last executing test programs: 3m20.322389089s ago: executing program 0 (id=23): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000000c0), 0x0, 0x4}, 0x20) r6 = add_key$user(&(0x7f0000002100), 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x302, 0x8, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000320)={0x2, 0x15, @loopback}, 0x10) 3m19.293691135s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0x8) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004"], 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m18.416638996s ago: executing program 0 (id=47): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000040)=""/73}, 0x20) 3m18.355064206s ago: executing program 0 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) socket$rds(0x15, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) fstat(r2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) sendmsg$TIPC_NL_MON_GET(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x91e]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}]}]}}]}, 0xa8}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000300)) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x11}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x6f, 0x8, "dcf482a437981760b41b15d9aa6437d49beb8e2f278bdcd9b6427d8f5393d4593c2b3667927d230cfe9a968fa0e9230513c578a9ee444ddffa5ec156a33ecde9614c2b0f1cf73daede055c1f0833be15191b5664df9abdde1885c451297a204c10e034283c8996b6233fda"}]}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "caa827f5345c98c89c2610f761"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "f26c231d1754d4a72ae880a0032781e3bcb2c43ce686ee542f03e274b8f02991f78849a57acae29b44214ca81397ee05289b295f9ef36deecf525e6db3d029c8d282b856ed5cf322d26c9f80014b5eb076572e88c464fa5800d5030b70461fb4d1065f34d8c12ad68aa1a301ace9b50d82b09ff3971f44976e8dae0c18d6aa33fb40a6903df6bf5ec2ea164a624de520c7bf0e667323afc23539ef1f1c012db87b70e487c2d245402dccd94dcf7892405ae3d78264f68f65bef42707a48894ee4e6371e2ddd06ea8eef21df43617b6c723608e6744551491"}, @NFTA_TABLE_HANDLE={0x3e, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 3m18.004029814s ago: executing program 0 (id=50): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 3m17.74389742s ago: executing program 0 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x18, 0x2}}]}, 0x2c}}, 0x0) 3m17.702077391s ago: executing program 32 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x18, 0x2}}]}, 0x2c}}, 0x0) 3m6.259968704s ago: executing program 1 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, 0x0, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='8', 0x1) 3m6.259870015s ago: executing program 1 (id=285): madvise(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x13) 3m6.215994267s ago: executing program 1 (id=286): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m6.186461966s ago: executing program 1 (id=287): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x350, 0x10000) ptrace$pokeuser(0x6, r3, 0x388, 0xffff7fffffffff7f) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x2, 0x1001f0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) 3m5.272806348s ago: executing program 1 (id=300): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX, @ANYRES64=r0], 0x0) 3m4.68357684s ago: executing program 1 (id=313): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 3m4.639475238s ago: executing program 33 (id=313): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 2m51.129983714s ago: executing program 3 (id=407): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001740)={r1, &(0x7f0000000740)="01"}, 0x20) 2m45.812524804s ago: executing program 3 (id=412): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x24) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="0075c2", 0x3}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2m43.935916947s ago: executing program 3 (id=418): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x208ab, &(0x7f0000000540)={[{@errors_continue}, {@noblock_validity, 0x22}, {@errors_continue}, {@dax_inode}, {@data_err_ignore}, {@prjquota, 0x22}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@usrjquota}]}, 0x1, 0x453, &(0x7f0000000700)="$eJzs3MtvG0UYAPBv/eqbhFIeLS0ECqLikTTpgx64FIHEASQkOBRxCklalboNaoJEqwoCh3BElbgjjkj8BVwoFwSckLjCHSFFKBcKJ6O1d1M3sfN04rb+/aRtZzzjzHy7O/Z41usAetZA+k8SsTsifo+Ivkb29goDjf9uzl8b+3f+2lgStdpbfyf1ev/MXxvLq+bP29XI1GrLtDv7bsRotTpxOcsPTV/8YGjqytUXzl8cPTdxbuLSyKlTx48dqpwcOdGROPekfT3w8eTB/a+9c/2NsTPX3/v527S/u7Py5jg6ZaCxd1t6utONddmepnRS6mJHWJNiRKSHq1wf/31RjB0LZX3x6mdd7RywqWq1Qm1b++KZGnAPSyfqQC/K3+jTz7/5tkVTjzvC3OlYWMe4mW2NklIUsjrl7DPSZhiIiDMz/32VbrFJ6xAAAM1unI6I51vN/wrxUFO9+7JrQ/0RcX9E7I2IByJiX0Q8GFGv+3BEPLLG9hdfIVk6/6n1rSuwVUrnfy9l17Zun//ls7/oL2a5PfX4y8nZ89WJo9k+ORLlbWl+eJk2fnjlty/alTXP/9ItbT+fC2b9+Ku0aIFufHR6dCMxN5v7NOJAqVX8ycKcN50f74+IA8X1tXH+2W8OtitbOf5ldGBSXvs64pnG8Z+JRfHnkrbXJ4dfPDlyYmh7VCeODuVnxVK//Dr7Zrv2NxR/B8zdqMXOluf/Qvz9yfaIqStXL9Sv104t/gvLrB5nZv/4vO1nmvWe/5Xk7Xq6kj320ej09OXhiEry+tLHR249N8/n9dPz/8jh1uN/b9zaE49GRHoSH4qIxyLi8azvT0TEkxFxeJn4f3r5qffXHv/K+7UT0vjHVzr+0Xz8154oXvjxu7XHn0uP//F66kj2yGpe/1bbwY3sOwAAALhbFOrfgU8KgwvpQmFwsPEd/n2xs1CdnJp+7uzkh5fGG9+V749yIV/p6mtaDx3O1obz/Mii/LFs3fjL4o56fnBssjre7eChx+2qtB7/qT/Xud4P3EXcrwW9y/iH3mX8Q+8qJd3uAdAt3v+hd7Ua/590oR/A1lvh/X/HVvUD2Hrm/9C7jH/oXcY/9KS298YXNnTLv0SXEt9XNvZbDatPROEOCfmeSZSjZVFp1T9msc7EtpZF3X5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AwAA//+rDOMl") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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") chdir(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m39.805905409s ago: executing program 3 (id=425): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000200)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d4, 0x33}, @in6=@remote, {0x1, 0x10, 0x4, 0x8001, 0x0, 0x7f7, 0xa2f0, 0x2}, {0x500000, 0x4, 0x2020000000000004, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x200108e5}, 0x48000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000000000584991dc65bcf5014d23c6bbbe9a242ca2ee643233482c7a9f659aa0975e1cec8dced45f030156c80dd6ea270e8828ca6455a31f1a2b19cd3bf30422de91951567b458086d4f"], 0x10}}, 0x10000000) 2m37.436609754s ago: executing program 3 (id=429): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x48042, 0x88) readahead(r0, 0x0, 0x6) 2m37.302074645s ago: executing program 3 (id=433): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 2m21.309505018s ago: executing program 34 (id=433): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 1m55.799976584s ago: executing program 2 (id=492): getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 1m50.303921816s ago: executing program 2 (id=498): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000280), 0xac0600, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x803, 0x6) socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1m43.578334967s ago: executing program 2 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1m38.789126532s ago: executing program 2 (id=516): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m36.561128892s ago: executing program 2 (id=518): syz_read_part_table(0x105d, &(0x7f0000000000)="$eJzsz7tRxEAQBNDWZ/XBUmg4pICDRwbkIVcOHhFAJpiEsZSksy6AuzPes3anerpqwl01KedjSdpkSjLmtST1abqKfg3Jx3czptZa55Q+P0mG7W/dfveS9/45eyRvl4Wu2fsP8/FP1tSSpZvPafvyebNDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCB/QcAAP//NCsQrg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 1m34.5439621s ago: executing program 2 (id=525): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) 1m33.347030976s ago: executing program 35 (id=525): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) 26.795851836s ago: executing program 7 (id=702): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002080)={0x73622a85, 0x100b, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x18, r5, 0x309, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 21.772399627s ago: executing program 7 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000340)="f80aa072aef8f193fa8d08f16bf75ff963a413616d9f83c04b9af360b2c1094b1142f2b5a11e93ead5578843779567323c45e3fdef398819cf", 0x39}], 0x2}, 0x4004) 21.402771717s ago: executing program 7 (id=713): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) 21.247889928s ago: executing program 7 (id=715): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 9.196906004s ago: executing program 4 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)}, {&(0x7f0000000340)="f80aa072aef8f193fa8d08f16bf75ff963a413616d9f83c04b9af360b2c1094b1142f2b5a11e93ead5578843779567323c45e3fdef398819cf", 0x39}], 0x2}, 0x4004) 8.859579499s ago: executing program 4 (id=739): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x1) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 8.711883749s ago: executing program 6 (id=740): r0 = socket$pppoe(0x18, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x8, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x700, 0x3, 0x3}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffefff, @mcast2, 0x4}, 0x1c) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r6, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0xef, 0x6) 7.691228052s ago: executing program 8 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010028bd7000fedbdf251d01010008000900", @ANYRES32=0x0, @ANYBLOB="08000a00b8"], 0x24}, 0x1, 0x0, 0x0, 0x44895}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x7, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x2900]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) 7.571614318s ago: executing program 7 (id=743): syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403501000000000000000109027c000301003003080b0003010920060904000000010120000924010200061c0003072408030200000c240304f67d01030d070080090401000001022000090401010101022000090501092000080500082501010604040009040200000102200009040201010102200009058209"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}}], 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 7.197969941s ago: executing program 4 (id=744): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4000, 0x6b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) 6.183054444s ago: executing program 6 (id=746): syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403501000000000000000109027c000301003003080b0003010920060904000000010120000924010200061c0003072408030200000c240304f67d01030d070080090401000001022000090401010101022000090501092000080500082501010604040009040200000102200009040201010102200009058209"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 6.050699743s ago: executing program 8 (id=747): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00'}, 0x18) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0xffffffca, &(0x7f0000000080)={0x2, 0x8, 0x40, 0x9, 0x1000003, 0x8, 0x7fffffffffffffff, 0x9}, &(0x7f0000000140)={0x4, 0x0, 0x6cfd, 0x40, 0xbaae, 0x1251146, 0x7, 0x1}, &(0x7f0000000180)={0x8, 0x1, 0xc, 0x6f, 0x0, 0x8, 0x9, 0x10000}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x218201, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) unshare(0x22020600) shutdown(r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5.740842092s ago: executing program 8 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x2) 5.652089443s ago: executing program 5 (id=749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)}, {&(0x7f0000000340)="f80aa072aef8f193fa8d08f16bf75ff963a413616d9f83c04b9af360b2c1094b1142f2b5a11e93ead5578843779567323c45e3fdef398819cf", 0x39}], 0x2}, 0x4004) 5.627921071s ago: executing program 5 (id=750): r0 = socket(0x2d, 0x2, 0x0) bind(r0, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) r1 = socket(0x2d, 0x2, 0x0) sendto(r1, &(0x7f0000000600)="01010101010101010101010101010101010101010101010101010101", 0x1c, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 5.577041972s ago: executing program 8 (id=751): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0x8) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800"], 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = io_uring_setup(0x1f35, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5.52914886s ago: executing program 5 (id=752): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r2 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff76, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0xc00e, {0x7, 0x0, 0x0, 0x0, 0x20000, 0x270c0}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x400c0) 5.150386167s ago: executing program 4 (id=753): syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403501000000000000000109027c000301003003080b0003010920060904000000010120000924010200061c0003072408030200000c240304f67d01030d070080090401000001022000090401010101022000090501092000080500082501010604040009040200000102200009040201010102200009058209"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 5.022561082s ago: executing program 6 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0xfffffffb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x8000000000000001, 0x6ab577c9436f6cd7) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x88020004, 0x272, "670600000000000000845e3ede57135adc674d632d46da16827000", 0x400000, 0x20000000, 0x0, 0x0, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000540)={0x101, {"7c5abd7708cc48f8d2faca128a247788", "e2b68840aa878a0e392d45583ed833be", "f4457844d714b9279f7710f4465fac0c"}, 0x3}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090427810000000d0000000000000008000f0001000000", 0x24) 4.997382568s ago: executing program 7 (id=755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)) eventfd2(0x0, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r1 = io_uring_setup(0x63d6, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) 3.746297228s ago: executing program 5 (id=756): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_QUERY(r0, 0x23, &(0x7f0000007440), 0x0) 3.745463095s ago: executing program 8 (id=757): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f7, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0xf, 0x5, 0x57c) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0xfffffffc, 0x0, 0x1000010, 0x20004, 0x0}) 3.624255969s ago: executing program 6 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1, 0x60, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='00:03\n', 0x6) 3.551173039s ago: executing program 5 (id=759): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1, 0x90001) pwritev2(r0, &(0x7f0000001b40)=[{&(0x7f0000000180)="445cf1bffa04fa2e711715609d25fe73d8587868e3ed7c081ea4c8d31e45fe972b864c26ceb82cec232f47e4f7e2c9ddd61947a8a74dbf9e923471bdb41084277342c96929f4d5be1d60102ff55187f2c2b9ffaeeab67c616c3fa5d39e74ddedb1e79648532b63ed75342175b76455b3a296d9a287985f6b6659106bcadd21a62619776e082f5db0723c6ce9d754809b50ee6f0e9475a18f82f74497df88c842b819f940ebe198254b42649799e7919040fbbb517594ef09428781d37aad918afd1748dca593654083b5ab281b877ecebdbc7a6ec2c213ebef0a448f95bde3", 0xdf}, {&(0x7f0000000280)="bc423481771701d8249cc39d87a8e84725c7483bb757a0b22ecc8412343a0cf942778bda757a10749dc7236d1331ba34c568123d48393a004d12cda9439db78c809b872fa074f43b12f9208a94c83251be1ad0026cd7435e4c96da2190d147a30676e3419862d4558e9712373d04dd8a589fe9", 0x73}, {&(0x7f0000000300)="e6fc1d35bac0c6ff1e509d72ffcf3fc05489f40fb0bd2f9ad68eb48922009c54947427336bfd571c838b75b9f76df2678abf5385d333f8b123ed761fd6b1afefd5deab4fe27387c6badda887221e1318789cb533338bae13526176558ac496479049896a4e53535cb9f0a6b6b045df036e9d33f4fec4eee7300be1c5418657288fd49d98a8273181b148cfcbb378fea80cdbc1414fb90148c7da595952f8b5eb2fb34f3e4312e0a08c4f12448fc9d06589bfa5d840d87c7619f6fc7811c84632a146282f365739f2f7", 0xc9}, {&(0x7f0000000400)="652d039bba9c96d8c0cb7dc5064be38db40163d44fb42168ffed8a4ab9d7cb4a737510c061b603863044dc35372a1691b22bee8c52856695849c168261ce4a53a3e4ca12e1fc5dbb5bb9349f5897b880607cd8", 0x53}, {&(0x7f0000000480)="5c1254ae555a2023b483414fecbf84dc591e1534db2e35cb34", 