last executing test programs: 8m19.489519479s ago: executing program 4 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_QTHRESH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 8m18.544778292s ago: executing program 4 (id=540): recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/36, 0x24}, 0xf}], 0x1, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000004c0)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000500)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540), 0x400000000000079, 0x40002121, 0x0) 8m18.307507508s ago: executing program 4 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 8m17.536888477s ago: executing program 4 (id=545): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x8, &(0x7f0000000200), 0x6, 0x529, &(0x7f0000001940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x42, 0xe) openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', 0x109342, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a40)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000002a80)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000002ac0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 8m16.793505856s ago: executing program 4 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 8m14.681612488s ago: executing program 4 (id=562): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000001180)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000011c0), 0x0, 0x82, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459"], 0x10}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000001280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r8, 0x0, 0x0) 8m14.004213534s ago: executing program 32 (id=562): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000001180)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000011c0), 0x0, 0x82, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459"], 0x10}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000001280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r8, 0x0, 0x0) 7m42.075354142s ago: executing program 3 (id=630): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="18f1", 0x2}, {&(0x7f0000000180)="edb4", 0x2}, {&(0x7f00000001c0)="6ff60bb169e2924d6a751cd8463169ef82bf1394d90cc83cefa978fdd56a236405c87b9cfaa08c43ca47ef1c10", 0x2d}], 0x3) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000600)={0x0, 0xf805, 0x800, 0x0, 0x40}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x20) 7m40.93703937s ago: executing program 3 (id=632): prctl$PR_SET_ENDIAN(0x14, 0x1) userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001680)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000016c0)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00002cb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001740)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000017c0), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001880)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001900)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001940)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000001980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m39.062675147s ago: executing program 3 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x3, 0x40000140, 0x0) 7m37.961949354s ago: executing program 3 (id=638): r0 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) 7m36.583843568s ago: executing program 3 (id=643): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000180)=0x9, 0x4) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x94, 0x0, 0x0, 0x10001}, {0x6, 0x0, 0x4}]}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000101000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000700)={0x0, 'batadv0\x00', {0x5}}) 7m34.48260454s ago: executing program 3 (id=649): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380"], 0xe8}}, 0x8c884) write$tun(r2, 0x0, 0xfdef) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 7m18.586478742s ago: executing program 33 (id=649): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380"], 0xe8}}, 0x8c884) write$tun(r2, 0x0, 0xfdef) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 23.223242462s ago: executing program 5 (id=2491): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f00000013c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000001400)=0x80000001, 0x4) write(r0, &(0x7f0000001440)="08001800000020", 0x7) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 21.503242795s ago: executing program 5 (id=2495): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x41e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) 20.542248689s ago: executing program 5 (id=2496): r0 = syz_usb_connect(0x5, 0x58, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x40, 0x8, 0x4, "003cb3a4"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 15.614593011s ago: executing program 6 (id=2512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "bb46b7ad21b571f1b4cb81430829ff22c99c8675cfc7e27aaad14907db12e667bd6b5c8b9ef3107de82da7e5d34f538247244aa3f1b5d9c33ece8289198a4331f35b37ad43a1a0cf53016a273dcd0db132e55979c0f9e7ef4396f804e61c7c6c5c0dcc17794189348897cd1ad2a3c4951fc09d8e2f6be940b64328bdefedf3844a3a4542b78437c5967f9cdc4aa7a4fc218af0f006bb525f16ac4a88dfcf04e1f5bdb8d8b8797adaecfbd27bd75583381e5eadc135f3aaf65e651443339da7b3bf482f42b13585c65591645fae054e452125e711bca30acad5a0183bf7cdca4ca08a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "e55f231357"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x300, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x350, 0x16, 0xa, 0x3, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x234}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4481036a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x570}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 15.529202793s ago: executing program 5 (id=2515): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000840)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x2200002, &(0x7f0000000a40)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000b00)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 15.27727822s ago: executing program 6 (id=2516): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000200)={0x1, 0x23, 0xd, 0x11, 0x4, 0x2, 0x4, 0x12f, 0x1}) 13.963486012s ago: executing program 6 (id=2519): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$packet(0x11, 0x2, 0x300) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f00000004c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="f0", 0x1}], 0x1}, 0x400d4) 10.175917667s ago: executing program 6 (id=2534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a80)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001ac0)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001b00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001b40)={0x8, 0x0, &(0x7f0000001b80)=[@increfs]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001bc0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001c00)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001c40)={0x8, 0x0, &(0x7f0000001c80)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001cc0)={0x4c, 0x0, &(0x7f0000001d00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001d80)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000001e00)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001e80)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001f80)={0x44, 0x0, &(0x7f0000001fc0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000002080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002180)={0x4c, 0x0, &(0x7f00000021c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) 8.152933317s ago: executing program 6 (id=2540): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r3, &(0x7f0000000940)}, 0x20) 5.424604185s ago: executing program 1 (id=2549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 4.562060386s ago: executing program 2 (id=2550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a80)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001ac0)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001b00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001b40)={0x8, 0x0, &(0x7f0000001b80)=[@increfs]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001bc0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001c00)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001c40)={0x8, 0x0, &(0x7f0000001c80)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001cc0)={0x4c, 0x0, &(0x7f0000001d00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001d80)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000001e00)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001e80)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001f80)={0x44, 0x0, &(0x7f0000001fc0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000002080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002180)={0x4c, 0x0, &(0x7f00000021c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) 4.375088471s ago: executing program 1 (id=2551): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000200)={0x1, 0x23, 0xd, 0x11, 0x4, 0x2, 0x4, 0x12f, 0x1}) 4.212282075s ago: executing program 1 (id=2552): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001240), 0x208e24b) fdatasync(r0) 3.733409747s ago: executing program 1 (id=2553): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21c004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.688622088s ago: executing program 0 (id=2554): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x41e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) 2.682953603s ago: executing program 0 (id=2555): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c1e735adcc0", 0x1f}, {&(0x7f0000001200)="fa", 0x1}], 0x2, &(0x7f0000001240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/111, 0x6f}], 0x2}, 0xacfc) 2.628181414s ago: executing program 2 (id=2556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20000000) 2.479065858s ago: executing program 0 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "bb46b7ad21b571f1b4cb81430829ff22c99c8675cfc7e27aaad14907db12e667bd6b5c8b9ef3107de82da7e5d34f538247244aa3f1b5d9c33ece8289198a4331f35b37ad43a1a0cf53016a273dcd0db132e55979c0f9e7ef4396f804e61c7c6c5c0dcc17794189348897cd1ad2a3c4951fc09d8e2f6be940b64328bdefedf3844a3a4542b78437c5967f9cdc4aa7a4fc218af0f006bb525f16ac4a88dfcf04e1f5bdb8d8b8797adaecfbd27bd75583381e5eadc135f3aaf65e651443339da7b3bf482f42b13585c65591645fae054e452125e711bca30acad5a0183bf7cdca4ca08a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "e55f231357"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x300, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x350, 0x16, 0xa, 0x3, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x234}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4481036a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x570}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 2.462953089s ago: executing program 5 (id=2558): syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000001a009b8a140000003b000000000000000000", 0x16) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x300, 0x0, 0x50565559, 0x1, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x7}}) bind$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 2.373057801s ago: executing program 2 (id=2559): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff, 0x9, 0x1}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x94}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000801) 2.282543183s ago: executing program 0 (id=2560): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000027c0)={&(0x7f0000002880)={0x50, 0x0, 0x100000000, {0x7, 0x2d, 0x0, 0x0, 0x0, 0xfff7, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x3c441000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) ioctl(0xffffffffffffffff, 0x40946400, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='tcpci 0x2', 0x9) connect$bt_l2cap(r1, &(0x7f0000000480)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) syz_fuse_handle_req(r0, &(0x7f0000003200)="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", 0x2000, &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f00000052c0)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0) 1.259680419s ago: executing program 1 (id=2561): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 1.257587939s ago: executing program 2 (id=2571): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000010cc0)={0x30a32c0, 0x2, @qpsk={0x8, 0x1}}) 1.155396111s ago: executing program 0 (id=2562): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000001f00)={0xa, 0x4e20, 0x10, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000001f40), 0x3000, 0x0, 0x0, 0x0) 1.114431432s ago: executing program 2 (id=2563): syz_ublk_setup_io_uring(0x312a, &(0x7f0000000180)={0x0, 0xd17d, 0x80, 0x2, 0x1a8}, &(0x7f0000000080), 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x800804, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f0000000d80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x204001, &(0x7f0000000580), 0x1, 0xbb0, &(0x7f0000001040)="$eJzs3M1vVFUbAPDn3k6/aF9a3rx5FWJiE4MajUOhBBNW4NqoiSxcUtspaTp82NbENiwK7tWFMS5IDH+CiXvZuDJxgQvFv4AYiSG6ARZj7nyUkekMpczMhfL7JWfuOXNm7vM8c2HuucncBvDMmsoe0oj9EXE6iZioP59GxFC1NxKxUXvd3dsX57KWRKXy/p9JJBFx5/bFuca+kvp2rD4YiYjrbyXx309b466srS/Nlsul5fr40OrZC4dW1tbfWDw7e6Z0pnTu6MybR2eOzcx0sdabFz78+oWf33n58tXPpt/9au+PSZyI8fpccx3dMhVTm59JZrC+LUTEbLeD5WSgXk9znUkhx4QAAOgobVrD/T8mYiDuL94m4odfck0OAAAA6IrKQEQFAAAA2OUS1/8AAACwyzV+B3Dn9sW5Rsv3Fwn9detkREzW6m/c31ybKcRGdTtSvW93z19JNN/WmtTe9timskjf/VTKWvToPuRONi5FxPNbHf+kWv9k9S7u1vrTiJjuQvypB8ZPU/0nuhA/7/oBeDZdO1k7kbWe/9LN9U9scf4rbHHu2om8z3+N9d/dlvXf/foH2qz/3ttmjAP3Xrvebq55/ffB57/NZ/Gz7WMV9QhuXYo4UNiq/mSz/qRN/ae3GWNs7uaVdnNZ/Vm9jdbv+itXIw5WV3Ot9Tcknf4+0aGFxXJpuva4xf7XjnWO33z8s5bFb1wL9EN2/PfEzo7/hW3GmHzuj/3t5h5ef/r7UHKq2huqP/PJ7Orq8uGIoeTt1uePdM6l8ZrGPrL6X32p8///rerPvhM26p9D9q/nUn2bjS8/EHPs4JFvd15/b2X1z+/w+H+xzRjffH/lo3ZzedcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMhjYjxSNLiZj9Ni8WIsYj4X+xJy+dXVl9fOP/xuflsLmIyBtOFxXJpOiImauMkGx+u9u+PjzwwnomIfRHx5cRodVycO1+ez7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo1FxHgkaTEi0oj4eyJNi8W8swIAAAC6bjLvBAAAAICec/0PAAAAu1/L9X/hX6ORfuYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArrTvxWs3kojYOD5abZmh+txgrpkBvZbu+J2VSlcTAfpuIO8EgNwUmvqVinM6PEtc4wPJQ+ZH2s4Mdz0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5cr+y/diOJiI3jo9WWGarPDeaaGdBrad4JALkZ6DSZ9C8PoP8KeScA5MY1PlBb6t+r1LTOj7R95/AjRGm/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDuPVlqTFiEir/TQtFiP+ExGTMZgsLJZL0xGxNyJ+nRgczsaH804aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltZW1+aLZdLyzo77dw7FfEEpKHzZHVGo+chhntZRd7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GFlbX1ptlwuLa/knQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt5W19aXZcrm03MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwIAAP//ZLcP0g==") syz_mount_image$ext4(&(0x7f0000001c00)='ext4\x00', &(0x7f0000001c40)='./file1\x00', 0x400, &(0x7f0000001c80), 0x2, 0x790, &(0x7f0000001cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002480)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000024c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002500)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002540)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000002580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002600)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r2, &(0x7f00000026c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000002700), &(0x7f0000002740)=0x4) openat(0xffffffffffffff9c, &(0x7f0000002780)='./file2\x00', 0x143042, 0x0) 192.138795ms ago: executing program 1 (id=2564): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000004c0)={0x0, 0x1, 0x5, 0x10, 0x200, &(0x7f0000000500)="000000000000000000000000000000000000000000000000000000000000000400"}) 183.363915ms ago: executing program 0 (id=2565): syz_emit_vhci(&(0x7f00000014c0)=ANY=[@ANYBLOB="040e0b01a320"], 0xe) 166.307926ms ago: executing program 5 (id=2566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a80)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001ac0)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001b00)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001bc0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001c00)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001c40)={0x8, 0x0, &(0x7f0000001c80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001cc0)={0x4c, 0x0, &(0x7f0000001d00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001d80)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000001e00)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001e80)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001f80)={0x44, 0x0, &(0x7f0000001fc0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000002080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002180)={0x4c, 0x0, &(0x7f00000021c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) 62.523208ms ago: executing program 6 (id=2567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c1e735adcc0b3", 0x20}, {&(0x7f0000001200)="fa", 0x1}], 0x2, 0x0, 0x0, 0x408d0}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/111, 0x6f}], 