last executing test programs: 2m43.333511491s ago: executing program 32 (id=498): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x78, 0x0, @multicast1=0xe0000300}}}}}, 0x0) 2m31.824122698s ago: executing program 33 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0xff, @empty, 0xe}}, 0x0, 0x0, 0x1d, 0x0, "020602c431ee4eedabc588aa412e06ba42240a728cdd9f47964fc3c013ce6ad4c3c609f21ea5f3848a5fb0bbbdf313f9d8a156441a6a97d5b636ce0c025d22183bfd290000000400"}, 0x121) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000005f00)={@in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) connect$inet6(r0, &(0x7f0000006100)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 2m21.718511941s ago: executing program 34 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x1c, r1, 0x331, 0x70bd29, 0xfffffffb, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050005}, 0x0) 2m20.428416991s ago: executing program 35 (id=640): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 2m12.556882184s ago: executing program 36 (id=744): syz_read_part_table(0x1051, &(0x7f00000005c0)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") r0 = open(0x0, 0x121342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001640)={0x1, &(0x7f0000001680)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x6) sync() sync() sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setfsuid(0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x101042, 0x65) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3, 0x0, 0x49, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x7c}}) bind$xdp(r1, &(0x7f0000000480)={0x2c, 0xa, r2, 0x4}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m1.698331425s ago: executing program 6 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7020000e7ffff07850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000001d00008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000900)="b8010045c72ce8558525bceb691f", 0x0, 0xd41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.396822591s ago: executing program 6 (id=1205): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x35}, [@call={0x85, 0x0, 0x0, 0xa4}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m1.31357993s ago: executing program 6 (id=1208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x282, 0x6) write(r0, &(0x7f0000000180)='27', 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x20) 2m1.313332035s ago: executing program 6 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4cf6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m0.446625532s ago: executing program 6 (id=1218): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 2m0.389801855s ago: executing program 6 (id=1219): r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000001a40), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a80)={[{0x2d, 'pids'}]}, 0x6) 1m52.226607543s ago: executing program 37 (id=1065): r0 = fsopen(&(0x7f0000000c40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000c80), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB='+cpu'], 0xb) 1m50.928144035s ago: executing program 9 (id=1416): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) 1m49.845709317s ago: executing program 9 (id=1434): syz_usb_connect(0x2, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x9, 0x1e, 0x8e, 0x20, 0x17ef, 0x304f, 0xed2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x20, 0xb, "", [{{0x9, 0x4, 0xc4, 0x5, 0x0, 0xca, 0xe6, 0x59, 0x40}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 1m49.117779246s ago: executing program 9 (id=1442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) 1m49.101442131s ago: executing program 9 (id=1443): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000008050000010b007e0b0a42b820a8e8c9881db642", @ANYBLOB="524c9bb3f4529a6d7e955c707cc2a82fde27fd5e144480aab7e927ab0fb1391032d08e42eed65d1d1c52ef9f75d43ce3f17d30c0f2030f7c77cf44c26f5a82805e59b0dd6ba0672e401bc3a3795286dca4106332f3ad5cd392dd66d085bea31901302c"], 0x97) 1m49.034061007s ago: executing program 9 (id=1444): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000240)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) 1m48.941769149s ago: executing program 9 (id=1445): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 1m45.394547921s ago: executing program 38 (id=1219): r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000001a40), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a80)={[{0x2d, 'pids'}]}, 0x6) 1m33.923383589s ago: executing program 39 (id=1445): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 1m20.833765621s ago: executing program 5 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4cf6000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m20.790037406s ago: executing program 8 (id=1970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\b\x00', 0x2}], 0x1, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) 1m20.754535896s ago: executing program 8 (id=1972): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x70, 'thin-pool\x00', {@rnull={'/dev/syzrnull', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128', 0x20, 0xc, ' 1 ignore_discard'}}]}) 1m20.751821291s ago: executing program 5 (id=1974): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1m20.689725479s ago: executing program 8 (id=1975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x16c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_ACT={0x13c, 0x1, [@m_skbmod={0x138, 0x12, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x8, 0x7, 0x6a, 0x40}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x7, 0x0, 0x2, 0x3ff}, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}]}, {0x6e, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m20.689141042s ago: executing program 8 (id=1976): syz_mount_image$ext4(&(0x7f0000001ec0)='ext4\x00', &(0x7f0000001f00)='./file0\x00', 0x200000, &(0x7f0000001f40)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000002000)="$eJzs3U1vG0UfAPD/Ok7f0udpKlUVcECReqCo1GkSXorEoRwRVFSCe7GSbVTFqavYqZpQifZAL1xQhYQQlRAfgDvHii/Ap+iBShWqIjhwMVpnnbqNnbiJ27j495M2mdkdZ3Y8O+MZj50NYGhNZD8KEa9GxLdJxJG2Y8XID06sp1t7dGM225JoND77M4kk39dKn+S/x/LIKxHx29cRpwqb862trC6UK5V0KY9P1hevTtZWVk9fXizPp/PplemZmbPvzEy//967fSvrmxf+/uHTex+d/ebE2ve/PDh6J4lzcTg/1l6OXbjZHpmIifw5GY1zTyWc6kNmgyTZ6xNgR0bydj4aWR9wJEbyVg/8930VEQ1gSCXaPwyp1jigNbfv0zz4pfHww/UJ0ObyF9ffG4kDzbnRobXkiZlRNt8d70P+WR6//nH3TrZF/96HANjWzVsRcaZY3Nz/JXn/t3NnekjzdB76P3hx7mXjn7c6jX8KG+Of6DD+GevQdndi+/ZfeNCHbLrKxn8fdBz/bixajY/ksf81x3yjyaXLlTTr2/4fESdjdH8W32o95+za/Ua3Y+3jv2zL8m+NBfPzeFDc/+Rj5sr18m7K3O7hrYjXOo5/k436TzrUf/Z8XOgxj+Pp3de7Hdu+/M9X4+eINzrW/+MVrWTr9cnJ5vUw2boqNvvr9vHfu+W/1+XP6v/Q1uUfT9rXa2vPnsdPB/5Jux3b6fW/L/m8Gd6X77terteXpiL2JZ9s3j/9+LGteCt9Vv6TJ7bu/zpd/wcj4osey3/72O2uSQeh/ueeqf6fPXD/4y9/7JZ/b/X/djN0Mt/TS//X6wnu5rkDAAAAAACAQVOIiMORFEob4UKhVFr/fMexOFSoVGv1U5eqy1fmovld2fEYLbRWusfaPg8xlX8ethWffio+ExFHI+K7kYPNeGm2Wpnb68IDAAAAAAAAAAAAAAAAAADAgBjr9P3/1v9bH9njkwOeP7f8huG1bfvvx52egIHk9R+Gl/YPw0v7h+Gl/cPwKq7fzxgYQl7/YXhp/zC8tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqwvnz2dbY+3RjdksPndtZXmheu30XFpbKC0uz5Zmq0tXS/PV6nwlLc1WF7f7e5Vq9erUdCxfn6yntfpkbWX14mJ1+Ur94uXF8nx6MR19IaUCAAAAAAAAAAAAAAAAAACAl0ttZXWhXKmkSwICOwoUB+M0BPoc2OueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+zcAAP//eIg3rQ==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchownat(0xffffffffffffff9c, &(0x7f00000068c0)='./file0\x00', 0x0, 0xee01, 0x1000) 1m19.845212779s ago: executing program 5 (id=1983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\b\x00', 0x2}], 0x1, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) 1m19.812860819s ago: executing program 8 (id=1984): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000002280)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000002340)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m19.800945311s ago: executing program 5 (id=1986): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_clone(0x82842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) io_setup(0xe87, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x3) 1m19.723001474s ago: executing program 5 (id=1988): socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x4}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff18}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x4000c00) 1m19.649749121s ago: executing program 5 (id=1989): r0 = fsopen(&(0x7f00000013c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000001400), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001480)={[{0x2d, 'cpu'}]}, 0x5) 1m18.605726787s ago: executing program 8 (id=2000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000ff00fffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffffcb00"/116], 0x138}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) connect$inet(r3, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000001300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'batadv_slave_0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000440), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 1m18.569455345s ago: executing program 40 (id=2000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000ff00fffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffffcb00"/116], 0x138}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) connect$inet(r3, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000001300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'batadv_slave_0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000440), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 1m17.19767162s ago: executing program 1 (id=2020): pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) 1m17.101666445s ago: executing program 1 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="06008864080014"], 0x2655) 1m16.582215574s ago: executing program 1 (id=2024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001a800)=ANY=[@ANYBLOB="0100000063000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000300000000000000000000000000050022107e5665552fc6637fc01ea3c7e6c255e96ff2b7c18f203cb49615a90434ae5f339aa4fd8c7e3ad9d36a86445bfea459eef63a8795b1ed2e38441cd0a69c1220a8cbee047364c8ba932a3d4a7daaae094ad41123c53a11eb427e33f23147f40362bcd78cf5d1dd43ae9f3fc83aa1fe7074fa72413cae973ddf57cdfb9f3fd861d9e4e9680f2ff83610f3b6eb08c87f885339e8c3839dc56e8c83e4e294171b4e04ca6881d750e9713586b8ed790b88eb64a167fa41db1be86a09d30a7a50842ec1fdddfae604b5d7f8c81e7273611fdcfab2c174f9ca29d70107f543", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000001a940)={0x0, 0x0, &(0x7f000001a980)={&(0x7f000001a9c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fffffffd320000007f000001000000000000000000000000000000000000004000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900"], 0x138}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f000001ab00)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f000001ab40)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r2, 0x0, 0x0) 1m16.444451249s ago: executing program 1 (id=2026): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000400)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x30}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m16.39349492s ago: executing program 1 (id=2028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x80) 1m16.229127049s ago: executing program 1 (id=2030): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x42f88000) syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./cgroup\x00', 0xa0040e, &(0x7f0000000680)={[{@noload}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt}, {@audit}]}, 0x21, 0x4c0, &(0x7f0000000700)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu85Z5jvOXNzzxlO23sCGFjnI2I7IkYj4n5ETLXLk3aKW62Uve7Vy8cLOy8fLyTRbN79T5LXZ2Wx799kTrbfczwifvqjiF8kb8atb26tzFcq5fV2vtiorhXrm1tXlqvzS+Wl8mqpNDc7N3Pj6vXSkfX1XPUPL364fPtnf/7TN57/dfv7v8qaNdmu29+Po9Tq+shenKxgOCJufxHB+mAoWv0ZPVDe4ZLzAUoj4ksRcSG//6diKL+aAMBx1mxORXNqfx4AOO7SfA0sSQvttYDJSNNCobWGdzYm0kqt3rj8oLaxuthaK5uOkfTBcqU8014rnI6RJMvP5uev86UD+asRcSYifj12Is8XFmqVxX5+8QGAAXbywPz//7HW/A8AHHPj/W4AANBz5n8AGDzmfwAYPOZ/ABg85n8AGDzmfwAYPOZ/ABgoP7lzJ0vNnfbzrxcfbm6s1B5eWSzXVwrVjYXCQm19rbBUqy3lz+ypvuv9KrXa2uy12HhUbJTrjWJ9c+tetbax2riXP9f7XnmkJ70CAN7mzLlnf08iYvvmiTzFvr0czNVwvKX9bgDQN0P9bgDQN3b7gsHl//jAu/Zr7forQk+Pvi1Ab1z6qvV/GFTW/2FwWf+HwWX9HwZXs5nY8x8ABow1fsDP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODzm8xTkhbae4FPRpoWChGnImI6RpIHy5XyTEScjoi/jY2MZfnZfjcaAHhP6b+S+Ki9DeDFyYO1o8nHY/kxIn7527u/eTTfaKzPZuX/3StvPG2Xl3reeADgEHbn6d15fNerl48XdlMv2/PiB63NRbO4O+3UqhmO4fw4HtmXk4n/Je18SxIRQ0cQf/tJRHylU/+TfG1kur3z6cH4WexTPY2ffiZ+mte1jtln8eUjaAsMmmfZ+HOr0/2Xxvn82Pn+H89HqPe3O/7tHBz/kuG9SENdxr/zh41x7S8/Hu1W9yTia8Md4keyN/4mXeJfPGT8f3z9mxe61TV/F3EpOsffH6vYqK4V65tbV5ar80vlpfJqqTQ3Ozdz4+r1UjFfoy7urlS/6d83L5/uFj/r/0SX+PmVvzPZtf/fOWT/f//J/Z9/6y3xv/ftTvHTOJsfO3/+2Zz43UPGn5/4Y9ftu7P4i136/67rf/mQ8Z//c2vxkC8FAHqgvrm1Ml+plNedONk72f2m96G0p/tJc6rV0g+lPcfnpJ+jEtALr2/6frcEAAAAAAAAAAAAAADophd/TtTvPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8fRoAAP//wLrUnw==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c00)='ext3\x00', &(0x7f0000000c40)='./cgroup\x00', 0x11, &(0x7f0000000c80)={[{@data_err_ignore}, {@acl}], [{@euid_gt}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\']'}}, {@subj_type}, {@pcr={'pcr', 0x3d, 0x3b}}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '.@!'}}]}, 0x1, 0x671, &(0x7f0000000d40)="$eJzs3U9oHG0ZAPBnJpv/6uYrotaDX1DkK+iXNGmrRYQ2F0Eoof65eYpNWmq3TWkimlowgXoRxIsHwZMH68mDZ0ELvXjowasHL56kUER6sFLtyszOpJtNNtk02d00+f1gszM7u/M+0+6z7zvvvu9sACfWZPYnjTgdEXeTiGrTtkoUGycbz3vxrwfXslsS9fq3/pnEgx8n6837Sor78eLF/6tG8pc04tTA9nJX1u7fWqjVlu4V69Ort+9Or6zd//Dm7YUbSzeW7sx+afbihfMXLs6cPdDxXWrc/Tf7c+Xh935Q/en8d37zq1fJzG//Np/E5XhdxJYdV+trhw9UcvZvNhn1hpdbNqQRFw+476Pi39XyfZIbzt4QSaXlSUO9jopOpUWODEbEJ6MaA/EmWavxk2/0NTigq+pJ5HXUZB04eZLYspo1CMrlmyPFh8R2I70IDeiqsh1QntvvdB68XdrNJgnQI8/nGn11jdwfjIgy/yuNvsEYyfsGxl4kzf08eV/fwXrmGrIynj6Zf/j0yXze2Ojs8wc4DOsbZS93a/2f5Lk5EY1zgLEX6Zb8nytaAWnxPcE3W3fcYef5ZMu6/IfeWd+IiE8V9f9QdJz/aZG7Zf5/d8teT3dcvvwHAAAAAACAw/N4LiK+uNP4v3Rz/M/QDuN/xiPi8iGUv/f3f+mzYiE5hOKAJs/nIr5ajv/NHmjK/8LEQLH20Xw8wGBy/WZt6WxEfCwizsTgcLY+07Lf5hHCH/7s1C/bld80/i+/ZXFk9017elZpGUu0uLC6cMDDBrL834j4dD7+9/3ika3jf7L6P9mh/s/y+26HZZz6/KOr7bbtnf9At9R/HfHBjvN/3jS3k92vzzGdtwemy1bBdp/50c//2K58+Q/9k9X/Y7vn/3DSfL2elf3tfygizq1V6u22v237fyj59kA0XVrmhwurq/dmIoaSK9sfn91fzHBclflQ5kuW/2c+t3v/32b7vykPRyNivcMyP/F6/O/ttqn/oX+y/F/cvf6vbq3/978w+2jiT+3Kv9pR/X8+r9PPFI/o/4Nm26/H0WmC9iVcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjHpRHxkUjSqc3lNJ2aihiPiI/HWFpbXln9wvXl799ZzLblv/+flr/0W22sJ+Xv/080rc+2rJ+LiPci4hcDo/n61LXl2mK/Dx4AAAAAAAAAAAAAAAAAAACOiPF8zn99uHX+f+YfA/2ODui6SnEv3+Hkqbz1K+vDhxoI0HNvn//Au2xjX/k/2NVYgN5rn/8vX9VzLQ9/7bNdjwnoDe1/OLn2n/++KYDjol3+D/U4DqDXOuzTG+l2HEA/OP8HAAAAAIBj5b33H/81iYj1r4zmt2j62n+0r5EB3Zb2OwCgbwzkhZOrstzvCIB+MaEfSDaX/tM62T/XfvR/0p2AAAAAAAAAAAAAAIBtPjjdfv6/uQFwvO0+/9/YfjjOdpn/v1Pyu1wAHCONn/5Y32GLuh+OO+f4wF61vfn/AAAAAAAAAAAAAHAEjNy/tVCrLd1bWdtzoRzp29GTe7Fw6WiEsb+F9YWD7ac+3GbTn/t3XK87f/KX/9B4E+355Erxbtt3POUc1aPx3725kIVUqy3V6x0c+0p5CY499/y73ydfL/Z8yDH39mMIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo7/8BAAD//3OQDSo=") connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f00000013c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001400), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000001480)={[{0x2d, 'cpu'}]}, 0x5) 1m4.55917452s ago: executing program 41 (id=1989): r0 = fsopen(&(0x7f00000013c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000001400), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001480)={[{0x2d, 'cpu'}]}, 0x5) 1m0.832816751s ago: executing program 42 (id=2030): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x42f88000) syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./cgroup\x00', 0xa0040e, &(0x7f0000000680)={[{@noload}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt}, {@audit}]}, 0x21, 0x4c0, &(0x7f0000000700)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c00)='ext3\x00', &(0x7f0000000c40)='./cgroup\x00', 0x11, &(0x7f0000000c80)={[{@data_err_ignore}, {@acl}], [{@euid_gt}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\']'}}, {@subj_type}, {@pcr={'pcr', 0x3d, 0x3b}}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '.@!'