0x19}, {&(0x7f0000000a40)="fb7d0896585b6cf4ec57a013ac70cd50e50ea0a069664a80b98b923e9e7f80571d6f54a8107960fae8aac980edb20b7bb2bf41cfa406f5f292932d4e0fb1465c7e08fdd21f6a1500a879e9f59f36c964fbbd74ed29c2816f21576441540780a05172a1ca17fcba61c01b453beb1e002e944ae925d5a2219c47a087d87ed313ed0b921f86d1627a8d61d2a20c7709c9e84c6f43b6b526f7ae712f77", 0x9b}, {&(0x7f0000000b00)="f3a5fe2c2c96a4eeee38c38e170e2c1964ad7451e505879573", 0x19}, {&(0x7f0000000b40)="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", 0x487}], 0x8, 0x3c, 0x0, 0x2) 2.535850392s ago: executing program 4 (id=760): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@report={0x150, 0x20, 0x8, 0x70bd25, 0x25dfdbfe, {0x6c, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0xb, 0x4e22, 0x6, 0xa, 0x0, 0x180, 0x32}}, [@algo_auth={0x93, 0x1, {{'nhpoly1305\x00'}, 0x258, "34a5e4201b8a4eb9d3faf5f99d608fd37ef8555cd4449a88bb0d6f5e1691e98611bc9f4b9c1936cde45f5266fb5eb53f6a030e9583544ddbebdea46e65ba283d70b0e0650989c13994b780"}}, @algo_auth_trunc={0x6e, 0x14, {{'blake2b-384-generic\x00'}, 0x110, 0x200, "84e1d80e967a1448542e2414fe58af4a6e5f7ad88fa1bb566cd9466cb0ffe85eb526"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 162.524893ms ago: executing program 8 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x2) 161.692223ms ago: executing program 6 (id=762): r0 = socket(0x2d, 0x2, 0x0) bind(r0, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) r1 = socket(0x2d, 0x2, 0x0) sendto(r1, &(0x7f0000000600)="01010101010101010101010101010101010101010101010101010101", 0x1c, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 131.389513ms ago: executing program 4 (id=763): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='1', 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x11) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, 0x2c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000300)="0303ec58000000004500001c0000000040110000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529e400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x8004000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r9, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x288c0}, 0x4008000) 69.582785ms ago: executing program 5 (id=764): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() setns(0xffffffffffffffff, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 0s ago: executing program 6 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) kernel console output (not intermixed with test programs): 75] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 42.586049][ T5075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 42.586065][ T5075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.631520][ T5075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.649311][ T49] hsr_slave_0: left promiscuous mode [ 42.650639][ T49] hsr_slave_1: left promiscuous mode [ 42.651505][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.651529][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.653165][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.653176][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.693541][ T49] veth1_macvtap: left promiscuous mode [ 42.693584][ T49] veth0_macvtap: left promiscuous mode [ 42.693653][ T49] veth1_vlan: left promiscuous mode [ 42.693697][ T49] veth0_vlan: left promiscuous mode [ 42.835578][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.102154][ T49] team0 (unregistering): Port device team_slave_1 removed [ 43.118966][ T49] team0 (unregistering): Port device team_slave_0 removed [ 43.290511][ T5120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.65'. [ 43.291580][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 43.308599][ T5122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.769646][ T5140] overlayfs: missing 'lowerdir' [ 43.856430][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.856489][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.856556][ T5073] bridge_slave_0: entered allmulticast mode [ 43.857694][ T5073] bridge_slave_0: entered promiscuous mode [ 43.861653][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.861676][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.861737][ T5073] bridge_slave_1: entered allmulticast mode [ 43.862162][ T5073] bridge_slave_1: entered promiscuous mode [ 44.121353][ T5156] 9p: Bad value for 'rfdno' [ 44.121743][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.124106][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.135978][ T5073] team0: Port device team_slave_0 added [ 44.137880][ T5073] team0: Port device team_slave_1 added [ 44.176168][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.176183][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.176198][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.184567][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.184580][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.184591][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.220969][ T5163] FAULT_INJECTION: forcing a failure. [ 44.220969][ T5163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.221000][ T5163] CPU: 1 UID: 0 PID: 5163 Comm: syz.1.72 Tainted: G L syzkaller #0 PREEMPT [ 44.221014][ T5163] Tainted: [L]=SOFTLOCKUP [ 44.221017][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.221022][ T5163] Call trace: [ 44.221025][ T5163] show_stack+0x2c/0x3c (C) [ 44.221048][ T5163] __dump_stack+0x30/0x40 [ 44.221058][ T5163] dump_stack_lvl+0xd8/0x12c [ 44.221067][ T5163] dump_stack+0x1c/0x28 [ 44.221076][ T5163] should_fail_ex+0x418/0x58c [ 44.221087][ T5163] should_fail+0x14/0x24 [ 44.221096][ T5163] should_fail_usercopy+0x20/0x30 [ 44.221105][ T5163] simple_read_from_buffer+0xc4/0x238 [ 44.221115][ T5163] proc_fail_nth_read+0x1a8/0x248 [ 44.221123][ T5163] vfs_read+0x230/0x8c8 [ 44.221133][ T5163] ksys_read+0x12c/0x228 [ 44.221143][ T5163] __arm64_sys_read+0x84/0x98 [ 44.221152][ T5163] invoke_syscall+0x98/0x244 [ 44.221162][ T5163] el0_svc_common+0xec/0x23c [ 44.221171][ T5163] do_el0_svc+0x4c/0x5c [ 44.221180][ T5163] el0_svc+0x60/0x1d8 [ 44.221190][ T5163] el0t_64_sync_handler+0x44/0x104 [ 44.221198][ T5163] el0t_64_sync+0x198/0x19c [ 44.223614][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 44.268051][ T4725] Bluetooth: hci0: command 0x040f tx timeout [ 44.285634][ T5073] hsr_slave_0: entered promiscuous mode [ 44.286013][ T5073] hsr_slave_1: entered promiscuous mode [ 44.658063][ T4725] Bluetooth: hci1: command 0x041b tx timeout [ 44.658243][ T4725] Bluetooth: hci4: command 0x040f tx timeout [ 44.658265][ T4725] Bluetooth: hci2: command 0x040f tx timeout [ 44.658281][ T4725] Bluetooth: hci3: command 0x040f tx timeout [ 44.929658][ T5180] set_capacity_and_notify: 1 callbacks suppressed [ 44.929675][ T5180] loop3: detected capacity change from 0 to 1024 [ 44.932229][ T5180] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 44.939228][ T5180] JBD2: no valid journal superblock found [ 44.940769][ T5180] EXT4-fs (loop3): Could not load journal inode [ 44.998214][ T5073] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.026109][ T5073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.027202][ T5073] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.032452][ T5169] __nla_validate_parse: 1 callbacks suppressed [ 45.032463][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 45.035289][ T5073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.362558][ T5073] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.367154][ T5073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.371667][ T5073] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.380463][ T5073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.409257][ T5196] loop2: detected capacity change from 0 to 1024 [ 45.409682][ T5196] EXT4-fs: Ignoring removed orlov option [ 45.424331][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.446722][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 45.474733][ T5211] FAULT_INJECTION: forcing a failure. [ 45.474733][ T5211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.474759][ T5211] CPU: 1 UID: 0 PID: 5211 Comm: syz.4.78 Tainted: G L syzkaller #0 PREEMPT [ 45.474774][ T5211] Tainted: [L]=SOFTLOCKUP [ 45.474777][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.474783][ T5211] Call trace: [ 45.474786][ T5211] show_stack+0x2c/0x3c (C) [ 45.474806][ T5211] __dump_stack+0x30/0x40 [ 45.474820][ T5211] dump_stack_lvl+0xd8/0x12c [ 45.474831][ T5211] dump_stack+0x1c/0x28 [ 45.474842][ T5211] should_fail_ex+0x418/0x58c [ 45.474855][ T5211] should_fail+0x14/0x24 [ 45.474866][ T5211] should_fail_usercopy+0x20/0x30 [ 45.474877][ T5211] _inline_copy_from_user+0x3c/0x174 [ 45.474891][ T5211] do_ip_vs_set_ctl+0x26c/0x93c [ 45.474903][ T5211] nf_setsockopt+0xa0/0xe4 [ 45.474915][ T5211] ip_setsockopt+0x118/0x128 [ 45.474925][ T5211] tcp_setsockopt+0xcc/0xe8 [ 45.474934][ T5211] sock_common_setsockopt+0xb0/0xcc [ 45.474944][ T5211] smc_setsockopt+0x1e8/0x9b0 [ 45.474956][ T5211] do_sock_setsockopt+0x1f0/0x330 [ 45.474966][ T5211] __sys_setsockopt+0x104/0x170 [ 45.474976][ T5211] __arm64_sys_setsockopt+0xc8/0xe4 [ 45.474986][ T5211] invoke_syscall+0x98/0x244 [ 45.474997][ T5211] el0_svc_common+0xec/0x23c [ 45.475009][ T5211] do_el0_svc+0x4c/0x5c [ 45.475020][ T5211] el0_svc+0x60/0x1d8 [ 45.475030][ T5211] el0t_64_sync_handler+0x44/0x104 [ 45.475041][ T5211] el0t_64_sync+0x198/0x19c [ 45.512565][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.529017][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.532109][ T1845] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.532146][ T1845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.532646][ T1845] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.532665][ T1845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.686161][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.695876][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.829948][ T5073] veth0_vlan: entered promiscuous mode [ 45.833649][ T5073] veth1_vlan: entered promiscuous mode [ 45.843599][ T5073] veth0_macvtap: entered promiscuous mode [ 45.846085][ T5073] veth1_macvtap: entered promiscuous mode [ 45.852794][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.853816][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.909414][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.909438][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.909953][ T1728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.909964][ T1728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.928670][ T1845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.928721][ T1845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.928740][ T1845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.938048][ T1845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.983141][ T5270] FAULT_INJECTION: forcing a failure. [ 45.983141][ T5270] name failslab, interval 1, probability 0, space 0, times 0 [ 45.983163][ T5270] CPU: 0 UID: 0 PID: 5270 Comm: syz.1.83 Tainted: G L syzkaller #0 PREEMPT [ 45.983175][ T5270] Tainted: [L]=SOFTLOCKUP [ 45.983178][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.983183][ T5270] Call trace: [ 45.983186][ T5270] show_stack+0x2c/0x3c (C) [ 45.983204][ T5270] __dump_stack+0x30/0x40 [ 45.983214][ T5270] dump_stack_lvl+0xd8/0x12c [ 45.983223][ T5270] dump_stack+0x1c/0x28 [ 45.983232][ T5270] should_fail_ex+0x418/0x58c [ 45.983243][ T5270] should_failslab+0xc4/0x120 [ 45.983253][ T5270] kmem_cache_alloc_node_noprof+0x98/0x604 [ 45.983264][ T5270] __alloc_skb+0x1f0/0x610 [ 45.983273][ T5270] netlink_alloc_large_skb+0xd4/0x114 [ 45.983282][ T5270] netlink_sendmsg+0x4c4/0x948 [ 45.983290][ T5270] __sock_sendmsg+0xc8/0x17c [ 45.983298][ T5270] ____sys_sendmsg+0x3d0/0x6c8 [ 45.983306][ T5270] ___sys_sendmsg+0x198/0x224 [ 45.983314][ T5270] __sys_sendmsg+0x158/0x204 [ 45.983322][ T5270] __arm64_sys_sendmsg+0x88/0x9c [ 45.983330][ T5270] invoke_syscall+0x98/0x244 [ 45.983340][ T5270] el0_svc_common+0xec/0x23c [ 45.983350][ T5270] do_el0_svc+0x4c/0x5c [ 45.983359][ T5270] el0_svc+0x60/0x1d8 [ 45.983368][ T5270] el0t_64_sync_handler+0x44/0x104 [ 45.983377][ T5270] el0t_64_sync+0x198/0x19c [ 46.059541][ T5275] FAULT_INJECTION: forcing a failure. [ 46.059541][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 46.059564][ T5275] CPU: 0 UID: 0 PID: 5275 Comm: syz.5.57 Tainted: G L syzkaller #0 PREEMPT [ 46.059579][ T5275] Tainted: [L]=SOFTLOCKUP [ 46.059583][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.059587][ T5275] Call trace: [ 46.059590][ T5275] show_stack+0x2c/0x3c (C) [ 46.059611][ T5275] __dump_stack+0x30/0x40 [ 46.059621][ T5275] dump_stack_lvl+0xd8/0x12c [ 46.059631][ T5275] dump_stack+0x1c/0x28 [ 46.059640][ T5275] should_fail_ex+0x418/0x58c [ 46.059651][ T5275] should_failslab+0xc4/0x120 [ 46.059661][ T5275] kmem_cache_alloc_node_noprof+0x98/0x604 [ 46.059672][ T5275] __alloc_skb+0x1f0/0x610 [ 46.059681][ T5275] netlink_alloc_large_skb+0xd4/0x114 [ 46.059690][ T5275] netlink_sendmsg+0x4c4/0x948 [ 46.059698][ T5275] __sock_sendmsg+0xc8/0x17c [ 46.059705][ T5275] ____sys_sendmsg+0x3d0/0x6c8 [ 46.059714][ T5275] ___sys_sendmsg+0x198/0x224 [ 46.059722][ T5275] __sys_sendmsg+0x158/0x204 [ 46.059730][ T5275] __arm64_sys_sendmsg+0x88/0x9c [ 46.059738][ T5275] invoke_syscall+0x98/0x244 [ 46.059748][ T5275] el0_svc_common+0xec/0x23c [ 46.059757][ T5275] do_el0_svc+0x4c/0x5c [ 46.059766][ T5275] el0_svc+0x60/0x1d8 [ 46.059775][ T5275] el0t_64_sync_handler+0x44/0x104 [ 46.059784][ T5275] el0t_64_sync+0x198/0x19c [ 46.339425][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 46.419991][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.420521][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.448277][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.449848][ T5294] binder: 5293:5294 cannot find target node [ 46.449864][ T5294] binder: 5293:5294 transaction call to 0:0 failed 4/29189/-22, code 0 size 0-0 line 3252 [ 46.451803][ T4853] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.499359][ T5298] syz.2.89 (5298) used obsolete PPPIOCDETACH ioctl [ 46.557604][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.557782][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.567105][ T5313] FAULT_INJECTION: forcing a failure. [ 46.567105][ T5313] name fail_futex, interval 1, probability 0, space 0, times 1 [ 46.567125][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.2.94 Tainted: G L syzkaller #0 PREEMPT [ 46.567138][ T5313] Tainted: [L]=SOFTLOCKUP [ 46.567141][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.567146][ T5313] Call trace: [ 46.567149][ T5313] show_stack+0x2c/0x3c (C) [ 46.567170][ T5313] __dump_stack+0x30/0x40 [ 46.567184][ T5313] dump_stack_lvl+0xd8/0x12c [ 46.567195][ T5313] dump_stack+0x1c/0x28 [ 46.567206][ T5313] should_fail_ex+0x418/0x58c [ 46.567220][ T5313] should_fail+0x14/0x24 [ 46.567231][ T5313] get_futex_key+0x1ec/0x12b0 [ 46.567241][ T5313] futex_wait_setup+0x58/0x674 [ 46.567252][ T5313] __futex_wait+0x108/0x25c [ 46.567263][ T5313] futex_wait+0x108/0x2c0 [ 46.567273][ T5313] do_futex+0x320/0x378 [ 46.567283][ T5313] __arm64_sys_futex+0x2e4/0x418 [ 46.567293][ T5313] invoke_syscall+0x98/0x244 [ 46.567305][ T5313] el0_svc_common+0xec/0x23c [ 46.567316][ T5313] do_el0_svc+0x4c/0x5c [ 46.567328][ T5313] el0_svc+0x60/0x1d8 [ 46.567338][ T5313] el0t_64_sync_handler+0x44/0x104 [ 46.567349][ T5313] el0t_64_sync+0x198/0x19c [ 46.739224][ T51] Bluetooth: hci3: command 0x040f tx timeout [ 46.739256][ T51] Bluetooth: hci2: command 0x040f tx timeout [ 46.739274][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 46.739290][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 46.850361][ T5349] vhci_hcd vhci_hcd.3: invalid port number 130 [ 46.850379][ T5349] vhci_hcd vhci_hcd.3: default hub control req: 4010 v945e i0082 l3 [ 46.939899][ T5362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.945412][ T5362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.034497][ T5376] netlink: 'syz.4.110': attribute type 12 has an invalid length. [ 47.242417][ T5404] FAULT_INJECTION: forcing a failure. [ 47.242417][ T5404] name failslab, interval 1, probability 0, space 0, times 0 [ 47.242453][ T5404] CPU: 1 UID: 0 PID: 5404 Comm: syz.5.121 Tainted: G L syzkaller #0 PREEMPT [ 47.242473][ T5404] Tainted: [L]=SOFTLOCKUP [ 47.242477][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.242482][ T5404] Call trace: [ 47.242485][ T5404] show_stack+0x2c/0x3c (C) [ 47.242503][ T5404] __dump_stack+0x30/0x40 [ 47.242515][ T5404] dump_stack_lvl+0xd8/0x12c [ 47.242527][ T5404] dump_stack+0x1c/0x28 [ 47.242537][ T5404] should_fail_ex+0x418/0x58c [ 47.242550][ T5404] should_failslab+0xc4/0x120 [ 47.242562][ T5404] __kvmalloc_node_noprof+0x160/0x7fc [ 47.242572][ T5404] alloc_fdtable+0x15c/0x290 [ 47.242580][ T5404] dup_fd+0x614/0x848 [ 47.242587][ T5404] __arm64_sys_close_range+0x194/0x808 [ 47.242595][ T5404] invoke_syscall+0x98/0x244 [ 47.242607][ T5404] el0_svc_common+0xec/0x23c [ 47.242619][ T5404] do_el0_svc+0x4c/0x5c [ 47.242629][ T5404] el0_svc+0x60/0x1d8 [ 47.242641][ T5404] el0t_64_sync_handler+0x44/0x104 [ 47.242651][ T5404] el0t_64_sync+0x198/0x19c [ 47.309734][ T5410] sit0: entered promiscuous mode [ 47.312875][ T5410] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 47.312888][ T5410] netlink: 1 bytes leftover after parsing attributes in process `syz.4.122'. [ 47.465912][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.128'. [ 47.470182][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.128'. [ 47.529535][ T5440] random: crng reseeded on system resumption [ 47.630602][ T5453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.633030][ T5453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.880395][ T5480] FAULT_INJECTION: forcing a failure. [ 47.880395][ T5480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.880430][ T5480] CPU: 0 UID: 0 PID: 5480 Comm: syz.4.151 Tainted: G L syzkaller #0 PREEMPT [ 47.880455][ T5480] Tainted: [L]=SOFTLOCKUP [ 47.880460][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.880467][ T5480] Call trace: [ 47.880471][ T5480] show_stack+0x2c/0x3c (C) [ 47.880494][ T5480] __dump_stack+0x30/0x40 [ 47.880507][ T5480] dump_stack_lvl+0xd8/0x12c [ 47.880518][ T5480] dump_stack+0x1c/0x28 [ 47.880530][ T5480] should_fail_ex+0x418/0x58c [ 47.880543][ T5480] should_fail+0x14/0x24 [ 47.880554][ T5480] should_fail_usercopy+0x20/0x30 [ 47.880566][ T5480] _copy_to_iter+0x18c/0x10f8 [ 47.880579][ T5480] get_random_bytes_user+0x184/0x31c [ 47.880592][ T5480] __arm64_sys_getrandom+0x150/0x250 [ 47.880603][ T5480] invoke_syscall+0x98/0x244 [ 47.880615][ T5480] el0_svc_common+0xec/0x23c [ 47.880627][ T5480] do_el0_svc+0x4c/0x5c [ 47.880638][ T5480] el0_svc+0x60/0x1d8 [ 47.880649][ T5480] el0t_64_sync_handler+0x44/0x104 [ 47.880660][ T5480] el0t_64_sync+0x198/0x19c [ 47.921005][ T5482] syzkaller0: entered promiscuous mode [ 47.921022][ T5482] syzkaller0: entered allmulticast mode [ 48.011146][ T5492] FAULT_INJECTION: forcing a failure. [ 48.011146][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 48.011168][ T5492] CPU: 1 UID: 0 PID: 5492 Comm: syz.2.157 Tainted: G L syzkaller #0 PREEMPT [ 48.011180][ T5492] Tainted: [L]=SOFTLOCKUP [ 48.011184][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.011189][ T5492] Call trace: [ 48.011191][ T5492] show_stack+0x2c/0x3c (C) [ 48.011210][ T5492] __dump_stack+0x30/0x40 [ 48.011223][ T5492] dump_stack_lvl+0xd8/0x12c [ 48.011234][ T5492] dump_stack+0x1c/0x28 [ 48.011245][ T5492] should_fail_ex+0x418/0x58c [ 48.011258][ T5492] should_failslab+0xc4/0x120 [ 48.011271][ T5492] __kmalloc_cache_noprof+0x94/0x5fc [ 48.011280][ T5492] __arm64_sys_memfd_create+0x258/0x3ec [ 48.011290][ T5492] invoke_syscall+0x98/0x244 [ 48.011302][ T5492] el0_svc_common+0xec/0x23c [ 48.011314][ T5492] do_el0_svc+0x4c/0x5c [ 48.011325][ T5492] el0_svc+0x60/0x1d8 [ 48.011336][ T5492] el0t_64_sync_handler+0x44/0x104 [ 48.011346][ T5492] el0t_64_sync+0x198/0x19c [ 48.418654][ T4725] Bluetooth: hci0: command 0x040f tx timeout [ 48.441299][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.441489][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.442787][ T5531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.442938][ T5531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.490093][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.491006][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.579403][ T5537] FAULT_INJECTION: forcing a failure. [ 48.579403][ T5537] name failslab, interval 1, probability 0, space 0, times 0 [ 48.579431][ T5537] CPU: 0 UID: 0 PID: 5537 Comm: syz.1.179 Tainted: G L syzkaller #0 PREEMPT [ 48.579443][ T5537] Tainted: [L]=SOFTLOCKUP [ 48.579447][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.579453][ T5537] Call trace: [ 48.579456][ T5537] show_stack+0x2c/0x3c (C) [ 48.579477][ T5537] __dump_stack+0x30/0x40 [ 48.579491][ T5537] dump_stack_lvl+0xd8/0x12c [ 48.579503][ T5537] dump_stack+0x1c/0x28 [ 48.579514][ T5537] should_fail_ex+0x418/0x58c [ 48.579529][ T5537] should_failslab+0xc4/0x120 [ 48.579543][ T5537] __kmalloc_noprof+0x108/0x6c8 [ 48.579557][ T5537] x509_fabricate_name+0x498/0x858 [ 48.579568][ T5537] x509_note_issuer+0x160/0x19c [ 48.579578][ T5537] asn1_ber_decoder+0xf24/0x1944 [ 48.579588][ T5537] x509_cert_parse+0x1a4/0x65c [ 48.579598][ T5537] x509_key_preparse+0x74/0x630 [ 48.579608][ T5537] asymmetric_key_preparse+0xcc/0x1c0 [ 48.579617][ T5537] __key_create_or_update+0x2a4/0x848 [ 48.579631][ T5537] key_create_or_update+0x60/0x7c [ 48.579643][ T5537] __arm64_sys_add_key+0x384/0x43c [ 48.579652][ T5537] invoke_syscall+0x98/0x244 [ 48.579664][ T5537] el0_svc_common+0xec/0x23c [ 48.579675][ T5537] do_el0_svc+0x4c/0x5c [ 48.579686][ T5537] el0_svc+0x60/0x1d8 [ 48.579698][ T5537] el0t_64_sync_handler+0x44/0x104 [ 48.579708][ T5537] el0t_64_sync+0x198/0x19c [ 48.818076][ T4729] Bluetooth: hci2: command 0x040f tx timeout [ 48.818105][ T4729] Bluetooth: hci3: command 0x040f tx timeout [ 48.818177][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 48.818214][ T4725] Bluetooth: hci1: command 0x041b tx timeout [ 48.834558][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.834743][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.042647][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.042822][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.610364][ T5621] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 50.498338][ T4725] Bluetooth: hci0: command 0x040f tx timeout [ 50.523296][ T5646] syzkaller0: entered promiscuous mode [ 50.523313][ T5646] syzkaller0: entered allmulticast mode [ 50.846073][ T5695] capability: warning: `syz.5.253' uses 32-bit capabilities (legacy support in use) [ 50.883013][ T5692] syzkaller0: entered promiscuous mode [ 50.883031][ T5692] syzkaller0: entered allmulticast mode [ 50.898087][ T4725] Bluetooth: hci1: command 0x041b tx timeout [ 50.898114][ T4725] Bluetooth: hci4: command 0x040f tx timeout [ 50.898132][ T4725] Bluetooth: hci3: command 0x040f tx timeout [ 50.898149][ T4725] Bluetooth: hci2: command 0x040f tx timeout [ 50.985882][ T5706] __vm_enough_memory: pid: 5706, comm: syz.5.255, bytes: 140736934715392 not enough memory for the allocation [ 51.052469][ T5710] loop1: detected capacity change from 0 to 2048 [ 51.083217][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.155602][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.181289][ T5717] netlink: 'syz.5.262': attribute type 4 has an invalid length. [ 51.181306][ T5717] netlink: 17 bytes leftover after parsing attributes in process `syz.5.262'. [ 51.597470][ T5725] loop3: detected capacity change from 0 to 256 [ 52.214777][ T5734] loop1: detected capacity change from 0 to 128 [ 52.365858][ T5743] loop4: detected capacity change from 0 to 4096 [ 52.394307][ T5746] loop1: detected capacity change from 0 to 4096 [ 52.444546][ T5746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.444568][ T5746] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.452615][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.464829][ T5746] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 52.500010][ T5746] fscrypt: AES-256-XTS using blk-crypto-fallback [ 52.516044][ T5753] loop3: detected capacity change from 0 to 1024 [ 52.516543][ T5753] EXT4-fs (loop3): unable to read superblock [ 52.532086][ T5744] syzkaller0: entered promiscuous mode [ 52.532103][ T5744] syzkaller0: entered allmulticast mode [ 52.536544][ T5746] evm: overlay not supported [ 52.537457][ T5756] loop2: detected capacity change from 0 to 512 [ 52.564681][ T5756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.577778][ T5758] xfrm1: entered promiscuous mode [ 52.577794][ T5758] xfrm1: entered allmulticast mode [ 52.602660][ T5756] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.613451][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.613586][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.684538][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 52.691428][ T5767] loop2: detected capacity change from 0 to 1024 [ 52.992341][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 52.992376][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 53.008949][ T5772] batadv_slave_1: entered promiscuous mode [ 53.021356][ T5772] loop1: detected capacity change from 0 to 512 [ 53.028969][ T5768] loop4: detected capacity change from 0 to 8192 [ 53.029758][ T5768] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.052914][ T5772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.075784][ T5772] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.278: corrupted xattr block 33: invalid header [ 53.079951][ T5772] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.278: corrupted xattr block 33: invalid header [ 53.081090][ T5772] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.278: corrupted xattr block 33: invalid header [ 53.102309][ T5769] batadv_slave_1: left promiscuous mode [ 53.144972][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.385238][ T5790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.390200][ T5790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 53.390251][ T5790] System zones: 0-1, 3-36 [ 53.391287][ T5790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.858623][ T5800] ext4: Unknown parameter 'nouser_xattr' [ 54.026974][ T5810] FAULT_INJECTION: forcing a failure. [ 54.026974][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 54.027003][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.2.295 Tainted: G L syzkaller #0 PREEMPT [ 54.027016][ T5810] Tainted: [L]=SOFTLOCKUP [ 54.027020][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.027025][ T5810] Call trace: [ 54.027028][ T5810] show_stack+0x2c/0x3c (C) [ 54.027046][ T5810] __dump_stack+0x30/0x40 [ 54.027058][ T5810] dump_stack_lvl+0xd8/0x12c [ 54.027069][ T5810] dump_stack+0x1c/0x28 [ 54.027080][ T5810] should_fail_ex+0x418/0x58c [ 54.027093][ T5810] should_failslab+0xc4/0x120 [ 54.027105][ T5810] kmem_cache_alloc_noprof+0x94/0x5d4 [ 54.027118][ T5810] vm_area_dup+0x34/0x5c8 [ 54.027128][ T5810] __split_vma+0x1a8/0x83c [ 54.027139][ T5810] vms_gather_munmap_vmas+0x3d0/0x101c [ 54.027150][ T5810] mmap_region+0x71c/0x1c28 [ 54.027160][ T5810] do_mmap+0xb88/0x1104 [ 54.027168][ T5810] vm_mmap_pgoff+0x298/0x46c [ 54.027176][ T5810] ksys_mmap_pgoff+0xd0/0x5b4 [ 54.027184][ T5810] __arm64_sys_mmap+0x110/0x12c [ 54.027196][ T5810] invoke_syscall+0x98/0x244 [ 54.027207][ T5810] el0_svc_common+0xec/0x23c [ 54.027219][ T5810] do_el0_svc+0x4c/0x5c [ 54.027229][ T5810] el0_svc+0x60/0x1d8 [ 54.027240][ T5810] el0t_64_sync_handler+0x44/0x104 [ 54.027250][ T5810] el0t_64_sync+0x198/0x19c [ 54.241377][ T5821] FAULT_INJECTION: forcing a failure. [ 54.241377][ T5821] name failslab, interval 1, probability 0, space 0, times 0 [ 54.241400][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz.3.301 Tainted: G L syzkaller #0 PREEMPT [ 54.241413][ T5821] Tainted: [L]=SOFTLOCKUP [ 54.241416][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.241421][ T5821] Call trace: [ 54.241424][ T5821] show_stack+0x2c/0x3c (C) [ 54.241454][ T5821] __dump_stack+0x30/0x40 [ 54.241468][ T5821] dump_stack_lvl+0xd8/0x12c [ 54.241480][ T5821] dump_stack+0x1c/0x28 [ 54.241491][ T5821] should_fail_ex+0x418/0x58c [ 54.241503][ T5821] should_failslab+0xc4/0x120 [ 54.241515][ T5821] __kmalloc_cache_noprof+0x94/0x5fc [ 54.241524][ T5821] __igmp_group_dropped+0x348/0xa58 [ 54.241534][ T5821] __ip_mc_dec_group+0x1f4/0x31c [ 54.241544][ T5821] ip_mc_drop_socket+0x1a4/0x25c [ 54.241553][ T5821] inet_release+0x8c/0x1cc [ 54.241561][ T5821] __sock_release+0xa0/0x1d4 [ 54.241570][ T5821] sock_close+0x24/0x38 [ 54.241580][ T5821] __fput+0x338/0x74c [ 54.241588][ T5821] fput_close_sync+0x10c/0x278 [ 54.241597][ T5821] __arm64_sys_close+0x80/0x110 [ 54.241608][ T5821] invoke_syscall+0x98/0x244 [ 54.241620][ T5821] el0_svc_common+0xec/0x23c [ 54.241631][ T5821] do_el0_svc+0x4c/0x5c [ 54.241642][ T5821] el0_svc+0x60/0x1d8 [ 54.241653][ T5821] el0t_64_sync_handler+0x44/0x104 [ 54.241663][ T5821] el0t_64_sync+0x198/0x19c [ 54.242194][ T4714] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 54.242921][ T4714] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 54.535492][ T5842] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.744163][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.810570][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.812703][ T5849] syzkaller0: entered promiscuous mode [ 54.812717][ T5849] syzkaller0: entered allmulticast mode [ 54.835742][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.058435][ T4725] Bluetooth: hci1: command 0x041b tx timeout [ 55.058463][ T4725] Bluetooth: hci4: command 0x040f tx timeout [ 55.063066][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.063527][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.067174][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.068507][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.069916][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.088815][ T5867] tipc: Started in network mode [ 55.088838][ T5867] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 55.251484][ T5863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.305705][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.690190][ T5888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.690207][ T5888] EXT4-fs (loop3): Test dummy encryption mode enabled [ 55.691571][ T5888] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 55.691621][ T5888] System zones: 0-5 [ 55.705922][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.753304][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.454346][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.454413][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.454533][ T5862] bridge_slave_0: entered allmulticast mode [ 56.455075][ T5862] bridge_slave_0: entered promiscuous mode [ 56.456454][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.456505][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.456564][ T5862] bridge_slave_1: entered allmulticast mode [ 56.457097][ T5862] bridge_slave_1: entered promiscuous mode [ 56.467273][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.468707][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.476013][ T5862] team0: Port device team_slave_0 added [ 56.476905][ T5862] team0: Port device team_slave_1 added [ 56.485460][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.485471][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.485486][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.486748][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.486756][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.486771][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.508453][ T5862] hsr_slave_0: entered promiscuous mode [ 56.508850][ T5862] hsr_slave_1: entered promiscuous mode [ 56.509064][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 56.509074][ T5862] Cannot create hsr debugfs directory [ 56.584355][ T5923] set_capacity_and_notify: 6 callbacks suppressed [ 56.584369][ T5923] loop4: detected capacity change from 0 to 512 [ 56.587362][ T5923] EXT4-fs: Mount option(s) incompatible with ext3 [ 56.596732][ T5923] loop4: detected capacity change from 0 to 1024 [ 56.597442][ T5923] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 56.597491][ T5923] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.597675][ T5923] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.333: iget: special inode unallocated [ 56.597706][ T5923] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 56.598120][ C1] EXT4-fs (loop4): initial error at time 56: ext4_get_journal_inode:5927: inode 32 [ 56.598140][ C1] EXT4-fs (loop4): last error at time 56: ext4_get_journal_inode:5927: inode 32 [ 56.599488][ T5923] EXT4-fs (loop4): Remounting filesystem read-only [ 56.599536][ T5923] EXT4-fs (loop4): no journal found [ 56.599543][ T5923] EXT4-fs (loop4): can't get journal size [ 56.601983][ T5923] EXT4-fs (loop4): filesystem is read-only [ 56.602416][ T5923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.603217][ T5923] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.677455][ T5862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.682092][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.682984][ T5862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.686763][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.687719][ T5862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.699559][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.700489][ T5862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.712172][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.139303][ T4725] Bluetooth: hci2: command tx timeout [ 57.139569][ T4725] Bluetooth: hci1: command 0x041b tx timeout [ 57.721577][ T5951] loop5: detected capacity change from 0 to 512 [ 57.790039][ T5951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 57.790111][ T5951] System zones: 1-12 [ 57.804586][ T5951] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.340: missing EA_INODE flag [ 57.804605][ T5951] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.805710][ T5951] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.340: error while reading EA inode 12 err=-117 [ 57.805790][ T5951] loop5: lost filesystem error report for type 5 error -117 [ 57.806083][ T5951] EXT4-fs (loop5): 1 orphan inode deleted [ 57.806545][ T5951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.917183][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.917372][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.520644][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.526507][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.533544][ T245] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.533573][ T245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.537207][ T245] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.537228][ T245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.565243][ T5862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.565261][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.589213][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.616927][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.617121][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.219680][ T4726] Bluetooth: hci2: command tx timeout [ 59.219939][ T4725] Bluetooth: hci1: command 0x041b tx timeout [ 59.281322][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.415083][ T5862] veth0_vlan: entered promiscuous mode [ 59.417435][ T5862] veth1_vlan: entered promiscuous mode [ 59.420066][ T6039] loop2: detected capacity change from 0 to 2048 [ 59.420476][ T6039] EXT4-fs: Ignoring removed i_version option [ 59.429471][ T6039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.441881][ T5862] veth0_macvtap: entered promiscuous mode [ 59.443185][ T5862] veth1_macvtap: entered promiscuous mode [ 59.447395][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.452454][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.477622][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.498812][ T1728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.499099][ T1728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.499138][ T1728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.499154][ T1728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.521949][ T1728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.521965][ T1728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.561548][ T1728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.561568][ T1728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.666322][ T6056] FAULT_INJECTION: forcing a failure. [ 59.666322][ T6056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.666344][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz.2.359 Tainted: G L syzkaller #0 PREEMPT [ 59.666356][ T6056] Tainted: [L]=SOFTLOCKUP [ 59.666359][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 59.666363][ T6056] Call trace: [ 59.666366][ T6056] show_stack+0x2c/0x3c (C) [ 59.666385][ T6056] __dump_stack+0x30/0x40 [ 59.666395][ T6056] dump_stack_lvl+0xd8/0x12c [ 59.666404][ T6056] dump_stack+0x1c/0x28 [ 59.666413][ T6056] should_fail_ex+0x418/0x58c [ 59.666424][ T6056] should_fail_alloc_page+0xec/0x10c [ 59.666442][ T6056] prepare_alloc_pages+0x194/0x484 [ 59.666452][ T6056] __alloc_frozen_pages_noprof+0x180/0x578 [ 59.666463][ T6056] alloc_pages_mpol+0x1fc/0x3d0 [ 59.666471][ T6056] alloc_frozen_pages_noprof+0xc4/0x10c [ 59.666479][ T6056] alloc_pages_noprof+0x30/0x148 [ 59.666487][ T6056] get_free_pages_noprof+0x1c/0xbc [ 59.666493][ T6056] __kasan_populate_vmalloc+0x48/0x1d0 [ 59.666502][ T6056] alloc_vmap_area+0xcd8/0x12ec [ 59.666510][ T6056] __get_vm_area_node+0x210/0x32c [ 59.666517][ T6056] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 59.666525][ T6056] __vmalloc_node_noprof+0xec/0x14c [ 59.666533][ T6056] __vmalloc_noprof+0x64/0x8c [ 59.666540][ T6056] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 59.666549][ T6056] bpf_prog_alloc+0x48/0x110 [ 59.666557][ T6056] bpf_prog_load+0x5e0/0x1554 [ 59.666564][ T6056] __sys_bpf+0x7d4/0x82c [ 59.666572][ T6056] __arm64_sys_bpf+0xd0/0xec [ 59.666579][ T6056] invoke_syscall+0x98/0x244 [ 59.666589][ T6056] el0_svc_common+0xec/0x23c [ 59.666598][ T6056] do_el0_svc+0x4c/0x5c [ 59.666607][ T6056] el0_svc+0x60/0x1d8 [ 59.666617][ T6056] el0t_64_sync_handler+0x44/0x104 [ 59.666625][ T6056] el0t_64_sync+0x198/0x19c [ 59.666646][ T6056] syz.2.359: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 59.666675][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz.2.359 Tainted: G L syzkaller #0 PREEMPT [ 59.666685][ T6056] Tainted: [L]=SOFTLOCKUP [ 59.666687][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 59.666691][ T6056] Call trace: [ 59.666693][ T6056] show_stack+0x2c/0x3c (C) [ 59.666703][ T6056] __dump_stack+0x30/0x40 [ 59.666712][ T6056] dump_stack_lvl+0xd8/0x12c [ 59.666721][ T6056] dump_stack+0x1c/0x28 [ 59.666730][ T6056] warn_alloc+0x1c4/0x1d8 [ 59.666739][ T6056] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 59.666747][ T6056] __vmalloc_node_noprof+0xec/0x14c [ 59.666755][ T6056] __vmalloc_noprof+0x64/0x8c [ 59.666762][ T6056] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 59.666770][ T6056] bpf_prog_alloc+0x48/0x110 [ 59.666778][ T6056] bpf_prog_load+0x5e0/0x1554 [ 59.666785][ T6056] __sys_bpf+0x7d4/0x82c [ 59.666793][ T6056] __arm64_sys_bpf+0xd0/0xec [ 59.666800][ T6056] invoke_syscall+0x98/0x244 [ 59.666809][ T6056] el0_svc_common+0xec/0x23c [ 59.666819][ T6056] do_el0_svc+0x4c/0x5c [ 59.666828][ T6056] el0_svc+0x60/0x1d8 [ 59.666836][ T6056] el0t_64_sync_handler+0x44/0x104 [ 59.666844][ T6056] el0t_64_sync+0x198/0x19c [ 59.666852][ T6056] Mem-Info: [ 59.666856][ T6056] active_anon:41 inactive_anon:6327 isolated_anon:0 [ 59.666856][ T6056] active_file:2641 inactive_file:4635 isolated_file:0 [ 59.666856][ T6056] unevictable:1643 dirty:320 writeback:0 [ 59.666856][ T6056] slab_reclaimable:8946 slab_unreclaimable:91417 [ 59.666856][ T6056] mapped:29382 shmem:1082 pagetables:1121 [ 59.666856][ T6056] sec_pagetables:0 bounce:0 [ 59.666856][ T6056] kernel_misc_reclaimable:0 [ 59.666856][ T6056] free:1463427 free_pcp:22061 free_cma:7616 [ 59.666876][ T6056] Node 0 active_anon:164kB inactive_anon:25308kB active_file:10564kB inactive_file:18540kB unevictable:6572kB isolated(anon):0kB isolated(file):0kB mapped:117528kB dirty:1280kB writeback:0kB shmem:4328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9596kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 59.666895][ T6056] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 59.666917][ T6056] lowmem_reserve[]: 0 0 3652 3652 3652 [ 59.666934][ T6056] Node 0 Normal free:2775820kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:164kB inactive_anon:25308kB active_file:10564kB inactive_file:18540kB unevictable:6572kB writepending:1280kB zspages:0kB present:5242880kB managed:3740016kB mlocked:0kB bounce:0kB free_pcp:88244kB local_pcp:68372kB free_cma:0kB [ 59.666956][ T6056] lowmem_reserve[]: 0 0 0 0 0 [ 59.666972][ T6056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 59.667028][ T6056] Node 0 Normal: 240*4kB (UM) 492*8kB (UM) 690*16kB (UME) 24*32kB (UM) 27*64kB (UME) 79*128kB (UME) 55*256kB (UME) 12*512kB (UM) 7*1024kB (UME) 14*2048kB (UME) 657*4096kB (UM) = 2775680kB [ 59.667101][ T6056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 59.667108][ T6056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 59.667114][ T6056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 59.667120][ T6056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 59.667126][ T6056] 9229 total pagecache pages [ 59.667129][ T6056] 0 pages in swap cache [ 59.667133][ T6056] Free swap = 124996kB [ 59.667136][ T6056] Total swap = 124996kB [ 59.667139][ T6056] 2097152 pages RAM [ 59.667142][ T6056] 0 pages HighMem/MovableOnly [ 59.667145][ T6056] 392100 pages reserved [ 59.667148][ T6056] 8192 pages cma reserved [ 59.667151][ T6056] 0 pages hwpoisoned [ 59.913625][ T6068] psci: CPU1 killed (polled 0 ms) [ 60.103226][ T6086] binfmt_misc: register: failed to install interpreter ./bus [ 60.147733][ T6088] loop6: detected capacity change from 0 to 512 [ 60.184676][ T6088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.335842][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.246064][ T1591] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.246104][ T1591] ieee802154 phy1 wpan1: encryption failed: -22 [ 62.249994][ T51] Bluetooth: hci2: command tx timeout [ 62.293181][ T6100] FAULT_INJECTION: forcing a failure. [ 62.293181][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 62.293205][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.6.368 Tainted: G L syzkaller #0 PREEMPT [ 62.293218][ T6100] Tainted: [L]=SOFTLOCKUP [ 62.293221][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.293227][ T6100] Call trace: [ 62.293230][ T6100] show_stack+0x2c/0x3c (C) [ 62.293252][ T6100] __dump_stack+0x30/0x40 [ 62.293264][ T6100] dump_stack_lvl+0xd8/0x12c [ 62.293275][ T6100] dump_stack+0x1c/0x28 [ 62.293286][ T6100] should_fail_ex+0x418/0x58c [ 62.293299][ T6100] should_failslab+0xc4/0x120 [ 62.293311][ T6100] __kmalloc_cache_noprof+0x94/0x5fc [ 62.293319][ T6100] __arm64_sys_mincore+0x23c/0x79c [ 62.293333][ T6100] invoke_syscall+0x98/0x244 [ 62.293344][ T6100] el0_svc_common+0xec/0x23c [ 62.293356][ T6100] do_el0_svc+0x4c/0x5c [ 62.293366][ T6100] el0_svc+0x60/0x1d8 [ 62.293377][ T6100] el0t_64_sync_handler+0x44/0x104 [ 62.293388][ T6100] el0t_64_sync+0x198/0x19c [ 63.511684][ T26] cfg80211: failed to load regulatory.db [ 63.565143][ T6109] loop5: detected capacity change from 0 to 512 [ 63.576618][ T6109] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.372: error while reading EA inode 32 err=-116 [ 63.577584][ T6109] loop5: lost filesystem error report for type 5 error -117 [ 63.577828][ T6109] EXT4-fs (loop5): 1 orphan inode deleted [ 63.589752][ T6109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.647673][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.692024][ T30] audit: type=1326 audit(63.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6117 comm="syz.3.375" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d79368 code=0x7ffc0000 [ 63.692180][ T30] audit: type=1326 audit(63.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6117 comm="syz.3.375" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d79368 code=0x7ffc0000 [ 63.693408][ T6116] tipc: New replicast peer: 127.0.0.1 [ 63.693586][ T6116] tipc: Enabled bearer , priority 10 [ 63.714470][ T6116] tipc: Disabling bearer [ 63.716362][ T30] audit: type=1326 audit(63.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6117 comm="syz.3.375" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffa3d79368 code=0x7ffc0000 [ 63.716382][ T30] audit: type=1326 audit(63.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6117 comm="syz.3.375" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d79368 code=0x7ffc0000 [ 63.716397][ T30] audit: type=1326 audit(63.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6117 comm="syz.3.375" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d79368 code=0x7ffc0000 [ 63.749570][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.749740][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.821629][ T6126] loop4: detected capacity change from 0 to 512 [ 63.845647][ T6126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.852916][ T6130] binder: 6129:6130 got reply transaction with no transaction stack [ 63.852937][ T6130] binder: 6129:6130 transaction reply to 0:0 failed 5/29201/-71, code 0 size 0-0 line 3155 [ 64.049248][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.255355][ T6150] loop4: detected capacity change from 0 to 1024 [ 64.260124][ T51] Bluetooth: hci2: command tx timeout [ 64.332344][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.387249][ T6156] loop5: detected capacity change from 0 to 2048 [ 64.387603][ T6156] EXT4-fs: Ignoring removed i_version option [ 64.446142][ T6156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.544203][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.683893][ T6172] loop5: detected capacity change from 0 to 256 [ 65.706844][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.208957][ T6188] loop3: detected capacity change from 0 to 128 [ 69.376075][ T6194] loop5: detected capacity change from 0 to 8192 [ 70.367517][ T6194] loop5: unable to read partition table [ 70.367592][ T6194] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 71.574654][ T6211] loop4: detected capacity change from 0 to 2048 [ 72.556470][ T30] audit: type=1326 audit(72.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e179368 code=0x7ffc0000 [ 72.556501][ T30] audit: type=1326 audit(72.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e179368 code=0x7ffc0000 [ 72.556519][ T30] audit: type=1326 audit(72.120:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8e15c22c code=0x7ffc0000 [ 72.556535][ T30] audit: type=1326 audit(72.120:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8e17aa0c code=0x7ffc0000 [ 72.556550][ T30] audit: type=1326 audit(72.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8e179368 code=0x7ffc0000 [ 72.556566][ T30] audit: type=1326 audit(72.