last executing test programs: 1m31.352541908s ago: executing program 3 (id=678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m31.102308469s ago: executing program 3 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0xc4, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce10ba88585033dab08b75ee83cc7c991e40e8d7ec2ca3c4679f03267", @nested={0x4, 0x100}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xc, 0xfe, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @str='udf\x00'}]}]}, 0xc4}], 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m31.076409421s ago: executing program 3 (id=684): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f00000001c0)="14eb02a1abc07bed6aebad86d861853ec90cd2fafd34605a", 0x18, 0x4000000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000400), 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1m31.031420354s ago: executing program 3 (id=685): r0 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1808000, &(0x7f0000000380)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@longad}, {@shortad}, {@dmode={'dmode', 0x3d, 0x1}}, {@undelete}, {@shortad}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@umask={'umask', 0x3d, 0x401}}]}, 0x2, 0xc3b, &(0x7f0000001700)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) r1 = openat2(r0, &(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f00000001c0)={0x200000, 0x28}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x20, r2, 0x402, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x80}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x6) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x8000000009eb1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 1m30.825730651s ago: executing program 3 (id=691): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, 0x0, 0x4, 0x7fff, 'syz1\x00', &(0x7f0000000580)=['\xac]]\x00', '\xf3\x00', '\x00', '\x00'], 0x8}) 1m30.21026932s ago: executing program 3 (id=699): setuid(0xee01) setuid(0x0) (fail_nth: 1) 1m30.21004254s ago: executing program 32 (id=699): setuid(0xee01) setuid(0x0) (fail_nth: 1) 24.090002525s ago: executing program 4 (id=1114): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x22, 0x0, r0, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x0, r1}}) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@dax_never}, {@usrjquota}, {@noacl}, {@nomblk_io_submit}, {@quota}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0x1, 0x454, &(0x7f0000000400)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x8}, 0x10, 0x0, r2}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000004c0)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x0, 0xffffffffffffffff, 0x6}, 0x10}}, 0x20) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) sched_setscheduler(r3, 0x0, &(0x7f0000000080)=0x10000) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000"], 0xb5, 0x800) msgrcv(0x0, 0x0, 0x0, 0xfeff000000000000, 0x0) 23.470576514s ago: executing program 4 (id=1118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 23.445142496s ago: executing program 4 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (fail_nth: 2) 23.050054658s ago: executing program 4 (id=1121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000e3002400028014000180080001000000000008000200b61e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}}, 0x8c8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback, 0x2}, 0x1c) listen(r2, 0x3) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") pipe2(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fedbdf25070000000d0001002f6465762f6b766d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x50) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="040024bd7010fbdbdf25070000000c000600020000000200000008000300", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x4c, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040880}, 0x8000000) 22.547540798s ago: executing program 4 (id=1125): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$overlay(0x0, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x2000, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x39800c41, 0x0, 0x0, 0x401, 0x3, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x101, {0x6, 0x1000, 0x7, 0x8, 0x8005, 0x3, {0x6, 0x200, 0xfd, 0x10001, 0x8, 0xfd, 0x800, 0x8, 0xfffffffe, 0x2000, 0x2, r3, r4, 0xfffe, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) close_range(r0, 0xffffffffffffffff, 0x0) 22.02148647s ago: executing program 4 (id=1131): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, 0x0, 0x4, 0x7fff, 'syz1\x00', &(0x7f0000000580)=['\xac]]\x00', '\xf3\x00', '\x00', '\x00'], 0x8}) 22.007536431s ago: executing program 33 (id=1131): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, 0x0, 0x4, 0x7fff, 'syz1\x00', &(0x7f0000000580)=['\xac]]\x00', '\xf3\x00', '\x00', '\x00'], 0x8}) 4.069990045s ago: executing program 0 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 2) 3.857176302s ago: executing program 6 (id=1286): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$eJzs3U9oHFUYAPBvO5vdpFCTg1AUxNGboKGteNCLKSWFYi4qi38O4mJTlexa2MXF9tBtvIhHwaOevPWgBw89i6CINw9erSBV8aA9WbA6Mruzm93sJk3AbbX+fofhy3vvm/e9zJJMJuzbl1di4/RcnLl27WrMz5eivHJiJa6XYimSGLgYkypT2gCA/4brWRa/ZX17TCn1jslMywIAZqj3+//VQyMtb3+x2/isNAz/nGVdAMDsFH//L+w2Zn6njrMzKQkAmLGJ5/8PjnVXxv/VX/bYHwDuAM++8OJTx9cinknT+YjmO51apxZPbPUfPxOvRyPW40gsxo2I/o1Cfij1jidPra0eSdO0Gz8uRS3P6NQimt1OrX+ncDzp5VfjaCzGUpFf3G1kWZac/HRt9WjaExEXu735o1nq1ObiYDH/dwdjPY5FGndP5EecWls9lhYnqDUH+d2Iza3nFnn9y7EY37wSZ6MRpyPPrUT8np9hbfXC0TQ9ka2N5Xdq1d64vp2egLRmd2EAAAAAAAAAAAAAAAAAAAAAALijLadDS8P9b7Kt/XuWl6f0RzPp1Pr5xf5Am/39gbJqFln261uP1N5NYmx/oO3783Rq5Thwe5cOAAAAAAAAAAAAAAAAAAAA/xrtc5WoNxrrrfa58xujQbfVPncgIvKWN776+POFmBxzk6BczDHSlRZN5zfqWTIYnCVjY4ogyScftFy6nGct5IfRMdXhKqaWUd25q9E49MAPH2y13JcMzvzXgWFWEtMXmGwrYzRo3tUvaT/fqGFw7CZjrmRZtlP6hZcms6IUUd7/hds9yPLgy6uv3fNo+/BjvZbPsr6HHl587sr7H/28UW/kM0fvClZa7RvZRr34OuqXqvuZNBl5/ZSiHwxO1RtT3i19c7ylnnz7y/P3vvf13mbPRlvenDImr63eaHyyvavSD/Iyt3UtTJtrbrDAJ4cvm/v7Z15vtcv/2IU7/OFK/fKF73/aa9bIDwkbdQAAAAAAAAAAAAAAAAAAwC0x8l7xQvFm37ndsh5/evaVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCts/X5/yPB5kTLXoI/ujHZVV1vtSMqt3uZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8z/0dAAD//+JLbdg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_io_uring_setup(0x1868, 0x0, 0x0, 0x0) 3.586147334s ago: executing program 5 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 3.246057571s ago: executing program 5 (id=1290): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$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") signalfd4(r0, &(0x7f0000000040)={[0x7ff]}, 0x8, 0x80000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_io_uring_setup(0x1868, 0x0, 0x0, 0x0) 3.200991585s ago: executing program 0 (id=1291): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x40851}, 0x4004891) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2a1}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e8", 0x55}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e76fcd36cf0d87684a93b7a534dff141eed27a80c88f471dc2937b4467eabb04179670bc7fe857614206c7fba4c6dd1940deec75fe160e8df8ecad5522d6ac6e1f882d8d15d00b", 0x4d, 0x20000004, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000840)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x14, 0x2f9, &(0x7f0000000880)="$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") recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x0, 0x3938700}) 3.102155602s ago: executing program 1 (id=1293): set_mempolicy(0x8001, 0x0, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) 2.981353602s ago: executing program 6 (id=1294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r3, &(0x7f00000003c0), 0x12) ftruncate(r3, 0x8979) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000480)={0x0, 0x4, 0x1}) sendfile(r2, r3, 0x0, 0x1000) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="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", 0x189, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="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", 0x101, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r5, r7}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) r8 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f00000001c0)=0x2f6, 0x4) r9 = socket(0x18, 0x6, 0x129b9824) recvmsg$unix(r9, &(0x7f0000000380)={&(0x7f0000000240), 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/100, 0x64}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x100) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[], 0x0) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r11, &(0x7f00000000c0)=[@t={0x81, 0x4}], 0x8) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000080010"], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000000)={0x1fa, 0x4, 0x7, 0x9, 0x10a8}, 0x14) 2.934174056s ago: executing program 0 (id=1295): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xab7}, @TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x7, 0x7ff, 0x946, 0x10}, {0x6, 0x2, 0x0, 0x5dc, 0x3, 0xfffdfff8}, 0xffff, 0x3, 0x17cf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6c69ddd2d5ab30c0}, @TCA_TBF_BURST={0x8, 0x6, 0xffffff01}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.717646343s ago: executing program 1 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0xd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000c000000820d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@tcp, 0x1}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d6060000eacf0000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.698458274s ago: executing program 5 (id=1297): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x22, 0x0, r0, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x0, r1}}) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@dax_never}, {@usrjquota}, {@noacl}, {@nomblk_io_submit}, {@quota}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0x1, 0x454, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvTH8gArYi/uCHWkVj44+WAioHD2o08YCJiR702LSFIIUaWhMhRMAYPBlj4t149F/wpBdjPJl41bshIYYL4GnM7M7Q3WV3oWWX0e7nkwy8N/OG97775u2+mbdLAANrIv8jidgaEX9ExFg921xgov7XtStn565fOTuXRJa9+3dSK3f1ytm5smh53pYiM5lGpJ8nsbtNvcunzxyfXVxcOFXkp1dOfDS9fPrMC8dOzB5dOLpwcv+hQwcPzLz80v4XexJn3qaruz5d2rPzrQ++fvvwl03xt8TRIxPdDj6dZT2urlrbGtLJcIUNYU2GIiLvrpHa+B+LoVjtvLF487NKGwf0VZZl2ZbOh89nwAaWRHPekIdBUX7Q5/e/5dY6CXi1f9OPyl1+rX4DlMd9rdhqB7IsO1eUGWm5v+2liYh4//w/3+Zb9Oc5BABAkx/z+c/z7eZ/aTzUUO6+Ym1oPCLuj4jtEfFAROyIiAcjamUfjohH1lh/6yLJzfOf9NK6ArtN+fzvlWJtq2n+F2lZZHyoyG2rxT+SHDm2uLCveE0mY2RTnp/pUsdPb/z+VadjjfO/fMvrL+eCRTsuDW9qPmd+dmX2TmJudPlCxK7hdvEnN1YCkojYGRG71lnHsWe/39Pp2K3j76IH60zZdxHP1Pv/fLTEX0q6r09O3xOLC/umy6viZr/+dvGdTvXfUfw9kPf/vW2v/xvxjyeN67XLa6/j4p9fdLynWe/1P5q8V0uPFvs+mV1ZOTUTMZocrje6cf/+1XPLfFk+j39yb/vxvz1WX4ndEZFfxI9GxGMR8XjR9ici4smI2Nsl/l9ef+rD9cffX3n882vq/9XEaLTuaZ8YOv7zD02Vjt8U//Xu/X+wlpos9tzO+9/ttGt9VzMAAAD8/6QRsTWSdOpGOk2npurfl98RkS4uLa88d2Tp45Pz9d8IjMdIWj7pGmt4HjpT3NbX8xciov7VgvL4geK58TdDm2v5qbmlxfmqg4cBt6XD+M/9NVR164C+G47YVHUbgGr4vSYMLuMfBpfxD4OrzfjfXEU7gLuv3ef/uQraAdx9LePfsh8MEPf/MLg6jv+N/D//ADU+/2EgLW+OW/9Ivmui/JfWefqGTcTIf6IZd57IkradG2nVDZPoZ6La9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+TcAAP//yinjzA==") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x8}, 0x10, 0x0, r2}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000004c0)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x0, 0xffffffffffffffff, 0x6}, 0x10}}, 0x20) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) sched_setscheduler(r3, 0x0, &(0x7f0000000080)=0x10000) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000"], 0xb5, 0x800) msgrcv(0x0, 0x0, 0x0, 0xfeff000000000000, 0x0) 2.526043209s ago: executing program 6 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0xd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000c000000820d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@tcp, 0x1}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.237403492s ago: executing program 1 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 2.237074502s ago: executing program 2 (id=1301): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x40851}, 0x4004891) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2a1}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e8", 0x55}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 2) 2.175321306s ago: executing program 0 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.88824368s ago: executing program 5 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800840, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x1, 0x369, &(0x7f0000000c80)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x40) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000040)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x111000, 0xac) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000500)={'vlan0\x00'}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000400)=[0x3, 0x3], 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$hiddev(&(0x7f0000000180), 0x2, 0x90600) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000380)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000003c0)=r0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x8800) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x3, 0x2, 0x3, 0x94f7}, 0xfffffffd, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x45}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x766e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x100}) 1.826177564s ago: executing program 2 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (fail_nth: 2) 1.75257276s ago: executing program 2 (id=1305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7, 0x8000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.688737566s ago: executing program 6 (id=1306): set_mempolicy(0x8001, 0x0, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) 1.577645534s ago: executing program 6 (id=1307): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x3000404, &(0x7f0000000180)={[{@cruft}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp737'}}]}, 0x2, 0xaab, &(0x7f0000000440)="$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") (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) 1.561452356s ago: executing program 1 (id=1308): userfaultfd(0x80001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) fanotify_init(0x500, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x879, 0x1, 0x4000001, 0x1a3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x72, 0x0, 0x0, 0x7, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47bb, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 1.495256991s ago: executing program 2 (id=1309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x880000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0xb, 0x1}}}}]}, 0x86}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) 1.417910267s ago: executing program 1 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0xd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000c000000820d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@tcp, 0x1}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.303387277s ago: executing program 2 (id=1311): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x602001, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) mmap(&(0x7f0000516000/0x2000)=nil, 0x2000, 0x2, 0x30, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x6) 995.644551ms ago: executing program 0 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r3, 0x4, 0x7fff, 'syz1\x00', &(0x7f0000000580)=['\xac]]\x00', '\xf3\x00', '\x00', '\x00'], 0x8}) 730.100482ms ago: executing program 5 (id=1313): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x22, 0x0, r0, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x0, r1}}) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@dax_never}, {@usrjquota}, {@noacl}, {@nomblk_io_submit}, {@quota}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0x1, 0x454, &(0x7f0000000400)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x8}, 0x10, 0x0, r2}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000004c0)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x0, 0xffffffffffffffff, 0x6}, 0x10}}, 0x20) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) sched_setscheduler(r3, 0x0, &(0x7f0000000080)=0x10000) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000"], 0xb5, 0x800) msgrcv(0x0, 0x0, 0x0, 0xfeff000000000000, 0x0) 626.166701ms ago: executing program 6 (id=1314): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xab7}, @TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x7, 0x7ff, 0x946, 0x10}, {0x6, 0x2, 0x0, 0x5dc, 0x3, 0xfffdfff8}, 0xffff, 0x3, 0x17cf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6c69ddd2d5ab30c0}, @TCA_TBF_BURST={0x8, 0x6, 0xffffff01}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 600.053432ms ago: executing program 2 (id=1315): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0x1f, r3}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'pim6reg1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b45c300000000000000000000f30080000000530add9d7fde770000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040056}, 0x100) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000003c0)=r13}, 0x20) r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x5}, 0x0) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaa4311219bbbbbbbbbbbb81004800000c0300000008030000fa2b25fc66189827a86ead4b5713b83d67879787dc80e1662803968d5b3539ebcc767169d30973bf10cf5d3c8140d347eb7b577f47"], 0x0) 575.611704ms ago: executing program 1 (id=1316): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r4}) 381.50751ms ago: executing program 5 (id=1317): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00H'], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x68, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x39, 0x6, "bdc2071950102cb2b080ba1982286d1f1892ecb82e0fd163cb5794a24a8b72ee6e372851051c537ebcfaf9eff6d0b58d9e8cf0f435"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)=ANY=[@ANYRES32=r3]) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0xf, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r4 = socket(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x18, 0xd, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r5, 0x0, 0x80001, 0x0) 0s ago: executing program 0 (id=1318): set_mempolicy(0x8001, 0x0, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) kernel console output (not intermixed with test programs): 0][ T8363] dump_backtrace+0x0/0x43c [ 143.935011][ T8363] show_stack+0x2c/0x3c [ 143.935633][ T8363] __dump_stack+0x30/0x40 [ 143.936350][ T8363] dump_stack_lvl+0xf8/0x160 [ 143.937116][ T8363] dump_stack+0x1c/0x5c [ 143.937760][ T8363] should_fail+0x3c0/0x51c [ 143.938536][ T8363] __should_failslab+0xbc/0x10c [ 143.939341][ T8363] should_failslab+0x10/0x28 [ 143.940183][ T8363] slab_pre_alloc_hook+0x64/0xec [ 143.941014][ T8363] kmem_cache_alloc+0x94/0x3e4 [ 143.941776][ T8363] anon_vma_clone+0x90/0x470 [ 143.942525][ T8363] __split_vma+0x194/0x3f0 [ 143.943194][ T8363] __do_munmap+0x2fc/0xc04 [ 143.943944][ T8363] mmap_region+0x7b0/0x1390 [ 143.944679][ T8363] do_mmap+0x67c/0xdb4 [ 143.945372][ T8363] vm_mmap_pgoff+0x184/0x284 [ 143.946119][ T8363] ksys_mmap_pgoff+0x410/0x620 [ 143.946851][ T8363] __arm64_sys_mmap+0xf8/0x110 [ 143.947613][ T8363] invoke_syscall+0x98/0x2b8 [ 143.948357][ T8363] el0_svc_common+0x138/0x258 [ 143.949090][ T8363] do_el0_svc+0x58/0x14c [ 143.949744][ T8363] el0_svc+0x78/0x1e0 [ 143.950360][ T8363] el0t_64_sync_handler+0xcc/0xe4 [ 143.951116][ T8363] el0t_64_sync+0x1a0/0x1a4 [ 144.407239][ T8373] tipc: Enabled bearer , priority 0 [ 144.409760][ T8373] device syzkaller0 entered promiscuous mode [ 144.416501][ T8373] tipc: Resetting bearer [ 144.426151][ T8369] tipc: Resetting bearer [ 144.430931][ T8369] tipc: Disabling bearer [ 144.436445][ T8375] tipc: Enabled bearer , priority 0 [ 144.469230][ T8375] device syzkaller0 entered promiscuous mode [ 144.475288][ T8374] device syzkaller0 entered promiscuous mode [ 144.498430][ T8375] tipc: Resetting bearer [ 144.503437][ T8371] tipc: Resetting bearer [ 144.513095][ T8371] tipc: Disabling bearer [ 145.058551][ T8386] tipc: Enabling of bearer rejected, failed to enable media [ 145.060307][ T8386] device syzkaller0 entered promiscuous mode [ 145.513734][ T8393] tipc: Enabled bearer , priority 0 [ 145.519233][ T8393] device syzkaller0 entered promiscuous mode [ 145.525473][ T8393] tipc: Resetting bearer [ 145.530882][ T8392] tipc: Resetting bearer [ 145.593022][ T8392] tipc: Disabling bearer [ 145.597791][ T8397] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.968'. [ 145.691059][ T8402] autofs4:pid:8402:autofs_fill_super: called with bogus options [ 145.697408][ T8403] autofs4:pid:8403:autofs_fill_super: called with bogus options [ 145.775633][ T8406] tipc: Enabled bearer , priority 0 [ 145.777101][ T8406] device syzkaller0 entered promiscuous mode [ 145.784629][ T8407] tipc: Enabled bearer , priority 0 [ 145.786166][ T8407] device syzkaller0 entered promiscuous mode [ 145.795028][ T8405] tipc: Resetting bearer [ 145.819311][ T8405] tipc: Disabling bearer [ 145.826431][ T8407] tipc: Resetting bearer [ 145.829550][ T8404] tipc: Resetting bearer [ 145.835827][ T8404] tipc: Disabling bearer [ 145.883541][ T8417] tipc: Enabling of bearer rejected, failed to enable media [ 145.885260][ T8417] device syzkaller0 entered promiscuous mode [ 145.936228][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 146.374023][ T8428] netlink: 'syz.2.980': attribute type 72 has an invalid length. [ 146.411710][ T8431] FAULT_INJECTION: forcing a failure. [ 146.411710][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 146.413888][ T8431] CPU: 1 PID: 8431 Comm: syz.2.982 Not tainted 5.15.189-syzkaller #0 [ 146.415089][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 146.416660][ T8431] Call trace: [ 146.417130][ T8431] dump_backtrace+0x0/0x43c [ 146.417768][ T8431] show_stack+0x2c/0x3c [ 146.418352][ T8431] __dump_stack+0x30/0x40 [ 146.418966][ T8431] dump_stack_lvl+0xf8/0x160 [ 146.419641][ T8431] dump_stack+0x1c/0x5c [ 146.420341][ T8431] should_fail+0x3c0/0x51c [ 146.421044][ T8431] __should_failslab+0xbc/0x10c [ 146.421832][ T8431] should_failslab+0x10/0x28 [ 146.422478][ T8431] slab_pre_alloc_hook+0x64/0xec [ 146.423197][ T8431] kmem_cache_alloc+0x94/0x3e4 [ 146.423875][ T8431] anon_vma_clone+0x90/0x470 [ 146.424567][ T8431] __split_vma+0x194/0x3f0 [ 146.425190][ T8431] __do_munmap+0x370/0xc04 [ 146.425819][ T8431] mmap_region+0x7b0/0x1390 [ 146.426438][ T8431] do_mmap+0x67c/0xdb4 [ 146.427004][ T8431] vm_mmap_pgoff+0x184/0x284 [ 146.427678][ T8431] ksys_mmap_pgoff+0x11c/0x620 [ 146.428365][ T8431] __arm64_sys_mmap+0xf8/0x110 [ 146.429078][ T8431] invoke_syscall+0x98/0x2b8 [ 146.429786][ T8431] el0_svc_common+0x138/0x258 [ 146.430430][ T8431] do_el0_svc+0x58/0x14c [ 146.431172][ T8431] el0_svc+0x78/0x1e0 [ 146.431828][ T8431] el0t_64_sync_handler+0xcc/0xe4 [ 146.432593][ T8431] el0t_64_sync+0x1a0/0x1a4 [ 146.534185][ T8420] loop5: detected capacity change from 0 to 32768 [ 146.544480][ T8429] loop0: detected capacity change from 0 to 32768 [ 146.642278][ T8420] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 146.647382][ T8420] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 146.658027][ T8420] (syz.5.978,8420,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 146.660536][ T8420] (syz.5.978,8420,1):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 47244640267 failed -12 [ 146.662638][ T8420] (syz.5.978,8420,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 146.664859][ T8420] (syz.5.978,8420,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 146.667059][ T8420] (syz.5.978,8420,1):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 146.675879][ T8420] (syz.5.978,8420,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 146.733096][ T8438] tipc: Enabled bearer , priority 0 [ 146.735169][ T8438] device syzkaller0 entered promiscuous mode [ 146.750324][ T8438] tipc: Resetting bearer [ 146.763139][ T8437] tipc: Resetting bearer [ 146.826346][ T8437] tipc: Disabling bearer [ 146.887264][ T8445] loop4: detected capacity change from 0 to 256 [ 146.911322][ T8449] tipc: Enabled bearer , priority 0 [ 146.912952][ T8449] device syzkaller0 entered promiscuous mode [ 146.916510][ T8448] tipc: Resetting bearer [ 146.936244][ T8448] tipc: Disabling bearer [ 147.225716][ T6969] ocfs2: Unmounting device (7,5) on (node local) [ 147.299156][ T8452] loop0: detected capacity change from 0 to 32768 [ 147.353351][ T8456] tipc: Enabled bearer , priority 0 [ 147.362529][ T8456] device syzkaller0 entered promiscuous mode [ 147.385582][ T8456] tipc: Resetting bearer [ 147.394383][ T8455] tipc: Resetting bearer [ 147.399180][ T8455] tipc: Disabling bearer [ 147.406407][ T8458] device syzkaller0 entered promiscuous mode [ 147.441841][ T8460] loop5: detected capacity change from 0 to 1024 [ 147.607309][ T8460] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.620742][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.995'. [ 147.993562][ T8480] tipc: Enabled bearer , priority 0 [ 147.995266][ T8480] device syzkaller0 entered promiscuous mode [ 148.010703][ T8480] tipc: Resetting bearer [ 148.014384][ T8479] tipc: Resetting bearer [ 148.022199][ T8479] tipc: Disabling bearer [ 148.112978][ T8484] tipc: Enabled bearer , priority 0 [ 148.124373][ T8484] device syzkaller0 entered promiscuous mode [ 148.149803][ T8484] tipc: Resetting bearer [ 148.156614][ T8482] tipc: Resetting bearer [ 148.165656][ T8482] tipc: Disabling bearer [ 148.259719][ T8488] device syzkaller0 entered promiscuous mode [ 148.286391][ T8493] tipc: Enabled bearer , priority 0 [ 148.287901][ T8493] device syzkaller0 entered promiscuous mode [ 148.296064][ T8493] tipc: Resetting bearer [ 148.298157][ T8492] tipc: Resetting bearer [ 148.306019][ T8492] tipc: Disabling bearer [ 148.388190][ T8496] device syzkaller0 entered promiscuous mode [ 148.417806][ T8499] tipc: Enabled bearer , priority 0 [ 148.437467][ T8486] loop5: detected capacity change from 0 to 32768 [ 148.439783][ T8497] tipc: Disabling bearer [ 148.446918][ T8486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1001 (8486) [ 148.457122][ T8486] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 148.471229][ T8486] BTRFS info (device loop5): using free space tree [ 148.472160][ T8486] BTRFS info (device loop5): has skinny extents [ 148.555596][ T8504] loop0: detected capacity change from 0 to 512 [ 148.620375][ T8523] 9p: Unknown access argument Ůňˇ[hlM.E~÷ŤńZ˛Ţ†SŽ>ÇL^ŁZAóCWÂ-ÜG ú8bƏwźýTZĂvňRÚÍó'6%ó„şŘĒţ?ˇš" [ 148.624246][ T8523] loop2: detected capacity change from 0 to 8 [ 148.638484][ T8523] squashfs image failed sanity check [ 148.706912][ T8523] loop2: detected capacity change from 0 to 2048 [ 148.745980][ T8486] BTRFS info (device loop5): enabling ssd optimizations [ 148.774468][ T8523] GPT:first_usable_lbas don't match. [ 148.775510][ T8523] GPT:34 != 290 [ 148.776033][ T8523] GPT: Use GNU Parted to correct GPT errors. [ 148.777002][ T8523] loop2: p1 p2 p3 [ 148.824749][ T8539] tipc: Enabled bearer , priority 0 [ 148.847796][ T8539] device syzkaller0 entered promiscuous mode [ 148.876897][ T8539] tipc: Resetting bearer [ 148.962877][ T8538] tipc: Resetting bearer [ 148.966948][ T8538] tipc: Disabling bearer [ 149.437266][ T8561] tipc: Enabled bearer , priority 0 [ 149.458984][ T8563] FAULT_INJECTION: forcing a failure. [ 149.458984][ T8563] name failslab, interval 1, probability 0, space 0, times 0 [ 149.464649][ T8563] CPU: 1 PID: 8563 Comm: syz.4.1019 Not tainted 5.15.189-syzkaller #0 [ 149.465960][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 149.467618][ T8563] Call trace: [ 149.467722][ T8561] device syzkaller0 entered promiscuous mode [ 149.468186][ T8563] dump_backtrace+0x0/0x43c [ 149.469704][ T8563] show_stack+0x2c/0x3c [ 149.470357][ T8563] __dump_stack+0x30/0x40 [ 149.471010][ T8563] dump_stack_lvl+0xf8/0x160 [ 149.471686][ T8563] dump_stack+0x1c/0x5c [ 149.472317][ T8563] should_fail+0x3c0/0x51c [ 149.472974][ T8563] __should_failslab+0xbc/0x10c [ 149.473713][ T8563] should_failslab+0x10/0x28 [ 149.474408][ T8563] slab_pre_alloc_hook+0x64/0xec [ 149.475188][ T8563] __kmalloc_node+0xb8/0x520 [ 149.475929][ T8563] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 149.476810][ T8563] slab_post_alloc_hook+0xc0/0x408 [ 149.477570][ T8563] __kmalloc_node+0x22c/0x520 [ 149.478297][ T8563] kvmalloc_node+0x88/0x200 [ 149.479038][ T8563] seq_read_iter+0x1c8/0xc00 [ 149.479780][ T8563] vfs_read+0x7c4/0xa10 [ 149.480410][ T8563] ksys_read+0x120/0x210 [ 149.481030][ T8563] __arm64_sys_read+0x7c/0x90 [ 149.481710][ T8563] invoke_syscall+0x98/0x2b8 [ 149.482414][ T8563] el0_svc_common+0x138/0x258 [ 149.483147][ T8563] do_el0_svc+0x58/0x14c [ 149.483827][ T8563] el0_svc+0x78/0x1e0 [ 149.484420][ T8563] el0t_64_sync_handler+0xcc/0xe4 [ 149.485166][ T8563] el0t_64_sync+0x1a0/0x1a4 [ 149.491218][ T7735] udevd[7735]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 149.510912][ T7734] udevd[7734]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 149.515205][ T7718] udevd[7718]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 149.518666][ T8561] tipc: Resetting bearer [ 149.520618][ T8565] device syzkaller0 entered promiscuous mode [ 149.523282][ T8560] tipc: Resetting bearer [ 149.529440][ T8560] tipc: Disabling bearer [ 149.535070][ T8567] loop2: detected capacity change from 0 to 4096 [ 149.573110][ T8567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.775262][ T8579] tipc: Enabled bearer , priority 0 [ 149.777872][ T8579] device syzkaller0 entered promiscuous mode [ 149.816049][ T8579] tipc: Resetting bearer [ 149.824161][ T8578] tipc: Resetting bearer [ 150.174610][ T8578] tipc: Disabling bearer [ 150.186850][ T8582] tipc: Enabling of bearer rejected, failed to enable media [ 150.337267][ T8577] loop1: detected capacity change from 0 to 32768 [ 150.446157][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'. [ 150.451580][ T8589] loop4: detected capacity change from 0 to 32768 [ 150.461784][ T8589] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1028 (8589) [ 150.468808][ T8589] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 150.802316][ T8608] netlink: 'syz.1.1032': attribute type 10 has an invalid length. [ 150.805424][ T8589] BTRFS info (device loop4): using free space tree [ 150.806432][ T8589] BTRFS info (device loop4): has skinny extents [ 150.809995][ T8605] FAULT_INJECTION: forcing a failure. [ 150.809995][ T8605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.813429][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.815017][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.823642][ T8605] CPU: 1 PID: 8605 Comm: syz.2.1033 Not tainted 5.15.189-syzkaller #0 [ 150.825022][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 150.826654][ T8605] Call trace: [ 150.827143][ T8605] dump_backtrace+0x0/0x43c [ 150.827868][ T8605] show_stack+0x2c/0x3c [ 150.828516][ T8605] __dump_stack+0x30/0x40 [ 150.829192][ T8605] dump_stack_lvl+0xf8/0x160 [ 150.829989][ T8605] dump_stack+0x1c/0x5c [ 150.830698][ T8605] should_fail+0x3c0/0x51c [ 150.831478][ T8605] should_fail_usercopy+0x20/0x30 [ 150.832239][ T8605] sctp_setsockopt+0x208/0x10c4 [ 150.832924][ T8605] sock_common_setsockopt+0xb0/0xcc [ 150.833738][ T8605] __sys_setsockopt+0x260/0x36c [ 150.834411][ T8605] __arm64_sys_setsockopt+0xb8/0xd4 [ 150.835167][ T8605] invoke_syscall+0x98/0x2b8 [ 150.835802][ T8605] el0_svc_common+0x138/0x258 [ 150.836487][ T8605] do_el0_svc+0x58/0x14c [ 150.837054][ T8605] el0_svc+0x78/0x1e0 [ 150.837659][ T8605] el0t_64_sync_handler+0xcc/0xe4 [ 150.838428][ T8605] el0t_64_sync+0x1a0/0x1a4 [ 150.856091][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.857397][ T8608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.859164][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.860180][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.901484][ T8608] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.906801][ T8614] tipc: Enabled bearer , priority 0 [ 150.911245][ T8614] device syzkaller0 entered promiscuous mode [ 150.960629][ T8614] tipc: Resetting bearer [ 150.968082][ T8612] tipc: Resetting bearer [ 150.994769][ T8621] loop2: detected capacity change from 0 to 512 [ 150.996151][ T8612] tipc: Disabling bearer [ 151.024277][ T8603] loop1: detected capacity change from 0 to 32768 [ 151.032691][ T8589] BTRFS info (device loop4): enabling ssd optimizations [ 151.073000][ T8636] device syzkaller0 entered promiscuous mode [ 151.095565][ T8603] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.145943][ T8641] tipc: Enabled bearer , priority 0 [ 151.149749][ T8641] device syzkaller0 entered promiscuous mode [ 151.163126][ T8641] tipc: Resetting bearer [ 151.166629][ T8640] tipc: Resetting bearer [ 151.348809][ T8640] tipc: Disabling bearer [ 151.486254][ T4044] ocfs2: Unmounting device (7,1) on (node local) [ 151.596198][ T8656] tipc: Enabled bearer , priority 0 [ 151.606555][ T8656] device syzkaller0 entered promiscuous mode [ 151.930794][ T8656] tipc: Resetting bearer [ 151.948743][ T8654] tipc: Resetting bearer [ 151.967242][ T8654] tipc: Disabling bearer [ 152.063440][ T8649] loop5: detected capacity change from 0 to 32768 [ 152.585414][ T8676] tipc: Enabled bearer , priority 0 [ 152.594132][ T8676] tipc: Resetting bearer [ 152.620256][ T8649] XFS (loop5): Mounting V5 Filesystem [ 152.652482][ T8675] tipc: Disabling bearer [ 152.654135][ T8679] loop2: detected capacity change from 0 to 512 [ 152.675487][ T8649] XFS (loop5): Ending