0x2}, 0xacfc) 0s ago: executing program 2 (id=2568): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x41e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) kernel console output (not intermixed with test programs): 6829][T10175] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 485.027866][T10175] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.103810][T10179] fuse: Bad value for 'user_id' [ 485.130183][ T4391] kernel read not supported for file /video9 (pid: 4391 comm: kworker/1:7) [ 485.257846][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 485.450103][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 487.177980][T10212] loop2: detected capacity change from 0 to 4096 [ 487.328518][T10220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 487.581430][T10222] loop1: detected capacity change from 0 to 1024 [ 487.942483][T10212] EXT4-fs: inline encryption not supported [ 488.053095][T10222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 488.395679][T10212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 488.493203][T10212] EXT4-fs (loop2): Test dummy encryption mode enabled [ 488.633447][T10212] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 488.682990][T10212] System zones: 0-5 [ 488.788538][T10212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 489.102115][T10234] netlink: 'syz.0.1695': attribute type 12 has an invalid length. [ 489.110034][T10234] netlink: 'syz.0.1695': attribute type 29 has an invalid length. [ 489.204791][ T7336] kernel read not supported for file /video9 (pid: 7336 comm: kworker/0:10) [ 489.222521][T10234] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1695'. [ 489.240855][T10233] overlayfs: failed to resolve './bus': -2 [ 489.400350][T10234] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1695'. [ 489.662113][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 489.808226][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 490.620051][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 492.183702][ T7336] kernel read not supported for file /video9 (pid: 7336 comm: kworker/0:10) [ 492.570037][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.034559][T10294] loop1: detected capacity change from 0 to 1024 [ 493.424435][T10294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 493.721769][T10292] netlink: 'syz.2.1711': attribute type 12 has an invalid length. [ 493.786869][T10292] netlink: 'syz.2.1711': attribute type 29 has an invalid length. [ 493.841806][T10292] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1711'. [ 493.906992][T10292] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1711'. [ 494.152902][ T22] lo speed is unknown, defaulting to 1000 [ 494.161798][T10304] FAULT_INJECTION: forcing a failure. [ 494.161798][T10304] name failslab, interval 1, probability 0, space 0, times 0 [ 494.256611][T10304] CPU: 1 PID: 10304 Comm: syz.6.1713 Not tainted syzkaller #0 [ 494.264179][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.274370][T10304] Call Trace: [ 494.277697][T10304] [ 494.280816][T10304] dump_stack_lvl+0x188/0x24e [ 494.285555][T10304] ? show_regs_print_info+0x12/0x12 [ 494.290808][T10304] ? load_image+0x410/0x410 [ 494.295363][T10304] ? __lock_acquire+0x7ea0/0x7ea0 [ 494.300453][T10304] should_fail_ex+0x390/0x4c0 [ 494.305197][T10304] should_failslab+0x5/0x20 [ 494.309749][T10304] slab_pre_alloc_hook+0x59/0x300 [ 494.314823][T10304] ? free_zapped_rcu+0x1f0/0x1f0 [ 494.319823][T10304] ? fuse_alloc_inode+0x178/0x220 [ 494.324990][T10304] __kmem_cache_alloc_node+0x4f/0x270 [ 494.330434][T10304] ? fuse_alloc_inode+0x178/0x220 [ 494.335503][T10304] kmalloc_trace+0x26/0xe0 [ 494.339979][T10304] fuse_alloc_inode+0x178/0x220 [ 494.344882][T10304] ? fuse_get_tree_submount+0xe30/0xe30 [ 494.350494][T10304] ? fuse_init_inode+0x3a0/0x3a0 [ 494.355526][T10304] iget5_locked+0x9e/0x260 [ 494.360028][T10304] ? fuse_inode_eq+0x70/0x70 [ 494.364698][T10304] fuse_iget+0x34e/0x960 [ 494.368999][T10304] ? _local_bh_enable+0xa0/0xa0 [ 494.374038][T10304] ? fuse_change_attributes+0x7c0/0x7c0 [ 494.379648][T10304] fuse_fill_super_common+0x9f6/0x1110 [ 494.385181][T10304] fuse_fill_super+0x173/0x1f0 [ 494.389998][T10304] ? fuse_reconfigure+0xb0/0xb0 [ 494.394906][T10304] get_tree_nodev+0xb0/0x160 [ 494.399628][T10304] fuse_get_tree+0x2d7/0x4d0 [ 494.404279][T10304] vfs_get_tree+0x88/0x270 [ 494.408765][T10304] do_new_mount+0x247/0xa40 [ 494.413335][T10304] __se_sys_mount+0x2e3/0x3d0 [ 494.418069][T10304] ? __x64_sys_mount+0xc0/0xc0 [ 494.422949][T10304] ? lockdep_hardirqs_on+0x94/0x140 [ 494.428279][T10304] ? __x64_sys_mount+0x1c/0xc0 [ 494.433107][T10304] do_syscall_64+0x4c/0xa0 [ 494.437567][T10304] ? clear_bhb_loop+0x60/0xb0 [ 494.442262][T10304] ? clear_bhb_loop+0x60/0xb0 [ 494.446954][T10304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.452864][T10304] RIP: 0033:0x7fa47399f7ca [ 494.457307][T10304] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.476986][T10304] RSP: 002b:00007fa474868e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 494.485468][T10304] RAX: ffffffffffffffda RBX: 00007fa474868ee0 RCX: 00007fa47399f7ca [ 494.493495][T10304] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000000 [ 494.501520][T10304] RBP: 0000200000000140 R08: 00007fa474868ee0 R09: 0000000001000000 [ 494.509541][T10304] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000180 [ 494.517563][T10304] R13: 00007fa474868ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 494.525604][T10304] [ 494.919160][T10300] loop2: detected capacity change from 0 to 8192 [ 495.005328][T10300] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.087073][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 495.136433][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.161211][T10292] FAT-fs (loop2): Filesystem has been set read-only [ 495.168394][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.207512][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.238220][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.275827][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.295217][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.550575][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.776703][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 495.995126][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 496.170281][T10292] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 497.425036][T10329] 0x0000000000ec-0x0000000000f2 : "" [ 497.516921][T10329] ftl_cs: FTL header corrupt! [ 497.550457][T10332] netlink: 'syz.0.1722': attribute type 21 has an invalid length. [ 497.750885][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1723'. [ 498.161347][T10345] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 499.291703][ T7336] kernel read not supported for file /video9 (pid: 7336 comm: kworker/0:10) [ 499.570763][T10373] 0x0000000000ec-0x0000000000f2 : "" [ 499.579432][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1736'. [ 499.601413][T10373] ftl_cs: FTL header corrupt! [ 499.673050][T10379] ip_tables: iptables: counters copy to user failed while replacing table [ 499.975596][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.985966][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.993564][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.904192][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.918093][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.460182][T10406] loop1: detected capacity change from 0 to 512 [ 501.545095][T10406] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 1: comm syz.1.1748: invalid block [ 501.654963][T10406] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1748: couldn't read orphan inode 11 (err -117) [ 501.727409][T10406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 502.507006][ T7336] kernel read not supported for file /video9 (pid: 7336 comm: kworker/0:10) [ 502.608686][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 502.612569][T10421] fuse: Invalid rootmode [ 502.728264][T10423] FAULT_INJECTION: forcing a failure. [ 502.728264][T10423] name failslab, interval 1, probability 0, space 0, times 0 [ 502.756641][T10426] loop2: detected capacity change from 0 to 128 [ 502.778058][T10423] CPU: 1 PID: 10423 Comm: syz.6.1753 Not tainted syzkaller #0 [ 502.785694][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 502.795803][T10423] Call Trace: [ 502.799144][T10423] [ 502.802125][T10423] dump_stack_lvl+0x188/0x24e [ 502.806878][T10423] ? show_regs_print_info+0x12/0x12 [ 502.812146][T10423] ? load_image+0x410/0x410 [ 502.816703][T10423] ? __might_sleep+0xd0/0xd0 [ 502.821400][T10423] ? __lock_acquire+0x7ea0/0x7ea0 [ 502.826495][T10423] should_fail_ex+0x390/0x4c0 [ 502.831264][T10423] should_failslab+0x5/0x20 [ 502.835868][T10423] slab_pre_alloc_hook+0x59/0x300 [ 502.840958][T10423] kmem_cache_alloc+0x56/0x2f0 [ 502.845775][T10423] ? security_file_alloc+0x30/0x110 [ 502.851072][T10423] security_file_alloc+0x30/0x110 [ 502.856147][T10423] __alloc_file+0xc2/0x230 [ 502.860602][T10423] alloc_empty_file+0x90/0x180 [ 502.865421][T10423] alloc_file+0x5b/0x5f0 [ 502.869700][T10423] alloc_file_pseudo+0x180/0x200 [ 502.874702][T10423] ? alloc_empty_file_noaccount+0x80/0x80 [ 502.880451][T10423] ? __rwlock_init+0x140/0x140 [ 502.885332][T10423] ? security_inode_alloc+0xbd/0x110 [ 502.890659][T10423] ? do_raw_spin_unlock+0x11d/0x230 [ 502.895893][T10423] sock_alloc_file+0xb3/0x240 [ 502.900726][T10423] do_accept+0x406/0x6f0 [ 502.905003][T10423] ? alloc_fd+0x590/0x640 [ 502.909384][T10423] ? __ia32_sys_listen+0x60/0x60 [ 502.914363][T10423] ? alloc_fd+0x590/0x640 [ 502.918732][T10423] __sys_accept4+0x97/0x100 [ 502.923271][T10423] __x64_sys_accept+0x79/0x90 [ 502.927988][T10423] do_syscall_64+0x4c/0xa0 [ 502.932480][T10423] ? clear_bhb_loop+0x60/0xb0 [ 502.937192][T10423] ? clear_bhb_loop+0x60/0xb0 [ 502.941908][T10423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.947836][T10423] RIP: 0033:0x7fa47399e559 [ 502.952309][T10423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.971975][T10423] RSP: 002b:00007fa474869028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 502.980421][T10423] RAX: ffffffffffffffda RBX: 00007fa473c25fa0 RCX: 00007fa47399e559 [ 502.988435][T10423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 502.996432][T10423] RBP: 00007fa473a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 503.004431][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.012440][T10423] R13: 00007fa473c26038 R14: 00007fa473c25fa0 R15: 00007ffe7eb0fa48 [ 503.020459][T10423] [ 503.125531][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.135449][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.143209][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.635185][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 504.687184][T10448] FAULT_INJECTION: forcing a failure. [ 504.687184][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 504.731356][T10448] CPU: 1 PID: 10448 Comm: syz.1.1763 Not tainted syzkaller #0 [ 504.738915][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 504.749040][T10448] Call Trace: [ 504.752357][T10448] [ 504.755330][T10448] dump_stack_lvl+0x188/0x24e [ 504.760077][T10448] ? show_regs_print_info+0x12/0x12 [ 504.765331][T10448] ? load_image+0x410/0x410 [ 504.769891][T10448] ? __might_sleep+0xd0/0xd0 [ 504.774569][T10448] ? __lock_acquire+0x7ea0/0x7ea0 [ 504.779650][T10448] should_fail_ex+0x390/0x4c0 [ 504.784387][T10448] should_failslab+0x5/0x20 [ 504.788934][T10448] slab_pre_alloc_hook+0x59/0x300 [ 504.794005][T10448] ? fuse_iget+0x746/0x960 [ 504.798514][T10448] kmem_cache_alloc_lru+0x49/0x2e0 [ 504.803709][T10448] ? __d_alloc+0x2e/0x6e0 [ 504.808072][T10448] __d_alloc+0x2e/0x6e0 [ 504.812261][T10448] d_make_root+0x46/0xd0 [ 504.816526][T10448] fuse_fill_super_common+0xa25/0x1110 [ 504.822029][T10448] fuse_fill_super+0x173/0x1f0 [ 504.826855][T10448] ? fuse_reconfigure+0xb0/0xb0 [ 504.831737][T10448] get_tree_nodev+0xb0/0x160 [ 504.836361][T10448] fuse_get_tree+0x2d7/0x4d0 [ 504.840988][T10448] vfs_get_tree+0x88/0x270 [ 504.845436][T10448] do_new_mount+0x247/0xa40 [ 504.849974][T10448] __se_sys_mount+0x2e3/0x3d0 [ 504.854687][T10448] ? __x64_sys_mount+0xc0/0xc0 [ 504.859496][T10448] ? lockdep_hardirqs_on+0x94/0x140 [ 504.864729][T10448] ? __x64_sys_mount+0x1c/0xc0 [ 504.869526][T10448] do_syscall_64+0x4c/0xa0 [ 504.873985][T10448] ? clear_bhb_loop+0x60/0xb0 [ 504.878691][T10448] ? clear_bhb_loop+0x60/0xb0 [ 504.883397][T10448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.889318][T10448] RIP: 0033:0x7f0a0ed9f7ca [ 504.893791][T10448] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.913448][T10448] RSP: 002b:00007f0a0fbd4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 504.921889][T10448] RAX: ffffffffffffffda RBX: 00007f0a0fbd4ee0 RCX: 00007f0a0ed9f7ca [ 504.929886][T10448] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000000 [ 504.937896][T10448] RBP: 0000200000000140 R08: 00007f0a0fbd4ee0 R09: 0000000001000000 [ 504.945893][T10448] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000180 [ 504.953888][T10448] R13: 00007f0a0fbd4ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 504.961921][T10448] [ 505.049150][T10453] 9pnet_fd: Insufficient options for proto=fd [ 505.072140][T10455] fuse: Invalid rootmode [ 505.534420][ T26] audit: type=1326 audit(1792305432.235:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.1.1770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x0 [ 505.694440][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.749014][T10490] fuse: Invalid rootmode [ 507.959291][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1773'. [ 508.023690][ T7336] kernel read not supported for file /video9 (pid: 7336 comm: kworker/0:10) [ 508.344338][T10503] FAULT_INJECTION: forcing a failure. [ 508.344338][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 508.394161][T10503] CPU: 0 PID: 10503 Comm: syz.2.1782 Not tainted syzkaller #0 [ 508.401724][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 508.411824][T10503] Call Trace: [ 508.415141][T10503] [ 508.418113][T10503] dump_stack_lvl+0x188/0x24e [ 508.422858][T10503] ? show_regs_print_info+0x12/0x12 [ 508.428120][T10503] ? load_image+0x410/0x410 [ 508.432674][T10503] ? __might_sleep+0xd0/0xd0 [ 508.437326][T10503] ? __lock_acquire+0x7ea0/0x7ea0 [ 508.442418][T10503] should_fail_ex+0x390/0x4c0 [ 508.447185][T10503] should_failslab+0x5/0x20 [ 508.451717][T10503] slab_pre_alloc_hook+0x59/0x300 [ 508.456773][T10503] ? memcg_list_lru_alloc+0x331/0xb00 [ 508.462251][T10503] __kmem_cache_alloc_node+0x4f/0x270 [ 508.467659][T10503] ? memcg_list_lru_alloc+0x331/0xb00 [ 508.473064][T10503] __kmalloc+0xa3/0x240 [ 508.477248][T10503] memcg_list_lru_alloc+0x331/0xb00 [ 508.482484][T10503] ? slab_pre_alloc_hook+0xb1/0x300 [ 508.487715][T10503] ? memcg_reparent_list_lrus+0x850/0x850 [ 508.493497][T10503] ? get_obj_cgroup_from_current+0xd0/0x280 [ 508.499512][T10503] ? get_obj_cgroup_from_current+0xd0/0x280 [ 508.505438][T10503] slab_pre_alloc_hook+0x2ad/0x300 [ 508.510607][T10503] ? slab_pre_alloc_hook+0xb1/0x300 [ 508.515836][T10503] ? fuse_get_tree_submount+0xe30/0xe30 [ 508.521419][T10503] kmem_cache_alloc_lru+0x49/0x2e0 [ 508.526560][T10503] ? fuse_alloc_inode+0x2a/0x220 [ 508.531534][T10503] ? fuse_get_tree_submount+0xe30/0xe30 [ 508.537145][T10503] ? fuse_init_inode+0x3a0/0x3a0 [ 508.542116][T10503] fuse_alloc_inode+0x2a/0x220 [ 508.546906][T10503] ? fuse_get_tree_submount+0xe30/0xe30 [ 508.552594][T10503] ? fuse_init_inode+0x3a0/0x3a0 [ 508.557554][T10503] iget5_locked+0x9e/0x260 [ 508.562006][T10503] ? fuse_inode_eq+0x70/0x70 [ 508.566628][T10503] fuse_iget+0x34e/0x960 [ 508.570902][T10503] ? _local_bh_enable+0xa0/0xa0 [ 508.575866][T10503] ? fuse_change_attributes+0x7c0/0x7c0 [ 508.581467][T10503] fuse_fill_super_common+0x9f6/0x1110 [ 508.587003][T10503] fuse_fill_super+0x173/0x1f0 [ 508.591805][T10503] ? fuse_reconfigure+0xb0/0xb0 [ 508.596700][T10503] get_tree_nodev+0xb0/0x160 [ 508.601351][T10503] fuse_get_tree+0x2d7/0x4d0 [ 508.605983][T10503] vfs_get_tree+0x88/0x270 [ 508.610443][T10503] do_new_mount+0x247/0xa40 [ 508.614996][T10503] __se_sys_mount+0x2e3/0x3d0 [ 508.619735][T10503] ? __x64_sys_mount+0xc0/0xc0 [ 508.624536][T10503] ? lockdep_hardirqs_on+0x94/0x140 [ 508.629774][T10503] ? __x64_sys_mount+0x1c/0xc0 [ 508.634577][T10503] do_syscall_64+0x4c/0xa0 [ 508.639027][T10503] ? clear_bhb_loop+0x60/0xb0 [ 508.643748][T10503] ? clear_bhb_loop+0x60/0xb0 [ 508.648512][T10503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.654450][T10503] RIP: 0033:0x7f5d13b9f7ca [ 508.658921][T10503] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.678647][T10503] RSP: 002b:00007f5d14a67e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.687188][T10503] RAX: ffffffffffffffda RBX: 00007f5d14a67ee0 RCX: 00007f5d13b9f7ca [ 508.695219][T10503] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000000 [ 508.703419][T10503] RBP: 0000200000000140 R08: 00007f5d14a67ee0 R09: 0000000001000000 [ 508.711438][T10503] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000180 [ 508.719443][T10503] R13: 00007f5d14a67ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 