULT_INJECTION: forcing a failure. [ 152.149278][T14692] name failslab, interval 1, probability 5, space 0, times 0 [ 152.149296][T14692] CPU: 1 UID: 0 PID: 14692 Comm: syz.1.3366 Tainted: G L syzkaller #0 PREEMPT [ 152.149309][T14692] Tainted: [L]=SOFTLOCKUP [ 152.149312][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.149326][T14692] Call trace: [ 152.149329][T14692] show_stack+0x2c/0x3c (C) [ 152.149349][T14692] __dump_stack+0x30/0x40 [ 152.149361][T14692] dump_stack_lvl+0xd8/0x12c [ 152.149373][T14692] dump_stack+0x1c/0x28 [ 152.149385][T14692] should_fail_ex+0x418/0x58c [ 152.149398][T14692] should_failslab+0xc4/0x120 [ 152.149411][T14692] __kvmalloc_node_noprof+0x160/0x7fc [ 152.149421][T14692] pipapo_realloc_scratch+0x118/0x258 [ 152.149435][T14692] pipapo_maybe_clone+0x2b8/0xae8 [ 152.149448][T14692] nft_pipapo_walk+0x84/0x438 [ 152.149460][T14692] nf_tables_delsetelem+0xed0/0x1388 [ 152.149470][T14692] nfnetlink_rcv+0xc8c/0x16ec [ 152.149478][T14692] netlink_unicast+0x600/0x7f8 [ 152.149489][T14692] netlink_sendmsg+0x648/0x948 [ 152.149500][T14692] __sock_sendmsg+0xc8/0x17c [ 152.149510][T14692] ____sys_sendmsg+0x3d0/0x6c8 [ 152.149510][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.149521][T14692] ___sys_sendmsg+0x198/0x224 [ 152.149531][T14692] __sys_sendmsg+0x158/0x204 [ 152.149542][T14692] __arm64_sys_sendmsg+0x88/0x9c [ 152.149553][T14692] invoke_syscall+0x98/0x244 [ 152.149565][T14692] el0_svc_common+0xec/0x23c [ 152.149576][T14692] do_el0_svc+0x4c/0x5c [ 152.149587][T14692] el0_svc+0x60/0x1d8 [ 152.149599][T14692] el0t_64_sync_handler+0x44/0x104 [ 152.149610][T14692] el0t_64_sync+0x198/0x19c [ 152.167071][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.176720][ T51] Bluetooth: hci5: command 0x041b tx timeout [ 152.227857][T14696] loop1: detected capacity change from 0 to 512 [ 152.228472][T14699] netlink: 'syz.6.3371': attribute type 4 has an invalid length. [ 152.233667][T14700] loop5: detected capacity change from 0 to 1024 [ 152.241528][T14700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 152.246030][ T51] Bluetooth: hci1: command tx timeout [ 152.246295][T14700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.262344][T14696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.280548][T14705] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 152.283441][T14705] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 152.283795][T14705] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 152.285129][T14448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.307127][T14705] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 152.313482][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.333903][T14707] loop3: detected capacity change from 0 to 512 [ 152.370924][T14713] fuse: Unknown parameter '0x0000000000000003' [ 152.549335][T14730] syzkaller0: entered promiscuous mode [ 152.549352][T14730] syzkaller0: entered allmulticast mode [ 152.611578][T14738] netlink: 'syz.3.3388': attribute type 10 has an invalid length. [ 152.611952][T14738] syz_tun: entered promiscuous mode [ 152.619062][T14738] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 152.671901][T14745] fuse: Unknown parameter 'fd0x0000000000000003' [ 152.713527][T14751] loop6: detected capacity change from 0 to 256 [ 152.720445][T14751] FAT-fs (loop6): bogus sectors per cluster 0 [ 152.720462][T14751] FAT-fs (loop6): Can't find a valid FAT filesystem [ 152.723263][T14752] loop1: detected capacity change from 0 to 512 [ 152.754481][T14752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 152.754552][T14752] System zones: 1-12 [ 152.760049][T14752] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.3394: missing EA_INODE flag [ 152.760081][T14752] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 152.762634][T14752] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3394: error while reading EA inode 12 err=-117 [ 152.762658][T14752] loop1: lost filesystem error report for type 5 error -117 [ 152.762814][T14752] EXT4-fs (loop1): 1 orphan inode deleted [ 152.763307][T14752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.774915][T14762] loop3: detected capacity change from 0 to 512 [ 152.782182][T14762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.783705][T14762] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3398: bad orphan inode 131083 [ 152.783724][T14762] loop3: lost filesystem error report for type 5 error -117 [ 152.784290][T14762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.803612][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.812847][T14213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.818306][T14760] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 152.819199][T14760] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 152.820765][T14760] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 152.821217][T14760] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 152.835200][T14756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.854824][T14756] netlink: 'syz.5.3396': attribute type 4 has an invalid length. [ 152.868964][T14756] .`: renamed from bond0 (while UP) [ 152.983982][T14788] netlink: 'syz.3.3402': attribute type 10 has an invalid length. [ 153.125874][ T51] Bluetooth: hci0: command tx timeout [ 153.822466][T14801] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 153.822762][T14801] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 153.822932][T14801] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 153.823233][T14801] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 153.984859][T14824] loop1: detected capacity change from 0 to 512 [ 153.993805][T14824] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 153.998794][T14824] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.3420: corrupted in-inode xattr: e_value size too large [ 153.998821][T14824] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.999033][T14824] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.3420: couldn't read orphan inode 15 (err -117) [ 153.999049][T14824] loop1: lost filesystem error report for type 5 error -117 [ 154.000539][T14824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.032829][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.144672][T14837] loop3: detected capacity change from 0 to 1024 [ 154.160274][T14837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.175437][T14213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.246123][ T51] Bluetooth: hci5: command 0x041b tx timeout [ 154.246151][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.389743][ T4713] Bluetooth: hci1: command tx timeout [ 154.601567][T14856] netlink: 'syz.5.3431': attribute type 4 has an invalid length. [ 154.601581][T14856] __nla_validate_parse: 14 callbacks suppressed [ 154.601590][T14856] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3431'. [ 154.837574][T14875] netlink: 'syz.5.3439': attribute type 10 has an invalid length. [ 154.992193][T14883] netlink: 'syz.5.3442': attribute type 4 has an invalid length. [ 154.992210][T14883] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3442'. [ 155.029807][T14887] FAULT_INJECTION: forcing a failure. [ 155.029807][T14887] name failslab, interval 1, probability 5, space 0, times 0 [ 155.029823][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.5.3443 Tainted: G L syzkaller #0 PREEMPT [ 155.029836][T14887] Tainted: [L]=SOFTLOCKUP [ 155.029840][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 155.029852][T14887] Call trace: [ 155.029855][T14887] show_stack+0x2c/0x3c (C) [ 155.029873][T14887] __dump_stack+0x30/0x40 [ 155.029886][T14887] dump_stack_lvl+0xd8/0x12c [ 155.029897][T14887] dump_stack+0x1c/0x28 [ 155.029908][T14887] should_fail_ex+0x418/0x58c [ 155.029921][T14887] should_failslab+0xc4/0x120 [ 155.029934][T14887] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 155.029942][T14887] sock_alloc_inode+0x30/0x180 [ 155.029955][T14887] alloc_inode+0x68/0x198 [ 155.029966][T14887] sock_alloc+0x4c/0x204 [ 155.029975][T14887] __sock_create+0x108/0x670 [ 155.029992][T14887] __sys_socket_create+0xc0/0x11c [ 155.030003][T14887] __sys_socket+0x44/0xec [ 155.030014][T14887] __arm64_sys_socket+0x84/0x9c [ 155.030023][T14887] invoke_syscall+0x98/0x244 [ 155.030036][T14887] el0_svc_common+0xec/0x23c [ 155.030047][T14887] do_el0_svc+0x4c/0x5c [ 155.030058][T14887] el0_svc+0x60/0x1d8 [ 155.030071][T14887] el0t_64_sync_handler+0x44/0x104 [ 155.030082][T14887] el0t_64_sync+0x198/0x19c [ 155.107314][T14891] loop3: detected capacity change from 0 to 512 [ 155.110063][T14891] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.131103][T14891] EXT4-fs (loop3): 1 truncate cleaned up [ 155.132655][T14891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.174949][T14900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.184146][T14898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.185427][T14213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.185599][T14900] EXT4-fs (loop1): 1 truncate cleaned up [ 155.205907][ T4713] Bluetooth: hci0: command tx timeout [ 155.226322][T14900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.251106][T14448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.282783][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.491773][T14920] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 155.620347][T14922] netlink: 'syz.1.3456': attribute type 4 has an invalid length. [ 155.620362][T14922] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3456'. [ 155.622708][T14928] FAULT_INJECTION: forcing a failure. [ 155.622708][T14928] name fail_futex, interval 1, probability 0, space 0, times 0 [ 155.622734][T14928] CPU: 0 UID: 0 PID: 14928 Comm: syz.5.3458 Tainted: G L syzkaller #0 PREEMPT [ 155.622749][T14928] Tainted: [L]=SOFTLOCKUP [ 155.622754][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 155.622767][T14928] Call trace: [ 155.622770][T14928] show_stack+0x2c/0x3c (C) [ 155.622792][T14928] __dump_stack+0x30/0x40 [ 155.622804][T14928] dump_stack_lvl+0xd8/0x12c [ 155.622815][T14928] dump_stack+0x1c/0x28 [ 155.622827][T14928] should_fail_ex+0x418/0x58c [ 155.622840][T14928] should_fail+0x14/0x24 [ 155.622852][T14928] get_futex_key+0x1ec/0x12b0 [ 155.622863][T14928] futex_wait_setup+0x58/0x674 [ 155.622874][T14928] __futex_wait+0x108/0x25c [ 155.622885][T14928] futex_wait+0x108/0x2c0 [ 155.622896][T14928] do_futex+0x320/0x378 [ 155.622906][T14928] __arm64_sys_futex+0x2e4/0x418 [ 155.622917][T14928] invoke_syscall+0x98/0x244 [ 155.622929][T14928] el0_svc_common+0xec/0x23c [ 155.622941][T14928] do_el0_svc+0x4c/0x5c [ 155.622952][T14928] el0_svc+0x60/0x1d8 [ 155.622964][T14928] el0t_64_sync_handler+0x44/0x104 [ 155.622975][T14928] el0t_64_sync+0x198/0x19c [ 155.668108][T14926] netlink: 'syz.6.3457': attribute type 10 has an invalid length. [ 155.719260][T14935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.748226][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.804800][T14944] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.808635][T14944] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 155.812183][T14944] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 155.948168][T14957] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 155.953022][T14961] netlink: 'syz.4.3471': attribute type 10 has an invalid length. [ 156.002158][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3472'. [ 156.002172][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3472'. [ 156.002374][T14965] netlink: 'syz.5.3472': attribute type 4 has an invalid length. [ 156.002384][T14965] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3472'. [ 156.018493][T14969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.054141][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.122083][T14978] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 156.122490][T14978] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 156.122756][T14978] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 156.145085][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.147656][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.148271][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.148895][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.149308][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.225323][ T30] audit: type=1326 audit(157.195:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.225347][ T30] audit: type=1326 audit(157.195:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.240859][ T30] audit: type=1326 audit(157.215:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.240882][ T30] audit: type=1326 audit(157.215:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.258021][ T30] audit: type=1326 audit(157.235:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=216 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.258045][ T30] audit: type=1326 audit(157.235:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.258062][ T30] audit: type=1326 audit(157.235:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.265482][T14989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.275463][ T30] audit: type=1326 audit(157.245:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.275491][ T30] audit: type=1326 audit(157.245:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.285972][ T30] audit: type=1326 audit(157.255:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14990 comm="syz.6.3482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=232 compat=0 ip=0xffff93378868 code=0x7ffc0000 [ 156.322422][T14213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.367157][ T6712] .`: (slave syz_tun): Releasing backup interface [ 156.382758][T15004] netlink: 'syz.3.3484': attribute type 10 has an invalid length. [ 156.412447][T15007] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 156.413105][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 156.413117][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'. [ 156.413405][T15010] netlink: 'syz.1.3487': attribute type 4 has an invalid length. [ 156.413416][T15010] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3487'. [ 156.429935][T14981] net_ratelimit: 405 callbacks suppressed [ 156.529328][T15018] FAULT_INJECTION: forcing a failure. [ 156.529328][T15018] name failslab, interval 1, probability 5, space 0, times 0 [ 156.529344][T15018] CPU: 1 UID: 0 PID: 15018 Comm: syz.5.3489 Tainted: G L syzkaller #0 PREEMPT [ 156.529356][T15018] Tainted: [L]=SOFTLOCKUP [ 156.529360][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 156.529372][T15018] Call trace: [ 156.529375][T15018] show_stack+0x2c/0x3c (C) [ 156.529391][T15018] __dump_stack+0x30/0x40 [ 156.529403][T15018] dump_stack_lvl+0xd8/0x12c [ 156.529415][T15018] dump_stack+0x1c/0x28 [ 156.529426][T15018] should_fail_ex+0x418/0x58c [ 156.529439][T15018] should_failslab+0xc4/0x120 [ 156.529452][T15018] kmem_cache_alloc_node_noprof+0x98/0x604 [ 156.529461][T15018] dup_task_struct+0x70/0x76c [ 156.529470][T15018] copy_process+0x610/0x34c4 [ 156.529478][T15018] kernel_clone+0x234/0x8e8 [ 156.529487][T15018] __arm64_sys_clone+0x168/0x1d4 [ 156.529496][T15018] invoke_syscall+0x98/0x244 [ 156.529508][T15018] el0_svc_common+0xec/0x23c [ 156.529520][T15018] do_el0_svc+0x4c/0x5c [ 156.529531][T15018] el0_svc+0x60/0x1d8 [ 156.529542][T15018] el0t_64_sync_handler+0x44/0x104 [ 156.529553][T15018] el0t_64_sync+0x198/0x19c [ 156.674076][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.674139][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.674208][T14981] bridge_slave_0: entered allmulticast mode [ 156.674683][T14981] bridge_slave_0: entered promiscuous mode [ 156.675636][T14981] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.675682][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.675830][T14981] bridge_slave_1: entered allmulticast mode [ 156.676295][T14981] bridge_slave_1: entered promiscuous mode [ 156.690978][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.692096][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.704859][T14981] team0: Port device team_slave_0 added [ 156.705873][T14981] team0: Port device team_slave_1 added [ 156.721334][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.721340][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.721351][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.721953][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.721959][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.721971][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.742439][T14981] hsr_slave_0: entered promiscuous mode [ 156.742807][T14981] hsr_slave_1: entered promiscuous mode [ 156.842556][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 156.848183][T15040] netlink: 'syz.3.3498': attribute type 4 has an invalid length. [ 156.899119][T14981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.942881][T15044] syz_tun: entered allmulticast mode [ 156.962046][T14981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.043209][T14981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.161915][T14981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.174126][T15062] set_capacity_and_notify: 5 callbacks suppressed [ 157.174133][T15062] loop6: detected capacity change