clean mount [ 152.677422][ T8649] XFS (loop5): Quotacheck needed: Please wait. [ 152.739517][ T8649] XFS (loop5): Quotacheck: Done. [ 152.787273][ T8687] device syzkaller0 entered promiscuous mode [ 152.805456][ T8664] loop4: detected capacity change from 0 to 40427 [ 152.881843][ T8664] F2FS-fs (loop4): invalid crc value [ 152.907888][ T8664] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.939909][ T8664] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 152.962835][ T6969] XFS (loop5): Unmounting Filesystem [ 153.505116][ T8718] tipc: Enabled bearer , priority 0 [ 153.519278][ T8716] loop2: detected capacity change from 0 to 512 [ 153.528839][ T8718] tipc: Resetting bearer [ 153.532745][ T8717] tipc: Disabling bearer [ 153.556726][ T8721] tipc: Enabled bearer , priority 0 [ 153.558260][ T8721] device syzkaller0 entered promiscuous mode [ 153.581411][ T8721] tipc: Resetting bearer [ 153.583535][ T8720] tipc: Resetting bearer [ 153.587039][ T8720] tipc: Disabling bearer [ 153.747869][ T8730] FAULT_INJECTION: forcing a failure. [ 153.747869][ T8730] name failslab, interval 1, probability 0, space 0, times 0 [ 153.757773][ T8730] CPU: 0 PID: 8730 Comm: syz.4.1064 Not tainted 5.15.189-syzkaller #0 [ 153.759001][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 153.760618][ T8730] Call trace: [ 153.761143][ T8730] dump_backtrace+0x0/0x43c [ 153.761889][ T8730] show_stack+0x2c/0x3c [ 153.762552][ T8730] __dump_stack+0x30/0x40 [ 153.763213][ T8730] dump_stack_lvl+0xf8/0x160 [ 153.763986][ T8730] dump_stack+0x1c/0x5c [ 153.764652][ T8730] should_fail+0x3c0/0x51c [ 153.765316][ T8730] __should_failslab+0xbc/0x10c [ 153.766002][ T8730] should_failslab+0x10/0x28 [ 153.766674][ T8730] slab_pre_alloc_hook+0x64/0xec [ 153.767453][ T8730] __kmalloc+0xbc/0x44c [ 153.768072][ T8730] tomoyo_encode+0x274/0x4a4 [ 153.768697][ T8730] tomoyo_realpath_from_path+0x4bc/0x510 [ 153.769504][ T8730] tomoyo_path_number_perm+0x1b0/0x518 [ 153.770385][ T8730] tomoyo_file_ioctl+0x2c/0x3c [ 153.771148][ T8730] security_file_ioctl+0x80/0xbc [ 153.771878][ T8730] __arm64_sys_ioctl+0xa8/0x1c8 [ 153.772605][ T8730] invoke_syscall+0x98/0x2b8 [ 153.773257][ T8730] el0_svc_common+0x138/0x258 [ 153.773921][ T8730] do_el0_svc+0x58/0x14c [ 153.774493][ T8730] el0_svc+0x78/0x1e0 [ 153.775061][ T8730] el0t_64_sync_handler+0xcc/0xe4 [ 153.775795][ T8730] el0t_64_sync+0x1a0/0x1a4 [ 154.088233][ T8730] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.127816][ T8733] FAULT_INJECTION: forcing a failure. [ 154.127816][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.132414][ T8733] CPU: 1 PID: 8733 Comm: syz.5.1052 Not tainted 5.15.189-syzkaller #0 [ 154.133702][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 154.135379][ T8733] Call trace: [ 154.135891][ T8733] dump_backtrace+0x0/0x43c [ 154.136603][ T8733] show_stack+0x2c/0x3c [ 154.137275][ T8733] __dump_stack+0x30/0x40 [ 154.137931][ T8733] dump_stack_lvl+0xf8/0x160 [ 154.138648][ T8733] dump_stack+0x1c/0x5c [ 154.139286][ T8733] should_fail+0x3c0/0x51c [ 154.139920][ T8733] should_fail_usercopy+0x20/0x30 [ 154.140688][ T8733] sctp_setsockopt+0x208/0x10c4 [ 154.141423][ T8733] sock_common_setsockopt+0xb0/0xcc [ 154.142313][ T8733] __sys_setsockopt+0x260/0x36c [ 154.143150][ T8733] __arm64_sys_setsockopt+0xb8/0xd4 [ 154.144001][ T8733] invoke_syscall+0x98/0x2b8 [ 154.144738][ T8733] el0_svc_common+0x138/0x258 [ 154.145454][ T8733] do_el0_svc+0x58/0x14c [ 154.146079][ T8733] el0_svc+0x78/0x1e0 [ 154.146749][ T8733] el0t_64_sync_handler+0xcc/0xe4 [ 154.147602][ T8733] el0t_64_sync+0x1a0/0x1a4 [ 154.166664][ T8735] FAULT_INJECTION: forcing a failure. [ 154.166664][ T8735] name failslab, interval 1, probability 0, space 0, times 0 [ 154.176070][ T8735] CPU: 1 PID: 8735 Comm: syz.4.1065 Not tainted 5.15.189-syzkaller #0 [ 154.177392][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 154.178963][ T8735] Call trace: [ 154.179433][ T8735] dump_backtrace+0x0/0x43c [ 154.180070][ T8735] show_stack+0x2c/0x3c [ 154.180674][ T8735] __dump_stack+0x30/0x40 [ 154.181293][ T8735] dump_stack_lvl+0xf8/0x160 [ 154.181983][ T8735] dump_stack+0x1c/0x5c [ 154.182573][ T8735] should_fail+0x3c0/0x51c [ 154.183266][ T8735] __should_failslab+0xbc/0x10c [ 154.184082][ T8735] should_failslab+0x10/0x28 [ 154.184735][ T8735] slab_pre_alloc_hook+0x64/0xec [ 154.185456][ T8735] __kmalloc+0xbc/0x44c [ 154.186046][ T8735] __arm64_sys_memfd_create+0x168/0x514 [ 154.186826][ T8735] invoke_syscall+0x98/0x2b8 [ 154.187478][ T8735] el0_svc_common+0x138/0x258 [ 154.188130][ T8735] do_el0_svc+0x58/0x14c [ 154.188766][ T8735] el0_svc+0x78/0x1e0 [ 154.189411][ T8735] el0t_64_sync_handler+0xcc/0xe4 [ 154.190213][ T8735] el0t_64_sync+0x1a0/0x1a4 [ 154.249436][ T8739] device syzkaller0 entered promiscuous mode [ 154.306400][ T8728] loop2: detected capacity change from 0 to 32768 [ 154.332669][ T8727] loop1: detected capacity change from 0 to 32768 [ 154.340975][ T8750] FAULT_INJECTION: forcing a failure. [ 154.340975][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.343073][ T8750] CPU: 0 PID: 8750 Comm: syz.4.1070 Not tainted 5.15.189-syzkaller #0 [ 154.344265][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 154.345772][ T8750] Call trace: [ 154.346255][ T8750] dump_backtrace+0x0/0x43c [ 154.346912][ T8750] show_stack+0x2c/0x3c [ 154.347487][ T8750] __dump_stack+0x30/0x40 [ 154.348103][ T8750] dump_stack_lvl+0xf8/0x160 [ 154.348744][ T8750] dump_stack+0x1c/0x5c [ 154.349374][ T8750] should_fail+0x3c0/0x51c [ 154.349970][ T8750] should_fail_usercopy+0x20/0x30 [ 154.350689][ T8750] simple_read_from_buffer+0xd0/0x264 [ 154.351526][ T8750] proc_fail_nth_read+0x19c/0x244 [ 154.352279][ T8750] vfs_read+0x278/0xa10 [ 154.352837][ T8750] ksys_read+0x120/0x210 [ 154.353519][ T8750] __arm64_sys_read+0x7c/0x90 [ 154.354248][ T8750] invoke_syscall+0x98/0x2b8 [ 154.354959][ T8750] el0_svc_common+0x138/0x258 [ 154.355737][ T8750] do_el0_svc+0x58/0x14c [ 154.356366][ T8750] el0_svc+0x78/0x1e0 [ 154.356954][ T8750] el0t_64_sync_handler+0xcc/0xe4 [ 154.357678][ T8750] el0t_64_sync+0x1a0/0x1a4 [ 154.429706][ T8746] loop5: detected capacity change from 0 to 512 [ 154.436978][ T8728] XFS (loop2): Mounting V5 Filesystem [ 154.441718][ T8727] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.530201][ T8728] XFS (loop2): Ending clean mount [ 154.534578][ T8728] XFS (loop2): Quotacheck needed: Please wait. [ 154.548080][ T4044] ocfs2: Unmounting device (7,1) on (node local) [ 154.551277][ T8770] FAULT_INJECTION: forcing a failure. [ 154.551277][ T8770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.553349][ T8770] CPU: 0 PID: 8770 Comm: syz.0.1075 Not tainted 5.15.189-syzkaller #0 [ 154.554579][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 154.556057][ T8770] Call trace: [ 154.556521][ T8770] dump_backtrace+0x0/0x43c [ 154.557195][ T8770] show_stack+0x2c/0x3c [ 154.557782][ T8770] __dump_stack+0x30/0x40 [ 154.558403][ T8770] dump_stack_lvl+0xf8/0x160 [ 154.559115][ T8770] dump_stack+0x1c/0x5c [ 154.559716][ T8770] should_fail+0x3c0/0x51c [ 154.560350][ T8770] should_fail_usercopy+0x20/0x30 [ 154.561048][ T8770] simple_read_from_buffer+0xd0/0x264 [ 154.561865][ T8770] proc_fail_nth_read+0x19c/0x244 [ 154.562557][ T8770] vfs_read+0x278/0xa10 [ 154.563227][ T8770] ksys_read+0x120/0x210 [ 154.563943][ T8770] __arm64_sys_read+0x7c/0x90 [ 154.564662][ T8770] invoke_syscall+0x98/0x2b8 [ 154.565370][ T8770] el0_svc_common+0x138/0x258 [ 154.566088][ T8770] do_el0_svc+0x58/0x14c [ 154.566740][ T8770] el0_svc+0x78/0x1e0 [ 154.567386][ T8770] el0t_64_sync_handler+0xcc/0xe4 [ 154.568189][ T8770] el0t_64_sync+0x1a0/0x1a4 [ 154.569977][ T8768] tipc: Enabled bearer , priority 0 [ 154.571785][ T8768] device syzkaller0 entered promiscuous mode [ 154.577554][ T8768] tipc: Resetting bearer [ 154.579828][ T8767] tipc: Resetting bearer [ 154.583269][ T8767] tipc: Disabling bearer [ 154.586377][ T8728] XFS (loop2): Quotacheck: Done. [ 154.692969][ T8772] loop5: detected capacity change from 0 to 32768 [ 154.742199][ T8772] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1076 (8772) [ 154.747440][ T4051] XFS (loop2): Unmounting Filesystem [ 154.782730][ T8772] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 154.784121][ T8772] BTRFS info (device loop5): metadata ratio 1025 [ 154.785094][ T8772] BTRFS info (device loop5): enabling disk space caching [ 154.786208][ T8772] BTRFS info (device loop5): enabling ssd optimizations [ 154.787312][ T8772] BTRFS info (device loop5): force clearing of disk cache [ 154.788391][ T8772] BTRFS info (device loop5): turning off barriers [ 154.789434][ T8772] BTRFS info (device loop5): setting nodatacow, compression disabled [ 154.790907][ T8772] BTRFS info (device loop5): using spread ssd allocation scheme [ 154.792090][ T8772] BTRFS info (device loop5): disk space caching is enabled [ 154.793148][ T8772] BTRFS info (device loop5): has skinny extents [ 154.807120][ T8782] FAULT_INJECTION: forcing a failure. [ 154.807120][ T8782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.816572][ T8782] CPU: 1 PID: 8782 Comm: syz.4.1081 Not tainted 5.15.189-syzkaller #0 [ 154.817789][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 154.819230][ T8782] Call trace: [ 154.819722][ T8782] dump_backtrace+0x0/0x43c [ 154.820368][ T8782] show_stack+0x2c/0x3c [ 154.821014][ T8782] __dump_stack+0x30/0x40 [ 154.821636][ T8782] dump_stack_lvl+0xf8/0x160 [ 154.822354][ T8782] dump_stack+0x1c/0x5c [ 154.823054][ T8782] should_fail+0x3c0/0x51c [ 154.823761][ T8782] should_fail_usercopy+0x20/0x30 [ 154.824544][ T8782] iovec_from_user+0xcc/0x688 [ 154.825270][ T8782] __import_iovec+0x80/0x40c [ 154.826025][ T8782] import_iovec+0x88/0xa4 [ 154.826660][ T8782] ___sys_sendmsg+0x19c/0x240 [ 154.827355][ T8782] __arm64_sys_sendmsg+0x1a8/0x254 [ 154.828010][ T8779] loop0: detected capacity change from 0 to 2048 [ 154.828223][ T8782] invoke_syscall+0x98/0x2b8 [ 154.830009][ T8782] el0_svc_common+0x138/0x258 [ 154.830803][ T8782] do_el0_svc+0x58/0x14c [ 154.831517][ T8782] el0_svc+0x78/0x1e0 [ 154.832171][ T8782] el0t_64_sync_handler+0xcc/0xe4 [ 154.832911][ T8782] el0t_64_sync+0x1a0/0x1a4 [ 154.833620][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.848201][ T8777] loop1: detected capacity change from 0 to 8192 [ 154.874828][ T8792] device syzkaller0 entered promiscuous mode [ 154.885902][ T8777] loop1: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 154.886215][ T8777] loop1: p1 start 100663296 is beyond EOD, truncated [ 154.904821][ T8777] loop1: p2 size 134217732 extends beyond EOD, truncated [ 154.909581][ T8777] loop1: p4 start 83886080 is beyond EOD, [ 154.912272][ T8779] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.915165][ T8777] truncated [ 154.915649][ T8777] loop1: p5 start 100663296 is beyond EOD, truncated [ 154.916755][ T8777] loop1: p6 size 134217732 extends beyond EOD, truncated [ 154.920461][ T8777] loop1: p7 start 83886080 is beyond EOD, truncated [ 154.921442][ T8777] loop1: p8 start 100663296 is beyond EOD, truncated [ 154.922443][ T8777] loop1: p9 size 134217732 extends beyond EOD, truncated [ 154.928668][ T8777] loop1: p10 start 83886080 is beyond EOD, truncated [ 154.929782][ T8777] loop1: p11 start 100663296 is beyond EOD, truncated [ 154.938568][ T8777] loop1: p12 size 134217732 extends beyond EOD, truncated [ 154.939937][ T8777] loop1: p13 start 83886080 is beyond EOD, truncated [ 154.940937][ T8777] loop1: p14 start 100663296 is beyond EOD, truncated [ 154.942121][ T8777] loop1: p15 size 134217732 extends beyond EOD, truncated [ 154.948735][ T8777] loop1: p16 start 83886080 is beyond EOD, truncated [ 154.949958][ T8777] loop1: p17 start 100663296 is beyond EOD, truncated [ 154.950984][ T8777] loop1: p18 size 134217732 extends beyond EOD, truncated [ 154.958743][ T8777] loop1: p19 start 83886080 is beyond EOD, truncated [ 154.959808][ T8777] loop1: p20 start 100663296 is beyond EOD, truncated [ 154.961473][ T8777] loop1: p21 size 134217732 extends beyond EOD, truncated [ 155.003310][ T8777] loop1: p22 start 83886080 is beyond EOD, truncated [ 155.004360][ T8777] loop1: p23 start 100663296 is beyond EOD, truncated [ 155.005313][ T8777] loop1: p24 size 134217732 extends beyond EOD, truncated [ 155.006744][ T8777] loop1: p25 start 83886080 is beyond EOD, truncated [ 155.007680][ T8777] loop1: p26 start 100663296 is beyond EOD, truncated [ 155.018423][ T8777] loop1: p27 size 134217732 extends beyond EOD, truncated [ 155.023791][ T8777] loop1: p28 start 83886080 is beyond EOD, truncated [ 155.024848][ T8777] loop1: p29 start 100663296 is beyond EOD, truncated [ 155.025921][ T8777] loop1: p30 size 134217732 extends beyond EOD, truncated [ 155.039176][ T8777] loop1: p31 start 83886080 is beyond EOD, truncated [ 155.040239][ T8777] loop1: p32 start 100663296 is beyond EOD, truncated [ 155.041316][ T8777] loop1: p33 size 134217732 extends beyond EOD, truncated [ 155.042810][ T8777] loop1: p34 start 83886080 is beyond EOD, truncated [ 155.043834][ T8777] loop1: p35 start 100663296 is beyond EOD, truncated [ 155.044982][ T8777] loop1: p36 size 134217732 extends beyond EOD, truncated [ 155.063139][ T8777] loop1: p37 start 83886080 is beyond EOD, truncated [ 155.064181][ T8777] loop1: p38 start 100663296 is beyond EOD, truncated [ 155.065185][ T8777] loop1: p39 size 134217732 extends beyond EOD, truncated [ 155.073583][ T8772] BTRFS info (device loop5): clearing free space tree [ 155.074681][ T8772] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.076234][ T8772] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.091287][ T8804] loop4: detected capacity change from 0 to 128 [ 155.094153][ T8777] loop1: p40 start 83886080 is beyond EOD, truncated [ 155.095205][ T8777] loop1: p41 start 100663296 is beyond EOD, truncated [ 155.096260][ T8777] loop1: p42 size 134217732 extends beyond EOD, truncated [ 155.103219][ T8777] loop1: p43 start 83886080 is beyond EOD, truncated [ 155.104372][ T8777] loop1: p44 start 100663296 is beyond EOD, truncated [ 155.105388][ T8777] loop1: p45 size 134217732 extends beyond EOD, truncated [ 155.114079][ T8777] loop1: p46 start 83886080 is beyond EOD, truncated [ 155.117034][ T8777] loop1: p47 start 100663296 is beyond EOD, truncated [ 155.118145][ T8777] loop1: p48 size 134217732 extends beyond EOD, truncated [ 155.129407][ T8777] loop1: p49 start 83886080 is beyond EOD, truncated [ 155.130479][ T8777] loop1: p50 start 100663296 is beyond EOD, truncated [ 155.131576][ T8777] loop1: p51 size 134217732 extends beyond EOD, truncated [ 155.489437][ T8777] loop1: p52 start 83886080 is beyond EOD, truncated [ 155.493823][ T8777] loop1: p53 start 100663296 is beyond EOD, truncated [ 155.511488][ T8777] loop1: p54 size 134217732 extends beyond EOD, truncated [ 155.517140][ T8777] loop1: p55 start 83886080 is beyond EOD, truncated [ 155.526488][ T8777] loop1: p56 start 100663296 is beyond EOD, truncated [ 155.527691][ T8777] loop1: p57 size 134217732 extends beyond EOD, truncated [ 155.554526][ T8777] loop1: p58 start 83886080 is beyond EOD, truncated [ 155.556732][ T8777] loop1: p59 start 100663296 is beyond EOD, truncated [ 155.560311][ T8777] loop1: p60 size 134217732 extends beyond EOD, truncated [ 155.574854][ T8777] loop1: p61 start 83886080 is beyond EOD, truncated [ 155.576160][ T8777] loop1: p62 start 100663296 is beyond EOD, truncated [ 155.577364][ T8777] loop1: p63 size 134217732 extends beyond EOD, truncated [ 155.580637][ T8777] loop1: p64 start 83886080 is beyond EOD, truncated [ 155.582106][ T8777] loop1: p65 start 100663296 is beyond EOD, truncated [ 155.583328][ T8777] loop1: p66 size 134217732 extends beyond EOD, truncated [ 155.587478][ T8777] loop1: p67 start 83886080 is beyond EOD, truncated [ 155.589221][ T8777] loop1: p68 start 100663296 is beyond EOD, truncated [ 155.590417][ T8777] loop1: p69 size 134217732 extends beyond EOD, truncated [ 155.595943][ T8777] loop1: p70 start 83886080 is beyond EOD, truncated [ 155.597089][ T8777] loop1: p71 start 100663296 is beyond EOD, truncated [ 155.602852][ T8777] loop1: p72 size 134217732 extends beyond EOD, truncated [ 155.606331][ T8777] loop1: p73 start 83886080 is beyond EOD, truncated [ 155.607369][ T8777] loop1: p74 start 100663296 is beyond EOD, truncated [ 155.617828][ T8777] loop1: p75 size 134217732 extends beyond EOD, truncated [ 155.621447][ T8777] loop1: p76 start 83886080 is beyond EOD, truncated [ 155.622539][ T8777] loop1: p77 start 100663296 is beyond EOD, truncated [ 155.624680][ T8777] loop1: p78 size 134217732 extends beyond EOD, truncated [ 155.627064][ T8777] loop1: p79 start 83886080 is beyond EOD, truncated [ 155.631341][ T8777] loop1: p80 start 100663296 is beyond EOD, truncated [ 155.633560][ T8777] loop1: p81 size 134217732 extends beyond EOD, truncated [ 155.637921][ T8777] loop1: p82 start 83886080 is beyond EOD, truncated [ 155.639145][ T8777] loop1: p83 start 100663296 is beyond EOD, truncated [ 155.640360][ T8777] loop1: p84 size 134217732 extends beyond EOD, truncated [ 155.642042][ T8777] loop1: p85 start 83886080 is beyond EOD, truncated [ 155.643146][ T8777] loop1: p86 start 100663296 is beyond EOD, truncated [ 155.644316][ T8777] loop1: p87 size 134217732 extends beyond EOD, truncated [ 155.648631][ T8777] loop1: p88 start 83886080 is beyond EOD, truncated [ 155.649834][ T8777] loop1: p89 start 100663296 is beyond EOD, truncated [ 155.650813][ T8777] loop1: p90 size 134217732 extends beyond EOD, truncated [ 155.654577][ T8777] loop1: p91 start 83886080 is beyond EOD, truncated [ 155.655686][ T8777] loop1: p92 start 100663296 is beyond EOD, truncated [ 155.656643][ T8777] loop1: p93 size 134217732 extends beyond EOD, truncated [ 155.661214][ T8777] loop1: p94 start 83886080 is beyond EOD, truncated [ 155.662279][ T8777] loop1: p95 start 100663296 is beyond EOD, truncated [ 155.663216][ T8777] loop1: p96 size 134217732 extends beyond EOD, truncated [ 155.667301][ T8777] loop1: p97 start 83886080 is beyond EOD, truncated [ 155.668971][ T8777] loop1: p98 start 100663296 is beyond EOD, truncated [ 155.670136][ T8777] loop1: p99 size 134217732 extends beyond EOD, truncated [ 155.673896][ T8777] loop1: p100 start 83886080 is beyond EOD, truncated [ 155.675012][ T8777] loop1: p101 start 100663296 is beyond EOD, truncated [ 155.676086][ T8777] loop1: p102 size 134217732 extends beyond EOD, truncated [ 155.679431][ T8777] loop1: p103 start 83886080 is beyond EOD, truncated [ 155.681624][ T8777] loop1: p104 start 100663296 is beyond EOD, truncated [ 155.684541][ T8777] loop1: p105 size 134217732 extends beyond EOD, truncated [ 155.687429][ T8777] loop1: p106 start 83886080 is beyond EOD, truncated [ 155.689913][ T8777] loop1: p107 start 100663296 is beyond EOD, truncated [ 155.690918][ T8777] loop1: p108 size 134217732 extends beyond EOD, truncated [ 155.694284][ T8777] loop1: p109 start 83886080 is beyond EOD, truncated [ 155.695468][ T8777] loop1: p110 start 100663296 is beyond EOD, truncated [ 155.697676][ T8777] loop1: p111 size 134217732 extends beyond EOD, truncated [ 155.701169][ T8777] loop1: p112 start 83886080 is beyond EOD, truncated [ 155.703590][ T8777] loop1: p113 start 100663296 is beyond EOD, truncated [ 155.704910][ T8777] loop1: p114 size 134217732 extends beyond EOD, truncated [ 155.708460][ T8777] loop1: p115 start 83886080 is beyond EOD, truncated [ 155.709698][ T8777] loop1: p116 start 100663296 is beyond EOD, truncated [ 155.710788][ T8777] loop1: p117 size 134217732 extends beyond EOD, truncated [ 155.713974][ T8777] loop1: p118 start 83886080 is beyond EOD, truncated [ 155.715147][ T8777] loop1: p119 start 100663296 is beyond EOD, truncated [ 155.717325][ T8777] loop1: p120 size 134217732 extends beyond EOD, truncated [ 155.720214][ T8777] loop1: p121 start 83886080 is beyond EOD, truncated [ 155.722480][ T8777] loop1: p122 start 100663296 is beyond EOD, truncated [ 155.724655][ T8777] loop1: p123 size 134217732 extends beyond EOD, truncated [ 155.726109][ T8777] loop1: p124 start 83886080 is beyond EOD, truncated [ 155.727266][ T8777] loop1: p125 start 100663296 is beyond EOD, truncated [ 155.729968][ T8777] loop1: p126 size 134217732 extends beyond EOD, truncated [ 155.737568][ T8777] loop1: p127 start 83886080 is beyond EOD, truncated [ 155.739947][ T8777] loop1: p128 start 100663296 is beyond EOD, truncated [ 155.742166][ T8777] loop1: p129 size 134217732 extends beyond EOD, truncated [ 155.745559][ T8777] loop1: p130 start 83886080 is beyond EOD, truncated [ 155.747771][ T8777] loop1: p131 start 100663296 is beyond EOD, truncated [ 155.749913][ T8777] loop1: p132 size 134217732 extends beyond EOD, truncated [ 155.752933][ T8777] loop1: p133 start 83886080 is beyond EOD, truncated [ 155.754795][ T8777] loop1: p134 start 100663296 is beyond EOD, truncated [ 155.757146][ T8777] loop1: p135 size 134217732 extends beyond EOD, truncated [ 155.760744][ T8777] loop1: p136 start 83886080 is beyond EOD, truncated [ 155.783263][ T7723] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop5 scanned by udevd (7723) [ 155.836815][ T8777] loop1: p137 start 100663296 is beyond EOD, truncated [ 155.837891][ T8777] loop1: p138 size 134217732 extends beyond EOD, truncated [ 155.840056][ T8820] loop2: detected capacity change from 0 to 512 [ 155.846770][ T8777] loop1: p139 start 83886080 is beyond EOD, truncated [ 155.847877][ T8777] loop1: p140 start 100663296 is beyond EOD, truncated [ 155.849156][ T8777] loop1: p141 size 134217732 extends beyond EOD, truncated [ 155.858512][ T8777] loop1: p142 start 83886080 is beyond EOD, truncated [ 155.859585][ T8777] loop1: p143 start 100663296 is beyond EOD, truncated [ 155.860719][ T8777] loop1: p144 size 134217732 extends beyond EOD, truncated [ 155.862388][ T8777] loop1: p145 start 83886080 is beyond EOD, truncated [ 155.863412][ T8777] loop1: p146 start 100663296 is beyond EOD, truncated [ 155.864464][ T8777] loop1: p147 size 134217732 extends beyond EOD, truncated [ 155.865932][ T8777] loop1: p148 start 83886080 is beyond EOD, truncated [ 155.867035][ T8777] loop1: p149 start 100663296 is beyond EOD, truncated [ 155.868065][ T8777] loop1: p150 size 134217732 extends beyond EOD, truncated [ 155.873819][ T8777] loop1: p151 start 83886080 is beyond EOD, truncated [ 155.874918][ T8777] loop1: p152 start 100663296 is beyond EOD, truncated [ 155.875936][ T8777] loop1: p153 size 134217732 extends beyond EOD, truncated [ 155.897652][ T8777] loop1: p154 start 83886080 is beyond EOD, truncated [ 155.903064][ T8777] loop1: p155 start 100663296 is beyond EOD, truncated [ 155.904140][ T8777] loop1: p156 size 134217732 extends beyond EOD, truncated [ 155.906796][ T8777] loop1: p157 start 83886080 is beyond EOD, truncated [ 155.907857][ T8777] loop1: p158 start 100663296 is beyond EOD, truncated [ 155.909008][ T8777] loop1: p159 size 134217732 extends beyond EOD, truncated [ 155.910519][ T8777] loop1: p160 start 83886080 is beyond EOD, truncated [ 155.911613][ T8777] loop1: p161 start 100663296 is beyond EOD, truncated [ 155.912794][ T8777] loop1: p162 size 134217732 extends beyond EOD, truncated [ 155.914401][ T8777] loop1: p163 start 83886080 is beyond EOD, truncated [ 155.915468][ T8777] loop1: p164 start 100663296 is beyond EOD, truncated [ 155.916453][ T8777] loop1: p165 size 134217732 extends beyond EOD, truncated [ 155.917931][ T8777] loop1: p166 start 83886080 is beyond EOD, truncated [ 155.932346][ T8777] loop1: p167 start 100663296 is beyond EOD, truncated [ 155.933464][ T8777] loop1: p168 size 134217732 extends beyond EOD, truncated [ 155.934910][ T8777] loop1: p169 start 83886080 is beyond EOD, truncated [ 155.935932][ T8777] loop1: p170 start 100663296 is beyond EOD, truncated [ 155.936925][ T8777] loop1: p171 size 134217732 extends beyond EOD, truncated [ 155.951814][ T8777] loop1: p172 start 83886080 is beyond EOD, truncated [ 155.952894][ T8777] loop1: p173 start 100663296 is beyond EOD, truncated [ 155.953946][ T8777] loop1: p174 size 134217732 extends beyond EOD, truncated [ 155.984382][ T8816] loop5: detected capacity change from 0 to 32768 [ 155.999409][ T8777] loop1: p175 start 83886080 is beyond EOD, truncated [ 156.000537][ T8777] loop1: p176 start 100663296 is beyond EOD, truncated [ 156.001591][ T8777] loop1: p177 size 134217732 extends beyond EOD, truncated [ 156.006085][ T8777] loop1: p178 start 83886080 is beyond EOD, truncated [ 156.007166][ T8777] loop1: p179 start 100663296 is beyond EOD, truncated [ 156.008152][ T8777] loop1: p180 size 134217732 extends beyond EOD, truncated [ 156.022516][ T8777] loop1: p181 start 83886080 is beyond EOD, truncated [ 156.023616][ T8777] loop1: p182 start 100663296 is beyond EOD, truncated [ 156.024646][ T8777] loop1: p183 size 134217732 extends beyond EOD, truncated [ 156.026069][ T8777] loop1: p184 start 83886080 is beyond EOD, truncated [ 156.027308][ T8777] loop1: p185 start 100663296 is beyond EOD, truncated [ 156.030527][ T8777] loop1: p186 size 134217732 extends beyond EOD, truncated [ 156.031922][ T8777] loop1: p187 start 83886080 is beyond EOD, truncated [ 156.033033][ T8777] loop1: p188 start 100663296 is beyond EOD, truncated [ 156.034122][ T8777] loop1: p189 size 134217732 extends beyond EOD, truncated [ 156.362580][ T8777] loop1: p190 start 83886080 is beyond EOD, truncated [ 156.366936][ T8777] loop1: p191 start 100663296 is beyond EOD, truncated [ 156.371176][ T8777] loop1: p192 size 134217732 extends beyond EOD, truncated [ 156.375237][ T8777] loop1: p193 start 83886080 is beyond EOD, truncated [ 156.377047][ T8777] loop1: p194 start 100663296 is beyond EOD, truncated [ 156.378239][ T8777] loop1: p195 size 134217732 extends beyond EOD, truncated [ 156.380224][ T8777] loop1: p196 start 83886080 is beyond EOD, truncated [ 156.381449][ T8777] loop1: p197 start 100663296 is beyond EOD, truncated [ 156.382514][ T8777] loop1: p198 size 134217732 extends beyond EOD, truncated [ 156.384916][ T8777] loop1: p199 start 83886080 is beyond EOD, truncated [ 156.385681][ T8830] loop4: detected capacity change from 0 to 4096 [ 156.386126][ T8777] loop1: p200 start 100663296 is beyond EOD, truncated [ 156.388127][ T8777] loop1: p201 size 134217732 extends beyond EOD, truncated [ 156.396161][ T8816] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1085 (8816) [ 156.397014][ T8777] loop1: p202 start 83886080 is beyond EOD, truncated [ 156.399657][ T8777] loop1: p203 start 100663296 is beyond EOD, truncated [ 156.401440][ T8777] loop1: p204 size 134217732 extends beyond EOD, truncated [ 156.403403][ T8816] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 156.404608][ T8777] loop1: p205 start 83886080 is beyond EOD, truncated [ 156.406967][ T8816] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 156.407331][ T8777] loop1: p206 start 100663296 is beyond EOD, truncated [ 156.412646][ T8777] loop1: p207 size 134217732 extends beyond EOD, truncated [ 156.412952][ T8816] BTRFS info (device loop5): use zstd compression, level 3 [ 156.414704][ T8777] loop1: p208 start 83886080 is beyond EOD, truncated [ 156.416833][ T8816] BTRFS info (device loop5): using free space tree [ 156.417065][ T8777] loop1: p209 start 100663296 is beyond EOD, truncated [ 156.419611][ T8777] loop1: p210 size 134217732 extends beyond EOD, truncated [ 156.421237][ T8777] loop1: p211 start 83886080 is beyond EOD, truncated [ 156.422697][ T8777] loop1: p212 start 100663296 is beyond EOD, truncated [ 156.425025][ T8777] loop1: p213 size 134217732 extends beyond EOD, truncated [ 156.426489][ T8830] NILFS (loop4): invalid segment: Checksum error in segment payload [ 156.427280][ T8777] loop1: p214 start 83886080 is beyond EOD, truncated [ 156.427930][ T8830] NILFS (loop4): trying rollback from an earlier position [ 156.429488][ T8777] loop1: p215 start 100663296 is beyond EOD, truncated [ 156.432284][ T8777] loop1: p216 size 134217732 extends beyond EOD, truncated [ 156.434611][ T8830] NILFS (loop4): invalid segment: Checksum error in segment payload [ 156.435417][ T8777] loop1: p217 start 83886080 is beyond EOD, truncated [ 156.437040][ T8830] NILFS (loop4): error -22 while searching super root [ 156.437389][ T8777] loop1: p218 start 100663296 is beyond EOD, truncated [ 156.438617][ T8816] BTRFS info (device loop5): has skinny extents [ 156.439949][ T8777] loop1: p219 size 134217732 extends beyond EOD, truncated [ 156.446887][ T8777] loop1: p220 start 83886080 is beyond EOD, truncated [ 156.449090][ T8777] loop1: p221 start 100663296 is beyond EOD, truncated [ 156.451216][ T8777] loop1: p222 size 134217732 extends beyond EOD, truncated [ 156.454959][ T8777] loop1: p223 start 83886080 is beyond EOD, truncated [ 156.459702][ T8777] loop1: p224 start 100663296 is beyond EOD, truncated [ 156.460992][ T8777] loop1: p225 size 134217732 extends beyond EOD, truncated [ 156.462781][ T8777] loop1: p226 start 83886080 is beyond EOD, truncated [ 156.463904][ T8777] loop1: p227 start 100663296 is beyond EOD, truncated [ 156.465033][ T8777] loop1: p228 size 134217732 extends beyond EOD, truncated [ 156.467082][ T8777] loop1: p229 start 83886080 is beyond EOD, truncated [ 156.472235][ T8777] loop1: p230 start 100663296 is beyond EOD, truncated [ 156.473525][ T8777] loop1: p231 size 134217732 extends beyond EOD, truncated [ 156.475634][ T8777] loop1: p232 start 83886080 is beyond EOD, truncated [ 156.477038][ T8777] loop1: p233 start 100663296 is beyond EOD, truncated [ 156.479173][ T8777] loop1: p234 size 134217732 extends beyond EOD, truncated [ 156.480935][ T8777] loop1: p235 start 83886080 is beyond EOD, truncated [ 156.482349][ T8777] loop1: p236 start 100663296 is beyond EOD, truncated [ 156.483813][ T8777] loop1: p237 size 134217732 extends beyond EOD, truncated [ 156.486674][ T8777] loop1: p238 start 83886080 is beyond EOD, truncated [ 156.487822][ T8777] loop1: p239 start 100663296 is beyond EOD, truncated [ 156.502689][ T8777] loop1: p240 size 134217732 extends beyond EOD, truncated [ 156.505064][ T8777] loop1: p241 start 83886080 is beyond EOD, truncated [ 156.506505][ T8777] loop1: p242 start 100663296 is beyond EOD, truncated [ 156.507702][ T8777] loop1: p243 size 134217732 extends beyond EOD, truncated [ 156.510002][ T8777] loop1: p244 start 83886080 is beyond EOD, truncated [ 156.511093][ T8777] loop1: p245 start 100663296 is beyond EOD, truncated [ 156.512154][ T8777] loop1: p246 size 134217732 extends beyond EOD, truncated [ 156.518896][ T8816] BTRFS info (device loop5): enabling ssd optimizations [ 156.539109][ T8777] loop1: p247 start 83886080 is beyond EOD, truncated [ 156.540230][ T8777] loop1: p248 start 100663296 is beyond EOD, truncated [ 156.544556][ T8777] loop1: p249 size 134217732 extends beyond EOD, truncated [ 156.547158][ T8777] loop1: p250 start 83886080 is beyond EOD, truncated [ 156.550380][ T8777] loop1: p251 start 100663296 is beyond EOD, truncated [ 156.551493][ T8777] loop1: p252 size 134217732 extends beyond EOD, truncated [ 156.557227][ T8777] loop1: p253 start 83886080 is beyond EOD, truncated [ 156.562943][ T8777] loop1: p254 start 100663296 is beyond EOD, truncated [ 156.564105][ T8777] loop1: p255 size 134217732 extends beyond EOD, truncated [ 156.566088][ T8852] FAULT_INJECTION: forcing a failure. [ 156.566088][ T8852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.571875][ T8852] CPU: 0 PID: 8852 Comm: syz.4.1090 Not tainted 5.15.189-syzkaller #0 [ 156.573157][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 156.574786][ T8852] Call trace: [ 156.575275][ T8852] dump_backtrace+0x0/0x43c [ 156.575971][ T8852] show_stack+0x2c/0x3c [ 156.576515][ T8852] __dump_stack+0x30/0x40 [ 156.577209][ T8852] dump_stack_lvl+0xf8/0x160 [ 156.577912][ T8852] dump_stack+0x1c/0x5c [ 156.578533][ T8852] should_fail+0x3c0/0x51c [ 156.579180][ T8852] should_fail_alloc_page+0x74/0xa8 [ 156.579904][ T8852] prepare_alloc_pages+0x160/0x460 [ 156.580639][ T8852] __alloc_pages+0x108/0x470 [ 156.581327][ T8852] alloc_pages_vma+0x284/0x7a8 [ 156.582086][ T8852] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 156.583111][ T8852] handle_mm_fault+0x1904/0x2950 [ 156.583879][ T8852] do_page_fault+0x694/0xad4 [ 156.584561][ T8852] do_translation_fault+0xe0/0x130 [ 156.585336][ T8852] do_mem_abort+0x6c/0x1ac [ 156.585951][ T8852] el0_da+0x90/0x1fc [ 156.586555][ T8852] el0t_64_sync_handler+0xd8/0xe4 [ 156.587366][ T8852] el0t_64_sync+0x1a0/0x1a4 [ 156.591982][ T8852] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 156.637235][ T8852] loop4: detected capacity change from 0 to 4096 [ 156.664471][ T8852] NILFS (loop4): invalid segment: Checksum error in segment payload [ 156.666147][ T8852] NILFS (loop4): trying rollback from an earlier position [ 156.667667][ T8852] NILFS (loop4): invalid segment: Checksum error in segment payload [ 156.672428][ T8852] NILFS (loop4): error -22 while searching super root [ 156.677211][ T8857] tipc: Enabled bearer , priority 0 [ 156.679640][ T8857] device syzkaller0 entered promiscuous mode [ 156.694368][ T8857] tipc: Resetting bearer [ 156.730801][ T8856] tipc: Resetting bearer [ 156.735934][ T8856] tipc: Disabling bearer [ 157.285227][ T8869] device syzkaller0 entered promiscuous mode [ 157.395242][ T8863] loop2: detected capacity change from 0 to 32768 [ 157.457687][ T8876] loop5: detected capacity change from 0 to 512 [ 157.471872][ T8863] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1095 (8863) [ 157.482299][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 157.485776][ T7735] udevd[7735]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 157.493260][ T7718] udevd[7718]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 