}}]}, 0x1, 0x671, &(0x7f0000000d40)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f00000013c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001400), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000001480)={[{0x2d, 'cpu'}]}, 0x5) 4.802711283s ago: executing program 7 (id=2613): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf32}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000880)="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", 0x4f0, 0xfffffffffffffffd) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000001cc0)='GPL\x00'}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000001dc0)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) rseq(&(0x7f0000002180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.800010309s ago: executing program 3 (id=2614): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 4.746984869s ago: executing program 3 (id=2615): syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@noload}]}, 0xfe, 0x5a3, &(0x7f0000001180)="$eJzs3U1oHGUYAOB3ZrNNf6KpoKDSQ1GhQukm6Y9WT+1VLBR6ELxo2GxDySZbshttQsD05qGIPYhKL/WmB4+KBw/ixaNXL/6chWKDQtODrmx2Nk3TTd3EbKLZ54FJvm9msu/77cw72Rlm2AB61uHGjzTiqYg4n0QMrlrWF9nCw831lhbni3cX54tJ1OsXfksiiYg7i/PF1vpJ9vtARCxExJMR8W0+4mi68pJ7Wo3q7NzEaLlcms76Q7XJy0PV2bljlyZHx0vjpakTL7506vTJUyPHR1ane7e+upff2Fiv/XT9vWvfv3Lz+mefH1oofjCaxJkYyJatHsdWar4n+TizZv7JbgTbQclOJ8Cm5LI6b5TSEzEYuazq26mvPjj0b0t6QBfV+yPqK1Y1gR6QKHroUa3PAY3z39a0nZ8/bp1tnoA04i4tzhffiVb8vua1idi7fG6y//fkvjOTxvnmwe1MlF1p4WpEDPf1Pbj/J9n+t3nDW5EgXfXN2eaGenD7pyvHn2hz/BloXTv9l1rHv6Xs+LfUJn5unePf+Q5j/Pn6Lx+vG/9qfzzdNn6yEj9pEz+NiDc7jH/jta9Or7es/knEkWgfvyV5+PXhoYuXyqXh5s+2Mb4+cujl9ccfsX+d+M1rtnuXE1k9/j1ZTmmH4//yuy+eWXhI/Oefffj2b/f+74uI9zuM/9idT19db9mtq8ntxqeAjW7/JPJxs8P4L5w5/GPWdNUQAAAAAAAAAAC2ULp8L1uSFlbaaVooNJ/hfTz2p+VKtXb0YmVmaqx5z9vByKetO60Gm/2k0R/J7sdt9Y+v6Z/IZQFz+5b7hWKlPLbDYwcAAAAAAAAAAAAAAAAAAID/igNrnv//I7f8/P/ar6sGdqv1v/Ib2O3UP/Su++s/2bE8gO3n/z/0rLr6h96l/qF3qX/oXeofelfb+t+3/XkA28//f+hd6h8AAAAAAAAAAAAAAAAAAAAAAAAAALri/Llzjal+d3G+2OiP9c3OTFTeOjZWqk4UJmeKhWJl+nJhvFIZL5cKxcrkP71eUqlcHo6pmStDtVK1NlSdnXtjsjIz1fpO0VK+6yMCAAAAAAAAAAAAAAAAAACA/5+B5SlJCxH5Zj9NC4WIRyLiYBLJxUvl0nBEPBoRP+Ty/Y3+yE4nDQAAAAAAAAAAAAAAAAAAALtMdXZuYrRcLk13r9GXhWq3zruxds7Pta7m07eRlSNiYWvTaLzihv8qn72B3d1MPdLItd0PNdrt/AAAAAAAAAAAAAAAAAAAwLa699Bvp3/xV3cTAgAAAAAAAAAAAAAAAAAAgJ6U/ppERGM6MvjcwNqle5Kl3PLviHj7xoUPr4zWatMjjfm3V+bXPsrmH9+J/IFOteo0jYhGHQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VGfnJkbL5dL0Jhv9Hayz02MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Iy/AwAA///oB85P") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000240)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f00000002c0)=0x1) openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x20242, 0x81) 4.569658871s ago: executing program 2 (id=2619): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 3.73478135s ago: executing program 0 (id=2620): syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@noload}]}, 0xfe, 0x5a3, &(0x7f0000001180)="$eJzs3U1oHGUYAOB3ZrNNf6KpoKDSQ1GhQukm6Y9WT+1VLBR6ELxo2GxDySZbshttQsD05qGIPYhKL/WmB4+KBw/ixaNXL/6chWKDQtODrmx2Nk3TTd3EbKLZ54FJvm9msu/77cw72Rlm2AB61uHGjzTiqYg4n0QMrlrWF9nCw831lhbni3cX54tJ1OsXfksiiYg7i/PF1vpJ9vtARCxExJMR8W0+4mi68pJ7Wo3q7NzEaLlcms76Q7XJy0PV2bljlyZHx0vjpakTL7506vTJUyPHR1ane7e+upff2Fiv/XT9vWvfv3Lz+mefH1oofjCaxJkYyJatHsdWar4n+TizZv7JbgTbQclOJ8Cm5LI6b5TSEzEYuazq26mvPjj0b0t6QBfV+yPqK1Y1gR6QKHroUa3PAY3z39a0nZ8/bp1tnoA04i4tzhffiVb8vua1idi7fG6y//fkvjOTxvnmwe1MlF1p4WpEDPf1Pbj/J9n+t3nDW5EgXfXN2eaGenD7pyvHn2hz/BloXTv9l1rHv6Xs+LfUJn5unePf+Q5j/Pn6Lx+vG/9qfzzdNn6yEj9pEz+NiDc7jH/jta9Or7es/knEkWgfvyV5+PXhoYuXyqXh5s+2Mb4+cujl9ccfsX+d+M1rtnuXE1k9/j1ZTmmH4//yuy+eWXhI/Oefffj2b/f+74uI9zuM/9idT19db9mtq8ntxqeAjW7/JPJxs8P4L5w5/GPWdNUQAAAAAAAAAAC2ULp8L1uSFlbaaVooNJ/hfTz2p+VKtXb0YmVmaqx5z9vByKetO60Gm/2k0R/J7sdt9Y+v6Z/IZQFz+5b7hWKlPLbDYwcAAAAAAAAAAAAAAAAAAID/igNrnv//I7f8/P/ar6sGdqv1v/Ib2O3UP/Su++s/2bE8gO3n/z/0rLr6h96l/qF3qX/oXeofelfb+t+3/XkA28//f+hd6h8AAAAAAAAAAAAAAAAAAAAAAAAAALri/Llzjal+d3G+2OiP9c3OTFTeOjZWqk4UJmeKhWJl+nJhvFIZL5cKxcrkP71eUqlcHo6pmStDtVK1NlSdnXtjsjIz1fpO0VK+6yMCAAAAAAAAAAAAAAAAAACA/5+B5SlJCxH5Zj9NC4WIRyLiYBLJxUvl0nBEPBoRP+Ty/Y3+yE4nDQAAAAAAAAAAAAAAAAAAALtMdXZuYrRcLk13r9GXhWq3zruxds7Pta7m07eRlSNiYWvTaLzihv8qn72B3d1MPdLItd0PNdrt/AAAAAAAAAAAAAAAAAAAwLa699Bvp3/xV3cTAgAAAAAAAAAAAAAAAAAAgJ6U/ppERGM6MvjcwNqle5Kl3PLviHj7xoUPr4zWatMjjfm3V+bXPsrmH9+J/IFOteo0jYhGHQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VGfnJkbL5dL0Jhv9Hayz02MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Iy/AwAA///oB85P") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000240)) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f00000002c0)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x20242, 0x81) truncate(&(0x7f0000001780)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) 3.728319796s ago: executing program 3 (id=2621): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syslog(0x4, &(0x7f00000003c0)=""/19, 0xb12288e90d7c8384) 3.602003756s ago: executing program 2 (id=2623): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000003a80), &(0x7f0000003ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000003bc0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) setgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffed3) 3.010559866s ago: executing program 7 (id=2624): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) listen(0xffffffffffffffff, 0x1) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000008050000010b007e0b", @ANYBLOB="524c9bb3f4529a6d7e955c707cc2a82f"], 0x97) 2.641684288s ago: executing program 4 (id=2625): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, 0x0, 0x14080) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000740)=0x44, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000780), 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x16, &(0x7f0000000540)=ANY=[@ANYRES8=r4], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xa, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) syz_genetlink_get_family_id$devlink(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x28000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="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"/393], 0x12c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002abd7000fedbdf257a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000007000000093743cac80c1e2000b61d848be6630cd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004814) 2.611882476s ago: executing program 2 (id=2626): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 2.601874464s ago: executing program 0 (id=2627): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\b\x00', 0x2}], 0x1, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) 2.568979792s ago: executing program 7 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x2655) 2.533650581s ago: executing program 2 (id=2629): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.420434117s ago: executing program 2 (id=2630): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1603, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) fcntl$setpipe(r0, 0x407, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000300)=0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x1008840, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000440), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000480), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000004c0), 0x43) close(r5) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0xfdef}], 0x1}, 0x10021) write(r5, &(0x7f00000015c0)="ba3ad96320236a804836cc75d50c5e9dd76e7f1e9c390c982eb5aaf583f0bea30dd2707a083e4a0e5768900771cdc9fe870f4e555b31a00ba39c7bfee43317a42f5d7b72ce3a95be8155fdc03d0ad32ebb8e19573d2eb5a29486313b5d493a6142ef3233750a7bd144663a1206869abde00990416bab47a59feaac5169310d2f5bb8fe9021246c894b", 0x89) 2.353581547s ago: executing program 3 (id=2631): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000300)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000340)="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x6, &(0x7f0000000800)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000840)='GPL\x00', 0x5, 0x29e, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x1) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r5, &(0x7f0000001640)="8b", 0x23000) 2.241359744s ago: executing program 0 (id=2632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000000780)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000a80), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000020025bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000001b00200300012800bf00000627269646765000020000280050025000000000005002d00000000000c00210002000000000000000500110009000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r6) getsockname$packet(r6, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r9 = syz_open_dev$loop(&(0x7f0000000cc0), 0x6, 0x2300) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000d40)={'ip6gre0\x00', r8, 0x0, 0x0, 0x0, 0x4, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x1, 0xfffffffe, 0x1}}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4c, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESOCT=r10], 0x1, 0x3a2, &(0x7f00000002c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) 2.241171593s ago: executing program 4 (id=2633): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001840)={0x0, &(0x7f0000001880)}) unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x143042, 0x0) pwritev2(r0, 0x0, 0x0, 0x5412, 0x0, 0x0) 1.400090276s ago: executing program 2 (id=2634): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e000100"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r6 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000880), 0x0, 0xfffffffffffffffd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001d00), 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000001dc0)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001e00)={'virt_wifi0\x00', &(0x7f0000001e40)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x1, 0x7fff, 0x1, 0x7, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x40001, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xffbffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0xfffffffd, 0xe, 0x2b12, 0x1100, 0x6, 0x100, 0xb, 0x40, 0xbed4, 0x4000001, 0x1, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x4c3e, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x5, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xfffffffe, 0x400, 0x9, 0x4, 0x7, 0x4009, 0xf9, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10001, 0x8, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x6, 0xb, 0x23, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x4, 0x40000005, 0x9, 0x8000000, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0x3, 0xffffffff]}}) ppoll(&(0x7f0000002080)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000020c0), 0x3000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002100)={0x1, &(0x7f0000002140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000002180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000021c0)={r6}, &(0x7f0000002200)=ANY=[], 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.399226346s ago: executing program 3 (id=2635): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000300)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000340)="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x6, &(0x7f0000000800)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000840)='GPL\x00', 0x5, 0x29e, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) 1.398424021s ago: executing program 7 (id=2636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.395987118s ago: executing program 0 (id=2637): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x0, 0x0, 0x81001, 0x32, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, '\x00'/192}) 1.3506393s ago: executing program 4 (id=2638): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) listen(0xffffffffffffffff, 0x1) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000008050000010b007e0b", @ANYBLOB="524c9bb3f4529a6d7e955c707cc2a82f"], 0x97) 1.217528952s ago: executing program 0 (id=2639): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000300)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000340)="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x6, &(0x7f0000000800)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000840)='GPL\x00', 0x5, 0x29e, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x1) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r5, &(0x7f0000001640)="8b", 0x23000) 1.217313992s ago: executing program 4 (id=2640): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 278.242105ms ago: executing program 3 (id=2641): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000002440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 256.241412ms ago: executing program 7 (id=2642): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syslog(0x4, &(0x7f00000003c0)=""/19, 0xb12288e90d7c8384) 253.726896ms ago: executing program 4 (id=2643): syslog(0x0, &(0x7f0000000500)=""/184, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, &(0x7f0000000800)=0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@ipv6_getnetconf={0x34, 0x52, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xe4c}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x38}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x800}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7c118e88}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008804}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@bridge_newneigh={0x38, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x2, 0xf, 0x4}, [@NDA_PROTOCOL={0x5, 0xc, 0x5}, @NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r1, &(0x7f0000000340)="e5", 0x1, 0x4, &(0x7f0000000380)={0x11, 0x88a8, r4, 0x1, 0xe9, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0xa, 0x0, {{0x31, 0x4, 0x3, 0x30, 0xc4, 0x64, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, {[@ssrr={0x89, 0xf, 0x39, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @local]}, @timestamp_prespec={0x44, 0x44, 0xb, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@multicast1}, {@private=0xa010100, 0x7fc0000}, {@multicast1, 0xd}, {@broadcast, 0x4}, {@local, 0xb13}, {@remote, 0x1}, {@empty, 0x3}]}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0x4, [0xe]}, @rr={0x7, 0xb, 0xc4, [@loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "06d9830137ab2504761b1eeb"}]}, @timestamp_addr={0x44, 0x34, 0x15, 0x1, 0x5, [{@private=0xa010100, 0xfff}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3a9b}, {@local, 0x40}, {@loopback, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'nr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@getlink={0x58, 0x12, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x90004, 0x5013}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6beed}, @IFLA_CARRIER={0x5, 0x21, 0xb}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_PHYS_SWITCH_ID={0xb, 0x24, "222e2dd1d9af0d"}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000}, 0x4040841) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x85, 0x10}, &(0x7f0000000680)=0x90) 133.120965ms ago: executing program 0 (id=2644): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1603, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) fcntl$setpipe(r0, 0x407, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000300)=0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x1008840, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000440), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000004c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0xfdef) close(r5) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0xfdef}], 0x1}, 0x10021) write(r5, &(0x7f00000015c0)="ba3ad96320236a804836cc75d50c5e9dd76e7f1e9c390c982eb5aaf583f0bea30dd2707a083e4a0e5768900771cdc9fe870f4e555b31a00ba39c7bfee43317a42f5d7b72ce3a95be8155fdc03d0ad32ebb8e19573d2eb5a29486313b5d493a6142ef3233750a7bd144663a1206869abde00990416bab47a59feaac5169310d2f5bb8fe9021246c894b", 0x89) 129.313141ms ago: executing program 7 (id=2645): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x1) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x41020000, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 4 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x2655) kernel console output (not intermixed with test programs): BSSID 50:50:50:50:50:50 [ 162.078331][ T9623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.094281][ T4839] net_ratelimit: 14 callbacks suppressed [ 162.094298][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.094396][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.101075][ T9623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.101092][ T9623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.123474][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.128125][T10744] loop1: detected capacity change from 0 to 512 [ 162.133585][T10744] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 162.133602][T10744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.135500][T10744] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1763: invalid indirect mapped block 9 (level 0) [ 162.135529][T10744] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.136010][T10744] EXT4-fs (loop1): 1 truncate cleaned up [ 162.136479][T10744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.154756][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.179851][T10749] loop5: detected capacity change from 0 to 512 [ 162.185594][T10749] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 162.220443][T10749] EXT4-fs (loop5): 1 orphan inode deleted [ 162.220923][T10749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.235601][ T9623] __quota_error: 1 callbacks suppressed [ 162.235617][ T9623] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.235655][ T9623] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:13: Failed to release dquot type 1 [ 162.256406][T10749] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 162.265187][T10759] loop1: detected capacity change from 0 to 512 [ 162.267982][T10759] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 162.268000][T10759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.275082][T10759] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1765: invalid indirect mapped block 9 (level 0) [ 162.275110][T10759] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.281463][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 