from 0 to 1024 [ 157.190108][T15058] netlink: 'syz.5.3507': attribute type 4 has an invalid length. [ 157.202042][T15062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.221907][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.305895][ T4713] Bluetooth: hci0: command tx timeout [ 157.355642][T14981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.368494][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.381814][T14981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.519356][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.594680][T14981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.603278][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.603601][T14981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.619682][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.653466][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.661469][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.663815][T11651] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.663836][T11651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.674712][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.674736][T11651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.241169][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.245838][ T4713] Bluetooth: hci3: command tx timeout [ 158.314720][T14981] veth0_vlan: entered promiscuous mode [ 158.318810][T14981] veth1_vlan: entered promiscuous mode [ 158.334428][T14981] veth0_macvtap: entered promiscuous mode [ 158.335554][T14981] veth1_macvtap: entered promiscuous mode [ 158.345348][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.349235][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.375921][T11654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.375943][T11654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.375959][T11654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.375975][T11654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.382596][T15116] loop3: detected capacity change from 0 to 1024 [ 158.398616][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.398622][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.431839][T11654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.431848][T11654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.434301][T15116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.459130][T14213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.475414][T15123] tipc: Started in network mode [ 158.475424][T15123] tipc: Node identity 4, cluster identity 4711 [ 158.475431][T15123] tipc: Node number set to 4 [ 158.495405][T15125] FAULT_INJECTION: forcing a failure. [ 158.495405][T15125] name failslab, interval 1, probability 5, space 0, times 0 [ 158.495422][T15125] CPU: 1 UID: 0 PID: 15125 Comm: syz.3.3522 Tainted: G L syzkaller #0 PREEMPT [ 158.495435][T15125] Tainted: [L]=SOFTLOCKUP [ 158.495439][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 158.495452][T15125] Call trace: [ 158.495455][T15125] show_stack+0x2c/0x3c (C) [ 158.495474][T15125] __dump_stack+0x30/0x40 [ 158.495487][T15125] dump_stack_lvl+0xd8/0x12c [ 158.495498][T15125] dump_stack+0x1c/0x28 [ 158.495509][T15125] should_fail_ex+0x418/0x58c [ 158.495525][T15125] should_failslab+0xc4/0x120 [ 158.495538][T15125] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 158.495547][T15125] __d_alloc+0x50/0x600 [ 158.495556][T15125] d_alloc_pseudo+0x2c/0xd8 [ 158.495565][T15125] alloc_path_pseudo+0xe8/0x1d4 [ 158.495574][T15125] alloc_file_pseudo+0xb0/0x198 [ 158.495582][T15125] sock_alloc_file+0xb4/0x1ac [ 158.495593][T15125] __sys_socketpair+0x348/0x528 [ 158.495603][T15125] __arm64_sys_socketpair+0xa8/0xc4 [ 158.495612][T15125] invoke_syscall+0x98/0x244 [ 158.495625][T15125] el0_svc_common+0xec/0x23c [ 158.495636][T15125] do_el0_svc+0x4c/0x5c [ 158.495647][T15125] el0_svc+0x60/0x1d8 [ 158.495659][T15125] el0t_64_sync_handler+0x44/0x104 [ 158.495670][T15125] el0t_64_sync+0x198/0x19c [ 158.619073][T15141] loop4: detected capacity change from 0 to 512 [ 158.630226][T15141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.665460][T14981] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.791905][T15162] loop6: detected capacity change from 0 to 512 [ 158.804349][T15162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 