157.496440][ T7734] udevd[7734]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 157.496631][ T7722] udevd[7722]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 157.517483][ T8883] udevd[8883]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 157.521820][ T8863] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 157.523543][ T8863] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 157.524922][ T8863] BTRFS info (device loop2): use zstd compression, level 3 [ 157.526026][ T8863] BTRFS info (device loop2): using free space tree [ 157.526939][ T8863] BTRFS info (device loop2): has skinny extents [ 157.542523][ T8882] udevd[8882]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 157.577799][ T8885] udevd[8885]: inotify_add_watch(7, /dev/loop1p24, 10) failed: No such file or directory [ 157.598164][ T8884] udevd[8884]: inotify_add_watch(7, /dev/loop1p21, 10) failed: No such file or directory [ 157.653097][ T8901] FAULT_INJECTION: forcing a failure. [ 157.653097][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 157.655165][ T8901] CPU: 1 PID: 8901 Comm: syz.5.1102 Not tainted 5.15.189-syzkaller #0 [ 157.656412][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 157.657875][ T8901] Call trace: [ 157.658379][ T8901] dump_backtrace+0x0/0x43c [ 157.659080][ T8901] show_stack+0x2c/0x3c [ 157.659728][ T8901] __dump_stack+0x30/0x40 [ 157.660417][ T8901] dump_stack_lvl+0xf8/0x160 [ 157.661123][ T8901] dump_stack+0x1c/0x5c [ 157.661737][ T8901] should_fail+0x3c0/0x51c [ 157.662422][ T8901] __should_failslab+0xbc/0x10c [ 157.663159][ T8901] should_failslab+0x10/0x28 [ 157.663861][ T8901] slab_pre_alloc_hook+0x64/0xec [ 157.664642][ T8901] __kmalloc_track_caller+0x74/0x370 [ 157.665452][ T8901] memdup_sockptr+0xd0/0x174 [ 157.666140][ T8901] ip_setsockopt+0x19a0/0x2978 [ 157.666884][ T8901] tcp_setsockopt+0x1d4/0x1bf4 [ 157.667629][ T8901] sock_common_setsockopt+0xb0/0xcc [ 157.668399][ T8901] __sys_setsockopt+0x260/0x36c [ 157.669097][ T8901] __arm64_sys_setsockopt+0xb8/0xd4 [ 157.669892][ T8901] invoke_syscall+0x98/0x2b8 [ 157.670540][ T8901] el0_svc_common+0x138/0x258 [ 157.671187][ T8901] do_el0_svc+0x58/0x14c [ 157.671788][ T8901] el0_svc+0x78/0x1e0 [ 157.672336][ T8901] el0t_64_sync_handler+0xcc/0xe4 [ 157.673028][ T8901] el0t_64_sync+0x1a0/0x1a4 [ 157.693722][ T8893] udevd[8893]: inotify_add_watch(7, /dev/loop1p33, 10) failed: No such file or directory [ 157.770299][ T8863] BTRFS info (device loop2): enabling ssd optimizations [ 157.778016][ T8863] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1095'. [ 157.819155][ T8879] loop1: detected capacity change from 0 to 32768 [ 157.841279][ T8879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1100 (8879) [ 157.852307][ T8879] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 157.853618][ T8879] BTRFS info (device loop1): using free space tree [ 157.854766][ T8879] BTRFS info (device loop1): has skinny extents [ 157.861383][ T4541] libceph: connect (1)[c::]:6789 error -101 [ 157.868481][ T4541] libceph: mon0 (1)[c::]:6789 connect error [ 157.902231][ T4541] libceph: connect (1)[c::]:6789 error -101 [ 157.903381][ T4541] libceph: mon0 (1)[c::]:6789 connect error [ 157.994353][ T8905] loop0: detected capacity change from 0 to 32768 [ 158.049669][ T8863] ceph: No mds server is up or the cluster is laggy [ 158.054091][ T8915] ceph: No mds server is up or the cluster is laggy [ 158.070087][ T8905] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1101 (8905) [ 158.382927][ T4541] libceph: connect (1)[c::]:6789 error -101 [ 158.384756][ T4541] libceph: mon0 (1)[c::]:6789 connect error [ 158.713667][ T8950] tipc: Enabled bearer , priority 0 [ 158.721556][ T8950] device syzkaller0 entered promiscuous mode [ 158.723155][ T8879] BTRFS info (device loop1): enabling ssd optimizations [ 158.729341][ T1969] Bluetooth: hci1: command 0x0406 tx timeout [ 158.730416][ T1969] Bluetooth: hci2: command 0x0406 tx timeout [ 158.731441][ T1969] Bluetooth: hci3: command 0x0406 tx timeout [ 158.733298][ T8949] tipc: Resetting bearer [ 158.753021][ T8947] loop5: detected capacity change from 0 to 4096 [ 158.754450][ T8949] tipc: Disabling bearer [ 158.815010][ T8954] loop4: detected capacity change from 0 to 4096 [ 158.825008][ T8893] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (8893) [ 158.849584][ T8947] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 158.849585][ T8954] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 158.867816][ T8954] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 158.870669][ T8954] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 158.872933][ T8954] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 158.875032][ T8947] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 158.876590][ T8947] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 159.074447][ T8954] ntfs: volume version 3.1. [ 159.085968][ T8947] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 159.095494][ T8947] ntfs: volume version 3.1. [ 159.105142][ T8961] tipc: Enabled bearer , priority 0 [ 159.106640][ T8961] device syzkaller0 entered promiscuous mode [ 159.114939][ T8947] FAULT_INJECTION: forcing a failure. [ 159.114939][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.117035][ T8947] CPU: 0 PID: 8947 Comm: syz.5.1107 Not tainted 5.15.189-syzkaller #0 [ 159.118306][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 159.119938][ T8947] Call trace: [ 159.120420][ T8947] dump_backtrace+0x0/0x43c [ 159.121111][ T8947] show_stack+0x2c/0x3c [ 159.121756][ T8947] __dump_stack+0x30/0x40 [ 159.122392][ T8947] dump_stack_lvl+0xf8/0x160 [ 159.123092][ T8947] dump_stack+0x1c/0x5c [ 159.123763][ T8947] should_fail+0x3c0/0x51c [ 159.124439][ T8947] should_fail_usercopy+0x20/0x30 [ 159.125195][ T8947] strncpy_from_user+0x48/0x598 [ 159.125955][ T8947] getname_flags+0xec/0x450 [ 159.126646][ T8947] __arm64_sys_renameat2+0xb4/0xfc [ 159.127469][ T8947] invoke_syscall+0x98/0x2b8 [ 159.128263][ T8947] el0_svc_common+0x138/0x258 [ 159.129029][ T8947] do_el0_svc+0x58/0x14c [ 159.129733][ T8947] el0_svc+0x78/0x1e0 [ 159.130396][ T8947] el0t_64_sync_handler+0xcc/0xe4 [ 159.131198][ T8947] el0t_64_sync+0x1a0/0x1a4 [ 159.143251][ T8962] device syzkaller0 entered promiscuous mode [ 159.156820][ T8961] tipc: Resetting bearer [ 159.174767][ T8954] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 159.226299][ T8960] tipc: Resetting bearer [ 159.230734][ T8960] tipc: Disabling bearer [ 159.265846][ T4053] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 159.814124][ T8980] tipc: Enabled bearer , priority 0 [ 159.816189][ T8980] device syzkaller0 entered promiscuous mode [ 159.843660][ T8980] tipc: Resetting bearer [ 159.858869][ T8978] tipc: Resetting bearer [ 159.865507][ T8978] tipc: Disabling bearer [ 159.905454][ T8985] FAULT_INJECTION: forcing a failure. [ 159.905454][ T8985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.922189][ T8985] CPU: 1 PID: 8985 Comm: syz.4.1119 Not tainted 5.15.189-syzkaller #0 [ 159.923342][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 159.924707][ T8985] Call trace: [ 159.925170][ T8985] dump_backtrace+0x0/0x43c [ 159.925854][ T8985] show_stack+0x2c/0x3c [ 159.926518][ T8985] __dump_stack+0x30/0x40 [ 159.927191][ T8985] dump_stack_lvl+0xf8/0x160 [ 159.927863][ T8985] dump_stack+0x1c/0x5c [ 159.928551][ T8985] should_fail+0x3c0/0x51c [ 159.929244][ T8985] should_fail_usercopy+0x20/0x30 [ 159.930063][ T8985] copy_page_from_iter+0x2fc/0x744 [ 159.930851][ T8985] tun_get_user+0x158c/0x31c4 [ 159.931562][ T8985] tun_chr_write_iter+0xfc/0x20c [ 159.932287][ T8985] vfs_write+0x7c8/0xa2c [ 159.932893][ T8985] ksys_write+0x120/0x210 [ 159.933521][ T8985] __arm64_sys_write+0x7c/0x90 [ 159.934206][ T8985] invoke_syscall+0x98/0x2b8 [ 159.934859][ T8985] el0_svc_common+0x138/0x258 [ 159.935514][ T8985] do_el0_svc+0x58/0x14c [ 159.936117][ T8985] el0_svc+0x78/0x1e0 [ 159.936692][ T8985] el0t_64_sync_handler+0xcc/0xe4 [ 159.937414][ T8985] el0t_64_sync+0x1a0/0x1a4 [ 160.327967][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1121'. [ 160.339999][ T8993] loop4: detected capacity change from 0 to 128 [ 160.363297][ T8999] device syzkaller0 entered promiscuous mode [ 160.476048][ T8974] loop2: detected capacity change from 0 to 65536 [ 160.478228][ T8993] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 160.812103][ T9005] loop1: detected capacity change from 0 to 64 [ 160.859947][ T9005] MINIX-fs: deleted inode referenced: 1 [ 160.879949][ T8974] XFS (loop2): Mounting V5 Filesystem [ 160.904268][ T8974] XFS (loop2): Ending clean mount [ 160.905796][ T8974] XFS (loop2): Quotacheck needed: Please wait. [ 160.922019][ T8974] XFS (loop2): Quotacheck: Done. [ 160.930221][ T9005] loop1: detected capacity change from 0 to 4096 [ 160.938184][ T8974] overlayfs: conflicting options: nfs_export=on,index=off [ 161.060641][ T4051] XFS (loop2): Unmounting Filesystem [ 161.122520][ T4044] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 161.123755][ T4044] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 161.163362][ T9018] tipc: Enabled bearer , priority 0 [ 161.199143][ T9018] device syzkaller0 entered promiscuous mode [ 161.217638][ T9018] tipc: Resetting bearer [ 161.222048][ T9017] tipc: Resetting bearer [ 161.234450][ T9017] tipc: Disabling bearer [ 161.241269][ T9020] tipc: Enabled bearer , priority 0 [ 161.242885][ T9020] device syzkaller0 entered promiscuous mode [ 161.248628][ T9020] tipc: Resetting bearer [ 161.528984][ T9019] tipc: Resetting bearer [ 161.536540][ T9019] tipc: Disabling bearer [ 161.543795][ T5081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.555655][ T9031] device syzkaller0 entered promiscuous mode [ 161.952611][ T5081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.063920][ T5081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.082533][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 162.103324][ T9039] loop5: detected capacity change from 0 to 32768 [ 162.445916][ T5081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.463544][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.464625][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.519045][ T9043] loop0: detected capacity change from 0 to 32768 [ 162.520486][ T9022] device bridge_slave_0 entered promiscuous mode [ 162.522586][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.523949][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.525423][ T9022] device bridge_slave_1 entered promiscuous mode [ 162.535768][ T9039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1136 (9039) [ 162.546726][ T9039] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 162.548116][ T9039] BTRFS info (device loop5): using free space tree [ 162.553802][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.556365][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.558612][ T9039] BTRFS info (device loop5): has skinny extents [ 162.561834][ T9043] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1135 (9043) [ 162.585114][ T9022] team0: Port device team_slave_0 added [ 163.011200][ T9022] team0: Port device team_slave_1 added [ 163.022945][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.025905][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.032524][ T9022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.043883][ T7723] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (7723) [ 163.047146][ T9065] tipc: Enabled bearer , priority 0 [ 163.050581][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.051725][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.056346][ T9022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.066419][ T9062] tipc: Disabling bearer [ 163.122672][ T9039] BTRFS info (device loop5): enabling ssd optimizations [ 163.129724][ T9022] device hsr_slave_0 entered promiscuous mode [ 163.199564][ T9022] device hsr_slave_1 entered promiscuous mode [ 163.248690][ T9022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.249817][ T9022] Cannot create hsr debugfs directory [ 163.458369][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 163.579593][ T9075] loop0: detected capacity change from 0 to 32768 [ 163.628613][ T9075] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1140 (9075) [ 163.645136][ T5081] tipc: Left network mode [ 163.646775][ T9090] device syzkaller0 entered promiscuous mode [ 163.708189][ T7723] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (7723) [ 163.722149][ T9022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.776159][ T9022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.820138][ T9022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.872111][ T9022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.893453][ T9086] loop1: detected capacity change from 0 to 40427 [ 163.899938][ T9099] tipc: Enabled bearer , priority 0 [ 163.901457][ T9099] device syzkaller0 entered promiscuous mode [ 163.908153][ T9086] F2FS-fs (loop1): invalid crc value [ 163.943607][ T9086] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.971377][ T9086] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 163.984480][ T9099] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 163.988936][ T9099] tipc: Resetting bearer [ 163.996937][ T9086] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 164.004570][ T9098] tipc: Resetting bearer [ 164.006162][ T9086] UBIFS error (pid: 9086): cannot open "/dev/rnullb0", error -22 [ 164.042571][ T9075] loop0: detected capacity change from 0 to 32768 [ 164.045321][ T9098] tipc: Disabling bearer [ 164.046725][ T4044] attempt to access beyond end of device [ 164.046725][ T4044] loop1: rw=2049, want=45104, limit=40427 [ 164.073617][ T9075] XFS: ikeep mount option is deprecated. [ 164.111958][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.111988][ T9075] XFS (loop0): Mounting V5 Filesystem [ 164.174394][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.200693][ T9133] device syzkaller0 entered promiscuous mode [ 164.202476][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.203966][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.205389][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.206810][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.208163][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.209349][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.245147][ T9075] XFS (loop0): Ending clean mount [ 164.246347][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.253545][ T9075] XFS (loop0): Quotacheck needed: Please wait. [ 164.263365][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.278801][ T9075] XFS (loop0): Quotacheck: Done. [ 164.281472][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.282675][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.291444][ T4048] XFS (loop0): Unmounting Filesystem [ 164.327513][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.330117][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.331814][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.355717][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.367833][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.377745][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.393034][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.399131][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.404743][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.421978][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.430132][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.436849][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.466730][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.109470][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.110791][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.120452][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.608832][ T3625] Bluetooth: hci4: command 0x041b tx timeout [ 165.642207][ T9154] loop1: detected capacity change from 0 to 32768 [ 165.669422][ T9154] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 165.670863][ T9154] BTRFS info (device loop1): using free space tree [ 165.671837][ T9154] BTRFS info (device loop1): has skinny extents [ 165.692215][ T9195] udc-core: couldn't find an available UDC or it's busy [ 165.693343][ T9195] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.808100][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.813131][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.817826][ T9154] BTRFS info (device loop1): enabling ssd optimizations [ 165.874262][ T9022] device veth0_vlan entered promiscuous mode [ 165.884957][ T9022] device veth1_vlan entered promiscuous mode [ 165.901472][ T9022] device veth0_macvtap entered promiscuous mode [ 165.905091][ T9022] device veth1_macvtap entered promiscuous mode [ 