508.727477][T10503] [ 509.081563][T10510] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1785'. [ 509.377025][T10513] loop1: detected capacity change from 0 to 1024 [ 509.602228][T10513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 510.387735][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 510.572138][T10528] fuse: Bad value for 'rootmode' [ 510.762012][T10533] 9pnet_fd: Insufficient options for proto=fd [ 510.888449][T10531] loop2: detected capacity change from 0 to 8192 [ 511.164801][T10531] loop2: p2 p3 p4 [ 511.168912][T10531] loop2: p2 start 956301312 is beyond EOD, truncated [ 511.183371][T10531] loop2: p3 size 151049984 extends beyond EOD, truncated [ 512.002501][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 512.480112][T10504] udevd[10504]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 512.532600][T10566] udevd[10566]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 512.667171][ T4391] kernel read not supported for file /video9 (pid: 4391 comm: kworker/1:7) [ 512.719278][T10574] loop6: detected capacity change from 0 to 512 [ 512.824057][T10574] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1806: corrupted inode contents [ 512.886766][T10580] netlink: 'syz.2.1808': attribute type 12 has an invalid length. [ 512.895048][T10574] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 512.935596][T10580] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 512.987176][T10580] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1808'. [ 513.001970][T10574] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1806: corrupted inode contents [ 513.033701][T10574] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.1806: mark_inode_dirty error [ 513.107620][T10574] EXT4-fs (loop6): 1 orphan inode deleted [ 513.142565][T10580] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1808'. [ 513.153833][T10574] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 513.330153][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 513.434225][T10581] loop2: detected capacity change from 0 to 8192 [ 513.482070][T10581] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 513.546735][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.591584][T10580] FAT-fs (loop2): Filesystem has been set read-only [ 513.604239][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.639753][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.680645][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.731190][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.740070][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.898687][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.956585][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 513.996170][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 514.031157][T10580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 514.640276][ T4352] kernel read not supported for file /video9 (pid: 4352 comm: kworker/0:8) [ 515.282781][T10621] overlayfs: failed to resolve './bus': -2 [ 515.560613][T10624] device syzkaller0 entered promiscuous mode [ 515.849636][T10630] netlink: 'syz.6.1825': attribute type 12 has an invalid length. [ 515.881247][T10630] netlink: 'syz.6.1825': attribute type 29 has an invalid length. [ 515.889232][T10630] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1825'. [ 515.913591][ T26] audit: type=1326 audit(1792305442.615:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.2.1826" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d13b9e559 code=0x0 [ 515.975075][T10630] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1825'. [ 516.403030][T10635] loop6: detected capacity change from 0 to 8192 [ 516.500605][T10635] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 516.581435][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 516.623057][T10630] FAT-fs (loop6): Filesystem has been set read-only [ 516.676876][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 516.773198][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 516.871248][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 516.880500][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 517.172065][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 517.249096][ T4391] kernel read not supported for file /video9 (pid: 4391 comm: kworker/1:7) [ 517.343640][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 518.106408][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 518.181142][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 518.190035][T10630] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 519.423002][T10665] netlink: 'syz.2.1834': attribute type 21 has an invalid length. [ 520.055939][T10673] device syzkaller0 entered promiscuous mode [ 520.647413][ T4401] kernel read not supported for file /video9 (pid: 4401 comm: kworker/0:9) [ 522.017262][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'. [ 523.091499][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 523.300194][ T4391] kernel read not supported for file /video9 (pid: 4391 comm: kworker/1:7) [ 523.863896][ T4944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.876542][ T4944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.067877][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.028723][T10754] FAULT_INJECTION: forcing a failure. [ 525.028723][T10754] name failslab, interval 1, probability 0, space 0, times 0 [ 525.049187][T10754] CPU: 1 PID: 10754 Comm: syz.6.1861 Not tainted syzkaller #0 [ 525.056733][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 525.066844][T10754] Call Trace: [ 525.070166][T10754] [ 525.073139][T10754] dump_stack_lvl+0x188/0x24e [ 525.077884][T10754] ? show_regs_print_info+0x12/0x12 [ 525.083146][T10754] ? load_image+0x410/0x410 [ 525.087712][T10754] ? __might_sleep+0xd0/0xd0 [ 525.092366][T10754] ? __lock_acquire+0x7ea0/0x7ea0 [ 525.097464][T10754] should_fail_ex+0x390/0x4c0 [ 525.102211][T10754] should_failslab+0x5/0x20 [ 525.106793][T10754] slab_pre_alloc_hook+0x59/0x300 [ 525.111876][T10754] ? __kernfs_new_node+0xa6/0x7f0 [ 525.117039][T10754] ? rcu_is_watching+0x11/0xa0 [ 525.121950][T10754] kmem_cache_alloc+0x56/0x2f0 [ 525.126856][T10754] ? __kernfs_new_node+0xe1/0x7f0 [ 525.131985][T10754] __kernfs_new_node+0xe1/0x7f0 [ 525.136901][T10754] ? __lock_acquire+0x7ea0/0x7ea0 [ 525.141988][T10754] ? kernfs_new_node+0x250/0x250 [ 525.146992][T10754] ? sysfs_do_create_link_sd+0x75/0x110 [ 525.152602][T10754] ? up_write+0x1b6/0x410 [ 525.156990][T10754] ? __lock_acquire+0x7ea0/0x7ea0 [ 525.162077][T10754] kernfs_new_node+0x148/0x250 [ 525.167086][T10754] kernfs_create_link+0xa3/0x200 [ 525.172087][T10754] sysfs_do_create_link_sd+0x83/0x110 [ 525.177521][T10754] device_add+0x83b/0x1050 [ 525.182110][T10754] rfkill_register+0x16c/0x9b0 [ 525.187058][T10754] nfc_register_device+0x139/0x300 [ 525.192341][T10754] nci_register_device+0x89f/0x9f0 [ 525.197518][T10754] ? nci_free_device+0x90/0x90 [ 525.202346][T10754] ? nci_hci_allocate+0x1dd/0x2a0 [ 525.207493][T10754] ? nci_allocate_device+0x241/0x350 [ 525.212840][T10754] virtual_ncidev_open+0x55/0xc0 [ 525.217929][T10754] ? virtual_ncidev_ioctl+0x90/0x90 [ 525.223183][T10754] misc_open+0x31f/0x390 [ 525.227580][T10754] chrdev_open+0x585/0x5f0 [ 525.232054][T10754] ? cd_forget+0x160/0x160 [ 525.236558][T10754] ? fsnotify_perm+0x39b/0x550 [ 525.241380][T10754] ? cd_forget+0x160/0x160 [ 525.245877][T10754] do_dentry_open+0x7dd/0x10b0 [ 525.250778][T10754] path_openat+0x2674/0x2f10 [ 525.255443][T10754] ? kasan_set_track+0x60/0x70 [ 525.260270][T10754] ? verify_lock_unused+0x140/0x140 [ 525.265530][T10754] ? do_sys_openat2+0xdd/0x4f0 [ 525.270363][T10754] ? do_filp_open+0x420/0x420 [ 525.275118][T10754] do_filp_open+0x1ee/0x420 [ 525.279684][T10754] ? vfs_tmpfile+0x470/0x470 [ 525.284352][T10754] ? _raw_spin_unlock+0x24/0x40 [ 525.289290][T10754] ? alloc_fd+0x590/0x640 [ 525.293705][T10754] do_sys_openat2+0x14b/0x4f0 [ 525.298453][T10754] ? do_sys_open+0xe0/0xe0 [ 525.302930][T10754] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 525.308972][T10754] ? lock_chain_count+0x20/0x20 [ 525.313884][T10754] __x64_sys_openat+0x135/0x160 [ 525.318806][T10754] do_syscall_64+0x4c/0xa0 [ 525.323297][T10754] ? clear_bhb_loop+0x60/0xb0 [ 525.328029][T10754] ? clear_bhb_loop+0x60/0xb0 [ 525.332789][T10754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.338734][T10754] RIP: 0033:0x7fa47399e559 [ 525.343202][T10754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.362873][T10754] RSP: 002b:00007fa474869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.371343][T10754] RAX: ffffffffffffffda RBX: 00007fa473c25fa0 RCX: 00007fa47399e559 [ 525.379393][T10754] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 525.387426][T10754] RBP: 00007fa473a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 525.395446][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.403471][T10754] R13: 00007fa473c26038 R14: 00007fa473c25fa0 R15: 00007ffe7eb0fa48 [ 525.411507][T10754] [ 526.301777][ T22] kernel read not supported for file /video9 (pid: 22 comm: kworker/1:0) [ 526.513748][T10781] FAULT_INJECTION: forcing a failure. [ 526.513748][T10781] name failslab, interval 1, probability 0, space 0, times 0 [ 526.562995][T10781] CPU: 1 PID: 10781 Comm: syz.6.1869 Not tainted syzkaller #0 [ 526.570586][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 526.580693][T10781] Call Trace: [ 526.584025][T10781] [ 526.586996][T10781] dump_stack_lvl+0x188/0x24e [ 526.591736][T10781] ? show_regs_print_info+0x12/0x12 [ 526.596989][T10781] ? load_image+0x410/0x410 [ 526.601543][T10781] ? __might_sleep+0xd0/0xd0 [ 526.606189][T10781] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.611279][T10781] should_fail_ex+0x390/0x4c0 [ 526.616021][T10781] should_failslab+0x5/0x20 [ 526.620593][T10781] slab_pre_alloc_hook+0x59/0x300 [ 526.625675][T10781] ? kobject_uevent_env+0x278/0x890 [ 526.631008][T10781] __kmem_cache_alloc_node+0x4f/0x270 [ 526.636419][T10781] ? up_write+0x1b6/0x410 [ 526.640784][T10781] ? kobject_uevent_env+0x278/0x890 [ 526.646018][T10781] kmalloc_trace+0x26/0xe0 [ 526.650463][T10781] kobject_uevent_env+0x278/0x890 [ 526.655536][T10781] __kobject_del+0xd1/0x2e0 [ 526.660076][T10781] kobject_put+0x22f/0x450 [ 526.664532][T10781] net_rx_queue_update_kobjects+0x457/0x4d0 [ 526.670548][T10781] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 526.676428][T10781] __tun_detach+0xc79/0x1590 [ 526.681107][T10781] tun_chr_close+0x109/0x1b0 [ 526.685784][T10781] ? tun_chr_open+0x4d0/0x4d0 [ 526.690500][T10781] __fput+0x20a/0x8b0 [ 526.694519][T10781] task_work_run+0x1d0/0x260 [ 526.699214][T10781] ? task_work_cancel+0x220/0x220 [ 526.704272][T10781] ? exit_to_user_mode_loop+0x3b/0x110 [ 526.709800][T10781] exit_to_user_mode_loop+0xe6/0x110 [ 526.715121][T10781] exit_to_user_mode_prepare+0xee/0x180 [ 526.720708][T10781] syscall_exit_to_user_mode+0x16/0x40 [ 526.726199][T10781] do_syscall_64+0x58/0xa0 [ 526.730652][T10781] ? clear_bhb_loop+0x60/0xb0 [ 526.735352][T10781] ? clear_bhb_loop+0x60/0xb0 [ 526.740072][T10781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.745998][T10781] RIP: 0033:0x7fa47399e559 [ 526.750440][T10781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.770068][T10781] RSP: 002b:00007fa474869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 526.778505][T10781] RAX: 0000000000000000 RBX: 00007fa473c25fa0 RCX: 00007fa47399e559 [ 526.786509][T10781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 526.794501][T10781] RBP: 00007fa473a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 526.802493][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.810483][T10781] R13: 00007fa473c26038 R14: 00007fa473c25fa0 R15: 00007ffe7eb0fa48 [ 526.818486][T10781] [ 528.282509][T10801] netlink: 'syz.6.1875': attribute type 12 has an invalid length. [ 528.290411][T10801] netlink: 'syz.6.1875': attribute type 29 has an invalid length. [ 528.373457][T10801] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1875'. [ 528.402133][T10801] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1875'. [ 528.722385][T10799] loop6: detected capacity change from 0 to 8192 [ 528.754355][T10799] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.848851][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 528.887011][T10799] FAT-fs (loop6): Filesystem has been set read-only [ 528.908585][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 528.948334][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 528.979259][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.031428][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.073179][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.088249][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 529.131212][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.201625][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.210950][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.268329][T10799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 529.561699][ T26] audit: type=1800 audit(1792305456.235:48): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1875" name="file2" dev="loop6" ino=1048679 res=0 errno=0 [ 532.616075][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 532.625938][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.633525][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.909051][T10858] loop6: detected capacity change from 0 to 512 [ 533.058239][T10858] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1895: corrupted inode contents [ 533.081987][T10858] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 533.091758][T10858] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1895: corrupted inode contents [ 533.144938][T10858] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.1895: mark_inode_dirty error [ 533.169344][T10856] loop5: detected capacity change from 0 to 8192 [ 533.207433][T10858] EXT4-fs (loop6): 1 orphan inode deleted [ 533.219451][T10856] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 533.236385][T10858] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 533.260459][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.337893][T10856] FAT-fs (loop5): Filesystem has been set read-only [ 533.378862][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.429208][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.453445][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 533.470265][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.510233][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.561144][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.601977][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.631132][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.660601][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.698664][T10856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 533.779438][ T26] audit: type=1800 audit(1792305460.475:49): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1894" name="file2" dev="loop5" ino=1048680 res=0 errno=0 [ 535.076457][T10882] loop6: detected capacity change from 0 to 512 [ 535.214332][T10882] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 535.466981][T10882] EXT4-fs (loop6): 1 truncate cleaned up [ 536.182616][T10882] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 537.266860][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 537.492221][T10911] netlink: 'syz.5.1910': attribute type 21 has an invalid length. [ 538.196296][T10916] netlink: 'syz.2.1911': attribute type 12 has an invalid length. [ 538.251173][T10916] netlink: 'syz.2.1911': attribute type 29 has an invalid length. [ 538.259108][T10916] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1911'. [ 538.285408][T10916] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1911'. [ 538.328506][ T4391] lo speed is unknown, defaulting to 1000 [ 539.354820][T10926] FAULT_INJECTION: forcing a failure. [ 539.354820][T10926] name failslab, interval 1, probability 0, space 0, times 0 [ 539.379016][T10926] CPU: 0 PID: 10926 Comm: syz.5.1913 Not tainted syzkaller #0 [ 539.386583][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 539.396672][T10926] Call Trace: [ 539.399980][T10926] [ 539.402939][T10926] dump_stack_lvl+0x188/0x24e [ 539.407681][T10926] ? show_regs_print_info+0x12/0x12 [ 539.412925][T10926] ? load_image+0x410/0x410 [ 539.417480][T10926] ? __might_sleep+0xd0/0xd0 [ 539.422154][T10926] ? __lock_acquire+0x7ea0/0x7ea0 [ 539.427233][T10926] should_fail_ex+0x390/0x4c0 [ 539.431955][T10926] should_failslab+0x5/0x20 [ 539.436498][T10926] slab_pre_alloc_hook+0x59/0x300 [ 539.441558][T10926] ? kobject_uevent_env+0x278/0x890 [ 539.446805][T10926] __kmem_cache_alloc_node+0x4f/0x270 [ 539.452208][T10926] ? up_write+0x1b6/0x410 [ 539.456573][T10926] ? kobject_uevent_env+0x278/0x890 [ 539.461806][T10926] kmalloc_trace+0x26/0xe0 [ 539.466254][T10926] kobject_uevent_env+0x278/0x890 [ 539.471348][T10926] __kobject_del+0xd1/0x2e0 [ 539.475897][T10926] kobject_put+0x22f/0x450 [ 539.480357][T10926] net_rx_queue_update_kobjects+0x457/0x4d0 [ 539.486290][T10926] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 539.492136][T10926] __tun_detach+0xc79/0x1590 [ 539.496771][T10926] tun_chr_close+0x109/0x1b0 [ 539.501408][T10926] ? tun_chr_open+0x4d0/0x4d0 [ 539.506125][T10926] __fput+0x20a/0x8b0 [ 539.510150][T10926] task_work_run+0x1d0/0x260 [ 539.514780][T10926] ? task_work_cancel+0x220/0x220 [ 539.519847][T10926] ? exit_to_user_mode_loop+0x3b/0x110 [ 539.525356][T10926] exit_to_user_mode_loop+0xe6/0x110 [ 539.530723][T10926] exit_to_user_mode_prepare+0xee/0x180 [ 539.536332][T10926] syscall_exit_to_user_mode+0x16/0x40 [ 539.541854][T10926] do_syscall_64+0x58/0xa0 [ 539.546319][T10926] ? clear_bhb_loop+0x60/0xb0 [ 539.551026][T10926] ? clear_bhb_loop+0x60/0xb0 [ 539.555741][T10926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.561671][T10926] RIP: 0033:0x7fce8179e559 [ 539.566111][T10926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.585752][T10926] RSP: 002b:00007fce825d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 539.594198][T10926] RAX: 0000000000000000 RBX: 00007fce81a25fa0 RCX: 00007fce8179e559 [ 539.602200][T10926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 539.610225][T10926] RBP: 00007fce81835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 539.618226][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.626230][T10926] R13: 00007fce81a26038 R14: 00007fce81a25fa0 R15: 00007ffde3a77358 [ 539.634250][T10926] [ 539.652992][T10916] loop2: detected capacity change from 0 to 8192 [ 539.732630][T10916] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 539.914764][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 539.993935][T10916] FAT-fs (loop2): Filesystem has been set read-only [ 541.182162][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 542.171500][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 542.180363][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 542.189956][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 543.161743][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 543.179118][T10944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 543.188015][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 543.331386][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 543.394121][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 543.634687][T10916] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 544.076926][ T26] audit: type=1800 audit(1792305470.775:50): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1911" name="file2" dev="loop2" ino=1048681 res=0 errno=0 [ 544.494689][T10959] FAULT_INJECTION: forcing a failure. [ 544.494689][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 544.578785][T10959] CPU: 1 PID: 10959 Comm: syz.6.1925 Not tainted syzkaller #0 [ 544.586338][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 544.596451][T10959] Call Trace: [ 544.599774][T10959] [ 544.602748][T10959] dump_stack_lvl+0x188/0x24e [ 544.607483][T10959] ? show_regs_print_info+0x12/0x12 [ 544.612769][T10959] ? load_image+0x410/0x410 [ 544.617331][T10959] ? __might_sleep+0xd0/0xd0 [ 544.621971][T10959] ? __lock_acquire+0x7ea0/0x7ea0 [ 544.627067][T10959] should_fail_ex+0x390/0x4c0 [ 544.631811][T10959] should_failslab+0x5/0x20 [ 544.636357][T10959] slab_pre_alloc_hook+0x59/0x300 [ 544.641463][T10959] ? lockdep_softirqs_off+0x430/0x430 [ 544.646906][T10959] kmem_cache_alloc+0x56/0x2f0 [ 544.651738][T10959] ? security_inode_alloc+0x30/0x110 [ 544.657202][T10959] security_inode_alloc+0x30/0x110 [ 544.662368][T10959] inode_init_always+0x910/0xc90 [ 544.667366][T10959] new_inode_pseudo+0x91/0x1c0 [ 544.672188][T10959] new_inode+0x25/0x1d0 [ 544.676397][T10959] ? vsprintf+0x30/0x30 [ 544.680652][T10959] fuse_ctl_add_dentry+0x91/0x470 [ 544.685729][T10959] fuse_ctl_add_conn+0x1a0/0x370 [ 544.690745][T10959] ? mutex_lock_nested+0x10/0x10 [ 544.695861][T10959] ? fuse_inode_init_once+0x20/0x20 [ 544.701112][T10959] ? do_raw_spin_unlock+0x11d/0x230 [ 544.706357][T10959] ? _raw_spin_unlock+0x24/0x40 [ 544.711247][T10959] fuse_fill_super_common+0xaf5/0x1110 [ 544.716752][T10959] fuse_fill_super+0x173/0x1f0 [ 544.721541][T10959] ? fuse_reconfigure+0xb0/0xb0 [ 544.726423][T10959] get_tree_nodev+0xb0/0x160 [ 544.731050][T10959] fuse_get_tree+0x2d7/0x4d0 [ 544.735685][T10959] vfs_get_tree+0x88/0x270 [ 544.740132][T10959] do_new_mount+0x247/0xa40 [ 544.744671][T10959] __se_sys_mount+0x2e3/0x3d0 [ 544.749381][T10959] ? __x64_sys_mount+0xc0/0xc0 [ 544.754200][T10959] ? lockdep_hardirqs_on+0x94/0x140 [ 544.759451][T10959] ? __x64_sys_mount+0x1c/0xc0 [ 544.764293][T10959] do_syscall_64+0x4c/0xa0 [ 544.768747][T10959] ? clear_bhb_loop+0x60/0xb0 [ 544.773452][T10959] ? clear_bhb_loop+0x60/0xb0 [ 544.778159][T10959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.784087][T10959] RIP: 0033:0x7fa47399f7ca [ 544.788529][T10959] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.808170][T10959] RSP: 002b:00007fa474868e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.816617][T10959] RAX: ffffffffffffffda RBX: 00007fa474868ee0 RCX: 00007fa47399f7ca [ 544.824620][T10959] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000000 [ 544.832616][T10959] RBP: 0000200000000140 R08: 00007fa474868ee0 R09: 0000000001000000 [ 544.840631][T10959] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000180 [ 544.848625][T10959] R13: 00007fa474868ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 544.856646][T10959] [ 545.370945][T10965] netlink: 'syz.1.1924': attribute type 21 has an invalid length. [ 547.277249][T10975] loop1: detected capacity change from 0 to 8192 [ 548.095522][T10991] netlink: 'syz.2.1933': attribute type 12 has an invalid length. [ 548.171899][T10991] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 548.179806][T10991] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1933'. [ 548.434738][T10991] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1933'. [ 551.179920][ T7336] lo speed is unknown, defaulting to 1000 [ 551.917179][T11012] loop6: detected capacity change from 0 to 512 [ 552.015401][T11012] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1937: corrupted inode contents [ 552.037716][T10994] loop2: detected capacity change from 0 to 8192 [ 552.051719][T11012] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 552.083914][T11012] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1937: corrupted inode contents [ 552.142152][T10994] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.177263][T11012] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.1937: mark_inode_dirty error [ 552.261801][T11012] EXT4-fs (loop6): 1 orphan inode deleted [ 552.267729][T11012] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 552.340502][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 553.277263][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 557.214482][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1960'. [ 558.062590][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1964'. [ 558.137475][T11101] fuse: Unknown parameter '0x0000000000000004' [ 558.145866][T11099] FAULT_INJECTION: forcing a failure. [ 558.145866][T11099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.197193][T11099] CPU: 0 PID: 11099 Comm: syz.5.1966 Not tainted syzkaller #0 [ 558.204749][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 558.214881][T11099] Call Trace: [ 558.218208][T11099] [ 558.221177][T11099] dump_stack_lvl+0x188/0x24e [ 558.225910][T11099] ? show_regs_print_info+0x12/0x12 [ 558.231177][T11099] ? load_image+0x410/0x410 [ 558.235736][T11099] ? __lock_acquire+0x7ea0/0x7ea0 [ 558.240824][T11099] should_fail_ex+0x390/0x4c0 [ 558.245565][T11099] prepare_alloc_pages+0x1e1/0x5b0 [ 558.250847][T11099] __alloc_pages+0x130/0x4f0 [ 558.255506][T11099] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 558.261313][T11099] ? zone_statistics+0x170/0x170 [ 558.266321][T11099] ? __rwlock_init+0x140/0x140 [ 558.271141][T11099] ? do_raw_spin_unlock+0x11d/0x230 [ 558.276409][T11099] __get_free_pages+0x8/0x30 [ 558.281105][T11099] kasan_populate_vmalloc_pte+0x31/0xf0 [ 558.286717][T11099] ? __apply_to_page_range+0x97b/0xd10 [ 558.292231][T11099] __apply_to_page_range+0x98d/0xd10 [ 558.297587][T11099] ? kasan_populate_vmalloc+0x70/0x70 [ 558.303019][T11099] alloc_vmap_area+0x179f/0x18d0 [ 558.308042][T11099] ? vm_map_ram+0xab0/0xab0 [ 558.312645][T11099] ? rcu_is_watching+0x11/0xa0 [ 558.317477][T11099] __get_vm_area_node+0x158/0x330 [ 558.322579][T11099] ? __kasan_kmalloc+0x8e/0xa0 [ 558.327405][T11099] ? __vb2_queue_alloc+0x78f/0x1410 [ 558.332745][T11099] __vmalloc_node_range+0x357/0x1380 [ 558.338089][T11099] ? vb2_vmalloc_alloc+0xec/0x330 [ 558.343213][T11099] ? free_vm_area+0x50/0x50 [ 558.347781][T11099] vmalloc_user+0x70/0x80 [ 558.352163][T11099] ? vb2_vmalloc_alloc+0xec/0x330 [ 558.357246][T11099] vb2_vmalloc_alloc+0xec/0x330 [ 558.362157][T11099] ? __copy_timestamp+0x1f0/0x1f0 [ 558.367236][T11099] __vb2_queue_alloc+0x78f/0x1410 [ 558.372354][T11099] vb2_core_reqbufs+0x9ff/0x10e0 [ 558.377363][T11099] ? vb2_verify_memory_type+0x570/0x570 [ 558.382992][T11099] ? do_vfs_ioctl+0x1be3/0x1d40 [ 558.387914][T11099] v4l2_m2m_ioctl_reqbufs+0xd9/0x1c0 [ 558.393344][T11099] __video_do_ioctl+0xa10/0xe40 [ 558.398262][T11099] ? __lock_acquire+0x7ea0/0x7ea0 [ 558.403355][T11099] ? video_ioctl2+0x30/0x30 [ 558.407917][T11099] ? __might_fault+0xc2/0x120 [ 558.412668][T11099] ? __might_fault+0xa6/0x120 [ 558.417431][T11099] video_usercopy+0x987/0x1450 [ 558.422283][T11099] ? video_ioctl2+0x30/0x30 [ 558.426845][T11099] ? v4l_printk_ioctl+0x130/0x130 [ 558.431966][T11099] v4l2_ioctl+0x183/0x1d0 [ 558.436358][T11099] ? v4l2_poll+0x2b0/0x2b0 [ 558.440856][T11099] __se_sys_ioctl+0xfa/0x170 [ 558.445555][T11099] do_syscall_64+0x4c/0xa0 [ 558.450027][T11099] ? clear_bhb_loop+0x60/0xb0 [ 558.454762][T11099] ? clear_bhb_loop+0x60/0xb0 [ 558.459503][T11099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.465460][T11099] RIP: 0033:0x7fce8179e559 [ 558.469925][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.489710][T11099] RSP: 002b:00007fce825d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.498178][T11099] RAX: ffffffffffffffda RBX: 00007fce81a25fa0 RCX: 00007fce8179e559 [ 558.506198][T11099] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 558.514221][T11099] RBP: 00007fce81835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 558.522240][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.530259][T11099] R13: 00007fce81a26038 R14: 00007fce81a25fa0 R15: 00007ffde3a77358 [ 558.538303][T11099] [ 558.627572][T11099] syz.5.1966: vmalloc error: size 3690496, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 558.657065][T11099] CPU: 0 PID: 11099 Comm: syz.5.1966 Not tainted syzkaller #0 [ 558.664610][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 558.674707][T11099] Call Trace: [ 558.678027][T11099] [ 558.680996][T11099] dump_stack_lvl+0x188/0x24e [ 558.685740][T11099] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 558.692298][T11099] ? show_regs_print_info+0x12/0x12 [ 558.697553][T11099] ? load_image+0x410/0x410 [ 558.702115][T11099] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 558.708595][T11099] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 558.715158][T11099] warn_alloc+0x242/0x330 [ 558.719548][T11099] ? slab_free_freelist_hook+0x133/0x1b0 [ 558.725243][T11099] ? zone_watermark_ok_safe+0x270/0x270 [ 558.730860][T11099] ? __get_vm_area_node+0x16d/0x330 [ 558.736146][T11099] ? __get_vm_area_node+0x16d/0x330 [ 558.741409][T11099] ? __kasan_kmalloc+0x8e/0xa0 [ 558.746317][T11099] ? __vb2_queue_alloc+0x78f/0x1410 [ 558.751580][T11099] __vmalloc_node_range+0x37c/0x1380 [ 558.756967][T11099] ? free_vm_area+0x50/0x50 [ 558.761565][T11099] vmalloc_user+0x70/0x80 [ 558.765959][T11099] ? vb2_vmalloc_alloc+0xec/0x330 [ 558.771057][T11099] vb2_vmalloc_alloc+0xec/0x330 [ 558.775970][T11099] ? __copy_timestamp+0x1f0/0x1f0 [ 558.781049][T11099] __vb2_queue_alloc+0x78f/0x1410 [ 558.786143][T11099] vb2_core_reqbufs+0x9ff/0x10e0 [ 558.791136][T11099] ? vb2_verify_memory_type+0x570/0x570 [ 558.796727][T11099] ? do_vfs_ioctl+0x1be3/0x1d40 [ 558.801754][T11099] v4l2_m2m_ioctl_reqbufs+0xd9/0x1c0 [ 558.807130][T11099] __video_do_ioctl+0xa10/0xe40 [ 558.812052][T11099] ? __lock_acquire+0x7ea0/0x7ea0 [ 558.817144][T11099] ? video_ioctl2+0x30/0x30 [ 558.821707][T11099] ? __might_fault+0xc2/0x120 [ 558.826439][T11099] ? __might_fault+0xa6/0x120 [ 558.831168][T11099] video_usercopy+0x987/0x1450 [ 558.835997][T11099] ? video_ioctl2+0x30/0x30 [ 558.840558][T11099] ? v4l_printk_ioctl+0x130/0x130 [ 558.845673][T11099] v4l2_ioctl+0x183/0x1d0 [ 558.850060][T11099] ? v4l2_poll+0x2b0/0x2b0 [ 558.854526][T11099] __se_sys_ioctl+0xfa/0x170 [ 558.859179][T11099] do_syscall_64+0x4c/0xa0 [ 558.863651][T11099] ? clear_bhb_loop+0x60/0xb0 [ 558.868426][T11099] ? clear_bhb_loop+0x60/0xb0 [ 558.873168][T11099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.879110][T11099] RIP: 0033:0x7fce8179e559 [ 558.883578][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.903238][T11099] RSP: 002b:00007fce825d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.911695][T11099] RAX: ffffffffffffffda RBX: 00007fce81a25fa0 RCX: 00007fce8179e559 [ 558.919706][T11099] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 558.927715][T11099] RBP: 00007fce81835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 558.935726][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.943737][T11099] R13: 00007fce81a26038 R14: 00007fce81a25fa0 R15: 00007ffde3a77358 [ 558.951766][T11099] [ 558.956711][T11099] Mem-Info: [ 558.960442][T11099] active_anon:43694 inactive_anon:0 isolated_anon:0 [ 558.960442][T11099] active_file:18122 inactive_file:40762 isolated_file:0 [ 558.960442][T11099] unevictable:768 dirty:149 writeback:0 [ 558.960442][T11099] slab_reclaimable:21709 slab_unreclaimable:101248 [ 558.960442][T11099] mapped:32456 shmem:38178 pagetables:769 [ 558.960442][T11099] sec_pagetables:0 bounce:0 [ 558.960442][T11099] kernel_misc_reclaimable:0 [ 558.960442][T11099] free:1271144 free_pcp:11118 free_cma:0 [ 559.020338][T11099] Node 0 active_anon:174776kB inactive_anon:0kB active_file:72488kB inactive_file:162840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129824kB dirty:596kB writeback:0kB shmem:151176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11160kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no [ 559.062347][T11099] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 559.093314][T11099] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.581428][T11099] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 559.587363][T11099] Node 0 DMA32 free:1178212kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:174776kB inactive_anon:0kB active_file:72488kB inactive_file:162840kB unevictable:1536kB writepending:696kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:22816kB local_pcp:18656kB free_cma:0kB [ 559.697665][T11099] lowmem_reserve[]: 0 0 1 1 1 [ 559.702598][T11099] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.731695][T11099] lowmem_reserve[]: 0 0 0 0 0 [ 559.736548][T11099] Node 1 Normal free:3891004kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21968kB local_pcp:10080kB free_cma:0kB [ 559.776123][T11099] lowmem_reserve[]: 0 0 0 0 0 [ 559.835570][T11099] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 559.848716][T11099] Node 0 DMA32: 47*4kB (U) 319*8kB (UM) 1153*16kB (UM) 983*32kB (UM) 311*64kB (UME) 196*128kB (UME) 21*256kB (UM) 26*512kB (UM) 9*1024kB (UM) 2*2048kB (ME) 256*4096kB (UM) = 1178212kB [ 559.867687][T11099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 559.879550][T11099] Node 1 Normal: 237*4kB (UME) 59*8kB (UME) 29*16kB (UE) 31*32kB (UME) 14*64kB (UME) 11*128kB (UME) 7*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3891004kB [ 559.928781][T11099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 559.949769][T11099] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.012192][T11099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.022989][T11099] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.032470][T11099] 97062 total pagecache pages [ 560.037475][T11099] 0 pages in swap cache [ 560.041800][T11099] Free swap = 124472kB [ 560.048636][T11099] Total swap = 124996kB [ 560.053079][T11099] 2097051 pages RAM [ 560.056937][T11099] 0 pages HighMem/MovableOnly [ 560.062102][T11099] 419192 pages reserved [ 560.066318][T11099] 0 pages cma reserved [ 561.121605][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 561.135590][T11143] fuse: Unknown parameter '0x0000000000000004' [ 561.307465][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 561.932390][T11166] overlayfs: failed to clone upperpath [ 562.344975][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.352262][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.971538][T11176] fuse: Unknown parameter '0x0000000000000004' [ 563.078298][T11184] loop5: detected capacity change from 0 to 512 [ 563.195227][T11186] netlink: 'syz.6.1995': attribute type 21 has an invalid length. [ 563.532200][T11184] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1997: corrupted inode contents [ 563.803448][T11184] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 563.819427][T11188] tipc: Enabling