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8e17aa0c code=0x7ffc0000 [ 72.556580][ T30] audit: type=1326 audit(72.120:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8e15c22c code=0x7ffc0000 [ 72.556595][ T30] audit: type=1326 audit(72.120:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e179368 code=0x7ffc0000 [ 72.556609][ T30] audit: type=1326 audit(72.120:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e179368 code=0x7ffc0000 [ 72.556623][ T30] audit: type=1326 audit(72.330:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff8e179368 code=0x7ffc0000 [ 72.693724][ T6211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.485643][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.610633][ T6238] loop3: detected capacity change from 0 to 512 [ 75.727882][ T6242] loop6: detected capacity change from 0 to 2048 [ 75.731473][ T6242] EXT4-fs: Ignoring removed i_version option [ 75.742275][ T6246] fuse: Bad value for 'fd' [ 75.743199][ T6242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.761327][ T6248] loop2: detected capacity change from 0 to 512 [ 76.730620][ T6248] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 76.730646][ T6248] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 78.742424][ T6242] fs-verity (loop6, inode 13): Error -4 building Merkle tree [ 80.646963][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.626250][ T6259] FAULT_INJECTION: forcing a failure. [ 81.626250][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 81.626274][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.4.424 Tainted: G L syzkaller #0 PREEMPT [ 81.626287][ T6259] Tainted: [L]=SOFTLOCKUP [ 81.626290][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.626296][ T6259] Call trace: [ 81.626299][ T6259] show_stack+0x2c/0x3c (C) [ 81.626319][ T6259] __dump_stack+0x30/0x40 [ 81.626333][ T6259] dump_stack_lvl+0xd8/0x12c [ 81.626345][ T6259] dump_stack+0x1c/0x28 [ 81.626355][ T6259] should_fail_ex+0x418/0x58c [ 81.626369][ T6259] should_failslab+0xc4/0x120 [ 81.626382][ T6259] kmem_cache_alloc_noprof+0x94/0x5d4 [ 81.626395][ T6259] security_inode_alloc+0x40/0x304 [ 81.626404][ T6259] inode_init_always_gfp+0x704/0xb20 [ 81.626414][ T6259] alloc_inode+0x9c/0x198 [ 81.626433][ T6259] new_inode+0x20/0x50 [ 81.626443][ T6259] proc_sys_make_inode+0x5c/0x440 [ 81.626456][ T6259] proc_sys_lookup+0x1d4/0x2a0 [ 81.626468][ T6259] __lookup_slow+0x1e4/0x2b4 [ 81.626477][ T6259] lookup_slow+0x60/0x84 [ 81.626485][ T6259] link_path_walk+0xb0c/0x1584 [ 81.626495][ T6259] path_openat+0x160/0x18f0 [ 81.626504][ T6259] do_file_open+0x1c8/0x2e8 [ 81.626514][ T6259] do_sys_openat2+0x114/0x1e8 [ 81.626525][ T6259] do_sys_open+0xb0/0xe0 [ 81.626535][ T6259] __arm64_sys_openat+0xa8/0xc4 [ 81.626546][ T6259] invoke_syscall+0x98/0x244 [ 81.626558][ T6259] el0_svc_common+0xec/0x23c [ 81.626569][ T6259] do_el0_svc+0x4c/0x5c [ 81.626580][ T6259] el0_svc+0x60/0x1d8 [ 81.626591][ T6259] el0t_64_sync_handler+0x44/0x104 [ 81.626602][ T6259] el0t_64_sync+0x198/0x19c [ 82.046297][ T6262] loop5: detected capacity change from 0 to 1024 [ 82.046673][ T6262] EXT4-fs: Ignoring removed oldalloc option [ 82.077818][ T6262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.111923][ T6270] input: syz1 as /devices/virtual/input/input6 [ 82.180159][ T6274] EXT4-fs (loop5): shut down requested (1) [ 82.244070][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.346355][ T6280] loop6: detected capacity change from 0 to 512 [ 82.355248][ T6282] loop4: detected capacity change from 0 to 512 [ 82.356412][ T6282] EXT4-fs warning (device loop4): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 82.356431][ T6282] EXT4-fs warning (device loop4): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 82.464844][ T6276] loop2: detected capacity change from 0 to 8192 [ 82.478938][ T6276] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.482600][ T6280] ip6gre1: entered promiscuous mode [ 82.482612][ T6280] ip6gre1: entered allmulticast mode [ 83.384131][ T6276] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 83.384154][ T6276] FAT-fs (loop2): Filesystem has been set read-only [ 83.384207][ T6276] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 83.384238][ T6276] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 84.397008][ T6288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.405649][ T6288] loop3: detected capacity change from 0 to 512 [ 85.404230][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.711582][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.711771][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.813699][ T6298] FAULT_INJECTION: forcing a failure. [ 85.813699][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 85.813721][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.4.439 Tainted: G L syzkaller #0 PREEMPT [ 85.813734][ T6298] Tainted: [L]=SOFTLOCKUP [ 85.813737][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.813743][ T6298] Call trace: [ 85.813746][ T6298] show_stack+0x2c/0x3c (C) [ 85.813768][ T6298] __dump_stack+0x30/0x40 [ 85.813780][ T6298] dump_stack_lvl+0xd8/0x12c [ 85.813791][ T6298] dump_stack+0x1c/0x28 [ 85.813802][ T6298] should_fail_ex+0x418/0x58c [ 85.813814][ T6298] should_failslab+0xc4/0x120 [ 85.813827][ T6298] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 85.813840][ T6298] __d_alloc+0x50/0x600 [ 85.813848][ T6298] d_alloc+0x54/0x17c [ 85.813856][ T6298] lookup_one_qstr_excl+0x9c/0x200 [ 85.813867][ T6298] __start_dirop+0xb8/0xf4 [ 85.813876][ T6298] start_dirop+0x38/0x4c [ 85.813883][ T6298] simple_start_creating+0xcc/0x114 [ 85.813895][ T6298] debugfs_start_creating+0xd8/0x1bc [ 85.813908][ T6298] __debugfs_create_file+0x7c/0x36c [ 85.813920][ T6298] debugfs_create_file_full+0x58/0x70 [ 85.813932][ T6298] ref_tracker_dir_debugfs+0x174/0x2f0 [ 85.813942][ T6298] preinit_net+0x2a0/0x63c [ 85.813952][ T6298] copy_net_ns+0x23c/0x698 [ 85.813961][ T6298] create_new_namespaces+0x304/0x50c [ 85.813972][ T6298] unshare_nsproxy_namespaces+0x120/0x170 [ 85.813983][ T6298] ksys_unshare+0x438/0x6cc [ 85.813992][ T6298] __arm64_sys_unshare+0x40/0x54 [ 85.814001][ T6298] invoke_syscall+0x98/0x244 [ 85.814013][ T6298] el0_svc_common+0xec/0x23c [ 85.814024][ T6298] do_el0_svc+0x4c/0x5c [ 85.814035][ T6298] el0_svc+0x60/0x1d8 [ 85.814046][ T6298] el0t_64_sync_handler+0x44/0x104 [ 85.814056][ T6298] el0t_64_sync+0x198/0x19c [ 89.034234][ T6306] loop6: detected capacity change from 0 to 1024 [ 89.034610][ T6306] ext4: Bad value for 'barrier' [ 89.048688][ T6309] loop2: detected capacity change from 0 to 128 [ 89.090425][ T6309] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.141334][ T6313] loop5: detected capacity change from 0 to 512 [ 89.144390][ T6313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 89.144437][ T6313] System zones: 1-12 [ 89.145018][ T6313] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.446: missing EA_INODE flag [ 89.145031][ T6313] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 89.145136][ T6313] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.446: error while reading EA inode 12 err=-117 [ 89.145147][ T6313] loop5: lost filesystem error report for type 5 error -117 [ 89.145245][ T6313] EXT4-fs (loop5): 1 orphan inode deleted [ 89.145717][ T6313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.279786][ T6309] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 89.281165][ T6309] fscrypt: Adiantum using blk-crypto-fallback [ 90.170825][ T6320] xt_hashlimit: size too large, truncated to 1048576 [ 90.231879][ T4713] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.372152][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.564074][ T1013] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 95.016714][ T6347] loop2: detected capacity change from 0 to 256 [ 98.200786][ T6354] loop2: detected capacity change from 0 to 512 [ 98.220864][ T6354] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 98.220881][ T6354] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 100.290696][ T4725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.299336][ T4725] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.302657][ T4725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.303078][ T4725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.303311][ T4725] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.817596][ T6373] loop2: detected capacity change from 0 to 2048 [ 101.851819][ T6373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.853963][ T6377] loop4: detected capacity change from 0 to 512 [ 101.854345][ T6377] EXT4-fs: Ignoring removed bh option [ 102.702837][ T6382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 102.702856][ T6382] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 102.743764][ T6377] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.465: corrupted in-inode xattr: e_value size too large [ 102.743793][ T6377] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.743976][ T6377] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.465: couldn't read orphan inode 15 (err -117) [ 102.743990][ T6377] loop4: lost filesystem error report for type 5 error -117 [ 102.744540][ T6377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.805988][ T51] Bluetooth: hci5: command tx timeout [ 103.862039][ T6386] loop6: detected capacity change from 0 to 2048 [ 103.868964][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.891075][ T6386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.933113][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.140630][ T6380] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 105.198155][ T6400] loop4: detected capacity change from 0 to 512 [ 105.208922][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.218163][ T6404] loop5: detected capacity change from 0 to 256 [ 105.250871][ T6400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.290627][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.290802][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.878048][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 106.138683][ T4725] Bluetooth: hci5: command tx timeout [ 106.519364][ T6416] fido_id[6416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.178082][ T4725] Bluetooth: hci5: command tx timeout [ 108.445397][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.567864][ T6428] loop6: detected capacity change from 0 to 512 [ 108.585588][ T6428] EXT4-fs warning (device loop6): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 108.585605][ T6428] EXT4-fs warning (device loop6): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 108.654977][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.674980][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.675088][ T6365] bridge_slave_0: entered allmulticast mode [ 108.748858][ T6365] bridge_slave_0: entered promiscuous mode [ 108.755023][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.759368][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.759465][ T6365] bridge_slave_1: entered allmulticast mode [ 108.763285][ T6436] loop5: detected capacity change from 0 to 1024 [ 108.774992][ T6365] bridge_slave_1: entered promiscuous mode [ 109.779122][ T6436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.739264][ T4725] Bluetooth: hci5: command tx timeout [ 111.769524][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.770510][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.776608][ T6365] team0: Port device team_slave_0 added [ 111.777311][ T6365] team0: Port device team_slave_1 added [ 114.055940][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.055953][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.055964][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.056496][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.056503][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.056518][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.070446][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.334413][ T6448] loop4: detected capacity change from 0 to 512 [ 115.334820][ T6448] EXT4-fs: Ignoring removed nobh option [ 115.451801][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.458778][ T5942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.463235][ T6457] loop6: detected capacity change from 0 to 2048 [ 116.470798][ T6365] hsr_slave_0: entered promiscuous mode [ 117.443661][ T6365] hsr_slave_1: entered promiscuous mode [ 117.443912][ T6365] debugfs: 'hsr0' already exists in 'hsr' [ 117.443922][ T6365] Cannot create hsr debugfs directory [ 117.453855][ T6285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.454744][ T6457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.426401][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.789480][ T6465] binder: 6464:6465 got transaction to invalid handle, 1 [ 118.789499][ T6465] binder: 6464:6465 cannot find target node [ 118.789511][ T6465] binder: 6464:6465 transaction call to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3252 [ 118.790507][ T4853] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.632073][ T5942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.756789][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.769364][ T5942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.783516][ T6479] loop5: detected capacity change from 0 to 512 [ 122.657236][ T6477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 122.657254][ T6477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 123.752135][ T6485] loop5: detected capacity change from 0 to 4096 [ 123.753056][ T6485] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.768722][ T6485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.806584][ T5942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.944562][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.608588][ T6497] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.896159][ T6500] fuse: Bad value for 'fd' [ 125.972407][ T1591] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.972446][ T1591] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.204991][ T5942] bridge_slave_1: left allmulticast mode [ 130.205013][ T5942] bridge_slave_1: left promiscuous mode [ 130.205105][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.154278][ T5942] bridge_slave_0: left allmulticast mode [ 131.154302][ T5942] bridge_slave_0: left promiscuous mode [ 131.154396][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.288493][ T6533] loop4: detected capacity change from 0 to 512 [ 134.290151][ T6533] EXT4-fs (loop4): orphan cleanup on readonly fs [ 134.290162][ T6533] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 134.305276][ T6533] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 134.307362][ T6533] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.502: attempt to clear invalid blocks 2 len 1 [ 134.307385][ T6533] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.307718][ T6533] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.502: invalid indirect mapped block 1819239214 (level 0) [ 134.307737][ T6533] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.307862][ T6533] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.502: invalid indirect mapped block 1819239214 (level 1) [ 134.307875][ T6533] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.307975][ C0] EXT4-fs (loop4): error count since last fsck: 4 [ 134.307985][ C0] EXT4-fs (loop4): initial error at time 134: ext4_mb_generate_buddy:1317 [ 134.307998][ C0] EXT4-fs (loop4): last error at time 134: ext4_free_branches:1023: inode 13 [ 134.486799][ T6533] EXT4-fs (loop4): 1 truncate cleaned up [ 134.555861][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.562756][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.562929][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.629562][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.731889][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.743158][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.743988][ T5942] bond0 (unregistering): Released all slaves [ 135.906538][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.906696][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 136.012246][ T6365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.023362][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.036806][ T6365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 136.062909][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.063491][ T6365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 136.200751][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.200932][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.293534][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.361909][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.362200][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.377695][ T6365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 136.381963][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.335627][ T5942] hsr_slave_0: left promiscuous mode [ 137.337536][ T5942] hsr_slave_1: left promiscuous mode [ 137.337802][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.337815][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.346087][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.346103][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.362253][ T5942] veth1_macvtap: left promiscuous mode [ 137.362296][ T5942] veth0_macvtap: left promiscuous mode [ 137.362343][ T5942] veth1_vlan: left promiscuous mode [ 137.362378][ T5942] veth0_vlan: left promiscuous mode [ 139.538046][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 139.577261][ T6596] loop5: detected capacity change from 0 to 128 [ 139.647805][ T6596] loop5: detected capacity change from 0 to 256 [ 139.938094][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.837157][ T6605] loop2: detected capacity change from 0 to 1024 [ 140.843019][ T6605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.869008][ T6605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.875651][ T6608] loop5: detected capacity change from 0 to 128 [ 140.876105][ T6608] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.877620][ T6608] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.956684][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.957276][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.957480][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.971270][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 142.974477][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.974665][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.975308][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.975505][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.975661][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.975950][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 142.976110][ T4713] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 143.036729][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 143.293882][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 143.294144][ T6594] lo: entered promiscuous mode [ 143.336285][ T6594] tunl0: entered promiscuous mode [ 143.342179][ T6594] gre0: entered promiscuous mode [ 143.347778][ T6594] gretap0: entered promiscuous mode [ 143.354013][ T6594] erspan0: entered promiscuous mode [ 143.355559][ T6594] ip_vti0: entered promiscuous mode [ 143.356343][ T6594] ip6_vti0: entered promiscuous mode [ 143.357246][ T6594] ip6tnl0: entered promiscuous mode [ 143.364226][ T6594] ip6gre0: entered promiscuous mode [ 143.365450][ T6594] syz_tun: entered promiscuous mode [ 143.366621][ T6594] ip6gretap0: entered promiscuous mode [ 143.367651][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.368396][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.377137][ T6594] bridge0: entered promiscuous mode [ 143.384057][ T6594] vcan0: entered promiscuous mode [ 143.384885][ T6594] bond0: entered promiscuous mode [ 143.384894][ T6594] bond_slave_0: entered promiscuous mode [ 143.384961][ T6594] bond_slave_1: entered promiscuous mode [ 143.386033][ T6594] team0: entered promiscuous mode [ 143.386043][ T6594] team_slave_0: entered promiscuous mode [ 143.386104][ T6594] team_slave_1: entered promiscuous mode [ 143.387323][ T6594] dummy0: entered promiscuous mode [ 143.401062][ T6594] nlmon0: entered promiscuous mode [ 143.401840][ T6594] batadv0: entered promiscuous mode [ 143.402853][ T6594] vxcan0: entered promiscuous mode [ 143.403379][ T6594] vxcan1: entered promiscuous mode [ 143.403943][ T6594] veth0: entered promiscuous mode [ 143.404849][ T6594] veth1: entered promiscuous mode [ 143.406656][ T6594] wg0: entered promiscuous mode [ 143.415620][ T6594] wg1: entered promiscuous mode [ 143.416593][ T6594] wg2: entered promiscuous mode [ 143.417297][ T6594] veth0_to_bridge: entered promiscuous mode [ 143.423332][ T6594] veth1_to_bridge: entered promiscuous mode [ 143.425152][ T6594] veth0_to_bond: entered promiscuous mode [ 143.426641][ T6594] veth1_to_bond: entered promiscuous mode [ 143.432933][ T6594] veth0_to_team: entered promiscuous mode [ 143.434767][ T6594] veth1_to_team: entered promiscuous mode [ 143.436499][ T6594] veth0_to_batadv: entered promiscuous mode [ 143.437482][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.437518][ T6594] batadv_slave_0: entered promiscuous mode [ 143.446473][ T6594] veth1_to_batadv: entered promiscuous mode [ 143.447396][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.447438][ T6594] batadv_slave_1: entered promiscuous mode [ 143.453104][ T6594] xfrm0: entered promiscuous mode [ 143.453922][ T6594] veth0_to_hsr: entered promiscuous mode [ 143.455498][ T6594] veth1_to_hsr: entered promiscuous mode [ 143.463147][ T6594] hsr0: entered promiscuous mode [ 143.464178][ T6594] veth1_virt_wifi: entered promiscuous mode [ 143.465053][ T6594] veth0_virt_wifi: entered promiscuous mode [ 143.465903][ T6594] virt_wifi0: entered promiscuous mode [ 143.473098][ T6594] vlan0: entered promiscuous mode [ 143.474421][ T6594] vlan1: entered promiscuous mode [ 143.475443][ T6594] macvlan0: entered promiscuous mode [ 143.476479][ T6594] macvlan1: entered promiscuous mode [ 143.477322][ T6594] ipvlan0: entered promiscuous mode [ 143.477381][ T6594] ipvlan1: entered promiscuous mode [ 143.493822][ T6622] loop6: detected capacity change from 0 to 512 [ 143.496873][ T6594] macvtap0: entered promiscuous mode [ 143.503449][ T6594] macsec0: entered promiscuous mode [ 143.511729][ T6594] geneve0: entered promiscuous mode [ 143.512707][ T6622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.519066][ T6594] geneve1: entered promiscuous mode [ 143.529529][ T6594] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 143.531667][ T6594] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 143.536015][ T6594] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 143.543343][ T6594] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 143.555108][ T6594] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 143.570345][ T6594] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 143.572254][ T6594] veth2: entered promiscuous mode [ 143.572404][ T6594] veth3: entered promiscuous mode [ 143.614196][ T1902] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.616238][ T1728] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.616265][ T1728] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.616284][ T1728] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.676293][ T6637] syz.5.521 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 144.676319][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.5.521 Tainted: G L syzkaller #0 PREEMPT [ 144.676330][ T6637] Tainted: [L]=SOFTLOCKUP [ 144.676333][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.676338][ T6637] Call trace: [ 144.676340][ T6637] show_stack+0x2c/0x3c (C) [ 144.676360][ T6637] __dump_stack+0x30/0x40 [ 144.676371][ T6637] dump_stack_lvl+0xd8/0x12c [ 144.676381][ T6637] dump_stack+0x1c/0x28 [ 144.676391][ T6637] dump_header+0xbc/0x3f0 [ 144.676402][ T6637] oom_kill_process+0x248/0x864 [ 144.676415][ T6637] out_of_memory+0xd24/0x1064 [ 144.676429][ T6637] mem_cgroup_out_of_memory+0xe8/0x170 [ 144.676438][ T6637] try_charge_memcg+0x9bc/0xd38 [ 144.676450][ T6637] charge_memcg+0x19c/0x2a0 [ 144.676461][ T6637] __mem_cgroup_charge+0x38/0x98 [ 144.676472][ T6637] folio_prealloc+0x78/0x1b0 [ 144.676483][ T6637] do_pte_missing+0x1bd0/0x28bc [ 144.676493][ T6637] handle_mm_fault+0x14d0/0x2b58 [ 144.676503][ T6637] __get_user_pages+0x82c/0x13b0 [ 144.676511][ T6637] faultin_page_range+0x1f0/0x6d8 [ 144.676519][ T6637] madvise_do_behavior+0x558/0x7c0 [ 144.676529][ T6637] do_madvise+0x28c/0x2f0 [ 144.676538][ T6637] __arm64_sys_madvise+0xac/0xc8 [ 144.676547][ T6637] invoke_syscall+0x98/0x244 [ 144.676558][ T6637] el0_svc_common+0xec/0x23c [ 144.676568][ T6637] do_el0_svc+0x4c/0x5c [ 144.676577][ T6637] el0_svc+0x60/0x1d8 [ 144.676587][ T6637] el0t_64_sync_handler+0x44/0x104 [ 144.676596][ T6637] el0t_64_sync+0x198/0x19c [ 144.676605][ T6637] memory: usage 8kB, limit 8kB, failcnt 21 [ 144.676611][ T6637] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 144.676617][ T6637] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 144.676622][ T6637] Memory cgroup stats for /syz5/test: [ 144.676682][ T6637] cache 0 [ 144.676686][ T6637] rss 0 [ 144.676689][ T6637] rss_huge 0 [ 144.676692][ T6637] shmem 0 [ 144.676695][ T6637] mapped_file 0 [ 144.676698][ T6637] dirty 0 [ 144.676701][ T6637] writeback 0 [ 144.676704][ T6637] workingset_refault_anon 0 [ 144.676707][ T6637] workingset_refault_file 0 [ 144.676711][ T6637] swap 0 [ 144.676714][ T6637] swapcached 0 [ 144.676717][ T6637] pgpgin 0 [ 144.676720][ T6637] pgpgout 0 [ 144.676723][ T6637] pgfault 0 [ 144.676726][ T6637] pgmajfault 0 [ 144.676729][ T6637] inactive_anon 0 [ 144.676732][ T6637] active_anon 0 [ 144.676735][ T6637] inactive_file 0 [ 144.676738][ T6637] active_file 0 [ 144.676741][ T6637] unevictable 0 [ 144.676745][ T6637] hierarchical_memory_limit 8192 [ 144.676748][ T6637] hierarchical_memsw_limit 9223372036854771712 [ 144.676751][ T6637] total_cache 0 [ 144.676755][ T6637] total_rss 0 [ 144.676758][ T6637] total_rss_huge 0 [ 144.676761][ T6637] total_shmem 0 [ 144.676764][ T6637] total_mapped_file 0 [ 144.676767][ T6637] total_dirty 0 [ 144.676770][ T6637] total_writeback 0 [ 144.676773][ T6637] total_workingset_refault_anon 0 [ 144.676777][ T6637] total_workingset_refault_file 0 [ 144.676780][ T6637] total_swap 0 [ 144.676783][ T6637] total_swapcached 0 [ 144.676786][ T6637] total_pgpgin 0 [ 144.676789][ T6637] total_pgpgout 0 [ 144.676792][ T6637] total_pgfault 0 [ 144.676795][ T6637] total_pgmajfault 0 [ 144.676799][ T6637] total_inactive_anon 0 [ 144.676802][ T6637] total_active_anon 0 [ 144.676805][ T6637] total_inactive_file 0 [ 144.676808][ T6637] total_active_file 0 [ 144.676811][ T6637] total_unevictable 0 [ 144.676815][ T6637] anon_cost 0 [ 144.676818][ T6637] file_cost 0 [ 144.676821][ T6637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.521,pid=6630,uid=0 [ 144.677266][ T6637] Memory cgroup out of memory: Killed process 6630 (syz.5.521) total-vm:104620kB, anon-rss:1428kB, file-rss:22684kB, shmem-rss:11480kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 144.873853][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.880992][ T6640] loop5: detected capacity change from 0 to 1024 [ 144.891054][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.894168][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.910021][ T6640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.929072][ T6640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 144.929127][ T6640] System zones: 0-1, 3-36 [ 144.930787][ T6640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.952625][ T1902] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.952655][ T1902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.953172][ T1902] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.953199][ T1902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.954037][ T6642] ipvlan0: left promiscuous mode [ 145.036895][ T6640] netlink: 604 bytes leftover after parsing attributes in process `syz.5.523'. [ 145.036977][ T6640] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.070935][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.146099][ T5942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.293563][ T6662] ip_tables: iptables: counters copy to user failed while replacing table [ 146.311219][ T5942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.314840][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.382552][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.383308][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.383637][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.383942][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.384153][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.466048][ T5942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.524042][ T5942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.616455][ T6684] ip_tables: iptables: counters copy to user failed while replacing table [ 146.626850][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.6.533'. [ 146.793242][ T6693] bridge_slave_0: left allmulticast mode [ 146.793360][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.829091][ T6693] bridge_slave_1: left allmulticast mode [ 146.829195][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.834855][ T6693] bond0: (slave bond_slave_0): Releasing backup interface [ 146.848743][ T6693] bond0: (slave bond_slave_1): Releasing backup interface [ 146.853250][ T6693] team0: Port device team_slave_0 removed [ 146.854584][ T6693] team0: Port device team_slave_1 removed [ 146.854692][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.856427][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.856737][ T6693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.857263][ T5942] bridge_slave_1: left allmulticast mode [ 146.857278][ T5942] bridge_slave_1: left promiscuous mode [ 146.857341][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.876824][ T5942] bridge_slave_0: left allmulticast mode [ 146.876842][ T5942] bridge_slave_0: left promiscuous mode [ 146.876931][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.067042][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.076675][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.080634][ T5942] bond0 (unregistering): Released all slaves [ 147.091725][ T5942] bond1 (unregistering): Released all slaves [ 147.105507][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 147.116569][ T6699] batman_adv: batadv0: Adding interface: syzkaller0 [ 147.116582][ T6699] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.116600][ T6699] batman_adv: batadv0: Interface activated: syzkaller0 [ 147.133802][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.177930][ T6697] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 147.214588][ T6697] batman_adv: batadv0: Removing interface: syzkaller0 [ 147.969587][ T5942] hsr_slave_0: left promiscuous mode [ 147.970758][ T5942] hsr_slave_1: left promiscuous mode [ 147.972618][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.972630][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.973347][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.973358][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.159149][ T5942] veth1_macvtap: left promiscuous mode [ 148.159179][ T5942] veth0_macvtap: left promiscuous mode [ 148.159251][ T5942] veth1_vlan: left promiscuous mode [ 148.159284][ T5942] veth0_vlan: left promiscuous mode [ 148.458760][ T4725] Bluetooth: hci0: command tx timeout [ 149.092818][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 