165.914162][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.915804][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.917445][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.922098][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.923635][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.925249][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.926654][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.928139][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.930909][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.932532][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.934593][ T9022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.936836][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.939344][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.941060][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.942650][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.944141][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.953392][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.955261][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.956725][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.958581][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.002412][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.005115][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.006686][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.033375][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.035026][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.036402][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.037858][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.048366][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.050983][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.052709][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.054514][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.056238][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.058041][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.061163][ T9022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.110569][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.113814][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.155822][ T5081] device hsr_slave_0 left promiscuous mode [ 166.179038][ T5081] device hsr_slave_1 left promiscuous mode [ 166.258817][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.260123][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.261664][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.262928][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.264416][ T5081] device bridge_slave_1 left promiscuous mode [ 166.265565][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.288905][ T5081] device bridge_slave_0 left promiscuous mode [ 166.289967][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.418834][ T5081] device veth1_macvtap left promiscuous mode [ 166.419978][ T5081] device veth0_macvtap left promiscuous mode [ 166.420932][ T5081] device veth1_vlan left promiscuous mode [ 166.421861][ T5081] device veth0_vlan left promiscuous mode [ 167.477261][ T5081] team0 (unregistering): Port device team_slave_1 removed [ 167.483072][ T5081] team0 (unregistering): Port device team_slave_0 removed [ 167.486912][ T5081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.522138][ T5081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.632029][ T5081] bond0 (unregistering): Released all slaves [ 167.688367][ T4540] Bluetooth: hci4: command 0x040f tx timeout [ 167.723043][ T9022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.724449][ T9022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.725842][ T9022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.727164][ T9022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.740262][ T9239] device syzkaller0 entered promiscuous mode [ 167.764961][ T9248] tipc: Enabled bearer , priority 0 [ 167.766494][ T9248] device syzkaller0 entered promiscuous mode [ 167.779877][ T9248] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 167.787225][ T9248] tipc: Resetting bearer [ 167.801469][ T5487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.802670][ T5487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.804703][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.821857][ T5487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.823142][ T5487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.827397][ T9247] tipc: Resetting bearer [ 167.839013][ T9247] tipc: Disabling bearer [ 167.844366][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.852956][ T9258] tipc: Enabled bearer , priority 0 [ 167.874642][ T9255] tipc: Disabling bearer [ 168.439433][ T9264] loop1: detected capacity change from 0 to 32768 [ 168.501173][ T9264] XFS (loop1): Mounting V5 Filesystem [ 168.543330][ T9265] loop6: detected capacity change from 0 to 40427 [ 168.550779][ T9264] XFS (loop1): Ending clean mount [ 168.553034][ T9264] XFS (loop1): Quotacheck needed: Please wait. [ 168.570737][ T9264] XFS (loop1): Quotacheck: Done. [ 168.589155][ T9265] F2FS-fs (loop6): invalid crc value [ 168.622874][ T9265] F2FS-fs (loop6): Found nat_bits in checkpoint [ 168.641033][ T9265] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 168.673642][ T9265] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 168.709196][ T9265] UBIFS error (pid: 9265): cannot open "./file0", error -22 [ 168.785453][ T9313] 9pnet: Insufficient options for proto=fd [ 168.789234][ T9022] attempt to access beyond end of device [ 168.789234][ T9022] loop6: rw=2049, want=45104, limit=40427 [ 168.831591][ T9316] device syzkaller0 entered promiscuous mode [ 168.862339][ T9313] mmap: syz.2.1167 (9313) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 168.926695][ T9321] tipc: Started in network mode [ 168.927512][ T9321] tipc: Node identity 3a7f6bdb546f, cluster identity 4711 [ 168.942024][ T9321] tipc: Enabled bearer , priority 0 [ 168.956328][ T9321] device syzkaller0 entered promiscuous mode [ 168.997587][ T9321] tipc: Resetting bearer [ 169.022560][ T9320] tipc: Resetting bearer [ 169.028244][ T9320] tipc: Disabling bearer [ 169.094275][ T9330] device syzkaller0 entered promiscuous mode [ 169.551408][ T9264] xfs: Unknown parameter 'nodáiscard' [ 169.595206][ T4044] XFS (loop1): Unmounting Filesystem [ 169.662493][ T9343] tipc: Enabled bearer , priority 0 [ 169.664139][ T9343] device syzkaller0 entered promiscuous mode [ 169.678136][ T9343] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 169.682850][ T9343] tipc: Resetting bearer [ 169.703811][ T9342] tipc: Resetting bearer [ 169.707828][ T9342] tipc: Disabling bearer [ 169.748776][ T9337] loop6: detected capacity change from 0 to 32768 [ 169.765016][ T9337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1171 (9337) [ 169.769148][ T4538] Bluetooth: hci4: command 0x0419 tx timeout [ 169.791429][ T9337] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 169.792779][ T9337] BTRFS info (device loop6): using free space tree [ 169.793804][ T9337] BTRFS info (device loop6): has skinny extents [ 169.868029][ T9359] FAULT_INJECTION: forcing a failure. [ 169.868029][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 169.874796][ T9359] CPU: 0 PID: 9359 Comm: syz.5.1175 Not tainted 5.15.189-syzkaller #0 [ 169.875997][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 169.877401][ T9359] Call trace: [ 169.877858][ T9359] dump_backtrace+0x0/0x43c [ 169.878444][ T9359] show_stack+0x2c/0x3c [ 169.879026][ T9359] __dump_stack+0x30/0x40 [ 169.879661][ T9359] dump_stack_lvl+0xf8/0x160 [ 169.880301][ T9359] dump_stack+0x1c/0x5c [ 169.880962][ T9359] should_fail+0x3c0/0x51c [ 169.881662][ T9359] __should_failslab+0xbc/0x10c [ 169.882343][ T9359] should_failslab+0x10/0x28 [ 169.882998][ T9359] slab_pre_alloc_hook+0x64/0xec [ 169.883713][ T9359] kmem_cache_alloc_bulk+0x50/0x4b4 [ 169.884461][ T9359] io_submit_sqes+0x4708/0x85bc [ 169.885189][ T9359] __arm64_sys_io_uring_enter+0x2a0/0x1a90 [ 169.886031][ T9359] invoke_syscall+0x98/0x2b8 [ 169.886698][ T9359] el0_svc_common+0x138/0x258 [ 169.887381][ T9359] do_el0_svc+0x58/0x14c [ 169.888048][ T9359] el0_svc+0x78/0x1e0 [ 169.888609][ T9359] el0t_64_sync_handler+0xcc/0xe4 [ 169.889338][ T9359] el0t_64_sync+0x1a0/0x1a4 [ 169.992872][ T9371] loop1: detected capacity change from 0 to 128 [ 170.030947][ T9371] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 170.036052][ T9371] FAULT_INJECTION: forcing a failure. [ 170.036052][ T9371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.038089][ T9371] CPU: 0 PID: 9371 Comm: syz.1.1172 Not tainted 5.15.189-syzkaller #0 [ 170.039323][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 170.040822][ T9371] Call trace: [ 170.041281][ T9371] dump_backtrace+0x0/0x43c [ 170.041967][ T9371] show_stack+0x2c/0x3c [ 170.042606][ T9371] __dump_stack+0x30/0x40 [ 170.043297][ T9371] dump_stack_lvl+0xf8/0x160 [ 170.043956][ T9371] dump_stack+0x1c/0x5c [ 170.044560][ T9371] should_fail+0x3c0/0x51c [ 170.045211][ T9371] should_fail_usercopy+0x20/0x30 [ 170.045921][ T9371] strncpy_from_user+0x48/0x598 [ 170.046597][ T9371] getname_flags+0xec/0x450 [ 170.047239][ T9371] user_path_at_empty+0x40/0x1a0 [ 170.047900][ T9371] do_sys_truncate+0xb0/0x1b0 [ 170.048613][ T9371] __arm64_sys_truncate+0x5c/0x70 [ 170.049281][ T9371] invoke_syscall+0x98/0x2b8 [ 170.049918][ T9371] el0_svc_common+0x138/0x258 [ 170.050547][ T9371] do_el0_svc+0x58/0x14c [ 170.051192][ T9371] el0_svc+0x78/0x1e0 [ 170.051833][ T9371] el0t_64_sync_handler+0xcc/0xe4 [ 170.052651][ T9371] el0t_64_sync+0x1a0/0x1a4 [ 170.139976][ T4044] sysv_free_block: trying to free block not in datazone [ 170.143056][ T9337] BTRFS info (device loop6): enabling ssd optimizations [ 170.201173][ T9350] loop2: detected capacity change from 0 to 32768 [ 170.228588][ T9350] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1174 (9350) [ 170.241750][ T4044] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 170.751542][ T9397] tipc: Enabled bearer , priority 0 [ 170.753185][ T9397] device syzkaller0 entered promiscuous mode [ 170.778220][ T9390] tipc: Resetting bearer [ 170.790916][ T8886] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (8886) [ 170.803288][ T9390] tipc: Disabling bearer [ 170.848619][ T9404] loop2: detected capacity change from 0 to 256 [ 170.872798][ T9406] FAULT_INJECTION: forcing a failure. [ 170.872798][ T9406] name failslab, interval 1, probability 0, space 0, times 0 [ 170.875846][ T9406] CPU: 1 PID: 9406 Comm: syz.0.1183 Not tainted 5.15.189-syzkaller #0 [ 170.877053][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 170.878387][ T9406] Call trace: [ 170.878837][ T9406] dump_backtrace+0x0/0x43c [ 170.879491][ T9406] show_stack+0x2c/0x3c [ 170.880137][ T9406] __dump_stack+0x30/0x40 [ 170.880839][ T9406] dump_stack_lvl+0xf8/0x160 [ 170.881529][ T9406] dump_stack+0x1c/0x5c [ 170.882234][ T9406] should_fail+0x3c0/0x51c [ 170.882995][ T9406] __should_failslab+0xbc/0x10c [ 170.883804][ T9406] should_failslab+0x10/0x28 [ 170.884507][ T9406] slab_pre_alloc_hook+0x64/0xec [ 170.885270][ T9406] __kmalloc+0xbc/0x44c [ 170.885906][ T9406] __arm64_sys_memfd_create+0x168/0x514 [ 170.886683][ T9406] invoke_syscall+0x98/0x2b8 [ 170.887356][ T9406] el0_svc_common+0x138/0x258 [ 170.888047][ T9406] do_el0_svc+0x58/0x14c [ 170.888626][ T9406] el0_svc+0x78/0x1e0 [ 170.889208][ T9406] el0t_64_sync_handler+0xcc/0xe4 [ 170.889944][ T9406] el0t_64_sync+0x1a0/0x1a4 [ 170.903465][ T9404] exfat: Deprecated parameter 'namecase' [ 170.904809][ T9404] exfat: Deprecated parameter 'utf8' [ 170.905923][ T9404] exfat: Deprecated parameter 'utf8' [ 170.913570][ T9409] device syzkaller0 entered promiscuous mode [ 170.936866][ T9404] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 171.012886][ T9415] FAULT_INJECTION: forcing a failure. [ 171.012886][ T9415] name failslab, interval 1, probability 0, space 0, times 0 [ 171.014936][ T9415] CPU: 0 PID: 9415 Comm: syz.6.1182 Not tainted 5.15.189-syzkaller #0 [ 171.016180][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 171.017737][ T9415] Call trace: [ 171.018186][ T9415] dump_backtrace+0x0/0x43c [ 171.018857][ T9415] show_stack+0x2c/0x3c [ 171.019561][ T9415] __dump_stack+0x30/0x40 [ 171.020252][ T9415] dump_stack_lvl+0xf8/0x160 [ 171.020938][ T9415] dump_stack+0x1c/0x5c [ 171.021626][ T9415] should_fail+0x3c0/0x51c [ 171.022265][ T9415] __should_failslab+0xbc/0x10c [ 171.022994][ T9415] should_failslab+0x10/0x28 [ 171.023777][ T9415] slab_pre_alloc_hook+0x64/0xec [ 171.024573][ T9415] __kmalloc+0xbc/0x44c [ 171.025219][ T9415] alloc_pipe_info+0x208/0x510 [ 171.025941][ T9415] splice_direct_to_actor+0x7e4/0x950 [ 171.026739][ T9415] do_splice_direct+0x158/0x248 [ 171.027489][ T9415] do_sendfile+0x458/0xc88 [ 171.028163][ T9415] __arm64_sys_sendfile64+0x130/0x3b0 [ 171.029049][ T9415] invoke_syscall+0x98/0x2b8 [ 171.029736][ T9415] el0_svc_common+0x138/0x258 [ 171.030421][ T9415] do_el0_svc+0x58/0x14c [ 171.031118][ T9415] el0_svc+0x78/0x1e0 [ 171.031703][ T9415] el0t_64_sync_handler+0xcc/0xe4 [ 171.032469][ T9415] el0t_64_sync+0x1a0/0x1a4 [ 171.052520][ T9412] loop5: detected capacity change from 0 to 4096 [ 171.073030][ T9421] tipc: Enabling of bearer rejected, failed to enable media [ 171.074911][ T9421] device syzkaller0 entered promiscuous mode [ 171.079291][ T9412] __ntfs_warning: 1 callbacks suppressed [ 171.079298][ T9412] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 171.091833][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1188'. [ 171.094888][ T9412] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 171.096622][ T9412] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 171.098047][ T9412] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 171.102894][ T9412] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 171.117093][ T9412] ntfs: volume version 3.1. [ 171.239408][ T9416] loop2: detected capacity change from 0 to 32768 [ 171.246988][ T9416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1186 (9416) [ 171.251908][ T9425] loop0: detected capacity change from 0 to 512 [ 171.263094][ T9416] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 171.264906][ T9416] BTRFS info (device loop2): using free space tree [ 171.266202][ T9416] BTRFS info (device loop2): has skinny extents [ 171.302026][ T9416] BTRFS info (device loop2): enabling ssd optimizations [ 171.337409][ T9453] FAULT_INJECTION: forcing a failure. [ 171.337409][ T9453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.339926][ T9453] CPU: 0 PID: 9453 Comm: syz.0.1192 Not tainted 5.15.189-syzkaller #0 [ 171.341162][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 171.342564][ T9453] Call trace: [ 171.343016][ T9453] dump_backtrace+0x0/0x43c [ 171.343645][ T9453] show_stack+0x2c/0x3c [ 171.344247][ T9453] __dump_stack+0x30/0x40 [ 171.344908][ T9453] dump_stack_lvl+0xf8/0x160 [ 171.345635][ T9453] dump_stack+0x1c/0x5c [ 171.346220][ T9453] should_fail+0x3c0/0x51c [ 171.346955][ T9453] should_fail_usercopy+0x20/0x30 [ 171.347710][ T9453] move_addr_to_kernel+0xac/0x294 [ 171.348445][ T9453] __copy_msghdr_from_user+0x330/0x4f8 [ 171.349235][ T9453] ___sys_sendmsg+0x140/0x240 [ 171.349923][ T9453] __arm64_sys_sendmsg+0x1a8/0x254 [ 171.350680][ T9453] invoke_syscall+0x98/0x2b8 [ 171.351351][ T9453] el0_svc_common+0x138/0x258 [ 171.352025][ T9453] do_el0_svc+0x58/0x14c [ 171.352641][ T9453] el0_svc+0x78/0x1e0 [ 171.353223][ T9453] el0t_64_sync_handler+0xcc/0xe4 [ 171.353938][ T9453] el0t_64_sync+0x1a0/0x1a4 [ 171.413613][ T9454] FAULT_INJECTION: forcing a failure. [ 171.413613][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 171.416612][ T9454] CPU: 0 PID: 9454 Comm: syz.5.1191 Not tainted 5.15.189-syzkaller #0 [ 171.417896][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 171.419381][ T9454] Call trace: [ 171.419899][ T9454] dump_backtrace+0x0/0x43c [ 171.420529][ T9454] show_stack+0x2c/0x3c [ 171.421175][ T9454] __dump_stack+0x30/0x40 [ 171.421862][ T9454] dump_stack_lvl+0xf8/0x160 [ 171.422588][ T9454] dump_stack+0x1c/0x5c [ 171.423238][ T9454] should_fail+0x3c0/0x51c [ 171.423940][ T9454] __should_failslab+0xbc/0x10c [ 171.424637][ T9454] should_failslab+0x10/0x28 [ 171.425316][ T9454] slab_pre_alloc_hook+0x64/0xec [ 171.426041][ T9454] kmem_cache_alloc+0x94/0x3e4 [ 171.426653][ T9454] fuse_get_req+0x348/0x95c [ 171.427283][ T9454] fuse_simple_request+0x21c/0x16dc [ 171.428028][ T9454] fuse_readdir+0x129c/0x224c [ 171.428705][ T9454] iterate_dir+0x1f0/0x4cc [ 171.429338][ T9454] __arm64_sys_getdents64+0x11c/0x340 [ 171.430119][ T9454] invoke_syscall+0x98/0x2b8 [ 171.430804][ T9454] el0_svc_common+0x138/0x258 [ 171.431460][ T9454] do_el0_svc+0x58/0x14c [ 171.432109][ T9454] el0_svc+0x78/0x1e0 [ 171.432716][ T9454] el0t_64_sync_handler+0xcc/0xe4 [ 171.433495][ T9454] el0t_64_sync+0x1a0/0x1a4 [ 171.882424][ T9463] tipc: Enabled bearer , priority 0 [ 171.888812][ T9462] tipc: Disabling bearer [ 171.956005][ T9469] device syzkaller0 entered promiscuous mode [ 172.053394][ T9476] tipc: Enabling of bearer rejected, failed to enable media [ 172.055625][ T9476] device syzkaller0 entered promiscuous mode [ 172.174135][ T9479] loop1: detected capacity change from 0 to 512 [ 172.535912][ T9491] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.590558][ T9494] loop5: detected capacity change from 0 to 1024 [ 172.626160][ T9494] EXT4-fs (loop5): Unrecognized mount option "smackfstransmute=&-" or missing value [ 172.686264][ T9497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.691879][ T9497] bond0: (slave bridge0): Releasing backup interface [ 172.705701][ T9487] loop6: detected capacity change from 0 to 32768 [ 172.714453][ T9487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1204 (9487) [ 172.716202][ T9485] loop0: detected capacity change from 0 to 32768 [ 172.725896][ T9487] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 172.727293][ T9487] BTRFS info (device loop6): using free space tree [ 172.728231][ T9487] BTRFS info (device loop6): has skinny extents [ 172.730419][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.731687][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.737415][ T9497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.740355][ T9497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.742134][ T9497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.743435][ T9485] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1205 (9485) [ 172.753384][ T9497] device bridge_slave_0 left promiscuous mode [ 172.755342][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.786266][ T8886] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (8886) [ 173.207269][ T9497] device bridge_slave_1 left promiscuous mode [ 173.213105][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.217490][ T9487] BTRFS info (device loop6): enabling ssd optimizations [ 173.252596][ T9497] bond0: (slave bond_slave_0): Releasing backup interface [ 173.323274][ T9497] bond0: (slave bond_slave_1): Releasing backup interface [ 173.603906][ T9497] team0: Port device team_slave_0 removed [ 173.613406][ T9497] team0: Port device team_slave_1 removed [ 173.614785][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.616298][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.618276][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.622804][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.646565][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1207'. [ 173.673111][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 173.675679][ T9542] loop1: detected capacity change from 0 to 8 [ 173.677010][ T9533] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1210'. [ 173.690066][ T9543] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.771034][ T9543] FAULT_INJECTION: forcing a failure. [ 173.771034][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.773618][ T9543] CPU: 0 PID: 9543 Comm: syz.5.1212 Not tainted 5.15.189-syzkaller #0 [ 173.774924][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 173.776364][ T9543] Call trace: [ 173.776897][ T9543] dump_backtrace+0x0/0x43c [ 173.777639][ T9543] show_stack+0x2c/0x3c [ 173.778243][ T9543] __dump_stack+0x30/0x40 [ 173.778948][ T9543] dump_stack_lvl+0xf8/0x160 [ 173.779697][ T9543] dump_stack+0x1c/0x5c [ 173.780327][ T9543] should_fail+0x3c0/0x51c [ 173.780977][ T9543] should_fail_usercopy+0x20/0x30 [ 173.781747][ T9543] sctp_setsockopt+0x208/0x10c4 [ 173.782437][ T9543] sock_common_setsockopt+0xb0/0xcc [ 173.783203][ T9543] __sys_setsockopt+0x260/0x36c [ 173.783900][ T9543] __arm64_sys_setsockopt+0xb8/0xd4 [ 173.784663][ T9543] invoke_syscall+0x98/0x2b8 [ 173.785310][ T9543] el0_svc_common+0x138/0x258 [ 173.785977][ T9543] do_el0_svc+0x58/0x14c [ 173.786603][ T9543] el0_svc+0x78/0x1e0 [ 173.787185][ T9543] el0t_64_sync_handler+0xcc/0xe4 [ 173.787949][ T9543] el0t_64_sync+0x1a0/0x1a4 [ 173.924674][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 173.939739][ T9552] device syzkaller0 entered promiscuous mode [ 174.000977][ T9547] loop0: detected capacity change from 0 to 32768 [ 174.094072][ T9556] loop6: detected capacity change from 0 to 512 [ 174.183423][ T9569] tipc: Enabled bearer , priority 0 [ 174.195080][ T9568] FAULT_INJECTION: forcing a failure. [ 174.195080][ T9568] name failslab, interval 1, probability 0, space 0, times 0 [ 174.197184][ T9568] CPU: 1 PID: 9568 Comm: syz.6.1221 Not tainted 5.15.189-syzkaller #0 [ 174.198512][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 174.200137][ T9568] Call trace: [ 174.200642][ T9568] dump_backtrace+0x0/0x43c [ 174.201308][ T9568] show_stack+0x2c/0x3c [ 174.201913][ T9568] __dump_stack+0x30/0x40 [ 174.202540][ T9568] dump_stack_lvl+0xf8/0x160 [ 174.203194][ T9568] dump_stack+0x1c/0x5c [ 174.203811][ T9568] should_fail+0x3c0/0x51c [ 174.204419][ T9568] __should_failslab+0xbc/0x10c [ 174.205208][ T9568] should_failslab+0x10/0x28 [ 174.205895][ T9568] slab_pre_alloc_hook+0x64/0xec [ 174.206632][ T9568] __kmalloc+0xbc/0x44c [ 174.207229][ T9568] tomoyo_encode+0x274/0x4a4 [ 174.207970][ T9568] tomoyo_realpath_from_path+0x4bc/0x510 [ 174.208872][ T9568] tomoyo_path_number_perm+0x1b0/0x518 [ 174.209667][ T9568] tomoyo_file_ioctl+0x2c/0x3c [ 174.210427][ T9568] security_file_ioctl+0x80/0xbc [ 174.211185][ T9568] __arm64_sys_ioctl+0xa8/0x1c8 [ 174.211881][ T9568] invoke_syscall+0x98/0x2b8 [ 174.212584][ T9568] el0_svc_common+0x138/0x258 [ 174.213308][ T9568] do_el0_svc+0x58/0x14c [ 174.213981][ T9568] el0_svc+0x78/0x1e0 [ 174.214628][ T9568] el0t_64_sync_handler+0xcc/0xe4 [ 174.215470][ T9568] el0t_64_sync+0x1a0/0x1a4 [ 174.223499][ T9569] tipc: Resetting bearer [ 174.229574][ T9565] tipc: Disabling bearer [ 174.239032][ T9547] XFS (loop0): Mounting V5 Filesystem [ 174.292923][ T9568] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.304879][ T9547] XFS (loop0): Ending clean mount [ 174.307513][ T9547] XFS (loop0): Quotacheck needed: Please wait. [ 174.356162][ T9576] FAULT_INJECTION: forcing a failure. [ 174.356162][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 174.363101][ T9547] XFS (loop0): Quotacheck: Done. [ 174.373256][ T9576] CPU: 1 PID: 9576 Comm: syz.5.1222 Not tainted 5.15.189-syzkaller #0 [ 174.374552][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 174.376102][ T9576] Call trace: [ 174.376571][ T9576] dump_backtrace+0x0/0x43c [ 174.377201][ T9576] show_stack+0x2c/0x3c [ 174.377788][ T9576] __dump_stack+0x30/0x40 [ 174.378484][ T9576] dump_stack_lvl+0xf8/0x160 [ 174.379260][ T9576] dump_stack+0x1c/0x5c [ 174.379963][ T9576] should_fail+0x3c0/0x51c [ 174.380664][ T9576] __should_failslab+0xbc/0x10c [ 174.381424][ T9576] should_failslab+0x10/0x28 [ 174.382142][ T9576] slab_pre_alloc_hook+0x64/0xec [ 174.382867][ T9576] kmem_cache_alloc_trace+0x98/0x3fc [ 174.383625][ T9576] bpf_xdp_link_attach+0x134/0x414 [ 174.384404][ T9576] link_create+0x408/0x60c [ 174.385033][ T9576] __sys_bpf+0x5a0/0x5f0 [ 174.385684][ T9576] __arm64_sys_bpf+0x80/0x98 [ 174.386375][ T9576] invoke_syscall+0x98/0x2b8 [ 174.387039][ T9576] el0_svc_common+0x138/0x258 [ 174.387733][ T9576] do_el0_svc+0x58/0x14c [ 174.388409][ T9576] el0_svc+0x78/0x1e0 [ 174.389093][ T9576] el0t_64_sync_handler+0xcc/0xe4 [ 174.389942][ T9576] el0t_64_sync+0x1a0/0x1a4 [ 174.421305][ T9578] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1211'. [ 174.480541][ T9580] tipc: Enabled bearer , priority 0 [ 174.498561][ T9580] tipc: Resetting bearer [ 174.503592][ T9579] tipc: Disabling bearer [ 174.545456][ T9577] loop6: detected capacity change from 0 to 32768 [ 174.576314][ T9577] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 174.587660][ T9577] (syz.6.1223,9577,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 174.606222][ T9577] (syz.6.1223,9577,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.616305][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:298 ERROR: status = -2 [ 174.617408][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:502 ERROR: status = -2 [ 174.620354][ T9586] loop5: detected capacity change from 0 to 256 [ 174.621512][ T9577] (syz.6.1223,9577,1):ocfs2_create:676 ERROR: status = -2 [ 174.655384][ T9577] (syz.6.1223,9577,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 174.658077][ T9577] (syz.6.1223,9577,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.673558][ T9586] FAT-fs (loop5): Directory bread(block 64) failed [ 174.674545][ T9586] FAT-fs (loop5): Directory bread(block 65) failed [ 174.675456][ T9586] FAT-fs (loop5): Directory bread(block 66) failed [ 174.676420][ T9586] FAT-fs (loop5): Directory bread(block 67) failed [ 174.677389][ T9586] FAT-fs (loop5): Directory bread(block 68) failed [ 174.683416][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:298 ERROR: status = -2 [ 174.684488][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:502 ERROR: status = -2 [ 174.685586][ T9577] (syz.6.1223,9577,1):ocfs2_create:676 ERROR: status = -2 [ 174.687200][ T9577] (syz.6.1223,9577,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 174.693447][ T9586] FAT-fs (loop5): Directory bread(block 69) failed [ 174.694460][ T9586] FAT-fs (loop5): Directory bread(block 70) failed [ 174.695452][ T9586] FAT-fs (loop5): Directory bread(block 71) failed [ 174.696490][ T9586] FAT-fs (loop5): Directory bread(block 72) failed [ 174.697498][ T9586] FAT-fs (loop5): Directory bread(block 73) failed [ 174.708021][ T9577] (syz.6.1223,9577,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.709551][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:298 ERROR: status = -2 [ 174.710640][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:502 ERROR: status = -2 [ 174.711737][ T9577] (syz.6.1223,9577,1):ocfs2_mkdir:659 ERROR: status = -2 [ 174.724376][ T9577] (syz.6.1223,9577,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 174.726874][ T9577] (syz.6.1223,9577,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.728245][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:298 ERROR: status = -2 [ 174.746402][ T9577] (syz.6.1223,9577,1):ocfs2_mknod:502 ERROR: status = -2 [ 174.747513][ T9577] (syz.6.1223,9577,1):ocfs2_mkdir:659 ERROR: status = -2 [ 174.755180][ T9577] (syz.6.1223,9577,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 174.757565][ T9577] (syz.6.1223,9577,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.759269][ T9577] (syz.6.1223,9577,0):ocfs2_mknod:298 ERROR: status = -2 [ 174.760295][ T9577] (syz.6.1223,9577,0):ocfs2_mknod:502 ERROR: status = -2 [ 174.761951][ T9577] (syz.6.1223,9577,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 174.764050][ T9577] (syz.6.1223,9577,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.765355][ T9577] (syz.6.1223,9577,0):ocfs2_mknod:298 ERROR: status = -2 [ 174.766409][ T9577] (syz.6.1223,9577,0):ocfs2_mknod:502 ERROR: status = -2 [ 174.767403][ T9577] (syz.6.1223,9577,0):ocfs2_create:676 ERROR: status = -2 [ 174.796173][ T9022] ocfs2: Unmounting device (7,6) on (node local) [ 174.863070][ T9593] tipc: Enabling of bearer rejected, failed to enable media [ 174.864726][ T9593] device syzkaller0 entered promiscuous mode [ 174.907092][ T4048] XFS (loop0): Unmounting Filesystem [ 175.106531][ T9604] loop0: detected capacity change from 0 to 256 [ 175.127573][ T9604] FAT-fs (loop0): Directory bread(block 64) failed [ 175.129943][ T9604] FAT-fs (loop0): Directory bread(block 65) failed [ 175.131189][ T9604] FAT-fs (loop0): Directory bread(block 66) failed [ 175.132394][ T9604] FAT-fs (loop0): Directory bread(block 67) failed [ 175.133569][ T9604] FAT-fs (loop0): Directory bread(block 68) failed [ 175.134768][ T9604] FAT-fs (loop0): Directory bread(block 69) failed [ 175.135994][ T9604] FAT-fs (loop0): Directory bread(block 70) failed [ 175.137159][ T9604] FAT-fs (loop0): Directory bread(block 71) failed [ 175.141640][ T9604] FAT-fs (loop0): Directory bread(block 72) failed [ 175.142937][ T9604] FAT-fs (loop0): Directory bread(block 73) failed [ 175.149003][ T9596] loop6: detected capacity change from 0 to 32768 [ 175.152224][ T9604] netlink: 'syz.0.1231': attribute type 4 has an invalid length. [ 175.163965][ T9604] netlink: 'syz.0.1231': attribute type 4 has an invalid length. [ 175.337936][ T9607] tipc: Enabled bearer , priority 0 [ 175.347959][ T9607] tipc: Resetting bearer [ 175.358001][ T9606] tipc: Disabling bearer [ 175.409650][ T9610] loop0: detected capacity change from 0 to 1024 [ 175.531308][ T9596] loop6: detected capacity change from 0 to 32768 [ 175.551166][ T5027] hfsplus: b-tree write err: -5, ino 3 [ 175.689035][ T9620] netlink: 'syz.0.1237': attribute type 40 has an invalid length. [ 175.707874][ T9623] tipc: Enabled bearer , priority 0 [ 175.719496][ T9622] tipc: Disabling bearer [ 175.849090][ T9628] FAULT_INJECTION: forcing a failure. [ 175.849090][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.851237][ T9628] CPU: 1 PID: 9628 Comm: syz.0.1240 Not tainted 5.15.189-syzkaller #0 [ 175.852345][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 175.853704][ T9628] Call trace: [ 175.854206][ T9628] dump_backtrace+0x0/0x43c [ 175.854831][ T9628] show_stack+0x2c/0x3c [ 175.855429][ T9628] __dump_stack+0x30/0x40 [ 175.856003][ T9628] dump_stack_lvl+0xf8/0x160 [ 175.856624][ T9628] dump_stack+0x1c/0x5c [ 175.857297][ T9628] should_fail+0x3c0/0x51c [ 175.857972][ T9628] should_fail_usercopy+0x20/0x30 [ 175.858794][ T9628] filldir64+0x750/0x9e4 [ 175.859459][ T9628] proc_readdir_de+0x474/0x518 [ 175.860261][ T9628] proc_tgid_net_readdir+0x74/0x148 [ 175.861109][ T9628] iterate_dir+0x1f0/0x4cc [ 175.861797][ T9628] __arm64_sys_getdents64+0x11c/0x340 [ 175.862638][ T9628] invoke_syscall+0x98/0x2b8 [ 175.863415][ T9628] el0_svc_common+0x138/0x258 [ 175.864212][ T9628] do_el0_svc+0x58/0x14c [ 175.864929][ T9628] el0_svc+0x78/0x1e0 [ 175.865523][ T9628] el0t_64_sync_handler+0xcc/0xe4 [ 175.866294][ T9628] el0t_64_sync+0x1a0/0x1a4 [ 175.944192][ T9630] loop5: detected capacity change from 0 to 40427 [ 175.962380][ T9630] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 175.963212][ T9637] loop2: detected capacity change from 0 to 256 [ 175.963619][ T9630] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 175.966899][ T9630] F2FS-fs (loop5): invalid crc value [ 175.970666][ T9636] tipc: Enabled bearer , priority 0 [ 175.975019][ T9636] device syzkaller0 entered promiscuous mode [ 175.977604][ T9630] F2FS-fs (loop5): Found nat_bits in checkpoint [ 175.995861][ T9630] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 175.997112][ T9630] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 176.115744][ T9637] FAT-fs (loop2): Directory bread(block 64) failed [ 176.117906][ T9637] FAT-fs (loop2): Directory bread(block 65) failed [ 176.125057][ T9630] device wlan0 entered promiscuous mode [ 176.126608][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1241'. [ 176.128106][ T9630] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 176.134152][ T9636] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 176.136182][ T9637] FAT-fs (loop2): Directory bread(block 66) failed [ 176.138477][ T9637] FAT-fs (loop2): Directory bread(block 67) failed [ 176.139657][ T9637] FAT-fs (loop2): Directory bread(block 68) failed [ 176.141937][ T9636] tipc: Resetting bearer [ 176.142904][ T9637] FAT-fs (loop2): Directory bread(block 69) failed [ 176.144675][ T9637] FAT-fs (loop2): Directory bread(block 70) failed [ 176.147438][ T9637] FAT-fs (loop2): Directory bread(block 71) failed [ 176.147713][ T9634] tipc: Resetting bearer [ 176.150656][ T9637] FAT-fs (loop2): Directory bread(block 72) failed [ 176.154196][ T9637] FAT-fs (loop2): Directory bread(block 73) failed [ 176.156168][ T9634] tipc: Disabling bearer [ 176.295931][ T9645] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61) [ 176.311061][ T9648] tipc: Enabled bearer , priority 0 [ 176.314892][ T9648] tipc: Resetting bearer [ 176.317437][ T9647] tipc: Disabling bearer [ 176.560016][ T9655] loop1: detected capacity change from 0 to 512 [ 176.600195][ T9658] loop0: detected capacity change from 0 to 256 [ 176.668122][ T9658] FAT-fs (loop0): Directory bread(block 64) failed [ 176.676689][ T9658] FAT-fs (loop0): Directory bread(block 65) failed [ 176.677920][ T9658] FAT-fs (loop0): Directory bread(block 66) failed [ 176.683218][ T9658] FAT-fs (loop0): Directory bread(block 67) failed [ 176.685459][ T9658] FAT-fs (loop0): Directory bread(block 68) failed [ 176.687688][ T9658] FAT-fs (loop0): Directory bread(block 69) failed [ 176.692075][ T9658] FAT-fs (loop0): Directory bread(block 70) failed [ 176.693426][ T9658] FAT-fs (loop0): Directory bread(block 71) failed [ 176.695884][ T9658] FAT-fs (loop0): Directory bread(block 72) failed [ 176.698140][ T9658] FAT-fs (loop0): Directory bread(block 73) failed [ 177.102386][ T9660] loop1: detected capacity change from 0 to 32768 [ 177.153627][ T9672] loop6: detected capacity change from 0 to 32768 [ 177.427545][ T26] audit: type=1326 audit(177.395:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.431076][ T26] audit: type=1326 audit(177.