last executing test programs: 3.330655114s ago: executing program 0 (id=555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffa0000000000000, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2, 0x3, 0x80, 0x9}, {0x7452, 0x4, 0x5, 0x4}, {0xfc69, 0x1, 0xfb, 0x7}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.748609059s ago: executing program 3 (id=563): listen(0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000340), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x10, 0xfffffffffffffffe, &(0x7f0000000040)=0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x2000, 0x0) 2.738286441s ago: executing program 3 (id=564): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xba}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.367133609s ago: executing program 0 (id=568): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000180005"], 0x2c}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) nanosleep(0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\f'], 0x10) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000540)={0x2, 0x0, 0x1a, 0x12, 0x38, &(0x7f0000000140)="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"}) 2.352311264s ago: executing program 0 (id=569): mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001a00010027bd7000fbdbdf250a801009fe00ff0b1000000005001b003a00"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x24044010) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000055003d0926bd70000200000007000000", @ANYRES32, @ANYBLOB="050002"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = syz_open_procfs(r2, &(0x7f00000000c0)='syscall\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="cb1700"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1030023, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2cfaab830921c700"]) 2.276447279s ago: executing program 1 (id=570): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x19f, &(0x7f00000004c0)={[{@dax}, {@data_writeback}]}, 0x80, 0x569, &(0x7f0000000980)="$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") r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000880)={0x0, @raw_data="9780230289735622310bf3cebac6af7bf1f1b9a3de4f748545117a9aca22d04ba5ba2e4154f80551eec5118ea2265fa876486dc74a7f499d9cdc0f22e7dd23bdf630a3699b7097ff15d55f9dbe19a8979f9da7efb5148cafb97b9276078e90e180c0483abedfd7aa3ecc2105ea1009455fa7c680d07cb3145ec4eb23e6418314d47a387aab2f2878bae0040e845bbfdad00d4556c2bc2e6253f5d628646fc932d359174aa8e48a00cb40f59c7cb65952e1ceca793eebd572d0977c0e7da4a373d82a13e3d47c1bba"}) statx(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x100, 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x30, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x4}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004}, 0x800) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48001058", @ANYRES16=r5, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r6, @ANYBLOB="06001200000000000600b500850100000a000600ffffffffffff0000040013000c0043000800000009000000"], 0x48}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0xa00800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xf6) sendto(r7, &(0x7f0000000380)="4069f55d8e97c77a90d4c0f6836ed15fd732940890bb4152d95b7e6cbba9138e85fc2b7afd8ec1493f0eb51254499e851d47a833e4ab253b5b69a52247203929b8f4715d1fc0139b167550fd4e0031ba31d7d112677c6d0935a8ba3163987d949c6f16792c6956", 0x67, 0x4000, &(0x7f0000000400)=@ethernet={0x6, @local}, 0x80) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f00000ea000/0x4000)=nil, 0x4000, 0x5, 0x13, r8, 0x8a740000) madvise(&(0x7f00000eb000/0x4000)=nil, 0x4000, 0x15) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x8000000, 0x0, 0x0, 0x0, 0x3000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r9, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x3, &(0x7f0000000340)=0x409, 0x4) 2.272258583s ago: executing program 0 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r2 = io_uring_setup(0x63a6, &(0x7f0000000280)={0x0, 0x5199, 0x10, 0x2, 0x3e3}) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x10}, @TCA_CAKE_RTT={0x8, 0x7, 0xd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0xc) 1.926799508s ago: executing program 0 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a01"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x4, 0x3800000, 0x2, 0x3, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20004005) r1 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.926200847s ago: executing program 1 (id=575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) r0 = socket(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x24, @mcast1, 0x1}, 0x1c) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f706572519ea8d8728977026d697373696f6e732c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c00"]) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x0) 1.912797453s ago: executing program 4 (id=576): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x800, &(0x7f0000000080)={[{@discard}, {@data_writeback}, {@user_xattr}], [{@subj_type={'subj_type', 0x3d, ']'}}]}, 0x25, 0x4ae, &(0x7f0000000540)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 1.905397647s ago: executing program 0 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) timer_create(0x0, 0x0, &(0x7f0000000180)) r1 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x40a0c, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, 'virt_wifi0\x00'}}, {@dont_appraise}]}}, 0x1, 0x0, &(0x7f00000004c0)="37afdbb164da0c0807817e5266f5bdcebc731de45660ddb9b9104393c7e93c8c9e470af106874ce1fbbfa9b3d3bf") getdents64(r1, &(0x7f0000000500)=""/96, 0x60) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', 0x6}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000006c0)={0x0, {}, 0x0, {}, 0x400, 0x4, 0x24, 0x1d, "9e959f16b6a5e942c126e66c4000000000284854c382ec6bcfeef4a3637c7dd8a6078ed98e203f04edc609337f4bb8ac274de9d940bba5e51e92bbd4cf85450d", "f625c1076e4c36e0fb7e904d865c2fdc458ec58d040000005a0800", [0x400059, 0x7]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="38021600", @ANYRES16=r6, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x20008094}, 0x20000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x1000002, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r9, 0x9) ptrace(0x10, 0x1) 1.903325486s ago: executing program 4 (id=578): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7, 0xa0000) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x37, &(0x7f0000000040)=[{0x20, '\x00', @data=0xffffffff, 0xbd2}, {0xf, '\x00', @data=0x9, 0x7fff}]}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000140)={r0, 0x0, 0xa, 0x9, 0x7, 0x9}) close_range(r0, r0, 0x2) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffcb66, @my=0x1}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000001c0)=0x5, 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x100) recvmsg$kcm(r2, &(0x7f00000016c0)={&(0x7f0000000280)=@alg, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001640)=""/83, 0x53}, 0x10000) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000001700)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000001740)={{0xa, 0x4e20, 0x4, @empty, 0x7fffffff}, {0xa, 0x4e20, 0x3, @local, 0x4}, 0x1, {[0x800, 0x4, 0xc330, 0x4, 0x9, 0x6, 0x400, 0x8001]}}, 0x5c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000017c0)) read$FUSE(r2, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000003840)={0xb0, 0x0, r3, [{0x1, 0x10, 0x1, 0x5, '\x00'}, {0x0, 0x0, 0xb, 0x4, '/dev/vcsa#\x00'}, {0x5, 0x101, 0x0, 0x1}, {0x5, 0x3, 0x1, 0xff, '.'}, {0x2, 0x3, 0x4, 0x0, '[*%!'}]}, 0xb0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) read(r2, &(0x7f0000003940)=""/182, 0xb6) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000003a00)) syz_open_dev$hidraw(&(0x7f0000003a40), 0xa14, 0x3a1000) read$FUSE(r2, &(0x7f0000003a80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000005ac0)={0x78, 0x0, r6, {0x4, 0xfffffc01, 0x0, {0x6, 0x7fffffff, 0x7, 0xa, 0x1, 0x8, 0x4, 0x8000, 0x6, 0x2000, 0x0, r4, r5, 0xbf, 0x1}}}, 0x78) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000005bc0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000005c00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000005cc0)={&(0x7f0000005b40), 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}}, 0x4) write(r1, &(0x7f0000005d00)="858d0822ade6b7e51d44f5130bf7e37f21fae57a10dcb04859d246861b8b6c034ae416c0b4b4e5066605d33ee946191842336a3a3f56cd969a4c26ab3236745a3b22567dc5883b36bb0509eb7c5d6658f1ff1d0e3f87087f8917e59e02842e02822a6cc67fce23ae99ba4a052595314c2045eb929b41e8b1db02936fdaa2bafd96edf8f4180de2265e2c68ae3eff5e9c4a7cb7a20cab706df08060efca099ff31baaf97ebf9ff1d9ce7669c59c74d0ee8cfa73d989cf6085a0db59b02f0b4473bfa74280", 0xc4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000005e00)={0x800, r2}, 0x1) close(0xffffffffffffffff) 1.848752274s ago: executing program 3 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x2040000) write(r0, &(0x7f0000000000)='27', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000040)=0x804, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.847862917s ago: executing program 4 (id=580): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000ffffffff02000000000000080200000000005751"], 0x0, 0x38}, 0x28) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) unshare(0x20000400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket(0x18, 0x1, 0x2) connect$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file7\x00', 0x38a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x8920a0, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.752385706s ago: executing program 3 (id=581): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="66736d616769633d3078303030303030303005445037303030332c00"], 0xfd, 0x2d5, &(0x7f0000000780)="$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") sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000ff3000/0xc000)=nil, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x282, 0x0) read$FUSE(r5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', &(0x7f0000000100), 0x80c008, &(0x7f0000000580)={[{@volatile}], [{@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@fowner_eq}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'nl80211\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nl80211\x00'}}, {@appraise_type}, {@fowner_lt}]}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) socket$nl_generic(0x10, 0x3, 0x10) 1.505522334s ago: executing program 2 (id=583): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, 0xffffffffffffffff, 0x1c, &(0x7f00000001c0)={{0xa, 0x4ea2, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x42}}}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x1, 0x4) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xba}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 1.478154826s ago: executing program 2 (id=584): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x89f0, 0xffffffffffff7ffe) 1.268210307s ago: executing program 2 (id=585): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x5, &(0x7f0000000180)={0x5, 0x77, 0x8}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb01062f2edbde920800180000000000000018000000180000000400000002000000f8ff000c02000000008c00000000000d", @ANYBLOB="bb58ffe3b8621e37707d500d5013a955fb07a8ff9de3640b793fa5905580d52a91a66a5417c08238793ff0a09b618dc8dfff1e4729fb98a284d570e8f326f4228f7a2607ba31dbc5e6c6b4506271d12a53d80b54e60c48052bb5585fdb88499288aa82cc11c6fde9a61f6a2eef0e928d5d4803084949104308d433c67b109375f74336a9767cf93303215db1cfc6ba13a1c9deac715092247bb991ba2722faa2106078bbb2502f737de82c39b75b039b30737493e2bacb18993890bec26caf76609a4d51bfad2cc89170132e2b05bb8d4ca98ea23de6362c6bab19a7392bb7ba441f729e9d20273d3194e5c558315ce48c1e55360fb7c3ad2b000b8f7ad839e7e7aac63325f5a99ab99b8f71239bfbfd12bdde4594d50010503035dba58a43ba020986111c84016a2bc6f0bcc451ffe7f41f9e83289ef6eb24927b89619e11d001e5ba53d7610afaf081e7d1755e45f7cff2acc5931de70c38724d34f5ce14725082305bb114c80bbe858d21c4e63d20d5700f963566e5ce129a0f90f77cdf3466ef81d7ac2d98d303505137b55c31b0b57d2baa1cfcb769e0dd6e441efebd30adce32d39997ac487d0c6e2064d9054a60f341a0cd4cbdaee3b422a237317549930822b592bd3085ebfa02d2690911869ef7cba5849fb291440d4feb43c4069c7a5caefe665710a92e1cc42a85fdfce17ebe194fc5d0314b0d531bc7fd42f89a1d5f3fd26e4fc8e2c0bccc083ac91767debe2505cb0991afa498955820e8d0614d23026396c2036af7c5f952338c7e0b119d0fb240f862937254c1106ed1c29b4307e20777b739cecf2221afe2c729fe66979a27cd1cfdc846ae152cf1c3df014fced56528b255578a89809d479f240f79f982cd3e1520424b6316e2a29911cfc640c42656b79e5e0d033aabf28544be338536aad245cf1da87339455daa7ec02bdb84e5dbf7c29d2f942dd0b6ef291109b92319e0e19cd8fed56c49a8ad6c8df4e3bf5366cb3563ce4de312b0cabed39297106cfea30038591ec07ee3fd7e08cad5a141227ed2b5b2a1be1fb1fed8a86658081f4ef97c8c62c0d7ec4c80a00c42f77acca0f444af34398cd32201dd280e91f2218c3968621b507a8e74ea4078022b0fe4b2f8d2231fb8c7c15ddc761d0bdbc53f49ccef6f16106d337dea47c22a833bacd367359428581a1941cbb54eba983ef1be3a6465cedbb19b881cae11a92ccbc01c77b7b763d62039c7edc0f2bf2e14693a29c2a588bf6526278b592718ff0a9f51407f4c083b1fda34a28006ef65c3edc54da2c3f1898c9b49035645a4eed80e0cdd3fbf9e8f45afa3a3a24eb2d7a11803c204fb107cc9239fca6179933914d42da8ed5b5e8bf73130e6cd42fd0379f5ba4c9a48fddddedb8e8fff25c2146ebd9997760389ab5676da14ae3485f57fbe3dd9e7b39221e6dc1e6f2f8577992ca1b7fb42f999d1e03bc551ca0100839747185da3276356dcc404984a7130314785dfbdbe535d1d23e4988570de70cdd19484658916316fa30a866478f179b9d92c9759761d8cda3af23079ccc58044d2007c05b343e74420175c3a66d2adf96bac40871d24229be3eb65a0848ccfce3197caae265b4ff92e4022974e0d15c191ab2c3e94b96b811298b3a6966bc428b24a97b4d3f2a1ca4c8eabf63ec30dd16c3aa4ff1b72e512386f637302bcdd3f15a52a0aa5866eb4bb377282a4f21d883dcaca581a8f84911a11c2c3dadb73160752e94eeb38bf746e99ca41b59482c22ad0ac59aaa84b3788d060d24e33aaf9bf410269b41f77c3f0b42059d4d90f0adb5ab500771648c0f29dcc4780383f9ab20d8354d340cf051b88e931debee4c0d7fe134ec0727546698c8ec26bdd08409e4529dff618721d9c06e2168e3bb4120ef313571b3cb8ef8e54095e0cdf4a81d9272513e6d9de63c78772d1860ebcfb1073f5c1b4e77d731742193a637464a01af7e5a8ea38759c2a58d6a61886b8dfb3e48f9cd1461316ba8c1c98b459e8db01db771badabcad9b49082fa68c1eeffd486b2cc48fc4bbbe48d596045f85c4cc32b750865ea4d97aec18c1184ace8a8ff311de1c2085c8eed83243274632031f177f48dfea34feab7429c1ceaf3db7db55893699af473df4fa23c4b47a4fa46aff01d4f1c9b31d8d3d2d4b718f2218308cc1e422953afbc729457c2a787b1b122de1dbafb889311e491672dc11472536ee0b670b032ccc6364b6eb774dcc15eb5914aad97bd4f5321f71b8ee82ef177fe37dca0e37fc3c893761a914b143133d04ccdfa0aae5d9eccadc438e4837877239022680d7faabe9e8cd83dd28692544229d099e8183d59381bdb63ab94a5ab26f9b5a4fc47569881c2de468589538a74384918b202b5b62141f1958a2e13c1079935ee39398605cce50a4ebfe905c100518b651030406bd340c8bf33f2f1c7f904b2922c878531831361109e547a1a3fcae0443d11028bcf0f1b723f8a25b2dc1eb58847692461826ae83388af1b8dc84c0d675c3bbebf6dfa997a0f5476668153ef38c101ad6a483646d673f532362932d7c4c897076af3e416fcb5c50fee7bed3638498019ae23a7554208342a79a6582ea1a86fa63a60018c244bf79fec2e62eaf555e3f5d82482ca69c19327b0b800a191bf5b42b47db4d0ef6a5b1e0c8e864c4411526f4f3b99f44471231e2a84a6e5f6a8dc84c54688beb7fbb74669525677900b5e5ea6e5c6de4640b4d544f14fd9abbc6e65f29e63d96d82399b627d878f65556bf2440b2b9ffe75d4afece92dad1bc7179d4d8c3fb7915c7ce41634f612404c8da458aeec7a2b3498930cbfdfad9dcaa224b08a59ba7a9657332efecf66b18a5028bd18eba7d0cc2865278e543963331143d9f2056450f477aff0147b195563a7f6a24dc75bde726ba13991f65b55230f985c2cd447ca825c9e3168461499cd2526f4ee17168b60d6f601656f7a34db986ad1f0bfc44036e3b2e0d239c1c9951c4ff5dd9c4cd3c8453e4edc4bb1079087bcc8abf839e25ce216307dd742cae46e17b448d47778771b0c41ebab4048cca56353e1a3c6b559e3768c0b3a16952875a3bb10b53f3293bd15fcfb9d040f4d5bb1809e0154c674322bd37bcdefbd2b8037f968b9f42481b36c6baf4b819913b209bff1cf648382ed4bd37d0c96ba9a71d53bda657c8917efd0273f0490fb588ae6dc73894f26bfda43b9067483a9e5203aa672699f3f03eae1a76648e819b4400749fe098131fedfea6dc0c342729cba170fbffc532439f938af42a0e12986a413cae316878fd164339a3d448888dda8411c708de5e61ffd76defb488a51aacfb0f503098a56158688d31f1bf8c29e00faec3cd9f34cef51717a2ddfa01d0454dcbdf076175c283facbfa1cc8473093ef204fef1cfadd88e193f63549b0b62ebd90b995fd12c3d870a882e21e489c8e65386fa37e6cfea835d1de439dbbe05cfaf04bd9cd98b2a32a9445ee6925af24234d603696a16599ce2e4d31d5eaf186d34b4ad39a95f7fa0bffaf1fc8f93ec82024558e614d5a7a018cf7963023e971f371cc3981c77405e58227db7959b59b731cba352d090da941e3508df2040184a12d90a4cd622789e4d5f2ef6ad3d84a78413759d07f606aeccd39b6dde098a3907a44e768db0a01d0f6da654e02eb72afcc1b65d42bb276470f279eae2532a0158cc752a077b3d522c75ad62fa15a2d38cc8e0aad9577f7bae1628597f2cd4e1daecf1a12ae7c39f4285f6473503c5fbf62a844c5589c7c9783eb6fd21a782a29a1ed946bc520976c0828577ed683088dfc723b0ea3202348870f8a956bf2133b84446be781cb39c643056a60271da54c48ca00a70a2d06881868f0fed22e1ae0bdfcf3c4bc7f970cc5fbb16e7421e30227c8924b1207b8ce1aba631445c3850d5e4e81f9c6db91e2c230a8ff82bb43bdb48d103cbb035565a54c081c6e3f70b38d0cdf81844c205689a02f89d4bc050447b93ff7157d5e50afcaab090c1ef8e6676e2d92189e351814ae03128787b5f75e109ca00a59f70454f72365039b99d06704b058302956b1d7667fd94c77365a7cb3515690b661efa93bd957baf55a91c8ad261dcd83769e96eda6acc1ce6ebf199e945c564e1fc4e8425d771bba8d8c5d9400cdb26edfa64b6833f86fe50c4be0aacbe2ddb4f8054bbcb10c99838e17de2d1ae0700b98b07a88cf06bf5bf1b1ff41d390a686d2417910ff7c407c5b612b503b86698e17d2823521483f661d4b20ad09eea245512af2fb35721492ef73bbcdb5b51eea8851410cd8abb0d438cd7d01cceee86f1173b115de54efdfa633f98e5aa8ef5e3de9ab93a52dbb8262be23b39380e72e1a5e93bb761a7b5b9f504f2b43c5ef0f795dffcf93a437c43f2d3be5df7aec929fc21faade270bf97b27c397a25424104f893c20608d2a9f1ea69a9c21b965e97b4a02656873dac12863eb2180b37e2a9b47d29896bd2ff56dabc9228d958e286043d84dcb8745655ee903f1077f66681f169f5d9060528e5a59a7c3782c7038a5eeddea16592b100a9903335b33a6a2e7cf5021ec5256c6bc4aa5e8dab05867c67a12f020b1d3fd7990811964821ce07b0aa0dd845fb8903bce0960158412d625abbde2174bb0698fcf28c508df0f39b169535a7a1bf51d20dbf5f6cc68d532231f60cb9234add40fbd01d8e94eaa122554792b760572852bff0e0a2554c5e5d64652ac92775bd67310ab17885ff07e2ae05a5519ea4c5e6dc728e17665dd97dd940862d3d967ccc19d7bcddf96468e756202b8aa60e24fb72fb4d3c45d677975f4c5444ccebc9b529bb36a1db605964ff4ea31ef4d3fefc5702d1b189630cc7b4b128da1a2cc28ebc509f6b49633c34084e1db50430efb6cbcf990a111d96d7c740dc2b293fbec5ec15e582bb845d6ea8d554db352d0616a875c5489ebea189290fb39799757a15884f7cc06a833cf065d57b9ace27042bc833f1575cac02ca5634cfe54900a362c99521a2dd7f2f28c6113e1ea7730cca56069e4a7d684073efd260457139f7334ff0900d73c747de2ad982fd251809f860f0ee5799fc58c539e657897b681cdf6475f39808ed2edc8588b83e4c1ed6911a3bdb5062a9551a92deb9fc73e8d2bd22984de96854055f91e90d11e94bda08a3e9f38bcc7f557f23677d11d8a408873a0be0f7ca3bb956321887a61f8511f49764f46eb04e41fe4d3a0504c6aa8df30149b70e0f795aa2a7b0aa621e9670b5617bad9619138d385503fc0026c4c8a2320549bf4c52218f6b8946e4fdd331a92f96d80018191b110fce2cdc19e23f8d545a8dd07f8068550752991e6a99cb55d21a7756184c0a402deab2340f247df2bb0744694ec22ef3344b0ed6eb71e648fc45cda36ae00a8e16a4b2a4b15874b55a8a3c5284e897bd69f2f0256bdda4bcddad7e3b13f943ae805adb8d1a65efa301728636786703097047bf9c84056cd8c0fb764bda364f889864a92dfa52b7d284a68c694056446bafc7855abcc5badf7c81041477bb7736569da3315bc68bd5d8c17888766da2aac6b51fde6801f7c8771aad354429991ebb5ce1af1bddec43ff49dc7a6db831ef03f38ca4a88c9069668f601d6ce9f634e22ddee8f99a638a8c1d59a7fb81fae458818da30e4abf3b9d80428f95c3ea80dcbfcd13cfc6895a656538b460717e1a5fb2ed20b017df968f260b16338c471c062f2db34b2d2788a57285c1b95481138f4aa0b765ffdb49c255115586e49af53310763716a937d35ee2c88928c74eb263", @ANYRES16=r0], 