158.804385][T15162] System zones: 1-12 [ 158.810791][T15162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.3536: missing EA_INODE flag [ 158.810805][T15162] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 158.811317][T15162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3536: error while reading EA inode 12 err=-117 [ 158.811339][T15162] loop6: lost filesystem error report for type 5 error -117 [ 158.811486][T15162] EXT4-fs (loop6): 1 orphan inode deleted [ 158.811955][T15162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.804680][T15190] xt_hashlimit: max too large, truncated to 1048576 [ 159.881501][ T8029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.968218][T15202] validate_nla: 4 callbacks suppressed [ 159.968229][T15202] netlink: 'syz.1.3552': attribute type 10 has an invalid length. [ 159.970268][T15202] syz_tun: entered promiscuous mode [ 159.973694][T15202] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 160.092931][T15210] __nla_validate_parse: 17 callbacks suppressed [ 160.092940][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 160.092950][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 160.093140][T15210] netlink: 'syz.3.3554': attribute type 4 has an invalid length. [ 160.093150][T15210] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3554'. [ 160.140756][T15218] loop5: detected capacity change from 0 to 2048 [ 160.178199][T15223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3559'. [ 160.181232][T15218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.204950][T14448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.268256][T15235] FAULT_INJECTION: forcing a failure. [ 160.268256][T15235] name failslab, interval 1, probability 5, space 0, times 0 [ 160.268275][T15235] CPU: 0 UID: 0 PID: 15235 Comm: syz.3.3564 Tainted: G L syzkaller #0 PREEMPT [ 160.268290][T15235] Tainted: [L]=SOFTLOCKUP [ 160.268294][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 160.268308][T15235] Call trace: [ 160.268311][T15235] show_stack+0x2c/0x3c (C) [ 160.268329][T15235] __dump_stack+0x30/0x40 [ 160.268342][T15235] dump_stack_lvl+0xd8/0x12c [ 160.268354][T15235] dump_stack+0x1c/0x28 [ 160.268365][T15235] should_fail_ex+0x418/0x58c [ 160.268382][T15235] should_failslab+0xc4/0x120 [ 160.268395][T15235] __kmalloc_cache_noprof+0x94/0x5fc [ 160.268404][T15235] xprt_alloc+0x48c/0x754 [ 160.268414][T15235] xs_setup_xprt+0xa0/0x324 [ 160.268423][T15235] xs_setup_tcp+0x8c/0x6d4 [ 160.268433][T15235] xprt_create_transport+0x164/0x61c [ 160.268442][T15235] rpc_create+0x408/0x734 [ 160.268452][T15235] nfs_create_rpc_client+0x450/0x60c [ 160.268464][T15235] nfs4_alloc_client+0x6e8/0xaf8 [ 160.268475][T15235] nfs_get_client+0xa64/0xdb0 [ 160.268485][T15235] nfs4_set_client+0x324/0x52c [ 160.268496][T15235] nfs4_create_server+0x3c8/0xd88 [ 160.268508][T15235] nfs4_try_get_tree+0x4c/0x114 [ 160.268516][T15235] nfs_get_tree+0xbf0/0xf18 [ 160.268526][T15235] vfs_get_tree+0x90/0x28c [ 160.268536][T15235] fc_mount+0x24/0xac [ 160.268546][T15235] do_new_mount+0x2a4/0x538 [ 160.268557][T15235] path_mount+0x5f0/0xa88 [ 160.268568][T15235] do_mount+0xe8/0x148 [ 160.268578][T15235] __arm64_sys_mount+0x33c/0x388 [ 160.268589][T15235] invoke_syscall+0x98/0x244 [ 160.268601][T15235] el0_svc_common+0xec/0x23c [ 160.268613][T15235] do_el0_svc+0x4c/0x5c [ 160.268624][T15235] el0_svc+0x60/0x1d8 [ 160.268636][T15235] el0t_64_sync_handler+0x44/0x104 [ 160.268647][T15235] el0t_64_sync+0x198/0x19c [ 160.319545][T15244] loop5: detected capacity change from 0 to 2048 [ 160.323074][T15244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.323091][T15244] ext4: Unknown parameter 'defcontext' [ 160.326883][ T4713] Bluetooth: hci3: command tx timeout [ 160.329505][T15239] netlink: 'syz.6.3566': attribute type 10 has an invalid length. ** 26410 printk messages dropped ** [ 172.610175][T15999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.614588][T16000] socket: no more sockets [ 172.620485][T16000] socket: no more sockets [ 172.628399][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.632742][T15999] bond1: (slave bond0): Enslaving as a backup interface with an up link [ 172.634517][T15999] netlink: 'syz.4.3874': attribute type 4 has an invalid length. [ 173.016043][T16032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.035670][T16032] netlink: 'syz.4.3886': attribute type 4 has an invalid length. [ 173.259910][T16049] random: crng reseeded on system resumption [ 173.549601][T16066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.560427][T16066] bond1: (slave bond0): Releasing backup interface [ 173.562326][T16066] netlink: 'syz.4.3901': attribute type 4 has an invalid length. [ 173.711139][T16082] loop1: detected capacity change from 0 to 1024 [ 173.732580][T16082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.780428][T13627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.647910][T15076] net_ratelimit: 55 callbacks suppressed [ 182.656422][T14382] net_ratelimit: 78 callbacks suppressed [ 185.088091][ C0] sched: DL replenish lagged too much [ 186.186359][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.196753][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.246436][ C0] net_ratelimit: 48 callbacks suppressed [ 193.527089][ C0] net_ratelimit: 11 callbacks suppressed [ 198.727662][ C0] net_ratelimit: 94 callbacks suppressed [ 204.647457][ C0] net_ratelimit: 13 callbacks suppressed [ 209.906717][T14382] net_ratelimit: 31 callbacks suppressed [ 215.054555][T11642] net_ratelimit: 60 callbacks suppressed [ 220.577630][ T867] net_ratelimit: 26 callbacks suppressed [ 225.926051][ C0] net_ratelimit: 31 callbacks suppressed [ 230.966377][ C0] net_ratelimit: 19 callbacks suppressed [ 236.646834][ C0] net_ratelimit: 22 callbacks suppressed [ 247.799123][ T140] net_ratelimit: 29 callbacks suppressed [ 253.286603][ C0] net_ratelimit: 9 callbacks suppressed [ 254.227125][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.237600][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.047985][ C0] net_ratelimit: 7 callbacks suppressed [ 264.167054][ C0] net_ratelimit: 76 callbacks suppressed [ 269.187168][T11638] net_ratelimit: 2 callbacks suppressed [ 273.370092][ T4719] Bluetooth: hci1: command 0x0406 tx timeout [ 273.370132][ T4719] Bluetooth: hci0: command 0x0406 tx timeout [ 274.246173][ C0] net_ratelimit: 19 callbacks suppressed [ 279.526543][ C0] net_ratelimit: 53 callbacks suppressed [ 282.550028][ T4721] Bluetooth: hci3: command 0x0406 tx timeout [ 284.649995][ C0] net_ratelimit: 24 callbacks suppressed [ 288.125681][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.187987][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4345/1:b..l [ 288.189674][ C0] rcu: (detected by 0, t=10502 jiffies, g=47321, q=1797 ncpus=1) [ 288.191478][ C0] task:udevd state:R running task stack:0 pid:4345 tgid:4345 ppid:1 task_flags:0x400140 flags:0x00000000 [ 288.194214][ C0] Call trace: [ 288.194840][ C0] __switch_to+0x2b4/0x6e4 (T) [ 288.195841][ C0] __schedule+0x135c/0x2b00 [ 288.196792][ C0] preempt_schedule_irq+0x74/0x174 [ 288.197935][ C0] raw_irqentry_exit_cond_resched+0x30/0x40 [ 288.199260][ C0] irqentry_exit_to_kernel_mode_preempt+0x44/0x54 [ 288.200740][ C0] arm64_exit_to_kernel_mode_preempt+0x1c/0x38 [ 288.202173][ C0] el1_interrupt+0x4c/0x60 [ 288.203115][ C0] el1h_64_irq_handler+0x18/0x24 [ 288.204180][ C0] el1h_64_irq+0x78/0x7c [ 288.205084][ C0] __page_table_check_zero+0x1d0/0x40c (P) [ 288.206322][ C0] __free_frozen_pages+0xb00/0xbd0 [ 288.207430][ C0] free_frozen_pages+0x14/0x20 [ 288.208412][ C0] __free_slab+0x11c/0x1b4 [ 288.209411][ C0] free_slab+0x2c/0x154 [ 288.210343][ C0] discard_slab+0x48/0x90 [ 288.211278][ C0] __slab_free+0x1a0/0x1d0 [ 288.212191][ C0] ___cache_free+0x80/0x94 [ 288.213177][ C0] qlist_free_all+0xb4/0x120 [ 288.214211][ C0] kasan_quarantine_reduce+0x118/0x124 [ 288.215412][ C0] __kasan_slab_alloc+0x2c/0x88 [ 288.216412][ C0] __kmalloc_noprof+0x2e8/0x6c8 [ 288.217410][ C0] tomoyo_realpath_from_path+0xbc/0x4dc [ 288.218524][ C0] tomoyo_path_perm+0x218/0x460 [ 288.219514][ C0] tomoyo_inode_getattr+0x28/0x38 [ 288.220490][ C0] security_inode_getattr+0x114/0x2c0 [ 288.221703][ C0] vfs_statx_path+0x34/0x22c [ 288.222671][ C0] vfs_statx+0x124/0x1d8 [ 288.223459][ C0] vfs_fstatat+0xa4/0xd0 [ 288.224351][ C0] __arm64_sys_newfstatat+0x134/0x1c8 [ 288.225478][ C0] invoke_syscall+0x98/0x244 [ 288.226452][ C0] el0_svc_common+0xec/0x23c [ 288.227427][ C0] do_el0_svc+0x4c/0x5c [ 288.228294][ C0] el0_svc+0x60/0x1d8 [ 288.229138][ C0] el0t_64_sync_handler+0x44/0x104 [ 288.230238][ C0] el0t_64_sync+0x198/0x19c