of bearer rejected, failed to enable media [ 563.861738][T11184] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1997: corrupted inode contents [ 563.931210][T11184] EXT4-fs error (device loop5): ext4_evict_inode:329: inode #15: comm syz.5.1997: mark_inode_dirty error [ 563.952319][T11184] EXT4-fs (loop5): 1 orphan inode deleted [ 563.961198][T11184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 564.146300][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 565.597941][T11224] fuse: Unknown parameter '0x0000000000000004' [ 565.670375][T11229] loop6: detected capacity change from 0 to 512 [ 565.893178][T11229] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.2012: corrupted inode contents [ 565.912990][T11229] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 566.181636][T11229] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.2012: corrupted inode contents [ 566.197875][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 566.350282][T11229] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.2012: mark_inode_dirty error [ 566.497481][T11229] EXT4-fs (loop6): 1 orphan inode deleted [ 566.510177][T11229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 566.864216][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 568.296993][T11268] fuse: Unknown parameter 'fd0x0000000000000004' [ 568.374997][T11271] netlink: 'syz.6.2026': attribute type 2 has an invalid length. [ 568.407247][T11271] netlink: 'syz.6.2026': attribute type 8 has an invalid length. [ 568.431264][T11271] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2026'. [ 568.475484][T11273] netlink: 'syz.6.2026': attribute type 2 has an invalid length. [ 568.491201][T11273] netlink: 'syz.6.2026': attribute type 8 has an invalid length. [ 568.542966][T11273] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2026'. [ 568.693986][T11283] capability: warning: `syz.5.2031' uses 32-bit capabilities (legacy support in use) [ 568.815551][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 568.947782][T11296] input: syz0 as /devices/virtual/input/input7 [ 569.096310][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 570.105168][ T26] audit: type=1326 audit(1792305496.805:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.194673][ T26] audit: type=1326 audit(1792305496.835:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.281744][ T26] audit: type=1326 audit(1792305496.835:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.362537][ T26] audit: type=1326 audit(1792305496.885:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.418343][ T26] audit: type=1326 audit(1792305496.885:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.465104][ T26] audit: type=1326 audit(1792305496.885:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.505650][T11323] fuse: Unknown parameter 'fd0x0000000000000004' [ 570.506716][ T26] audit: type=1326 audit(1792305496.885:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.555945][ T26] audit: type=1326 audit(1792305496.885:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 570.760406][ T26] audit: type=1326 audit(1792305496.885:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 571.011134][T11329] netlink: 'syz.0.2042': attribute type 21 has an invalid length. [ 571.304046][ T26] audit: type=1326 audit(1792305496.885:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.1.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0ed9e559 code=0x7ffc0000 [ 571.936908][ T49] Bluetooth: Wrong link type (-57) [ 573.030851][T11354] loop5: detected capacity change from 0 to 8192 [ 573.105245][T11354] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 573.126844][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.156752][T11354] FAT-fs (loop5): Filesystem has been set read-only [ 573.194945][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.227553][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.255444][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.278515][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.331197][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.390939][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.451211][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.490632][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 573.522309][T11354] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 574.889345][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2061'. [ 574.972921][T11379] ip_tables: iptables: counters copy to user failed while replacing table [ 575.365587][T11389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 576.760659][T11408] netlink: 'syz.0.2068': attribute type 21 has an invalid length. [ 577.424378][T11411] netlink: 'syz.6.2071': attribute type 2 has an invalid length. [ 577.474961][T11411] netlink: 'syz.6.2071': attribute type 8 has an invalid length. [ 577.483575][T11411] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2071'. [ 577.547388][T11411] netlink: 'syz.6.2071': attribute type 2 has an invalid length. [ 577.555327][T11411] netlink: 'syz.6.2071': attribute type 8 has an invalid length. [ 577.563872][T11411] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2071'. [ 578.719046][T11446] netlink: 'syz.5.2083': attribute type 21 has an invalid length. [ 579.221503][ T49] Bluetooth: Wrong link type (-57) [ 580.325528][T11477] loop5: detected capacity change from 0 to 128 [ 580.416022][T11477] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 580.505294][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 580.668790][T11477] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.062837][T11488] netlink: 'syz.0.2097': attribute type 21 has an invalid length. [ 581.163357][T11477] syz.5.2095 (pid 11477) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 582.096546][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 582.391684][T11508] loop1: detected capacity change from 0 to 512 [ 582.518099][T11508] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.2102: corrupted inode contents [ 582.553922][T11508] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 582.578013][T11508] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.2102: corrupted inode contents [ 582.591886][T11508] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.2102: mark_inode_dirty error [ 582.668477][T11508] EXT4-fs (loop1): 1 orphan inode deleted [ 582.691187][T11508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 582.864661][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 582.882303][ T49] Bluetooth: Wrong link type (-57) [ 583.156631][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2110'. [ 583.452750][T11543] netlink: 'syz.0.2116': attribute type 12 has an invalid length. [ 583.460982][T11543] netlink: 'syz.0.2116': attribute type 29 has an invalid length. [ 583.469359][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 583.479290][T11543] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2116'. [ 583.493361][T11543] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2116'. [ 583.981675][T11557] netlink: 'syz.6.2122': attribute type 21 has an invalid length. [ 585.038931][T11579] 9pnet_fd: Insufficient options for proto=fd [ 585.128736][T11577] loop6: detected capacity change from 0 to 4096 [ 585.190344][T11577] ext4: Unknown parameter 'noacl' [ 586.611196][ T49] Bluetooth: Wrong link type (-57) [ 586.814184][T11601] netlink: 'syz.2.2138': attribute type 21 has an invalid length. [ 588.015224][ T7336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 588.055658][ T7336] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 588.297191][T11638] loop1: detected capacity change from 0 to 128 [ 588.376844][T11638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 588.387169][T11631] fido_id[11631]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 588.422354][T11638] ext4 filesystem being mounted at /468/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 589.416843][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 589.473095][ T49] Bluetooth: Wrong link type (-57) [ 589.478420][ T49] Bluetooth: hci2: link tx timeout [ 589.484466][ T49] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 589.928322][T11668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.960345][T11670] netlink: 'syz.0.2163': attribute type 12 has an invalid length. [ 589.970129][T11670] netlink: 'syz.0.2163': attribute type 29 has an invalid length. [ 589.980587][T11670] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2163'. [ 589.989982][T11670] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2163'. [ 590.007716][T11668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.079914][T11668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.461143][ T4401] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 590.641260][ T4401] usb 2-1: device descriptor read/64, error -71 [ 590.690214][T11684] netlink: 'syz.0.2168': attribute type 2 has an invalid length. [ 590.708884][T11684] netlink: 'syz.0.2168': attribute type 8 has an invalid length. [ 590.721423][T11684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2168'. [ 590.826206][T11690] loop5: detected capacity change from 0 to 512 [ 590.901279][T11690] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.2170: corrupted inode contents [ 590.930147][T11690] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 590.931445][ T4401] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 590.961184][T11690] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.2170: corrupted inode contents [ 591.000526][T11690] EXT4-fs error (device loop5): ext4_evict_inode:329: inode #15: comm syz.5.2170: mark_inode_dirty error [ 591.016533][T11690] EXT4-fs (loop5): 1 orphan inode deleted [ 591.022654][T11690] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 591.069128][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 591.151337][ T4401] usb 2-1: device descriptor read/64, error -71 [ 591.364408][ T4401] usb usb2-port1: attempt power cycle [ 591.815653][T11712] lo speed is unknown, defaulting to 1000 [ 591.821648][T11712] lo speed is unknown, defaulting to 1000 [ 591.829042][T11712] lo speed is unknown, defaulting to 1000 [ 591.838450][T11712] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 591.854315][T11712] infiniband s!0: RDMA CMA: cma_listen_on_dev, error -98 [ 591.879623][T11712] lo speed is unknown, defaulting to 1000 [ 591.886714][T11712] lo speed is unknown, defaulting to 1000 [ 591.893738][T11712] lo speed is unknown, defaulting to 1000 [ 591.900503][T11712] lo speed is unknown, defaulting to 1000 [ 591.907386][T11712] lo speed is unknown, defaulting to 1000 [ 592.161411][ T4401] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 592.206700][ T4401] usb 2-1: device descriptor read/8, error -71 [ 592.215624][ T49] Bluetooth: Wrong link type (-57) [ 592.685684][ T4401] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 592.801356][ T4401] usb 2-1: device descriptor read/8, error -71 [ 592.921322][ T4401] usb usb2-port1: unable to enumerate USB device [ 594.425683][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 597.559965][T11784] loop2: detected capacity change from 0 to 1024 [ 597.652148][T11784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 599.333662][T11806] FAULT_INJECTION: forcing a failure. [ 599.333662][T11806] name failslab, interval 1, probability 0, space 0, times 0 [ 599.387275][T11806] CPU: 1 PID: 11806 Comm: syz.5.2202 Not tainted syzkaller #0 [ 599.395027][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 599.405124][T11806] Call Trace: [ 599.408435][T11806] [ 599.411401][T11806] dump_stack_lvl+0x188/0x24e [ 599.416136][T11806] ? show_regs_print_info+0x12/0x12 [ 599.421384][T11806] ? load_image+0x410/0x410 [ 599.425927][T11806] ? __might_sleep+0xd0/0xd0 [ 599.430558][T11806] ? __lock_acquire+0x7ea0/0x7ea0 [ 599.435664][T11806] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 599.441719][T11806] should_fail_ex+0x390/0x4c0 [ 599.446454][T11806] should_failslab+0x5/0x20 [ 599.451028][T11806] slab_pre_alloc_hook+0x59/0x300 [ 599.456106][T11806] kmem_cache_alloc_node+0x5a/0x310 [ 599.461351][T11806] ? __alloc_skb+0xf9/0x7d0 [ 599.465914][T11806] __alloc_skb+0xf9/0x7d0 [ 599.470313][T11806] mpls_netconf_notify_devconf+0x46/0xf0 [ 599.476089][T11806] mpls_dev_notify+0x54b/0x770 [ 599.480921][T11806] ? raw_notifier_call_chain+0xa3/0x160 [ 599.486546][T11806] raw_notifier_call_chain+0xcb/0x160 [ 599.491977][T11806] unregister_netdevice_many_notify+0x10b1/0x1990 [ 599.498476][T11806] ? unregister_netdevice_many+0x20/0x20 [ 599.504155][T11806] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 599.510193][T11806] ? __lock_acquire+0x7ea0/0x7ea0 [ 599.515275][T11806] ? lock_chain_count+0x20/0x20 [ 599.520178][T11806] ? queue_delayed_work_on+0x110/0x1f0 [ 599.525689][T11806] ? lockdep_hardirqs_on+0x94/0x140 [ 599.530944][T11806] unregister_netdevice_queue+0x2e5/0x330 [ 599.536710][T11806] ? delayed_work_timer_fn+0x80/0x80 [ 599.542048][T11806] ? list_netdevice+0x640/0x640 [ 599.546946][T11806] ? linkwatch_urgent_event+0x5f/0x3c0 [ 599.552631][T11806] __tun_detach+0xdb7/0x1590 [ 599.557279][T11806] tun_chr_close+0x109/0x1b0 [ 599.561915][T11806] ? tun_chr_open+0x4d0/0x4d0 [ 599.566651][T11806] __fput+0x20a/0x8b0 [ 599.570691][T11806] task_work_run+0x1d0/0x260 [ 599.575332][T11806] ? task_work_cancel+0x220/0x220 [ 599.580411][T11806] ? exit_to_user_mode_loop+0x3b/0x110 [ 599.585924][T11806] exit_to_user_mode_loop+0xe6/0x110 [ 599.591264][T11806] exit_to_user_mode_prepare+0xee/0x180 [ 599.596860][T11806] syscall_exit_to_user_mode+0x16/0x40 [ 599.602366][T11806] do_syscall_64+0x58/0xa0 [ 599.606826][T11806] ? clear_bhb_loop+0x60/0xb0 [ 599.611630][T11806] ? clear_bhb_loop+0x60/0xb0 [ 599.616356][T11806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.622299][T11806] RIP: 0033:0x7fce8179e559 [ 599.626752][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.646427][T11806] RSP: 002b:00007fce825d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 599.654893][T11806] RAX: 0000000000000000 RBX: 00007fce81a25fa0 RCX: 00007fce8179e559 [ 599.662909][T11806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 599.670923][T11806] RBP: 00007fce81835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 599.678930][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.686937][T11806] R13: 00007fce81a26038 R14: 00007fce81a25fa0 R15: 00007ffde3a77358 [ 599.694964][T11806] [ 601.472485][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2214'. [ 603.460010][T11872] FAULT_INJECTION: forcing a failure. [ 603.460010][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 603.512320][T11872] CPU: 0 PID: 11872 Comm: syz.6.2220 Not tainted syzkaller #0 [ 603.519979][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 603.530100][T11872] Call Trace: [ 603.533437][T11872] [ 603.536429][T11872] dump_stack_lvl+0x188/0x24e [ 603.541182][T11872] ? show_regs_print_info+0x12/0x12 [ 603.546454][T11872] ? load_image+0x410/0x410 [ 603.551019][T11872] ? __might_sleep+0xd0/0xd0 [ 603.555665][T11872] ? __lock_acquire+0x7ea0/0x7ea0 [ 603.560807][T11872] should_fail_ex+0x390/0x4c0 [ 603.565578][T11872] should_failslab+0x5/0x20 [ 603.570144][T11872] slab_pre_alloc_hook+0x59/0x300 [ 603.575231][T11872] ? kobject_get_path+0xac/0x220 [ 603.580249][T11872] __kmem_cache_alloc_node+0x4f/0x270 [ 603.585695][T11872] ? kobject_get_path+0xac/0x220 [ 603.590699][T11872] __kmalloc+0xa3/0x240 [ 603.594914][T11872] kobject_get_path+0xac/0x220 [ 603.599765][T11872] kobject_uevent_env+0x28d/0x890 [ 603.604874][T11872] __kobject_del+0xd1/0x2e0 [ 603.609462][T11872] kobject_put+0x22f/0x450 [ 603.613953][T11872] net_rx_queue_update_kobjects+0x457/0x4d0 [ 603.619925][T11872] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 603.625812][T11872] __tun_detach+0xc79/0x1590 [ 603.630486][T11872] tun_chr_close+0x109/0x1b0 [ 603.635155][T11872] ? tun_chr_open+0x4d0/0x4d0 [ 603.639899][T11872] __fput+0x20a/0x8b0 [ 603.643951][T11872] task_work_run+0x1d0/0x260 [ 603.648615][T11872] ? task_work_cancel+0x220/0x220 [ 603.653717][T11872] ? exit_to_user_mode_loop+0x3b/0x110 [ 603.659255][T11872] exit_to_user_mode_loop+0xe6/0x110 [ 603.664627][T11872] exit_to_user_mode_prepare+0xee/0x180 [ 603.670250][T11872] syscall_exit_to_user_mode+0x16/0x40 [ 603.675790][T11872] do_syscall_64+0x58/0xa0 [ 603.680275][T11872] ? clear_bhb_loop+0x60/0xb0 [ 603.685016][T11872] ? clear_bhb_loop+0x60/0xb0 [ 603.689762][T11872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.695721][T11872] RIP: 0033:0x7fa47399e559 [ 603.700189][T11872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.719865][T11872] RSP: 002b:00007fa474869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 603.728356][T11872] RAX: 0000000000000000 RBX: 00007fa473c25fa0 RCX: 00007fa47399e559 [ 603.736409][T11872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 603.744445][T11872] RBP: 00007fa473a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 603.752480][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.760513][T11872] R13: 00007fa473c26038 R14: 00007fa473c25fa0 R15: 00007ffe7eb0fa48 [ 603.768574][T11872] [ 603.771718][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.073970][T11879] loop6: detected capacity change from 0 to 128 [ 604.320294][T11879] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 604.359173][T11879] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 605.342086][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 605.438785][T11891] loop6: detected capacity change from 0 to 512 [ 605.500678][T11891] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 605.534869][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 605.571738][T11891] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.963453][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 606.281691][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 606.310062][T11909] loop1: detected capacity change from 0 to 2048 [ 606.403263][T11909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 606.421399][T11909] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.544198][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 607.081986][T11933] tcpci: probe of 0-0002 failed with error -5 [ 607.103178][T11933] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 607.976745][T11936] misc userio: The device must be registered before sending interrupts [ 608.017677][T11942] loop6: detected capacity change from 0 to 256 [ 608.032029][T11936] misc userio: The device must be registered before sending interrupts [ 608.059668][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 608.101312][T11936] misc userio: The device must be registered before sending interrupts [ 610.368587][T11985] misc userio: The device must be registered before sending interrupts [ 610.395833][T11985] misc userio: The device must be registered before sending interrupts [ 610.418676][T11985] misc userio: The device must be registered before sending interrupts [ 610.540816][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2256'. [ 610.918371][T11996] loop6: detected capacity change from 0 to 256 [ 611.228127][T12004] netlink: 'syz.2.2263': attribute type 2 has an invalid length. [ 611.236357][T12004] netlink: 'syz.2.2263': attribute type 8 has an invalid length. [ 611.244248][T12004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2263'. [ 611.803427][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 611.803443][ T26] audit: type=1326 audit(1792305538.505:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.5.2262" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce8179e559 code=0x0 [ 612.611482][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 612.944481][T12043] netlink: 'syz.5.2273': attribute type 21 has an invalid length. [ 613.789155][T12045] FAULT_INJECTION: forcing a failure. [ 613.789155][T12045] name failslab, interval 1, probability 0, space 0, times 0 [ 613.815860][T12045] CPU: 0 PID: 12045 Comm: syz.1.2277 Not tainted syzkaller #0 [ 613.823502][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 613.833696][T12045] Call Trace: [ 613.837016][T12045] [ 613.839988][T12045] dump_stack_lvl+0x188/0x24e [ 613.844735][T12045] ? show_regs_print_info+0x12/0x12 [ 613.849997][T12045] ? load_image+0x410/0x410 [ 613.854543][T12045] ? __might_sleep+0xd0/0xd0 [ 613.859190][T12045] ? __lock_acquire+0x7ea0/0x7ea0 [ 613.864279][T12045] should_fail_ex+0x390/0x4c0 [ 613.869021][T12045] should_failslab+0x5/0x20 [ 613.873606][T12045] slab_pre_alloc_hook+0x59/0x300 [ 613.878684][T12045] ? kobject_get_path+0xac/0x220 [ 613.883693][T12045] __kmem_cache_alloc_node+0x4f/0x270 [ 613.889131][T12045] ? kobject_get_path+0xac/0x220 [ 613.894123][T12045] __kmalloc+0xa3/0x240 [ 613.898332][T12045] kobject_get_path+0xac/0x220 [ 613.903175][T12045] kobject_uevent_env+0x28d/0x890 [ 613.908276][T12045] __kobject_del+0xd1/0x2e0 [ 613.912837][T12045] kobject_put+0x22f/0x450 [ 613.917320][T12045] net_rx_queue_update_kobjects+0x457/0x4d0 [ 613.923270][T12045] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 613.929138][T12045] __tun_detach+0xc79/0x1590 [ 613.933804][T12045] tun_chr_close+0x109/0x1b0 [ 613.938483][T12045] ? tun_chr_open+0x4d0/0x4d0 [ 613.943220][T12045] __fput+0x20a/0x8b0 [ 613.947264][T12045] task_work_run+0x1d0/0x260 [ 613.951929][T12045] ? task_work_cancel+0x220/0x220 [ 613.957023][T12045] ? exit_to_user_mode_loop+0x3b/0x110 [ 613.962550][T12045] exit_to_user_mode_loop+0xe6/0x110 [ 613.967896][T12045] exit_to_user_mode_prepare+0xee/0x180 [ 613.973508][T12045] syscall_exit_to_user_mode+0x16/0x40 [ 613.979032][T12045] do_syscall_64+0x58/0xa0 [ 613.983500][T12045] ? clear_bhb_loop+0x60/0xb0 [ 613.988231][T12045] ? clear_bhb_loop+0x60/0xb0 [ 613.992968][T12045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.998918][T12045] RIP: 0033:0x7f0a0ed9e559 [ 614.003378][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.023042][T12045] RSP: 002b:00007f0a0fbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 614.031511][T12045] RAX: 0000000000000000 RBX: 00007f0a0f025fa0 RCX: 00007f0a0ed9e559 [ 614.039536][T12045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 614.047731][T12045] RBP: 00007f0a0ee35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 614.055789][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.063813][T12045] R13: 00007f0a0f026038 R14: 00007f0a0f025fa0 R15: 00007fff94ce1728 [ 614.071855][T12045] [ 614.074933][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.163265][T12053] 9pnet_fd: Insufficient options for proto=fd [ 614.258116][T12051] netlink: 'syz.0.2276': attribute type 2 has an invalid length. [ 614.269900][T12051] netlink: 'syz.0.2276': attribute type 8 has an invalid length. [ 614.280428][T12051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2276'. [ 615.540464][T12078] tipc: Enabling of bearer rejected, already enabled [ 615.796640][T12086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 616.547581][T12096] loop5: detected capacity change from 0 to 512 [ 616.613739][T12097] loop1: detected capacity change from 0 to 512 [ 616.628331][T12097] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 616.743662][T11113] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 616.754918][T12102] netlink: 'syz.0.2293': attribute type 2 has an invalid length. [ 616.820977][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 616.892180][T12102] netlink: 'syz.0.2293': attribute type 8 has an invalid length. [ 616.988506][T12096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 617.043000][T12102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2293'. [ 617.398263][T12096] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.650654][T12108] binder_alloc: 12107: binder_alloc_buf, no vma [ 617.698904][T12112] 9pnet_fd: Insufficient options for proto=fd [ 617.727900][T12110] FAULT_INJECTION: forcing a failure. [ 617.727900][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 617.748250][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 617.785543][T12110] CPU: 0 PID: 12110 Comm: syz.2.2296 Not tainted syzkaller #0 [ 617.793129][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 617.803237][T12110] Call Trace: [ 617.806554][T12110] [ 617.809518][T12110] dump_stack_lvl+0x188/0x24e [ 617.814281][T12110] ? show_regs_print_info+0x12/0x12 [ 617.819530][T12110] ? load_image+0x410/0x410 [ 617.824081][T12110] ? __might_sleep+0xd0/0xd0 [ 617.828720][T12110] ? __lock_acquire+0x7ea0/0x7ea0 [ 617.833801][T12110] should_fail_ex+0x390/0x4c0 [ 617.838545][T12110] should_failslab+0x5/0x20 [ 617.843093][T12110] slab_pre_alloc_hook+0x59/0x300 [ 617.848167][T12110] ? kobject_get_path+0xac/0x220 [ 617.853166][T12110] __kmem_cache_alloc_node+0x4f/0x270 [ 617.858588][T12110] ? kobject_get_path+0xac/0x220 [ 617.863576][T12110] __kmalloc+0xa3/0x240 [ 617.867779][T12110] kobject_get_path+0xac/0x220 [ 617.872598][T12110] kobject_uevent_env+0x28d/0x890 [ 617.877703][T12110] __kobject_del+0xd1/0x2e0 [ 617.882265][T12110] kobject_put+0x22f/0x450 [ 617.886744][T12110] net_rx_queue_update_kobjects+0x457/0x4d0 [ 617.892690][T12110] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 617.898548][T12110] __tun_detach+0xc79/0x1590 [ 617.903232][T12110] tun_chr_close+0x109/0x1b0 [ 617.907891][T12110] ? tun_chr_open+0x4d0/0x4d0 [ 617.912624][T12110] __fput+0x20a/0x8b0 [ 617.916665][T12110] task_work_run+0x1d0/0x260 [ 617.921310][T12110] ? task_work_cancel+0x220/0x220 [ 617.926400][T12110] ? exit_to_user_mode_loop+0x3b/0x110 [ 617.931930][T12110] exit_to_user_mode_loop+0xe6/0x110 [ 617.937295][T12110] exit_to_user_mode_prepare+0xee/0x180 [ 617.942900][T12110] syscall_exit_to_user_mode+0x16/0x40 [ 617.948413][T12110] do_syscall_64+0x58/0xa0 [ 617.952886][T12110] ? clear_bhb_loop+0x60/0xb0 [ 617.957607][T12110] ? clear_bhb_loop+0x60/0xb0 [ 617.962337][T12110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.968281][T12110] RIP: 0033:0x7f5d13b9e559 [ 617.972742][T12110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.992402][T12110] RSP: 002b:00007f5d14a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 618.000893][T12110] RAX: 0000000000000000 RBX: 00007f5d13e25fa0 RCX: 00007f5d13b9e559 [ 618.008998][T12110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 618.017015][T12110] RBP: 00007f5d13c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 618.025044][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.033061][T12110] R13: 00007f5d13e26038 R14: 00007f5d13e25fa0 R15: 00007ffd544568c8 [ 618.041095][T12110] [ 618.718280][T12120] loop6: detected capacity change from 0 to 128 [ 618.819890][T12120] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 618.891523][T12120] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 619.833283][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 621.268982][T12157] FAULT_INJECTION: forcing a failure. [ 621.268982][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 621.290384][T12157] CPU: 0 PID: 12157 Comm: syz.1.2308 Not tainted syzkaller #0 [ 621.297936][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.308042][T12157] Call Trace: [ 621.311364][T12157] [ 621.314363][T12157] dump_stack_lvl+0x188/0x24e [ 621.319121][T12157] ? show_regs_print_info+0x12/0x12 [ 621.324376][T12157] ? load_image+0x410/0x410 [ 621.328926][T12157] ? __might_sleep+0xd0/0xd0 [ 621.333564][T12157] ? __lock_acquire+0x7ea0/0x7ea0 [ 621.338650][T12157] should_fail_ex+0x390/0x4c0 [ 621.343413][T12157] should_failslab+0x5/0x20 [ 621.347959][T12157] slab_pre_alloc_hook+0x59/0x300 [ 621.353039][T12157] kmem_cache_alloc_lru+0x49/0x2e0 [ 621.358199][T12157] ? new_inode_pseudo+0x7e/0x1c0 [ 621.363185][T12157] ? d_alloc_name+0x27b/0x320 [ 621.367923][T12157] new_inode_pseudo+0x7e/0x1c0 [ 621.372737][T12157] new_inode+0x25/0x1d0 [ 621.376946][T12157] fuse_ctl_add_dentry+0x91/0x470 [ 621.382031][T12157] fuse_ctl_add_conn+0x239/0x370 [ 621.387015][T12157] ? mutex_lock_nested+0x10/0x10 [ 621.392014][T12157] ? fuse_inode_init_once+0x20/0x20 [ 621.397269][T12157] ? do_raw_spin_unlock+0x11d/0x230 [ 621.402521][T12157] ? _raw_spin_unlock+0x24/0x40 [ 621.407420][T12157] fuse_fill_super_common+0xaf5/0x1110 [ 621.412948][T12157] fuse_fill_super+0x173/0x1f0 [ 621.417783][T12157] ? fuse_reconfigure+0xb0/0xb0 [ 621.422679][T12157] get_tree_nodev+0xb0/0x160 [ 621.427346][T12157] fuse_get_tree+0x2d7/0x4d0 [ 621.431990][T12157] vfs_get_tree+0x88/0x270 [ 621.436454][T12157] do_new_mount+0x247/0xa40 [ 621.441039][T12157] __se_sys_mount+0x2e3/0x3d0 [ 621.445769][T12157] ? __x64_sys_mount+0xc0/0xc0 [ 621.450578][T12157] ? lockdep_hardirqs_on+0x94/0x140 [ 621.455851][T12157] ? __x64_sys_mount+0x1c/0xc0 [ 621.460660][T12157] do_syscall_64+0x4c/0xa0 [ 621.465124][T12157] ? clear_bhb_loop+0x60/0xb0 [ 621.469843][T12157] ? clear_bhb_loop+0x60/0xb0 [ 621.474569][T12157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.480507][T12157] RIP: 0033:0x7f0a0ed9f7ca [ 621.484974][T12157] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.504634][T12157] RSP: 002b:00007f0a0fbd4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.513121][T12157] RAX: ffffffffffffffda RBX: 00007f0a0fbd4ee0 RCX: 00007f0a0ed9f7ca [ 621.521130][T12157] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000000 [ 621.529140][T12157] RBP: 0000200000000140 R08: 00007f0a0fbd4ee0 R09: 0000000001000000 [ 621.537150][T12157] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000180 [ 621.545170][T12157] R13: 00007f0a0fbd4ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 621.553207][T12157] [ 621.558391][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 621.633614][T12163] binder_alloc: 12161: binder_alloc_buf, no vma [ 623.261723][ T49] Bluetooth: Wrong link type (-57) [ 623.267074][ T49] Bluetooth: hci2: link tx timeout [ 623.272347][ T49] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 623.395347][T12193] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 623.742695][T12202] netlink: 'syz.2.2322': attribute type 2 has an invalid length. [ 623.893706][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.923809][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.219285][T12202] netlink: 'syz.2.2322': attribute type 8 has an invalid length. [ 624.656951][T12202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2322'. [ 624.902391][T12210] binder_alloc: 12209: binder_alloc_buf, no vma [ 625.177259][T12217] FAULT_INJECTION: forcing a failure. [ 625.177259][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 625.200162][T12217] CPU: 1 PID: 12217 Comm: syz.2.2326 Not tainted syzkaller #0 [ 625.207769][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 625.217870][T12217] Call Trace: [ 625.221191][T12217] [ 625.224157][T12217] dump_stack_lvl+0x188/0x24e [ 625.228914][T12217] ? show_regs_print_info+0x12/0x12 [ 625.234232][T12217] ? load_image+0x410/0x410 [ 625.238783][T12217] ? __might_sleep+0xd0/0xd0 [ 625.243429][T12217] ? __lock_acquire+0x7ea0/0x7ea0 [ 625.248523][T12217] should_fail_ex+0x390/0x4c0 [ 625.253286][T12217] should_failslab+0x5/0x20 [ 625.257852][T12217] slab_pre_alloc_hook+0x59/0x300 [ 625.262968][T12217] ? kobject_get_path+0xac/0x220 [ 625.267980][T12217] __kmem_cache_alloc_node+0x4f/0x270 [ 625.273424][T12217] ? kobject_get_path+0xac/0x220 [ 625.278433][T12217] __kmalloc+0xa3/0x240 [ 625.282647][T12217] kobject_get_path+0xac/0x220 [ 625.287514][T12217] kobject_uevent_env+0x28d/0x890 [ 625.292651][T12217] __kobject_del+0xd1/0x2e0 [ 625.297214][T12217] kobject_put+0x22f/0x450 [ 625.301691][T12217] net_rx_queue_update_kobjects+0x457/0x4d0 [ 625.307687][T12217] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 625.313556][T12217] __tun_detach+0xc79/0x1590 [ 625.318209][T12217] tun_chr_close+0x109/0x1b0 [ 625.322862][T12217] ? tun_chr_open+0x4d0/0x4d0 [ 625.327607][T12217] __fput+0x20a/0x8b0 [ 625.331652][T12217] task_work_run+0x1d0/0x260 [ 625.336304][T12217] ? task_work_cancel+0x220/0x220 [ 625.341390][T12217] ? exit_to_user_mode_loop+0x3b/0x110 [ 625.346914][T12217] exit_to_user_mode_loop+0xe6/0x110 [ 625.352295][T12217] exit_to_user_mode_prepare+0xee/0x180 [ 625.357892][T12217] syscall_exit_to_user_mode+0x16/0x40 [ 625.363408][T12217] do_syscall_64+0x58/0xa0 [ 625.367886][T12217] ? clear_bhb_loop+0x60/0xb0 [ 625.372602][T12217] ? clear_bhb_loop+0x60/0xb0 [ 625.377308][T12217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.383257][T12217] RIP: 0033:0x7f5d13b9e559 [ 625.387720][T12217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.407396][T12217] RSP: 002b:00007f5d14a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 625.416019][T12217] RAX: 0000000000000000 RBX: 00007f5d13e25fa0 RCX: 00007f5d13b9e559 [ 625.424050][T12217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 625.432065][T12217] RBP: 00007f5d13c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 625.440079][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.448091][T12217] R13: 00007f5d13e26038 R14: 00007f5d13e25fa0 R15: 00007ffd544568c8 [ 625.456130][T12217] [ 625.516299][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2325'. [ 626.109464][T12235] loop1: detected capacity change from 0 to 512 [ 626.472874][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2335'. [ 627.307053][T12274] loop6: detected capacity change from 0 to 1024 [ 627.613202][T12274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 628.709035][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 629.717960][ T6782] EXT4-fs (loop6): unmounting filesystem. [ 631.919735][T12325] loop2: detected capacity change from 0 to 4096 [ 631.927977][T12325] EXT4-fs: Ignoring removed orlov option [ 631.972197][T12325] EXT4-fs (loop2): Test dummy encryption mode enabled [ 632.003799][T12325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 632.974438][T12341] loop5: detected capacity change from 0 to 512 [ 633.097427][T12341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 633.201230][T12341] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.262304][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 633.582248][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 634.014924][T12376] netlink: 'syz.0.2369': attribute type 2 has an invalid length. [ 634.101317][T12376] netlink: 'syz.0.2369': attribute type 8 has an invalid length. [ 634.114281][T12376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2369'. [ 634.484442][T12386] loop2: detected capacity change from 0 to 256 [ 634.807526][T12393] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.816953][T12393] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.827071][T12393] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.835906][T12393] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.823211][T12404] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 636.408385][ T7336] lo speed is unknown, defaulting to 1000 [ 636.596874][T12412] loop2: detected capacity change from 0 to 1024 [ 636.818713][T12412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 637.408873][T12409] loop5: detected capacity change from 0 to 8192 [ 637.535899][T12409] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 637.693205][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 637.749315][T12409] FAT-fs (loop5): Filesystem has been set read-only [ 637.797241][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 637.875979][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 637.952287][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.014451][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.068961][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.127156][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.186964][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.255052][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.314298][T12409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 638.383469][ T26] audit: type=1800 audit(1792305565.085:76): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2380" name="file2" dev="loop5" ino=1048692 res=0 errno=0 [ 638.579917][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 640.062278][T12449] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 640.093170][T12449] netlink: 'syz.0.2392': attribute type 8 has an invalid length. [ 640.102720][T12453] Bluetooth: MGMT ver 1.22 [ 640.113508][T12449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2392'. [ 640.216263][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 640.410587][T12462] 9pnet_fd: Insufficient options for proto=fd [ 641.586201][T12472] netlink: 'syz.0.2397': attribute type 12 has an invalid length. [ 641.627397][T12472] netlink: 'syz.0.2397': attribute type 29 has an invalid length. [ 641.648532][T12472] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2397'. [ 641.694603][T12472] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2397'. [ 642.081865][T12467] loop2: detected capacity change from 0 to 1024 [ 642.301604][T12488] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 642.669053][T12467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 643.078739][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2403'. [ 643.550213][T12504] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 644.162999][T12508] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 644.206974][T12508] netlink: 'syz.1.2406': attribute type 8 has an invalid length. [ 644.234073][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2406'. [ 645.101224][ T4401] lo speed is unknown, defaulting to 1000 [ 645.515735][T12525] loop5: detected capacity change from 0 to 8192 [ 645.568368][T12525] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 645.609785][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.642870][T12525] FAT-fs (loop5): Filesystem has been set read-only [ 645.649921][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.685963][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.715315][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.749403][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.826076][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.884360][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.915571][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 645.980219][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 646.011175][T12525] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 646.874898][T12541] netlink: 'syz.0.2419': attribute type 2 has an invalid length. [ 646.919414][T12541] netlink: 'syz.0.2419': attribute type 8 has an invalid length. [ 646.941360][T12541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2419'. [ 647.367540][T12555] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 647.688132][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 647.827252][T12553] misc userio: Invalid payload size [ 647.844421][T12553] misc userio: No port type given on /dev/userio [ 647.931703][T12553] misc userio: The device must be registered before sending interrupts [ 647.971431][T12553] misc userio: The device must be registered before sending interrupts [ 648.012549][T12553] misc userio: The device must be registered before sending interrupts [ 648.429415][T12576] netlink: 'syz.5.2426': attribute type 21 has an invalid length. [ 649.277146][T12580] FAULT_INJECTION: forcing a failure. [ 649.277146][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 649.310336][T12580] CPU: 0 PID: 12580 Comm: syz.5.2429 Not tainted syzkaller #0 [ 649.317899][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.328007][T12580] Call Trace: [ 649.331335][T12580] [ 649.334309][T12580] dump_stack_lvl+0x188/0x24e [ 649.339083][T12580] ? show_regs_print_info+0x12/0x12 [ 649.344333][T12580] ? load_image+0x410/0x410 [ 649.348875][T12580] ? __might_sleep+0xd0/0xd0 [ 649.353500][T12580] ? __lock_acquire+0x7ea0/0x7ea0 [ 649.358568][T12580] should_fail_ex+0x390/0x4c0 [ 649.363296][T12580] should_failslab+0x5/0x20 [ 649.367837][T12580] slab_pre_alloc_hook+0x59/0x300 [ 649.372893][T12580] ? kobject_get_path+0xac/0x220 [ 649.377868][T12580] __kmem_cache_alloc_node+0x4f/0x270 [ 649.383381][T12580] ? kobject_get_path+0xac/0x220 [ 649.388371][T12580] __kmalloc+0xa3/0x240 [ 649.392584][T12580] kobject_get_path+0xac/0x220 [ 649.397406][T12580] kobject_uevent_env+0x28d/0x890 [ 649.402474][T12580] __kobject_del+0xd1/0x2e0 [ 649.407034][T12580] kobject_put+0x22f/0x450 [ 649.411490][T12580] net_rx_queue_update_kobjects+0x457/0x4d0 [ 649.417422][T12580] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 649.423260][T12580] __tun_detach+0xc79/0x1590 [ 649.427894][T12580] tun_chr_close+0x109/0x1b0 [ 649.432523][T12580] ? tun_chr_open+0x4d0/0x4d0 [ 649.437231][T12580] __fput+0x20a/0x8b0 [ 649.441272][T12580] task_work_run+0x1d0/0x260 [ 649.445895][T12580] ? task_work_cancel+0x220/0x220 [ 649.450970][T12580] ? exit_to_user_mode_loop+0x3b/0x110 [ 649.456476][T12580] exit_to_user_mode_loop+0xe6/0x110 [ 649.461806][T12580] exit_to_user_mode_prepare+0xee/0x180 [ 649.467423][T12580] syscall_exit_to_user_mode+0x16/0x40 [ 649.472922][T12580] do_syscall_64+0x58/0xa0 [ 649.477368][T12580] ? clear_bhb_loop+0x60/0xb0 [ 649.482071][T12580] ? clear_bhb_loop+0x60/0xb0 [ 649.486781][T12580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.492725][T12580] RIP: 0033:0x7fce8179e559 [ 649.497167][T12580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.516806][T12580] RSP: 002b:00007fce825d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 649.525252][T12580] RAX: 0000000000000000 RBX: 00007fce81a25fa0 RCX: 00007fce8179e559 [ 649.533269][T12580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 649.541442][T12580] RBP: 00007fce81835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 649.549487][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.557496][T12580] R13: 00007fce81a26038 R14: 00007fce81a25fa0 R15: 00007ffde3a77358 [ 649.565509][T12580] [ 650.441855][T12587] loop1: detected capacity change from 0 to 4096 [ 650.460679][T12587] EXT4-fs (loop1): Test dummy encryption mode enabled [ 651.717469][T12597] overlayfs: failed to clone upperpath [ 652.191458][T12587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 652.310428][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 652.360627][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 652.407628][T12606] misc userio: Invalid payload size [ 652.431675][T12606] misc userio: No port type given on /dev/userio [ 652.447258][T12606] misc userio: The device must be registered before sending interrupts [ 652.477404][T12606] misc userio: The device must be registered before sending interrupts [ 652.491385][T12606] misc userio: The device must be registered before sending interrupts [ 652.505588][T12610] loop2: detected capacity change from 0 to 128 [ 652.544978][T12610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 652.571519][T12610] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 653.123305][T12618] netlink: 'syz.6.2440': attribute type 21 has an invalid length. [ 653.494434][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 653.585748][T12629] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 653.866565][T12628] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36431 - 0 [ 653.927937][T12628] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36431 - 0 [ 654.076710][T12636] loop2: detected capacity change from 0 to 4096 [ 654.084580][T12636] EXT4-fs: Ignoring removed orlov option [ 654.103634][T12628] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36431 - 0 [ 654.112591][T12628] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36431 - 0 [ 654.121573][T12628] device geneve2 entered promiscuous mode [ 654.154806][T12636] EXT4-fs (loop2): Test dummy encryption mode enabled [ 654.183163][T12636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 654.286737][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 654.318261][T12644] FAULT_INJECTION: forcing a failure. [ 654.318261][T12644] name failslab, interval 1, probability 0, space 0, times 0 [ 654.337813][T12644] CPU: 1 PID: 12644 Comm: syz.5.2446 Not tainted syzkaller #0 [ 654.345345][T12644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 654.355461][T12644] Call Trace: [ 654.358783][T12644] [ 654.361756][T12644] dump_stack_lvl+0x188/0x24e [ 654.366495][T12644] ? show_regs_print_info+0x12/0x12 [ 654.371759][T12644] ? load_image+0x410/0x410 [ 654.376311][T12644] ? __might_sleep+0xd0/0xd0 [ 654.380950][T12644] ? __lock_acquire+0x7ea0/0x7ea0 [ 654.386035][T12644] should_fail_ex+0x390/0x4c0 [ 654.390784][T12644] should_failslab+0x5/0x20 [ 654.395348][T12644] slab_pre_alloc_hook+0x59/0x300 [ 654.400423][T12644] ? sctp_endpoint_new+0x82/0xa00 [ 654.405664][T12644] __kmem_cache_alloc_node+0x4f/0x270 [ 654.411093][T12644] ? sctp_endpoint_new+0x82/0xa00 [ 654.416181][T12644] kmalloc_trace+0x26/0xe0 [ 654.420673][T12644] sctp_endpoint_new+0x82/0xa00 [ 654.425591][T12644] ? __raw_spin_lock_init+0x41/0x100 [ 654.430934][T12644] sctp_init_sock+0x95b/0x11c0 [ 654.435760][T12644] inet_create+0xc25/0xf60 [ 654.440282][T12644] __sock_create+0x49a/0x940 [ 654.444936][T12644] __sys_socket+0xc4/0x190 [ 654.449406][T12644] __x64_sys_socket+0x76/0x80 [ 654.454148][T12644] do_syscall_64+0x4c/0xa0 [ 654.458622][T12644] ? clear_bhb_loop+0x60/0xb0 [ 654.463353][T12644] ? clear_bhb_loop+0x60/0xb0 [ 654.468114][T12644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.474061][T12644] RIP: 0033:0x7fce8179e559 [ 654.478522][T12644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.498179][T12644] RSP: 002b:00007fce825d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 654.506647][T12644] RAX: ffffffffffffffda RBX: 00007fce81a25fa0 RCX: 00007fce8179e559 [ 654.514664][T12644] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 654.522677][T12644] RBP: 00007fce81835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 654.530691][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.538720][T12644] R13: 00007fce81a26038 R14: 00007fce81a25fa0 R15: 00007ffde3a77358 [ 654.546759][T12644] [ 654.712636][T12643] FAULT_INJECTION: forcing a failure. [ 654.712636][T12643] name fail_futex, interval 1, probability 0, space 0, times 0 [ 654.743954][T12643] CPU: 1 PID: 12643 Comm: syz.6.2448 Not tainted syzkaller #0 [ 654.751527][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 654.761639][T12643] Call Trace: [ 654.764957][T12643] [ 654.767924][T12643] dump_stack_lvl+0x188/0x24e [ 654.772667][T12643] ? show_regs_print_info+0x12/0x12 [ 654.777933][T12643] ? load_image+0x410/0x410 [ 654.782486][T12643] ? get_user_pages_fast_only+0x40/0x40 [ 654.788087][T12643] should_fail_ex+0x390/0x4c0 [ 654.792823][T12643] get_futex_key+0x922/0x1000 [ 654.797650][T12643] ? futex_setup_timer+0xc0/0xc0 [ 654.802656][T12643] ? verify_lock_unused+0x140/0x140 [ 654.807939][T12643] futex_wake+0x123/0x4f0 [ 654.812421][T12643] ? futex_wake_mark+0x150/0x150 [ 654.817438][T12643] do_futex+0x2e2/0x320 [ 654.821644][T12643] ? __ia32_sys_get_robust_list+0x100/0x100 [ 654.827587][T12643] ? __might_fault+0xc2/0x120 [ 654.832292][T12643] mm_release+0x20a/0x330 [ 654.836662][T12643] ? exit_robust_list+0x2ce/0x2f0 [ 654.841719][T12643] ? exit_mm_release+0x30/0x30 [ 654.846502][T12643] ? lockdep_hardirqs_on+0x94/0x140 [ 654.851753][T12643] exit_mm+0xa0/0x350 [ 654.857175][T12643] ? sysctl_delayacct+0x220/0x220 [ 654.862342][T12643] ? do_exit+0x2570/0x2570 [ 654.866803][T12643] ? mm_trace_rss_stat+0xa7/0x250 [ 654.871868][T12643] ? sync_mm_rss+0x211/0x350 [ 654.876512][T12643] do_exit+0x958/0x2570 [ 654.880719][T12643] ? put_task_struct+0x80/0x80 [ 654.885526][T12643] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 654.891620][T12643] ? lock_chain_count+0x20/0x20 [ 654.896511][T12643] ? _raw_spin_lock_irq+0xb7/0xf0 [ 654.901613][T12643] do_group_exit+0x229/0x2e0 [ 654.906263][T12643] ? lockdep_hardirqs_on+0x94/0x140 [ 654.911509][T12643] get_signal+0x1259/0x1340 [ 654.916087][T12643] arch_do_signal_or_restart+0xc4/0x1310 [ 654.921885][T12643] ? do_futex+0x310/0x320 [ 654.926289][T12643] ? rcu_force_quiescent_state+0x220/0x220 [ 654.932149][T12643] ? get_sigframe_size+0x10/0x10 [ 654.937125][T12643] ? __ia32_sys_get_robust_list+0x100/0x100 [ 654.943138][T12643] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 654.949349][T12643] ? exit_to_user_mode_loop+0x3b/0x110 [ 654.954848][T12643] exit_to_user_mode_loop+0x70/0x110 [ 654.960171][T12643] exit_to_user_mode_prepare+0xee/0x180 [ 654.965759][T12643] syscall_exit_to_user_mode+0x16/0x40 [ 654.971253][T12643] do_syscall_64+0x58/0xa0 [ 654.975719][T12643] ? clear_bhb_loop+0x60/0xb0 [ 654.980424][T12643] ? clear_bhb_loop+0x60/0xb0 [ 654.985137][T12643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.991060][T12643] RIP: 0033:0x7fa47399e559 [ 654.995499][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.015133][T12643] RSP: 002b:00007fa4748690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 655.023571][T12643] RAX: fffffffffffffe00 RBX: 00007fa473c25fa8 RCX: 00007fa47399e559 [ 655.031565][T12643] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa473c25fa8 [ 655.039560][T12643] RBP: 00007fa473c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 655.047566][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.055563][T12643] R13: 00007fa473c26038 R14: 00007ffe7eb0f960 R15: 00007ffe7eb0fa48 [ 655.063570][T12643] [ 656.604772][T12666] loop5: detected capacity change from 0 to 1024 [ 656.720831][T12666] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 657.279924][T12673] netlink: 'syz.6.2455': attribute type 21 has an invalid length. [ 658.132663][T12680] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 658.797652][T12692] loop6: detected capacity change from 0 to 256 [ 659.541408][T12675] Bluetooth: hci1: command 0x1003 tx timeout [ 659.549805][ T49] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 659.851953][T12699] loop2: detected capacity change from 0 to 512 [ 659.947517][T12699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 659.978998][T12699] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.190353][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 660.753939][T12712] netlink: 'syz.2.2468': attribute type 21 has an invalid length. [ 661.483833][ T4391] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 662.290299][T12718] loop2: detected capacity change from 0 to 4096 [ 662.298132][T12718] EXT4-fs: Ignoring removed orlov option [ 662.331215][ T4391] usb 7-1: Using ep0 maxpacket: 32 [ 662.332171][T12718] EXT4-fs (loop2): Test dummy encryption mode enabled [ 662.363915][T12718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 662.374344][ T4391] usb 7-1: unable to get BOS descriptor or descriptor too short [ 662.393601][ T4391] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 662.421152][ T4391] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 662.429492][ T4391] usb 7-1: config 14 has no interface number 0 [ 662.471087][ T4391] usb 7-1: config 14 has no interface number 1 [ 662.477495][ T4391] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 662.528831][ T4391] usb 7-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 662.559910][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 662.566093][ T4391] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 662.611123][ T4391] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.661373][ T4391] usb 7-1: config 14 interface 57 has no altsetting 0 [ 662.668234][ T4391] usb 7-1: config 14 interface 228 has no altsetting 0 [ 662.720382][ T4391] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 662.751547][ T4391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.759705][ T4391] usb 7-1: Product: syz [ 