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.436041][ T26] audit: type=1326 audit(177.405:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.443374][ T9672] XFS (loop6): Mounting V5 Filesystem [ 177.445062][ T26] audit: type=1326 audit(177.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.448396][ T26] audit: type=1326 audit(177.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.451663][ T26] audit: type=1326 audit(177.405:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.454632][ T26] audit: type=1326 audit(177.405:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.459417][ T26] audit: type=1326 audit(177.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.463832][ T26] audit: type=1326 audit(177.405:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.467462][ T26] audit: type=1326 audit(177.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec4b0a8 code=0x7ffc0000 [ 177.490468][ T9672] XFS (loop6): Ending clean mount [ 177.493111][ T9672] XFS (loop6): Quotacheck needed: Please wait. [ 177.507181][ T9700] tipc: Enabling of bearer rejected, failed to enable media [ 177.515666][ T9700] device syzkaller0 entered promiscuous mode [ 177.523965][ T9672] XFS (loop6): Quotacheck: Done. [ 177.584569][ T9022] XFS (loop6): Unmounting Filesystem [ 177.624016][ T9702] tipc: Enabled bearer , priority 0 [ 177.627548][ T9702] tipc: Resetting bearer [ 177.630110][ T9701] tipc: Disabling bearer [ 177.657466][ T9690] loop0: detected capacity change from 0 to 32768 [ 177.717183][ T9690] XFS (loop0): Mounting V5 Filesystem [ 177.732867][ T9690] XFS (loop0): Ending clean mount [ 177.735216][ T9690] XFS (loop0): Quotacheck needed: Please wait. [ 177.764137][ T9690] XFS (loop0): Quotacheck: Done. [ 177.780983][ T9690] kernel profiling enabled (shift: 3) [ 177.837376][ T9714] loop1: detected capacity change from 0 to 512 [ 177.976406][ T4048] XFS (loop0): Unmounting Filesystem [ 178.098008][ T9729] tipc: Enabled bearer , priority 0 [ 178.100612][ T9729] device syzkaller0 entered promiscuous mode [ 178.103626][ T9728] loop5: detected capacity change from 0 to 1024 [ 178.103910][ T9729] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 178.117843][ T9729] tipc: Resetting bearer [ 178.124853][ T9726] tipc: Resetting bearer [ 178.132815][ T9728] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 178.141136][ T9726] tipc: Disabling bearer [ 178.181800][ T9734] tipc: Enabled bearer , priority 0 [ 178.183316][ T9734] device syzkaller0 entered promiscuous mode [ 178.187038][ T9733] tipc: Resetting bearer [ 178.199553][ T9733] tipc: Disabling bearer [ 178.221593][ T9736] tipc: Enabled bearer , priority 0 [ 178.225113][ T9735] tipc: Disabling bearer [ 178.333830][ T9742] tipc: Enabling of bearer rejected, failed to enable media [ 178.335449][ T9740] tipc: Enabling of bearer rejected, failed to enable media [ 178.337338][ T9740] device syzkaller0 entered promiscuous mode [ 178.564173][ T9758] loop6: detected capacity change from 0 to 512 [ 178.923951][ T9770] No such timeout policy "syz0" [ 178.938532][ T9768] loop1: detected capacity change from 0 to 8192 [ 178.984436][ T9768] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 178.986213][ T9768] REISERFS (device loop1): using ordered data mode [ 178.990357][ T9768] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.003598][ T9768] REISERFS (device loop1): checking transaction log (loop1) [ 179.009708][ T9773] tipc: Enabled bearer , priority 0 [ 179.011242][ T9773] device syzkaller0 entered promiscuous mode [ 179.013302][ T9768] REISERFS (device loop1): Using r5 hash to sort names [ 179.021862][ T9768] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 179.028444][ T9768] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 179.033256][ T9773] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.037155][ T9763] loop2: detected capacity change from 0 to 32768 [ 179.041811][ T9771] tipc: Resetting bearer [ 179.054899][ T9771] tipc: Disabling bearer [ 179.073867][ T9763] XFS (loop2): Mounting V5 Filesystem [ 179.102341][ T9763] XFS (loop2): Ending clean mount [ 179.104033][ T9763] XFS (loop2): Quotacheck needed: Please wait. [ 179.110897][ T9783] loop6: detected capacity change from 0 to 64 [ 179.125367][ T9763] XFS (loop2): Quotacheck: Done. [ 179.137833][ T9783] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 179.172699][ T4051] XFS (loop2): Unmounting Filesystem [ 179.227668][ T9787] tipc: Enabling of bearer rejected, failed to enable media [ 179.304596][ T9792] tipc: Enabling of bearer rejected, failed to enable media [ 179.306238][ T9792] device syzkaller0 entered promiscuous mode [ 179.438258][ T9801] loop5: detected capacity change from 0 to 512 [ 179.440253][ T9797] FAULT_INJECTION: forcing a failure. [ 179.440253][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 179.442369][ T9797] CPU: 0 PID: 9797 Comm: syz.0.1282 Not tainted 5.15.189-syzkaller #0 [ 179.443495][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 179.444873][ T9797] Call trace: [ 179.445333][ T9797] dump_backtrace+0x0/0x43c [ 179.445922][ T9797] show_stack+0x2c/0x3c [ 179.446544][ T9797] __dump_stack+0x30/0x40 [ 179.447162][ T9797] dump_stack_lvl+0xf8/0x160 [ 179.447782][ T9797] dump_stack+0x1c/0x5c [ 179.448372][ T9797] should_fail+0x3c0/0x51c [ 179.449002][ T9797] __should_failslab+0xbc/0x10c [ 179.449703][ T9797] should_failslab+0x10/0x28 [ 179.450417][ T9797] slab_pre_alloc_hook+0x64/0xec [ 179.451218][ T9797] kmem_cache_alloc_trace+0x98/0x3fc [ 179.452059][ T9797] sctp_association_new+0x98/0x1e7c [ 179.452870][ T9797] sctp_connect_new_asoc+0x2a4/0x620 [ 179.453678][ T9797] sctp_sendmsg+0x107c/0x2048 [ 179.454419][ T9797] inet_sendmsg+0x154/0x284 [ 179.455119][ T9797] __sys_sendto+0x2e8/0x3d8 [ 179.455808][ T9797] __arm64_sys_sendto+0xd8/0xf8 [ 179.456491][ T9797] invoke_syscall+0x98/0x2b8 [ 179.457130][ T9797] el0_svc_common+0x138/0x258 [ 179.457884][ T9797] do_el0_svc+0x58/0x14c [ 179.458553][ T9797] el0_svc+0x78/0x1e0 [ 179.459167][ T9797] el0t_64_sync_handler+0xcc/0xe4 [ 179.459951][ T9797] el0t_64_sync+0x1a0/0x1a4 [ 179.490637][ T9806] loop6: detected capacity change from 0 to 256 [ 179.546611][ T9806] FAT-fs (loop6): Directory bread(block 64) failed [ 179.547674][ T9806] FAT-fs (loop6): Directory bread(block 65) failed [ 179.549201][ T9806] FAT-fs (loop6): Directory bread(block 66) failed [ 179.550376][ T9806] FAT-fs (loop6): Directory bread(block 67) failed [ 179.551610][ T9806] FAT-fs (loop6): Directory bread(block 68) failed [ 179.552636][ T9806] FAT-fs (loop6): Directory bread(block 69) failed [ 179.553956][ T9806] FAT-fs (loop6): Directory bread(block 70) failed [ 179.555215][ T9806] FAT-fs (loop6): Directory bread(block 71) failed [ 179.556750][ T9806] FAT-fs (loop6): Directory bread(block 72) failed [ 179.557843][ T9806] FAT-fs (loop6): Directory bread(block 73) failed [ 179.778878][ T9813] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006c61) [ 180.034204][ T9814] tipc: Enabled bearer , priority 0 [ 180.039001][ T9814] device syzkaller0 entered promiscuous mode [ 180.045418][ T9816] loop2: detected capacity change from 0 to 256 [ 180.049265][ T9814] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.052945][ T9811] tipc: Resetting bearer [ 180.062571][ T9811] tipc: Disabling bearer [ 180.102473][ T9818] loop5: detected capacity change from 0 to 256 [ 180.115312][ T9816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 180.154959][ T9820] loop0: detected capacity change from 0 to 128 [ 180.203536][ T9820] FAT-fs (loop0): bread failed, FSINFO block (sector = 257) [ 180.217656][ T9818] FAT-fs (loop5): Directory bread(block 64) failed [ 180.218891][ T9818] FAT-fs (loop5): Directory bread(block 65) failed [ 180.229389][ T9818] FAT-fs (loop5): Directory bread(block 66) failed [ 180.230628][ T9818] FAT-fs (loop5): Directory bread(block 67) failed [ 180.236237][ T9818] FAT-fs (loop5): Directory bread(block 68) failed [ 180.244747][ T9818] FAT-fs (loop5): Directory bread(block 69) failed [ 180.245901][ T9818] FAT-fs (loop5): Directory bread(block 70) failed [ 180.246871][ T9818] FAT-fs (loop5): Directory bread(block 71) failed [ 180.247860][ T9818] FAT-fs (loop5): Directory bread(block 72) failed [ 180.249314][ T9818] FAT-fs (loop5): Directory bread(block 73) failed [ 180.371172][ T9826] tipc: Enabling of bearer rejected, failed to enable media [ 181.101646][ T9856] loop5: detected capacity change from 0 to 512 [ 181.113881][ T9863] FAULT_INJECTION: forcing a failure. [ 181.113881][ T9863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.124436][ T9863] CPU: 1 PID: 9863 Comm: syz.2.1301 Not tainted 5.15.189-syzkaller #0 [ 181.125722][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 181.127117][ T9863] Call trace: [ 181.127567][ T9863] dump_backtrace+0x0/0x43c [ 181.128251][ T9863] show_stack+0x2c/0x3c [ 181.128900][ T9863] __dump_stack+0x30/0x40 [ 181.129583][ T9863] dump_stack_lvl+0xf8/0x160 [ 181.130205][ T9863] dump_stack+0x1c/0x5c [ 181.130794][ T9863] should_fail+0x3c0/0x51c [ 181.131496][ T9863] should_fail_usercopy+0x20/0x30 [ 181.132236][ T9863] __copy_msghdr_from_user+0xb8/0x4f8 [ 181.133143][ T9863] ___sys_recvmsg+0x118/0x220 [ 181.133888][ T9863] do_recvmmsg+0x2ac/0x85c [ 181.134589][ T9863] __arm64_sys_recvmmsg+0x19c/0x238 [ 181.135405][ T9863] invoke_syscall+0x98/0x2b8 [ 181.136115][ T9863] el0_svc_common+0x138/0x258 [ 181.136839][ T9863] do_el0_svc+0x58/0x14c [ 181.137505][ T9863] el0_svc+0x78/0x1e0 [ 181.138176][ T9863] el0t_64_sync_handler+0xcc/0xe4 [ 181.138986][ T9863] el0t_64_sync+0x1a0/0x1a4 [ 181.152234][ T9865] tipc: Enabled bearer , priority 0 [ 181.154947][ T9865] device syzkaller0 entered promiscuous mode [ 181.461352][ T9874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.555527][ T9882] FAULT_INJECTION: forcing a failure. [ 181.555527][ T9882] name failslab, interval 1, probability 0, space 0, times 0 [ 181.557561][ T9882] CPU: 0 PID: 9882 Comm: syz.2.1304 Not tainted 5.15.189-syzkaller #0 [ 181.558684][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 181.560124][ T9882] Call trace: [ 181.560609][ T9882] dump_backtrace+0x0/0x43c [ 181.560768][ T9879] loop5: detected capacity change from 0 to 256 [ 181.561295][ T9882] show_stack+0x2c/0x3c [ 181.562913][ T9882] __dump_stack+0x30/0x40 [ 181.563034][ T9879] FAT-fs (loop5): Unrecognized mount option "18446744073709551615" or missing value [ 181.563604][ T9882] dump_stack_lvl+0xf8/0x160 [ 181.565731][ T9882] dump_stack+0x1c/0x5c [ 181.566399][ T9882] should_fail+0x3c0/0x51c [ 181.567127][ T9882] __should_failslab+0xbc/0x10c [ 181.567948][ T9882] should_failslab+0x10/0x28 [ 181.568638][ T9882] slab_pre_alloc_hook+0x64/0xec [ 181.569450][ T9882] kmem_cache_alloc_node+0x98/0x41c [ 181.570279][ T9882] __alloc_skb+0x134/0x67c [ 181.570975][ T9882] alloc_skb_with_frags+0xa0/0x54c [ 181.571754][ T9882] sock_alloc_send_pskb+0x78c/0x8a8 [ 181.572515][ T9882] unix_dgram_sendmsg+0x43c/0x1188 [ 181.573336][ T9882] ____sys_sendmsg+0x61c/0x920 [ 181.573965][ T9882] ___sys_sendmsg+0x1d0/0x240 [ 181.574627][ T9882] __arm64_sys_sendmsg+0x1a8/0x254 [ 181.575405][ T9882] invoke_syscall+0x98/0x2b8 [ 181.576089][ T9882] el0_svc_common+0x138/0x258 [ 181.576772][ T9882] do_el0_svc+0x58/0x14c [ 181.577435][ T9882] el0_svc+0x78/0x1e0 [ 181.578076][ T9882] el0t_64_sync_handler+0xcc/0xe4 [ 181.578819][ T9882] el0t_64_sync+0x1a0/0x1a4 [ 181.581740][ T9864] tipc: Resetting bearer [ 181.599656][ T9864] tipc: Disabling bearer [ 181.621139][ T9886] tipc: Enabled bearer , priority 0 [ 181.622701][ T9886] device syzkaller0 entered promiscuous mode [ 181.781626][ T9881] loop5: detected capacity change from 0 to 32768 [ 181.784903][ T9886] tipc: Resetting bearer [ 181.794223][ T9885] tipc: Resetting bearer [ 181.801708][ T9895] FAULT_INJECTION: forcing a failure. [ 181.801708][ T9895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.805221][ T9885] tipc: Disabling bearer [ 181.809226][ T9895] CPU: 0 PID: 9895 Comm: syz.1.1308 Not tainted 5.15.189-syzkaller #0 [ 181.810478][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 181.811908][ T9895] Call trace: [ 181.812361][ T9895] dump_backtrace+0x0/0x43c [ 181.812953][ T9894] loop6: detected capacity change from 0 to 1764 [ 181.813045][ T9895] show_stack+0x2c/0x3c [ 181.814704][ T9895] __dump_stack+0x30/0x40 [ 181.815368][ T9895] dump_stack_lvl+0xf8/0x160 [ 181.816070][ T9895] dump_stack+0x1c/0x5c [ 181.816710][ T9895] should_fail+0x3c0/0x51c [ 181.817367][ T9895] should_fail_usercopy+0x20/0x30 [ 181.818104][ T9895] simple_read_from_buffer+0xd0/0x264 [ 181.819055][ T9895] proc_fail_nth_read+0x19c/0x244 [ 181.819944][ T9895] vfs_read+0x278/0xa10 [ 181.820628][ T9895] ksys_read+0x120/0x210 [ 181.821326][ T9895] __arm64_sys_read+0x7c/0x90 [ 181.822031][ T9895] invoke_syscall+0x98/0x2b8 [ 181.822768][ T9895] el0_svc_common+0x138/0x258 [ 181.823476][ T9895] do_el0_svc+0x58/0x14c [ 181.824129][ T9895] el0_svc+0x78/0x1e0 [ 181.824749][ T9895] el0t_64_sync_handler+0xcc/0xe4 [ 181.825493][ T9895] el0t_64_sync+0x1a0/0x1a4 [ 181.863541][ T9881] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 182.354906][ T9922] loop2: detected capacity change from 0 to 256 [ 182.361443][ T9922] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.366492][ T9922] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 182.384600][ T9922] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 182.576670][ T6969] ocfs2: Unmounting device (7,5) on (node local) [ 182.765964][ T9937] loop5: detected capacity change from 0 to 512 [ 182.774695][ T9943] tipc: Enabling of bearer rejected, failed to enable media [ 182.906398][ T9957] device macvtap1 entered promiscuous mode [ 183.333034][ T9957] device vlan0 entered promiscuous mode [ 183.377321][ T9969] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 183.378629][ T9969] Modules linked in: [ 183.379268][ T9969] CPU: 0 PID: 9969 Comm: syz.5.1317 Not tainted 5.15.189-syzkaller #0 [ 183.380472][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 183.381895][ T9969] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 183.383220][ T9969] pc : cap_validate_magic+0x150/0x418 [ 183.384053][ T9969] lr : cap_validate_magic+0x12c/0x418 [ 183.384870][ T9969] sp : ffff800021547b00 [ 183.385505][ T9969] x29: ffff800021547ba0 x28: 1fffe0001af6a36c x27: 0000000020000000 [ 183.386790][ T9969] x26: ffff800021547b20 x25: dfff800000000000 x24: ffff7000042a8f64 [ 183.388050][ T9969] x23: 00000000fffffff2 x22: ffff0000d7b51b64 x21: ffff0000d7b51b40 [ 183.389207][ T9969] x20: 0000000020000000 x19: 0000000000000000 x18: 0000000000000000 [ 183.390497][ T9969] x17: 0000000000000000 x16: ffff8000081afdfc x15: 0000000000000000 [ 183.391681][ T9969] x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 183.392866][ T9969] x11: 0000000000000000 x10: 0000000000000002 x9 : 0000000020000000 [ 183.393948][ T9969] x8 : 0000ffffffffffff x7 : ffff800008750ed4 x6 : 0000000000000000 [ 183.395074][ T9969] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 183.396459][ T9969] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 183.397743][ T9969] Call trace: [ 183.398267][ T9969] cap_validate_magic+0x150/0x418 [ 183.399063][ T9969] __arm64_sys_capset+0x108/0x7b8 [ 183.399834][ T9969] invoke_syscall+0x98/0x2b8 [ 183.400551][ T9969] el0_svc_common+0x138/0x258 [ 183.401265][ T9969] do_el0_svc+0x58/0x14c [ 183.401922][ T9969] el0_svc+0x78/0x1e0 [ 183.402495][ T9969] el0t_64_sync_handler+0xcc/0xe4 [ 183.403218][ T9969] el0t_64_sync+0x1a0/0x1a4 [ 183.403870][ T9969] Code: d503229f 2a1f03f7 2a1f03e0 b8400933 (2a1703e1) [ 183.404897][ T9969] ---[ end trace 668f00948917b439 ]--- [ 183.470628][ T9963] infiniband syz2: set down [ 183.471369][ T9963] infiniband syz2: added syzkaller0 [ 183.487762][ T9963] RDS/IB: syz2: added [ 183.488442][ T9963] smc: adding ib device syz2 with port count 1 [ 183.489495][ T9963] smc: ib device syz2 port 1 has pnetid [ 183.635199][ T9973] loop6: detected capacity change from 0 to 32768 [ 183.653124][ T9973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1319 (9973) [ 183.722956][ T9969] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 183.723929][ T9969] SMP: stopping secondary CPUs [ 183.724644][ T9969] Kernel Offset: disabled [ 183.725325][ T9969] CPU features: 0x8,000003c1,7d33ffd9 [ 183.726094][ T9969] Memory Limit: none [ 184.047087][ T9969] Rebooting in 86400 seconds..