162.281482][ C0] EXT4-fs (loop1): initial error at time 686: ext4_free_branches:1023: inode 11 [ 162.281498][ C0] EXT4-fs (loop1): last error at time 686: ext4_free_branches:1023: inode 11 [ 162.284059][T10759] EXT4-fs (loop1): 1 truncate cleaned up [ 162.295409][T10513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.297953][T10759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.338732][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.392062][T10772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.392280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.392393][T10772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.394829][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.394951][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.397947][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.398216][T10771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.412441][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.611262][T10801] loop8: detected capacity change from 0 to 512 [ 162.633920][T10801] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.1774: Directory hole found for htree index block 0 [ 162.633948][T10801] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 162.635274][T10801] EXT4-fs (loop8): Remounting filesystem read-only [ 162.635305][T10801] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 162.635764][T10801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.664038][ T7467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.679589][T10810] loop5: detected capacity change from 0 to 512 [ 162.687318][T10810] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 162.687340][T10810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.719758][T10810] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1777: invalid indirect mapped block 9 (level 0) [ 162.719783][T10810] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.720152][T10810] EXT4-fs (loop5): 1 truncate cleaned up [ 162.720597][T10810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.774057][T10513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.891598][ T51] Bluetooth: hci8: command tx timeout [ 162.910769][T10850] loop8: detected capacity change from 0 to 256 [ 163.821388][T10855] input: syz0 as /devices/virtual/input/input3 [ 163.902799][T10874] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 163.902813][T10874] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.908048][T10874] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1792: invalid indirect mapped block 9 (level 0) [ 163.908068][T10874] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.908333][T10874] EXT4-fs (loop5): 1 truncate cleaned up [ 163.908791][T10874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.935549][T10513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.083754][ T30] audit: type=1107 audit(688.055:159): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 164.430552][T10917] support for the xor transformation has been removed. [ 164.474367][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.477371][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.531210][T10932] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 164.531224][T10932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.537024][T10932] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1803: invalid indirect mapped block 9 (level 0) [ 164.537046][T10932] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 164.537324][T10932] EXT4-fs (loop1): 1 truncate cleaned up [ 164.537761][T10932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.580082][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.581079][T10938] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1804'. [ 164.879867][T10987] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1816'. [ 164.972554][ T51] Bluetooth: hci8: command tx timeout [ 165.050232][T11016] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1827'. [ 165.061162][T11016] syzkaller1: entered promiscuous mode [ 165.061179][T11016] syzkaller1: entered allmulticast mode [ 165.169086][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 165.191149][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.196361][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.372659][T11045] xt_TCPMSS: Only works on TCP SYN packets [ 165.541599][T11044] FAULT_INJECTION: forcing a failure. [ 165.541599][T11044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.541633][T11044] CPU: 1 UID: 0 PID: 11044 Comm: syz.4.1840 Tainted: G L syzkaller #0 PREEMPT [ 165.541646][T11044] Tainted: [L]=SOFTLOCKUP [ 165.541650][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 165.541655][T11044] Call trace: [ 165.541658][T11044] show_stack+0x2c/0x3c (C) [ 165.541674][T11044] __dump_stack+0x30/0x40 [ 165.541683][T11044] dump_stack_lvl+0xd8/0x12c [ 165.541691][T11044] dump_stack+0x1c/0x28 [ 165.541698][T11044] should_fail_ex+0x418/0x58c [ 165.541710][T11044] should_fail+0x14/0x24 [ 165.541719][T11044] should_fail_usercopy+0x20/0x30 [ 165.541729][T11044] set_fd_set+0x48/0xb8 [ 165.541740][T11044] core_sys_select+0x7ec/0x9e4 [ 165.541750][T11044] __arm64_sys_pselect6+0x2f0/0x39c [ 165.541760][T11044] invoke_syscall+0x98/0x244 [ 165.541769][T11044] el0_svc_common+0x19c/0x23c [ 165.541777][T11044] do_el0_svc+0x4c/0x5c [ 165.541785][T11044] el0_svc+0x60/0x1d8 [ 165.541794][T11044] el0t_64_sync_handler+0x44/0x104 [ 165.541802][T11044] el0t_64_sync+0x198/0x19c [ 165.592938][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1841'. [ 165.614808][T11050] set_capacity_and_notify: 2 callbacks suppressed [ 165.614822][T11050] loop1: detected capacity change from 0 to 512 [ 165.616965][T11050] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 165.616976][T11050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.624629][T11048] syzkaller1: entered promiscuous mode [ 165.624644][T11048] syzkaller1: entered allmulticast mode [ 165.630074][T11050] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1842: invalid indirect mapped block 9 (level 0) [ 165.630095][T11050] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 165.630397][T11050] EXT4-fs (loop1): 1 truncate cleaned up [ 165.630856][T11050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.660252][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.682367][T11054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1843'. [ 165.727885][T11058] loop1: detected capacity change from 0 to 2048 [ 165.786992][T11062] loop4: detected capacity change from 0 to 2048 [ 165.793442][T11062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.864520][T11067] loop1: detected capacity change from 0 to 8 [ 165.885247][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.885723][T11067] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 165.885733][T11067] unable to read xattr id index table [ 165.975663][T11073] loop5: detected capacity change from 0 to 1024 [ 165.976418][T11073] EXT4-fs: Ignoring removed bh option [ 165.994052][T11073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.016692][T11073] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1851: bg 0: block 218: padding at end of block bitmap is not set [ 166.019216][T11073] EXT4-fs (loop5): Remounting filesystem read-only [ 166.019337][T11073] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 166.049727][T10513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.105010][T11086] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1854'. [ 166.137658][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.137935][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.141071][T11090] loop8: detected capacity change from 0 to 2048 [ 166.176506][T11090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.182224][T11090] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 166.200016][ T7467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.508461][T11134] loop8: detected capacity change from 0 to 512 [ 166.519091][T11134] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 166.519104][T11134] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 166.530286][T11134] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1876: invalid indirect mapped block 9 (level 0) [ 166.530308][T11134] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.531493][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 166.531509][ C1] EXT4-fs (loop8): initial error at time 690: ext4_free_branches:1023: inode 11 [ 166.531527][ C1] EXT4-fs (loop8): last error at time 690: ext4_free_branches:1023: inode 11 [ 166.552174][T11134] EXT4-fs (loop8): 1 truncate cleaned up [ 166.552668][T11134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.813078][ T7467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.950725][T11143] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.052095][ T51] Bluetooth: hci8: command tx timeout [ 167.063555][T11143] lo speed is unknown, defaulting to 1000 [ 167.291455][ C1] net_ratelimit: 332 callbacks suppressed [ 167.387287][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.387397][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.425848][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1886'. [ 167.511586][T11159] syzkaller1: entered promiscuous mode [ 167.511596][T11159] syzkaller1: entered allmulticast mode [ 167.522719][T11167] loop4: detected capacity change from 0 to 512 [ 167.526684][T11167] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 167.526698][T11167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.547623][T11167] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1890: invalid indirect mapped block 9 (level 0) [ 167.547647][T11167] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.551546][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 167.551556][ C0] EXT4-fs (loop4): initial error at time 691: ext4_free_branches:1023: inode 11 [ 167.551575][ C0] EXT4-fs (loop4): last error at time 691: ext4_free_branches:1023: inode 11 [ 167.567227][T11167] EXT4-fs (loop4): 1 truncate cleaned up [ 167.567920][T11167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.568998][T11165] loop5: detected capacity change from 0 to 4096 [ 167.578280][T11165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.578301][T11165] EXT4-fs (loop5): Test dummy encryption mode enabled [ 167.581693][T11165] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=6802e129, mo2=0003] [ 167.581737][T11165] System zones: 0-5 [ 167.589561][T11165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.630552][T10513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.679040][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.694686][T11173] loop1: detected capacity change from 0 to 512 [ 167.700062][T11173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 167.700106][T11173] System zones: 1-12 [ 167.705726][T11173] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.1893: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 167.705745][T11173] loop1: lost filesystem error report for type 5 error -117 [ 167.711468][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 167.711485][ C1] EXT4-fs (loop1): initial error at time 691: ext4_xattr_inode_iget:473 [ 167.711500][ C1] EXT4-fs (loop1): last error at time 691: ext4_xattr_inode_iget:473 [ 167.716860][T11173] EXT4-fs (loop1): 1 orphan inode deleted [ 167.766190][T11180] FAULT_INJECTION: forcing a failure. [ 167.766190][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 167.766214][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.4.1895 Tainted: G L syzkaller #0 PREEMPT [ 167.766230][T11180] Tainted: [L]=SOFTLOCKUP [ 167.766234][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 167.766248][T11180] Call trace: [ 167.766251][T11180] show_stack+0x2c/0x3c (C) [ 167.766266][T11180] __dump_stack+0x30/0x40 [ 167.766276][T11180] dump_stack_lvl+0xd8/0x12c [ 167.766284][T11180] dump_stack+0x1c/0x28 [ 167.766292][T11180] should_fail_ex+0x418/0x58c [ 167.766305][T11180] should_failslab+0xc4/0x120 [ 167.766316][T11180] __kmalloc_noprof+0x108/0x6c8 [ 167.766328][T11180] security_prepare_creds+0x60/0x35c [ 167.766342][T11180] prepare_creds+0x500/0x7d0 [ 167.766351][T11180] keyctl_set_reqkey_keyring+0x84/0x1e4 [ 167.766365][T11180] __arm64_sys_keyctl+0x120/0x3e8 [ 167.766377][T11180] invoke_syscall+0x98/0x244 [ 167.766387][T11180] el0_svc_common+0xec/0x23c [ 167.766395][T11180] do_el0_svc+0x4c/0x5c [ 167.766403][T11180] el0_svc+0x60/0x1d8 [ 167.766413][T11180] el0t_64_sync_handler+0x44/0x104 [ 167.766421][T11180] el0t_64_sync+0x198/0x19c [ 167.821423][T11173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.873296][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.931986][T11184] ext4: Unknown parameter 'defcontext' [ 168.022361][T11201] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 168.022376][T11201] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 168.033670][T11201] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1904: invalid indirect mapped block 9 (level 0) [ 168.033693][T11201] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.038113][T11201] EXT4-fs (loop8): 1 truncate cleaned up [ 168.038615][T11201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.099252][ T7467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.503944][T11227] vfat: Unknown parameter 'Ø' [ 168.648621][T11237] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 168.648635][T11237] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.829962][T11237] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1919: invalid indirect mapped block 9 (level 0) [ 168.830592][T11237] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.831619][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 168.831636][ C0] EXT4-fs (loop5): initial error at time 692: ext4_free_branches:1023: inode 11 [ 168.831658][ C0] EXT4-fs (loop5): last error at time 692: ext4_free_branches:1023: inode 11 [ 168.845077][T11237] EXT4-fs (loop5): 1 truncate cleaned up [ 168.853435][T11237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.942610][T10513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.106507][T11268] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.106519][T11268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.115548][T11268] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1931: invalid indirect mapped block 9 (level 0) [ 169.115575][T11268] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.116707][T11268] EXT4-fs (loop1): 1 truncate cleaned up [ 169.117170][T11268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.131619][ T51] Bluetooth: hci8: command tx timeout [ 169.134282][T11273] binder: 11270:11273 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 169.134295][T11273] binder: 11273 RLIMIT_NICE not set [ 169.152361][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.209945][T11278] binder: 11270:11278 got reply transaction with no transaction stack [ 169.210040][T11278] binder: 11270:11278 transaction reply to 0:0 failed 7/29201/-71, code 0 size 72-24 line 3156 [ 169.528272][T11290] vfat: Unknown parameter 'H' [ 169.794323][T11302] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.1945: bad orphan inode 214 [ 169.794349][T11302] loop8: lost filesystem error report for type 5 error -117 [ 169.795046][T11302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.847901][ T7467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.224509][T11335] FAULT_INJECTION: forcing a failure. [ 170.224509][T11335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.224529][T11335] CPU: 0 UID: 0 PID: 11335 Comm: syz.4.1958 Tainted: G L syzkaller #0 PREEMPT [ 170.224542][T11335] Tainted: [L]=SOFTLOCKUP [ 170.224546][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 170.224559][T11335] Call trace: [ 170.224562][T11335] show_stack+0x2c/0x3c (C) [ 170.224579][T11335] __dump_stack+0x30/0x40 [ 170.224588][T11335] dump_stack_lvl+0xd8/0x12c [ 170.224597][T11335] dump_stack+0x1c/0x28 [ 170.224605][T11335] should_fail_ex+0x418/0x58c [ 170.224617][T11335] should_fail+0x14/0x24 [ 170.224626][T11335] should_fail_usercopy+0x20/0x30 [ 170.224636][T11335] _inline_copy_from_user+0x3c/0x174 [ 170.224649][T11335] __sys_bpf+0x1b4/0x82c [ 170.224660][T11335] __arm64_sys_bpf+0xd0/0xec [ 170.224671][T11335] invoke_syscall+0x98/0x244 [ 170.224680][T11335] el0_svc_common+0xec/0x23c [ 170.224688][T11335] do_el0_svc+0x4c/0x5c [ 170.224697][T11335] el0_svc+0x60/0x1d8 [ 170.224706][T11335] el0t_64_sync_handler+0x44/0x104 [ 170.224714][T11335] el0t_64_sync+0x198/0x19c [ 170.235604][T11337] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1959'. [ 170.327270][T11345] EXT4-fs: Ignoring removed i_version option [ 170.351387][T11345] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.026510][T11307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.030065][T11307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 171.180463][T11307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.180479][T11307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 171.204648][T11307] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 171.204666][T11307] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 171.349639][T11307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.349652][T11307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 