last executing test programs: 12.424745736s ago: executing program 3 (id=1140): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$getown(r0, 0x9) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @my=0x0, 0x1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0xca00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) 11.230224058s ago: executing program 3 (id=1144): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x4000840) r5 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) 9.265833588s ago: executing program 3 (id=1150): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.513106734s ago: executing program 0 (id=1153): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f00000003c0)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000480)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f0000000580)="e1", 0x1}, {&(0x7f00000005c0)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f00000006c0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f00000007c0)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000880)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000940)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 8.420454613s ago: executing program 0 (id=1154): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000940), 0x1000) 8.011618785s ago: executing program 3 (id=1157): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000005c0)=0x800, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000840), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000880)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000008c0), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000900)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000980)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000009c0), 0x4000, 0x0, 0x0, 0x0) 7.322818705s ago: executing program 0 (id=1161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x8165, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="140426bd7000fcdbdf2513000000050003000d00000005000300070000000c0400000003aaaaaaaaaaaa06000800ffff000006000800a0aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='$\x00'}]}, 0x1c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000900)='hello', 0x5, 0x0, &(0x7f0000000940)={0xa, 0x1f90, 0x0, @local}, 0x1c) 7.187083219s ago: executing program 0 (id=1162): socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x20, '\x00', @data=0x37ad, 0xfff}]}) 6.516772687s ago: executing program 3 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) init_module(0x0, 0xa99, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) 5.905928539s ago: executing program 0 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0xfe7d}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000640)=""/68, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x40001f5, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 4.646894407s ago: executing program 2 (id=1168): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000a40)="$eJzs3U9rY1UUAPAzsW3aaiddiKAiXsaNbkJbv8AUmQGxoNSJjC6ENzbV0ExTklDJINqdWz/H4NKdIH6BLnTvzl03LmcxzJP8m/6ZWB07Saj+flDeae457blt3uNuwjm6/d3dne1WeTtrR+F6ikJEFB5ELPeiviuDa6EXz8VJB/FW6fZvr3348SfvrW9s3NhM6eb6rbfXUkpXX//py6++v/Zz+/mPfrj6YzEOlz89+mPt98OXDl8+enTri1or1Vppt9FOWbrTaLSzO/Vq2qq1dsopfVCvZq1qqu22qs1T69v1xt5eJ2W7W0uLe81qq5Wy3U7aqXZSu5HazU7KPs9qu6lcLqelxeAceTEiKvc3N7P1/gvz5yRfn1RXjEGzuZ517+HiEyuV+1NpCACYqoue/+ee6fl/NsZ1/i9M5K952Zw8//Nf1T3/z428B5z/AQAAAAAAAAAAAADgMniQ56U8z0vDaz78kPDg+ym3x5g98f8/8zXt/hivEx/cm4+of7tf2a/0r/319e2oRT2qsRKleNh9LAz145vvbtxYSV0HeSzd/aZXf+2XiMpzp+tXoxTLo+tXU9/j+uheZ2PxZP1alOLF0fVrI+vn4s03TtSXoxS/fhaNqMdW7/F2XP/1akrvvL9xpr7YywMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/6Gchl6N/tz7/UrEQuwP5veXjxOWT8/H79c/nq+/EqV4OHo+/8rI+fwz8crMdPcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOtzr2drF6vNicVDGf+916ZGwZ/XXWln35wZmkhTicX/+7nXDAoPFXVwmCTI5Ye5Xk+rlbn/1XVwaDZib4TZiPinJx80NPFf9cLEXFOTjEixr/lwuTur2cWTPpJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANN3PPR72p0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwTa3OvZ2sXq82/3kw8zTJ3WDaewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhM/gwAAP//EX8L5g==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.646555347s ago: executing program 3 (id=1169): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$getown(r0, 0x9) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @my=0x0, 0x1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0xca00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) 4.112676912s ago: executing program 1 (id=1170): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x80}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x400337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffd}}], 0x1, 0x0, 0x0) 4.019334281s ago: executing program 0 (id=1171): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$getown(r0, 0x9) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @my=0x0, 0x1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0xca00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) 3.946736979s ago: executing program 1 (id=1172): socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x20, '\x00', @data=0x37ad, 0xfff}]}) 3.923859251s ago: executing program 1 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f00000002c0)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000000780)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000005880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000058c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000005900)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000005980), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000005a00)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x32) openat(0xffffffffffffff9c, &(0x7f0000005a40)='./file1\x00', 0x42, 0x0) 3.759966728s ago: executing program 2 (id=1174): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.250162989s ago: executing program 4 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0d5}, 0x240048c0) 2.825722972s ago: executing program 2 (id=1176): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigprocmask(0x3, 0x0, 0x0, 0x0) 2.825295523s ago: executing program 1 (id=1177): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) r6 = accept(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x4000840) r7 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) 2.366097529s ago: executing program 4 (id=1178): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x108, 0x2, 0xa}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xf, 0x4000, 0xe25, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x5, 0x9, 0xffff7ffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2019, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x4, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x403, 0x0, 0x7, 0x2, 0xfffdfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x4000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x801, 0x4, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x200009fa, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x2, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3258, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xde, 0x0, 0x2, 0x40, 0x9, 0x40000, 0xbd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x6, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000101, 0x80000000, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, 0x4, 0x0, 0x10, 0x4]}, 0x45c) 1.485683189s ago: executing program 2 (id=1179): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.306719007s ago: executing program 4 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="80", 0x1}], 0x1}, 0x4) 1.111462747s ago: executing program 1 (id=1181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) syz_open_dev$ptys(0xc, 0x3, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) 1.064966292s ago: executing program 4 (id=1182): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000c80)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xea, &(0x7f0000000240)=""/234, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x5, 0x800, 0x9}, 0x10, 0x8ca2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 566.786982ms ago: executing program 2 (id=1183): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs_dir\x00', &(0x7f0000000280)='tracefs\x00', 0x200802, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000dbc0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x401, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 551.161924ms ago: executing program 2 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, 0x0, 0x0, 0x81) pread64(r3, &(0x7f0000000640), 0x100, 0x3f00) 131.851147ms ago: executing program 1 (id=1185): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$getown(r0, 0x9) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0xca00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000500), &(0x7f0000000380)=r4}, 0x20) 34.685977ms ago: executing program 4 (id=1186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs_dir\x00', &(0x7f0000000280)='tracefs\x00', 0x200802, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 0s ago: executing program 4 (id=1187): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f0000000600), 0x4, 0x524, &(0x7f0000001900)="$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") bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): equeue, screwing up backlog [ 132.756802][ T6541] device syzkaller0 entered promiscuous mode [ 132.771973][ T6541] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 132.845359][ T6551] device syzkaller0 left promiscuous mode [ 132.915896][ T6558] FAULT_INJECTION: forcing a failure. [ 132.915896][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 132.937052][ T6558] CPU: 0 PID: 6558 Comm: syz.0.616 Not tainted syzkaller #0 [ 132.938380][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.940379][ T6558] Call trace: [ 132.941032][ T6558] dump_backtrace+0x1c4/0x1f0 [ 132.941960][ T6558] show_stack+0x2c/0x3c [ 132.942703][ T6558] __dump_stack+0x30/0x40 [ 132.943536][ T6558] dump_stack_lvl+0xf4/0x15c [ 132.944380][ T6558] dump_stack+0x1c/0x5c [ 132.945108][ T6558] should_fail_ex+0x3cc/0x524 [ 132.945895][ T6558] __should_failslab+0xc0/0x11c [ 132.946747][ T6558] should_failslab+0x10/0x28 [ 132.947614][ T6558] __kmem_cache_alloc_node+0x7c/0x318 [ 132.948583][ T6558] __kmalloc+0xc4/0x180 [ 132.949362][ T6558] memcg_list_lru_alloc+0x190/0x8bc [ 132.950337][ T6558] slab_pre_alloc_hook+0x2cc/0x31c [ 132.951274][ T6558] kmem_cache_alloc_lru+0x60/0x284 [ 132.952267][ T6558] __d_alloc+0x40/0x68c [ 132.953048][ T6558] d_alloc_parallel+0x80/0x1178 [ 132.953963][ T6558] __lookup_slow+0x114/0x38c [ 132.954806][ T6558] lookup_one_len+0x17c/0x298 [ 132.955701][ T6558] do_mq_open+0x204/0x614 [ 132.956491][ T6558] __arm64_sys_mq_open+0x210/0x2a4 [ 132.957431][ T6558] invoke_syscall+0x98/0x290 [ 132.958290][ T6558] el0_svc_common+0x13c/0x258 [ 132.959172][ T6558] do_el0_svc+0x5c/0x134 [ 132.959949][ T6558] el0_svc+0x58/0x12c [ 132.960662][ T6558] el0t_64_sync_handler+0x84/0xf0 [ 132.961581][ T6558] el0t_64_sync+0x18c/0x190 [ 133.250619][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.292288][ T6564] FAULT_INJECTION: forcing a failure. [ 133.292288][ T6564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.295237][ T6564] CPU: 1 PID: 6564 Comm: syz.2.617 Not tainted syzkaller #0 [ 133.296536][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.298345][ T6564] Call trace: [ 133.298908][ T6564] dump_backtrace+0x1c4/0x1f0 [ 133.299739][ T6564] show_stack+0x2c/0x3c [ 133.300459][ T6564] __dump_stack+0x30/0x40 [ 133.301192][ T6564] dump_stack_lvl+0xf4/0x15c [ 133.301984][ T6564] dump_stack+0x1c/0x5c [ 133.302719][ T6564] should_fail_ex+0x3cc/0x524 [ 133.303577][ T6564] should_fail_alloc_page+0x74/0xb8 [ 133.304506][ T6564] prepare_alloc_pages+0x1b8/0x4f0 [ 133.305410][ T6564] __alloc_pages+0x134/0x544 [ 133.306219][ T6564] __folio_alloc+0x1c/0x44 [ 133.307021][ T6564] vma_alloc_folio+0x37c/0x8ac [ 133.307804][ T6564] shmem_alloc_and_acct_folio+0x3bc/0x948 [ 133.308821][ T6564] shmem_get_folio_gfp+0xedc/0x2038 [ 133.309748][ T6564] shmem_fallocate+0x6cc/0xb88 [ 133.310625][ T6564] vfs_fallocate+0x4a4/0x5fc [ 133.311489][ T6564] __arm64_sys_fallocate+0xc4/0x114 [ 133.312423][ T6564] invoke_syscall+0x98/0x290 [ 133.313264][ T6564] el0_svc_common+0x13c/0x258 [ 133.314111][ T6564] do_el0_svc+0x5c/0x134 [ 133.314881][ T6564] el0_svc+0x58/0x12c [ 133.315573][ T6564] el0t_64_sync_handler+0x84/0xf0 [ 133.316461][ T6564] el0t_64_sync+0x18c/0x190 [ 133.508045][ T6578] loop0: detected capacity change from 0 to 512 [ 133.580956][ T6578] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 133.582472][ T6578] FAT-fs (loop0): Filesystem has been set read-only [ 133.584280][ T6578] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 133.585957][ T6578] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 133.633871][ T6578] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 134.358747][ T6584] FAULT_INJECTION: forcing a failure. [ 134.358747][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 134.361020][ T6584] CPU: 1 PID: 6584 Comm: syz.2.622 Not tainted syzkaller #0 [ 134.362280][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.364028][ T6584] Call trace: [ 134.364603][ T6584] dump_backtrace+0x1c4/0x1f0 [ 134.365384][ T6584] show_stack+0x2c/0x3c [ 134.366101][ T6584] __dump_stack+0x30/0x40 [ 134.366840][ T6584] dump_stack_lvl+0xf4/0x15c [ 134.367671][ T6584] dump_stack+0x1c/0x5c [ 134.368444][ T6584] should_fail_ex+0x3cc/0x524 [ 134.369247][ T6584] __should_failslab+0xc0/0x11c [ 134.370111][ T6584] should_failslab+0x10/0x28 [ 134.370975][ T6584] __kmem_cache_alloc_node+0x7c/0x318 [ 134.371913][ T6584] kmalloc_trace+0x48/0x94 [ 134.372683][ T6584] tcp_sendmsg_fastopen+0x1ac/0x564 [ 134.373611][ T6584] tcp_sendmsg_locked+0x2c9c/0x31c4 [ 134.374495][ T6584] tcp_sendmsg+0x40/0x64 [ 134.375255][ T6584] inet6_sendmsg+0xb4/0xd8 [ 134.376196][ T6584] __sys_sendto+0x324/0x440 [ 134.377144][ T6584] __arm64_sys_sendto+0xe4/0x104 [ 134.378148][ T6584] invoke_syscall+0x98/0x290 [ 134.379088][ T6584] el0_svc_common+0x13c/0x258 [ 134.380020][ T6584] do_el0_svc+0x5c/0x134 [ 134.380867][ T6584] el0_svc+0x58/0x12c [ 134.381711][ T6584] el0t_64_sync_handler+0x84/0xf0 [ 134.382709][ T6584] el0t_64_sync+0x18c/0x190 [ 134.511068][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.733840][ T6601] loop0: detected capacity change from 0 to 512 [ 134.783170][ T6601] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 134.784764][ T6601] FAT-fs (loop0): Filesystem has been set read-only [ 134.786572][ T6601] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 134.788366][ T6601] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 134.856853][ T6601] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 135.514593][ T6606] loop4: detected capacity change from 0 to 1024 [ 135.518088][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.560330][ T6606] EXT4-fs: Ignoring removed orlov option [ 135.592500][ T6606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c028, mo2=0003] [ 135.600754][ T6606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.650852][ T6614] device syzkaller0 entered promiscuous mode [ 135.665840][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 135.757346][ T4416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.818868][ T6624] loop1: detected capacity change from 0 to 512 [ 135.835649][ T6622] netlink: 'syz.0.633': attribute type 91 has an invalid length. [ 135.843723][ T6624] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.635: inode #1: comm syz.1.635: iget: illegal inode # [ 135.849575][ T6624] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.635: error while reading EA inode 1 err=-117 [ 135.855884][ T6624] EXT4-fs (loop1): 1 orphan inode deleted [ 135.865938][ T6624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.916221][ T6620] loop2: detected capacity change from 0 to 32768 [ 135.973173][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 136.026047][ T6632] FAULT_INJECTION: forcing a failure. [ 136.026047][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 136.042293][ T6620] JBD2: Ignoring recovery information on journal [ 136.043615][ T6632] CPU: 0 PID: 6632 Comm: syz.0.638 Not tainted syzkaller #0 [ 136.044895][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.046637][ T6632] Call trace: [ 136.047220][ T6632] dump_backtrace+0x1c4/0x1f0 [ 136.048091][ T6632] show_stack+0x2c/0x3c [ 136.048865][ T6632] __dump_stack+0x30/0x40 [ 136.049677][ T6632] dump_stack_lvl+0xf4/0x15c [ 136.050520][ T6632] dump_stack+0x1c/0x5c [ 136.051275][ T6632] should_fail_ex+0x3cc/0x524 [ 136.052090][ T6632] __should_failslab+0xc0/0x11c [ 136.052988][ T6632] should_failslab+0x10/0x28 [ 136.053820][ T6632] slab_pre_alloc_hook+0x6c/0x31c [ 136.054713][ T6632] kmem_cache_alloc_lru+0x60/0x284 [ 136.055633][ T6632] __d_alloc+0x40/0x68c [ 136.056402][ T6632] d_alloc_pseudo+0x28/0x8c [ 136.057235][ T6632] alloc_file_pseudo+0xd8/0x1f4 [ 136.058142][ T6632] anon_inode_getfile+0xc4/0x16c [ 136.059080][ T6632] sync_file_create+0x80/0x1e0 [ 136.059955][ T6632] sw_sync_ioctl+0x884/0xc44 [ 136.060803][ T6632] __arm64_sys_ioctl+0x14c/0x1c8 [ 136.061751][ T6632] invoke_syscall+0x98/0x290 [ 136.062594][ T6632] el0_svc_common+0x13c/0x258 [ 136.063439][ T6632] do_el0_svc+0x5c/0x134 [ 136.064215][ T6632] el0_svc+0x58/0x12c [ 136.064944][ T6632] el0t_64_sync_handler+0x84/0xf0 [ 136.065870][ T6632] el0t_64_sync+0x18c/0x190 [ 136.074729][ T6635] loop1: detected capacity change from 0 to 512 [ 136.122729][ T6635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.130237][ T6620] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 136.135374][ T6635] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.639: invalid indirect mapped block 4294967295 (level 0) [ 136.138525][ T6635] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.639: invalid indirect mapped block 4294967295 (level 1) [ 136.141350][ T6635] EXT4-fs (loop1): 1 orphan inode deleted [ 136.142390][ T6635] EXT4-fs (loop1): 1 truncate cleaned up [ 136.143833][ T6635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.200405][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 136.210723][ T6620] FAULT_INJECTION: forcing a failure. [ 136.210723][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 136.213079][ T6620] CPU: 0 PID: 6620 Comm: syz.2.631 Not tainted syzkaller #0 [ 136.214308][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.215856][ T6620] Call trace: [ 136.216384][ T6620] dump_backtrace+0x1c4/0x1f0 [ 136.217183][ T6620] show_stack+0x2c/0x3c [ 136.217952][ T6620] __dump_stack+0x30/0x40 [ 136.218742][ T6620] dump_stack_lvl+0xf4/0x15c [ 136.219563][ T6620] dump_stack+0x1c/0x5c [ 136.220305][ T6620] should_fail_ex+0x3cc/0x524 [ 136.221118][ T6620] __should_failslab+0xc0/0x11c [ 136.222030][ T6620] should_failslab+0x10/0x28 [ 136.222830][ T6620] __kmem_cache_alloc_node+0x7c/0x318 [ 136.223763][ T6620] kmalloc_trace+0x48/0x94 [ 136.224533][ T6620] ocfs2_reserve_new_metadata_blocks+0xf8/0x7e4 [ 136.225630][ T6620] ocfs2_lock_allocators+0x23c/0x530 [ 136.226538][ T6620] ocfs2_extend_allocation+0x37c/0x1760 [ 136.227540][ T6620] ocfs2_allocate_unwritten_extents+0x274/0x6dc [ 136.228674][ T6620] __ocfs2_change_file_space+0x7e0/0xcf4 [ 136.229694][ T6620] ocfs2_fallocate+0x1f0/0x228 [ 136.230552][ T6620] vfs_fallocate+0x4a4/0x5fc [ 136.231380][ T6620] __arm64_sys_fallocate+0xc4/0x114 [ 136.232309][ T6620] invoke_syscall+0x98/0x290 [ 136.233139][ T6620] el0_svc_common+0x13c/0x258 [ 136.233979][ T6620] do_el0_svc+0x5c/0x134 [ 136.234738][ T6620] el0_svc+0x58/0x12c [ 136.235419][ T6620] el0t_64_sync_handler+0x84/0xf0 [ 136.236329][ T6620] el0t_64_sync+0x18c/0x190 [ 136.262877][ T6620] (syz.2.631,6620,0):ocfs2_reserve_new_metadata_blocks:987 ERROR: status = -12 [ 136.265113][ T6620] (syz.2.631,6620,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -12 [ 136.267203][ T6620] (syz.2.631,6620,0):ocfs2_lock_allocators:2693 ERROR: status = -12 [ 136.268631][ T6620] (syz.2.631,6620,0):ocfs2_extend_allocation:588 ERROR: status = -12 [ 136.270169][ T6620] (syz.2.631,6620,0):ocfs2_allocate_unwritten_extents:1499 ERROR: status = -12 [ 136.271677][ T6620] (syz.2.631,6620,0):__ocfs2_change_file_space:2045 ERROR: status = -12 [ 136.435957][ T4343] ocfs2: Unmounting device (7,2) on (node local) [ 136.591052][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.564759][ T6667] loop0: detected capacity change from 0 to 2048 [ 137.572676][ T6666] batman_adv: batadv0: Adding interface: syzkaller0 [ 137.573926][ T6666] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.597353][ T6666] batman_adv: batadv0: Interface activated: syzkaller0 [ 137.599625][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.655390][ T6664] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 137.715492][ T6674] FAULT_INJECTION: forcing a failure. [ 137.715492][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 137.718134][ T6664] batman_adv: batadv0: Removing interface: syzkaller0 [ 137.720308][ T6674] CPU: 1 PID: 6674 Comm: syz.3.652 Not tainted syzkaller #0 [ 137.721555][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 137.723213][ T6674] Call trace: [ 137.723791][ T6674] dump_backtrace+0x1c4/0x1f0 [ 137.724603][ T6674] show_stack+0x2c/0x3c [ 137.725355][ T6674] __dump_stack+0x30/0x40 [ 137.726145][ T6674] dump_stack_lvl+0xf4/0x15c [ 137.726972][ T6674] dump_stack+0x1c/0x5c [ 137.727717][ T6674] should_fail_ex+0x3cc/0x524 [ 137.728549][ T6674] __should_failslab+0xc0/0x11c [ 137.729429][ T6674] should_failslab+0x10/0x28 [ 137.730251][ T6674] slab_pre_alloc_hook+0x6c/0x31c [ 137.731162][ T6674] kmem_cache_alloc_lru+0x60/0x284 [ 137.732077][ T6674] mqueue_alloc_inode+0x2c/0x48 [ 137.732977][ T6674] new_inode_pseudo+0x68/0x1cc [ 137.733865][ T6674] new_inode+0x38/0x174 [ 137.734613][ T6674] mqueue_get_inode+0x40/0x990 [ 137.735488][ T6674] mqueue_create_attr+0x1cc/0x3b8 [ 137.736388][ T6674] vfs_mkobj+0x2f0/0x4b8 [ 137.737144][ T6674] do_mq_open+0x4e0/0x614 [ 137.737914][ T6674] __arm64_sys_mq_open+0x210/0x2a4 [ 137.738828][ T6674] invoke_syscall+0x98/0x290 [ 137.739631][ T6674] el0_svc_common+0x13c/0x258 [ 137.740427][ T6674] do_el0_svc+0x5c/0x134 [ 137.741139][ T6674] el0_svc+0x58/0x12c [ 137.741855][ T6674] el0t_64_sync_handler+0x84/0xf0 [ 137.742734][ T6674] el0t_64_sync+0x18c/0x190 [ 137.788750][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.653'. [ 137.985386][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 138.079400][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.206539][ T6709] loop2: detected capacity change from 0 to 512 [ 138.561916][ T6702] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 138.565868][ T6702] FAT-fs (loop2): Filesystem has been set read-only [ 138.573588][ T6702] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 138.579852][ T6702] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 138.638731][ T6716] FAULT_INJECTION: forcing a failure. [ 138.638731][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 138.641388][ T6716] CPU: 0 PID: 6716 Comm: syz.3.662 Not tainted syzkaller #0 [ 138.642730][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.643344][ T6702] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 138.644621][ T6716] Call trace: [ 138.646959][ T6716] dump_backtrace+0x1c4/0x1f0 [ 138.647194][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.647810][ T6716] show_stack+0x2c/0x3c [ 138.647823][ T6716] __dump_stack+0x30/0x40 [ 138.647839][ T6716] dump_stack_lvl+0xf4/0x15c [ 138.649589][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.650086][ T6716] dump_stack+0x1c/0x5c [ 138.654144][ T6716] should_fail_ex+0x3cc/0x524 [ 138.655067][ T6716] __should_failslab+0xc0/0x11c [ 138.655976][ T6716] should_failslab+0x10/0x28 [ 138.656812][ T6716] __kmem_cache_alloc_node+0x7c/0x318 [ 138.657828][ T6716] __kmalloc_node+0xc8/0x184 [ 138.658683][ T6716] kvmalloc_node+0x88/0x1d4 [ 138.659549][ T6716] fuse_dev_splice_read+0x90/0x4e0 [ 138.660519][ T6716] splice_file_to_pipe+0x354/0x524 [ 138.661495][ T6716] do_splice+0xea0/0x150c [ 138.662306][ T6716] __arm64_sys_splice+0x4dc/0x5f4 [ 138.663246][ T6716] invoke_syscall+0x98/0x290 [ 138.664099][ T6716] el0_svc_common+0x13c/0x258 [ 138.664969][ T6716] do_el0_svc+0x5c/0x134 [ 138.665776][ T6716] el0_svc+0x58/0x12c [ 138.666547][ T6716] el0t_64_sync_handler+0x84/0xf0 [ 138.667484][ T6716] el0t_64_sync+0x18c/0x190 [ 139.677220][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.679053][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.759361][ T6736] FAULT_INJECTION: forcing a failure. [ 139.759361][ T6736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.761692][ T6736] CPU: 1 PID: 6736 Comm: syz.4.666 Not tainted syzkaller #0 [ 139.762916][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 139.764719][ T6736] Call trace: [ 139.765329][ T6736] dump_backtrace+0x1c4/0x1f0 [ 139.766220][ T6736] show_stack+0x2c/0x3c [ 139.767116][ T6736] __dump_stack+0x30/0x40 [ 139.768043][ T6736] dump_stack_lvl+0xf4/0x15c [ 139.769017][ T6736] dump_stack+0x1c/0x5c [ 139.769899][ T6736] should_fail_ex+0x3cc/0x524 [ 139.770886][ T6736] should_fail+0x14/0x24 [ 139.771628][ T6736] should_fail_usercopy+0x20/0x30 [ 139.772522][ T6736] copy_to_sockptr_offset+0x8c/0x1c8 [ 139.773451][ T6736] do_ip_getsockopt+0xa28/0x1264 [ 139.774306][ T6736] ip_getsockopt+0xac/0x344 [ 139.775079][ T6736] tcp_getsockopt+0xcc/0xe8 [ 139.775860][ T6736] sock_common_getsockopt+0xa8/0xc4 [ 139.776799][ T6736] __sys_getsockopt+0x1e0/0x474 [ 139.777671][ T6736] __arm64_sys_getsockopt+0xc0/0xdc [ 139.778608][ T6736] invoke_syscall+0x98/0x290 [ 139.779409][ T6736] el0_svc_common+0x13c/0x258 [ 139.780234][ T6736] do_el0_svc+0x5c/0x134 [ 139.781000][ T6736] el0_svc+0x58/0x12c [ 139.781711][ T6736] el0t_64_sync_handler+0x84/0xf0 [ 139.782614][ T6736] el0t_64_sync+0x18c/0x190 [ 139.883091][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.884853][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.909817][ T6739] FAULT_INJECTION: forcing a failure. [ 139.909817][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 139.912221][ T6739] CPU: 0 PID: 6739 Comm: syz.3.667 Not tainted syzkaller #0 [ 139.913416][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 139.914994][ T6739] Call trace: [ 139.915531][ T6739] dump_backtrace+0x1c4/0x1f0 [ 139.916276][ T6739] show_stack+0x2c/0x3c [ 139.916986][ T6739] __dump_stack+0x30/0x40 [ 139.917808][ T6739] dump_stack_lvl+0xf4/0x15c [ 139.918617][ T6739] dump_stack+0x1c/0x5c [ 139.919367][ T6739] should_fail_ex+0x3cc/0x524 [ 139.920201][ T6739] __should_failslab+0xc0/0x11c [ 139.921094][ T6739] should_failslab+0x10/0x28 [ 139.921940][ T6739] __kmem_cache_alloc_node+0x7c/0x318 [ 139.922926][ T6739] kmalloc_node_trace+0x44/0x90 [ 139.923839][ T6739] __get_vm_area_node+0x14c/0x31c [ 139.924876][ T6739] __vmalloc_node_range+0x1d4/0xe70 [ 139.925904][ T6739] vzalloc+0x9c/0xd4 [ 139.926668][ T6739] n_tty_open+0x24/0x174 [ 139.927571][ T6739] tty_ldisc_setup+0xc4/0x40c [ 139.928542][ T6739] tty_init_dev+0x208/0x3f4 [ 139.929428][ T6739] ptmx_open+0xfc/0x2d4 [ 139.930247][ T6739] chrdev_open+0x3d0/0x51c [ 139.931138][ T6739] do_dentry_open+0x738/0xf8c [ 139.932059][ T6739] vfs_open+0x7c/0x90 [ 139.932842][ T6739] path_openat+0x1fc0/0x27a0 [ 139.933759][ T6739] do_filp_open+0x198/0x38c [ 139.934630][ T6739] do_sys_openat2+0x134/0x3fc [ 139.935453][ T6739] __arm64_sys_openat+0x11c/0x150 [ 139.936361][ T6739] invoke_syscall+0x98/0x290 [ 139.937200][ T6739] el0_svc_common+0x13c/0x258 [ 139.938057][ T6739] do_el0_svc+0x5c/0x134 [ 139.938818][ T6739] el0_svc+0x58/0x12c [ 139.939549][ T6739] el0t_64_sync_handler+0x84/0xf0 [ 139.940482][ T6739] el0t_64_sync+0x18c/0x190 [ 139.945158][ T6739] syz.3.667: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 139.948986][ T6739] CPU: 0 PID: 6739 Comm: syz.3.667 Not tainted syzkaller #0 [ 139.950299][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 139.952111][ T6739] Call trace: [ 139.952714][ T6739] dump_backtrace+0x1c4/0x1f0 [ 139.953603][ T6739] show_stack+0x2c/0x3c [ 139.954376][ T6739] __dump_stack+0x30/0x40 [ 139.955189][ T6739] dump_stack_lvl+0xf4/0x15c [ 139.956151][ T6739] dump_stack+0x1c/0x5c [ 139.957010][ T6739] warn_alloc+0x214/0x324 [ 139.957866][ T6739] __vmalloc_node_range+0x24c/0xe70 [ 139.958831][ T6739] vzalloc+0x9c/0xd4 [ 139.959579][ T6739] n_tty_open+0x24/0x174 [ 139.960378][ T6739] tty_ldisc_setup+0xc4/0x40c [ 139.961256][ T6739] tty_init_dev+0x208/0x3f4 [ 139.962103][ T6739] ptmx_open+0xfc/0x2d4 [ 139.962847][ T6739] chrdev_open+0x3d0/0x51c [ 139.963637][ T6739] do_dentry_open+0x738/0xf8c [ 139.964476][ T6739] vfs_open+0x7c/0x90 [ 139.965213][ T6739] path_openat+0x1fc0/0x27a0 [ 139.966046][ T6739] do_filp_open+0x198/0x38c [ 139.966851][ T6739] do_sys_openat2+0x134/0x3fc [ 139.967705][ T6739] __arm64_sys_openat+0x11c/0x150 [ 139.968613][ T6739] invoke_syscall+0x98/0x290 [ 139.969469][ T6739] el0_svc_common+0x13c/0x258 [ 139.970449][ T6739] do_el0_svc+0x5c/0x134 [ 139.971296][ T6739] el0_svc+0x58/0x12c [ 139.972074][ T6739] el0t_64_sync_handler+0x84/0xf0 [ 139.973019][ T6739] el0t_64_sync+0x18c/0x190 [ 139.980561][ T6739] Mem-Info: [ 139.981108][ T6739] active_anon:11622 inactive_anon:0 isolated_anon:0 [ 139.981108][ T6739] active_file:5226 inactive_file:2160 isolated_file:0 [ 139.981108][ T6739] unevictable:768 dirty:401 writeback:0 [ 139.981108][ T6739] slab_reclaimable:19808 slab_unreclaimable:97216 [ 139.981108][ T6739] mapped:36362 shmem:6759 pagetables:774 [ 139.981108][ T6739] sec_pagetables:0 bounce:0 [ 139.981108][ T6739] kernel_misc_reclaimable:0 [ 139.981108][ T6739] free:1429053 free_pcp:6308 free_cma:7360 [ 139.989634][ T6739] Node 0 active_anon:46488kB inactive_anon:0kB active_file:20904kB inactive_file:8640kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:145448kB dirty:1604kB writeback:0kB shmem:27036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10196kB pagetables:2996kB sec_pagetables:0kB all_unreclaimable? no [ 139.994863][ T6739] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 140.000081][ T6739] lowmem_reserve[]: 0 0 3532 3532 3532 [ 140.001347][ T6739] Node 0 Normal free:2639100kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:46488kB inactive_anon:0kB active_file:20904kB inactive_file:8640kB unevictable:3072kB writepending:1604kB present:5242880kB managed:3620908kB mlocked:0kB bounce:0kB free_pcp:26064kB local_pcp:14360kB free_cma:0kB [ 140.006173][ T6739] lowmem_reserve[]: 0 0 0 0 0 [ 140.007379][ T6739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 140.009729][ T6739] Node 0 Normal: 371*4kB (UM) 226*8kB (ME) 324*16kB (UME) 139*32kB (UME) 42*64kB (UME) 6*128kB (UE) 5*256kB (UM) 10*512kB (M) 9*1024kB (UME) 5*2048kB (UM) 634*4096kB (M) = 2639100kB [ 140.013213][ T6739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.014870][ T6739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 140.016420][ T6739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 140.018481][ T6739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 140.019989][ T6739] 14132 total pagecache pages [ 140.020723][ T6739] 0 pages in swap cache [ 140.021380][ T6739] Free swap = 124484kB [ 140.022080][ T6739] Total swap = 124996kB [ 140.022757][ T6739] 2097152 pages RAM [ 140.023454][ T6739] 0 pages HighMem/MovableOnly [ 140.024203][ T6739] 421877 pages reserved [ 140.024894][ T6739] 8192 pages cma reserved [ 140.025615][ T6739] 22 pages hwpoisoned [ 140.026363][ T6739] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 140.729532][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.780728][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.938367][ T6804] FAULT_INJECTION: forcing a failure. [ 140.938367][ T6804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.942845][ T6804] CPU: 1 PID: 6804 Comm: syz.0.679 Not tainted syzkaller #0 [ 140.944181][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 140.946061][ T6804] Call trace: [ 140.946739][ T6804] dump_backtrace+0x1c4/0x1f0 [ 140.947575][ T6804] show_stack+0x2c/0x3c [ 140.948300][ T6804] __dump_stack+0x30/0x40 [ 140.949112][ T6804] dump_stack_lvl+0xf4/0x15c [ 140.949945][ T6804] dump_stack+0x1c/0x5c [ 140.950699][ T6804] should_fail_ex+0x3cc/0x524 [ 140.951601][ T6804] should_fail+0x14/0x24 [ 140.952359][ T6804] should_fail_usercopy+0x20/0x30 [ 140.953253][ T6804] prctl_set_mm+0x324/0xf9c [ 140.954083][ T6804] __arm64_sys_prctl+0x760/0xfe0 [ 140.954996][ T6804] invoke_syscall+0x98/0x290 [ 140.955840][ T6804] el0_svc_common+0x13c/0x258 [ 140.956705][ T6804] do_el0_svc+0x5c/0x134 [ 140.957465][ T6804] el0_svc+0x58/0x12c [ 140.958179][ T6804] el0t_64_sync_handler+0x84/0xf0 [ 140.959224][ T6804] el0t_64_sync+0x18c/0x190 [ 142.372567][ T6829] loop3: detected capacity change from 0 to 32768 [ 142.486598][ T6829] JBD2: Ignoring recovery information on journal [ 142.819821][ T4487] net_ratelimit: 47 callbacks suppressed [ 142.819837][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.830602][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.848851][ T6829] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.931824][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.942148][ T6829] FAULT_INJECTION: forcing a failure. [ 142.942148][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 142.944776][ T6829] CPU: 0 PID: 6829 Comm: syz.3.689 Not tainted syzkaller #0 [ 142.946074][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 142.947998][ T6829] Call trace: [ 142.948629][ T6829] dump_backtrace+0x1c4/0x1f0 [ 142.949487][ T6829] show_stack+0x2c/0x3c [ 142.950235][ T6829] __dump_stack+0x30/0x40 [ 142.951022][ T6829] dump_stack_lvl+0xf4/0x15c [ 142.951883][ T6829] dump_stack+0x1c/0x5c [ 142.952651][ T6829] should_fail_ex+0x3cc/0x524 [ 142.953500][ T6829] __should_failslab+0xc0/0x11c [ 142.954379][ T6829] should_failslab+0x10/0x28 [ 142.955253][ T6829] __kmem_cache_alloc_node+0x7c/0x318 [ 142.956206][ T6829] kmalloc_trace+0x48/0x94 [ 142.957021][ T6829] ocfs2_reserve_new_metadata_blocks+0xf8/0x7e4 [ 142.958159][ T6829] ocfs2_lock_allocators+0x23c/0x530 [ 142.959160][ T6829] ocfs2_extend_allocation+0x37c/0x1760 [ 142.960176][ T6829] ocfs2_allocate_unwritten_extents+0x274/0x6dc [ 142.961309][ T6829] __ocfs2_change_file_space+0x7e0/0xcf4 [ 142.962345][ T6829] ocfs2_fallocate+0x1f0/0x228 [ 142.963231][ T6829] vfs_fallocate+0x4a4/0x5fc [ 142.964100][ T6829] __arm64_sys_fallocate+0xc4/0x114 [ 142.965025][ T6829] invoke_syscall+0x98/0x290 [ 142.965856][ T6829] el0_svc_common+0x13c/0x258 [ 142.966743][ T6829] do_el0_svc+0x5c/0x134 [ 142.967509][ T6829] el0_svc+0x58/0x12c [ 142.968230][ T6829] el0t_64_sync_handler+0x84/0xf0 [ 142.969109][ T6829] el0t_64_sync+0x18c/0x190 [ 142.971889][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.974257][ T4416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.982135][ T6829] (syz.3.689,6829,0):ocfs2_reserve_new_metadata_blocks:987 ERROR: status = -12 [ 142.983975][ T6829] (syz.3.689,6829,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -12 [ 142.985880][ T6829] (syz.3.689,6829,0):ocfs2_lock_allocators:2693 ERROR: status = -12 [ 142.988364][ T6829] (syz.3.689,6829,0):ocfs2_extend_allocation:588 ERROR: status = -12 [ 142.990192][ T6829] (syz.3.689,6829,0):ocfs2_allocate_unwritten_extents:1499 ERROR: status = -12 [ 142.992119][ T6829] (syz.3.689,6829,0):__ocfs2_change_file_space:2045 ERROR: status = -12 [ 143.031585][ T4331] ocfs2: Unmounting device (7,3) on (node local) [ 143.205230][ T6857] device syzkaller1 entered promiscuous mode [ 143.291065][ T6860] loop2: detected capacity change from 0 to 512 [ 143.313564][ T6860] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 143.315278][ T6860] FAT-fs (loop2): Filesystem has been set read-only [ 143.316556][ T6860] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 143.323247][ T6860] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 143.334948][ T6860] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 143.848531][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.999179][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.051776][ T6873] device syzkaller1 entered promiscuous mode [ 144.055691][ T6873] ip_tables: iptables: counters copy to user failed while replacing table [ 144.709074][ T6886] loop1: detected capacity change from 0 to 2048 [ 144.779786][ T6886] loop1: p1 p3 p4 [ 144.797346][ T6886] loop1: p4 size 589824 extends beyond EOD, truncated [ 144.878753][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.037817][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.391953][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 145.392498][ T4602] udevd[4602]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 145.394615][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 145.396661][ T6896] loop3: detected capacity change from 0 to 32768 [ 145.405357][ T6896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.715 (6896) [ 145.425507][ T6896] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.433387][ T6896] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 145.440500][ T6896] BTRFS info (device loop3): setting nodatasum [ 145.443781][ T6896] BTRFS info (device loop3): force zlib compression, level 3 [ 145.455101][ T6896] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 145.460017][ T6896] BTRFS info (device loop3): use lzo compression, level 0 [ 145.463474][ T6896] BTRFS info (device loop3): turning on flush-on-commit [ 145.465930][ T6896] BTRFS info (device loop3): enabling auto defrag [ 145.469484][ T6896] BTRFS info (device loop3): max_inline at 0 [ 145.471696][ T6896] BTRFS info (device loop3): using free space tree [ 145.561042][ T6896] BTRFS info (device loop3): enabling ssd optimizations [ 146.180135][ T6939] loop1: detected capacity change from 0 to 2048 [ 146.190640][ T6939] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 146.201082][ T6939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.566711][ T6943] FAULT_INJECTION: forcing a failure. [ 146.566711][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 146.581805][ T6943] CPU: 1 PID: 6943 Comm: syz.0.724 Not tainted syzkaller #0 [ 146.583039][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 146.584671][ T6943] Call trace: [ 146.585223][ T6943] dump_backtrace+0x1c4/0x1f0 [ 146.585998][ T6943] show_stack+0x2c/0x3c [ 146.586712][ T6943] __dump_stack+0x30/0x40 [ 146.586755][ T4331] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.587490][ T6943] dump_stack_lvl+0xf4/0x15c [ 146.587516][ T6943] dump_stack+0x1c/0x5c [ 146.587526][ T6943] should_fail_ex+0x3cc/0x524 [ 146.591793][ T6943] __should_failslab+0xc0/0x11c [ 146.592642][ T6943] should_failslab+0x10/0x28 [ 146.593459][ T6943] kmem_cache_alloc+0x88/0x310 [ 146.594309][ T6943] __alloc_file+0x30/0x234 [ 146.595113][ T6943] alloc_empty_file+0xa0/0x184 [ 146.596007][ T6943] alloc_file+0x64/0x564 [ 146.596742][ T6943] alloc_file_pseudo+0x16c/0x1f4 [ 146.597622][ T6943] anon_inode_getfd+0xe8/0x1a8 [ 146.598474][ T6943] do_inotify_init+0x2d8/0x40c [ 146.599282][ T6943] __arm64_sys_inotify_init1+0x3c/0x50 [ 146.600231][ T6943] invoke_syscall+0x98/0x290 [ 146.601043][ T6943] el0_svc_common+0x13c/0x258 [ 146.601877][ T6943] do_el0_svc+0x5c/0x134 [ 146.602639][ T6943] el0_svc+0x58/0x12c [ 146.603349][ T6943] el0t_64_sync_handler+0x84/0xf0 [ 146.604244][ T6943] el0t_64_sync+0x18c/0x190 [ 148.027226][ T4552] net_ratelimit: 61 callbacks suppressed [ 148.027241][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.067177][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.230513][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.321343][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'. [ 148.861860][ T7000] qfq: no options [ 148.946652][ T7003] loop3: detected capacity change from 0 to 512 [ 148.973293][ T7003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 148.975101][ T7003] FAT-fs (loop3): Filesystem has been set read-only [ 148.976560][ T7003] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 148.980643][ T7003] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 148.992490][ T7003] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 149.117178][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.139340][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.141510][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.440671][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.157838][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.395284][ T7021] batman_adv: batadv0: Adding interface: syzkaller0 [ 150.396478][ T7021] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.424421][ T7021] batman_adv: batadv0: Interface activated: syzkaller0 [ 150.721385][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.742531][ T7024] overlayfs: failed to set xattr on upper [ 150.743755][ T7024] overlayfs: ...falling back to index=off,metacopy=off. [ 150.931574][ T7020] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 150.984835][ T7029] FAULT_INJECTION: forcing a failure. [ 150.984835][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 150.985965][ T7031] loop2: detected capacity change from 0 to 128 [ 150.997051][ T7029] CPU: 1 PID: 7029 Comm: syz.1.751 Not tainted syzkaller #0 [ 150.998264][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.999835][ T7029] Call trace: [ 151.000360][ T7029] dump_backtrace+0x1c4/0x1f0 [ 151.001091][ T7029] show_stack+0x2c/0x3c [ 151.001769][ T7029] __dump_stack+0x30/0x40 [ 151.002609][ T7029] dump_stack_lvl+0xf4/0x15c [ 151.003559][ T7029] dump_stack+0x1c/0x5c [ 151.004398][ T7029] should_fail_ex+0x3cc/0x524 [ 151.005317][ T7029] __should_failslab+0xc0/0x11c [ 151.006295][ T7029] should_failslab+0x10/0x28 [ 151.007194][ T7029] __kmem_cache_alloc_node+0x7c/0x318 [ 151.008260][ T7029] kmalloc_trace+0x48/0x94 [ 151.009126][ T7029] request_key_auth_new+0x108/0x8e8 [ 151.010104][ T7029] request_key_and_link+0xf18/0x11a0 [ 151.011113][ T7029] __arm64_sys_request_key+0x288/0x384 [ 151.012172][ T7029] invoke_syscall+0x98/0x290 [ 151.013075][ T7029] el0_svc_common+0x13c/0x258 [ 151.013981][ T7029] do_el0_svc+0x5c/0x134 [ 151.014770][ T7029] el0_svc+0x58/0x12c [ 151.015517][ T7029] el0t_64_sync_handler+0x84/0xf0 [ 151.016460][ T7029] el0t_64_sync+0x18c/0x190 [ 151.018456][ T7020] batman_adv: batadv0: Removing interface: syzkaller0 [ 151.200921][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.066643][ T7052] FAULT_INJECTION: forcing a failure. [ 152.066643][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 152.069183][ T7052] CPU: 1 PID: 7052 Comm: syz.1.758 Not tainted syzkaller #0 [ 152.070463][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 152.072205][ T7052] Call trace: [ 152.072777][ T7052] dump_backtrace+0x1c4/0x1f0 [ 152.073603][ T7052] show_stack+0x2c/0x3c [ 152.074343][ T7052] __dump_stack+0x30/0x40 [ 152.075121][ T7052] dump_stack_lvl+0xf4/0x15c [ 152.076019][ T7052] dump_stack+0x1c/0x5c [ 152.076791][ T7052] should_fail_ex+0x3cc/0x524 [ 152.077646][ T7052] __should_failslab+0xc0/0x11c [ 152.078541][ T7052] should_failslab+0x10/0x28 [ 152.079361][ T7052] __kmem_cache_alloc_node+0x7c/0x318 [ 152.080275][ T7052] __kmalloc_node_track_caller+0xb8/0x174 [ 152.081278][ T7052] krealloc+0xa0/0x150 [ 152.082006][ T7052] nf_ct_ext_add+0x164/0x348 [ 152.082817][ T7052] init_conntrack+0x81c/0x10e4 [ 152.083668][ T7052] nf_conntrack_in+0xa78/0x193c [ 152.084526][ T7052] ipv4_conntrack_in+0x28/0x38 [ 152.085395][ T7052] nf_hook_slow+0xc8/0x22c [ 152.086213][ T7052] NF_HOOK+0x1d0/0x36c [ 152.086964][ T7052] ip_rcv+0x7c/0x9c [ 152.087645][ T7052] __netif_receive_skb+0xd0/0x2b0 [ 152.088521][ T7052] netif_receive_skb+0x1e8/0x928 [ 152.089380][ T7052] tun_rx_batched+0x4ac/0x600 [ 152.090195][ T7052] tun_get_user+0x1f70/0x3268 [ 152.091037][ T7052] tun_chr_write_iter+0xfc/0x200 [ 152.091917][ T7052] vfs_write+0x3c8/0x7c8 [ 152.092662][ T7052] ksys_write+0x12c/0x228 [ 152.093432][ T7052] __arm64_sys_write+0x7c/0x90 [ 152.094284][ T7052] invoke_syscall+0x98/0x290 [ 152.095120][ T7052] el0_svc_common+0x13c/0x258 [ 152.095953][ T7052] do_el0_svc+0x5c/0x134 [ 152.096720][ T7052] el0_svc+0x58/0x12c [ 152.097431][ T7052] el0t_64_sync_handler+0x84/0xf0 [ 152.098320][ T7052] el0t_64_sync+0x18c/0x190 [ 152.225865][ T7057] HTB: quantum of class FFF10000 is small. Consider r2q change. [ 152.235295][ T7063] FAULT_INJECTION: forcing a failure. [ 152.235295][ T7063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.238708][ T7063] CPU: 1 PID: 7063 Comm: syz.2.763 Not tainted syzkaller #0 [ 152.239906][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 152.241540][ T7063] Call trace: [ 152.242142][ T7063] dump_backtrace+0x1c4/0x1f0 [ 152.242995][ T7063] show_stack+0x2c/0x3c [ 152.243709][ T7063] __dump_stack+0x30/0x40 [ 152.244494][ T7063] dump_stack_lvl+0xf4/0x15c [ 152.245319][ T7063] dump_stack+0x1c/0x5c [ 152.246039][ T7063] should_fail_ex+0x3cc/0x524 [ 152.246877][ T7063] should_fail+0x14/0x24 [ 152.247639][ T7063] should_fail_usercopy+0x20/0x30 [ 152.248550][ T7063] copy_from_sockptr_offset+0x88/0x1dc [ 152.249528][ T7063] do_ipt_set_ctl+0x75c/0xb84 [ 152.250357][ T7063] nf_setsockopt+0x260/0x280 [ 152.251155][ T7063] ip_setsockopt+0x124/0x134 [ 152.251970][ T7063] tcp_setsockopt+0xcc/0xe8 [ 152.252767][ T7063] sock_common_setsockopt+0xb0/0xcc [ 152.253708][ T7063] __sys_setsockopt+0x2fc/0x50c [ 152.254599][ T7063] __arm64_sys_setsockopt+0xc0/0xdc [ 152.255537][ T7063] invoke_syscall+0x98/0x290 [ 152.256361][ T7063] el0_svc_common+0x13c/0x258 [ 152.257206][ T7063] do_el0_svc+0x5c/0x134 [ 152.257952][ T7063] el0_svc+0x58/0x12c [ 152.258667][ T7063] el0t_64_sync_handler+0x84/0xf0 [ 152.259583][ T7063] el0t_64_sync+0x18c/0x190 [ 152.308368][ T7070] FAULT_INJECTION: forcing a failure. [ 152.308368][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 152.310875][ T7070] CPU: 1 PID: 7070 Comm: syz.4.766 Not tainted syzkaller #0 [ 152.312088][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 152.313914][ T7070] Call trace: [ 152.314510][ T7070] dump_backtrace+0x1c4/0x1f0 [ 152.315357][ T7070] show_stack+0x2c/0x3c [ 152.316155][ T7070] __dump_stack+0x30/0x40 [ 152.316916][ T7070] dump_stack_lvl+0xf4/0x15c [ 152.317751][ T7070] dump_stack+0x1c/0x5c [ 152.318539][ T7070] should_fail_ex+0x3cc/0x524 [ 152.319402][ T7070] __should_failslab+0xc0/0x11c [ 152.320283][ T7070] should_failslab+0x10/0x28 [ 152.321094][ T7070] __kmem_cache_alloc_node+0x7c/0x318 [ 152.322049][ T7070] kmalloc_trace+0x48/0x94 [ 152.322834][ T7070] reuseport_alloc+0x118/0x3fc [ 152.323681][ T7070] __inet_hash+0x598/0xacc [ 152.324485][ T7070] inet_hash+0x70/0x8c [ 152.325201][ T7070] inet_csk_listen_start+0x1e0/0x2d4 [ 152.326110][ T7070] inet_listen+0x29c/0x6a4 [ 152.326868][ T7070] __sys_listen+0x198/0x21c [ 152.327641][ T7070] __arm64_sys_listen+0x5c/0x74 [ 152.328507][ T7070] invoke_syscall+0x98/0x290 [ 152.329301][ T7070] el0_svc_common+0x13c/0x258 [ 152.330126][ T7070] do_el0_svc+0x5c/0x134 [ 152.330873][ T7070] el0_svc+0x58/0x12c [ 152.331595][ T7070] el0t_64_sync_handler+0x84/0xf0 [ 152.332492][ T7070] el0t_64_sync+0x18c/0x190 [ 152.626203][ T7088] loop1: detected capacity change from 0 to 512 [ 152.665822][ T7088] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 152.667439][ T7088] FAT-fs (loop1): Filesystem has been set read-only [ 152.668969][ T7088] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 152.670610][ T7088] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 152.717974][ T7088] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 152.925959][ T7081] fuse: root generation should be zero [ 153.055869][ T4564] net_ratelimit: 13 callbacks suppressed [ 153.055881][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.301542][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.413446][ T7091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.432913][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 153.461497][ T7094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.536136][ T7101] netlink: 220 bytes leftover after parsing attributes in process `syz.2.778'. [ 153.597089][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 153.598353][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 153.599415][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 153.600425][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 153.679404][ T7094] bond2: (slave macvlan14): Opening slave failed [ 153.699780][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 154.889044][ T7128] gadgetfs: bound to dummy_udc driver [ 155.022281][ T7128] loop4: detected capacity change from 0 to 32768 [ 155.027132][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.028775][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.034664][ T7128] (syz.4.788,7128,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "dir_resv_level=0000000E000000000003" or missing value [ 155.041393][ T7128] (syz.4.788,7128,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 