0x0, 0x34, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x17, 0x0, 0x0, 0xb00}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) pidfd_send_signal(r1, 0x5, &(0x7f0000000180)={0x5, 0x77, 0x8}, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) (async) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) get_robust_list(0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) (async) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb01062f2edbde920800180000000000000018000000180000000400000002000000f8ff000c02000000008c00000000000d", @ANYBLOB="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", @ANYRES16=r0], 0x0, 0x34, 0x0, 0x5}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x17, 0x0, 0x0, 0xb00}, 0x90) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) (async) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1.196127947s ago: executing program 2 (id=586): r0 = socket(0x10, 0x3, 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xffe0, 0xa}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x2, 0xfffffffd, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 1.173760296s ago: executing program 2 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000cee10000fa00000007000000001001"], 0x50) socket(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0xfc) r4 = socket(0xa, 0x2, 0x5) shutdown(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x277c7000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e0000000a00340002020202020200001e00940000201321000000000000000a00090011000000080003000000a40000"], 0x40}}, 0xc840) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a01"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x68, 0x2e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008044}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.11532857s ago: executing program 1 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) syz_emit_ethernet(0xb2, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0xa4, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @redirect={0x5, 0x0, 0x0, @rand_addr=0x64010101, {0x22, 0x4, 0x3, 0x7, 0x7, 0x65, 0x7ff, 0x7, 0xff, 0x2, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xf9, 0x3, 0x8, [{@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010101, 0x78eba44}, {@local, 0x8}, {@rand_addr=0x64010101, 0xb}]}, @ssrr={0x89, 0x17, 0x4d, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x4a}, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x45, 0x1, 0xe, [{@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xd70}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee6c}, {@broadcast, 0x1595ca1c}, {@local, 0xe2b}, {@rand_addr=0x64010101, 0x6}]}]}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x80005, @mcast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="e02742e8680d0100f510772f086a", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 948.261782ms ago: executing program 1 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x14) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x3, 0x70bd2c, 0x25dfdbfe, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') syz_ublk_setup_io_uring(0x4f4a, &(0x7f0000000080)={0x0, 0xe4e3, 0x800, 0x2, 0x16f, 0x0, r10}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 939.425401ms ago: executing program 1 (id=590): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x797, &(0x7f0000000800)="$eJzs3M1rXFUbAPDn3mSafuR9J4IL3VShhRZKJ0mzaVfGjbgpFApua0huQshNpmQmNYmFpu4EoTYbFUF079KtUOof4E4KCu4F0RoX6mZkJpMP02Q6tpNMG38/uHPPuR/nOc+ZmcO9MHcC+M96tf6SRPRHxJWIKDa3pxFxpFE6GrGyftzaw5vj9SWJWu3qL0n9tFirFTfbSprrE9E4JV6KiPuFiHPvPRq3srQ8M5bn2XyzPlidvT5YWVo+Pz07NpVNZXPDI5eGLo6MXBwa6Viup9+6dOzut2+srn73VfXOyd7zSYw28o5mbh0LtM36mBRidMf2uf0I1kVJG8f0HkA/AABorX6d39O8NitEMXpaXaW5gAMAAIDnUq2v1q4/2z4SAAAAeMYk0e0eAAAAAPtr43cAG8/2HvRP/H9+PSIGtuJvPYfb23iGOOJoFCLi+Fryj8cPkvXT4Kms3I6Ie6O7fP7aeaK5taGt4rHOtEin3avPP6O7zT+F5hFHG68755/ejf9OeEp7z3/p5vzXs8f8d6XNGF9/9nJhz/i3K4vvn9wtfrIZP9kj/tttxr+z+sHdvfbVvog4E7vH3x6rxf9DDE5O57t9tTa7e/+vsw/2zj/i+CPxk6QRNdk9/5Vmn663mf+7a7/NrLSIf/ZU6/d/PX7ftrN6Gp+JD5v9SCPibnNdr6/uiHFq9vtvHo2crGzEn9hj/Hd//99s7o34vM38f/yyb7HNQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAhjYj+SNLSZjlNS6WIExHxYhxP83Klem6yvDA3Ud8XMRCFdHI6z4YiorheT+r14UZ5q35hWz1J8mwkIl744dh60Ok8K42X84luJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCmExHRH0laiog0In4vpmmp1O1eAQAAAB030O0OAAAAAPvO/T8AAAAcfk96/590uB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoXbl8uX6Ult7eHO8Xp+4sbQwU75xfiKrzJRmF8ZL4+X566Wpcnkqz0rj5dnHtZdGxPClWFgcrGaV6mBlafnabHlhrnptenZsKruWFQ4kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6t/saSpKWISBvlNC2VIv4XEQNRSCan82woIv4fEQ+Khb56fbjbnQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDjKkvLM2N5ns0/34Xa4Uqn7UIkER1ssKc5jB1q8JNmc62OSVYiuj6YabOj85Un/15EZIX2h+7WY4al24VXDnYaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGVFZWp4Zy/NsvtLtngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBd6U9JRNSXM8XT/Tv3Hkn+KDbWEfHOp1c/WhyrVueH69t/3dxe/bi5/cK2E28dZA4AAABw6L3WamfPjvrGffrGfTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC7KkvLM2N5ns3vYyFudztLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSfwdAAD//xBcrZo=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e1c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) listen(r1, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0xffffffffffffffff, &(0x7f0000000180)=0x24) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800) accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYRESOCT=r4], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000044bed2076fd746ee2b9b0181a01dd0803a24761035626963e41bfa53fb5fff50e377a25075d2cb3893f6fbf7c566ad5527bd1a8f2e4100ea3c9587db8fb259377a38195c30e83711afe84a", @ANYRES16=r5, @ANYBLOB="00082abd7000fbdbdf250300000008000300070000000500060004000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) 898.098104ms ago: executing program 3 (id=591): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xba}, [@ldst={0x5}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 876.152939ms ago: executing program 4 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/340], 0x154}, 0x1, 0x0, 0x0, 0x2c63af6e9cdbfa24}, 0x28000014) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "fe6be3c98fb37f7f18563a9f03a6d22c022f2b4acb82741f52c28f6001ea88300d38e63ebe51444ddfa92f7ce0869702d7cedc8cff03867f79fc7b175ebc15bb", 0x37}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x31]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x80000040}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x64, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x35, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x66, 0x30, 0x38, 0x30, 0x34, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x66, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) 736.19417ms ago: executing program 1 (id=593): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000000)={[{@nomblk_io_submit}, {@noload}]}, 0x2, 0x792, &(0x7f00000002c0)="$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") r0 = socket$inet6(0xa, 0x6, 0x4749) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a8"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@delalloc}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@user_xattr}, {@resgid, 0x32}]}, 0x1e, 0x4ee, &(0x7f0000000a80)="$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") r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000f80)={[0xfffffffffffffe01]}, 0x8, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a400000040009000200734b7a310000000008000540000000040800098004e50080140000001000010000000000000000e6ff84000a00"/108], 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xa}, {0x8}}}, 0x24}}, 0x44084) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000001000)=@xdp={0x2c, 0x0, r7, 0x31}, 0x80, &(0x7f0000000200)}, 0x2404c804) 734.905129ms ago: executing program 4 (id=594): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000000)={[], [{@smackfsroot={'smackfsroot', 0x3d, '%'}}]}, 0x2a, 0x63f, &(0x7f0000000d80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x50008000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @private=0xa010101}, 0x104, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000040)='veth0_vlan\x00', 0x8, 0x128}) setsockopt$inet_int(r0, 0x0, 0xd6f9fe259d0557af, &(0x7f0000000100)=0xf, 0x4) 494.107161ms ago: executing program 4 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) unshare(0x26020480) r7 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_REGISTER(r7, 0xc018aa09, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r6, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x105, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r3, r9, r11, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x8}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd8594fbdbdf2508000000100004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 550.95µs ago: executing program 2 (id=596): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001e, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xfe, 0x2b8, &(0x7f0000000740)="$eJzs3U9rK1UUAPAz+V9dJIgbRXBAF67Kq1s3jfIEsSslgrox+PpAkvKgDwJWsHbVT+BS/Bpu3bn2GwhuBXftojIymZkmsUkb7T+ov9+mt/fec+dkzpCscvLFa3ujJ8+SODr5LTqdJGrbsR2nSfSiFpXvohEAwMNxmmXxZxYRzeL/ZO3IRu32sgIAblPx+V+471wAgLvx8aeffdjf2Xn8UZp24pXu8WSQRMTe8WRQrPefxlcxjt14FN04i8jOFeP3P9h5HI0014s39w4ng8nC+f0/YmMavxXd6C2P30oLZfwgIv/bjBcijf7TZnVUN15eHv/2kvgYtOKtN+by34xu/PplPItxPIk8dhb/7Vaavpd9f/LN5/ll8vikFoP2dF9pIyKr31lRAAAAAAAAAAAAAAAAAAAAAAB48DbTNCna90z79+RTZf+d+tl0fTOt9Bb78xTx5/2Ci/5AWZQteg6z+KHqr/MoTdOs3DiLb8SrDT8sAAAAAAAAAAAAAAAAAAAAALnnXx+MhuPx7v61B/XRcFx1A6i+1v9fD9yem3k9DkbD+uoD2+tfa77bQJ7rpZuj0YgbuC1XD+LnjTyfFXt+LPP99ye3Z8X9pAyvCnOjr+Kld88zTMul6iaPhslV1+pUhftpfqkVa6eRJAsz09qOd/ez6SNxli3WtLPiZrbLqOvcjfwZbb24dOmvLMvWO+ed34salTPJtMXGemk0y8HKp6VzsRa/rD5w5VtG/brvOQAAAAAAAAAAAAAAAAAAwHKLX5z+h6NLQ2u3lhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LHZ7/9Xg05ELM5cGByWwZftKQet2H9+zy8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AwAA//+UpUVF") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000100)={0x10, [0x0, 0x8001, 0x10, 0x4204, 0xa, 0x1000, 0x50, 0x8, 0x3, 0xf, 0x3, 0x7, 0xf4b5, 0x3, 0xd, 0x1a47, 0x9, 0x400, 0x5, 0xa, 0x18, 0x1, 0x800, 0x80, 0x5c, 0x6, 0xbb1b, 0x2, 0x4, 0x7, 0x6, 0xfff, 0xf, 0x1, 0x8, 0x6, 0xe1, 0x3, 0x3, 0x8, 0x3, 0x0, 0x4, 0x8, 0x7ff, 0x4, 0x1, 0x2], 0x5}) 0s ago: executing program 3 (id=597): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='measure uid>+', 0xd) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x5e, 0x6}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000894}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TCFLSH(r0, 0x5410, 0x80000020000000) kernel console output (not intermixed with test programs): renamed from lo (while UP) [ 368.345772][ T4945] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 368.361742][ T1210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.361894][ T1210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.362017][ T1210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.364571][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.364582][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.377047][ T4950] loop2: detected capacity change from 0 to 512 [ 368.389492][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.389506][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.417017][ T4949] loop0: detected capacity change from 0 to 8192 [ 368.418051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.418061][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.458319][ T4956] loop1: detected capacity change from 0 to 1024 [ 368.460848][ T4956] ======================================================= [ 368.460848][ T4956] WARNING: The mand mount option has been deprecated and [ 368.460848][ T4956] and is ignored by this kernel. Remove the mand [ 368.460848][ T4956] option from the mount to silence this warning. [ 368.460848][ T4956] ======================================================= [ 368.478449][ T4956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.478617][ T4956] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.479242][ T4956] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 368.479744][ T4956] EXT4-fs (loop1): orphan cleanup on readonly fs [ 368.486720][ T4956] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 3: comm syz.1.10: lblock 3 mapped to illegal pblock 3 (length 1) [ 368.486761][ T4956] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 368.487111][ T4956] Quota error (device loop1): write_blk: dquota write failed [ 368.487122][ T4956] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 368.487167][ T4956] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 368.487189][ T4956] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.10: Failed to acquire dquot type 0 [ 368.487216][ T4956] loop1: lost filesystem error report for type 5 error -117 [ 368.487648][ T4956] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 3: comm syz.1.10: lblock 3 mapped to illegal pblock 3 (length 1) [ 368.487664][ T4956] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 368.487790][ T4956] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 368.487806][ T4956] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.10: Failed to acquire dquot type 0 [ 368.487816][ T4956] loop1: lost filesystem error report for type 5 error -117 [ 368.488019][ T4956] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.10: Freeing blocks not in datazone - block = 0, count = 4096 [ 368.488031][ T4956] loop1: lost filesystem error report for type 5 error -117 [ 368.488588][ T4956] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 3: comm syz.1.10: lblock 3 mapped to illegal pblock 3 (length 1) [ 368.488605][ T4956] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 368.489002][ T4956] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 368.489023][ T4956] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.10: Failed to acquire dquot type 0 [ 368.489035][ T4956] loop1: lost filesystem error report for type 5 error -117 [ 368.489423][ T4956] EXT4-fs (loop1): 1 orphan inode deleted [ 368.491015][ C1] EXT4-fs (loop1): error count since last fsck: 7 [ 368.491026][ C1] EXT4-fs (loop1): initial error at time 368: ext4_map_blocks:832: inode 3: block 3 [ 368.491045][ C1] EXT4-fs (loop1): last error at time 368: ext4_acquire_dquot:7069 [ 368.548029][ T4956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.553308][ T4956] EXT4-fs error (device loop1): ext4_search_dir:1476: inode #2: block 16: comm syz.1.10: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 368.555494][ T4956] EXT4-fs error (device loop1): ext4_search_dir:1476: inode #2: block 16: comm syz.1.10: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 368.561811][ T4960] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 368.561826][ T4960] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 368.561835][ T4960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 368.581315][ T4752] Bluetooth: hci0: command tx timeout [ 368.581659][ T4752] Bluetooth: hci2: command tx timeout [ 368.655366][ T4756] Bluetooth: hci1: command tx timeout [ 368.655770][ T4752] Bluetooth: hci3: command tx timeout [ 368.656074][ T4766] Bluetooth: hci4: command tx timeout [ 368.817541][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.827585][ T4966] bond1 (unregistering): Released all slaves [ 368.876855][ T4970] loop2: detected capacity change from 0 to 256 [ 368.879088][ T4970] vfat: Unknown parameter '00000000000000000000' [ 368.907035][ T4970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11'. [ 368.907244][ T4970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.963342][ T4978] Zero length message leads to an empty skb [ 369.321417][ T5000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 369.321851][ T5000] process 'syz.0.17' launched './file0' with NULL argv: empty string added [ 369.711675][ T5006] 9pnet_fd: p9_fd_create_unix (5006): problem connecting socket: ./tracefs_dir/buffer_size_kb: -111 [ 369.869724][ T5011] syz.4.21 uses obsolete (PF_INET,SOCK_PACKET) [ 369.946532][ T5009] Soft offlining pfn 0x11d9b2 at process virtual address 0x20799000 [ 369.949324][ T5009] Soft offlining pfn 0x11d9b3 at process virtual address 0x2079a000 [ 369.950176][ T5009] xt_hl: Unknown Hop Limit match mode: 221 [ 369.972213][ T5018] loop4: detected capacity change from 0 to 8 [ 369.977598][ T5018] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 369.977610][ T5018] unable to read xattr id index table [ 369.980325][ T5018] SQUASHFS error: zlib decompression failed, data probably corrupt [ 369.980345][ T5018] SQUASHFS error: Failed to read block 0x9b: -5 [ 369.980354][ T5018] SQUASHFS error: Unable to read metadata cache entry [99] [ 369.980363][ T5018] SQUASHFS error: Unable to read inode 0x127 [ 370.060880][ T5029] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 370.099292][ T5035] loop1: detected capacity change from 0 to 512 [ 370.113475][ T5035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.136106][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.136305][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.136626][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.136862][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.136927][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.136983][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.137037][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.137091][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.137142][ T5040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.185047][ T5044] loop1: detected capacity change from 0 to 4096 [ 370.201566][ T5044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.218173][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.321848][ T5058] vxcan0: tx address claim with dlc 0 [ 370.340827][ T5066] loop3: detected capacity change from 0 to 256 [ 370.385924][ T5068] loop2: detected capacity change from 0 to 256 [ 370.386271][ T5068] vfat: Unknown parameter '00000000000000000004' [ 370.472315][ T5078] loop2: detected capacity change from 0 to 1024 [ 370.476375][ T5078] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.486296][ T5078] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.39: lblock 2 mapped to illegal pblock 2 (length 1) [ 370.486316][ T5078] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 370.486415][ T5078] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 370.486428][ T5078] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.39: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.486441][ T5078] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 370.486524][ T5078] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 370.486532][ T5078] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.39: Failed to acquire dquot type 0 [ 370.486541][ T5078] loop2: lost filesystem error report for type 5 error -117 [ 370.486690][ T5078] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 370.486702][ T5078] loop2: lost filesystem error report for type 5 error -117 [ 370.486859][ T5078] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.39: mark_inode_dirty error [ 370.486879][ T5078] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 370.486956][ T5078] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 370.486991][ T5078] EXT4-fs (loop2): 1 orphan inode deleted [ 370.487452][ T5078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.564823][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.568126][ T12] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 370.568144][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 370.569792][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 370.569825][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 370.569836][ T12] loop2: lost filesystem error report for type 5 error -117 [ 370.580771][ T4755] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 370.580793][ T4755] loop2: lost filesystem error report for type 5 error -117 [ 370.589979][ T4755] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 370.590006][ T4755] loop2: lost filesystem error report for type 5 error -117 [ 370.590304][ T4755] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 370.590321][ T4755] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 370.590484][ T4755] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 370.590499][ T4755] loop2: lost filesystem error report for type 5 error -117 [ 370.653178][ T4752] Bluetooth: hci0: command tx timeout [ 370.653229][ T4766] Bluetooth: hci2: command tx timeout [ 370.663080][ T5094] EXT4-fs: Ignoring removed bh option [ 370.677670][ T5094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.723316][ T5094] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.1.45: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 370.727513][ T5094] EXT4-fs (loop1): Remounting filesystem read-only [ 370.734767][ T4752] Bluetooth: hci1: command tx timeout [ 370.734815][ T4766] Bluetooth: hci3: command tx timeout [ 370.764906][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.813000][ T5102] netlink: 112 bytes leftover after parsing attributes in process `syz.1.47'. [ 370.963275][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.056227][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.077309][ T5119] mmap: syz.0.52 (5119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 371.128385][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.172797][ T5121] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 371.173134][ T5121] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 371.173148][ T5121] EXT4-fs (loop1): This should not happen!! Data will be lost [ 371.173148][ T5121] [ 371.175391][ T5121] EXT4-fs (loop1): Total free blocks count 0 [ 371.175412][ T5121] EXT4-fs (loop1): Free/Dirty block details [ 371.175426][ T5121] EXT4-fs (loop1): free_blocks=2415919104 [ 371.175438][ T5121] EXT4-fs (loop1): dirty_blocks=32 [ 371.175445][ T5121] EXT4-fs (loop1): Block reservation details [ 371.175451][ T5121] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 371.197036][ T4771] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 371.291547][ T4766] Bluetooth: hci4: command tx timeout [ 371.330734][ T5128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.55'. [ 371.330752][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 371.340735][ T5128] evm: overlay not supported [ 371.367160][ T5130] FAULT_INJECTION: forcing a failure. [ 371.367160][ T5130] name failslab, interval 1, probability 0, space 0, times 1 [ 371.367177][ T5130] CPU: 1 UID: 0 PID: 5130 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT [ 371.367188][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 371.367194][ T5130] Call trace: [ 371.367196][ T5130] show_stack+0x2c/0x3c (C) [ 371.367216][ T5130] __dump_stack+0x30/0x40 [ 371.367234][ T5130] dump_stack_lvl+0xd8/0x12c [ 371.367246][ T5130] dump_stack+0x1c/0x28 [ 371.367257][ T5130] should_fail_ex+0x418/0x58c [ 371.367270][ T5130] should_failslab+0xc4/0x120 [ 371.367290][ T5130] kmem_cache_alloc_noprof+0x94/0x5d4 [ 371.367299][ T5130] alloc_empty_file+0x6c/0x1cc [ 371.367309][ T5130] alloc_file+0x58/0x98 [ 371.367317][ T5130] alloc_file_pseudo+0xe0/0x198 [ 371.367325][ T5130] __shmem_file_setup+0x210/0x284 [ 371.367338][ T5130] shmem_kernel_file_setup+0x40/0x54 [ 371.367349][ T5130] big_key_preparse+0x208/0x424 [ 371.367362][ T5130] __key_create_or_update+0x2a4/0x848 [ 371.367370][ T5130] key_create_or_update+0x60/0x7c [ 371.367379][ T5130] __arm64_sys_add_key+0x384/0x43c [ 371.367388][ T5130] invoke_syscall+0x98/0x244 [ 371.367400][ T5130] el0_svc_common+0xec/0x23c [ 371.367411][ T5130] do_el0_svc+0x4c/0x5c [ 371.367422][ T5130] el0_svc+0x60/0x1d8 [ 371.367434][ T5130] el0t_64_sync_handler+0x44/0x104 [ 371.367445][ T5130] el0t_64_sync+0x198/0x19c [ 371.410410][ T5134] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[5140] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5134] [ 371.550556][ T5153] EXT4-fs (loop0): Test dummy encryption mode enabled [ 371.550581][ T5153] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 371.550591][ T5153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.554525][ T5149] EXT4-fs: Ignoring removed bh option [ 371.555431][ T5153] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.63: bad orphan inode 131083 [ 371.556254][ T5153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.558263][ T5149] EXT4-fs (loop2): Test dummy encryption mode enabled [ 371.558438][ T5149] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 371.606553][ T5153] fscrypt: AES-256-XTS using blk-crypto-fallback [ 371.621860][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 371.654258][ T5153] Invalid ELF header magic: != ELF [ 371.701170][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.701203][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.879704][ T5164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.928198][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 372.285325][ T1210] IPVS: starting estimator thread 0... [ 372.383628][ T5196] IPVS: using max 61 ests per chain, 146400 per kthread [ 372.564548][ T4864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.733217][ T4752] Bluetooth: hci0: command tx timeout [ 372.733271][ T4766] Bluetooth: hci2: command tx timeout [ 372.812037][ T4752] Bluetooth: hci1: command tx timeout [ 372.812085][ T4766] Bluetooth: hci3: command tx timeout [ 372.843895][ T5210] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 372.846733][ T5210] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 373.005061][ T5223] FAULT_INJECTION: forcing a failure. [ 373.005061][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 373.005081][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT [ 373.005091][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 373.005096][ T5223] Call trace: [ 373.005099][ T5223] show_stack+0x2c/0x3c (C) [ 373.005116][ T5223] __dump_stack+0x30/0x40 [ 373.005129][ T5223] dump_stack_lvl+0xd8/0x12c [ 373.005139][ T5223] dump_stack+0x1c/0x28 [ 373.005148][ T5223] should_fail_ex+0x418/0x58c [ 373.005159][ T5223] should_failslab+0xc4/0x120 [ 373.005170][ T5223] kmem_cache_alloc_noprof+0x94/0x5d4 [ 373.005177][ T5223] alloc_empty_file+0x6c/0x1cc [ 373.005185][ T5223] alloc_file+0x58/0x98 [ 373.005193][ T5223] alloc_file_pseudo+0xe0/0x198 [ 373.005200][ T5223] sock_alloc_file+0xb4/0x1ac [ 373.005209][ T5223] __sys_socket+0x90/0xec [ 373.005217][ T5223] __arm64_sys_socket+0x84/0x9c [ 373.005226][ T5223] invoke_syscall+0x98/0x244 [ 373.005235][ T5223] el0_svc_common+0xec/0x23c [ 373.005245][ T5223] do_el0_svc+0x4c/0x5c [ 373.005254][ T5223] el0_svc+0x60/0x1d8 [ 373.005264][ T5223] el0t_64_sync_handler+0x44/0x104 [ 373.005285][ T5223] el0t_64_sync+0x198/0x19c [ 373.115249][ T5232] vfat: Unknown parameter '/dev/ppp' [ 373.146101][ T5241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.83'. [ 373.164649][ T5247] 9p: Bad value for 'rfdno' [ 373.188549][ T5250] syzkaller0: entered promiscuous mode [ 373.188565][ T5250] syzkaller0: entered allmulticast mode [ 373.253952][ T5263] squashfs: Unknown parameter 'continue' [ 373.278822][ T5264] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4702: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 373.278851][ T5264] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 373.322731][ T4768] udevd[4768]: incorrect ext4 checksum on /dev/loop1 [ 373.371822][ T4766] Bluetooth: hci4: command tx timeout [ 373.399585][ T5253] loop2: p1 p3 < > [ 373.658151][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.826811][ T5300] set_capacity_and_notify: 10 callbacks suppressed [ 373.826821][ T5300] loop2: detected capacity change from 0 to 256 [ 373.966262][ T5310] loop1: detected capacity change from 0 to 512 [ 373.985075][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.262479][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.345139][ T5355] overlayfs: failed to clone upperpath [ 374.378123][ T5365] overlayfs: failed to clone upperpath [ 374.379867][ T5360] FAULT_INJECTION: forcing a failure. [ 374.379867][ T5360] name failslab, interval 1, probability 0, space 0, times 0 [ 374.379888][ T5360] CPU: 1 UID: 0 PID: 5360 Comm: syz.4.106 Not tainted syzkaller #0 PREEMPT [ 374.379904][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 374.379911][ T5360] Call trace: [ 374.379914][ T5360] show_stack+0x2c/0x3c (C) [ 374.379933][ T5360] __dump_stack+0x30/0x40 [ 374.379946][ T5360] dump_stack_lvl+0xd8/0x12c [ 374.379962][ T5360] dump_stack+0x1c/0x28 [ 374.379973][ T5360] should_fail_ex+0x418/0x58c [ 374.379986][ T5360] should_failslab+0xc4/0x120 [ 374.379999][ T5360] __kmalloc_noprof+0x108/0x6c8 [ 374.380009][ T5360] security_sk_alloc+0x60/0x35c [ 374.380021][ T5360] sk_prot_alloc+0xe0/0x1e8 [ 374.380031][ T5360] sk_alloc+0x44/0x320 [ 374.380038][ T5360] packet_create+0xf0/0x6f8 [ 374.380048][ T5360] __sock_create+0x31c/0x670 [ 374.380058][ T5360] __sys_socket_create+0xc0/0x11c [ 374.380068][ T5360] __sys_socket+0x44/0xec [ 374.380077][ T5360] __arm64_sys_socket+0x84/0x9c [ 374.380087][ T5360] invoke_syscall+0x98/0x244 [ 374.380099][ T5360] el0_svc_common+0xec/0x23c [ 374.380111][ T5360] do_el0_svc+0x4c/0x5c [ 374.380122][ T5360] el0_svc+0x60/0x1d8 [ 374.380133][ T5360] el0t_64_sync_handler+0x44/0x104 [ 374.380145][ T5360] el0t_64_sync+0x198/0x19c [ 374.723351][ T5413] overlayfs: failed to clone upperpath [ 374.730341][ T5413] overlayfs: failed to clone lowerpath [ 374.742293][ T5415] loop2: detected capacity change from 0 to 2048 [ 374.742452][ T5418] __nla_validate_parse: 1 callbacks suppressed [ 374.742462][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 374.742936][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 374.759617][ T5415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.811017][ T4766] Bluetooth: hci2: command tx timeout [ 374.811038][ T4766] Bluetooth: hci0: command tx timeout [ 374.834565][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.847665][ T30] audit: type=1326 audit(374.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.847686][ T30] audit: type=1326 audit(374.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.847701][ T30] audit: type=1326 audit(374.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.847715][ T30] audit: type=1326 audit(374.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.850866][ T30] audit: type=1326 audit(374.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.851572][ T30] audit: type=1326 audit(374.830:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.851589][ T30] audit: type=1326 audit(374.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.851652][ T30] audit: type=1326 audit(374.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.851713][ T30] audit: type=1326 audit(374.830:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.851774][ T30] audit: type=1326 audit(374.830:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5431 comm="syz.0.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x7ffc0000 [ 374.891087][ T4752] Bluetooth: hci3: command tx timeout [ 374.891107][ T4752] Bluetooth: hci1: command tx timeout [ 374.905031][ T5432] sctp: [Deprecated]: syz.0.121 (pid 5432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.905031][ T5432] Use struct sctp_sack_info instead [ 374.913818][ T5439] loop2: detected capacity change from 0 to 512 [ 374.929991][ T5439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.948600][ T5444] netlink: 'syz.1.125': attribute type 10 has an invalid length. [ 374.995716][ T5444] loop1: detected capacity change from 0 to 256 [ 374.998603][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.016679][ T5444] loop1: detected capacity change from 0 to 256 [ 375.018132][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.030344][ T5444] loop1: detected capacity change from 0 to 256 [ 375.030566][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.037577][ T5444] loop1: detected capacity change from 0 to 256 [ 375.038948][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.041122][ T5444] loop1: detected capacity change from 0 to 256 [ 375.041355][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.044069][ T5444] loop1: detected capacity change from 0 to 256 [ 375.045406][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.048978][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.050709][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.054582][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.055850][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.057509][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.067840][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.075694][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.078501][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.083606][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.100203][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.119767][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.126996][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.130446][ T5444] vfat: Unknown parameter 'uni_xj¥@ame' [ 375.163146][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.195459][ T5459] tipc: Started in network mode [ 375.195477][ T5459] tipc: Node identity aaaaaaaaaa3e, cluster identity 4711 [ 375.195561][ T5459] tipc: Enabled bearer , priority 19 [ 375.311294][ T5474] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 375.311331][ T5474] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.311339][ T5474] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 375.327500][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 375.461517][ T5480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.506267][ T5491] fuse: Bad value for 'rootmode' [ 375.524469][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.537586][ T5491] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 375.556670][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.583884][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.784513][ T5509] overlayfs: failed to clone upperpath [ 376.236696][ T5544] EXT4-fs: Ignoring removed nobh option [ 376.236710][ T5544] ext4: Unknown parameter 'grpquota..' [ 376.290787][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 376.347060][ T26] tipc: Node number set to 9743018 [ 376.466619][ T5550] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 376.593338][ T5551] bond1: (slave veth0_to_bond): making interface the new active one [ 376.595562][ T5551] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 376.649106][ T5550] macvlan2: entered promiscuous mode [ 376.649150][ T5550] macvlan2: entered allmulticast mode [ 376.650901][ T5550] bond1: entered promiscuous mode [ 376.650969][ T5550] veth0_to_bond: entered promiscuous mode [ 376.651911][ T5550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.683140][ T5550] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 376.726934][ T5550] bond1: left promiscuous mode [ 376.726949][ T5550] veth0_to_bond: left promiscuous mode [ 376.747253][ T5560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 376.747976][ T5560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 376.816234][ T4757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.819921][ T5562] EXT4-fs: Ignoring removed oldalloc option [ 376.819933][ T5562] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.849787][ T5562] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 376.891759][ T5565] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 376.923972][ T5566] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 376.941763][ T5568] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.996912][ T4757] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.047664][ T4766] Bluetooth: Wrong link type (-57) [ 377.073062][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 377.073081][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 377.082735][ T5584] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 377.082908][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 377.084509][ T5584] team0 (unregistering): Failed to send options change via netlink (err -105) [ 377.084639][ T5584] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 377.084768][ T5584] team0 (unregistering): Port device team_slave_1 removed [ 377.090069][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 377.090084][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 377.093322][ T4766] Bluetooth: Wrong link type (-57) [ 377.094462][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 377.094475][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 377.139049][ T5598] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.172: corrupted in-inode xattr: invalid ea_ino [ 377.139067][ T5598] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 377.139176][ T5598] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.172: couldn't read orphan inode 15 (err -117) [ 377.139188][ T5598] fserror_report: 1 callbacks suppressed [ 377.139193][ T5598] loop1: lost filesystem error report for type 5 error -117 [ 377.139692][ T5598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.197143][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.271486][ T5609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 377.272003][ T5609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.309802][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.313841][ T5618] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.334876][ T5619] netlink: 'syz.0.178': attribute type 11 has an invalid length. [ 377.356663][ T4755] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.389900][ T5624] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 377.389916][ T5624] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 377.455722][ T5641] EXT4-fs (loop2): Test dummy encryption mode enabled [ 377.698774][ T5641] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.186: inode has both inline data and extents flags [ 377.698805][ T5641] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 377.698947][ T5641] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.186: couldn't read orphan inode 15 (err -117) [ 377.698962][ T5641] loop2: lost filesystem error report for type 5 error -117 [ 377.699474][ T5641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.794380][ T5641] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 378.299345][ T5664] EXT4-fs: Ignoring removed bh option [ 378.299679][ T5664] EXT4-fs: Mount option(s) incompatible with ext3 [ 378.359418][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.266837][ T5676] overlayfs: failed to clone upperpath [ 379.373458][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.375185][ T4726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.407433][ T5691] set_capacity_and_notify: 25 callbacks suppressed [ 379.407444][ T5691] loop4: detected capacity change from 0 to 512 [ 379.430776][ T5691] EXT4-fs (loop4): 1 orphan inode deleted [ 379.433784][ T5691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.444051][ T1210] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 1 [ 379.454131][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.468191][ T5693] Injecting memory failure for pfn 0x13c4d8 at process virtual address 0x20000000 [ 379.538618][ T5693] Memory failure: 0x13c4d8: keeping poisoned page in swap cache [ 379.538697][ T5693] Memory failure: 0x13c4d8: recovery action for clean swapcache page: Recovered [ 379.538711][ T5693] Injecting memory failure for pfn 0x1362d3 at process virtual address 0x20001000 [ 379.538833][ T5693] Memory failure: 0x1362d3: keeping poisoned page in swap cache [ 379.538855][ T5693] Memory failure: 0x1362d3: recovery action for clean swapcache page: Recovered [ 379.549153][ T5693] Injecting memory failure for pfn 0x136e3c at process virtual address 0x20002000 [ 379.565727][ T5693] Memory failure: 0x136e3c: keeping poisoned page in swap cache [ 379.565763][ T5693] Memory failure: 0x136e3c: Sending SIGBUS to syz.1.200:5693 due to hardware memory corruption [ 379.565872][ T5693] Memory failure: 0x136e3c: recovery action for dirty swapcache page: Delayed [ 379.565886][ T5693] Injecting memory failure for pfn 0x2193df at process virtual address 0x20003000 [ 379.566990][ T5693] Memory failure: 0x2193df: unhandlable page. [ 379.567000][ T5693] Memory failure: 0x2193df: recovery action for reserved kernel page: Ignored [ 379.577527][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.578469][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.606520][ T5712] loop4: detected capacity change from 0 to 512 [ 379.940905][ T5725] __nla_validate_parse: 7 callbacks suppressed [ 379.940991][ T5725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.211'. [ 379.971997][ T5725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.211'. [ 380.208254][ T5733] hsr0: entered allmulticast mode [ 380.208266][ T5733] hsr_slave_0: entered allmulticast mode [ 380.208276][ T5733] hsr_slave_1: entered allmulticast mode [ 380.423902][ T5751] input: syz0 as /devices/virtual/input/input6 [ 380.467877][ T5755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.221'. [ 380.470522][ T5755] sctp: [Deprecated]: syz.3.221 (pid 5755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.470522][ T5755] Use struct sctp_sack_info instead [ 380.951711][ T13] IPVS: starting estimator thread 0... [ 381.014331][ T5758] netlink: 1700 bytes leftover after parsing attributes in process `syz.3.222'. [ 381.014348][ T5758] netlink: 1700 bytes leftover after parsing attributes in process `syz.3.222'. [ 381.016191][ T5758] loop3: detected capacity change from 0 to 512 [ 381.019862][ T5758] EXT4-fs: Invalid want_extra_isize -2147483648 [ 381.040988][ T5768] IPVS: using max 56 ests per chain, 134400 per kthread [ 381.065529][ T5777] capability: warning: `syz.2.228' uses deprecated v2 capabilities in a way that may be insecure [ 381.067910][ T5777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.228'. [ 381.083163][ T5777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.228'. [ 382.018248][ T5822] fuse: Bad value for 'fd' [ 382.018663][ T4726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.171314][ T4771] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.251702][ T5832] Injecting memory failure for pfn 0x13a15e at process virtual address 0x2062c000 [ 382.253787][ T5832] Memory failure: 0x13a15e: Sending SIGBUS to syz.3.242:5832 due to hardware memory corruption [ 382.253816][ T5832] Memory failure: 0x13a15e: recovery action for unsplit thp: Failed [ 382.404507][ T5845] net_ratelimit: 60 callbacks suppressed [ 382.404518][ T5845] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 382.405755][ T5855] hsr0: left allmulticast mode [ 382.405769][ T5855] hsr_slave_0: left allmulticast mode [ 382.405782][ T5855] hsr_slave_1: left allmulticast mode [ 382.472146][ T5855] hsr_slave_0: left promiscuous mode [ 382.521166][ T5855] hsr_slave_1: left promiscuous mode [ 382.752866][ T5862] bond0: entered promiscuous mode [ 382.752882][ T5862] bond_slave_0: entered promiscuous mode [ 382.752949][ T5862] bond_slave_1: entered promiscuous mode [ 382.754793][ T5862] gretap0: entered promiscuous mode [ 382.755151][ T5862] dummy0: entered promiscuous mode [ 382.755851][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 382.755863][ T5862] Cannot create hsr debugfs directory [ 382.899024][ T5891] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000003ÿÿ¹µ£þ`¾ÿÝ;¬Ý»MðzëBŽz' [ 382.930861][ T5899] fuse: fd is not a fuse device [ 382.942965][ T5891] loop2: detected capacity change from 0 to 512 [ 383.080033][ T5911] loop2: detected capacity change from 0 to 512 [ 383.209342][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 383.854353][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.380513][ T5934] loop1: detected capacity change from 0 to 4096 [ 384.388036][ T5922] ip_tables: iptables: counters copy to user failed while replacing table [ 384.447653][ T5934] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 384.447666][ T5934] EXT4-fs (loop1): Test dummy encryption mode enabled [ 384.485500][ T5934] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 384.485541][ T5934] System zones: 0-5 [ 384.485804][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 384.491590][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.494447][ T5934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.637282][ T5944] loop2: detected capacity change from 0 to 1024 [ 384.677483][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.908371][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.909634][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.946618][ T5963] loop2: detected capacity change from 0 to 512 [ 384.978860][ T5963] EXT4-fs (loop2): bad s_min_extra_isize: 2432 [ 385.078459][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 385.080043][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.142924][ T5952] hid-generic 0000:0000:0000.0001: pid 5952 passed too short report [ 385.659102][ T5867] syz.4.235 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 385.659123][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT [ 385.659133][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 385.659138][ T5867] Call trace: [ 385.659141][ T5867] show_stack+0x2c/0x3c (C) [ 385.659158][ T5867] __dump_stack+0x30/0x40 [ 385.659171][ T5867] dump_stack_lvl+0xd8/0x12c [ 385.659180][ T5867] dump_stack+0x1c/0x28 [ 385.659190][ T5867] dump_header+0xbc/0x3f0 [ 385.659203][ T5867] oom_kill_process+0x248/0x864 [ 385.659212][ T5867] out_of_memory+0xd24/0x1064 [ 385.659219][ T5867] mem_cgroup_out_of_memory+0xe8/0x170 [ 385.659228][ T5867] try_charge_memcg+0x9bc/0xd38 [ 385.659239][ T5867] charge_memcg+0x19c/0x2a0 [ 385.659248][ T5867] __mem_cgroup_charge+0x38/0x98 [ 385.659258][ T5867] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 385.659269][ T5867] shmem_get_folio_gfp+0x4d8/0x1370 [ 385.659279][ T5867] shmem_write_begin+0x160/0x448 [ 385.659295][ T5867] generic_perform_write+0x23c/0x7a4 [ 385.659309][ T5867] shmem_file_write_iter+0x10c/0x134 [ 385.659319][ T5867] __kernel_write_iter+0x334/0x740 [ 385.659330][ T5867] dump_user_range+0x36c/0x7a0 [ 385.659340][ T5867] elf_core_dump+0x2c74/0x31e8 [ 385.659347][ T5867] coredump_write+0x108c/0x16cc [ 385.659355][ T5867] vfs_coredump+0x2ad8/0x3820 [ 385.659363][ T5867] get_signal+0xd88/0x1094 [ 385.659372][ T5867] arch_do_signal_or_restart+0x1c8/0x444c [ 385.659381][ T5867] exit_to_user_mode_loop+0x70/0x17c [ 385.659392][ T5867] el0_da+0x14c/0x1d4 [ 385.659402][ T5867] el0t_64_sync_handler+0xd8/0x104 [ 385.659412][ T5867] el0t_64_sync+0x198/0x19c [ 385.659903][ T5867] memory: usage 307200kB, limit 307200kB, failcnt 25191 [ 385.659909][ T5867] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0 [ 385.659915][ T5867] kmem: usage 5580kB, limit 9007199254740988kB, failcnt 0 [ 385.659920][ T5867] Memory cgroup stats for /syz4: [ 385.660011][ T5867] cache 308453376 [ 385.660015][ T5867] rss 167936 [ 385.660018][ T5867] rss_huge 0 [ 385.660021][ T5867] shmem 308400128 [ 385.660024][ T5867] mapped_file 11198464 [ 385.660028][ T5867] dirty 24576 [ 385.660031][ T5867] writeback 0 [ 385.660034][ T5867] workingset_refault_anon 661 [ 385.660037][ T5867] workingset_refault_file 4 [ 385.660040][ T5867] swap 127795200 [ 385.660043][ T5867] swapcached 130703360 [ 385.660046][ T5867] pgpgin 125951 [ 385.660049][ T5867] pgpgout 50546 [ 385.660052][ T5867] pgfault 30732 [ 385.660055][ T5867] pgmajfault 188 [ 385.660058][ T5867] inactive_anon 305659904 [ 385.660061][ T5867] active_anon 3055616 [ 385.660064][ T5867] inactive_file 20480 [ 385.660067][ T5867] active_file 12288 [ 385.660070][ T5867] unevictable 0 [ 385.660073][ T5867] hierarchical_memory_limit 314572800 [ 385.660076][ T5867] hierarchical_memsw_limit 9223372036854771712 [ 385.660080][ T5867] total_cache 308453376 [ 385.660083][ T5867] total_rss 167936 [ 385.660086][ T5867] total_rss_huge 0 [ 385.660089][ T5867] total_shmem 308400128 [ 385.660092][ T5867] total_mapped_file 11198464 [ 385.660095][ T5867] total_dirty 24576 [ 385.660098][ T5867] total_writeback 0 [ 385.660101][ T5867] total_workingset_refault_anon 661 [ 385.660104][ T5867] total_workingset_refault_file 4 [ 385.660107][ T5867] total_swap 127795200 [ 385.660110][ T5867] total_swapcached 130703360 [ 385.660114][ T5867] total_pgpgin 125951 [ 385.660117][ T5867] total_pgpgout 50546 [ 385.660120][ T5867] total_pgfault 30732 [ 385.660123][ T5867] total_pgmajfault 188 [ 385.660126][ T5867] total_inactive_anon 305659904 [ 385.660129][ T5867] total_active_anon 3055616 [ 385.660132][ T5867] total_inactive_file 20480 [ 385.660135][ T5867] total_active_file 12288 [ 385.660138][ T5867] total_unevictable 0 [ 385.660141][ T5867] anon_cost 12874 [ 385.660144][ T5867] file_cost 0 [ 385.660148][ T5867] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.235,pid=5847,uid=0 [ 385.660250][ T5867] Memory cgroup out of memory: Killed process 5847 (syz.4.235) total-vm:98896kB, anon-rss:1240kB, file-rss:53528kB, shmem-rss:2328kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 385.740213][ T5864] syz.4.235 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 385.740229][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT [ 385.740238][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 385.740243][ T5864] Call trace: [ 385.740245][ T5864] show_stack+0x2c/0x3c (C) [ 385.740259][ T5864] __dump_stack+0x30/0x40 [ 385.740273][ T5864] dump_stack_lvl+0xd8/0x12c [ 385.740282][ T5864] dump_stack+0x1c/0x28 [ 385.740291][ T5864] dump_header+0xbc/0x3f0 [ 385.740301][ T5864] oom_kill_process+0x248/0x864 [ 385.740309][ T5864] out_of_memory+0xd24/0x1064 [ 385.740316][ T5864] mem_cgroup_out_of_memory+0xe8/0x170 [ 385.740324][ T5864] try_charge_memcg+0x9bc/0xd38 [ 385.740334][ T5864] charge_memcg+0x19c/0x2a0 [ 385.740343][ T5864] __mem_cgroup_charge+0x38/0x98 [ 385.740353][ T5864] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 385.740363][ T5864] shmem_get_folio_gfp+0x4d8/0x1370 [ 385.740372][ T5864] shmem_write_begin+0x160/0x448 [ 385.740382][ T5864] generic_perform_write+0x23c/0x7a4 [ 385.740391][ T5864] shmem_file_write_iter+0x10c/0x134 [ 385.740401][ T5864] __kernel_write_iter+0x334/0x740 [ 385.740411][ T5864] dump_user_range+0x36c/0x7a0 [ 385.740419][ T5864] elf_core_dump+0x2c74/0x31e8 [ 385.740426][ T5864] coredump_write+0x108c/0x16cc [ 385.740434][ T5864] vfs_coredump+0x2ad8/0x3820 [ 385.740442][ T5864] get_signal+0xd88/0x1094 [ 385.740450][ T5864] arch_do_signal_or_restart+0x1c8/0x444c [ 385.740459][ T5864] exit_to_user_mode_loop+0x70/0x17c [ 385.740468][ T5864] el0_da+0x14c/0x1d4 [ 385.740478][ T5864] el0t_64_sync_handler+0xd8/0x104 [ 385.740487][ T5864] el0t_64_sync+0x198/0x19c [ 385.740495][ T5864] memory: usage 307200kB, limit 307200kB, failcnt 25308 [ 385.740501][ T5864] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0 [ 385.740506][ T5864] kmem: usage 5580kB, limit 9007199254740988kB, failcnt 0 [ 385.740511][ T5864] Memory cgroup stats for /syz4: [ 385.740566][ T5864] cache 308498432 [ 385.740570][ T5864] rss 167936 [ 385.740573][ T5864] rss_huge 0 [ 385.740576][ T5864] shmem 308465664 [ 385.740579][ T5864] mapped_file 11177984 [ 385.740582][ T5864] dirty 24576 [ 385.740585][ T5864] writeback 0 [ 385.740588][ T5864] workingset_refault_anon 661 [ 385.740591][ T5864] workingset_refault_file 11 [ 385.740595][ T5864] swap 127803392 [ 385.740598][ T5864] swapcached 130703360 [ 385.740601][ T5864] pgpgin 125974 [ 385.740603][ T5864] pgpgout 50569 [ 385.740606][ T5864] pgfault 30736 [ 385.740609][ T5864] pgmajfault 188 [ 385.740612][ T5864] inactive_anon 305725440 [ 385.740615][ T5864] active_anon 3076096 [ 385.740618][ T5864] inactive_file 20480 [ 385.740621][ T5864] active_file 12288 [ 385.740624][ T5864] unevictable 0 [ 385.740628][ T5864] hierarchical_memory_limit 314572800 [ 385.740631][ T5864] hierarchical_memsw_limit 9223372036854771712 [ 385.740634][ T5864] total_cache 308498432 [ 385.740637][ T5864] total_rss 167936 [ 385.740641][ T5864] total_rss_huge 0 [ 385.740643][ T5864] total_shmem 308465664 [ 385.740647][ T5864] total_mapped_file 11177984 [ 385.740650][ T5864] total_dirty 24576 [ 385.740653][ T5864] total_writeback 0 [ 385.740656][ T5864] total_workingset_refault_anon 661 [ 385.740659][ T5864] total_workingset_refault_file 11 [ 385.740662][ T5864] total_swap 127803392 [ 385.740665][ T5864] total_swapcached 130703360 [ 385.740668][ T5864] total_pgpgin 125974 [ 385.740671][ T5864] total_pgpgout 50569 [ 385.740674][ T5864] total_pgfault 30736 [ 385.740677][ T5864] total_pgmajfault 188 [ 385.740680][ T5864] total_inactive_anon 305725440 [ 385.740684][ T5864] total_active_anon 3076096 [ 385.740687][ T5864] total_inactive_file 20480 [ 385.740690][ T5864] total_active_file 12288 [ 385.740693][ T5864] total_unevictable 0 [ 385.740696][ T5864] anon_cost 13199 [ 385.740699][ T5864] file_cost 24 [ 385.740702][ T5864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.235,pid=5860,uid=0 [ 385.740747][ T5864] Memory cgroup out of memory: Killed process 5860 (syz.4.235) total-vm:98896kB, anon-rss:1240kB, file-rss:53508kB, shmem-rss:2328kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 385.819465][ T5839] syz.4.235 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 385.819481][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT [ 385.819490][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 385.819494][ T5839] Call trace: [ 385.819497][ T5839] show_stack+0x2c/0x3c (C) [ 385.819510][ T5839] __dump_stack+0x30/0x40 [ 385.819519][ T5839] dump_stack_lvl+0xd8/0x12c [ 385.819529][ T5839] dump_stack+0x1c/0x28 [ 385.819538][ T5839] dump_header+0xbc/0x3f0 [ 385.819548][ T5839] oom_kill_process+0x248/0x864 [ 385.819555][ T5839] out_of_memory+0xd24/0x1064 [ 385.819562][ T5839] mem_cgroup_out_of_memory+0xe8/0x170 [ 385.819570][ T5839] try_charge_memcg+0x9bc/0xd38 [ 385.819580][ T5839] charge_memcg+0x19c/0x2a0 [ 385.819589][ T5839] __mem_cgroup_charge+0x38/0x98 [ 385.819599][ T5839] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 385.819609][ T5839] shmem_get_folio_gfp+0x4d8/0x1370 [ 385.819618][ T5839] shmem_write_begin+0x160/0x448 [ 385.819627][ T5839] generic_perform_write+0x23c/0x7a4 [ 385.819637][ T5839] shmem_file_write_iter+0x10c/0x134 [ 385.819646][ T5839] __kernel_write_iter+0x334/0x740 [ 385.819656][ T5839] dump_user_range+0x36c/0x7a0 [ 385.819665][ T5839] elf_core_dump+0x2c74/0x31e8 [ 385.819671][ T5839] coredump_write+0x108c/0x16cc [ 385.819680][ T5839] vfs_coredump+0x2ad8/0x3820 [ 385.819687][ T5839] get_signal+0xd88/0x1094 [ 385.819695][ T5839] arch_do_signal_or_restart+0x1c8/0x444c [ 385.819704][ T5839] exit_to_user_mode_loop+0x70/0x17c [ 385.819714][ T5839] el0_da+0x14c/0x1d4 [ 385.819723][ T5839] el0t_64_sync_handler+0xd8/0x104 [ 385.819732][ T5839] el0t_64_sync+0x198/0x19c [ 385.819740][ T5839] memory: usage 307200kB, limit 307200kB, failcnt 25468 [ 385.819746][ T5839] memory+swap: usage 432012kB, limit 9007199254740988kB, failcnt 0 [ 385.819751][ T5839] kmem: usage 5576kB, limit 9007199254740988kB, failcnt 0 [ 385.819756][ T5839] Memory cgroup stats for /syz4: [ 385.819809][ T5839] cache 308506624 [ 385.819813][ T5839] rss 167936 [ 385.819816][ T5839] rss_huge 0 [ 385.819819][ T5839] shmem 308486144 [ 385.819822][ T5839] mapped_file 11182080 [ 385.819825][ T5839] dirty 0 [ 385.819828][ T5839] writeback 0 [ 385.819831][ T5839] workingset_refault_anon 661 [ 385.819834][ T5839] workingset_refault_file 11 [ 385.819837][ T5839] swap 127807488 [ 385.819840][ T5839] swapcached 130703360 [ 385.819843][ T5839] pgpgin 125979 [ 385.819846][ T5839] pgpgout 50573 [ 385.819849][ T5839] pgfault 30737 [ 385.819852][ T5839] pgmajfault 188 [ 385.819855][ T5839] inactive_anon 305745920 [ 385.819858][ T5839] active_anon 3096576 [ 385.819861][ T5839] inactive_file 0 [ 385.819864][ T5839] active_file 0 [ 385.819867][ T5839] unevictable 0 [ 385.819870][ T5839] hierarchical_memory_limit 314572800 [ 385.819873][ T5839] hierarchical_memsw_limit 9223372036854771712 [ 385.819876][ T5839] total_cache 308506624 [ 385.819879][ T5839] total_rss 167936 [ 385.819882][ T5839] total_rss_huge 0 [ 385.819885][ T5839] total_shmem 308486144 [ 385.819888][ T5839] total_mapped_file 11182080 [ 385.819891][ T5839] total_dirty 0 [ 385.819894][ T5839] total_writeback 0 [ 385.819897][ T5839] total_workingset_refault_anon 661 [ 385.819900][ T5839] total_workingset_refault_file 11 [ 385.819904][ T5839] total_swap 127807488 [ 385.819907][ T5839] total_swapcached 130703360 [ 385.819910][ T5839] total_pgpgin 125979 [ 385.819913][ T5839] total_pgpgout 50573 [ 385.819916][ T5839] total_pgfault 30737 [ 385.819919][ T5839] total_pgmajfault 188 [ 385.819922][ T5839] total_inactive_anon 305745920 [ 385.819925][ T5839] total_active_anon 3096576 [ 385.819928][ T5839] total_inactive_file 0 [ 385.819931][ T5839] total_active_file 0 [ 385.819934][ T5839] total_unevictable 0 [ 385.819937][ T5839] anon_cost 13268 [ 385.819940][ T5839] file_cost 1148 [ 385.819943][ T5839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.235,pid=5858,uid=0 [ 385.819987][ T5839] Memory cgroup out of memory: Killed process 5858 (syz.4.235) total-vm:98896kB, anon-rss:1240kB, file-rss:51076kB, shmem-rss:2328kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 385.972929][ T5846] syz.4.235 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 385.972946][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT [ 385.972955][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 385.972960][ T5846] Call trace: [ 385.972962][ T5846] show_stack+0x2c/0x3c (C) [ 385.972975][ T5846] __dump_stack+0x30/0x40 [ 385.972986][ T5846] dump_stack_lvl+0xd8/0x12c [ 385.972995][ T5846] dump_stack+0x1c/0x28 [ 385.973004][ T5846] dump_header+0xbc/0x3f0 [ 385.973015][ T5846] oom_kill_process+0x248/0x864 [ 385.973022][ T5846] out_of_memory+0xd24/0x1064 [ 385.973029][ T5846] mem_cgroup_out_of_memory+0xe8/0x170 [ 385.973037][ T5846] try_charge_memcg+0x9bc/0xd38 [ 385.973047][ T5846] charge_memcg+0x19c/0x2a0 [ 385.973057][ T5846] __mem_cgroup_charge+0x38/0x98 [ 385.973066][ T5846] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 385.973076][ T5846] shmem_get_folio_gfp+0x4d8/0x1370 [ 385.973085][ T5846] shmem_write_begin+0x160/0x448 [ 385.973095][ T5846] generic_perform_write+0x23c/0x7a4 [ 385.973104][ T5846] shmem_file_write_iter+0x10c/0x134 [ 385.973114][ T5846] __kernel_write_iter+0x334/0x740 [ 385.973124][ T5846] dump_user_range+0x36c/0x7a0 [ 385.973133][ T5846] elf_core_dump+0x2c74/0x31e8 [ 385.973139][ T5846] coredump_write+0x108c/0x16cc [ 385.973147][ T5846] vfs_coredump+0x2ad8/0x3820 [ 385.973156][ T5846] get_signal+0xd88/0x1094 [ 385.973163][ T5846] arch_do_signal_or_restart+0x1c8/0x444c [ 385.973173][ T5846] exit_to_user_mode_loop+0x70/0x17c [ 385.973182][ T5846] el0_da+0x14c/0x1d4 [ 385.973191][ T5846] el0t_64_sync_handler+0xd8/0x104 [ 385.973201][ T5846] el0t_64_sync+0x198/0x19c [ 385.973209][ T5846] memory: usage 307200kB, limit 307200kB, failcnt 26683 [ 385.973215][ T5846] memory+swap: usage 431972kB, limit 9007199254740988kB, failcnt 0 [ 385.973220][ T5846] kmem: usage 5576kB, limit 9007199254740988kB, failcnt 0 [ 385.973225][ T5846] Memory cgroup stats for /syz4: [ 385.973285][ T5846] cache 308461568 [ 385.973289][ T5846] rss 167936 [ 385.973292][ T5846] rss_huge 0 [ 385.973295][ T5846] shmem 308453376 [ 385.973298][ T5846] mapped_file 11907072 [ 385.973301][ T5846] dirty 0 [ 385.973304][ T5846] writeback 0 [ 385.973307][ T5846] workingset_refault_anon 756 [ 385.973310][ T5846] workingset_refault_file 11 [ 385.973313][ T5846] swap 127766528 [ 385.973316][ T5846] swapcached 136065024 [ 385.973319][ T5846] pgpgin 127285 [ 385.973322][ T5846] pgpgout 51879 [ 385.973325][ T5846] pgfault 30990 [ 385.973328][ T5846] pgmajfault 202 [ 385.973331][ T5846] inactive_anon 305434624 [ 385.973334][ T5846] active_anon 3149824 [ 385.973337][ T5846] inactive_file 8192 [ 385.973340][ T5846] active_file 0 [ 385.973343][ T5846] unevictable 0 [ 385.973346][ T5846] hierarchical_memory_limit 314572800 [ 385.973350][ T5846] hierarchical_memsw_limit 9223372036854771712 [ 385.973353][ T5846] total_cache 308461568 [ 385.973356][ T5846] total_rss 167936 [ 385.973359][ T5846] total_rss_huge 0 [ 385.973362][ T5846] total_shmem 308453376 [ 385.973365][ T5846] total_mapped_file 11907072 [ 385.973368][ T5846] total_dirty 0 [ 385.973371][ T5846] total_writeback 0 [ 385.973374][ T5846] total_workingset_refault_anon 756 [ 385.973377][ T5846] total_workingset_refault_file 11 [ 385.973380][ T5846] total_swap 127766528 [ 385.973383][ T5846] total_swapcached 136065024 [ 385.973387][ T5846] total_pgpgin 127285 [ 385.973390][ T5846] total_pgpgout 51879 [ 385.973393][ T5846] total_pgfault 30990 [ 385.973396][ T5846] total_pgmajfault 202 [ 385.973399][ T5846] total_inactive_anon 305434624 [ 385.973402][ T5846] total_active_anon 3149824 [ 385.973405][ T5846] total_inactive_file 8192 [ 385.973408][ T5846] total_active_file 0 [ 385.973411][ T5846] total_unevictable 0 [ 385.973414][ T5846] anon_cost 13305 [ 385.973417][ T5846] file_cost 1168 [ 385.973420][ T5846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.235,pid=5839,uid=0 [ 385.973464][ T5846] Memory cgroup out of memory: Killed process 5839 (syz.4.235) total-vm:98704kB, anon-rss:1240kB, file-rss:48964kB, shmem-rss:2312kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 386.097124][ T5982] loop2: detected capacity change from 0 to 1024 [ 386.105490][ T5979] ima: policy update failed [ 386.108123][ T5982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 386.108635][ T5982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.108963][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 386.108974][ T30] audit: type=1807 audit(386.080:143): action=measure uid>+ res=0 [ 386.108995][ T30] audit: type=1802 audit(386.080:144): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.1.274" res=0 errno=0 [ 386.109022][ T30] audit: type=1802 audit(386.080:145): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.274" res=0 errno=0 [ 386.314859][ T5990] FAULT_INJECTION: forcing a failure. [ 386.314859][ T5990] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 386.314878][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT [ 386.314889][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 386.314894][ T5990] Call trace: [ 386.314897][ T5990] show_stack+0x2c/0x3c (C) [ 386.314914][ T5990] __dump_stack+0x30/0x40 [ 386.314927][ T5990] dump_stack_lvl+0xd8/0x12c [ 386.314938][ T5990] dump_stack+0x1c/0x28 [ 386.314949][ T5990] should_fail_ex+0x418/0x58c [ 386.314962][ T5990] should_fail_alloc_page+0xec/0x10c [ 386.314976][ T5990] prepare_alloc_pages+0x194/0x484 [ 386.314985][ T5990] __alloc_frozen_pages_noprof+0x180/0x578 [ 386.314993][ T5990] alloc_pages_mpol+0x1fc/0x3d0 [ 386.315003][ T5990] alloc_frozen_pages_noprof+0xc4/0x10c [ 386.315013][ T5990] alloc_pages_noprof+0x30/0x148 [ 386.315022][ T5990] alloc_skb_with_frags+0x244/0x690 [ 386.315031][ T5990] sock_alloc_send_pskb+0x740/0x850 [ 386.315041][ T5990] tun_get_user+0x6dc/0x36d0 [ 386.315051][ T5990] tun_chr_write_iter+0xfc/0x168 [ 386.315060][ T5990] vfs_write+0x51c/0xa0c [ 386.315073][ T5990] ksys_write+0x12c/0x228 [ 386.315085][ T5990] __arm64_sys_write+0x84/0x98 [ 386.315097][ T5990] invoke_syscall+0x98/0x244 [ 386.315109][ T5990] el0_svc_common+0xec/0x23c [ 386.315120][ T5990] do_el0_svc+0x4c/0x5c [ 386.315132][ T5990] el0_svc+0x60/0x1d8 [ 386.315144][ T5990] el0t_64_sync_handler+0x44/0x104 [ 386.315155][ T5990] el0t_64_sync+0x198/0x19c [ 386.315852][ T5990] loop1: detected capacity change from 0 to 8 [ 386.346422][ T5990] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 386.346434][ T5990] unable to read xattr id index table [ 386.347065][ T5990] squashfs image failed sanity check [ 386.486448][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.545749][ T6009] input: syz1 as /devices/virtual/input/input7 [ 386.689686][ T6013] loop2: detected capacity change from 0 to 512 [ 386.730485][ T6013] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 386.743218][ T6013] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.281: bg 0: block 104: invalid block bitmap [ 386.743254][ T6013] loop2: lost filesystem error report for type 5 error -117 [ 386.747109][ T6013] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 386.747128][ T6013] loop2: lost filesystem error report for type 5 error -117 [ 386.756563][ T6013] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.281: invalid indirect mapped block 1 (level 1) [ 386.756586][ T6013] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 386.758558][ T6013] EXT4-fs (loop2): 1 truncate cleaned up [ 386.759483][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.905896][ T6023] loop1: detected capacity change from 0 to 1024 [ 386.928805][ T6023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.016707][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.105045][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.342199][ T6037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.288'. [ 387.346818][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 387.432464][ T6039] netlink: 56 bytes leftover after parsing attributes in process `syz.3.290'. [ 387.503845][ T6044] fuse: Bad value for 'fd' [ 387.571135][ T6043] bpf: Bad value for 'gid' [ 387.826595][ T6062] loop4: detected capacity change from 0 to 512 [ 387.910175][ T6062] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 387.910191][ T6062] FAT-fs (loop4): Filesystem has been set read-only [ 387.910400][ T6062] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 387.923345][ T6062] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 387.999376][ T6062] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 388.004160][ T6062] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 388.005930][ T6064] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 388.008922][ T6062] FAT-fs (loop4): error, clusters badly computed (1 != 2) [ 388.044788][ T6062] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 388.044971][ T6062] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 388.045041][ T6062] FAT-fs (loop4): error, clusters badly computed (1 != 3) [ 388.081569][ T6062] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 388.081855][ T6062] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 388.374822][ T6068] fuse: fd is not a fuse device [ 388.457587][ T6072] loop1: detected capacity change from 0 to 256 [ 388.564829][ T6076] tipc: New replicast peer: 172.20.20.187 [ 388.565118][ T6076] tipc: Enabled bearer , priority 10 [ 388.618853][ T6082] capability: warning: `syz.3.301' uses 32-bit capabilities (legacy support in use) [ 388.641760][ T6084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'. [ 388.641774][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.302'. [ 388.641782][ T6084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.302'. [ 388.795906][ T6094] netlink: 'syz.0.305': attribute type 2 has an invalid length. [ 388.811848][ T6098] netlink: 1 bytes leftover after parsing attributes in process `syz.1.307'. [ 388.811870][ T6098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.857248][ T6084] FAULT_INJECTION: forcing a failure. [ 388.857248][ T6084] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 388.857276][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT [ 388.857289][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 388.857296][ T6084] Call trace: [ 388.857300][ T6084] show_stack+0x2c/0x3c (C) [ 388.857319][ T6084] __dump_stack+0x30/0x40 [ 388.857332][ T6084] dump_stack_lvl+0xd8/0x12c [ 388.857344][ T6084] dump_stack+0x1c/0x28 [ 388.857355][ T6084] should_fail_ex+0x418/0x58c [ 388.857368][ T6084] should_fail+0x14/0x24 [ 388.857379][ T6084] should_fail_usercopy+0x20/0x30 [ 388.857391][ T6084] _inline_copy_from_user+0x3c/0x174 [ 388.857402][ T6084] restore_altstack+0xa4/0x1b8 [ 388.857412][ T6084] __arm64_sys_rt_sigreturn+0x14c8/0x27d0 [ 388.857424][ T6084] invoke_syscall+0x98/0x244 [ 388.857436][ T6084] el0_svc_common+0xec/0x23c [ 388.857447][ T6084] do_el0_svc+0x4c/0x5c [ 388.857458][ T6084] el0_svc+0x60/0x1d8 [ 388.857471][ T6084] el0t_64_sync_handler+0x44/0x104 [ 388.857482][ T6084] el0t_64_sync+0x198/0x19c [ 388.870095][ T6101] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 388.898009][ T6101] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 388.905448][ T6104] loop3: detected capacity change from 0 to 512 [ 389.028412][ T6111] loop1: detected capacity change from 0 to 1024 [ 389.278441][ T6113] EXT4-fs: Ignoring removed i_version option [ 389.281693][ T6113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.345360][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.655468][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.761453][ T6113] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.943275][ T6111] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 389.943936][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 389.958089][ T6111] EXT4-fs: Ignoring sb option on remount [ 389.958158][ T6111] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 389.972637][ T6111] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 389.972801][ T6111] System zones: 0-1, 3-12 [ 389.972824][ T6111] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 389.985825][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.002090][ T6131] netlink: 56 bytes leftover after parsing attributes in process `syz.2.316'. [ 390.013785][ T6129] set_capacity_and_notify: 1 callbacks suppressed [ 390.013795][ T6129] loop3: detected capacity change from 0 to 512 [ 390.251692][ T4889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.449786][ T6156] loop2: detected capacity change from 0 to 2048 [ 390.476051][ T6156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.576616][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.632666][ T6159] loop2: detected capacity change from 0 to 512 [ 390.848545][ T6163] loop2: detected capacity change from 0 to 512 [ 390.851494][ T6163] EXT4-fs: Ignoring removed i_version option [ 390.924253][ T6163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.981295][ T6163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.508012][ T6163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.540397][ T6169] loop1: detected capacity change from 0 to 512 [ 391.549625][ T6169] ext4: Unknown parameter 'fsname' [ 391.615557][ T6171] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 391.632979][ T6173] loop1: detected capacity change from 0 to 1024 [ 391.640049][ T6171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.659078][ T6171] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 391.664705][ T6173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 391.665203][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 391.785536][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.790285][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.790334][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.794679][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.819381][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.871707][ T6206] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 391.873818][ T6206] bond2 (unregistering): Released all slaves [ 391.898857][ T6214] loop3: detected capacity change from 0 to 512 [ 391.989247][ T6222] loop1: detected capacity change from 0 to 2048 [ 392.013822][ T6222] loop1: p1 < > p2 p3 < > p4 < p5 > [ 392.013834][ T6222] loop1: partition table partially beyond EOD, truncated [ 392.013911][ T6222] loop1: p1 start 3405774849 is beyond EOD, truncated [ 392.014373][ T6222] loop1: p3 start 4225 is beyond EOD, truncated [ 392.095982][ T6229] loop3: detected capacity change from 0 to 512 [ 392.098035][ T6229] EXT4-fs: Ignoring removed i_version option [ 392.108677][ T6229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.201670][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.810431][ T6234] netlink: 'syz.4.347': attribute type 3 has an invalid length. [ 392.826546][ T6235] netlink: 'syz.4.347': attribute type 3 has an invalid length. [ 392.927599][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.962647][ T6242] loop2: detected capacity change from 0 to 128 [ 392.968502][ T6242] Invalid source name [ 392.968512][ T6242] UBIFS error (pid: 6242): cannot open "/dev/loop2", error -22 [ 392.997062][ T6251] cgroup: none used incorrectly [ 393.083745][ T6265] FAULT_INJECTION: forcing a failure. [ 393.083745][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 393.083763][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT [ 393.083773][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 393.083778][ T6265] Call trace: [ 393.083781][ T6265] show_stack+0x2c/0x3c (C) [ 393.083799][ T6265] __dump_stack+0x30/0x40 [ 393.083811][ T6265] dump_stack_lvl+0xd8/0x12c [ 393.083822][ T6265] dump_stack+0x1c/0x28 [ 393.083834][ T6265] should_fail_ex+0x418/0x58c [ 393.083846][ T6265] should_failslab+0xc4/0x120 [ 393.083860][ T6265] __kmalloc_noprof+0x108/0x6c8 [ 393.083868][ T6265] security_prepare_creds+0x60/0x35c [ 393.083880][ T6265] prepare_creds+0x500/0x7d0 [ 393.083892][ T6265] cap_task_prctl+0x304/0x8a8 [ 393.083904][ T6265] security_task_prctl+0xe8/0x17c [ 393.083915][ T6265] __arm64_sys_prctl+0x13c/0x13d0 [ 393.083927][ T6265] invoke_syscall+0x98/0x244 [ 393.083939][ T6265] el0_svc_common+0xec/0x23c [ 393.083950][ T6265] do_el0_svc+0x4c/0x5c [ 393.083961][ T6265] el0_svc+0x60/0x1d8 [ 393.083973][ T6265] el0t_64_sync_handler+0x44/0x104 [ 393.083985][ T6265] el0t_64_sync+0x198/0x19c [ 393.163778][ T6270] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 393.175632][ T6270] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.179928][ T6266] __nla_validate_parse: 6 callbacks suppressed [ 393.179940][ T6266] netlink: 80 bytes leftover after parsing attributes in process `syz.0.358'. [ 393.278618][ T6280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.286872][ T6280] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.363: bad orphan inode 32 [ 393.286898][ T6280] loop1: lost filesystem error report for type 5 error -117 [ 393.287097][ T6280] ext4_test_bit(bit=31, block=4) = 0 [ 393.287106][ T6280] EXT4-fs (loop1): 1 truncate cleaned up [ 393.287563][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.394565][ T6284] EXT4-fs: Ignoring removed i_version option [ 393.545519][ T6284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.552027][ T6117] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 393.583419][ T6284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.217048][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 394.243180][ T6305] EXT4-fs: Ignoring removed oldalloc option [ 394.244957][ T6305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 394.245131][ T6304] netlink: 'syz.3.370': attribute type 3 has an invalid length. [ 394.254331][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 394.269106][ T6297] vlan2: entered allmulticast mode [ 394.269119][ T6297] bridge1: entered allmulticast mode [ 394.275858][ T6297] bridge1: port 1(erspan0) entered blocking state [ 394.275947][ T6297] bridge1: port 1(erspan0) entered disabled state [ 394.276013][ T6297] erspan0: entered allmulticast mode [ 394.276526][ T6297] erspan0: entered promiscuous mode [ 394.276873][ T6297] bridge1: port 1(erspan0) entered blocking state [ 394.276902][ T6297] bridge1: port 1(erspan0) entered forwarding state [ 394.293050][ T6305] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.365: Abort forced by user [ 394.293586][ T6305] EXT4-fs (loop1): Remounting filesystem read-only [ 394.293597][ T6305] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 394.307924][ T6314] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 394.738325][ T4841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.751760][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 394.751824][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 395.279671][ T6359] FAULT_INJECTION: forcing a failure. [ 395.279671][ T6359] name failslab, interval 1, probability 0, space 0, times 0 [ 395.279692][ T6359] CPU: 0 UID: 0 PID: 6359 Comm: syz.3.379 Tainted: G L syzkaller #0 PREEMPT [ 395.279704][ T6359] Tainted: [L]=SOFTLOCKUP [ 395.279708][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 395.279713][ T6359] Call trace: [ 395.279716][ T6359] show_stack+0x2c/0x3c (C) [ 395.279735][ T6359] __dump_stack+0x30/0x40 [ 395.279748][ T6359] dump_stack_lvl+0xd8/0x12c [ 395.279760][ T6359] dump_stack+0x1c/0x28 [ 395.279771][ T6359] should_fail_ex+0x418/0x58c [ 395.279784][ T6359] should_failslab+0xc4/0x120 [ 395.279797][ T6359] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 395.279806][ T6359] shmem_alloc_inode+0x2c/0x48 [ 395.279821][ T6359] alloc_inode+0x68/0x198 [ 395.279832][ T6359] new_inode+0x20/0x50 [ 395.279842][ T6359] shmem_get_inode+0xac/0x788 [ 395.279854][ T6359] shmem_mknod+0x140/0x2f8 [ 395.279862][ T6359] shmem_create+0x40/0x54 [ 395.279869][ T6359] lookup_open+0xafc/0x1180 [ 395.279879][ T6359] path_openat+0x50c/0x18f0 [ 395.279889][ T6359] do_file_open+0x1c8/0x2e8 [ 395.279899][ T6359] do_sys_openat2+0x114/0x1e8 [ 395.279911][ T6359] do_sys_open+0xb0/0xe0 [ 395.279921][ T6359] __arm64_sys_openat+0xa8/0xc4 [ 395.279933][ T6359] invoke_syscall+0x98/0x244 [ 395.279949][ T6359] el0_svc_common+0xec/0x23c [ 395.279960][ T6359] do_el0_svc+0x4c/0x5c [ 395.279971][ T6359] el0_svc+0x60/0x1d8 [ 395.279984][ T6359] el0t_64_sync_handler+0x44/0x104 [ 395.279995][ T6359] el0t_64_sync+0x198/0x19c [ 395.348569][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 395.353320][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 395.371933][ T6288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.382387][ T6288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.431843][ T6379] FAULT_INJECTION: forcing a failure. [ 395.431843][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 395.431861][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.3.381 Tainted: G L syzkaller #0 PREEMPT [ 395.431873][ T6379] Tainted: [L]=SOFTLOCKUP [ 395.431877][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 395.431882][ T6379] Call trace: [ 395.431884][ T6379] show_stack+0x2c/0x3c (C) [ 395.431900][ T6379] __dump_stack+0x30/0x40 [ 395.431911][ T6379] dump_stack_lvl+0xd8/0x12c [ 395.431922][ T6379] dump_stack+0x1c/0x28 [ 395.431933][ T6379] should_fail_ex+0x418/0x58c [ 395.431945][ T6379] should_failslab+0xc4/0x120 [ 395.431957][ T6379] __kmalloc_cache_noprof+0x94/0x5fc [ 395.431966][ T6379] event_filter_read+0xa4/0x2c8 [ 395.431976][ T6379] vfs_read+0x230/0x8c8 [ 395.431988][ T6379] ksys_read+0x12c/0x228 [ 395.431999][ T6379] __arm64_sys_read+0x84/0x98 [ 395.432011][ T6379] invoke_syscall+0x98/0x244 [ 395.432023][ T6379] el0_svc_common+0x19c/0x23c [ 395.432034][ T6379] do_el0_svc+0x4c/0x5c [ 395.432045][ T6379] el0_svc+0x60/0x1d8 [ 395.432056][ T6379] el0t_64_sync_handler+0x44/0x104 [ 395.432067][ T6379] el0t_64_sync+0x198/0x19c [ 395.510762][ T30] audit: type=1326 audit(395.480:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.1.372" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b798a8 code=0x7fc00000 [ 395.582983][ T6392] FAULT_INJECTION: forcing a failure. [ 395.582983][ T6392] name fail_futex, interval 1, probability 0, space 0, times 1 [ 395.583003][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.3.386 Tainted: G L syzkaller #0 PREEMPT [ 395.583015][ T6392] Tainted: [L]=SOFTLOCKUP [ 395.583019][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 395.583024][ T6392] Call trace: [ 395.583026][ T6392] show_stack+0x2c/0x3c (C) [ 395.583042][ T6392] __dump_stack+0x30/0x40 [ 395.583053][ T6392] dump_stack_lvl+0xd8/0x12c [ 395.583065][ T6392] dump_stack+0x1c/0x28 [ 395.583076][ T6392] should_fail_ex+0x418/0x58c [ 395.583088][ T6392] should_fail+0x14/0x24 [ 395.583099][ T6392] get_futex_key+0x1ec/0x12b0 [ 395.583109][ T6392] futex_wait_setup+0x58/0x674 [ 395.583121][ T6392] __futex_wait+0x108/0x25c [ 395.583132][ T6392] futex_wait+0x108/0x2c0 [ 395.583143][ T6392] do_futex+0x320/0x378 [ 395.583153][ T6392] __arm64_sys_futex+0x2e4/0x418 [ 395.583163][ T6392] invoke_syscall+0x98/0x244 [ 395.583175][ T6392] el0_svc_common+0xec/0x23c [ 395.583186][ T6392] do_el0_svc+0x4c/0x5c [ 395.583198][ T6392] el0_svc+0x60/0x1d8 [ 395.583209][ T6392] el0t_64_sync_handler+0x44/0x104 [ 395.583220][ T6392] el0t_64_sync+0x198/0x19c [ 395.672352][ T6399] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 395.699539][ T6404] set_capacity_and_notify: 5 callbacks suppressed [ 395.699549][ T6404] loop2: detected capacity change from 0 to 256 [ 395.955288][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 395.955303][ T6405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.391'. [ 396.050469][ T6420] overlayfs: failed to clone upperpath [ 396.054821][ T6420] overlayfs: failed to clone lowerpath [ 396.076493][ T30] audit: type=1326 audit(396.050:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.076547][ T30] audit: type=1326 audit(396.050:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.076750][ T30] audit: type=1326 audit(396.050:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.076807][ T30] audit: type=1326 audit(396.050:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.076870][ T30] audit: type=1326 audit(396.050:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.076993][ T30] audit: type=1326 audit(396.050:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.077061][ T30] audit: type=1326 audit(396.050:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.077156][ T30] audit: type=1326 audit(396.050:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.077208][ T30] audit: type=1326 audit(396.050:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 396.594236][ T6436] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 396.594388][ T6436] netlink: 10 bytes leftover after parsing attributes in process `syz.2.401'. [ 396.627986][ T6440] 9p: Bad value for 'rfdno' [ 396.628248][ T6440] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 396.635551][ T6441] loop3: detected capacity change from 0 to 512 [ 396.713356][ T6443] 9pnet_virtio: no channels available for device 127.0.0.1 [ 396.835864][ T6447] loop3: detected capacity change from 0 to 512 [ 396.837893][ T6447] EXT4-fs: Ignoring removed i_version option [ 396.874597][ T6447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 397.714639][ T6459] ip_tables: iptables: counters copy to user failed while replacing table [ 397.726131][ T6461] overlayfs: failed to resolve './file1/file0': -2 [ 397.753428][ T6471] netlink: 'syz.4.413': attribute type 11 has an invalid length. [ 397.762972][ T6477] xt_cgroup: invalid path, errno=-2 [ 397.805770][ T6477] loop2: detected capacity change from 0 to 1024 [ 397.815826][ T6477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.878486][ T6477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 397.878528][ T6477] System zones: 0-1, 3-12 [ 397.920375][ T6500] loop1: detected capacity change from 0 to 512 [ 398.806250][ T6506] loop2: detected capacity change from 0 to 512 [ 398.809300][ T6506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 398.829731][ T6506] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.423: invalid indirect mapped block 4294967295 (level 0) [ 398.829753][ T6506] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 398.830940][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 398.830955][ C1] EXT4-fs (loop2): initial error at time 398: ext4_free_branches:1023: inode 16 [ 398.830971][ C1] EXT4-fs (loop2): last error at time 398: ext4_free_branches:1023: inode 16 [ 398.835182][ T6506] EXT4-fs (loop2): Remounting filesystem read-only [ 398.835726][ T6506] EXT4-fs (loop2): 1 orphan inode deleted [ 398.835739][ T6506] EXT4-fs (loop2): 1 truncate cleaned up [ 398.836140][ T6506] EXT4-fs mount: 8 callbacks suppressed [ 398.836147][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.219081][ T6519] loop3: detected capacity change from 0 to 256 [ 399.219427][ T6519] vfat: Unknown parameter 'utf8lush' [ 399.223643][ T6519] __nla_validate_parse: 2 callbacks suppressed [ 399.223653][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 399.261035][ T6533] loop1: detected capacity change from 0 to 512 [ 399.263782][ T6533] EXT4-fs (loop1): Test dummy encryption mode enabled [ 399.285787][ T6533] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.428: EA inode 11 has unexpected i_nlink=2 ref_count=1 [ 399.285806][ T6533] loop1: lost filesystem error report for type 5 error -117 [ 399.286246][ T6533] EXT4-fs (loop1): 1 orphan inode deleted [ 399.286736][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.389035][ T6540] mmap: syz.4.430 (6540): VmData 175906816 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 399.400038][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.571641][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 399.576460][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.589125][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.615507][ T6572] loop1: detected capacity change from 0 to 512 [ 400.684383][ T6288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.684694][ T6288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.781812][ T6581] loop1: detected capacity change from 0 to 512 [ 400.782180][ T6581] EXT4-fs: Ignoring removed i_version option [ 400.900523][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.918773][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.969738][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 400.969749][ T30] audit: type=1326 audit(400.940:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.969831][ T30] audit: type=1326 audit(400.940:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.970824][ T30] audit: type=1326 audit(400.940:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.970839][ T30] audit: type=1326 audit(400.940:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.970853][ T30] audit: type=1326 audit(400.940:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.995166][ T30] audit: type=1326 audit(400.970:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.995323][ T30] audit: type=1326 audit(400.970:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.995401][ T30] audit: type=1326 audit(400.970:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.995517][ T30] audit: type=1326 audit(400.970:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 400.995591][ T30] audit: type=1326 audit(400.970:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.4.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x7ffc0000 [ 401.031565][ T6581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.047813][ T6599] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 401.059929][ T6599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.066478][ T6599] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 401.093433][ T6599] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.106234][ T6605] loop1: detected capacity change from 0 to 1024 [ 401.124766][ T6605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 401.125432][ T6606] loop2: detected capacity change from 0 to 4096 [ 401.129408][ T6605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 401.133150][ T4841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.144406][ T6605] EXT4-fs: Ignoring sb option on remount [ 401.144460][ T6605] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 401.144947][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.164479][ T6606] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.448: Failed to acquire dquot type 1 [ 401.173807][ T6605] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 401.173853][ T6605] System zones: 0-1, 3-12 [ 401.173879][ T6605] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 401.203424][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.257694][ T6622] loop1: detected capacity change from 0 to 512 [ 401.258845][ T6622] EXT4-fs: user quota file already specified [ 401.288505][ T6626] loop3: detected capacity change from 0 to 512 [ 401.293075][ T6622] loop1: detected capacity change from 0 to 512 [ 401.307655][ T6626] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 401.307754][ T6626] EXT4-fs (loop3): orphan cleanup on readonly fs [ 401.308022][ T6626] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 401.317477][ T6622] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 401.317614][ T6622] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.451: corrupted in-inode xattr: e_value size too large [ 401.317631][ T6622] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 401.317904][ T6622] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.451: couldn't read orphan inode 15 (err -117) [ 401.317918][ T6622] loop1: lost filesystem error report for type 5 error -117 [ 401.318778][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.319648][ T6626] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 401.333310][ T6626] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.452: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 401.333338][ T6626] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 401.334406][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.452: couldn't read orphan inode 13 (err -117) [ 401.334430][ T6626] loop3: lost filesystem error report for type 5 error -117 [ 401.335449][ T6626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.427112][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.456996][ T4399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.592406][ T6641] EXT4-fs error (device loop3): ext4_lookup:1787: comm syz.3.452: inode #15: comm syz.3.452: iget: illegal inode # [ 401.727882][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.728710][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.742332][ T6644] netlink: 'syz.4.454': attribute type 16 has an invalid length. [ 401.742346][ T6644] netlink: 'syz.4.454': attribute type 17 has an invalid length. [ 401.755088][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.755124][ T6644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.756131][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.756153][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.760749][ T6642] loop1: detected capacity change from 0 to 4096 [ 401.772584][ T6642] EXT4-fs: Ignoring removed orlov option [ 401.795998][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.800101][ T6644] netlink: 'syz.4.454': attribute type 16 has an invalid length. [ 401.800116][ T6644] netlink: 'syz.4.454': attribute type 17 has an invalid length. [ 401.800679][ T6642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.819511][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.1.453'. [ 401.828176][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.828501][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 401.828517][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'. [ 401.830730][ T6644] netlink: 'syz.4.454': attribute type 16 has an invalid length. [ 401.830742][ T6644] netlink: 'syz.4.454': attribute type 17 has an invalid length. [ 401.852331][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.869470][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.871336][ T6644] netlink: 'syz.4.454': attribute type 16 has an invalid length. [ 401.871350][ T6644] netlink: 'syz.4.454': attribute type 17 has an invalid length. [ 401.906688][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.907136][ T6644] netlink: 'syz.4.454': attribute type 16 has an invalid length. [ 401.922413][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.935835][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.949534][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.965843][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 401.987665][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 402.741249][ T4757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.767534][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.787399][ T6644] net_ratelimit: 1 callbacks suppressed [ 402.787409][ T6644] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 402.837507][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 402.843473][ T6664] loop2: detected capacity change from 0 to 1024 [ 402.849498][ T6664] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 402.849498][ T6664] [ 403.010098][ T6676] fuse: fd is not a fuse device [ 403.015048][ T6678] syzkaller1: entered promiscuous mode [ 403.015062][ T6678] syzkaller1: entered allmulticast mode [ 403.016465][ T6678] loop2: detected capacity change from 0 to 8 [ 403.018589][ T6678] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 403.018600][ T6678] unable to read xattr id index table [ 403.030311][ T6678] SQUASHFS error: zlib decompression failed, data probably corrupt [ 403.030331][ T6678] SQUASHFS error: Failed to read block 0x9b: -5 [ 403.030341][ T6678] SQUASHFS error: Unable to read metadata cache entry [99] [ 403.030349][ T6678] SQUASHFS error: Unable to read inode 0x127 [ 403.034988][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 403.037469][ T6674] FAULT_INJECTION: forcing a failure. [ 403.037469][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 403.037493][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.3.458 Tainted: G L syzkaller #0 PREEMPT [ 403.037505][ T6674] Tainted: [L]=SOFTLOCKUP [ 403.037508][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 403.037513][ T6674] Call trace: [ 403.037516][ T6674] show_stack+0x2c/0x3c (C) [ 403.037533][ T6674] __dump_stack+0x30/0x40 [ 403.037546][ T6674] dump_stack_lvl+0xd8/0x12c [ 403.037556][ T6674] dump_stack+0x1c/0x28 [ 403.037565][ T6674] should_fail_ex+0x418/0x58c [ 403.037576][ T6674] should_failslab+0xc4/0x120 [ 403.037586][ T6674] __kmalloc_cache_node_noprof+0x98/0x618 [ 403.037595][ T6674] __get_vm_area_node+0x188/0x32c [ 403.037603][ T6674] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 403.037612][ T6674] __vmalloc_node_noprof+0xec/0x14c [ 403.037619][ T6674] vzalloc_noprof+0x3c/0x4c [ 403.037627][ T6674] xt_counters_alloc+0x50/0x60 [ 403.037637][ T6674] __do_replace+0xa4/0x8f4 [ 403.037647][ T6674] do_ipt_set_ctl+0x980/0xc38 [ 403.037656][ T6674] nf_setsockopt+0xa0/0xe4 [ 403.037664][ T6674] ip_setsockopt+0x118/0x128 [ 403.037673][ T6674] sock_common_setsockopt+0xb0/0xcc [ 403.037683][ T6674] do_sock_setsockopt+0x1f0/0x330 [ 403.037692][ T6674] __sys_setsockopt+0x104/0x170 [ 403.037700][ T6674] __arm64_sys_setsockopt+0xc8/0xe4 [ 403.037709][ T6674] invoke_syscall+0x98/0x244 [ 403.037719][ T6674] el0_svc_common+0xec/0x23c [ 403.037729][ T6674] do_el0_svc+0x4c/0x5c [ 403.037738][ T6674] el0_svc+0x60/0x1d8 [ 403.037748][ T6674] el0t_64_sync_handler+0x44/0x104 [ 403.037757][ T6674] el0t_64_sync+0x198/0x19c [ 403.037801][ T6674] syz.3.458: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 403.038027][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.3.458 Tainted: G L syzkaller #0 PREEMPT [ 403.038036][ T6674] Tainted: [L]=SOFTLOCKUP [ 403.038038][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 403.038047][ T6674] Call trace: [ 403.038049][ T6674] show_stack+0x2c/0x3c (C) [ 403.038064][ T6674] __dump_stack+0x30/0x40 [ 403.038075][ T6674] dump_stack_lvl+0xd8/0x12c [ 403.038085][ T6674] dump_stack+0x1c/0x28 [ 403.038094][ T6674] warn_alloc+0x1c4/0x1d8 [ 403.038101][ T6674] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 403.038110][ T6674] __vmalloc_node_noprof+0xec/0x14c [ 403.038118][ T6674] vzalloc_noprof+0x3c/0x4c [ 403.038126][ T6674] xt_counters_alloc+0x50/0x60 [ 403.038135][ T6674] __do_replace+0xa4/0x8f4 [ 403.038144][ T6674] do_ipt_set_ctl+0x980/0xc38 [ 403.038153][ T6674] nf_setsockopt+0xa0/0xe4 [ 403.038160][ T6674] ip_setsockopt+0x118/0x128 [ 403.038169][ T6674] sock_common_setsockopt+0xb0/0xcc [ 403.038177][ T6674] do_sock_setsockopt+0x1f0/0x330 [ 403.038186][ T6674] __sys_setsockopt+0x104/0x170 [ 403.038195][ T6674] __arm64_sys_setsockopt+0xc8/0xe4 [ 403.038204][ T6674] invoke_syscall+0x98/0x244 [ 403.038214][ T6674] el0_svc_common+0xec/0x23c [ 403.038223][ T6674] do_el0_svc+0x4c/0x5c [ 403.038232][ T6674] el0_svc+0x60/0x1d8 [ 403.038241][ T6674] el0t_64_sync_handler+0x44/0x104 [ 403.038251][ T6674] el0t_64_sync+0x198/0x19c [ 403.039485][ T6674] Mem-Info: [ 403.039498][ T6674] active_anon:47 inactive_anon:5100 isolated_anon:0 [ 403.039498][ T6674] active_file:3652 inactive_file:17030 isolated_file:0 [ 403.039498][ T6674] unevictable:768 dirty:357 writeback:0 [ 403.039498][ T6674] slab_reclaimable:9565 slab_unreclaimable:88842 [ 403.039498][ T6674] mapped:29479 shmem:969 pagetables:1051 [ 403.039498][ T6674] sec_pagetables:0 bounce:0 [ 403.039498][ T6674] kernel_misc_reclaimable:0 [ 403.039498][ T6674] free:1457913 free_pcp:21086 free_cma:7616 [ 403.039533][ T6674] Node 0 active_anon:188kB inactive_anon:20400kB active_file:14608kB inactive_file:68120kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117916kB dirty:1428kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9164kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 403.039555][ T6674] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 403.039581][ T6674] lowmem_reserve[]: 0 0 3652 3652 3652 [ 403.039601][ T6674] Node 0 Normal free:2753764kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:188kB inactive_anon:20400kB active_file:14608kB inactive_file:68120kB unevictable:3072kB writepending:1428kB zspages:0kB present:5242880kB managed:3739800kB mlocked:0kB bounce:0kB free_pcp:84344kB local_pcp:47456kB free_cma:0kB [ 403.039623][ T6674] lowmem_reserve[]: 0 0 0 0 0 [ 403.039638][ T6674] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 403.039693][ T6674] Node 0 Normal: 1403*4kB (UME) 305*8kB [ 403.039926][ T6675] netlink: 148 bytes leftover after parsing attributes in process `syz.3.458'. [ 403.041387][ T6674] (UME) 383*16kB (UME) 108*32kB (UME) 333*64kB (UME) 310*128kB (UME) 190*256kB (ME) 108*512kB (ME) 57*1024kB (M) 25*2048kB (UM) 601*4096kB (UM) = 2753828kB [ 403.041451][ T6674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.041458][ T6674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 403.041466][ T6674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 403.041473][ T6674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 403.041480][ T6674] 21599 total pagecache pages [ 403.041483][ T6674] 0 pages in swap cache [ 403.041486][ T6674] Free swap = 124996kB [ 403.041490][ T6674] Total swap = 124996kB [ 403.041493][ T6674] 2097152 pages RAM [ 403.041496][ T6674] 0 pages HighMem/MovableOnly [ 403.041499][ T6674] 392154 pages reserved [ 403.041502][ T6674] 8192 pages cma reserved [ 403.041505][ T6674] 7 pages hwpoisoned [ 403.080135][ T6680] loop1: detected capacity change from 0 to 8 [ 403.080429][ T6680] squashfs: Bad value for 'errors' [ 403.827867][ T6718] netlink: 168 bytes leftover after parsing attributes in process `syz.4.479'. [ 403.829530][ T6718] 9p: Bad value for 'rfdno' [ 403.834896][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 404.293064][ T6735] loop1: p2 p3 < > p4 < p5 > [ 404.293079][ T6735] loop1: partition table partially beyond EOD, truncated [ 404.293637][ T6735] loop1: p3 start 4225 is beyond EOD, truncated [ 404.298065][ T6727] syz.1.483: attempt to access beyond end of device [ 404.298065][ T6727] loop1p4: rw=2048, sector=0, nr_sectors = 2 limit=1 [ 404.298094][ T6727] SQUASHFS error: Failed to read block 0x0: -5 [ 404.298112][ T6727] unable to read squashfs_super_block [ 404.329827][ T6733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 404.345303][ T6733] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.486: invalid indirect mapped block 4294967295 (level 0) [ 404.345330][ T6733] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 404.349562][ T6733] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.486: invalid indirect mapped block 4294967295 (level 1) [ 404.349586][ T6733] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 404.350959][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 404.350977][ C0] EXT4-fs (loop3): initial error at time 404: ext4_free_branches:1023: inode 16 [ 404.350994][ C0] EXT4-fs (loop3): last error at time 404: ext4_free_branches:1023: inode 16 [ 404.367990][ T6733] EXT4-fs (loop3): 1 orphan inode deleted [ 404.368005][ T6733] EXT4-fs (loop3): 1 truncate cleaned up [ 404.368030][ T6752] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 404.368479][ T6733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.424039][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.628687][ T6799] __nla_validate_parse: 1 callbacks suppressed [ 404.628702][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'. [ 404.629984][ T6799] Injecting memory failure for pfn 0x11d9ca at process virtual address 0x20000000 [ 404.634681][ T6799] Memory failure: 0x11d9ca: Sending SIGBUS to syz.4.497:6799 due to hardware memory corruption [ 404.634718][ T6799] Memory failure: 0x11d9ca: recovery action for dirty LRU page: Recovered [ 404.634740][ T6799] Injecting memory failure for pfn 0x2193df at process virtual address 0x20001000 [ 404.634829][ T6799] Memory failure: 0x2193df: Sending SIGBUS to syz.4.497:6799 due to hardware memory corruption [ 404.634849][ T6799] Memory failure: 0x2193df: recovery action for already poisoned page: Failed [ 404.659091][ T6806] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 404.664391][ T6806] overlayfs: failed to resolve './file0': -2 [ 404.763768][ T6815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.862775][ T6822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.506'. [ 404.879577][ T6824] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.884703][ T6824] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.961022][ T6827] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.504: corrupted inode contents [ 404.963691][ T6827] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #15: comm syz.2.504: mark_inode_dirty error [ 404.964719][ T6827] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.504: corrupted inode contents [ 404.965269][ T6827] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.504: mark_inode_dirty error [ 404.965823][ T6827] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.504: corrupted inode contents [ 404.966264][ T6827] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.504: mark_inode_dirty error [ 404.966882][ T6827] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.504: corrupted inode contents [ 404.968048][ T6827] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.504: mark_inode_dirty error [ 404.968955][ T6827] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 405.008086][ T6827] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.504: corrupted inode contents [ 405.132683][ T4779] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 405.158775][ T6831] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 405.158791][ T6831] FAT-fs (loop1): Filesystem has been set read-only [ 405.262517][ T6842] x_tables: duplicate underflow at hook 2 [ 405.383903][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.521'. [ 405.386350][ T6857] vlan2: entered promiscuous mode [ 405.386363][ T6857] gretap0: entered promiscuous mode [ 405.420108][ T6865] FAULT_INJECTION: forcing a failure. [ 405.420108][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 405.420127][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.3.524 Tainted: G L syzkaller #0 PREEMPT [ 405.420140][ T6865] Tainted: [L]=SOFTLOCKUP [ 405.420144][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 405.420148][ T6865] Call trace: [ 405.420151][ T6865] show_stack+0x2c/0x3c (C) [ 405.420168][ T6865] __dump_stack+0x30/0x40 [ 405.420179][ T6865] dump_stack_lvl+0xd8/0x12c [ 405.420189][ T6865] dump_stack+0x1c/0x28 [ 405.420198][ T6865] should_fail_ex+0x418/0x58c [ 405.420210][ T6865] should_failslab+0xc4/0x120 [ 405.420221][ T6865] kmem_cache_alloc_noprof+0x94/0x5d4 [ 405.420228][ T6865] do_getname+0x48/0x234 [ 405.420236][ T6865] getname_flags+0x2c/0x3c [ 405.420243][ T6865] do_sys_openat2+0xd0/0x1e8 [ 405.420253][ T6865] do_sys_open+0xb0/0xe0 [ 405.420262][ T6865] __arm64_sys_openat+0xa8/0xc4 [ 405.420271][ T6865] invoke_syscall+0x98/0x244 [ 405.420287][ T6865] el0_svc_common+0xec/0x23c [ 405.420296][ T6865] do_el0_svc+0x4c/0x5c [ 405.420306][ T6865] el0_svc+0x60/0x1d8 [ 405.420316][ T6865] el0t_64_sync_handler+0x44/0x104 [ 405.420326][ T6865] el0t_64_sync+0x198/0x19c [ 405.508840][ T6881] EXT4-fs: Ignoring removed i_version option [ 405.508854][ T6881] EXT4-fs: Ignoring removed nobh option [ 405.509628][ T6881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 405.515331][ T6881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 405.515412][ T6881] System zones: 1-12 [ 405.515496][ T6881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 405.516151][ T6881] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.529: corrupted in-inode xattr: overlapping e_value [ 405.516174][ T6881] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.516834][ T6881] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.529: couldn't read orphan inode 15 (err -117) [ 405.516856][ T6881] loop3: lost filesystem error report for type 5 error -117 [ 405.519832][ T6881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 405.547742][ T4757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.582028][ T6889] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 405.582045][ T6889] overlayfs: conflicting lowerdir path [ 405.608383][ T4755] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.610521][ T4755] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.614234][ T4755] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 405.622381][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.651211][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 405.746728][ T6915] FAULT_INJECTION: forcing a failure. [ 405.746728][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 405.746751][ T6915] CPU: 1 UID: 0 PID: 6915 Comm: syz.3.536 Tainted: G L syzkaller #0 PREEMPT [ 405.746766][ T6915] Tainted: [L]=SOFTLOCKUP [ 405.746770][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 405.746775][ T6915] Call trace: [ 405.746779][ T6915] show_stack+0x2c/0x3c (C) [ 405.746798][ T6915] __dump_stack+0x30/0x40 [ 405.746810][ T6915] dump_stack_lvl+0xd8/0x12c [ 405.746822][ T6915] dump_stack+0x1c/0x28 [ 405.746834][ T6915] should_fail_ex+0x418/0x58c [ 405.746847][ T6915] should_failslab+0xc4/0x120 [ 405.746860][ T6915] __kmalloc_cache_noprof+0x94/0x5fc [ 405.746870][ T6915] v4l2_m2m_ctx_init+0x64/0x268 [ 405.746883][ T6915] vicodec_open+0x588/0x9a0 [ 405.746895][ T6915] v4l2_open+0x198/0x338 [ 405.746904][ T6915] chrdev_open+0x398/0x3e8 [ 405.746916][ T6915] do_dentry_open+0x5c4/0xfbc [ 405.746927][ T6915] vfs_open+0x44/0x2dc [ 405.746938][ T6915] path_openat+0x1084/0x18f0 [ 405.746949][ T6915] do_file_open+0x1c8/0x2e8 [ 405.746961][ T6915] do_sys_openat2+0x114/0x1e8 [ 405.746972][ T6915] do_sys_open+0xb0/0xe0 [ 405.746984][ T6915] __arm64_sys_openat+0xa8/0xc4 [ 405.746995][ T6915] invoke_syscall+0x98/0x244 [ 405.747008][ T6915] el0_svc_common+0xec/0x23c [ 405.747027][ T6915] do_el0_svc+0x4c/0x5c [ 405.747038][ T6915] el0_svc+0x60/0x1d8 [ 405.747051][ T6915] el0t_64_sync_handler+0x44/0x104 [ 405.747063][ T6915] el0t_64_sync+0x198/0x19c [ 405.803339][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'. [ 405.804117][ T6921] set_capacity_and_notify: 7 callbacks suppressed [ 405.804127][ T6921] loop3: detected capacity change from 0 to 256 [ 405.804856][ T6921] vfat: Unknown parameter './file0' [ 405.816710][ T6923] netlink: 112 bytes leftover after parsing attributes in process `syz.3.537'. [ 406.200895][ T6967] overlayfs: failed to resolve './file0': -2 [ 406.664261][ T6988] loop3: detected capacity change from 0 to 512 [ 406.673156][ T6988] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 406.687600][ T6988] EXT4-fs (loop3): 1 truncate cleaned up [ 406.688167][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.163808][ T4757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.187136][ T7000] Cannot find del_set index 0 as target [ 407.192676][ T40] IPVS: starting estimator thread 0... [ 407.281152][ T7005] IPVS: using max 61 ests per chain, 146400 per kthread [ 407.282531][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 407.282542][ T30] audit: type=1326 audit(407.260:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.4.553" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1798a8 code=0x0 [ 407.299213][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 407.783318][ T30] audit: type=1326 audit(407.760:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.0.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7798a8 code=0x0 [ 408.272156][ T7030] loop2: detected capacity change from 0 to 1024 [ 408.277666][ T7030] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 408.286671][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.3.560'. [ 408.286911][ T7030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.308374][ T7030] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.558: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 408.309570][ T7030] EXT4-fs (loop2): Remounting filesystem read-only [ 408.337028][ T4755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.360729][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 408.377794][ T7037] ipvlan2: entered allmulticast mode [ 408.377810][ T7037] virt_wifi0: entered allmulticast mode [ 408.378579][ T7037] batman_adv: batadv0: Adding interface: ipvlan2 [ 408.378586][ T7037] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.378600][ T7037] batman_adv: batadv0: Interface activated: ipvlan2 [ 408.389201][ T7037] ipvlan3: entered allmulticast mode [ 408.389851][ T7037] batman_adv: batadv0: Adding interface: ipvlan3 [ 408.389860][ T7037] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.389874][ T7037] batman_adv: The newly added mac address (da:92:1a:55:84:03) already exists on: ipvlan2 [ 408.389882][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.389888][ T7037] batman_adv: batadv0: Interface activated: ipvlan3 [ 408.466281][ T7048] netlink: 112 bytes leftover after parsing attributes in process `syz.1.565'. [ 408.466330][ T7048] FAULT_INJECTION: forcing a failure. [ 408.466330][ T7048] name fail_futex, interval 1, probability 0, space 0, times 0 [ 408.466349][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.1.565 Tainted: G L syzkaller #0 PREEMPT [ 408.466363][ T7048] Tainted: [L]=SOFTLOCKUP [ 408.466366][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 408.466372][ T7048] Call trace: [ 408.466375][ T7048] show_stack+0x2c/0x3c (C) [ 408.466393][ T7048] __dump_stack+0x30/0x40 [ 408.466405][ T7048] dump_stack_lvl+0xd8/0x12c [ 408.466417][ T7048] dump_stack+0x1c/0x28 [ 408.466427][ T7048] should_fail_ex+0x418/0x58c [ 408.466440][ T7048] should_fail+0x14/0x24 [ 408.466451][ T7048] get_futex_key+0x1ec/0x12b0 [ 408.466462][ T7048] futex_wake+0x10c/0x594 [ 408.466473][ T7048] do_futex+0x2c4/0x378 [ 408.466483][ T7048] __arm64_sys_futex+0x2e4/0x418 [ 408.466493][ T7048] invoke_syscall+0x98/0x244 [ 408.466505][ T7048] el0_svc_common+0xec/0x23c [ 408.466516][ T7048] do_el0_svc+0x4c/0x5c [ 408.466527][ T7048] el0_svc+0x60/0x1d8 [ 408.466540][ T7048] el0t_64_sync_handler+0x44/0x104 [ 408.466551][ T7048] el0t_64_sync+0x198/0x19c [ 408.480498][ T7050] loop2: detected capacity change from 0 to 512 [ 408.482623][ T7050] ext4: Unknown parameter 'fscontext' [ 408.785738][ T7052] validate_nla: 14 callbacks suppressed [ 408.785752][ T7052] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 408.795515][ T7052] bond3: option mode: invalid value (7) [ 408.796523][ T7052] bond3 (unregistering): Released all slaves [ 408.813576][ T7063] loop1: detected capacity change from 0 to 512 [ 408.819565][ T7063] EXT4-fs (loop1): DAX unsupported by block device. [ 408.828482][ T7063] netlink: 'syz.1.570': attribute type 1 has an invalid length. [ 409.223012][ T7088] : renamed from virt_wifi0 [ 409.279482][ T7094] FAULT_INJECTION: forcing a failure. [ 409.279482][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 409.279500][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.3.579 Tainted: G L syzkaller #0 PREEMPT [ 409.279512][ T7094] Tainted: [L]=SOFTLOCKUP [ 409.279516][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 409.279521][ T7094] Call trace: [ 409.279523][ T7094] show_stack+0x2c/0x3c (C) [ 409.279542][ T7094] __dump_stack+0x30/0x40 [ 409.279554][ T7094] dump_stack_lvl+0xd8/0x12c [ 409.279565][ T7094] dump_stack+0x1c/0x28 [ 409.279576][ T7094] should_fail_ex+0x418/0x58c [ 409.279589][ T7094] should_failslab+0xc4/0x120 [ 409.279602][ T7094] kmem_cache_alloc_noprof+0x94/0x5d4 [ 409.279611][ T7094] alloc_empty_file+0x6c/0x1cc [ 409.279620][ T7094] path_openat+0x78/0x18f0 [ 409.279630][ T7094] do_file_open+0x1c8/0x2e8 [ 409.279640][ T7094] do_sys_openat2+0x114/0x1e8 [ 409.279651][ T7094] do_sys_open+0xb0/0xe0 [ 409.279662][ T7094] __arm64_sys_openat+0xa8/0xc4 [ 409.279673][ T7094] invoke_syscall+0x98/0x244 [ 409.279686][ T7094] el0_svc_common+0xec/0x23c [ 409.279697][ T7094] do_el0_svc+0x4c/0x5c [ 409.279708][ T7094] el0_svc+0x60/0x1d8 [ 409.279720][ T7094] el0t_64_sync_handler+0x44/0x104 [ 409.279731][ T7094] el0t_64_sync+0x198/0x19c [ 409.442401][ T7106] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4754] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7106] [ 409.509580][ T7100] loop3: detected capacity change from 0 to 128 [ 409.509921][ T7100] vfat: Unknown parameter 'fsmagic' [ 409.568366][ T7108] overlayfs: failed to clone upperpath [ 409.623754][ T7114] overlay: Unknown parameter 'subj_role' [ 409.653968][ T7117] netlink: 'syz.2.584': attribute type 8 has an invalid length. [ 409.653981][ T7117] __nla_validate_parse: 6 callbacks suppressed [ 409.653987][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 409.653999][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 410.135527][ T7151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.587'. [ 410.162373][ T7151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.587'. [ 410.227420][ T7167] loop1: detected capacity change from 0 to 2048 [ 410.299761][ T7167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.312536][ T7171] netlink: 200 bytes leftover after parsing attributes in process `syz.4.592'. [ 410.312555][ T7171] netlink: 'syz.4.592': attribute type 3 has an invalid length. [ 410.312565][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 410.342590][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.618006][ T7178] loop1: detected capacity change from 0 to 2048 [ 410.620827][ T7178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.643793][ T7178] EXT4-fs error (device loop1): __ext4_iget:5592: inode #2: block 127754: comm syz.1.593: invalid block [ 410.643820][ T7178] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 410.644054][ T7178] EXT4-fs (loop1): get root inode failed [ 410.644062][ T7178] EXT4-fs (loop1): mount failed [ 411.082948][ T7186] loop1: detected capacity change from 0 to 512 [ 411.083313][ T7186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.113980][ T7186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 411.113993][ T7186] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 411.127731][ T7186] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.593: Allocating blocks 41-42 which overlap fs metadata [ 411.127750][ T7186] loop1: lost filesystem error report for type 5 error -117 [ 411.128756][ T7186] EXT4-fs (loop1): Remounting filesystem read-only [ 411.128819][ T7186] Quota error (device loop1): write_blk: dquota write failed [ 411.128827][ T7186] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 411.128899][ T7186] Quota error (device loop1): write_blk: dquota write failed [ 411.128929][ T7186] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 411.129034][ T7186] EXT4-fs (loop1): 1 truncate cleaned up [ 411.129481][ T7186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.153409][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 411.176915][ T7193] loop2: detected capacity change from 0 to 256 [ 411.184181][ T30] audit: type=1807 audit(411.160:421): action=measure uid>+ res=0 [ 411.184392][ T30] audit: type=1802 audit(411.160:422): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.597" res=0 errno=0 [ 411.188541][ T7190] ima: policy update failed [ 411.188805][ T30] audit: type=1802 audit(411.160:423): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.597" res=0 errno=0 [ 411.239731][ T7088] Set syz1 is full, maxelem 65536 reached [ 411.242902][ T7193] ------------[ cut here ]------------ [ 411.242909][ T7193] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x194/0x1b4, CPU#1: syz.2.596/7193 [ 411.245795][ T7193] Modules linked in: [ 411.246507][ T7193] CPU: 1 UID: 0 PID: 7193 Comm: syz.2.596 Tainted: G L syzkaller #0 PREEMPT [ 411.248382][ T7193] Tainted: [L]=SOFTLOCKUP [ 411.249143][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 411.250965][ T7193] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 411.252423][ T7193] pc : virtio_dev_remove+0x194/0x1b4 [ 411.253391][ T7193] lr : virtio_dev_remove+0x194/0x1b4 [ 411.254341][ T7193] sp : ffff800093bf74c0 [ 411.255082][ T7193] x29: ffff800093bf74c0 x28: 1fffe00018a1fe1b x27: 1fffe00018a1fe1a [ 411.256567][ T7193] x26: ffff0000c50ff0d0 x25: 1fffe00018a1fe1d x24: ffff8000891e2740 [ 411.258064][ T7193] x23: 1fffe00018a1fead x22: ffff0000c50ff568 x21: dfff800000000000 [ 411.259512][ T7193] x20: 00000000000000ff x19: ffff0000c50ff088 x18: 00000000ffffffff [ 411.260991][ T7193] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800080c8c6e0 [ 411.262500][ T7193] x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000003 [ 411.263992][ T7193] x11: ffff80008a529e28 x10: 0000000000080000 x9 : 0000000000019ed8 [ 411.265439][ T7193] x8 : ffff80009c75e000 x7 : 0000000000000000 x6 : ffff80008016662c [ 411.266893][ T7193] x5 : ffff0000f2edccb8 x4 : 0000000000000008 x3 : ffff800081fbd3ac [ 411.268354][ T7193] x2 : 00000000000000ff x1 : ffff0000ce65bb00 x0 : 0000000000000001 [ 411.269848][ T7193] Call trace: [ 411.270442][ T7193] virtio_dev_remove+0x194/0x1b4 (P) [ 411.271419][ T7193] device_remove+0xc4/0x134 [ 411.272246][ T7193] device_release_driver_internal+0x124/0x20c [ 411.273354][ T7193] device_release_driver+0x28/0x38 [ 411.274321][ T7193] bus_remove_device+0x2d0/0x400 [ 411.275245][ T7193] device_del+0x3ec/0x71c [ 411.276057][ T7193] device_unregister+0x2c/0xf0 [ 411.276955][ T7193] unregister_virtio_device+0x38/0x74 [ 411.277967][ T7193] virtio_pci_remove+0x7c/0xf4 [ 411.278878][ T7193] pci_device_remove+0x9c/0x1ac [ 411.279774][ T7193] device_remove+0xc4/0x134 [ 411.280572][ T7193] device_release_driver_internal+0x124/0x20c [ 411.281679][ T7193] device_release_driver+0x28/0x38 [ 411.282610][ T7193] pci_stop_bus_device+0x108/0x14c [ 411.283570][ T7193] pci_stop_and_remove_bus_device+0x84/0xd0 [ 411.284650][ T7193] pci_stop_and_remove_bus_device_locked+0x24/0x38 [ 411.285861][ T7193] remove_store+0xdc/0x148 [ 411.286698][ T7193] dev_attr_store+0x6c/0x90 [ 411.287520][ T7193] sysfs_kf_write+0xe0/0x108 [ 411.288371][ T7193] kernfs_fop_write_iter+0x260/0x3b8 [ 411.289375][ T7193] vfs_write+0x51c/0xa0c [ 411.290167][ T7193] ksys_write+0x12c/0x228 [ 411.290977][ T7193] __arm64_sys_write+0x84/0x98 [ 411.291871][ T7193] invoke_syscall+0x98/0x244 [ 411.292703][ T7193] el0_svc_common+0xec/0x23c [ 411.293535][ T7193] do_el0_svc+0x4c/0x5c [ 411.294291][ T7193] el0_svc+0x60/0x1d8 [ 411.295027][ T7193] el0t_64_sync_handler+0x44/0x104 [ 411.295974][ T7193] el0t_64_sync+0x198/0x19c [ 411.296802][ T7193] irq event stamp: 3018 [ 411.297563][ T7193] hardirqs last enabled at (3017): [] kasan_quarantine_put+0xb4/0x1c4 [ 411.299381][ T7193] hardirqs last disabled at (3018): [] el1_brk64+0x20/0x54 [ 411.301044][ T7193] softirqs last enabled at (2896): [] handle_softirqs+0xb2c/0xcbc [ 411.302829][ T7193] softirqs last disabled at (2867): [] __do_softirq+0x14/0x20 [ 411.304488][ T7193] ---[ end trace 0000000000000000 ]--- [ 411.309987][ T7197] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 411.310002][ T7197] FAT-fs (loop2): Filesystem has been set read-only [ 411.328742][ T7196] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 411.337470][ T7196] pci 0000:00:01.0: BAR 0 [io 0x0000-0x001f] [ 411.337497][ T7196] pci 0000:00:01.0: BAR 1 [mem 0x00000000-0x0000003f] [ 411.345134][ T7196] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 411.345182][ T7196] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 411.356952][ T10] virtio-pci 0000:00:01.0: enabling device (0001 -> 0003) [ 411.362077][ T10] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 411.474632][ T4748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.510475][ T7197] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 411.514181][ T7197] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 411.523243][ T4755] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 411.523501][ T4755] FAT-fs (loop2): error, corrupted directory (invalid entries)