662.766079][T12724] overlayfs: failed to clone upperpath [ 662.772691][ T4391] usb 7-1: Manufacturer: syz [ 662.777376][ T4391] usb 7-1: SerialNumber: syz [ 662.860438][T12726] 9pnet_fd: Insufficient options for proto=fd [ 663.847121][ T4391] legousbtower 7-1:14.57: interrupt endpoints not found [ 663.985830][ T4391] legousbtower 7-1:14.228: interrupt endpoints not found [ 664.408952][T12742] Bluetooth: MGMT ver 1.22 [ 664.469784][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 664.684876][T12748] misc userio: Invalid payload size [ 664.726354][T12748] misc userio: The device must be registered before sending interrupts [ 664.769302][T12748] misc userio: The device must be registered before sending interrupts [ 664.785604][T12748] misc userio: The device must be registered before sending interrupts [ 665.573987][ T4391] usb 7-1: USB disconnect, device number 2 [ 665.823473][T12761] loop2: detected capacity change from 0 to 512 [ 665.830606][T12760] loop5: detected capacity change from 0 to 4096 [ 665.838439][T12760] EXT4-fs: Ignoring removed orlov option [ 665.854279][T12760] EXT4-fs (loop5): Test dummy encryption mode enabled [ 665.895999][T12760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 665.956753][T12761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 666.069838][T12761] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.124150][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 666.223620][T12772] 9pnet_fd: Insufficient options for proto=fd [ 667.636113][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 667.890044][T12788] netlink: 'syz.0.2494': attribute type 2 has an invalid length. [ 667.928898][T12788] netlink: 'syz.0.2494': attribute type 8 has an invalid length. [ 667.959257][T12788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2494'. [ 668.868202][T12795] FAULT_INJECTION: forcing a failure. [ 668.868202][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 668.886922][T12795] CPU: 1 PID: 12795 Comm: syz.6.2506 Not tainted syzkaller #0 [ 668.894480][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 668.904582][T12795] Call Trace: [ 668.907895][T12795] [ 668.910860][T12795] dump_stack_lvl+0x188/0x24e [ 668.915599][T12795] ? show_regs_print_info+0x12/0x12 [ 668.920863][T12795] ? load_image+0x410/0x410 [ 668.925412][T12795] ? __might_sleep+0xd0/0xd0 [ 668.930044][T12795] ? __lock_acquire+0x7ea0/0x7ea0 [ 668.935164][T12795] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 668.941213][T12795] should_fail_ex+0x390/0x4c0 [ 668.945986][T12795] should_failslab+0x5/0x20 [ 668.950552][T12795] slab_pre_alloc_hook+0x59/0x300 [ 668.955637][T12795] kmem_cache_alloc_node+0x5a/0x310 [ 668.960897][T12795] ? __alloc_skb+0xf9/0x7d0 [ 668.965468][T12795] __alloc_skb+0xf9/0x7d0 [ 668.969846][T12795] mpls_netconf_notify_devconf+0x46/0xf0 [ 668.975563][T12795] mpls_dev_notify+0x54b/0x770 [ 668.980380][T12795] ? raw_notifier_call_chain+0xa3/0x160 [ 668.985985][T12795] raw_notifier_call_chain+0xcb/0x160 [ 668.991420][T12795] unregister_netdevice_many_notify+0x10b1/0x1990 [ 668.997902][T12795] ? unregister_netdevice_many+0x20/0x20 [ 669.003581][T12795] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 669.009621][T12795] ? __lock_acquire+0x7ea0/0x7ea0 [ 669.014704][T12795] ? lock_chain_count+0x20/0x20 [ 669.019632][T12795] ? queue_delayed_work_on+0x110/0x1f0 [ 669.025134][T12795] ? lockdep_hardirqs_on+0x94/0x140 [ 669.030398][T12795] unregister_netdevice_queue+0x2e5/0x330 [ 669.036149][T12795] ? delayed_work_timer_fn+0x80/0x80 [ 669.041467][T12795] ? list_netdevice+0x640/0x640 [ 669.046344][T12795] ? linkwatch_urgent_event+0x5f/0x3c0 [ 669.051841][T12795] __tun_detach+0xdb7/0x1590 [ 669.056468][T12795] tun_chr_close+0x109/0x1b0 [ 669.061094][T12795] ? tun_chr_open+0x4d0/0x4d0 [ 669.065806][T12795] __fput+0x20a/0x8b0 [ 669.069824][T12795] task_work_run+0x1d0/0x260 [ 669.074445][T12795] ? task_work_cancel+0x220/0x220 [ 669.079506][T12795] ? exit_to_user_mode_loop+0x3b/0x110 [ 669.085009][T12795] exit_to_user_mode_loop+0xe6/0x110 [ 669.090358][T12795] exit_to_user_mode_prepare+0xee/0x180 [ 669.095966][T12795] syscall_exit_to_user_mode+0x16/0x40 [ 669.101475][T12795] do_syscall_64+0x58/0xa0 [ 669.105932][T12795] ? clear_bhb_loop+0x60/0xb0 [ 669.110651][T12795] ? clear_bhb_loop+0x60/0xb0 [ 669.115372][T12795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.121299][T12795] RIP: 0033:0x7fa47399e559 [ 669.125741][T12795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.145377][T12795] RSP: 002b:00007fa474869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 669.153827][T12795] RAX: 0000000000000000 RBX: 00007fa473c25fa0 RCX: 00007fa47399e559 [ 669.161825][T12795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 669.169818][T12795] RBP: 00007fa473a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 669.177817][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.185816][T12795] R13: 00007fa473c26038 R14: 00007fa473c25fa0 R15: 00007ffe7eb0fa48 [ 669.193830][T12795] [ 669.372257][ T4354] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 669.466549][T12802] loop2: detected capacity change from 0 to 1024 [ 669.567275][T12802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 669.591185][ T4354] usb 6-1: Using ep0 maxpacket: 32 [ 669.599179][ T4354] usb 6-1: unable to get BOS descriptor or descriptor too short [ 669.659630][ T4354] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 669.732084][ T4354] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 669.742217][ T4354] usb 6-1: config 14 has no interface number 0 [ 669.748460][ T4354] usb 6-1: config 14 has no interface number 1 [ 669.811238][ T4354] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 669.882019][ T4354] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 669.933872][ T4354] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 669.980427][ T4354] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.025592][ T4354] usb 6-1: config 14 interface 57 has no altsetting 0 [ 670.046693][ T4354] usb 6-1: config 14 interface 228 has no altsetting 0 [ 670.087510][ T4354] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 670.155662][ T4354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.194493][ T4354] usb 6-1: Product: syz [ 670.424495][ T4354] usb 6-1: Manufacturer: syz [ 670.429178][ T4354] usb 6-1: SerialNumber: syz [ 671.164244][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 671.173530][ T4354] legousbtower 6-1:14.57: interrupt endpoints not found [ 671.383242][ T4354] legousbtower 6-1:14.228: interrupt endpoints not found [ 671.559116][ T49] Bluetooth: Wrong link type (-57) [ 673.788741][ T4354] usb 6-1: USB disconnect, device number 2 [ 674.266639][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 676.179960][T12878] loop5: detected capacity change from 0 to 1024 [ 676.406482][T12878] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 677.086376][T12888] loop2: detected capacity change from 0 to 512 [ 677.094109][T12888] EXT4-fs: inline encryption not supported [ 677.144197][T12888] EXT4-fs (loop2): Test dummy encryption mode enabled [ 677.306149][T12888] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.2526: inode #1: comm syz.2.2526: iget: illegal inode # [ 677.384918][T12888] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2526: error while reading EA inode 1 err=-117 [ 677.411293][T12888] EXT4-fs (loop2): 1 orphan inode deleted [ 677.417125][T12888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 677.532960][T12888] EXT4-fs: Ignoring sb option on remount [ 677.539048][T12888] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 677.637925][T12888] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 677.770305][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 678.203640][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 679.477634][T12917] binder: BINDER_SET_CONTEXT_MGR already set [ 679.513288][T12917] binder: 12915:12917 ioctl 4018620d 200000001c00 returned -16 [ 683.021725][T12946] misc userio: Invalid payload size [ 683.104319][T12932] loop1: detected capacity change from 0 to 128 [ 684.979177][T12968] binder: BINDER_SET_CONTEXT_MGR already set [ 685.011087][T12968] binder: 12967:12968 ioctl 4018620d 200000001c00 returned -16 [ 685.224469][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.230880][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.869808][ T6140] EXT4-fs (loop5): unmounting filesystem. [ 688.442019][T13010] loop2: detected capacity change from 0 to 256 [ 689.338023][T13017] ================================================================== [ 689.338039][T13017] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 689.338119][T13017] Write of size 4 at addr ffffc900046f9fc0 by task syz.1.2564/13017 [ 689.338139][T13017] [ 689.338145][T13017] CPU: 0 PID: 13017 Comm: syz.1.2564 Not tainted syzkaller #0 [ 689.338167][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.338180][T13017] Call Trace: [ 689.338188][T13017] [ 689.338196][T13017] dump_stack_lvl+0x188/0x24e [ 689.338225][T13017] ? sys_imageblit+0x1ba8/0x25d0 [ 689.338251][T13017] ? show_regs_print_info+0x12/0x12 [ 689.338279][T13017] ? load_image+0x410/0x410 [ 689.338299][T13017] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 689.338324][T13017] ? verify_lock_unused+0x140/0x140 [ 689.338355][T13017] ? __virt_addr_valid+0xbf/0x540 [ 689.338424][T13017] ? sys_imageblit+0x1ba8/0x25d0 [ 689.338448][T13017] print_report+0xa8/0x210 [ 689.338471][T13017] kasan_report+0x10b/0x140 [ 689.338505][T13017] ? sys_imageblit+0x1ba8/0x25d0 [ 689.338534][T13017] sys_imageblit+0x1ba8/0x25d0 [ 689.338567][T13017] ? sys_copyarea+0x2530/0x2530 [ 689.338603][T13017] ? __lock_acquire+0x7ea0/0x7ea0 [ 689.338633][T13017] ? trace_contention_end+0x5f/0x170 [ 689.338662][T13017] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 689.338753][T13017] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 689.338778][T13017] cw_putcs+0x15ef/0x18a0 [ 689.338823][T13017] ? cw_clear+0x250/0x250 [ 689.338848][T13017] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 689.338883][T13017] ? fb_get_color_depth+0x15e/0x280 [ 689.338941][T13017] fbcon_putcs+0x358/0x510 [ 689.338963][T13017] ? cw_clear+0x250/0x250 [ 689.338987][T13017] do_update_region+0x4e5/0x640 [ 689.339011][T13017] ? memcpy+0x3c/0x60 [ 689.339043][T13017] ? hide_cursor+0x320/0x320 [ 689.339072][T13017] redraw_screen+0xa2c/0x1000 [ 689.339096][T13017] ? _raw_spin_unlock+0x40/0x40 [ 689.339121][T13017] ? clear_buffer_attributes+0x320/0x320 [ 689.339149][T13017] ? tty_do_resize+0xeb/0x160 [ 689.339177][T13017] vc_do_resize+0x122c/0x17b0 [ 689.339214][T13017] ? lock_chain_count+0x20/0x20 [ 689.339242][T13017] ? __mod_lruvec_page_state+0xa1/0x410 [ 689.339269][T13017] ? vc_resize+0x50/0x50 [ 689.339298][T13017] ? crc32_le_base+0x59e/0xd60 [ 689.339351][T13017] fbcon_do_set_font+0xb5c/0x1ae0 [ 689.339385][T13017] ? fbcon_blank+0xb30/0xb30 [ 689.339406][T13017] con_font_op+0xac1/0xdb0 [ 689.339435][T13017] ? reset_palette+0xdc0/0xdc0 [ 689.339463][T13017] ? __might_fault+0xa6/0x120 [ 689.339488][T13017] ? __lock_acquire+0x7ea0/0x7ea0 [ 689.339523][T13017] ? __might_fault+0xc2/0x120 [ 689.339543][T13017] ? __might_fault+0xa6/0x120 [ 689.339570][T13017] vt_ioctl+0x161e/0x1ca0 [ 689.339608][T13017] ? __vt_event_wait+0x260/0x260 [ 689.339645][T13017] ? __fget_files+0x28/0x460 [ 689.339678][T13017] ? tty_jobctrl_ioctl+0x164/0xb00 [ 689.339706][T13017] tty_ioctl+0x7e6/0xba0 [ 689.339731][T13017] ? security_file_ioctl+0x7c/0xa0 [ 689.339759][T13017] ? tty_get_icount+0xa0/0xa0 [ 689.339785][T13017] __se_sys_ioctl+0xfa/0x170 [ 689.339816][T13017] do_syscall_64+0x4c/0xa0 [ 689.339842][T13017] ? clear_bhb_loop+0x60/0xb0 [ 689.339866][T13017] ? clear_bhb_loop+0x60/0xb0 [ 689.339893][T13017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.339918][T13017] RIP: 0033:0x7f0a0ed9e559 [ 689.339937][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.339956][T13017] RSP: 002b:00007f0a0fbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.339982][T13017] RAX: ffffffffffffffda RBX: 00007f0a0f025fa0 RCX: 00007f0a0ed9e559 [ 689.339999][T13017] RDX: 00002000000004c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 689.340014][T13017] RBP: 00007f0a0ee35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 689.340028][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.340041][T13017] R13: 00007f0a0f026038 R14: 00007f0a0f025fa0 R15: 00007fff94ce1728 [ 689.340066][T13017] [ 689.340073][T13017] [ 689.340078][T13017] The buggy address belongs to a vmalloc virtual mapping [ 689.340093][T13017] Memory state around the buggy address: [ 689.340105][T13017] ffffc900046f9e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 689.340119][T13017] ffffc900046f9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 689.340133][T13017] >ffffc900046f9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 689.340143][T13017] ^ [ 689.340156][T13017] ffffc900046fa000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 689.340170][T13017] ffffc900046fa080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 689.340181][T13017] ================================================================== [ 689.352384][T13017] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 689.352400][T13017] CPU: 0 PID: 13017 Comm: syz.1.2564 Not tainted syzkaller #0 [ 689.352423][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.352435][T13017] Call Trace: [ 689.352442][T13017] [ 689.352449][T13017] dump_stack_lvl+0x188/0x24e [ 689.352482][T13017] ? memcpy+0x3c/0x60 [ 689.352503][T13017] ? show_regs_print_info+0x12/0x12 [ 689.352528][T13017] ? load_image+0x410/0x410 [ 689.352554][T13017] panic+0x2d3/0x710 [ 689.352583][T13017] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 689.352620][T13017] ? bpf_jit_dump+0xd0/0xd0 [ 689.352653][T13017] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 689.352675][T13017] ? _raw_spin_unlock+0x40/0x40 [ 689.352698][T13017] check_panic_on_warn+0x80/0xa0 [ 689.352724][T13017] ? sys_imageblit+0x1ba8/0x25d0 [ 689.352747][T13017] end_report+0x66/0x110 [ 689.352775][T13017] kasan_report+0x118/0x140 [ 689.352807][T13017] ? sys_imageblit+0x1ba8/0x25d0 [ 689.352834][T13017] sys_imageblit+0x1ba8/0x25d0 [ 689.352865][T13017] ? sys_copyarea+0x2530/0x2530 [ 689.352892][T13017] ? __lock_acquire+0x7ea0/0x7ea0 [ 689.352920][T13017] ? trace_contention_end+0x5f/0x170 [ 689.352948][T13017] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 689.352981][T13017] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 689.353004][T13017] cw_putcs+0x15ef/0x18a0 [ 689.353044][T13017] ? cw_clear+0x250/0x250 [ 689.353068][T13017] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 689.353103][T13017] ? fb_get_color_depth+0x15e/0x280 [ 689.353135][T13017] fbcon_putcs+0x358/0x510 [ 689.353156][T13017] ? cw_clear+0x250/0x250 [ 689.353178][T13017] do_update_region+0x4e5/0x640 [ 689.353201][T13017] ? memcpy+0x3c/0x60 [ 689.353226][T13017] ? hide_cursor+0x320/0x320 [ 689.353254][T13017] redraw_screen+0xa2c/0x1000 [ 689.353278][T13017] ? _raw_spin_unlock+0x40/0x40 [ 689.353301][T13017] ? clear_buffer_attributes+0x320/0x320 [ 689.353328][T13017] ? tty_do_resize+0xeb/0x160 [ 689.353355][T13017] vc_do_resize+0x122c/0x17b0 [ 689.353392][T13017] ? lock_chain_count+0x20/0x20 [ 689.353419][T13017] ? __mod_lruvec_page_state+0xa1/0x410 [ 689.353444][T13017] ? vc_resize+0x50/0x50 [ 689.353472][T13017] ? crc32_le_base+0x59e/0xd60 [ 689.353497][T13017] fbcon_do_set_font+0xb5c/0x1ae0 [ 689.353529][T13017] ? fbcon_blank+0xb30/0xb30 [ 689.353548][T13017] con_font_op+0xac1/0xdb0 [ 689.353576][T13017] ? reset_palette+0xdc0/0xdc0 [ 689.353609][T13017] ? __might_fault+0xa6/0x120 [ 689.353633][T13017] ? __lock_acquire+0x7ea0/0x7ea0 [ 689.353667][T13017] ? __might_fault+0xc2/0x120 [ 689.353687][T13017] ? __might_fault+0xa6/0x120 [ 689.353712][T13017] vt_ioctl+0x161e/0x1ca0 [ 689.353744][T13017] ? __vt_event_wait+0x260/0x260 [ 689.353779][T13017] ? __fget_files+0x28/0x460 [ 689.353811][T13017] ? tty_jobctrl_ioctl+0x164/0xb00 [ 689.353837][T13017] tty_ioctl+0x7e6/0xba0 [ 689.353861][T13017] ? security_file_ioctl+0x7c/0xa0 [ 689.353887][T13017] ? tty_get_icount+0xa0/0xa0 [ 689.353912][T13017] __se_sys_ioctl+0xfa/0x170 [ 689.353942][T13017] do_syscall_64+0x4c/0xa0 [ 689.353966][T13017] ? clear_bhb_loop+0x60/0xb0 [ 689.353990][T13017] ? clear_bhb_loop+0x60/0xb0 [ 689.354016][T13017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.354040][T13017] RIP: 0033:0x7f0a0ed9e559 [ 689.354059][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.354077][T13017] RSP: 002b:00007f0a0fbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.354101][T13017] RAX: ffffffffffffffda RBX: 00007f0a0f025fa0 RCX: 00007f0a0ed9e559 [ 689.354117][T13017] RDX: 00002000000004c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 689.354131][T13017] RBP: 00007f0a0ee35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 689.354145][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.354157][T13017] R13: 00007f0a0f026038 R14: 00007f0a0f025fa0 R15: 00007fff94ce1728 [ 689.354181][T13017] [ 689.354779][T13017] Kernel Offset: disabled [ 690.206293][T13017] Rebooting in 86400 seconds..