155.197329][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.199028][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.241402][ T7139] tipc: Started in network mode [ 155.242532][ T7139] tipc: Node identity 4, cluster identity 4711 [ 155.306863][ T7141] loop1: detected capacity change from 0 to 512 [ 155.367076][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.374040][ T7141] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 155.375518][ T7141] FAT-fs (loop1): Filesystem has been set read-only [ 155.377395][ T7141] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 155.379042][ T7141] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 155.427214][ T7141] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 155.570156][ T7139] tipc: Node number set to 4 [ 156.008176][ T7144] tipc: Enabled bearer , priority 0 [ 156.032644][ T7139] tipc: Disabling bearer [ 156.068350][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.794'. [ 156.115039][ T7147] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 156.171500][ T7153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.181404][ T7153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.201275][ T7153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.384255][ T7162] FAULT_INJECTION: forcing a failure. [ 156.384255][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.389258][ T7163] FAULT_INJECTION: forcing a failure. [ 156.389258][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 156.391218][ T7163] CPU: 1 PID: 7163 Comm: syz.2.799 Not tainted syzkaller #0 [ 156.392323][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.393932][ T7163] Call trace: [ 156.394473][ T7163] dump_backtrace+0x1c4/0x1f0 [ 156.395272][ T7163] show_stack+0x2c/0x3c [ 156.395966][ T7163] __dump_stack+0x30/0x40 [ 156.396724][ T7163] dump_stack_lvl+0xf4/0x15c [ 156.397539][ T7163] dump_stack+0x1c/0x5c [ 156.398284][ T7163] should_fail_ex+0x3cc/0x524 [ 156.399129][ T7163] __should_failslab+0xc0/0x11c [ 156.400017][ T7163] should_failslab+0x10/0x28 [ 156.400886][ T7163] kmem_cache_alloc_node+0x8c/0x344 [ 156.401776][ T7163] __alloc_skb+0x128/0x728 [ 156.402573][ T7163] rtmsg_ifinfo_build_skb+0x90/0x1b4 [ 156.403468][ T7163] unregister_netdevice_many_notify+0xfec/0x1900 [ 156.404564][ T7163] unregister_netdevice_queue+0x2bc/0x310 [ 156.405557][ T7163] __tun_detach+0x55c/0x129c [ 156.406352][ T7163] tun_chr_close+0x118/0x1f4 [ 156.407167][ T7163] __fput+0x1b4/0x7b0 [ 156.407874][ T7163] ____fput+0x20/0x30 [ 156.408575][ T7163] task_work_run+0x1f4/0x280 [ 156.409376][ T7163] do_notify_resume+0x20f8/0x2c84 [ 156.410258][ T7163] el0_svc+0x9c/0x12c [ 156.410973][ T7163] el0t_64_sync_handler+0x84/0xf0 [ 156.411857][ T7163] el0t_64_sync+0x18c/0x190 [ 156.413353][ T7162] CPU: 1 PID: 7162 Comm: syz.1.800 Not tainted syzkaller #0 [ 156.414592][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.416312][ T7162] Call trace: [ 156.416873][ T7162] dump_backtrace+0x1c4/0x1f0 [ 156.417726][ T7162] show_stack+0x2c/0x3c [ 156.418495][ T7162] __dump_stack+0x30/0x40 [ 156.419294][ T7162] dump_stack_lvl+0xf4/0x15c [ 156.420135][ T7162] dump_stack+0x1c/0x5c [ 156.420890][ T7162] should_fail_ex+0x3cc/0x524 [ 156.421710][ T7162] should_fail+0x14/0x24 [ 156.422467][ T7162] should_fail_usercopy+0x20/0x30 [ 156.423358][ T7162] _copy_from_iter+0x190/0xf98 [ 156.424218][ T7162] kcm_sendmsg+0x940/0x1e7c [ 156.425031][ T7162] sock_write_iter+0x268/0x368 [ 156.425882][ T7162] vfs_write+0x3c8/0x7c8 [ 156.426640][ T7162] ksys_write+0x12c/0x228 [ 156.427412][ T7162] __arm64_sys_write+0x7c/0x90 [ 156.428267][ T7162] invoke_syscall+0x98/0x290 [ 156.429083][ T7162] el0_svc_common+0x13c/0x258 [ 156.429907][ T7162] do_el0_svc+0x5c/0x134 [ 156.430664][ T7162] el0_svc+0x58/0x12c [ 156.431366][ T7162] el0t_64_sync_handler+0x84/0xf0 [ 156.432281][ T7162] el0t_64_sync+0x18c/0x190 [ 157.559684][ T7181] FAULT_INJECTION: forcing a failure. [ 157.559684][ T7181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.565571][ T7181] CPU: 1 PID: 7181 Comm: syz.1.806 Not tainted syzkaller #0 [ 157.566915][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 157.568900][ T7181] Call trace: [ 157.569484][ T7181] dump_backtrace+0x1c4/0x1f0 [ 157.570330][ T7181] show_stack+0x2c/0x3c [ 157.571119][ T7181] __dump_stack+0x30/0x40 [ 157.571895][ T7181] dump_stack_lvl+0xf4/0x15c [ 157.572737][ T7181] dump_stack+0x1c/0x5c [ 157.573515][ T7181] should_fail_ex+0x3cc/0x524 [ 157.574392][ T7181] should_fail+0x14/0x24 [ 157.575181][ T7181] should_fail_usercopy+0x20/0x30 [ 157.576122][ T7181] set_fd_set+0x48/0xac [ 157.576882][ T7181] core_sys_select+0x660/0x778 [ 157.577893][ T7181] __arm64_sys_pselect6+0x4b0/0x590 [ 157.578986][ T7181] invoke_syscall+0x98/0x290 [ 157.579934][ T7181] el0_svc_common+0x13c/0x258 [ 157.580892][ T7181] do_el0_svc+0x5c/0x134 [ 157.581741][ T7181] el0_svc+0x58/0x12c [ 157.582520][ T7181] el0t_64_sync_handler+0x84/0xf0 [ 157.583510][ T7181] el0t_64_sync+0x18c/0x190 [ 157.602159][ T7183] FAULT_INJECTION: forcing a failure. [ 157.602159][ T7183] name failslab, interval 1, probability 0, space 0, times 0 [ 157.604779][ T7183] CPU: 1 PID: 7183 Comm: syz.0.807 Not tainted syzkaller #0 [ 157.606038][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 157.607873][ T7183] Call trace: [ 157.608471][ T7183] dump_backtrace+0x1c4/0x1f0 [ 157.609421][ T7183] show_stack+0x2c/0x3c [ 157.610193][ T7183] __dump_stack+0x30/0x40 [ 157.610987][ T7183] dump_stack_lvl+0xf4/0x15c [ 157.611833][ T7183] dump_stack+0x1c/0x5c [ 157.612594][ T7183] should_fail_ex+0x3cc/0x524 [ 157.613423][ T7183] __should_failslab+0xc0/0x11c [ 157.614315][ T7183] should_failslab+0x10/0x28 [ 157.615120][ T7183] __kmem_cache_alloc_node+0x7c/0x318 [ 157.616063][ T7183] __kmalloc+0xc4/0x180 [ 157.616820][ T7183] nsim_fib_event_nb+0x238/0xde0 [ 157.617732][ T7183] atomic_notifier_call_chain+0x178/0x2a4 [ 157.618749][ T7183] call_fib_notifiers+0x44/0x74 [ 157.619613][ T7183] call_fib6_notifiers+0x50/0x80 [ 157.620454][ T7183] fib6_add+0x1628/0x34e8 [ 157.621190][ T7183] ip6_ins_rt+0xc4/0x12c [ 157.621942][ T7183] __ipv6_dev_ac_inc+0x598/0x7e8 [ 157.622783][ T7183] ipv6_sock_ac_join+0x3f8/0x5d8 [ 157.623650][ T7183] do_ipv6_setsockopt+0x1974/0x3174 [ 157.624535][ T7183] ipv6_setsockopt+0x6c/0x1a0 [ 157.625333][ T7183] tcp_setsockopt+0xcc/0xe8 [ 157.626136][ T7183] sock_common_setsockopt+0xb0/0xcc [ 157.627029][ T7183] __sys_setsockopt+0x2fc/0x50c [ 157.627863][ T7183] __arm64_sys_setsockopt+0xc0/0xdc [ 157.628737][ T7183] invoke_syscall+0x98/0x290 [ 157.629533][ T7183] el0_svc_common+0x13c/0x258 [ 157.630372][ T7183] do_el0_svc+0x5c/0x134 [ 157.631131][ T7183] el0_svc+0x58/0x12c [ 157.631840][ T7183] el0t_64_sync_handler+0x84/0xf0 [ 157.632719][ T7183] el0t_64_sync+0x18c/0x190 [ 157.870689][ T7191] loop1: detected capacity change from 0 to 512 [ 157.971319][ T7191] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 157.976784][ T7191] FAT-fs (loop1): Filesystem has been set read-only [ 157.999392][ T7191] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 158.001282][ T7191] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 158.055153][ T7193] loop3: detected capacity change from 0 to 512 [ 158.288019][ T7193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 158.289675][ T7193] FAT-fs (loop3): Filesystem has been set read-only [ 158.291484][ T7193] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 158.293257][ T7193] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 158.361958][ T7193] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 158.398051][ T4560] net_ratelimit: 50 callbacks suppressed [ 158.398065][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.880187][ T7191] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 158.925663][ T7198] FAULT_INJECTION: forcing a failure. [ 158.925663][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 159.027143][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.028768][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.037355][ T7198] CPU: 0 PID: 7198 Comm: syz.2.812 Not tainted syzkaller #0 [ 159.038577][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 159.040238][ T7198] Call trace: [ 159.040781][ T7198] dump_backtrace+0x1c4/0x1f0 [ 159.041574][ T7198] show_stack+0x2c/0x3c [ 159.042255][ T7198] __dump_stack+0x30/0x40 [ 159.042940][ T7198] dump_stack_lvl+0xf4/0x15c [ 159.043681][ T7198] dump_stack+0x1c/0x5c [ 159.044345][ T7198] should_fail_ex+0x3cc/0x524 [ 159.045093][ T7198] __should_failslab+0xc0/0x11c [ 159.045874][ T7198] should_failslab+0x10/0x28 [ 159.046640][ T7198] kmem_cache_alloc+0x88/0x310 [ 159.047463][ T7198] __kernfs_new_node+0xec/0x5fc [ 159.048343][ T7198] kernfs_new_node+0x120/0x230 [ 159.049194][ T7198] __kernfs_create_file+0x60/0x2e0 [ 159.050122][ T7198] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 159.051090][ T7198] internal_create_group+0x3e8/0xb24 [ 159.052014][ T7198] sysfs_create_groups+0x60/0x134 [ 159.052918][ T7198] device_add_attrs+0xdc/0x6f8 [ 159.053783][ T7198] device_add+0x5ac/0xe4c [ 159.054572][ T7198] rfkill_register+0x140/0x89c [ 159.055439][ T7198] hci_register_dev+0x398/0x898 [ 159.056299][ T7198] vhci_create_device+0x34c/0x684 [ 159.057205][ T7198] vhci_write+0x30c/0x3b4 [ 159.057979][ T7198] vfs_write+0x3c8/0x7c8 [ 159.058738][ T7198] ksys_write+0x12c/0x228 [ 159.059521][ T7198] __arm64_sys_write+0x7c/0x90 [ 159.060380][ T7198] invoke_syscall+0x98/0x290 [ 159.061221][ T7198] el0_svc_common+0x13c/0x258 [ 159.062066][ T7198] do_el0_svc+0x5c/0x134 [ 159.062812][ T7198] el0_svc+0x58/0x12c [ 159.063483][ T7198] el0t_64_sync_handler+0x84/0xf0 [ 159.064366][ T7198] el0t_64_sync+0x18c/0x190 [ 159.427701][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.784252][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.027233][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.156591][ T7211] CIFS: Attempting to mount \\127.0.0.1\share [ 160.477789][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.500293][ T7222] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 160.501673][ T7222] overlayfs: failed to set xattr on upper [ 160.502673][ T7222] overlayfs: ...falling back to index=off,metacopy=off. [ 160.995258][ T7211] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 160.999949][ T7211] CIFS: VFS: cifs_mount failed w/return code = -11 [ 161.037304][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.074177][ T7233] TC_ACT_REPEAT abuse ? [ 161.388887][ T7244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.707997][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 161.816510][ T7268] FAULT_INJECTION: forcing a failure. [ 161.816510][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 161.819179][ T7268] CPU: 0 PID: 7268 Comm: syz.4.840 Not tainted syzkaller #0 [ 161.820464][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 161.822288][ T7268] Call trace: [ 161.822869][ T7268] dump_backtrace+0x1c4/0x1f0 [ 161.823716][ T7268] show_stack+0x2c/0x3c [ 161.824454][ T7268] __dump_stack+0x30/0x40 [ 161.825220][ T7268] dump_stack_lvl+0xf4/0x15c [ 161.826038][ T7268] dump_stack+0x1c/0x5c [ 161.826776][ T7268] should_fail_ex+0x3cc/0x524 [ 161.827609][ T7268] __should_failslab+0xc0/0x11c [ 161.828470][ T7268] should_failslab+0x10/0x28 [ 161.829295][ T7268] __kmem_cache_alloc_node+0x7c/0x318 [ 161.830239][ T7268] kmalloc_trace+0x48/0x94 [ 161.830994][ T7268] __hw_addr_add_ex+0x1cc/0x5b0 [ 161.831824][ T7268] dev_mc_add+0x8c/0xf8 [ 161.832535][ T7268] igmp_group_added+0x18c/0x75c [ 161.833415][ T7268] ____ip_mc_inc_group+0x828/0xa50 [ 161.834300][ T7268] __ip_mc_join_group+0x3e0/0x4c4 [ 161.835180][ T7268] ip_mc_join_group_ssm+0x34/0x48 [ 161.836061][ T7268] do_mcast_group_source+0x3b8/0x438 [ 161.836981][ T7268] do_ip_setsockopt+0x1118/0x2464 [ 161.837877][ T7268] ip_setsockopt+0x68/0x134 [ 161.838666][ T7268] sctp_setsockopt+0x150/0x1000 [ 161.839503][ T7268] sock_common_setsockopt+0xb0/0xcc [ 161.840405][ T7268] __sys_setsockopt+0x2fc/0x50c [ 161.841230][ T7268] __arm64_sys_setsockopt+0xc0/0xdc [ 161.842122][ T7268] invoke_syscall+0x98/0x290 [ 161.842899][ T7268] el0_svc_common+0x13c/0x258 [ 161.843714][ T7268] do_el0_svc+0x5c/0x134 [ 161.844468][ T7268] el0_svc+0x58/0x12c [ 161.845182][ T7268] el0t_64_sync_handler+0x84/0xf0 [ 161.846072][ T7268] el0t_64_sync+0x18c/0x190 [ 161.881877][ T7270] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.128189][ T7278] loop1: detected capacity change from 0 to 512 [ 162.142581][ T7278] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 162.144217][ T7278] FAT-fs (loop1): Filesystem has been set read-only [ 162.145578][ T7278] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 162.147098][ T7278] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 162.157332][ T7278] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 163.054552][ T7273] loop2: detected capacity change from 0 to 32768 [ 163.506990][ T4415] net_ratelimit: 30 callbacks suppressed [ 163.507002][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.530208][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 163.530314][ T7285] FAULT_INJECTION: forcing a failure. [ 163.530314][ T7285] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.547259][ T7285] CPU: 0 PID: 7285 Comm: syz.0.845 Not tainted syzkaller #0 [ 163.548619][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 163.550346][ T7285] Call trace: [ 163.550929][ T7285] dump_backtrace+0x1c4/0x1f0 [ 163.551699][ T7285] show_stack+0x2c/0x3c [ 163.552392][ T7285] __dump_stack+0x30/0x40 [ 163.553133][ T7285] dump_stack_lvl+0xf4/0x15c [ 163.553923][ T7285] dump_stack+0x1c/0x5c [ 163.554612][ T7285] should_fail_ex+0x3cc/0x524 [ 163.555374][ T7285] should_fail+0x14/0x24 [ 163.556068][ T7285] get_futex_key+0x96c/0xec0 [ 163.556805][ T7285] futex_lock_pi+0x18c/0x7cc [ 163.557629][ T7285] do_futex+0x2a4/0x340 [ 163.558397][ T7285] __arm64_sys_futex+0x390/0x414 [ 163.559310][ T7285] invoke_syscall+0x98/0x290 [ 163.560150][ T7285] el0_svc_common+0x13c/0x258 [ 163.560998][ T7285] do_el0_svc+0x5c/0x134 [ 163.561782][ T7285] el0_svc+0x58/0x12c [ 163.562518][ T7285] el0t_64_sync_handler+0x84/0xf0 [ 163.563437][ T7285] el0t_64_sync+0x18c/0x190 [ 163.593805][ T7291] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 163.605194][ T7273] XFS (loop2): Mounting V5 Filesystem [ 163.629790][ T7300] loop0: detected capacity change from 0 to 512 [ 163.631537][ T7300] FAT-fs (loop0): Unrecognized mount option "ÿÿÿ01777777777777777777777" or missing value [ 163.657382][ T7273] XFS (loop2): Ending clean mount [ 163.667832][ T7305] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.687714][ T7304] FAULT_INJECTION: forcing a failure. [ 163.687714][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 163.690062][ T7304] CPU: 1 PID: 7304 Comm: syz.1.851 Not tainted syzkaller #0 [ 163.691355][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 163.692305][ T7273] XFS (loop2): Quotacheck needed: Please wait. [ 163.693275][ T7304] Call trace: [ 163.695067][ T7304] dump_backtrace+0x1c4/0x1f0 [ 163.695947][ T7304] show_stack+0x2c/0x3c [ 163.696730][ T7304] __dump_stack+0x30/0x40 [ 163.697538][ T7304] dump_stack_lvl+0xf4/0x15c [ 163.698418][ T7304] dump_stack+0x1c/0x5c [ 163.699226][ T7304] should_fail_ex+0x3cc/0x524 [ 163.700103][ T7304] __should_failslab+0xc0/0x11c [ 163.701046][ T7304] should_failslab+0x10/0x28 [ 163.701999][ T7304] __kmem_cache_alloc_node+0x7c/0x318 [ 163.702983][ T7304] __kmalloc+0xc4/0x180 [ 163.703728][ T7304] efivarfs_callback+0x1b8/0x61c [ 163.704659][ T7304] efivar_init+0x374/0x6b4 [ 163.705497][ T7304] efivarfs_fill_super+0x1dc/0x27c [ 163.706448][ T7304] get_tree_single+0xb8/0x170 [ 163.707284][ T7304] efivarfs_get_tree+0x28/0x38 [ 163.708134][ T7304] vfs_get_tree+0x90/0x278 [ 163.708942][ T7304] do_new_mount+0x228/0x818 [ 163.709769][ T7304] path_mount+0x5ac/0xe6c [ 163.710560][ T7304] __arm64_sys_mount+0x4a0/0x5a0 [ 163.711503][ T7304] invoke_syscall+0x98/0x290 [ 163.712345][ T7304] el0_svc_common+0x13c/0x258 [ 163.713171][ T7304] do_el0_svc+0x5c/0x134 [ 163.713944][ T7304] el0_svc+0x58/0x12c [ 163.714656][ T7304] el0t_64_sync_handler+0x84/0xf0 [ 163.715550][ T7304] el0t_64_sync+0x18c/0x190 [ 163.747299][ T7273] XFS (loop2): Quotacheck: Done. [ 164.087200][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.088970][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.477078][ T7314] audit_log_lost: 10 callbacks suppressed [ 164.477090][ T7314] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 164.480530][ T7314] audit: out of memory in audit_log_start [ 164.503559][ T7316] loop0: detected capacity change from 0 to 128 [ 164.746660][ T7322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.957265][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.117162][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.118840][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.120354][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.594579][ T7330] FAULT_INJECTION: forcing a failure. [ 165.594579][ T7330] name failslab, interval 1, probability 0, space 0, times 0 [ 165.596862][ T7330] CPU: 1 PID: 7330 Comm: syz.0.859 Not tainted syzkaller #0 [ 165.598170][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 165.599986][ T7330] Call trace: [ 165.600586][ T7330] dump_backtrace+0x1c4/0x1f0 [ 165.601442][ T7330] show_stack+0x2c/0x3c [ 165.602215][ T7330] __dump_stack+0x30/0x40 [ 165.602997][ T7330] dump_stack_lvl+0xf4/0x15c [ 165.603978][ T7330] dump_stack+0x1c/0x5c [ 165.604847][ T7330] should_fail_ex+0x3cc/0x524 [ 165.605732][ T7330] __should_failslab+0xc0/0x11c [ 165.606643][ T7330] should_failslab+0x10/0x28 [ 165.607485][ T7330] kmem_cache_alloc+0x88/0x310 [ 165.608344][ T7330] __proc_create+0x30c/0x718 [ 165.609174][ T7330] proc_create_data+0xa0/0x16c [ 165.610041][ T7330] cache_register_net+0x438/0x48c [ 165.610959][ T7330] nfsd_idmap_init+0x164/0x1d4 [ 165.611785][ T7330] nfsd_init_net+0x60/0x1f4 [ 165.612599][ T7330] ops_init+0x2b0/0x53c [ 165.613347][ T7330] setup_net+0x494/0xb6c [ 165.614240][ T7330] copy_net_ns+0x2b8/0x578 [ 165.615149][ T7330] create_new_namespaces+0x30c/0x604 [ 165.616249][ T7330] unshare_nsproxy_namespaces+0x108/0x160 [ 165.617465][ T7330] ksys_unshare+0x3f0/0x70c [ 165.618381][ T7330] __arm64_sys_unshare+0x3c/0x50 [ 165.619381][ T7330] invoke_syscall+0x98/0x290 [ 165.620314][ T7330] el0_svc_common+0x13c/0x258 [ 165.621319][ T7330] do_el0_svc+0x5c/0x134 [ 165.622172][ T7330] el0_svc+0x58/0x12c [ 165.622982][ T7330] el0t_64_sync_handler+0x84/0xf0 [ 165.623993][ T7330] el0t_64_sync+0x18c/0x190 [ 166.157275][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.158925][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.277171][ T4487] net_ratelimit: 8 callbacks suppressed [ 169.277184][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.279922][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.597132][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.317265][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.318837][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.197099][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.367313][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.368897][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.998816][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.000377][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.256540][ T7273] IPVS: You probably need to specify IP address on multicast interface. [ 174.261819][ T7273] IPVS: Error connecting to the multicast addr [ 174.280177][ T4343] XFS (loop2): Unmounting Filesystem [ 174.327791][ T7334] loop1: detected capacity change from 0 to 164 [ 174.390000][ T7334] FAULT_INJECTION: forcing a failure. [ 174.390000][ T7334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.392504][ T7334] CPU: 1 PID: 7334 Comm: syz.1.863 Not tainted syzkaller #0 [ 174.393912][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 174.395757][ T7334] Call trace: [ 174.396360][ T7334] dump_backtrace+0x1c4/0x1f0 [ 174.397211][ T7334] show_stack+0x2c/0x3c [ 174.397934][ T7334] __dump_stack+0x30/0x40 [ 174.398712][ T7334] dump_stack_lvl+0xf4/0x15c [ 174.399523][ T7334] dump_stack+0x1c/0x5c [ 174.400259][ T7334] should_fail_ex+0x3cc/0x524 [ 174.401093][ T7334] should_fail+0x14/0x24 [ 174.401883][ T7334] should_fail_usercopy+0x20/0x30 [ 174.402781][ T7334] copyin+0x2c/0x148 [ 174.403468][ T7334] _copy_from_iter+0x404/0xf98 [ 174.404295][ T7334] netlink_sendmsg+0x614/0x9d8 [ 174.405137][ T7334] ____sys_sendmsg+0x588/0x90c [ 174.405985][ T7334] __sys_sendmsg+0x288/0x374 [ 174.406820][ T7334] __arm64_sys_sendmsg+0x80/0x94 [ 174.407681][ T7334] invoke_syscall+0x98/0x290 [ 174.408503][ T7334] el0_svc_common+0x13c/0x258 [ 174.409345][ T7334] do_el0_svc+0x5c/0x134 [ 174.410088][ T7334] el0_svc+0x58/0x12c [ 174.410804][ T7334] el0t_64_sync_handler+0x84/0xf0 [ 174.411719][ T7334] el0t_64_sync+0x18c/0x190 [ 174.474169][ T7341] net_ratelimit: 4 callbacks suppressed [ 174.474180][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.477298][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.477429][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.479950][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.481733][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.483453][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.484986][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.486506][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.499871][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.501426][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.559153][ T7343] loop3: detected capacity change from 0 to 512 [ 174.572766][ T7343] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 174.574349][ T7343] FAT-fs (loop3): Filesystem has been set read-only [ 174.575569][ T7343] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 174.577189][ T7343] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 174.587341][ T7343] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 174.885898][ T27] audit: type=1326 audit(174.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 174.920142][ T27] audit: type=1326 audit(174.910:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 174.925687][ T27] audit: type=1326 audit(174.910:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 174.963659][ T27] audit: type=1326 audit(174.910:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 175.007929][ T27] audit: type=1326 audit(174.930:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 175.045883][ T27] audit: type=1326 audit(174.930:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 175.085606][ T27] audit: type=1326 audit(174.930:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4179728 code=0x7ffc0000 [ 175.440297][ T7372] device syzkaller1 entered promiscuous mode [ 176.822261][ T4715] Bluetooth: hci5: Frame reassembly failed (-84) [ 177.632246][ T7419] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 177.633467][ T7419] overlayfs: failed to set xattr on upper [ 177.634652][ T7419] overlayfs: ...falling back to index=off,metacopy=off. [ 178.876977][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.877039][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 179.228428][ T7456] loop3: detected capacity change from 0 to 512 [ 179.252749][ T7458] FAULT_INJECTION: forcing a failure. [ 179.252749][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 179.261437][ T7458] CPU: 0 PID: 7458 Comm: syz.2.906 Not tainted syzkaller #0 [ 179.262751][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 179.263031][ T7456] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 179.264541][ T7458] Call trace: [ 179.266755][ T7458] dump_backtrace+0x1c4/0x1f0 [ 179.267675][ T7458] show_stack+0x2c/0x3c [ 179.268485][ T7458] __dump_stack+0x30/0x40 [ 179.269322][ T7458] dump_stack_lvl+0xf4/0x15c [ 179.269655][ T7456] FAT-fs (loop3): Filesystem has been set read-only [ 179.270207][ T7458] dump_stack+0x1c/0x5c [ 179.272297][ T7458] should_fail_ex+0x3cc/0x524 [ 179.273202][ T7458] __should_failslab+0xc0/0x11c [ 179.274013][ T7456] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 179.274131][ T7458] should_failslab+0x10/0x28 [ 179.276406][ T7458] __kmem_cache_alloc_node+0x7c/0x318 [ 179.277420][ T7458] kmalloc_trace+0x48/0x94 [ 179.278256][ T7458] sctp_add_bind_addr+0x9c/0x2e8 [ 179.279197][ T7458] sctp_copy_one_addr+0x2c0/0x33c [ 179.280150][ T7458] sctp_bind_addr_copy+0xa8/0x39c [ 179.281104][ T7458] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 179.282294][ T7458] sctp_sf_do_unexpected_init+0xb04/0x11b4 [ 179.283393][ T7458] sctp_sf_do_5_2_1_siminit+0x50/0x68 [ 179.284418][ T7458] sctp_do_sm+0x1e0/0x49d4 [ 179.285389][ T7458] sctp_assoc_bh_rcv+0x384/0x6a4 [ 179.286439][ T7458] sctp_inq_push+0x1e8/0x224 [ 179.287365][ T7458] sctp_backlog_rcv+0x138/0x348 [ 179.288377][ T7458] __release_sock+0x1b0/0x3b0 [ 179.289363][ T7458] release_sock+0x60/0x1bc [ 179.289917][ T7456] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 179.290179][ T7458] sctp_wait_for_connect+0x2d8/0x5c8 [ 179.292608][ T7458] sctp_sendmsg_to_asoc+0x132c/0x149c [ 179.293597][ T7458] sctp_sendmsg+0x13bc/0x20f4 [ 179.294462][ T7458] inet_sendmsg+0x154/0x27c [ 179.295273][ T7458] ____sys_sendmsg+0x588/0x90c [ 179.296145][ T7458] __sys_sendmsg+0x288/0x374 [ 179.296992][ T7458] __arm64_sys_sendmsg+0x80/0x94 [ 179.297905][ T7458] invoke_syscall+0x98/0x290 [ 179.298774][ T7458] el0_svc_common+0x13c/0x258 [ 179.299615][ T7458] do_el0_svc+0x5c/0x134 [ 179.300391][ T7458] el0_svc+0x58/0x12c [ 179.301124][ T7458] el0t_64_sync_handler+0x84/0xf0 [ 179.302044][ T7458] el0t_64_sync+0x18c/0x190 [ 179.329048][ T7456] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 179.481274][ T7463] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 179.485131][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.487087][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.508496][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.509847][ T7463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.512419][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.513676][ T7463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.526896][ T7463] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.677304][ T4487] net_ratelimit: 48 callbacks suppressed [ 179.677316][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.719308][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.011949][ T7486] loop3: detected capacity change from 0 to 128 [ 181.034093][ T7486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.321111][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 181.357628][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.757275][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.038234][ T7509] loop4: detected capacity change from 0 to 512 [ 182.095588][ T7509] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 182.103335][ T7509] FAT-fs (loop4): Filesystem has been set read-only [ 182.104688][ T7509] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 182.108890][ T7509] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 182.151759][ T7509] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 182.272289][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.277740][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.282975][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.286083][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.536530][ T7517] device syzkaller0 entered promiscuous mode [ 182.636979][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.822913][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.654049][ T7523] blk-mq: reduced tag depth (128 -> 64) [ 183.936526][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.372133][ T7541] input: syz1 as /devices/virtual/input/input4 [ 184.957389][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.357082][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.583369][ T7555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.585252][ T7555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.587361][ T7555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.590610][ T7555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.594328][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.607179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.838344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.997429][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.440176][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.449316][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.517054][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 189.522267][ T7579] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 189.523545][ T7579] overlayfs: failed to set xattr on upper [ 189.524612][ T7579] overlayfs: ...falling back to index=off,metacopy=off. [ 190.317172][ T4560] net_ratelimit: 8 callbacks suppressed [ 190.317185][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.357338][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.447133][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.317126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.407255][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.477298][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.479936][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.437817][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.480812][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.482378][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.517320][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.824565][ T7611] FAULT_INJECTION: forcing a failure. [ 195.824565][ T7611] name fail_futex, interval 1, probability 0, space 0, times 0 [ 195.827410][ T7611] CPU: 0 PID: 7611 Comm: syz.2.951 Not tainted syzkaller #0 [ 195.828675][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 195.830457][ T7611] Call trace: [ 195.831028][ T7611] dump_backtrace+0x1c4/0x1f0 [ 195.831882][ T7611] show_stack+0x2c/0x3c [ 195.832650][ T7611] __dump_stack+0x30/0x40 [ 195.833453][ T7611] dump_stack_lvl+0xf4/0x15c [ 195.834263][ T7611] dump_stack+0x1c/0x5c [ 195.834991][ T7611] should_fail_ex+0x3cc/0x524 [ 195.835810][ T7611] should_fail+0x14/0x24 [ 195.836539][ T7611] get_futex_key+0x904/0xec0 [ 195.837347][ T7611] futex_wake+0x10c/0x458 [ 195.838123][ T7611] do_futex+0x2c4/0x340 [ 195.838900][ T7611] __arm64_sys_futex+0x390/0x414 [ 195.839800][ T7611] invoke_syscall+0x98/0x290 [ 195.840618][ T7611] el0_svc_common+0x13c/0x258 [ 195.841477][ T7611] do_el0_svc+0x5c/0x134 [ 195.842235][ T7611] el0_svc+0x58/0x12c [ 195.842929][ T7611] el0t_64_sync_handler+0x84/0xf0 [ 195.843804][ T7611] el0t_64_sync+0x18c/0x190 [ 195.845690][ T7612] process 'syz.4.950' launched './file0' with NULL argv: empty string added [ 195.950024][ T7619] binder: 7618:7619 tried to acquire reference to desc 0, got 1 instead [ 195.954306][ T4564] binder: release 7618:7619 transaction 5 out, still active [ 195.956321][ T4564] binder: undelivered TRANSACTION_COMPLETE [ 195.967476][ T4564] binder: send failed reply for transaction 5, target dead [ 196.079334][ T7631] binder: 7630:7631 tried to acquire reference to desc 0, got 1 instead [ 196.081223][ T7631] binder: 7630:7631 ioctl c0306201 20000b00 returned -14 [ 196.083118][ T7631] binder: 7630:7631 got transaction with invalid offsets size, 2 [ 196.084815][ T7631] binder: 7630:7631 transaction call to 7630:0 failed 10/29201/-22, size 96-2 line 3295 [ 196.088352][ T4564] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.333531][ T7642] FAULT_INJECTION: forcing a failure. [ 196.333531][ T7642] name failslab, interval 1, probability 0, space 0, times 0 [ 196.336171][ T7642] CPU: 1 PID: 7642 Comm: syz.1.962 Not tainted syzkaller #0 [ 196.337557][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 196.339457][ T7642] Call trace: [ 196.340098][ T7642] dump_backtrace+0x1c4/0x1f0 [ 196.340970][ T7642] show_stack+0x2c/0x3c [ 196.341739][ T7642] __dump_stack+0x30/0x40 [ 196.342542][ T7642] dump_stack_lvl+0xf4/0x15c [ 196.343384][ T7642] dump_stack+0x1c/0x5c [ 196.344171][ T7642] should_fail_ex+0x3cc/0x524 [ 196.345038][ T7642] __should_failslab+0xc0/0x11c [ 196.345951][ T7642] should_failslab+0x10/0x28 [ 196.346777][ T7642] kmem_cache_alloc+0x88/0x310 [ 196.347618][ T7642] __kernfs_new_node+0xec/0x5fc [ 196.348473][ T7642] kernfs_new_node+0x120/0x230 [ 196.349325][ T7642] __kernfs_create_file+0x60/0x2e0 [ 196.350407][ T7642] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 196.351426][ T7642] sysfs_create_file_ns+0x10c/0x19c [ 196.352414][ T7642] class_create_file_ns+0x60/0x80 [ 196.353398][ T7642] netdev_class_create_file_ns+0x30/0x40 [ 196.354440][ T7642] bond_create_sysfs+0x7c/0xfc [ 196.355308][ T7642] bond_net_init+0x9c/0xb4 [ 196.356092][ T7642] ops_init+0x2b0/0x53c [ 196.356848][ T7642] setup_net+0x494/0xb6c [ 196.357631][ T7642] copy_net_ns+0x2b8/0x578 [ 196.358408][ T7642] create_new_namespaces+0x30c/0x604 [ 196.359341][ T7642] unshare_nsproxy_namespaces+0x108/0x160 [ 196.360307][ T7642] ksys_unshare+0x3f0/0x70c [ 196.361098][ T7642] __arm64_sys_unshare+0x3c/0x50 [ 196.361999][ T7642] invoke_syscall+0x98/0x290 [ 196.362795][ T7642] el0_svc_common+0x13c/0x258 [ 196.363623][ T7642] do_el0_svc+0x5c/0x134 [ 196.364368][ T7642] el0_svc+0x58/0x12c [ 196.365086][ T7642] el0t_64_sync_handler+0x84/0xf0 [ 196.365977][ T7642] el0t_64_sync+0x18c/0x190 [ 196.372124][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.422496][ T7642] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.660718][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.749874][ T7651] FAULT_INJECTION: forcing a failure. [ 196.749874][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 196.752678][ T7651] CPU: 1 PID: 7651 Comm: syz.1.964 Not tainted syzkaller #0 [ 196.753987][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 196.755730][ T7651] Call trace: [ 196.756180][ T7649] device syzkaller0 entered promiscuous mode [ 196.756307][ T7651] dump_backtrace+0x1c4/0x1f0 [ 196.758237][ T7651] show_stack+0x2c/0x3c [ 196.758992][ T7651] __dump_stack+0x30/0x40 [ 196.759774][ T7651] dump_stack_lvl+0xf4/0x15c [ 196.760600][ T7651] dump_stack+0x1c/0x5c [ 196.761334][ T7651] should_fail_ex+0x3cc/0x524 [ 196.762174][ T7651] __should_failslab+0xc0/0x11c [ 196.763051][ T7651] should_failslab+0x10/0x28 [ 196.763905][ T7651] __kmem_cache_alloc_node+0x7c/0x318 [ 196.764888][ T7651] kmalloc_trace+0x48/0x94 [ 196.765656][ T7651] raw_ioctl+0x1594/0x326c [ 196.766459][ T7651] __arm64_sys_ioctl+0x14c/0x1c8 [ 196.767342][ T7651] invoke_syscall+0x98/0x290 [ 196.768170][ T7651] el0_svc_common+0x13c/0x258 [ 196.769046][ T7651] do_el0_svc+0x5c/0x134 [ 196.769828][ T7651] el0_svc+0x58/0x12c [ 196.770554][ T7651] el0t_64_sync_handler+0x84/0xf0 [ 196.771459][ T7651] el0t_64_sync+0x18c/0x190 [ 196.778946][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.780687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.782326][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.785528][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.787311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.789335][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.808780][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.189061][ C0] vcan0: j1939_tp_rxtimer: 0x000000006c3b8ba5: rx timeout, send abort [ 197.687557][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b65d43bc: rx timeout, send abort [ 197.691699][ C0] vcan0: j1939_tp_rxtimer: 0x000000006c3b8ba5: abort rx timeout. Force session deactivation [ 198.192398][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b65d43bc: abort rx timeout. Force session deactivation [ 199.126325][ T7684] loop2: detected capacity change from 0 to 512 [ 199.150329][ T7684] FAT-fs (loop2): Directory bread(block 199916) failed [ 199.151605][ T7684] FAT-fs (loop2): Directory bread(block 199917) failed [ 199.152786][ T7684] FAT-fs (loop2): Directory bread(block 199918) failed [ 199.153996][ T7684] FAT-fs (loop2): Directory bread(block 199919) failed [ 199.155315][ T7684] FAT-fs (loop2): Directory bread(block 199920) failed [ 199.156892][ T7684] FAT-fs (loop2): Directory bread(block 199921) failed [ 199.159733][ T7684] FAT-fs (loop2): Directory bread(block 199922) failed [ 199.161048][ T7684] FAT-fs (loop2): Directory bread(block 199923) failed [ 199.600460][ T7697] loop2: detected capacity change from 0 to 512 [ 199.611685][ T7698] loop3: detected capacity change from 0 to 512 [ 199.620264][ T7697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.676019][ T7697] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.977: invalid indirect mapped block 4294967295 (level 1) [ 199.700669][ T7697] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.977: invalid indirect mapped block 4294967295 (level 1) [ 199.714177][ T7697] EXT4-fs (loop2): 2 truncates cleaned up [ 199.725199][ T7697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.798787][ T7698] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 199.805728][ T7698] FAT-fs (loop3): Filesystem has been set read-only [ 199.807207][ T7698] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 199.808733][ T7698] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 199.822036][ T7698] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 200.557197][ T4415] net_ratelimit: 45 callbacks suppressed [ 200.557210][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.807376][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.874503][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.876127][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.880468][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.886377][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.888672][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.891521][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.893055][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.757049][ T7701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 201.847254][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.927090][ T1519] net_ratelimit: 5 callbacks suppressed [ 205.927103][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.007123][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.637120][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.037178][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.032880][ T7695] device geneve2 entered promiscuous mode [ 208.036148][ T7714] rxe_eth0 speed is unknown, defaulting to 1000 [ 208.050933][ T4343] EXT4-fs (loop2): unmounting filesystem. [ 208.077168][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.192277][ T7727] FAULT_INJECTION: forcing a failure. [ 208.192277][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 208.195134][ T7727] CPU: 0 PID: 7727 Comm: syz.1.983 Not tainted syzkaller #0 [ 208.196511][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 208.198467][ T7727] Call trace: [ 208.199072][ T7727] dump_backtrace+0x1c4/0x1f0 [ 208.199939][ T7727] show_stack+0x2c/0x3c [ 208.200684][ T7727] __dump_stack+0x30/0x40 [ 208.201461][ T7727] dump_stack_lvl+0xf4/0x15c [ 208.202336][ T7727] dump_stack+0x1c/0x5c [ 208.203244][ T7727] should_fail_ex+0x3cc/0x524 [ 208.204188][ T7727] __should_failslab+0xc0/0x11c [ 208.205171][ T7727] should_failslab+0x10/0x28 [ 208.206098][ T7727] __kmem_cache_alloc_node+0x7c/0x318 [ 208.207165][ T7727] kmalloc_trace+0x48/0x94 [ 208.208012][ T7727] percpu_ref_init+0xc8/0x2f0 [ 208.208870][ T7727] cgroup_apply_control_enable+0x39c/0x9e0 [ 208.209983][ T7727] cgroup_mkdir+0x964/0xcf8 [ 208.210846][ T7727] kernfs_iop_mkdir+0x118/0x164 [ 208.211743][ T7727] vfs_mkdir+0x314/0x4d8 [ 208.212538][ T7727] do_mkdirat+0x1b8/0x3ec [ 208.213340][ T7727] __arm64_sys_mkdirat+0x90/0xa8 [ 208.214259][ T7727] invoke_syscall+0x98/0x290 [ 208.215114][ T7727] el0_svc_common+0x13c/0x258 [ 208.215992][ T7727] do_el0_svc+0x5c/0x134 [ 208.216785][ T7727] el0_svc+0x58/0x12c [ 208.217506][ T7727] el0t_64_sync_handler+0x84/0xf0 [ 208.218455][ T7727] el0t_64_sync+0x18c/0x190 [ 208.421975][ C1] vcan0: j1939_tp_rxtimer: 0x000000005e55eb7a: rx timeout, send abort [ 208.922022][ C1] vcan0: j1939_tp_rxtimer: 0x000000007ddd13bd: rx timeout, send abort [ 208.923556][ C1] vcan0: j1939_tp_rxtimer: 0x000000005e55eb7a: abort rx timeout. Force session deactivation [ 209.049836][ T7732] loop1: detected capacity change from 0 to 512 [ 209.055697][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.062856][ T7732] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 209.064403][ T7732] FAT-fs (loop1): Filesystem has been set read-only [ 209.065744][ T7732] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 209.067223][ T7732] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 209.077555][ T7732] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 209.127617][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.162722][ T7741] FAULT_INJECTION: forcing a failure. [ 209.162722][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 209.165051][ T7741] CPU: 0 PID: 7741 Comm: syz.0.988 Not tainted syzkaller #0 [ 209.166245][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 209.167940][ T7741] Call trace: [ 209.168525][ T7741] dump_backtrace+0x1c4/0x1f0 [ 209.169357][ T7741] show_stack+0x2c/0x3c [ 209.170083][ T7741] __dump_stack+0x30/0x40 [ 209.170861][ T7741] dump_stack_lvl+0xf4/0x15c [ 209.171679][ T7741] dump_stack+0x1c/0x5c [ 209.172403][ T7741] should_fail_ex+0x3cc/0x524 [ 209.173205][ T7741] __should_failslab+0xc0/0x11c [ 209.174047][ T7741] should_failslab+0x10/0x28 [ 209.174828][ T7741] __kmem_cache_alloc_node+0x7c/0x318 [ 209.175768][ T7741] __kmalloc+0xc4/0x180 [ 209.176514][ T7741] mpi_resize+0x80/0x1ac [ 209.177269][ T7741] mpi_powm+0x62c/0x13cc [ 209.178079][ T7741] rsa_enc+0x1e8/0x340 [ 209.178838][ T7741] pkcs1pad_verify+0x3ac/0x5a8 [ 209.179715][ T7741] public_key_verify_signature+0x720/0xb30 [ 209.180773][ T7741] x509_check_for_self_signed+0x2dc/0x3c0 [ 209.181850][ T7741] x509_cert_parse+0x4d8/0x6e0 [ 209.182801][ T7741] x509_key_preparse+0x74/0x5c8 [ 209.183740][ T7741] asymmetric_key_preparse+0xcc/0x17c [ 209.184759][ T7741] key_create_or_update+0x360/0x86c [ 209.185753][ T7741] __arm64_sys_add_key+0x40c/0x520 [ 209.186694][ T7741] invoke_syscall+0x98/0x290 [ 209.187514][ T7741] el0_svc_common+0x13c/0x258 [ 209.188332][ T7741] do_el0_svc+0x5c/0x134 [ 209.189088][ T7741] el0_svc+0x58/0x12c [ 209.189815][ T7741] el0t_64_sync_handler+0x84/0xf0 [ 209.190726][ T7741] el0t_64_sync+0x18c/0x190 [ 209.209518][ T7737] loop1: detected capacity change from 0 to 512 [ 209.229828][ T7737] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 209.231349][ T7737] FAT-fs (loop1): Filesystem has been set read-only [ 209.232589][ T7737] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 209.234141][ T7737] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 209.244422][ T7737] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 209.423547][ C1] vcan0: j1939_tp_rxtimer: 0x000000007ddd13bd: abort rx timeout. Force session deactivation [ 210.018353][ T7748] binder: 7747:7748 tried to acquire reference to desc 0, got 1 instead [ 210.055266][ T7748] binder: 7747:7748 got transaction to invalid handle, 3 [ 210.056866][ T7748] binder: 7748:7747 cannot find target node [ 210.074588][ T7748] binder: 7747:7748 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3063 [ 210.097407][ T4560] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.134238][ T7753] TC_ACT_REPEAT abuse ? [ 210.330979][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.334078][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.365971][ T7770] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 210.398834][ T7770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.407079][ T7777] FAULT_INJECTION: forcing a failure. [ 210.407079][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 210.410851][ T7777] CPU: 0 PID: 7777 Comm: syz.0.998 Not tainted syzkaller #0 [ 210.411376][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 210.412132][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 210.415491][ T7777] Call trace: [ 210.416063][ T7777] dump_backtrace+0x1c4/0x1f0 [ 210.417064][ T7777] show_stack+0x2c/0x3c [ 210.417951][ T7777] __dump_stack+0x30/0x40 [ 210.418834][ T7777] dump_stack_lvl+0xf4/0x15c [ 210.419768][ T7777] dump_stack+0x1c/0x5c [ 210.420618][ T7777] should_fail_ex+0x3cc/0x524 [ 210.421502][ T7777] __should_failslab+0xc0/0x11c [ 210.422382][ T7777] should_failslab+0x10/0x28 [ 210.423199][ T7777] __kmem_cache_alloc_node+0x7c/0x318 [ 210.424156][ T7777] __kmalloc+0xc4/0x180 [ 210.424928][ T7777] afs_lookup_cell+0x4bc/0x1174 [ 210.425807][ T7777] afs_cell_init+0x78/0x2ec [ 210.426630][ T7777] afs_proc_rootcell_write+0x100/0x148 [ 210.427618][ T7777] proc_simple_write+0x10c/0x14c [ 210.428497][ T7777] proc_reg_write+0x184/0x2d4 [ 210.429345][ T7777] vfs_write+0x2a8/0x7c8 [ 210.430109][ T7777] ksys_write+0x12c/0x228 [ 210.430905][ T7777] __arm64_sys_write+0x7c/0x90 [ 210.431749][ T7777] invoke_syscall+0x98/0x290 [ 210.432546][ T7777] el0_svc_common+0x13c/0x258 [ 210.433405][ T7777] do_el0_svc+0x5c/0x134 [ 210.434181][ T7777] el0_svc+0x58/0x12c [ 210.434887][ T7777] el0t_64_sync_handler+0x84/0xf0 [ 210.435828][ T7777] el0t_64_sync+0x18c/0x190 [ 210.440874][ T7774] bond2: (slave veth3): Enslaving as an active interface with a down link [ 210.499180][ T7783] loop0: detected capacity change from 0 to 3904 [ 210.534614][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 210.540787][ T7781] device bond2 entered promiscuous mode [ 210.543813][ T7781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.549122][ T7770] bond0: (slave dummy0): Releasing backup interface [ 210.550315][ T7783] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 210.554104][ T7783] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 210.555390][ T7783] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 210.560200][ T7783] loop0: [ 210.599422][ T7770] bond2: (slave dummy0): making interface the new active one [ 210.601328][ T7770] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 210.607207][ T7774] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 210.608667][ T7774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.996'. [ 210.610163][ T7774] device dummy0 entered promiscuous mode [ 210.625270][ T7774] bond2: (slave dummy0): Releasing active interface [ 210.637477][ T7788] loop1: detected capacity change from 0 to 1024 [ 210.866868][ T7788] hfsplus: request for non-existent node 33554434 in B*Tree [ 210.869196][ T7788] hfsplus: request for non-existent node 33554434 in B*Tree [ 210.934872][ T7788] hfsplus: request for non-existent node 33554434 in B*Tree [ 210.936583][ T7788] hfsplus: request for non-existent node 33554434 in B*Tree [ 210.938543][ T7788] hfsplus: request for non-existent node 33554434 in B*Tree [ 210.939904][ T7788] hfsplus: request for non-existent node 33554434 in B*Tree [ 210.965673][ T7796] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.048145][ T4674] hfsplus: request for non-existent node 33554434 in B*Tree [ 211.049805][ T4674] hfsplus: request for non-existent node 33554434 in B*Tree [ 211.477040][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 211.484983][ T4564] net_ratelimit: 1 callbacks suppressed [ 211.484993][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.627541][ T7819] binder: 7818:7819 ioctl c0306201 20000240 returned -14 [ 211.632631][ T7819] binder: 7818:7819 tried to acquire reference to desc 0, got 1 instead [ 211.634861][ T7819] binder: 7818:7819 BC_FREE_BUFFER u0000000000000000 no match [ 211.636867][ T4550] binder: release 7818:7819 transaction 20 out, still active [ 211.638673][ T4550] binder: undelivered TRANSACTION_COMPLETE [ 211.646635][ T4550] binder: send failed reply for transaction 20, target dead [ 211.698597][ T7824] binder: 7822:7824 ioctl c0306201 20000180 returned -14 [ 211.702716][ T7824] binder: 7822:7824 tried to acquire reference to desc 0, got 1 instead [ 211.704704][ T7824] binder: 7822:7824 got reply transaction with bad transaction stack, transaction 25 has target 7822:0 [ 211.712249][ T7824] binder: 7822:7824 transaction reply to 0:0 failed 26/29201/-71, size 0-0 line 2979 [ 211.715834][ T4564] binder: release 7822:7824 transaction 25 out, still active [ 211.724556][ T4564] binder: send failed reply for transaction 25, target dead [ 211.918943][ T7840] loop2: detected capacity change from 0 to 512 [ 211.920713][ T7842] loop0: detected capacity change from 0 to 8192 [ 211.927557][ T7840] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 211.929058][ T7840] FAT-fs (loop2): Filesystem has been set read-only [ 211.930338][ T7840] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 211.931802][ T7840] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 211.942627][ T7840] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 211.959244][ T7842] loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 211.971554][ T7842] loop0: p3 start 3238002692 is beyond EOD, truncated [ 212.110575][ T7852] loop3: detected capacity change from 0 to 8192 [ 212.138369][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 212.139996][ T7852] syz.3.1020: attempt to access beyond end of device [ 212.139996][ T7852] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.143155][ T7852] Buffer I/O error on dev loop3, logical block 57847, async page read [ 212.143483][ T7861] capability: warning: `syz.0.1019' uses deprecated v2 capabilities in a way that may be insecure [ 212.149945][ T7852] syz.3.1020: attempt to access beyond end of device [ 212.149945][ T7852] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.155995][ T7852] Buffer I/O error on dev loop3, logical block 57847, async page read [ 212.169719][ T7852] syz.3.1020: attempt to access beyond end of device [ 212.169719][ T7852] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.179448][ T7852] Buffer I/O error on dev loop3, logical block 57847, async page read [ 212.184428][ T7852] syz.3.1020: attempt to access beyond end of device [ 212.184428][ T7852] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.192115][ T7852] Buffer I/O error on dev loop3, logical block 57847, async page read [ 212.270317][ T7870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.331900][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1022'. [ 212.823234][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.980531][ T7911] binder: 7910:7911 tried to acquire reference to desc 0, got 1 instead [ 213.005510][ T7911] binder: 7910:7911 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 213.015059][ T7911] binder: 7911 RLIMIT_NICE not set [ 213.016111][ T7911] binder: 7911 RLIMIT_NICE not set [ 213.020472][ T7911] binder_alloc: 7910: binder_alloc_buf, no vma [ 213.021831][ T7911] binder: cannot allocate buffer: vma cleared, target dead or dying [ 213.100182][ T7913] loop1: detected capacity change from 0 to 512 [ 213.110841][ T7913] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 213.112441][ T7913] FAT-fs (loop1): Filesystem has been set read-only [ 213.113834][ T7913] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 213.115316][ T7913] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 213.125664][ T7913] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 213.251221][ T7926] FAULT_INJECTION: forcing a failure. [ 213.251221][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 213.261266][ T7926] CPU: 1 PID: 7926 Comm: syz.2.1028 Not tainted syzkaller #0 [ 213.262628][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 213.264254][ T7926] Call trace: [ 213.264806][ T7926] dump_backtrace+0x1c4/0x1f0 [ 213.265672][ T7926] show_stack+0x2c/0x3c [ 213.266436][ T7926] __dump_stack+0x30/0x40 [ 213.267249][ T7926] dump_stack_lvl+0xf4/0x15c [ 213.268060][ T7926] dump_stack+0x1c/0x5c [ 213.268806][ T7926] should_fail_ex+0x3cc/0x524 [ 213.269655][ T7926] __should_failslab+0xc0/0x11c [ 213.270518][ T7926] should_failslab+0x10/0x28 [ 213.271336][ T7926] kmem_cache_alloc+0x88/0x310 [ 213.272170][ T7926] __kernfs_new_node+0xec/0x5fc [ 213.273027][ T7926] kernfs_new_node+0x120/0x230 [ 213.273850][ T7926] __kernfs_create_file+0x60/0x2e0 [ 213.274727][ T7926] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 213.275656][ T7926] internal_create_group+0x3e8/0xb24 [ 213.276586][ T7926] sysfs_create_groups+0x60/0x134 [ 213.277463][ T7926] kobject_add_internal+0x5e4/0xb18 [ 213.278357][ T7926] kobject_add+0x144/0x20c [ 213.279109][ T7926] blk_register_queue+0x84/0x334 [ 213.279954][ T7926] device_add_disk+0x53c/0xe04 [ 213.280775][ T7926] md_alloc+0x6a4/0xb3c [ 213.281495][ T7926] add_named_array+0x210/0x3f0 [ 213.282305][ T7926] param_attr_store+0x1cc/0x2ac [ 213.283166][ T7926] module_attr_store+0x6c/0x94 [ 213.284014][ T7926] sysfs_kf_write+0x1f8/0x274 [ 213.284828][ T7926] kernfs_fop_write_iter+0x390/0x4b4 [ 213.285732][ T7926] vfs_write+0x3c8/0x7c8 [ 213.286473][ T7926] ksys_write+0x12c/0x228 [ 213.287260][ T7926] __arm64_sys_write+0x7c/0x90 [ 213.288128][ T7926] invoke_syscall+0x98/0x290 [ 213.288969][ T7926] el0_svc_common+0x13c/0x258 [ 213.289827][ T7926] do_el0_svc+0x5c/0x134 [ 213.290592][ T7926] el0_svc+0x58/0x12c [ 213.291281][ T7926] el0t_64_sync_handler+0x84/0xf0 [ 213.292143][ T7926] el0t_64_sync+0x18c/0x190 [ 213.330185][ T7926] kobject_add_internal failed for queue (error: -12 parent: md_syzc2) [ 213.357406][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.597475][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.608322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.300347][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.301985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.313965][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.316591][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.469263][ T7953] loop1: detected capacity change from 0 to 512 [ 214.477065][ T7953] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 214.478582][ T7953] FAT-fs (loop1): Filesystem has been set read-only [ 214.479945][ T7953] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 214.481425][ T7953] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 214.491744][ T7953] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 216.060095][ T7960] loop2: detected capacity change from 0 to 512 [ 216.079299][ T7960] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 216.081062][ T7960] FAT-fs (loop2): Filesystem has been set read-only [ 216.082338][ T7960] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 216.083781][ T7960] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 216.110214][ T7960] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 216.150457][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 216.225905][ T7922] udevd[7922]: inotify_add_watch(7, /dev/loop0p10, 10) failed: No such file or directory [ 216.235177][ T7921] udevd[7921]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 216.253239][ T7756] udevd[7756]: inotify_add_watch(7, /dev/loop0p17, 10) failed: No such file or directory [ 216.259174][ T7927] udevd[7927]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 216.265131][ T7919] udevd[7919]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 216.278504][ T7928] udevd[7928]: inotify_add_watch(7, /dev/loop0p12, 10) failed: No such file or directory [ 216.281164][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory [ 216.289434][ T7929] udevd[7929]: inotify_add_watch(7, /dev/loop0p13, 10) failed: No such file or directory [ 216.291807][ T7920] udevd[7920]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 216.295089][ T7969] FAULT_INJECTION: forcing a failure. [ 216.295089][ T7969] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.298309][ T7969] CPU: 0 PID: 7969 Comm: syz.3.1044 Not tainted syzkaller #0 [ 216.299625][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 216.301444][ T7969] Call trace: [ 216.302061][ T7969] dump_backtrace+0x1c4/0x1f0 [ 216.303015][ T7969] show_stack+0x2c/0x3c [ 216.303720][ T7969] __dump_stack+0x30/0x40 [ 216.304474][ T7969] dump_stack_lvl+0xf4/0x15c [ 216.305305][ T7969] dump_stack+0x1c/0x5c [ 216.306018][ T7969] should_fail_ex+0x3cc/0x524 [ 216.306868][ T7969] should_fail+0x14/0x24 [ 216.307606][ T7969] get_futex_key+0x904/0xec0 [ 216.308424][ T7969] futex_wait_setup+0xbc/0x320 [ 216.309289][ T7969] futex_wait+0x178/0x488 [ 216.310091][ T7969] do_futex+0x2e8/0x340 [ 216.310873][ T7969] __arm64_sys_futex+0x390/0x414 [ 216.311784][ T7969] invoke_syscall+0x98/0x290 [ 216.312608][ T7969] el0_svc_common+0x13c/0x258 [ 216.313462][ T7969] do_el0_svc+0x5c/0x134 [ 216.314221][ T7969] el0_svc+0x58/0x12c [ 216.314924][ T7969] el0t_64_sync_handler+0x84/0xf0 [ 216.315786][ T7969] el0t_64_sync+0x18c/0x190 [ 216.327616][ T7932] udevd[7932]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory [ 216.629638][ T4415] net_ratelimit: 8 callbacks suppressed [ 216.629649][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.103837][ T7985] binder: 7984:7985 tried to acquire reference to desc 0, got 1 instead [ 217.110345][ T7985] binder: 7984:7985 got transaction with invalid parent offset or type [ 217.116321][ T7985] binder_debug: 6 callbacks suppressed [ 217.116337][ T7985] binder: 7985:7984 failed to fixup parent [ 217.117598][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.132730][ T7985] binder: 7984:7985 transaction call to 7984:0 failed 43/29201/-22, size 104-24 line 3558 [ 217.143017][ T4550] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.185756][ T7988] bridge0: port 3(syz_tun) entered blocking state [ 217.190524][ T7988] bridge0: port 3(syz_tun) entered disabled state [ 217.194279][ T7988] device syz_tun entered promiscuous mode [ 217.196828][ T7988] bridge0: port 3(syz_tun) entered blocking state [ 217.198177][ T7988] bridge0: port 3(syz_tun) entered forwarding state [ 217.246530][ T7988] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 217.262881][ T7988] bridge0: port 3(syz_tun) entered disabled state [ 217.274337][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.276797][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.413328][ T7994] TC_ACT_REPEAT abuse ? [ 217.949974][ T8010] loop2: detected capacity change from 0 to 512 [ 217.958155][ T8010] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 217.959743][ T8010] FAT-fs (loop2): Filesystem has been set read-only [ 217.961074][ T8010] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 217.962453][ T8010] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 217.972656][ T8010] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 218.159303][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.519785][ T8018] loop4: detected capacity change from 0 to 512 [ 218.565126][ T8018] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 218.566708][ T8018] FAT-fs (loop4): Filesystem has been set read-only [ 218.568176][ T8018] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 218.569669][ T8018] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 218.580045][ T8018] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 219.197676][ T4674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.359066][ T8028] loop2: detected capacity change from 0 to 512 [ 219.366485][ T8028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 219.368714][ T8028] FAT-fs (loop2): Filesystem has been set read-only [ 219.370045][ T8028] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 219.371537][ T8028] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 219.381832][ T8028] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 219.524165][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'. [ 219.695747][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.910380][ T8036] TC_ACT_REPEAT abuse ? [ 219.997509][ T4660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.286654][ T8045] loop1: detected capacity change from 0 to 512 [ 220.304783][ T8045] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 220.306386][ T8045] FAT-fs (loop1): Filesystem has been set read-only [ 220.307803][ T8045] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 220.309350][ T8045] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 220.319643][ T8045] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 221.016057][ T8055] loop3: detected capacity change from 0 to 512 [ 221.025009][ T8055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 221.026673][ T8055] FAT-fs (loop3): Filesystem has been set read-only [ 221.028178][ T8055] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 221.029742][ T8055] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 221.040006][ T8055] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 222.789191][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.826167][ T8087] loop1: detected capacity change from 0 to 512 [ 222.855734][ T8087] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 222.857454][ T8087] FAT-fs (loop1): Filesystem has been set read-only [ 222.858737][ T8087] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 222.860222][ T8087] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 222.870617][ T8087] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 222.881085][ T8075] device syzkaller0 entered promiscuous mode [ 224.238700][ T8100] FAULT_INJECTION: forcing a failure. [ 224.238700][ T8100] name failslab, interval 1, probability 0, space 0, times 0 [ 224.241235][ T8100] CPU: 0 PID: 8100 Comm: syz.2.1080 Not tainted syzkaller #0 [ 224.242517][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 224.244326][ T8100] Call trace: [ 224.244960][ T8100] dump_backtrace+0x1c4/0x1f0 [ 224.245871][ T8100] show_stack+0x2c/0x3c [ 224.246672][ T8100] __dump_stack+0x30/0x40 [ 224.247533][ T8100] dump_stack_lvl+0xf4/0x15c [ 224.248406][ T8100] dump_stack+0x1c/0x5c [ 224.249214][ T8100] should_fail_ex+0x3cc/0x524 [ 224.250103][ T8100] __should_failslab+0xc0/0x11c [ 224.251021][ T8100] should_failslab+0x10/0x28 [ 224.251927][ T8100] kmem_cache_alloc+0x88/0x310 [ 224.252824][ T8100] dst_alloc+0xfc/0x16c [ 224.253512][ T8100] ip_route_output_key_hash_rcu+0xfbc/0x1e18 [ 224.254569][ T8100] ip_route_output_key_hash+0x1b0/0x2fc [ 224.255523][ T8100] ip_route_output_flow+0x3c/0x158 [ 224.256427][ T8100] udp_sendmsg+0x10a8/0x1db0 [ 224.257227][ T8100] udpv6_sendmsg+0x8dc/0x20d0 [ 224.258180][ T8100] inet6_sendmsg+0xb4/0xd8 [ 224.259019][ T8100] sock_write_iter+0x268/0x368 [ 224.259909][ T8100] vfs_write+0x3c8/0x7c8 [ 224.260670][ T8100] ksys_write+0x12c/0x228 [ 224.261473][ T8100] __arm64_sys_write+0x7c/0x90 [ 224.262343][ T8100] invoke_syscall+0x98/0x290 [ 224.263184][ T8100] el0_svc_common+0x13c/0x258 [ 224.264052][ T8100] do_el0_svc+0x5c/0x134 [ 224.264821][ T8100] el0_svc+0x58/0x12c [ 224.265540][ T8100] el0t_64_sync_handler+0x84/0xf0 [ 224.266436][ T8100] el0t_64_sync+0x18c/0x190 [ 224.349420][ T8102] loop2: detected capacity change from 0 to 1024 [ 224.509310][ T4876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.897637][ T8110] loop4: detected capacity change from 0 to 256 [ 225.155112][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.757324][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.837343][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.696186][ T4564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.877253][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.239163][ T4722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.802478][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.918350][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.717306][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.874071][ T8123] netlink: 'syz.1.1087': attribute type 2 has an invalid length. [ 234.992395][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.352438][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.491179][ T8142] device syzkaller0 entered promiscuous mode [ 236.533135][ T8157] loop1: detected capacity change from 0 to 512 [ 236.542583][ T8157] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 236.544143][ T8157] FAT-fs (loop1): Filesystem has been set read-only [ 236.545427][ T8157] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 236.547070][ T8157] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 236.557701][ T8157] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 236.638213][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.258062][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.308433][ T4550] wlan1: authenticate with 08:02:11:00:00:00 [ 237.312292][ T4550] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 237.348781][ T8171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.348871][ T4876] wlan1: authenticated [ 237.351753][ T4564] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 237.368134][ T4876] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 237.407548][ T8178] loop1: detected capacity change from 0 to 256 [ 237.411624][ T4876] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 237.413399][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.413478][ T4876] wlan1: associated [ 237.436699][ T8178] FAT-fs (loop1): Directory bread(block 64) failed [ 237.448795][ T8178] FAT-fs (loop1): Directory bread(block 65) failed [ 237.450158][ T8178] FAT-fs (loop1): Directory bread(block 66) failed [ 237.453873][ T8178] FAT-fs (loop1): Directory