171.524618][T11307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.524625][T11307] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 171.657981][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 171.733550][T11307] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 171.733577][T11307] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 171.772225][T11376] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1970'. [ 171.812556][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.818778][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.878750][T11388] set_capacity_and_notify: 8 callbacks suppressed [ 171.878757][T11388] loop8: detected capacity change from 0 to 1024 [ 171.893122][T11388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.923178][T11307] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 171.923186][T11307] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 172.062526][T11307] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 172.062533][T11307] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 172.350789][T11399] loop1: detected capacity change from 0 to 512 [ 172.363112][T11399] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 172.363204][T11399] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 172.386564][T11401] net_ratelimit: 232 callbacks suppressed [ 172.718351][T11410] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1983'. [ 172.719298][ T7467] EXT4-fs error (device loop8): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /289/file0/lost+found: bad entry in directory: directory entry overrun - offset=792, inode=0, rec_len=1024, size=1024 fake=0 [ 172.729649][ T7467] VFS: Lookup of '.' in ext4 loop8 would have caused loop [ 172.733307][ T7467] VFS: Lookup of '.' in ext4 loop8 would have caused loop [ 172.760883][T11412] loop4: detected capacity change from 0 to 512 [ 172.765486][T11412] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 172.765501][T11412] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.769073][T11412] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1985: invalid indirect mapped block 9 (level 0) [ 172.769093][T11412] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.769444][T11412] EXT4-fs (loop4): 1 truncate cleaned up [ 172.769987][T11412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.795536][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.842120][T11418] netlink: 'syz.5.1988': attribute type 13 has an invalid length. [ 172.853598][T11420] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1987'. [ 172.932714][T11424] input: syz0 as /devices/virtual/input/input4 [ 173.150815][T11146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.168430][T11431] mmap: syz.3.1993 (11431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.208652][T11428] syzkaller1: entered promiscuous mode [ 173.208662][T11428] syzkaller1: entered allmulticast mode [ 173.237150][T11437] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1996'. [ 173.258130][T11439] loop1: detected capacity change from 0 to 512 [ 173.522219][T11439] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 173.522239][T11439] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.528357][T11439] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1997: invalid indirect mapped block 9 (level 0) [ 173.528379][T11439] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.528695][T11439] EXT4-fs (loop1): 1 truncate cleaned up [ 173.529176][T11439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.569450][ T9810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.955114][ T9623] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.026551][ T9623] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.076141][ T4745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.078047][ T4745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.078639][ T4745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.086744][ T4745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.090368][ T4745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.126128][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.126355][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.126555][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.127199][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.127618][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.158932][ T9623] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.200695][ T4839] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 174.207054][T11466] loop1: detected capacity change from 0 to 512 [ 174.208458][T11466] EXT4-fs: Ignoring removed nobh option [ 174.228554][T11466] EXT4-fs (loop1): DAX unsupported by block device. [ 174.240466][T11469] fido_id[11469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.265021][ T9623] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.314512][T11476] syzkaller1: entered promiscuous mode [ 174.314524][T11476] syzkaller1: entered allmulticast mode [ 174.411316][T11453] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.487971][T11453] lo speed is unknown, defaulting to 1000 [ 174.500056][ T9623] bridge_slave_1: left promiscuous mode [ 174.500145][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.505512][ T9623] bridge_slave_0: left promiscuous mode [ 174.505600][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.606960][ T9623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.621161][ T9623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.642786][ T9623] bond0 (unregistering): Released all slaves [ 174.840604][T11500] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.889604][T11500] lo speed is unknown, defaulting to 1000 [ 175.424395][ T9623] hsr_slave_0: left promiscuous mode [ 175.424708][ T9623] hsr_slave_1: left promiscuous mode [ 175.425044][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.425055][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.425620][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.425628][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.429950][ T9623] veth1_macvtap: left promiscuous mode [ 175.429980][ T9623] veth0_macvtap: left promiscuous mode [ 175.430068][ T9623] veth1_vlan: left promiscuous mode [ 175.430192][ T9623] veth0_vlan: left promiscuous mode [ 175.645761][ T9623] team0 (unregistering): Port device team_slave_1 removed [ 175.651002][ T9623] team0 (unregistering): Port device team_slave_0 removed [ 175.777066][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.777129][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.777249][T11453] bridge_slave_0: entered allmulticast mode [ 175.778131][T11453] bridge_slave_0: entered promiscuous mode [ 175.784753][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.784787][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.784980][T11453] bridge_slave_1: entered allmulticast mode [ 175.785594][T11453] bridge_slave_1: entered promiscuous mode [ 175.794838][T11523] syzkaller1: entered promiscuous mode [ 175.794851][T11523] syzkaller1: entered allmulticast mode [ 175.878665][T11530] loop4: detected capacity change from 0 to 4096 [ 175.887001][T11530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.887299][T11453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.923671][T11453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.008009][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.035839][T11453] team0: Port device team_slave_0 added [ 176.043843][T11453] team0: Port device team_slave_1 added [ 176.064790][T11453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.064796][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.064807][T11453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.065375][T11453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.065381][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.065392][T11453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.118419][T11453] hsr_slave_0: entered promiscuous mode [ 176.118823][T11453] hsr_slave_1: entered promiscuous mode [ 176.119082][T11453] debugfs: 'hsr0' already exists in 'hsr' [ 176.119091][T11453] Cannot create hsr debugfs directory [ 176.175512][ T4745] Bluetooth: hci4: command tx timeout [ 176.235407][T11543] syzkaller0: entered promiscuous mode [ 176.235419][T11543] syzkaller0: entered allmulticast mode [ 176.400020][T11453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.422156][T11547] loop1: detected capacity change from 0 to 512 [ 176.422605][T11547] ext3: Unknown parameter 'fscontext' [ 176.439780][T11547] loop1: detected capacity change from 0 to 1024 [ 176.445251][T11547] ext3: Unknown parameter 'euid>00000000000000000000' [ 176.463290][T11453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.563816][T11453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.639686][T11453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.754605][T11453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.757270][T11453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.757641][T11453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.760310][T11453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.760663][T11453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.765681][T11453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.766056][T11453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.781774][T11453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.827699][T11453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.831164][T11453] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.842935][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.842957][ T9623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.844768][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.844787][ T9623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.971210][T11453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.989929][T11453] veth0_vlan: entered promiscuous mode [ 176.994381][T11453] veth1_vlan: entered promiscuous mode [ 177.004279][T11453] veth0_macvtap: entered promiscuous mode [ 177.006637][T11453] veth1_macvtap: entered promiscuous mode [ 177.011210][T11453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.019325][T11453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.067582][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.067596][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.088453][ T837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.088463][ T837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.091615][ T9623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.091825][ T9623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.091843][ T9623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.091860][ T9623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.125076][ T30] audit: type=1326 audit(701.095:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.125171][ T30] audit: type=1326 audit(701.095:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.125461][ T30] audit: type=1326 audit(701.095:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.126132][ T30] audit: type=1326 audit(701.095:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.126151][ T30] audit: type=1326 audit(701.095:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.126166][ T30] audit: type=1326 audit(701.095:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.126181][ T30] audit: type=1326 audit(701.095:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.126195][ T30] audit: type=1326 audit(701.095:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.126210][ T30] audit: type=1326 audit(701.095:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa535d0ec code=0x7ffc0000 [ 177.126230][ T30] audit: type=1326 audit(701.095:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.4.2034" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 177.451505][ C0] net_ratelimit: 1432 callbacks suppressed [ 177.575079][T11597] caif0: tun_chr_ioctl cmd 2148553947 [ 178.492459][ T4745] Bluetooth: hci4: command tx timeout [ 178.552973][T11642] loop0: detected capacity change from 0 to 512 [ 178.580511][T11642] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.588515][T11642] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.2043: bad orphan inode 13 [ 178.588537][T11642] loop0: lost filesystem error report for type 5 error -117 [ 178.588692][T11642] ext4_test_bit(bit=12, block=18) = 1 [ 178.588700][T11642] is_bad_inode(inode)=0 [ 178.588705][T11642] NEXT_ORPHAN(inode)=0 [ 178.588709][T11642] max_ino=32 [ 178.588713][T11642] i_nlink=1 [ 178.589265][T11642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 179.356140][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.356453][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.427098][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 179.464633][T11656] loop0: detected capacity change from 0 to 1024 [ 179.487014][T11656] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 179.489537][T11656] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 179.490059][T11656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.582763][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 180.030495][T11670] loop4: detected capacity change from 0 to 1024 [ 180.035459][T11670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.046589][T11670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.088387][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.337143][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.409396][T11691] loop4: detected capacity change from 0 to 128 [ 180.459303][T11691] syz.4.2057 (pid 11691) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 180.571910][ T4745] Bluetooth: hci4: command tx timeout [ 181.637011][T11715] loop4: detected capacity change from 0 to 512 [ 181.641099][T11715] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.641113][T11715] EXT4-fs (loop4): blocks per group (42) and clusters per group (32768) inconsistent ** 25630 printk messages dropped ** ** 132 printk messages dropped ** ** 102 printk messages dropped ** ** 138 printk messages dropped ** ** 104 printk messages dropped ** ** 117 printk messages dropped ** ** 104 printk messages dropped ** ** 119 printk messages dropped ** ** 101 printk messages dropped ** ** 137 printk messages dropped ** ** 112 printk messages dropped ** ** 143 printk messages dropped ** ** 105 printk messages dropped ** ** 113 printk messages dropped ** ** 88 printk messages dropped ** ** 106 printk messages dropped ** ** 93 printk messages dropped ** ** 112 printk messages dropped ** ** 131 printk messages dropped ** ** 153 printk messages dropped ** ** 132 printk messages dropped ** ** 297 printk messages dropped ** ** 102 printk messages dropped ** ** 117 printk messages dropped ** ** 103 printk messages dropped ** ** 127 printk messages dropped ** ** 98 printk messages dropped ** ** 114 printk messages dropped ** ** 108 printk messages dropped ** ** 137 printk messages dropped ** ** 109 printk messages dropped ** ** 118 printk messages dropped ** ** 111 printk messages dropped ** ** 151 printk messages dropped ** ** 130 printk messages dropped ** ** 157 printk messages dropped ** ** 71 printk messages dropped ** ** 342 printk messages dropped ** ** 133 printk messages dropped ** ** 150 printk messages dropped ** ** 122 printk messages dropped ** ** 147 printk messages dropped ** ** 121 printk messages dropped ** ** 157 printk messages dropped ** ** 142 printk messages dropped ** ** 125 printk messages dropped ** ** 136 printk messages dropped ** ** 150 printk messages dropped ** ** 122 printk messages dropped ** ** 137 printk messages dropped ** ** 114 printk messages dropped ** ** 125 printk messages dropped ** ** 91 printk messages dropped ** ** 122 printk messages dropped ** ** 112 printk messages dropped ** ** 117 printk messages dropped ** ** 102 printk messages dropped ** ** 129 printk messages dropped ** ** 115 printk messages dropped ** ** 140 printk messages dropped ** ** 106 printk messages dropped ** ** 146 printk messages dropped ** ** 132 printk messages dropped ** ** 145 printk messages dropped ** ** 115 printk messages dropped ** ** 343 printk messages dropped ** ** 108 printk messages dropped ** ** 101 printk messages dropped ** ** 120 printk messages dropped ** ** 141 printk messages dropped ** ** 109 printk messages dropped ** ** 144 printk messages dropped ** ** 116 printk messages dropped ** ** 268 printk messages dropped ** ** 235 printk messages dropped ** ** 108 printk messages dropped ** ** 133 printk messages dropped ** ** 110 printk messages dropped ** ** 129 printk messages dropped ** ** 105 printk messages dropped ** ** 135 printk messages dropped ** ** 108 printk messages dropped ** ** 118 printk messages dropped ** ** 92 printk messages dropped ** ** 124 printk messages dropped ** ** 140 printk messages dropped ** ** 134 printk messages dropped ** ** 100 printk messages dropped ** ** 126 printk messages dropped ** ** 98 printk messages dropped ** ** 126 printk messages dropped ** ** 98 printk messages dropped ** ** 269 printk messages dropped ** ** 145 printk messages dropped ** ** 116 printk messages dropped ** ** 135 printk messages dropped ** ** 122 printk messages dropped ** ** 127 printk messages dropped ** ** 100 printk messages dropped ** ** 125 printk messages dropped ** ** 37 printk messages dropped ** ** 72 printk messages dropped ** ** 109 printk messages dropped ** ** 130 printk messages dropped ** ** 107 printk messages dropped ** ** 209 printk messages dropped ** ** 144 printk messages dropped ** ** 134 printk messages dropped ** ** 262 printk messages dropped ** ** 312 printk messages dropped ** ** 97 printk messages dropped ** ** 129 printk messages dropped ** ** 104 printk messages dropped ** ** 119 printk messages dropped ** ** 120 printk messages dropped ** ** 167 printk messages dropped ** ** 128 printk messages dropped ** ** 157 printk messages dropped ** ** 131 printk messages dropped ** ** 158 printk messages dropped ** ** 138 printk messages dropped ** ** 245 printk messages dropped ** ** 155 printk messages dropped ** ** 102 printk messages dropped ** ** 142 printk messages dropped ** ** 102 printk messages dropped ** ** 285 printk messages dropped ** ** 106 printk messages dropped ** [ 182.495089][ C1] net_ratelimit: 319 callbacks suppressed [ 182.617935][ T4992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.666539][ T4745] Bluetooth: hci4: command tx timeout [ 182.788153][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 182.788167][ T30] audit: type=1326 audit(706.751:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788194][ T30] audit: type=1326 audit(706.751:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788218][ T30] audit: type=1326 audit(706.751:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788281][ T30] audit: type=1326 audit(706.751:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788301][ T30] audit: type=1326 audit(706.751:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788318][ T30] audit: type=1326 audit(706.751:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788414][ T30] audit: type=1326 audit(706.751:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788431][ T30] audit: type=1326 audit(706.751:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788466][ T30] audit: type=1326 audit(706.751:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.788553][ T30] audit: type=1326 audit(706.751:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.4.2072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 182.852827][ T4992] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.869466][ T4992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.869476][ T4992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.870304][ T4992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 182.870314][ T4992] usb 1-1: SerialNumber: syz [ 183.115875][ T4992] usb 1-1: USB disconnect, device number 2 [ 183.705817][T11762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2082'. [ 184.194012][ T11] block nbd0: Possible stuck request 000000000c4f2b4c: control (read@0,4096B). Runtime 120 seconds [ 184.318982][T11791] 9p: Bad value for 'rfdno' [ 184.418181][T11806] loop4: detected capacity change from 0 to 8 [ 184.436401][T11806] Filesystem uses "lzo" compression. This is not supported [ 185.128111][T11789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.128222][T11789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.131896][T11789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.212456][T11818] FAULT_INJECTION: forcing a failure. [ 185.212456][T11818] name failslab, interval 1, probability 0, space 0, times 0 [ 185.212470][T11818] CPU: 0 UID: 0 PID: 11818 Comm: syz.0.2102 Tainted: G L syzkaller #0 PREEMPT [ 185.212482][T11818] Tainted: [L]=SOFTLOCKUP [ 185.212486][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 185.212499][T11818] Call trace: [ 185.212503][T11818] show_stack+0x2c/0x3c (C) [ 185.212519][T11818] __dump_stack+0x30/0x40 [ 185.212527][T11818] dump_stack_lvl+0xd8/0x12c [ 185.212536][T11818] dump_stack+0x1c/0x28 [ 185.212544][T11818] should_fail_ex+0x418/0x58c [ 185.212555][T11818] should_failslab+0xc4/0x120 [ 185.212566][T11818] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 185.212577][T11818] __d_alloc+0x50/0x600 [ 185.212588][T11818] d_alloc+0x54/0x17c [ 185.212599][T11818] lookup_one_qstr_excl+0x9c/0x200 [ 185.212608][T11818] __start_dirop+0xb8/0xf4 [ 185.212619][T11818] start_dirop+0x38/0x4c [ 185.212629][T11818] simple_start_creating+0xcc/0x114 [ 185.212639][T11818] debugfs_start_creating+0xd8/0x1bc [ 185.212651][T11818] debugfs_create_symlink+0x48/0x17c [ 185.212661][T11818] ref_tracker_dir_symlink+0x21c/0x39c [ 185.212670][T11818] net_ns_net_debugfs+0x70/0x100 [ 185.212683][T11818] net_ns_net_init+0x20/0x34 [ 185.212695][T11818] ops_init+0x2cc/0x528 [ 185.212707][T11818] setup_net+0x118/0x2fc [ 185.212718][T11818] copy_net_ns+0x454/0x698 [ 185.212729][T11818] create_new_namespaces+0x304/0x50c [ 185.212746][T11818] unshare_nsproxy_namespaces+0x120/0x170 [ 185.212758][T11818] ksys_unshare+0x438/0x6e0 [ 185.212770][T11818] __arm64_sys_unshare+0x40/0x54 [ 185.212781][T11818] invoke_syscall+0x98/0x244 [ 185.212790][T11818] el0_svc_common+0xec/0x23c [ 185.212799][T11818] do_el0_svc+0x4c/0x5c [ 185.212807][T11818] el0_svc+0x60/0x1d8 [ 185.212816][T11818] el0t_64_sync_handler+0x44/0x104 [ 185.212824][T11818] el0t_64_sync+0x198/0x19c [ 185.239626][T11818] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.329837][T11820] overlayfs: conflicting lowerdir path [ 185.335238][T11818] lo speed is unknown, defaulting to 1000 [ 185.503428][ T5040] Bluetooth: hci9: Frame reassembly failed (-84) [ 185.671792][T11839] device-mapper: ioctl: Unable to rename non-existent device, syze3 to uuid CRP-syze1 [ 186.588235][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.414063][ T1610] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.414101][ T1610] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.573559][ T4745] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 187.814984][ C1] net_ratelimit: 417 callbacks suppressed [ 188.010957][T11894] loop0: detected capacity change from 0 to 512 [ 188.020441][T11894] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 188.020458][T11894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.034088][T11894] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2128: invalid indirect mapped block 9 (level 0) [ 188.034108][T11894] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 188.035005][T11894] EXT4-fs (loop0): 1 truncate cleaned up [ 188.035466][T11894] EXT4-fs mount: 2 callbacks suppressed [ 188.035474][T11894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.091098][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.132900][T11900] loop0: detected capacity change from 0 to 8 [ 188.141257][ T4745] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 188.142478][ T4745] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 188.142942][ T4745] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 188.143602][ T4745] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 188.144013][ T4745] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 188.153388][T11900] Filesystem uses "lzo" compression. This is not supported [ 188.616325][T11898] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.620975][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.687886][T11919] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2133'. [ 188.694142][T11898] lo speed is unknown, defaulting to 1000 [ 188.781838][T11927] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 188.956547][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.960663][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.960791][T11898] bridge_slave_0: entered allmulticast mode [ 188.961333][T11898] bridge_slave_0: entered promiscuous mode [ 188.968756][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.968805][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.968884][T11898] bridge_slave_1: entered allmulticast mode [ 188.969390][T11898] bridge_slave_1: entered promiscuous mode [ 189.261128][T11943] loop4: detected capacity change from 0 to 512 [ 189.261606][T11943] vfat: Unknown parameter '¢' [ 189.329273][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.330657][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.354173][T11898] team0: Port device team_slave_0 added [ 189.355301][T11898] team0: Port device team_slave_1 added [ 189.384104][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.384110][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.384123][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.384723][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.384728][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.384741][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.432481][T11898] hsr_slave_0: entered promiscuous mode [ 189.432893][T11898] hsr_slave_1: entered promiscuous mode [ 189.433779][T11898] debugfs: 'hsr0' already exists in 'hsr' [ 189.433788][T11898] Cannot create hsr debugfs directory [ 189.634318][T11898] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.644494][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.644882][T11898] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.652285][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.652757][T11898] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.665316][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.665896][T11898] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.674497][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.689038][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.689066][T11898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.689166][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.689193][T11898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.714897][T11898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.719739][T11898] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.805409][T11898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.805419][T11898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.944658][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 190.253484][ T51] Bluetooth: hci9: command tx timeout [ 190.324141][T11898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.361832][T11898] veth0_vlan: entered promiscuous mode [ 190.365590][T11898] veth1_vlan: entered promiscuous mode [ 190.381119][T11898] veth0_macvtap: entered promiscuous mode [ 190.385915][T11898] veth1_macvtap: entered promiscuous mode [ 190.392114][T11898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.625294][T11898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.679894][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.679903][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.685275][ T7062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.685305][ T7062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.685323][ T7062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.685340][ T7062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.715834][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.738932][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.738940][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.804855][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.805166][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.869187][T12012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2161'. [ 191.082187][T12019] loop0: detected capacity change from 0 to 512 [ 191.245057][T12019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.535489][T12042] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2172'. [ 191.821883][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.828504][ T4745] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 191.829509][ T4745] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 191.833727][ T4745] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 191.839263][ T4745] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 191.839791][ T4745] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 191.874458][T12055] loop0: detected capacity change from 0 to 256 [ 192.195740][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 192.195755][ T30] audit: type=1326 audit(716.083:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.195778][ T30] audit: type=1326 audit(716.083:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.195795][ T30] audit: type=1326 audit(716.083:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.195812][ T30] audit: type=1326 audit(716.083:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.195827][ T30] audit: type=1326 audit(716.083:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.243000][ T30] audit: type=1326 audit(716.133:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.243028][ T30] audit: type=1326 audit(716.133:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.244512][ T30] audit: type=1326 audit(716.133:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.244766][ T30] audit: type=1326 audit(716.133:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.0.2178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 192.289758][T12050] rxe_eth0 speed is unknown, defaulting to 1000 [ 192.327458][ T51] Bluetooth: hci9: command tx timeout [ 192.339844][T12050] lo speed is unknown, defaulting to 1000 [ 192.345519][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 192.350731][T12070] loop4: detected capacity change from 0 to 512 [ 192.365198][T12070] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 192.365224][T12070] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.372384][T12070] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2181: invalid indirect mapped block 9 (level 0) [ 192.372404][T12070] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.372661][T12070] EXT4-fs (loop4): 1 truncate cleaned up [ 192.373251][T12070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.423631][ T9325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.552921][ T30] audit: type=1326 audit(716.441:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12084 comm="syz.3.2186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8837a228 code=0x7ffc0000 [ 192.599714][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.599788][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.599914][T12050] bridge_slave_0: entered allmulticast mode [ 192.600459][T12050] bridge_slave_0: entered promiscuous mode [ 192.601445][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.601466][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.601540][T12050] bridge_slave_1: entered allmulticast mode [ 192.602009][T12050] bridge_slave_1: entered promiscuous mode [ 192.645049][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.646246][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.662507][T12050] team0: Port device team_slave_0 added [ 192.663445][T12050] team0: Port device team_slave_1 added [ 192.676785][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.676791][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.676802][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.677384][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.677390][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.677402][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.691105][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.691388][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.693556][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.693822][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.707748][T12050] hsr_slave_0: entered promiscuous mode [ 192.708145][T12050] hsr_slave_1: entered promiscuous mode [ 192.708395][T12050] debugfs: 'hsr0' already exists in 'hsr' [ 192.708405][T12050] Cannot create hsr debugfs directory [ 192.914495][T12105] loop0: detected capacity change from 0 to 512 [ 192.946066][T12105] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 192.946085][T12105] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.970189][T12050] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.988478][T12105] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2193: invalid indirect mapped block 9 (level 0) [ 192.988500][T12105] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.988809][T12105] EXT4-fs (loop0): 1 truncate cleaned up [ 192.989273][T12105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.019559][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.039989][T12050] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.200577][T12050] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.212535][ T7062] net_ratelimit: 545 callbacks suppressed [ 193.213564][ T875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.500295][T12050] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.511402][T12117] loop2: detected capacity change from 0 to 512 [ 193.513481][T12117] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 193.513624][T12117] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 193.832427][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 193.843642][T12050] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.850785][T12050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.851294][T12050] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.854009][T12050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.855856][T12050] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.868126][T12050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.869877][T12050] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 193.873134][T12050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.915648][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.923183][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.941162][T12050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.941173][T12050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.947202][ T51] Bluetooth: hci10: command tx timeout [ 193.987175][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.987200][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.995619][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.995643][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.642014][ T51] Bluetooth: hci9: command tx timeout [ 194.642135][ T51] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 194.669908][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.821037][T12050] veth0_vlan: entered promiscuous mode [ 194.827689][T12050] veth1_vlan: entered promiscuous mode [ 194.846569][T12050] veth0_macvtap: entered promiscuous mode [ 194.857370][T12050] veth1_macvtap: entered promiscuous mode [ 194.872302][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.880720][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.897275][T12170] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2206'. [ 194.933627][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.933661][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.933677][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.933693][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.977444][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.977450][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.000198][ T5040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.000208][ T5040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.175312][T12176] loop7: detected capacity change from 0 to 32768 [ 195.229800][T12176] loop7: p1 p3 < > [ 195.262072][T12178] netlink: 'syz.7.2208': attribute type 8 has an invalid length. [ 195.297752][ T5221] udevd[5221]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 195.299236][ T7463] udevd[7463]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 195.576951][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 195.582054][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 195.589421][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 195.590154][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 195.590589][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 195.773725][T12189] loop2: detected capacity change from 0 to 512 [ 195.796613][T12189] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 195.796938][T12189] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 196.030620][ T4745] Bluetooth: hci10: command tx timeout [ 196.146166][ T2984] bridge_slave_1: left allmulticast mode [ 196.146182][ T2984] bridge_slave_1: left promiscuous mode [ 196.146283][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.159221][ T2984] bridge_slave_0: left allmulticast mode [ 196.159234][ T2984] bridge_slave_0: left promiscuous mode [ 196.159305][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.389165][ T2984] bond0 (unregistering): (slave 10ç): Releasing backup interface [ 196.404903][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.438530][ T2984] bond0 (unregistering): Released all slaves [ 196.651508][T12218] Bluetooth: MGMT ver 1.23 [ 196.674803][ T4745] Bluetooth: hci9: command tx timeout [ 196.691097][T12183] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.840404][T12233] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2224'. [ 196.862225][T12237] loop0: detected capacity change from 0 to 128 [ 196.887630][T12237] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 196.887646][T12237] FAT-fs (loop0): data area starts beyond volume (36 > 11) [ 196.887655][T12237] FAT-fs (loop0): Can't find a valid FAT filesystem [ 196.895612][T12183] lo speed is unknown, defaulting to 1000 [ 197.472912][ T2984] hsr_slave_0: left promiscuous mode [ 197.473784][ T2984] hsr_slave_1: left promiscuous mode [ 197.474702][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.474712][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.476693][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.476704][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.508404][ T2984] veth1_macvtap: left promiscuous mode [ 197.508433][ T2984] veth0_macvtap: left promiscuous mode [ 197.508482][ T2984] veth1_vlan: left promiscuous mode [ 197.508518][ T2984] veth0_vlan: left promiscuous mode [ 197.642532][ T4745] Bluetooth: hci11: command tx timeout [ 197.779002][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 197.779023][ T30] audit: type=1326 audit(721.638:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12257 comm="syz.2.2233" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 197.779050][ T30] audit: type=1326 audit(721.638:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12257 comm="syz.2.2233" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 197.780717][ T30] audit: type=1326 audit(721.638:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12257 comm="syz.2.2233" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 197.780738][ T30] audit: type=1326 audit(721.638:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12257 comm="syz.2.2233" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 197.789482][ T30] audit: type=1326 audit(721.638:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12257 comm="syz.2.2233" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 197.835546][T12272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2237'. [ 198.065185][ T4745] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 198.066284][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 198.106970][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 198.133569][ T4745] Bluetooth: hci10: command tx timeout [ 198.284417][ C0] net_ratelimit: 425 callbacks suppressed [ 198.389464][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2242'. [ 198.433551][ T30] audit: type=1326 audit(722.284:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12285 comm="syz.2.2243" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 198.433612][ T30] audit: type=1326 audit(722.284:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12285 comm="syz.2.2243" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 198.447885][ T30] audit: type=1326 audit(722.293:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12285 comm="syz.2.2243" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 198.447908][ T30] audit: type=1326 audit(722.293:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12285 comm="syz.2.2243" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 198.451824][ T30] audit: type=1326 audit(722.303:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12285 comm="syz.2.2243" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 198.531538][T12302] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2248'. [ 198.569763][T12306] FAULT_INJECTION: forcing a failure. [ 198.569763][T12306] name failslab, interval 1, probability 0, space 0, times 0 [ 198.569786][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.7.2249 Tainted: G L syzkaller #0 PREEMPT [ 198.569799][T12306] Tainted: [L]=SOFTLOCKUP [ 198.569802][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 198.569817][T12306] Call trace: [ 198.569820][T12306] show_stack+0x2c/0x3c (C) [ 198.569836][T12306] __dump_stack+0x30/0x40 [ 198.569846][T12306] dump_stack_lvl+0xd8/0x12c [ 198.569854][T12306] dump_stack+0x1c/0x28 [ 198.569862][T12306] should_fail_ex+0x418/0x58c [ 198.569873][T12306] should_failslab+0xc4/0x120 [ 198.569884][T12306] __kmalloc_cache_noprof+0x94/0x5fc [ 198.569895][T12306] assoc_array_insert+0x2f0/0x1d60 [ 198.569905][T12306] __key_link_begin+0xc4/0x1c4 [ 198.569917][T12306] __key_create_or_update+0x2d8/0x7fc [ 198.569929][T12306] key_create_or_update+0x60/0x7c [ 198.569940][T12306] __arm64_sys_add_key+0x384/0x43c [ 198.569952][T12306] invoke_syscall+0x98/0x244 [ 198.569961][T12306] el0_svc_common+0xec/0x23c [ 198.569970][T12306] do_el0_svc+0x4c/0x5c [ 198.569978][T12306] el0_svc+0x60/0x1d8 [ 198.569987][T12306] el0t_64_sync_handler+0x44/0x104 [ 198.569996][T12306] el0t_64_sync+0x198/0x19c [ 198.570059][ T2984] IPVS: stop unused estimator thread 0... [ 198.625059][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.631845][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.631976][T12183] bridge_slave_0: entered allmulticast mode [ 198.632523][T12183] bridge_slave_0: entered promiscuous mode [ 198.634355][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.634490][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.634576][T12183] bridge_slave_1: entered allmulticast mode [ 198.635069][T12183] bridge_slave_1: entered promiscuous mode [ 198.667611][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.668839][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.692452][T12183] team0: Port device team_slave_0 added [ 198.693473][T12183] team0: Port device team_slave_1 added [ 198.710288][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.710294][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.710304][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.710866][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.710872][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.710885][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.837364][T12183] hsr_slave_0: entered promiscuous mode [ 198.840271][T12183] hsr_slave_1: entered promiscuous mode [ 198.840599][T12183] debugfs: 'hsr0' already exists in 'hsr' [ 198.840609][T12183] Cannot create hsr debugfs directory [ 199.568849][T12183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.592131][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.592669][T12183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.600480][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.600895][T12183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.613105][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.615016][T12183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.624998][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.733461][ T4745] Bluetooth: hci11: command tx timeout [ 199.747011][T12183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.751705][T12183] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.782529][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.782552][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.783188][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.783219][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.340032][ T4745] Bluetooth: hci10: command tx timeout [ 200.552637][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.661896][T12400] loop0: detected capacity change from 0 to 1024 [ 200.744687][T12400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.802346][T12400] usb usb8: usbfs: process 12400 (syz.0.2278) did not claim interface 0 before use [ 200.839223][T12183] veth0_vlan: entered promiscuous mode [ 200.849181][T12183] veth1_vlan: entered promiscuous mode [ 200.889821][T12183] veth0_macvtap: entered promiscuous mode [ 200.895121][T12183] veth1_macvtap: entered promiscuous mode [ 200.906749][T12183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.913890][T12183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.074526][ T2984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.076045][ T2984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.076223][ T2984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.076451][ T2984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.295330][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2285'. [ 201.295352][T12419] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2285'. [ 201.315262][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.315272][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.373336][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.373348][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.376516][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.540050][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.548780][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.825650][ T4745] Bluetooth: hci11: command tx timeout ** 47 printk messages dropped ** [ 202.434012][T12445] loop0: detected capacity change from 0 to 512 [ 202.436723][T12445] ext4: Bad value for 'max_batch_time' [ 202.833607][T12456] bridge0: port 3(vxlan0) entered blocking state [ 202.833638][T12456] bridge0: port 3(vxlan0) entered disabled state [ 202.833765][T12456] vxlan0: entered allmulticast mode [ 202.836239][T12456] vxlan0: entered promiscuous mode ** 8895 printk messages dropped ** [ 203.354106][ C1] net_ratelimit: 404 callbacks suppressed [ 203.407106][ T4854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.928957][ T4745] Bluetooth: hci11: command tx timeout [ 204.189479][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 204.189492][ T30] audit: type=1326 audit(728.000:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189531][ T30] audit: type=1326 audit(728.000:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189549][ T30] audit: type=1326 audit(728.000:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189569][ T30] audit: type=1326 audit(728.000:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189585][ T30] audit: type=1326 audit(728.000:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189666][ T30] audit: type=1326 audit(728.000:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189688][ T30] audit: type=1326 audit(728.000:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189704][ T30] audit: type=1326 audit(728.000:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189720][ T30] audit: type=1326 audit(728.000:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 204.189736][ T30] audit: type=1326 audit(728.000:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.0.2304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffad17a228 code=0x7ffc0000 ** 160 printk messages dropped ** [ 205.514885][T12525] loop7: detected capacity change from 0 to 2048 [ 205.811145][T12525] vfat: Unknown parameter 'appraise' [ 206.637858][T12545] loop3: detected capacity change from 0 to 512 [ 206.655496][T12545] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 206.655515][T12545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.671923][T12545] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2322: invalid indirect mapped block 9 (level 0) [ 206.671941][T12545] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.672319][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 206.672331][ C1] EXT4-fs (loop3): initial error at time 730: ext4_free_branches:1023: inode 11 [ 206.672345][ C1] EXT4-fs (loop3): last error at time 730: ext4_free_branches:1023: inode 11 [ 206.685425][T12545] EXT4-fs (loop3): 1 truncate cleaned up [ 206.686361][T12545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.042778][T12183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.239713][T12568] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2328'. [ 207.643854][T12577] loop0: detected capacity change from 0 to 2048 [ 207.645523][T12577] vfat: Unknown parameter 'appraise' [ 207.946247][T12585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2335'. [ 208.501948][ C0] net_ratelimit: 284 callbacks suppressed [ 208.741904][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.827090][T12606] FAULT_INJECTION: forcing a failure. [ 208.827090][T12606] name failslab, interval 1, probability 0, space 0, times 0 [ 208.827117][T12606] CPU: 0 UID: 0 PID: 12606 Comm: syz.7.2343 Tainted: G L syzkaller #0 PREEMPT [ 208.827132][T12606] Tainted: [L]=SOFTLOCKUP [ 208.827136][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 208.827149][T12606] Call trace: [ 208.827153][T12606] show_stack+0x2c/0x3c (C) [ 208.827168][T12606] __dump_stack+0x30/0x40 [ 208.827177][T12606] dump_stack_lvl+0xd8/0x12c [ 208.827186][T12606] dump_stack+0x1c/0x28 [ 208.827194][T12606] should_fail_ex+0x418/0x58c [ 208.827210][T12606] should_failslab+0xc4/0x120 [ 208.827221][T12606] kmem_cache_alloc_noprof+0x94/0x5d4 [ 208.827232][T12606] radix_tree_node_alloc+0xa0/0x348 [ 208.827243][T12606] idr_get_free+0x1f4/0x830 [ 208.827251][T12606] idr_alloc_u32+0x134/0x2a4 [ 208.827260][T12606] basic_change+0x360/0xbcc [ 208.827272][T12606] tc_new_tfilter+0xd20/0x127c [ 208.827283][T12606] rtnetlink_rcv_msg+0x66c/0x9bc [ 208.827294][T12606] netlink_rcv_skb+0x238/0x414 [ 208.827306][T12606] rtnetlink_rcv+0x28/0x38 [ 208.827315][T12606] netlink_unicast+0x600/0x7f8 [ 208.827326][T12606] netlink_sendmsg+0x648/0x948 [ 208.827338][T12606] __sock_sendmsg+0xc8/0x17c [ 208.827350][T12606] ____sys_sendmsg+0x3d0/0x6c8 [ 208.827362][T12606] ___sys_sendmsg+0x198/0x224 [ 208.827373][T12606] __sys_sendmsg+0x158/0x204 [ 208.827385][T12606] __arm64_sys_sendmsg+0x88/0x9c [ 208.827398][T12606] invoke_syscall+0x98/0x244 [ 208.827407][T12606] el0_svc_common+0xec/0x23c [ 208.827416][T12606] do_el0_svc+0x4c/0x5c [ 208.827424][T12606] el0_svc+0x60/0x1d8 [ 208.827432][T12606] el0t_64_sync_handler+0x44/0x104 [ 208.827440][T12606] el0t_64_sync+0x198/0x19c [ 208.856142][T12614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2346'. [ 209.033848][T12634] FAULT_INJECTION: forcing a failure. [ 209.033848][T12634] name fail_futex, interval 1, probability 0, space 0, times 0 [ 209.033862][T12634] CPU: 1 UID: 0 PID: 12634 Comm: syz.0.2354 Tainted: G L syzkaller #0 PREEMPT [ 209.033876][T12634] Tainted: [L]=SOFTLOCKUP [ 209.033879][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 209.033891][T12634] Call trace: [ 209.033895][T12634] show_stack+0x2c/0x3c (C) [ 209.033911][T12634] __dump_stack+0x30/0x40 [ 209.033922][T12634] dump_stack_lvl+0xd8/0x12c [ 209.033931][T12634] dump_stack+0x1c/0x28 [ 209.033938][T12634] should_fail_ex+0x418/0x58c [ 209.033948][T12634] should_fail+0x14/0x24 [ 209.033956][T12634] get_futex_key+0x1ec/0x12b0 [ 209.033968][T12634] futex_wake+0x10c/0x594 [ 209.033975][T12634] do_futex+0x2c4/0x378 [ 209.033985][T12634] mm_exit_exec_release+0x190/0x27c [ 209.033995][T12634] exit_mm+0x50/0x1f0 [ 209.034003][T12634] do_exit+0x524/0x1a74 [ 209.034011][T12634] do_group_exit+0x198/0x238 [ 209.034018][T12634] get_signal+0xfb0/0x1094 [ 209.034028][T12634] arch_do_signal_or_restart+0x288/0x444c [ 209.034035][T12634] exit_to_user_mode_loop+0x70/0x17c [ 209.034046][T12634] el0_svc+0x12c/0x1d8 [ 209.034055][T12634] el0t_64_sync_handler+0x44/0x104 [ 209.034062][T12634] el0t_64_sync+0x198/0x19c [ 209.165653][T12644] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2358'. [ 209.475174][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 209.475198][T12650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2360'. [ 210.019840][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 210.019864][ T30] audit: type=1326 audit(733.759:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.019948][ T30] audit: type=1326 audit(733.759:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020016][ T30] audit: type=1326 audit(733.759:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020073][ T30] audit: type=1326 audit(733.759:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020129][ T30] audit: type=1326 audit(733.759:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020195][ T30] audit: type=1326 audit(733.759:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020377][ T30] audit: type=1326 audit(733.759:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020436][ T30] audit: type=1326 audit(733.759:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020492][ T30] audit: type=1326 audit(733.759:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.020548][ T30] audit: type=1326 audit(733.759:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12664 comm="syz.4.2364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa537a228 code=0x7ffc0000 [ 210.164694][T12673] loop0: detected capacity change from 0 to 512 [ 210.176149][T12673] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 210.176162][T12673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.177625][T12673] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2366: invalid indirect mapped block 9 (level 0) [ 210.177644][T12673] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.180568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 210.180585][ C0] EXT4-fs (loop0): initial error at time 733: ext4_free_branches:1023: inode 11 [ 210.180605][ C0] EXT4-fs (loop0): last error at time 733: ext4_free_branches:1023: inode 11 [ 210.187118][T12673] EXT4-fs (loop0): 1 truncate cleaned up [ 210.192993][T12673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.240362][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.343991][T12680] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2369'. [ 210.360995][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 210.361016][T12682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2372'. [ 210.903120][T12704] loop0: detected capacity change from 0 to 512 [ 210.913984][T12704] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 210.913999][T12704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.935743][T12704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2377: invalid indirect mapped block 9 (level 0) [ 210.935769][T12704] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.936047][T12704] EXT4-fs (loop0): 1 truncate cleaned up [ 210.936514][T12704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.367548][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.387682][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 211.401816][T12718] loop0: detected capacity change from 0 to 512 [ 211.402181][T12718] ext4: Bad value for 'max_batch_time' [ 211.463199][T12724] loop3: detected capacity change from 0 to 512 [ 211.512349][T12727] loop0: detected capacity change from 0 to 512 [ 211.513797][T12727] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 211.513816][T12727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.526240][T12727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2386: invalid indirect mapped block 9 (level 0) [ 211.526266][T12727] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.527983][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 211.527997][ C1] EXT4-fs (loop0): initial error at time 735: ext4_free_branches:1023: inode 11 [ 211.528015][ C1] EXT4-fs (loop0): last error at time 735: ext4_free_branches:1023: inode 11 [ 211.542286][T12727] EXT4-fs (loop0): 1 truncate cleaned up [ 211.543440][T12727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.831285][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.110901][T12736] loop3: detected capacity change from 0 to 512 [ 212.115078][T12736] vfat: Unknown parameter ':' [ 212.389991][T12758] loop7: detected capacity change from 0 to 1024 [ 212.403271][T12760] __nla_validate_parse: 2 callbacks suppressed [ 212.403280][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 212.742585][T12758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 212.925842][T12771] hub 5-0:1.0: USB hub found [ 212.926559][T12771] hub 5-0:1.0: 8 ports detected [ 212.973050][T12771] EXT4-fs error (device loop7): ext4_free_blocks:6719: comm syz.7.2397: Freeing blocks not in datazone - block = 0, count = 16 [ 213.727993][ C0] net_ratelimit: 186 callbacks suppressed [ 213.824300][ T4992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.143075][T12050] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.192052][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 214.494763][ T11] block nbd0: Possible stuck request 000000000c4f2b4c: control (read@0,4096B). Runtime 150 seconds [ 214.671957][T12794] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2406'. [ 214.691047][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 216.246634][T12816] loop7: detected capacity change from 0 to 128 [ 216.264542][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 216.264555][ T30] audit: type=1326 audit(740.029:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264576][ T30] audit: type=1326 audit(740.029:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264592][ T30] audit: type=1326 audit(740.029:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264609][ T30] audit: type=1326 audit(740.029:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264624][ T30] audit: type=1326 audit(740.029:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264639][ T30] audit: type=1326 audit(740.029:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264655][ T30] audit: type=1326 audit(740.029:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264670][ T30] audit: type=1326 audit(740.029:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264685][ T30] audit: type=1326 audit(740.029:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.264700][ T30] audit: type=1326 audit(740.029:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.0.2408" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad17a228 code=0x7ffc0000 [ 216.302213][T12816] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.327379][T12050] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.174898][T12870] loop7: detected capacity change from 0 to 512 [ 218.181478][T12870] vfat: Unknown parameter '}' [ 218.861142][ T5080] net_ratelimit: 237 callbacks suppressed [ 218.861156][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.956165][T12886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.956338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.803952][T12939] loop3: detected capacity change from 0 to 512 [ 220.807613][T12939] vfat: Unknown parameter '^' [ 222.404592][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 222.404616][ T30] audit: type=1326 audit(746.112:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.404703][ T30] audit: type=1326 audit(746.122:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.404766][ T30] audit: type=1326 audit(746.122:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.404822][ T30] audit: type=1326 audit(746.122:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.404877][ T30] audit: type=1326 audit(746.122:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.404973][ T30] audit: type=1326 audit(746.122:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.405142][ T30] audit: type=1326 audit(746.122:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.405199][ T30] audit: type=1326 audit(746.132:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.405259][ T30] audit: type=1326 audit(746.132:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 222.405314][ T30] audit: type=1326 audit(746.132:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 223.195376][T12992] loop0: detected capacity change from 0 to 512 [ 223.199021][T12992] vfat: Unknown parameter '' [ 223.943111][ C0] net_ratelimit: 430 callbacks suppressed [ 226.138307][T13034] loop3: detected capacity change from 0 to 512 [ 226.141117][T13034] vfat: Unknown parameter 's' [ 226.296869][T13036] loop0: detected capacity change from 0 to 512 [ 226.299645][T13036] vfat: Unknown parameter '' [ 228.836481][T13059] loop3: detected capacity change from 0 to 8 [ 228.842602][T13059] Filesystem uses "lzo" compression. This is not supported [ 228.854339][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 228.854347][ T30] audit: type=1326 audit(752.566:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13037 comm="syz.7.2476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 228.854372][ T30] audit: type=1326 audit(752.566:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13037 comm="syz.7.2476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 228.854391][ T30] audit: type=1326 audit(752.566:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13037 comm="syz.7.2476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 228.854408][ T30] audit: type=1326 audit(752.566:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13037 comm="syz.7.2476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 228.854426][ T30] audit: type=1326 audit(752.566:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13037 comm="syz.7.2476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 228.986850][T13055] net_ratelimit: 194 callbacks suppressed [ 228.991872][T13064] loop3: detected capacity change from 0 to 1024 [ 229.044498][T13064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.166828][T13069] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 230.146257][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2490'. [ 230.146284][T13084] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2490'. [ 230.154747][T12183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.221047][T13096] loop7: detected capacity change from 0 to 8 [ 230.262494][T13096] Filesystem uses "lzo" compression. This is not supported [ 231.454458][T13129] syzkaller0: entered promiscuous mode [ 231.454469][T13129] syzkaller0: entered allmulticast mode [ 231.475861][T13134] loop3: detected capacity change from 0 to 1024 [ 231.498792][T13134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 231.723928][T13144] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.2507: Freeing blocks not in datazone - block = 0, count = 16 [ 232.231401][T13156] loop7: detected capacity change from 0 to 512 [ 232.233880][T13156] vfat: Unknown parameter '©' [ 232.520957][T12183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 233.230976][ T30] audit: type=1326 audit(756.921:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.2.2516" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 233.231076][ T30] audit: type=1326 audit(756.921:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.2.2516" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 233.231143][ T30] audit: type=1326 audit(756.921:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.2.2516" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 233.231201][ T30] audit: type=1326 audit(756.921:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.2.2516" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 233.231297][ T30] audit: type=1326 audit(756.921:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.2.2516" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 233.430520][T13180] loop7: detected capacity change from 0 to 512 [ 233.432608][T13180] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 233.432759][T13180] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 234.131401][ C1] net_ratelimit: 163 callbacks suppressed [ 235.372160][T13213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 235.372172][T13213] block device autoloading is deprecated and will be removed. [ 235.798284][T13221] loop3: detected capacity change from 0 to 512 [ 235.801921][T13221] vfat: Unknown parameter '•' [ 236.164202][T13224] loop0: detected capacity change from 0 to 8 [ 236.166077][T13224] Filesystem uses "lzo" compression. This is not supported [ 237.096042][T13243] loop0: detected capacity change from 0 to 8 [ 237.097969][T13243] Filesystem uses "lzo" compression. This is not supported [ 237.494283][ T30] audit: type=1326 audit(761.166:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494312][ T30] audit: type=1326 audit(761.176:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494329][ T30] audit: type=1326 audit(761.176:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494345][ T30] audit: type=1326 audit(761.176:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494360][ T30] audit: type=1326 audit(761.176:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494375][ T30] audit: type=1326 audit(761.176:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494390][ T30] audit: type=1326 audit(761.176:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494404][ T30] audit: type=1326 audit(761.176:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494419][ T30] audit: type=1326 audit(761.176:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 237.494435][ T30] audit: type=1326 audit(761.176:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.2534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 238.122191][T13262] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.122204][T13262] block device autoloading is deprecated and will be removed. [ 238.511257][T13274] loop0: detected capacity change from 0 to 512 [ 238.511746][T13274] vfat: Unknown parameter 'C' [ 238.760454][T13276] loop3: detected capacity change from 0 to 512 [ 239.223966][ T4992] net_ratelimit: 205 callbacks suppressed [ 239.223979][ T4992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.224139][ T4992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.284117][T13292] loop7: detected capacity change from 0 to 1024 [ 239.294170][T13294] loop0: detected capacity change from 0 to 1024 [ 239.302326][T13292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.327982][T13294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.543372][T13301] EXT4-fs error (device loop7): ext4_free_blocks:6719: comm syz.7.2549: Freeing blocks not in datazone - block = 0, count = 16 [ 240.055745][T13304] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.2550: Freeing blocks not in datazone - block = 0, count = 16 [ 240.317398][T12050] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.096732][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.364562][T13354] loop0: detected capacity change from 0 to 4096 [ 242.375558][T13354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.393811][T13359] overlayfs: failed to resolve './bus': -2 [ 242.416521][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.486475][T13368] FAULT_INJECTION: forcing a failure. [ 242.486475][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 242.486499][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.0.2568 Tainted: G L syzkaller #0 PREEMPT [ 242.486513][T13368] Tainted: [L]=SOFTLOCKUP [ 242.486517][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 242.486531][T13368] Call trace: [ 242.486534][T13368] show_stack+0x2c/0x3c (C) [ 242.486551][T13368] __dump_stack+0x30/0x40 [ 242.486561][T13368] dump_stack_lvl+0xd8/0x12c [ 242.486570][T13368] dump_stack+0x1c/0x28 [ 242.486578][T13368] should_fail_ex+0x418/0x58c [ 242.486589][T13368] should_failslab+0xc4/0x120 [ 242.486599][T13368] kmem_cache_alloc_noprof+0x94/0x5d4 [ 242.486610][T13368] __anon_vma_prepare+0x104/0x3f8 [ 242.486620][T13368] __vmf_anon_prepare+0xe0/0x188 [ 242.486629][T13368] do_pte_missing+0x4a4/0x28bc [ 242.486639][T13368] handle_mm_fault+0x14d0/0x2b58 [ 242.486648][T13368] __get_user_pages+0x82c/0x13b0 [ 242.486659][T13368] populate_vma_page_range+0x260/0x358 [ 242.486671][T13368] __mm_populate+0x204/0x328 [ 242.486682][T13368] vm_mmap_pgoff+0x358/0x46c [ 242.486693][T13368] ksys_mmap_pgoff+0x364/0x5b4 [ 242.486704][T13368] __arm64_sys_mmap+0x110/0x12c [ 242.486712][T13368] invoke_syscall+0x98/0x244 [ 242.486722][T13368] el0_svc_common+0xec/0x23c [ 242.486730][T13368] do_el0_svc+0x4c/0x5c [ 242.486738][T13368] el0_svc+0x60/0x1d8 [ 242.486748][T13368] el0t_64_sync_handler+0x44/0x104 [ 242.486756][T13368] el0t_64_sync+0x198/0x19c [ 242.535379][T13372] loop7: detected capacity change from 0 to 128 [ 242.561109][T13372] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.592988][T12050] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.113672][T13390] loop7: detected capacity change from 0 to 1024 [ 243.366648][T13390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.736229][T12050] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.789497][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 243.789521][T13398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2579'. [ 243.817712][T13400] loop0: detected capacity change from 0 to 4096 [ 243.838258][T13400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.985648][T11453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.404280][ C1] net_ratelimit: 700 callbacks suppressed [ 244.645655][ T11] block nbd0: Possible stuck request 000000000c4f2b4c: control (read@0,4096B). Runtime 180 seconds [ 245.396511][T13433] FAULT_INJECTION: forcing a failure. [ 245.396511][T13433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.396533][T13433] CPU: 1 UID: 0 PID: 13433 Comm: syz.0.2589 Tainted: G L syzkaller #0 PREEMPT [ 245.396546][T13433] Tainted: [L]=SOFTLOCKUP [ 245.396550][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 245.396564][T13433] Call trace: [ 245.396567][T13433] show_stack+0x2c/0x3c (C) [ 245.396584][T13433] __dump_stack+0x30/0x40 [ 245.396593][T13433] dump_stack_lvl+0xd8/0x12c [ 245.396601][T13433] dump_stack+0x1c/0x28 [ 245.396610][T13433] should_fail_ex+0x418/0x58c [ 245.396621][T13433] should_fail+0x14/0x24 [ 245.396630][T13433] should_fail_usercopy+0x20/0x30 [ 245.396641][T13433] bpf_verifier_vlog+0x81c/0xbc0 [ 245.396651][T13433] __btf_verifier_log+0xe8/0x13c [ 245.396662][T13433] btf_parse_hdr+0x3f4/0x71c [ 245.396671][T13433] btf_new_fd+0x288/0x7a8 [ 245.396680][T13433] bpf_btf_load+0x144/0x190 [ 245.396693][T13433] __sys_bpf+0x7f0/0x82c [ 245.396704][T13433] __arm64_sys_bpf+0xd0/0xec [ 245.396714][T13433] invoke_syscall+0x98/0x244 [ 245.396724][T13433] el0_svc_common+0xec/0x23c [ 245.396732][T13433] do_el0_svc+0x4c/0x5c [ 245.396741][T13433] el0_svc+0x60/0x1d8 [ 245.396749][T13433] el0t_64_sync_handler+0x44/0x104 [ 245.396758][T13433] el0t_64_sync+0x198/0x19c [ 245.425909][T13431] overlayfs: failed to clone upperpath [ 246.761294][T13469] FAULT_INJECTION: forcing a failure. [ 246.761294][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 246.761317][T13469] CPU: 1 UID: 0 PID: 13469 Comm: syz.0.2602 Tainted: G L syzkaller #0 PREEMPT [ 246.761330][T13469] Tainted: [L]=SOFTLOCKUP [ 246.761334][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 246.761347][T13469] Call trace: [ 246.761350][T13469] show_stack+0x2c/0x3c (C) [ 246.761366][T13469] __dump_stack+0x30/0x40 [ 246.761375][T13469] dump_stack_lvl+0xd8/0x12c [ 246.761383][T13469] dump_stack+0x1c/0x28 [ 246.761392][T13469] should_fail_ex+0x418/0x58c [ 246.761403][T13469] should_failslab+0xc4/0x120 [ 246.761413][T13469] kmem_cache_alloc_noprof+0x94/0x5d4 [ 246.761424][T13469] __anon_vma_prepare+0x104/0x3f8 [ 246.761434][T13469] __vmf_anon_prepare+0xe0/0x188 [ 246.761443][T13469] do_pte_missing+0x4a4/0x28bc [ 246.761453][T13469] handle_mm_fault+0x14d0/0x2b58 [ 246.761462][T13469] __get_user_pages+0x82c/0x13b0 [ 246.761473][T13469] populate_vma_page_range+0x260/0x358 [ 246.761484][T13469] __mm_populate+0x204/0x328 [ 246.761495][T13469] vm_mmap_pgoff+0x358/0x46c [ 246.761506][T13469] ksys_mmap_pgoff+0x364/0x5b4 [ 246.761517][T13469] __arm64_sys_mmap+0x110/0x12c [ 246.761526][T13469] invoke_syscall+0x98/0x244 [ 246.761535][T13469] el0_svc_common+0xec/0x23c [ 246.761543][T13469] do_el0_svc+0x4c/0x5c [ 246.761552][T13469] el0_svc+0x60/0x1d8 [ 246.761561][T13469] el0t_64_sync_handler+0x44/0x104 [ 246.761569][T13469] el0t_64_sync+0x198/0x19c [ 247.115434][ T4370] udevd[4370]: worker [5147] /devices/virtual/block/nbd0 timeout; kill it [ 247.115499][ T4370] udevd[4370]: seq 10324 '/devices/virtual/block/nbd0' killed [ 247.154691][T13482] loop0: detected capacity change from 0 to 512 [ 248.901440][T13525] loop0: detected capacity change from 0 to 1024 [ 249.383887][ T1610] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.383933][ T1610] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.442153][T13526] net_ratelimit: 468 callbacks suppressed [ 249.459443][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.565998][T13525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 249.722884][T13542] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.2620: Freeing blocks not in datazone - block = 0, count = 16 [ 249.906838][T13542] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.2620: bg 0: block 112: padding at end of block bitmap is not set [ 249.909139][T13542] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 249.909158][T13542] EXT4-fs (loop0): This should not happen!! Data will be lost [ 249.909158][T13542] [ 249.909166][T13542] EXT4-fs (loop0): Total free blocks count 0 [ 249.909174][T13542] EXT4-fs (loop0): Free/Dirty block details [ 249.909182][T13542] EXT4-fs (loop0): free_blocks=0 [ 249.909190][T13542] EXT4-fs (loop0): dirty_blocks=31488 [ 249.909196][T13542] EXT4-fs (loop0): Block reservation details [ 249.909202][T13542] EXT4-fs (loop0): i_reserved_data_blocks=1968 [ 249.961393][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2176 with max blocks 2048 with error 28 [ 249.984185][T13545] netlink: 'syz.4.2625': attribute type 10 has an invalid length. [ 249.992137][T11453] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 250.099032][T13545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2625'. [ 250.166640][T13555] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2627'. [ 250.831930][T13569] loop0: detected capacity change from 0 to 512 [ 250.834546][T13569] vfat: Unknown parameter 'v' [ 252.506011][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 252.506020][ T30] audit: type=1326 audit(776.132:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.507439][ T30] audit: type=1326 audit(776.142:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.507698][ T30] audit: type=1326 audit(776.142:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.507715][ T30] audit: type=1326 audit(776.142:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.507730][ T30] audit: type=1326 audit(776.142:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.507979][ T30] audit: type=1326 audit(776.142:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.507996][ T30] audit: type=1326 audit(776.142:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.508013][ T30] audit: type=1326 audit(776.142:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.511158][ T30] audit: type=1326 audit(776.142:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.511178][ T30] audit: type=1326 audit(776.142:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13570 comm="syz.2.2634" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8977a228 code=0x7ffc0000 [ 252.987955][ C0] wireguard: wg0: Handshake for peer 37 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 252.996701][ T31] INFO: task syz.2.744:7192 blocked for more than 143 seconds. [ 252.996759][ T31] Tainted: G L syzkaller #0 [ 252.996766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.996772][ T31] task:syz.2.744 state:D stack:0 pid:7192 tgid:7176 ppid:4739 task_flags:0x400040 flags:0x00800011 [ 252.996789][ T31] dump_backtrace(regs = 0000000000000000 tsk = 000000002237682e) [ 252.996798][ T31] Call trace: [ 252.996802][ T31] __switch_to+0x2b4/0x6e4 (T) [ 252.996821][ T31] __schedule+0x135c/0x2b00 [ 252.996833][ T31] schedule+0x13c/0x20c [ 252.996843][ T31] schedule_preempt_disabled+0x18/0x2c [ 252.996853][ T31] __mutex_lock+0x5d4/0x1078 [ 252.996864][ T31] mutex_lock_nested+0x24/0x30 [ 252.996875][ T31] sync_bdevs+0x214/0x3d4 [ 252.996888][ T31] ksys_sync+0xc4/0x118 [ 252.996898][ T31] __arm64_sys_sync+0x14/0x24 [ 252.996906][ T31] invoke_syscall+0x98/0x244 [ 252.996916][ T31] el0_svc_common+0xec/0x23c [ 252.996924][ T31] do_el0_svc+0x4c/0x5c [ 252.996933][ T31] el0_svc+0x60/0x1d8 [ 252.996941][ T31] el0t_64_sync_handler+0x44/0x104 [ 252.996949][ T31] el0t_64_sync+0x198/0x19c [ 252.996959][ T31] INFO: task syz.2.744:7193 blocked for more than 143 seconds. [ 252.996966][ T31] Tainted: G L syzkaller #0 [ 252.996971][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.996975][ T31] task:syz.2.744 state:D stack:0 pid:7193 tgid:7176 ppid:4739 task_flags:0x400040 flags:0x00800011 [ 252.997134][ T31] dump_backtrace(regs = 0000000000000000 tsk = 00000000d13531c5) [ 252.997152][ T31] Call trace: [ 252.997166][ T31] __switch_to+0x2b4/0x6e4 (T) [ 252.997188][ T31] __schedule+0x135c/0x2b00 [ 252.997314][ T31] schedule+0x13c/0x20c [ 252.997335][ T31] schedule_preempt_disabled+0x18/0x2c [ 252.997356][ T31] __mutex_lock+0x5d4/0x1078 [ 252.997378][ T31] mutex_lock_nested+0x24/0x30 [ 252.997399][ T31] sync_bdevs+0x214/0x3d4 [ 252.997420][ T31] ksys_sync+0xc4/0x118 [ 252.997439][ T31] __arm64_sys_sync+0x14/0x24 [ 252.997458][ T31] invoke_syscall+0x98/0x244 [ 252.997478][ T31] el0_svc_common+0xec/0x23c [ 252.997497][ T31] do_el0_svc+0x4c/0x5c [ 252.997516][ T31] el0_svc+0x60/0x1d8 [ 252.997534][ T31] el0t_64_sync_handler+0x44/0x104 [ 252.997554][ T31] el0t_64_sync+0x198/0x19c [ 252.997584][ T31] INFO: task syz.2.744:7200 blocked for more than 143 seconds. [ 252.997601][ T31] Tainted: G L syzkaller #0 [ 252.997617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.997632][ T31] task:syz.2.744 state:D stack:0 pid:7200 tgid:7176 ppid:4739 task_flags:0x400040 flags:0x00000011 [ 252.997665][ T31] dump_backtrace(regs = 0000000000000000 tsk = 00000000417cb172) [ 252.997682][ T31] Call trace: [ 252.997696][ T31] __switch_to+0x2b4/0x6e4 (T) [ 252.997717][ T31] __schedule+0x135c/0x2b00 [ 252.997784][ T31] schedule+0x13c/0x20c [ 252.997808][ T31] schedule_preempt_disabled+0x18/0x2c [ 252.997829][ T31] __mutex_lock+0x5d4/0x1078 [ 252.997850][ T31] mutex_lock_nested+0x24/0x30 [ 252.997872][ T31] sync_bdevs+0x214/0x3d4 [ 252.997892][ T31] ksys_sync+0xc4/0x118 [ 252.997912][ T31] __arm64_sys_sync+0x14/0x24 [ 252.997931][ T31] invoke_syscall+0x98/0x244 [ 252.998031][ T31] el0_svc_common+0xec/0x23c [ 252.998040][ T31] do_el0_svc+0x4c/0x5c [ 252.998048][ T31] el0_svc+0x60/0x1d8 [ 252.998056][ T31] el0t_64_sync_handler+0x44/0x104 [ 252.998064][ T31] el0t_64_sync+0x198/0x19c [ 252.998132][ T31] [ 252.998132][ T31] Showing all locks held in the system: [ 252.998137][ T31] locks held by kworker/0:1/10: 2, last CPU#0: [ 252.998144][ T31] #0: ffff0000e7d8dd40 ((wq_completion)wg-crypt-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 252.998174][ T31] #1: ffff80008f967c20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 252.998199][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 252.998205][ T31] #0: ffff8000899e1820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 252.998259][ T31] locks held by kworker/0:2/875: 1, last CPU#0: [ 252.998276][ T31] #0: ffff8000899e1820 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x698/0x1250 [ 252.998485][ T31] locks held by kworker/u8:6/2984: 4, on CPU#1: [ 252.998502][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 252.998590][ T31] #1: ffff800099e97c20 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 252.998679][ T31] #2: ffff800089878cd0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x1c/0x38 [ 252.998767][ T31] #3: ffff800089a9bf20 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xc4/0x220 [ 252.998911][ T31] locks held by getty/4519: 2, on CPU#1: [ 252.998928][ T31] #0: ffff0000d166b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 252.999015][ T31] #1: ffff8000931fe2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 252.999127][ T31] locks held by udevd/5147: 1, on CPU#0: [ 252.999144][ T31] #0: ffff0000c79f0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 252.999259][ T31] locks held by syz.2.744/7192: 1, on CPU#1: [ 252.999275][ T31] #0: ffff0000c79f0350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x214/0x3d4 [ 252.999457][ T31] locks held by syz.2.744/7193: 1, on CPU#0: [ 252.999473][ T31] #0: ffff0000c79f0350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x214/0x3d4 [ 252.999561][ T31] locks held by syz.2.744/7200: 1, on CPU#0: [ 252.999577][ T31] #0: ffff0000c79f0350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x214/0x3d4 [ 252.999676][ T31] locks held by syz.7.1065/8379: 3, on CPU#0: [ 252.999693][ T31] #0: ffff0000d4800ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 252.999786][ T31] #1: ffff0000d45e8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 252.999943][ T31] #2: ffff0000f321cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 253.000030][ T31] locks held by syz.6.1219/8867: 3, on CPU#1: [ 253.000048][ T31] #0: ffff0000f1dfe2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 253.000135][ T31] #1: ffff0000d45e8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 253.000246][ T31] #2: ffff0000f451c080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 253.000334][ T31] locks held by syz.9.1445/9585: 3, on CPU#1: [ 253.000351][ T31] #0: ffff0000f05b9270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 253.000510][ T31] #1: ffff0000d45e8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 253.000613][ T31] #2: ffff0000d4b44080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 253.000712][ T31] locks held by syz.5.1989/11422: 3, on CPU#1: [ 253.000729][ T31] #0: ffff0000d5d2e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 253.000817][ T31] #1: ffff0000d45e8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 253.000968][ T31] #2: ffff0000f42ab480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 253.001055][ T31] locks held by syz.1.2030/11547: 3, on CPU#1: [ 253.001073][ T31] #0: ffff0000f19769b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 253.001161][ T31] #1: ffff0000d45e8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 253.001263][ T31] #2: ffff0000ee405c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 253.001375][ T31] locks held by syz.2.2634/13583: 1, last CPU#1: [ 253.001392][ T31] #0: ffff0000d9f838f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x18c/0x85c [ 253.001566][ T31] locks held by syz.3.2641/13592: 1, last CPU#1: [ 253.001583][ T31] #0: ffff0000cfc78300 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1a8/0x46c [ 253.001673][ T31] locks held by syz.7.2645/13608: 5, last CPU#0: [ 253.001690][ T31] #0: ffff0000d1417cf0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x18c/0x85c [ 253.001779][ T31] #1: ffff0000d1417e18 (&u->peer_wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x30/0x78 [ 253.049110][ T31] #2: ffff0000c50ba7b8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x68/0xdc4 [ 253.049203][ T31] #3: ffff0001acf8d1e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x44 [ 253.050372][ T31] #4: ffff0001acf77248 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x24c/0x2ec [ 253.050484][ T31] locks held by syz.4.2646/13606: 1, last CPU#1: [ 253.050502][ T31] #0: ffff800089b02bb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 253.051628][ T31] locks held by syz.4.2646/13607: 3, last CPU#0: [ 253.051646][ T31] #0: ffff0000ca7b78e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x44/0x11c [ 253.051739][ T31] #1: ffff800089878cd0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_slow_inc+0x1c/0x40 [ 253.052879][ T31] #2: ffff800089a9bf20 (jump_label_mutex){+.+.}-{4:4}, at: static_key_slow_inc_cpuslocked+0x44/0x114 [ 253.052999][ T31] [ 253.053991][ T31] ============================================= [ 253.053991][ T31] [ 253.054011][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 253.175817][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 253.177791][ T31] Tainted: [L]=SOFTLOCKUP [ 253.178595][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 253.180450][ T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 253.181867][ T31] Call trace: [ 253.182484][ T31] show_stack+0x2c/0x3c (C) [ 253.183336][ T31] __dump_stack+0x30/0x40 [ 253.184153][ T31] dump_stack_lvl+0x30/0x12c [ 253.184999][ T31] dump_stack+0x1c/0x28 [ 253.185765][ T31] vpanic+0x594/0xaf8 [ 253.186481][ T31] vpanic+0x0/0xaf8 [ 253.187168][ T31] hung_task_panic+0x0/0x2c [ 253.187997][ T31] kthread+0x304/0x3d4 [ 253.188750][ T31] ret_from_fork+0x10/0x20 [ 253.189565][ T31] SMP: stopping secondary CPUs [ 253.190442][ T31] Kernel Offset: disabled [ 253.191226][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 253.192466][ T31] Memory Limit: none [ 253.243518][ T31] Rebooting in 86400 seconds..