149.108506][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 149.285912][ T6734] loop5: detected capacity change from 0 to 128 [ 149.292020][ T6734] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 149.392765][ T6365] veth0_vlan: entered promiscuous mode [ 149.404920][ T6365] veth1_vlan: entered promiscuous mode [ 150.281237][ T6738] block device autoloading is deprecated and will be removed. [ 150.306202][ T6701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.431436][ T6365] veth0_macvtap: entered promiscuous mode [ 150.432721][ T6365] veth1_macvtap: entered promiscuous mode [ 150.435938][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.436900][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.498292][ T4725] Bluetooth: hci0: command tx timeout [ 150.498356][ T1845] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.568026][ T1845] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.568058][ T1845] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.568078][ T1845] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.756382][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.756425][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.756534][ T6665] bridge_slave_0: entered allmulticast mode [ 150.764510][ T6665] bridge_slave_0: entered promiscuous mode [ 150.780721][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.780751][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.780813][ T6665] bridge_slave_1: entered allmulticast mode [ 150.781263][ T6665] bridge_slave_1: entered promiscuous mode [ 151.418013][ T6765] binder: 6759:6765 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 151.418039][ T6765] binder: 6759:6765 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 151.695066][ T6758] binder: 6743:6758 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 151.695084][ T6758] binder: 6758 RLIMIT_NICE not set [ 151.731596][ T6766] FAULT_INJECTION: forcing a failure. [ 151.731596][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 151.731621][ T6766] CPU: 0 UID: 0 PID: 6766 Comm: syz.6.548 Tainted: G L syzkaller #0 PREEMPT [ 151.731633][ T6766] Tainted: [L]=SOFTLOCKUP [ 151.731637][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.731643][ T6766] Call trace: [ 151.731645][ T6766] show_stack+0x2c/0x3c (C) [ 151.731667][ T6766] __dump_stack+0x30/0x40 [ 151.731679][ T6766] dump_stack_lvl+0xd8/0x12c [ 151.731691][ T6766] dump_stack+0x1c/0x28 [ 151.731702][ T6766] should_fail_ex+0x418/0x58c [ 151.731714][ T6766] should_failslab+0xc4/0x120 [ 151.731727][ T6766] __kmalloc_noprof+0x108/0x6c8 [ 151.731740][ T6766] __list_lru_init+0xa4/0x3e8 [ 151.731749][ T6766] sget_fc+0xc5c/0x14e4 [ 151.731757][ T6766] vfs_get_super+0x40/0x148 [ 151.731766][ T6766] get_tree_nodev+0x2c/0x3c [ 151.731775][ T6766] ramfs_get_tree+0x28/0x38 [ 151.731788][ T6766] vfs_get_tree+0x90/0x28c [ 151.731797][ T6766] vfs_cmd_create+0xb8/0x1d0 [ 151.731806][ T6766] vfs_fsconfig_locked+0x17c/0x2bc [ 151.731815][ T6766] __arm64_sys_fsconfig+0x634/0x72c [ 151.731824][ T6766] invoke_syscall+0x98/0x244 [ 151.731836][ T6766] el0_svc_common+0xec/0x23c [ 151.731847][ T6766] do_el0_svc+0x4c/0x5c [ 151.731859][ T6766] el0_svc+0x60/0x1d8 [ 151.731870][ T6766] el0t_64_sync_handler+0x44/0x104 [ 151.731880][ T6766] el0t_64_sync+0x198/0x19c [ 151.815914][ T1902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.919464][ T1889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.919479][ T1889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.920178][ T1889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.920185][ T1889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.922982][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.923955][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.051923][ T6777] loop6: detected capacity change from 0 to 1024 [ 152.053530][ T1902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.083257][ T6777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.101572][ T6665] team0: Port device team_slave_0 added [ 152.102333][ T6665] team0: Port device team_slave_1 added [ 152.108545][ T6777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 152.108577][ T6777] System zones: 0-1, 3-36 [ 152.109944][ T6777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.161056][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.161069][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.161084][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.197297][ T6777] netlink: 604 bytes leftover after parsing attributes in process `syz.6.551'. [ 152.197316][ T6777] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.242343][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.242356][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.242371][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.381156][ T1902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.244484][ T4725] Bluetooth: hci0: command tx timeout [ 153.277299][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 153.319179][ T6665] hsr_slave_0: entered promiscuous mode [ 153.327617][ T6665] hsr_slave_1: entered promiscuous mode [ 153.334659][ T6665] debugfs: 'hsr0' already exists in 'hsr' [ 153.334679][ T6665] Cannot create hsr debugfs directory [ 153.432697][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.434735][ T1902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.510636][ T6789] loop7: detected capacity change from 0 to 256 [ 153.512353][ T6789] FAT-fs (loop7): bogus number of FAT sectors [ 153.512365][ T6789] FAT-fs (loop7): Can't find a valid FAT filesystem [ 155.578012][ T4725] Bluetooth: hci0: command tx timeout [ 156.896487][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.896689][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.943230][ T1902] bridge_slave_1: left allmulticast mode [ 156.943253][ T1902] bridge_slave_1: left promiscuous mode [ 156.943345][ T1902] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.954648][ T1902] bridge_slave_0: left allmulticast mode [ 156.954666][ T1902] bridge_slave_0: left promiscuous mode [ 156.954750][ T1902] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.223404][ T1902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.233940][ T1902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.234799][ T1902] bond0 (unregistering): Released all slaves [ 160.244468][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.244644][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.347629][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.347801][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.380232][ T6665] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 160.384021][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.384375][ T6665] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 160.457422][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.345583][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 161.346428][ T6665] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 161.359932][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.361647][ T6665] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 161.367857][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.407533][ T1902] hsr_slave_0: left promiscuous mode [ 161.410869][ T1902] hsr_slave_1: left promiscuous mode [ 161.411173][ T1902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.411184][ T1902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.411935][ T1902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.411949][ T1902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.425981][ T1902] veth1_macvtap: left promiscuous mode [ 161.426007][ T1902] veth0_macvtap: left promiscuous mode [ 161.426059][ T1902] veth1_vlan: left promiscuous mode [ 161.426092][ T1902] veth0_vlan: left promiscuous mode [ 161.592918][ T6842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.563'. [ 161.709664][ T1902] team0 (unregistering): Port device team_slave_1 removed [ 161.730761][ T1902] team0 (unregistering): Port device team_slave_0 removed [ 162.176001][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.207395][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.229027][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.229056][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.242664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.242692][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.485210][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 163.485228][ T30] audit: type=1326 audit(163.509:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6855 comm="syz.6.568" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3579368 code=0x7ffc0000 [ 163.485249][ T30] audit: type=1326 audit(163.509:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6855 comm="syz.6.568" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3579368 code=0x7ffc0000 [ 163.678217][ T6856] netlink: 80 bytes leftover after parsing attributes in process `syz.6.568'. [ 163.733727][ T6894] loop5: detected capacity change from 0 to 512 [ 163.915461][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 163.917322][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.032046][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.037408][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.357868][ T6665] veth0_vlan: entered promiscuous mode [ 164.728090][ T6935] mmap: syz.4.584 (6935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.132810][ T6665] veth1_vlan: entered promiscuous mode [ 166.167881][ T6665] veth0_macvtap: entered promiscuous mode [ 166.297576][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.297732][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.406146][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.414573][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.548395][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 166.548684][ T14] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.548722][ T14] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.548741][ T14] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.548758][ T14] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.554852][ T6665] veth1_macvtap: entered promiscuous mode [ 166.585826][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.600680][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.616006][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.616047][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.616072][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.616088][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.754300][ T1845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.754318][ T1845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.846455][ T1902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.846472][ T1902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.973286][ T6979] loop7: detected capacity change from 0 to 1024 [ 166.974741][ T6979] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.986623][ T6979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 166.986664][ T6979] System zones: 0-1, 3-36 [ 166.987790][ T6979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.021605][ T6979] netlink: 604 bytes leftover after parsing attributes in process `syz.7.595'. [ 167.021623][ T6979] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 170.458922][ T7011] xt_hashlimit: size too large, truncated to 1048576 [ 170.473614][ T6365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.728611][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.728781][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.753317][ T30] audit: type=1326 audit(171.779:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.753341][ T30] audit: type=1326 audit(171.779:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.766807][ T30] audit: type=1326 audit(171.789:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.766829][ T30] audit: type=1326 audit(171.789:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.766844][ T30] audit: type=1326 audit(171.789:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.767243][ T30] audit: type=1326 audit(171.789:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.767258][ T30] audit: type=1326 audit(171.789:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.767273][ T30] audit: type=1326 audit(171.789:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.767567][ T30] audit: type=1326 audit(171.789:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 171.767599][ T30] audit: type=1326 audit(171.789:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.8.611" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad79368 code=0x7ffc0000 [ 174.771779][ T7031] netlink: 80 bytes leftover after parsing attributes in process `syz.8.611'. [ 175.062436][ T7041] loop7: detected capacity change from 0 to 512 [ 176.043499][ T7041] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 176.043521][ T7041] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 176.044029][ T7041] System zones: 0-1, 15-15, 18-18, 34-34 [ 176.044148][ T7041] EXT4-fs (loop7): orphan cleanup on readonly fs [ 176.044209][ T7041] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 176.044221][ T7041] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 176.045110][ T7041] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.613: bad orphan inode 16 [ 176.045131][ T7041] loop7: lost filesystem error report for type 5 error -117 [ 176.045309][ T7041] ext4_test_bit(bit=15, block=18) = 1 [ 176.045317][ T7041] is_bad_inode(inode)=0 [ 176.045321][ T7041] NEXT_ORPHAN(inode)=0 [ 176.045325][ T7041] max_ino=32 [ 176.045329][ T7041] i_nlink=2 [ 176.045849][ T7041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.228307][ T7058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.218052][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 180.657522][ T6365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.175607][ T7067] netlink: 40 bytes leftover after parsing attributes in process `syz.6.620'. [ 185.405395][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 185.425596][ T7086] loop7: detected capacity change from 0 to 1024 [ 185.458997][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.459169][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.463124][ T7086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.548435][ T1591] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.548469][ T1591] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.561041][ T7086] serio: Serial port ptm0 [ 188.578287][ T7097] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 189.715605][ T6365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.741351][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.8.630'. [ 189.741372][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.8.630'. [ 189.745536][ T7116] vlan0: entered promiscuous mode [ 189.949149][ T7123] sctp: [Deprecated]: syz.6.633 (pid 7123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.949149][ T7123] Use struct sctp_sack_info instead [ 190.118048][ T7131] netlink: 'syz.8.635': attribute type 2 has an invalid length. [ 190.118068][ T7131] netlink: 'syz.8.635': attribute type 1 has an invalid length. [ 190.118078][ T7131] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.635'. [ 190.153730][ T7132] FAULT_INJECTION: forcing a failure. [ 190.153730][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 190.153752][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.6.636 Tainted: G L syzkaller #0 PREEMPT [ 190.153764][ T7132] Tainted: [L]=SOFTLOCKUP [ 190.153768][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 190.153773][ T7132] Call trace: [ 190.153776][ T7132] show_stack+0x2c/0x3c (C) [ 190.153798][ T7132] __dump_stack+0x30/0x40 [ 190.153812][ T7132] dump_stack_lvl+0xd8/0x12c [ 190.153823][ T7132] dump_stack+0x1c/0x28 [ 190.153834][ T7132] should_fail_ex+0x418/0x58c [ 190.153848][ T7132] should_failslab+0xc4/0x120 [ 190.153862][ T7132] kmem_cache_alloc_noprof+0x94/0x5d4 [ 190.153875][ T7132] security_inode_alloc+0x40/0x304 [ 190.153884][ T7132] inode_init_always_gfp+0x704/0xb20 [ 190.153895][ T7132] alloc_inode+0x9c/0x198 [ 190.153904][ T7132] new_inode+0x20/0x50 [ 190.153914][ T7132] debugfs_get_inode+0x20/0x7c [ 190.153927][ T7132] debugfs_create_symlink+0x98/0x17c [ 190.153938][ T7132] ref_tracker_dir_symlink+0x21c/0x39c [ 190.153949][ T7132] net_ns_net_debugfs+0x70/0x100 [ 190.153960][ T7132] net_ns_net_init+0x20/0x34 [ 190.153970][ T7132] ops_init+0x2cc/0x528 [ 190.153979][ T7132] setup_net+0x118/0x2fc [ 190.153988][ T7132] copy_net_ns+0x454/0x698 [ 190.153997][ T7132] create_new_namespaces+0x304/0x50c [ 190.154008][ T7132] unshare_nsproxy_namespaces+0x120/0x170 [ 190.154018][ T7132] ksys_unshare+0x438/0x6cc [ 190.154027][ T7132] __arm64_sys_unshare+0x40/0x54 [ 190.154036][ T7132] invoke_syscall+0x98/0x244 [ 190.154048][ T7132] el0_svc_common+0xec/0x23c [ 190.154059][ T7132] do_el0_svc+0x4c/0x5c [ 190.154070][ T7132] el0_svc+0x60/0x1d8 [ 190.154081][ T7132] el0t_64_sync_handler+0x44/0x104 [ 190.154092][ T7132] el0t_64_sync+0x198/0x19c [ 190.154300][ T7132] debugfs: out of free dentries, can not create symlink 'netns-94-4026532410-refcnt' [ 190.156302][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.156479][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.401004][ T7145] loop4: detected capacity change from 0 to 128 [ 193.402788][ T7145] vfat: Unknown parameter '18446744073709551615' [ 193.431926][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 193.435333][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.435515][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.507223][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.507427][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.513886][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.640'. [ 193.527123][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.527293][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.543672][ T7145] netlink: 104 bytes leftover after parsing attributes in process `syz.4.640'. [ 193.563492][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.563693][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.581345][ T7151] loop6: detected capacity change from 0 to 512 [ 193.595544][ T7151] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 193.665736][ T7151] EXT4-fs (loop6): 1 truncate cleaned up [ 193.666228][ T7151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.678730][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.678897][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.320846][ T7169] loop5: detected capacity change from 0 to 512 [ 194.333781][ T7169] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.353166][ T7169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.685304][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.717593][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.755915][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.756090][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.330176][ T7195] IPv6: sit1: Disabled Multicast RS [ 196.393835][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 196.471836][ T7203] ip_tables: iptables: counters copy to user failed while replacing table [ 200.665921][ T7229] IPv6: sit1: Disabled Multicast RS [ 200.675962][ T7232] netlink: 132 bytes leftover after parsing attributes in process `syz.8.663'. [ 201.758223][ T7254] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 201.758242][ T7254] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 202.091582][ T7260] ip_tables: iptables: counters copy to user failed while replacing table [ 203.164666][ T7269] loop6: detected capacity change from 0 to 512 [ 203.177688][ T7269] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 203.184537][ T7269] EXT4-fs (loop6): 1 truncate cleaned up [ 203.184972][ T7269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.293515][ T7278] loop8: detected capacity change from 0 to 1024 [ 203.525543][ T7278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.674925][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 203.859801][ T5862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.911407][ T7279] loop7: detected capacity change from 0 to 8192 [ 203.922850][ T7279] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.079930][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.351599][ T7321] loop4: detected capacity change from 0 to 512 [ 207.309609][ T7321] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 207.342290][ T7321] EXT4-fs (loop4): 1 truncate cleaned up [ 207.342748][ T7321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.002532][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.065379][ T7343] loop6: detected capacity change from 0 to 512 [ 208.067749][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.067915][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.077590][ T7343] EXT4-fs warning (device loop6): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 208.077612][ T7343] EXT4-fs warning (device loop6): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 208.109173][ T7347] loop5: detected capacity change from 0 to 512 [ 208.124899][ T7347] EXT4-fs warning (device loop5): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 208.124915][ T7347] EXT4-fs warning (device loop5): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 210.266723][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 210.281393][ T7358] loop4: detected capacity change from 0 to 1024 [ 211.250231][ T7358] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 211.252103][ T7358] JBD2: no valid journal superblock found [ 211.254298][ T7358] EXT4-fs (loop4): Could not load journal inode [ 211.561297][ T7363] loop7: detected capacity change from 0 to 128 [ 211.563063][ T7363] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 211.575045][ T7370] loop6: detected capacity change from 0 to 512 [ 211.589953][ T7370] EXT4-fs warning (device loop6): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 211.589979][ T7370] EXT4-fs warning (device loop6): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 214.569658][ T7380] loop8: detected capacity change from 0 to 128 [ 214.574000][ T7380] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 215.485785][ T7393] loop4: detected capacity change from 0 to 128 [ 215.486566][ T7393] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 216.693644][ T7398] loop8: detected capacity change from 0 to 8192 [ 216.709124][ T7398] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.025923][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.710'. [ 219.242331][ T7433] loop7: detected capacity change from 0 to 1024 [ 219.246515][ T7433] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 219.252457][ T7433] JBD2: no valid journal superblock found [ 219.260306][ T7433] EXT4-fs (loop7): Could not load journal inode [ 219.417331][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 220.306795][ T7442] IPv6: sit1: Disabled Multicast RS [ 221.694561][ T7461] loop4: detected capacity change from 0 to 512 [ 221.775560][ T7461] EXT4-fs warning (device loop4): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 221.775579][ T7461] EXT4-fs warning (device loop4): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 226.219335][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 226.262316][ T7480] loop4: detected capacity change from 0 to 512 [ 226.263348][ T7480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.807384][ T7480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.155900][ T7480] fuse: Bad value for 'fd' [ 230.184475][ T7509] overlayfs: missing 'lowerdir' [ 230.296445][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.777880][ T7527] loop4: detected capacity change from 0 to 512 [ 231.706719][ T7527] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 231.716213][ T7527] EXT4-fs (loop4): 1 truncate cleaned up [ 231.716692][ T7527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.946122][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.958699][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.958877][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.324693][ T7553] overlayfs: missing 'lowerdir' [ 233.701645][ T7560] Bluetooth: MGMT ver 1.23 [ 233.701685][ T7560] Bluetooth: hci0: invalid len left 7, exp >= 120 [ 233.712255][ T7555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.712406][ T7555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.712499][ T7555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.712536][ T7555] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.724335][ T7555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 233.724375][ T7555] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 233.726177][ T7555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.726227][ T7555] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 233.727656][ T7555] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 233.737023][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.737262][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.981522][ T7583] loop8: detected capacity change from 0 to 512 [ 233.987194][ T7583] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 233.998430][ T7583] EXT4-fs (loop8): 1 truncate cleaned up [ 233.998970][ T7583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.403196][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.403381][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.546188][ T7596] No control pipe specified [ 235.338212][ T7603] random: crng reseeded on system resumption [ 235.655458][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.754'. [ 235.655525][ T7601] bridge_slave_1: left allmulticast mode [ 235.655540][ T7601] bridge_slave_1: left promiscuous mode [ 235.655664][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.731051][ T7601] bridge_slave_0: left allmulticast mode [ 235.731070][ T7601] bridge_slave_0: left promiscuous mode [ 235.731143][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.753445][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.778165][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 235.778190][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 235.778207][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 235.778223][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 235.778294][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.912026][ T7610] loop8: detected capacity change from 0 to 512 [ 235.915355][ T7610] EXT4-fs warning (device loop8): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 235.915369][ T7610] EXT4-fs warning (device loop8): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 237.913893][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.913926][ T4725] Bluetooth: hci2: command 0x0406 tx timeout [ 237.913944][ T4725] Bluetooth: hci5: command 0x0406 tx timeout [ 237.947814][ T7619] loop5: detected capacity change from 0 to 512 [ 237.963399][ T7619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 238.930344][ T7619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.935763][ T7622] ip_tables: iptables: counters copy to user failed while replacing table [ 239.443569][ T5073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.513934][ T1902] IPVS: starting estimator thread 0... [ 239.525988][ T7632] IPVS: rr: UDP 172.20.20.11:20001 - no destination available [ 239.541740][ T7632] ------------[ cut here ]------------ [ 239.541751][ T7632] WARNING: net/core/rtnetlink.c:4599 at rtmsg_ifinfo_build_skb+0x21c/0x25c, CPU#0: syz.4.763/7632 [ 239.544733][ T7632] Modules linked in: [ 239.545500][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.4.763 Tainted: G L syzkaller #0 PREEMPT [ 239.547381][ T7632] Tainted: [L]=SOFTLOCKUP [ 239.548218][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 239.550107][ T7632] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 239.551525][ T7632] pc : rtmsg_ifinfo_build_skb+0x21c/0x25c [ 239.552578][ T7632] lr : rtmsg_ifinfo_build_skb+0x21c/0x25c [ 239.553647][ T7632] sp : ffff8000953b6600 [ 239.554395][ T7632] x29: ffff8000953b6640 x28: 1fffe0001b780021 x27: 0000000000000000 [ 239.555904][ T7632] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000002 [ 239.557452][ T7632] x23: 0000000000000000 x22: ffff0000dbc00000 x21: 0000000000000010 [ 239.558959][ T7632] x20: 00000000ffffffa6 x19: ffff0000fb966b40 x18: 00000000a25e7a3c [ 239.560473][ T7632] x17: 00000000b6ebab83 x16: dfff800000000000 x15: 0000000000000000 [ 239.562150][ T7632] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 239.563794][ T7632] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000018d8d [ 239.565420][ T7632] x8 : ffff8000a042c000 x7 : 0000000000000000 x6 : 000000007363616d [ 239.567021][ T7632] x5 : ffff0000cdbe1274 x4 : 0000000000000004 x3 : ffff800084c7f394 [ 239.568592][ T7632] x2 : 00000000ffffffa6 x1 : ffff0000c7521d80 x0 : 0000000000000001 [ 239.570076][ T7632] Call trace: [ 239.570708][ T7632] rtmsg_ifinfo_build_skb+0x21c/0x25c (P) [ 239.571754][ T7632] rtmsg_ifinfo_event+0xb0/0x114 [ 239.572701][ T7632] rtnetlink_event+0xb0/0xf0 [ 239.573594][ T7632] notifier_call_chain+0x1a4/0x4cc [ 239.574574][ T7632] raw_notifier_call_chain+0x3c/0x50 [ 239.575538][ T7632] call_netdevice_notifiers_info+0xb8/0x120 [ 239.576691][ T7632] netdev_update_features+0xa4/0xf4 [ 239.577744][ T7632] netif_disable_lro+0x5c/0x378 [ 239.578715][ T7632] ipv6_add_dev+0x3d8/0x100c [ 239.579638][ T7632] addrconf_notify+0x400/0xbbc [ 239.580601][ T7632] notifier_call_chain+0x1a4/0x4cc [ 239.581578][ T7632] raw_notifier_call_chain+0x3c/0x50 [ 239.582589][ T7632] call_netdevice_notifiers_info+0xb8/0x120 [ 239.583727][ T7632] register_netdevice+0x1018/0x14c0 [ 239.584696][ T7632] macsec_newlink+0x4b0/0xdcc [ 239.585573][ T7632] rtnl_newlink_create+0x294/0x6b8 [ 239.586539][ T7632] rtnl_newlink+0xfe4/0x138c [ 239.587524][ T7632] rtnetlink_rcv_msg+0x66c/0x9bc [ 239.588546][ T7632] netlink_rcv_skb+0x238/0x414 [ 239.589509][ T7632] rtnetlink_rcv+0x28/0x38 [ 239.590401][ T7632] netlink_unicast+0x600/0x7f8 [ 239.591396][ T7632] netlink_sendmsg+0x648/0x948 [ 239.592318][ T7632] __sock_sendmsg+0xc8/0x17c [ 239.593179][ T7632] ____sys_sendmsg+0x3d0/0x6c8 [ 239.594204][ T7632] ___sys_sendmsg+0x198/0x224 [ 239.595209][ T7632] __sys_sendmsg+0x158/0x204 [ 239.596203][ T7632] __arm64_sys_sendmsg+0x88/0x9c [ 239.597141][ T7632] invoke_syscall+0x98/0x244 [ 239.598024][ T7632] el0_svc_common+0xec/0x23c [ 239.598908][ T7632] do_el0_svc+0x4c/0x5c [ 239.599736][ T7632] el0_svc+0x60/0x1d8 [ 239.600576][ T7632] el0t_64_sync_handler+0x44/0x104 [ 239.601556][ T7632] el0t_64_sync+0x198/0x19c [ 239.602457][ T7632] irq event stamp: 1448 [ 239.603253][ T7632] hardirqs last enabled at (1447): [] netdev_copy_name+0x9c/0x1e0 [ 239.605089][ T7632] hardirqs last disabled at (1448): [] el1_brk64+0x20/0x54 [ 239.606813][ T7632] softirqs last enabled at (1442): [] __alloc_skb+0x1c0/0x610 [ 239.608511][ T7632] softirqs last disabled at (1438): [] __alloc_skb+0x1a8/0x610 [ 239.610207][ T7632] ---[ end trace 0000000000000000 ]--- [ 239.668411][ T7639] IPVS: using max 60 ests per chain, 144000 per kthread [ 240.532251][ T4726] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.577267][ T7632] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 240.602554][ T7649] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 240.602572][ T7649] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 248.818629][ T1591] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.818662][ T1591] ieee802154 phy1 wpan1: encryption failed: -22