bread(block 67) failed [ 237.455208][ T8178] FAT-fs (loop1): Directory bread(block 68) failed [ 237.456586][ T8178] FAT-fs (loop1): Directory bread(block 69) failed [ 237.460912][ T8178] FAT-fs (loop1): Directory bread(block 70) failed [ 237.462166][ T8178] FAT-fs (loop1): Directory bread(block 71) failed [ 237.463411][ T8178] FAT-fs (loop1): Directory bread(block 72) failed [ 237.464708][ T8178] FAT-fs (loop1): Directory bread(block 73) failed [ 237.495503][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.498821][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.816577][ T8184] device syzkaller1 entered promiscuous mode [ 238.031432][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.578667][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 240.843315][ T8205] loop0: detected capacity change from 0 to 512 [ 240.867372][ T8205] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 240.869179][ T8205] FAT-fs (loop0): Filesystem has been set read-only [ 240.870625][ T8205] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 240.872201][ T8205] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 240.888247][ T8205] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 241.117105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.757451][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.759205][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.854222][ T8213] loop0: detected capacity change from 0 to 512 [ 241.967175][ T8213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.020728][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.039592][ T8226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.399477][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.442907][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 242.565101][ T8247] loop0: detected capacity change from 0 to 2048 [ 242.581830][ T8247] UDF-fs: bad mount option "uid=ft" or missing value [ 244.335126][ T8294] loop1: detected capacity change from 0 to 512 [ 244.337210][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.363678][ T8294] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 244.461387][ T8299] loop3: detected capacity change from 0 to 512 [ 244.499101][ T8300] loop0: detected capacity change from 0 to 512 [ 244.640050][ T8300] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 244.641795][ T8300] FAT-fs (loop0): Filesystem has been set read-only [ 244.644253][ T8300] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 244.646053][ T8300] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 244.787828][ T8300] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 244.819139][ T8299] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 244.820654][ T8299] FAT-fs (loop3): Filesystem has been set read-only [ 244.822566][ T8299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 244.824165][ T8299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 244.887518][ T8301] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 245.343639][ T8294] EXT4-fs (loop1): 1 truncate cleaned up [ 245.345268][ T8294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.520794][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 246.569971][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.656544][ T8322] loop3: detected capacity change from 0 to 512 [ 246.666162][ T8322] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 246.667927][ T8322] FAT-fs (loop3): Filesystem has been set read-only [ 246.669300][ T8322] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 246.670753][ T8322] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 246.681431][ T8322] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 246.824340][ T4722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.157454][ T4674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.797569][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.798881][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.615895][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.997460][ T8382] loop3: detected capacity change from 0 to 512 [ 251.309330][ T8382] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 251.311066][ T8382] FAT-fs (loop3): Filesystem has been set read-only [ 251.312413][ T8382] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 251.313888][ T8382] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 251.324388][ T8382] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 251.852224][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.854001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.937308][ T8407] device syzkaller0 entered promiscuous mode [ 251.997517][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.263947][ T8413] loop1: detected capacity change from 0 to 512 [ 252.280474][ T8413] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 252.282197][ T8413] FAT-fs (loop1): Filesystem has been set read-only [ 252.283566][ T8413] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 252.285066][ T8413] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 252.295703][ T8413] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 253.656425][ T8430] Invalid ELF header magic: != ELF [ 253.904102][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.917564][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.977851][ T4900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.849616][ T4560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.983004][ T8458] loop1: detected capacity change from 0 to 32768 [ 255.988742][ T8458] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1173 (8458) [ 255.998048][ T8458] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 255.999875][ T8458] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 256.001423][ T8458] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 256.003164][ T8458] BTRFS info (device loop1): use zstd compression, level 3 [ 256.004615][ T8458] BTRFS info (device loop1): force clearing of disk cache [ 256.005989][ T8458] BTRFS info (device loop1): enabling disk space caching [ 256.007403][ T8458] BTRFS info (device loop1): disk space caching is enabled [ 256.245820][ T8458] BTRFS info (device loop1): enabling ssd optimizations [ 256.251360][ T8458] BTRFS info (device loop1): rebuilding free space tree [ 256.257502][ T8458] BTRFS info (device loop1): disabling free space tree [ 256.258792][ T8458] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 256.260461][ T8458] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 256.981404][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.986009][ T4330] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 257.601944][ T8498] loop4: detected capacity change from 0 to 2048 [ 257.759147][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.979615][ T8498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.423073][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 258.444588][ T8504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.460058][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 258.601724][ T8509] device syzkaller0 entered promiscuous mode [ 259.683250][ T4660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.825869][ T8528] loop4: detected capacity change from 0 to 512 [ 259.893306][ T8528] [ 259.893820][ T8528] ====================================================== [ 259.895103][ T8528] WARNING: possible circular locking dependency detected [ 259.896339][ T8528] syzkaller #0 Not tainted [ 259.897113][ T8528] ------------------------------------------------------ [ 259.898416][ T8528] syz.4.1187/8528 is trying to acquire lock: [ 259.899587][ T8528] ffff0000f615c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x54/0x1c8 [ 259.901291][ T8528] [ 259.901291][ T8528] but task is already holding lock: [ 259.902826][ T8528] ffff0000e2082aa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x7d8/0x1090 [ 259.904718][ T8528] [ 259.904718][ T8528] which lock already depends on the new lock. [ 259.904718][ T8528] [ 259.906769][ T8528] [ 259.906769][ T8528] the existing dependency chain (in reverse order) is: [ 259.908474][ T8528] [ 259.908474][ T8528] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 259.909928][ T8528] down_write+0x5c/0x88 [ 259.910758][ T8528] ext4_map_blocks+0x720/0x160c [ 259.911734][ T8528] ext4_getblk+0x178/0x680 [ 259.912643][ T8528] ext4_bread+0x3c/0x1a8 [ 259.913530][ T8528] ext4_quota_write+0x200/0x544 [ 259.914541][ T8528] find_free_dqentry+0x55c/0xa8c [ 259.915548][ T8528] do_insert_tree+0x5c0/0xc68 [ 259.916545][ T8528] do_insert_tree+0x7dc/0xc68 [ 259.917528][ T8528] do_insert_tree+0x7dc/0xc68 [ 259.918445][ T8528] do_insert_tree+0x7dc/0xc68 [ 259.919381][ T8528] qtree_write_dquot+0x3d4/0x4e4 [ 259.920370][ T8528] v2_write_dquot+0xf0/0x180 [ 259.921271][ T8528] dquot_acquire+0x280/0x4b8 [ 259.922190][ T8528] ext4_acquire_dquot+0x270/0x420 [ 259.923194][ T8528] dqget+0x638/0xa98 [ 259.923996][ T8528] __dquot_initialize+0x2e4/0xb30 [ 259.924980][ T8528] dquot_initialize+0x24/0x34 [ 259.925927][ T8528] ext4_process_orphan+0x5c/0x2c0 [ 259.926894][ T8528] ext4_orphan_cleanup+0xabc/0x1204 [ 259.927911][ T8528] ext4_fill_super+0x5a30/0x63dc [ 259.928877][ T8528] get_tree_bdev+0x35c/0x54c [ 259.929764][ T8528] ext4_get_tree+0x28/0x38 [ 259.930659][ T8528] vfs_get_tree+0x90/0x278 [ 259.931496][ T8528] do_new_mount+0x228/0x818 [ 259.932374][ T8528] path_mount+0x5ac/0xe6c [ 259.933224][ T8528] __arm64_sys_mount+0x4a0/0x5a0 [ 259.934379][ T8528] invoke_syscall+0x98/0x290 [ 259.935374][ T8528] el0_svc_common+0x13c/0x258 [ 259.936371][ T8528] do_el0_svc+0x5c/0x134 [ 259.937242][ T8528] el0_svc+0x58/0x12c [ 259.938062][ T8528] el0t_64_sync_handler+0x84/0xf0 [ 259.939051][ T8528] el0t_64_sync+0x18c/0x190 [ 259.939954][ T8528] [ 259.939954][ T8528] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 259.941421][ T8528] down_read+0x64/0x300 [ 259.942240][ T8528] v2_read_dquot+0x4c/0x118 [ 259.943129][ T8528] dquot_acquire+0x108/0x4b8 [ 259.944176][ T8528] ext4_acquire_dquot+0x270/0x420 [ 259.945281][ T8528] dqget+0x638/0xa98 [ 259.946175][ T8528] dquot_set_dqblk+0x40/0xe34 [ 259.947142][ T8528] quota_setquota+0x41c/0x4cc [ 259.948112][ T8528] do_quotactl+0x65c/0x738 [ 259.949012][ T8528] __arm64_sys_quotactl+0x2dc/0x77c [ 259.950040][ T8528] invoke_syscall+0x98/0x290 [ 259.950961][ T8528] el0_svc_common+0x13c/0x258 [ 259.951904][ T8528] do_el0_svc+0x5c/0x134 [ 259.952763][ T8528] el0_svc+0x58/0x12c [ 259.953571][ T8528] el0t_64_sync_handler+0x84/0xf0 [ 259.954558][ T8528] el0t_64_sync+0x18c/0x190 [ 259.955453][ T8528] [ 259.955453][ T8528] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 259.956829][ T8528] __lock_acquire+0x3504/0x7280 [ 259.957794][ T8528] lock_acquire+0x210/0x63c [ 259.958660][ T8528] __mutex_lock_common+0x1a0/0x1f88 [ 259.959669][ T8528] mutex_lock_nested+0x38/0x44 [ 259.960602][ T8528] dquot_commit+0x54/0x1c8 [ 259.961484][ T8528] ext4_write_dquot+0x1b4/0x320 [ 259.962425][ T8528] ext4_mark_dquot_dirty+0xe8/0x150 [ 259.963460][ T8528] mark_all_dquot_dirty+0x1f8/0x424 [ 259.964496][ T8528] __dquot_free_space+0x768/0xaa4 [ 259.965512][ T8528] ext4_free_blocks+0x18dc/0x2468 [ 259.966538][ T8528] ext4_ext_remove_space+0x1618/0x3b98 [ 259.967655][ T8528] ext4_ext_truncate+0x170/0x218 [ 259.968670][ T8528] ext4_truncate+0xa00/0x1090 [ 259.969626][ T8528] ext4_evict_inode+0xbd0/0x1264 [ 259.970625][ T8528] evict+0x3d8/0x81c [ 259.971401][ T8528] iput+0x728/0x7e8 [ 259.972182][ T8528] ext4_process_orphan+0x24c/0x2c0 [ 259.973175][ T8528] ext4_orphan_cleanup+0xabc/0x1204 [ 259.974173][ T8528] ext4_fill_super+0x5a30/0x63dc [ 259.975116][ T8528] get_tree_bdev+0x35c/0x54c [ 259.976007][ T8528] ext4_get_tree+0x28/0x38 [ 259.976899][ T8528] vfs_get_tree+0x90/0x278 [ 259.977778][ T8528] do_new_mount+0x228/0x818 [ 259.978639][ T8528] path_mount+0x5ac/0xe6c [ 259.979460][ T8528] __arm64_sys_mount+0x4a0/0x5a0 [ 259.980406][ T8528] invoke_syscall+0x98/0x290 [ 259.981309][ T8528] el0_svc_common+0x13c/0x258 [ 259.982227][ T8528] do_el0_svc+0x5c/0x134 [ 259.983061][ T8528] el0_svc+0x58/0x12c [ 259.983904][ T8528] el0t_64_sync_handler+0x84/0xf0 [ 259.984920][ T8528] el0t_64_sync+0x18c/0x190 [ 259.985829][ T8528] [ 259.985829][ T8528] other info that might help us debug this: [ 259.985829][ T8528] [ 259.987664][ T8528] Chain exists of: [ 259.987664][ T8528] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 259.987664][ T8528] [ 259.990054][ T8528] Possible unsafe locking scenario: [ 259.990054][ T8528] [ 259.991316][ T8528] CPU0 CPU1 [ 259.992239][ T8528] ---- ---- [ 259.993159][ T8528] lock(&ei->i_data_sem/2); [ 259.993992][ T8528] lock(&s->s_dquot.dqio_sem); [ 259.995334][ T8528] lock(&ei->i_data_sem/2); [ 259.996574][ T8528] lock(&dquot->dq_lock); [ 259.997469][ T8528] [ 259.997469][ T8528] *** DEADLOCK *** [ 259.997469][ T8528] [ 259.998889][ T8528] 4 locks held by syz.4.1187/8528: [ 259.999808][ T8528] #0: ffff0000d24140e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a0/0x840 [ 260.001714][ T8528] #1: ffff0000d2414650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3e0/0x1264 [ 260.003494][ T8528] #2: ffff0000e2082aa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x7d8/0x1090 [ 260.005235][ T8528] #3: ffff8000166ed088 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 260.006899][ T8528] [ 260.006899][ T8528] stack backtrace: [ 260.007960][ T8528] CPU: 0 PID: 8528 Comm: syz.4.1187 Not tainted syzkaller #0 [ 260.009278][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 260.011077][ T8528] Call trace: [ 260.011652][ T8528] dump_backtrace+0x1c4/0x1f0 [ 260.012477][ T8528] show_stack+0x2c/0x3c [ 260.013199][ T8528] __dump_stack+0x30/0x40 [ 260.013951][ T8528] dump_stack_lvl+0xf4/0x15c [ 260.014760][ T8528] dump_stack+0x1c/0x5c [ 260.015503][ T8528] print_circular_bug+0x148/0x1b0 [ 260.016468][ T8528] check_noncircular+0x290/0x370 [ 260.017361][ T8528] __lock_acquire+0x3504/0x7280 [ 260.018236][ T8528] lock_acquire+0x210/0x63c [ 260.019050][ T8528] __mutex_lock_common+0x1a0/0x1f88 [ 260.019977][ T8528] mutex_lock_nested+0x38/0x44 [ 260.020827][ T8528] dquot_commit+0x54/0x1c8 [ 260.021601][ T8528] ext4_write_dquot+0x1b4/0x320 [ 260.022443][ T8528] ext4_mark_dquot_dirty+0xe8/0x150 [ 260.023377][ T8528] mark_all_dquot_dirty+0x1f8/0x424 [ 260.024291][ T8528] __dquot_free_space+0x768/0xaa4 [ 260.025194][ T8528] ext4_free_blocks+0x18dc/0x2468 [ 260.026119][ T8528] ext4_ext_remove_space+0x1618/0x3b98 [ 260.027090][ T8528] ext4_ext_truncate+0x170/0x218 [ 260.028013][ T8528] ext4_truncate+0xa00/0x1090 [ 260.028870][ T8528] ext4_evict_inode+0xbd0/0x1264 [ 260.029787][ T8528] evict+0x3d8/0x81c [ 260.030506][ T8528] iput+0x728/0x7e8 [ 260.031198][ T8528] ext4_process_orphan+0x24c/0x2c0 [ 260.032111][ T8528] ext4_orphan_cleanup+0xabc/0x1204 [ 260.033039][ T8528] ext4_fill_super+0x5a30/0x63dc [ 260.033934][ T8528] get_tree_bdev+0x35c/0x54c [ 260.034772][ T8528] ext4_get_tree+0x28/0x38 [ 260.035591][ T8528] vfs_get_tree+0x90/0x278 [ 260.036364][ T8528] do_new_mount+0x228/0x818 [ 260.037145][ T8528] path_mount+0x5ac/0xe6c [ 260.037921][ T8528] __arm64_sys_mount+0x4a0/0x5a0 [ 260.038795][ T8528] invoke_syscall+0x98/0x290 [ 260.039608][ T8528] el0_svc_common+0x13c/0x258 [ 260.040445][ T8528] do_el0_svc+0x5c/0x134 [ 260.041195][ T8528] el0_svc+0x58/0x12c [ 260.041905][ T8528] el0t_64_sync_handler+0x84/0xf0 [ 260.042793][ T8528] el0t_64_sync+0x18c/0x190 [ 260.043638][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.046712][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.061013][ T8528] EXT4-fs (loop4): 1 orphan inode deleted [ 260.062441][ T8528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 260.077310][ T4900] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 260.079451][ T4900] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:15: Failed to release dquot type 1 [ 260.169051][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 263.117153][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.517072][ T1519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.518641][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.437317][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.157066][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.197133][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.277808][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog