last executing test programs: 24.852293126s ago: executing program 4 (id=285): r0 = syz_open_dev$cec(&(0x7f0000000700), 0xffffffffffffffff, 0xc8520) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000740)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000052100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) 24.786668454s ago: executing program 4 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a310000000009007c0073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 24.768218486s ago: executing program 4 (id=289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19f, &(0x7f00000001c0)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000280)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) mq_notify(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x16, 0x1, @thr={&(0x7f0000000b40)="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", &(0x7f0000001b40)="6a124b685e3503933fdb95c1f09ad0c9d9608dbba76476b611c1a0938649fdf2c275fe4d6d680425ebe1a8503a09fd7e50b2af1c8b93d7ee5e53d9d07082232d6fe42fc02f2cf8eac1055cffc75cf1138db9f7ffd217040355f8f076ecfdffed2d6c1cc701897dd767083122e1734b9bd0a1a3e16e96c9e23d53323bb9"}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a80)={0x2, &(0x7f0000000ac0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000b00)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 23.833889489s ago: executing program 4 (id=317): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, r0, 0xf4ad8000) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd5d) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000600)={0x2, 0x2000}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1c000000030a010800000000000000000200fffb080007006e617400140000001100b216c9917a7e220e5d1c55f9026b010000000000000000000000000a"], 0x44}}, 0x24000004) r5 = socket$netlink(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f00000028c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000002940)="$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") execve(&(0x7f0000002dc0)='./file0/file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002e00)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000002e40)='./file1\x00', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000002840), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x300, 0x8, 0x0, 0x2, 0x0}) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000002740)='./trace\x00', &(0x7f0000002780)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r7, &(0x7f0000002800)="6e616d65207e20221d227c", 0xb) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x5c93067603d2de2a, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000540)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 22.768767512s ago: executing program 4 (id=330): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 22.003895021s ago: executing program 4 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x64}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000180)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004a0003002dbd7000010000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4c085}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x210042, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000380)=0xb7, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000440)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f0000000040)={0x7, 0x0, 0x0, &(0x7f0000000080)}) write(r1, &(0x7f0000000580)='3', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000b8c0)={0x1, &(0x7f000000e100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/self/root/var/run\x00', 0x1ff) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000006c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x6e) listen(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='1', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 21.970183911s ago: executing program 32 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x64}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000180)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004a0003002dbd7000010000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4c085}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x210042, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000380)=0xb7, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000440)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f0000000040)={0x7, 0x0, 0x0, &(0x7f0000000080)}) write(r1, &(0x7f0000000580)='3', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000b8c0)={0x1, &(0x7f000000e100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/self/root/var/run\x00', 0x1ff) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000006c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x6e) listen(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='1', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 9.109447873s ago: executing program 3 (id=525): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x7000000}}, {0x28}}}}, 0x3a0) 9.034457095s ago: executing program 3 (id=528): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') gettid() ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f00000003c0)=0x68) 8.959363047s ago: executing program 3 (id=530): r0 = syz_open_dev$cec(&(0x7f0000000700), 0xffffffffffffffff, 0xc8520) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000740)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000007c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c0000000000000000001100", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000800)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 8.91386537s ago: executing program 3 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="060000000300000002", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x10) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x84000, 0x0) 8.818256609s ago: executing program 3 (id=539): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0xfffffffffffc0}}, {0x28}}}}, 0x3a0) 8.422850314s ago: executing program 3 (id=544): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x29c3d}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) 8.3941398s ago: executing program 33 (id=544): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x29c3d}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) 1.953737654s ago: executing program 6 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) 1.635249879s ago: executing program 6 (id=680): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0xf) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa971, 0x1f480, 0x1, 0x94}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2010480, &(0x7f0000000300), 0x5, 0x76a, &(0x7f0000000340)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r2 = fanotify_init(0x8, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d616373656300002000028005000900010000000c00010040010000000000000ea603000800000008000500", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x103402, 0x49) fanotify_mark(r2, 0x1, 0x8100030, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x2}) io_uring_setup(0x14, &(0x7f0000000040)={0x0, 0x73e9, 0x1c880, 0x2, 0x20000055}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) syz_io_uring_setup(0x6b88, &(0x7f0000000b80)={0x0, 0x9f57, 0x100, 0x3, 0x2b, 0x0, r6}, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) preadv2(r7, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1.530638756s ago: executing program 5 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x60, &(0x7f0000000cc0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e002a3afffe80000000f5ff000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.449695637s ago: executing program 5 (id=687): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x210000, &(0x7f0000000880)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x66], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fadvise64(r0, 0x8, 0x7ff, 0x0) 1.446623236s ago: executing program 1 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xa, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000001fffffff00b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.374591652s ago: executing program 1 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x4f, 0x0) write(r0, &(0x7f0000000100)='270', 0x3) syz_ublk_setup_io_uring(0x3a07, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x2760c000) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) r4 = syz_open_dev$mtd(&(0x7f0000000980), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000a00)={0xfffc, 0x10000, 0x1}}) 1.339706495s ago: executing program 5 (id=691): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRESHEX=r2, @ANYBLOB="05840000008000002c0012800b00010062726964676500001c000280080032000100000008000100140000400800050001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.296040457s ago: executing program 1 (id=692): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="98000000", @ANYRES64=r0, @ANYBLOB="010000000000fdffffff03000000840001800d0001007564703a73797a32000000000c00028008000300030000001500010069623a76657468315f746f5f7465616d0000000044000280080001001e000000080001000500000008000104050000000800030007000000080001000e0000000800030001000080080002"], 0x98}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f000001c400), 0x400000000a882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r1, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x30}}, 0x4008040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5534f000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x4008af83, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r5, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r7 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='gid', &(0x7f00000002c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0) syz_mount_image$ubifs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="63686b5f646174615f6372632c62756c6b5f726561642c6e6f5f62756c6b5f726561642c617574685f050000005f6e616d653d736861312c666173745f756e6d6f756e742c617574685f6b65793d2e262f5c2f495d2c6e6f726d5f756e6d6f756e742c6e6f726d5f756e6d6f756e742c636f6d70723d7a7374642c636f6d70723d6c7a6f2c6e6f726d5f756e6d6f756e742c00"], 0x1, 0x9dc3, &(0x7f0000000840)="$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") setxattr$system_posix_acl(&(0x7f000000a640)='.\x00', &(0x7f000000a680)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f000001c4c0), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.243277421s ago: executing program 5 (id=693): r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x8, 0x400240) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000001c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0xfffe, @remote}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050008"], 0x4a) 1.122698865s ago: executing program 5 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x34, r0, 0xd01, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000a00)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) (rerun: 64) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xd, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x80}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000000140)={0xf, 0x0, 0x100000}, 0x20) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000740)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0xfffffffe}, 0x9b) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) mount_setattr(r6, &(0x7f00000001c0)='.\x00', 0x8000, &(0x7f0000000200)={0xb, 0x0, 0x80000}, 0x20) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)) (async, rerun: 64) file_getattr(r3, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000780), 0x18, 0x400) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0x30, 0x92, &(0x7f0000000240)="7911ba5ca5c8d546e42eb72007a3ef86d09e9a674a7cafcded84fc23ba9c36f0ce70df0c4285a1ca241a658ca87cac12", &(0x7f0000000340)=""/146, 0x9, 0x0, 0x9b, 0x49, &(0x7f0000000400)="b57c47dfa6fe4e0a5cf119a596e01799520134dd1d2a45fb6b7104b6f04cad65921e75021c6b98943b79ec35c428db7eaecf5b0f791252d4dfe2ce7edb2e5bc63b8cf65dd2195560735e7450d754af7246dc7c3f99aa5c2fa3c78782228b368eec8742e3de97f1198983d103bcd89568a98317f03d826cdb860a3a61543182575ea13d12750cbfff3dbdfbf134dd9182b1a120f0acdd949cdd5c8b", &(0x7f00000004c0)="79552d6b9dcc25557169f14520f9d858411c6ca5054afce9e7f74a38ea4ec4696457335ff8134973cdb9039dfefde9e80aa86181b7f93a51d8edc00c5cf1eac368a9e08673c8ca91dd", 0x0, 0x0, 0x3}, 0x50) (async) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000c40)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r8, r9, r10, &(0x7f0000000d80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e00)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000e40)=0x0) (async, rerun: 32) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000e80)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000f00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x1, 0x23b}}], 0x1, &(0x7f0000001180)={0x2e, 0x6, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) (async, rerun: 64) openat(r6, &(0x7f0000000bc0)='./file0\x00', 0x2000, 0x0) (rerun: 64) 1.017939446s ago: executing program 2 (id=699): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00001009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000100a00)={0x0, 0x0, &(0x7f0000100a40)={&(0x7f0000100a80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) 1.01673233s ago: executing program 2 (id=701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xa, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000400000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 985.312229ms ago: executing program 2 (id=702): syz_emit_ethernet(0xae, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00'}, {0x3, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 984.846924ms ago: executing program 0 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x4f, 0x0) write(r0, &(0x7f0000000100)='270', 0x3) syz_ublk_setup_io_uring(0x3a07, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x2760c000) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) r4 = syz_open_dev$mtd(&(0x7f0000000980), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000a00)={0xfffd, 0x10000, 0x1}}) 984.329963ms ago: executing program 2 (id=704): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_adj\x00') writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)='1', 0x1}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) msgget(0x3, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000740)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x9f, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x32}}, {0xa001, 0x880b, 0x8b, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}, "d9323cf5ff13a560895ca808a292c641c38994599353aaba550b0bf1224fa297d9661691674240c5690c3b21a853db01adfe80b8e95fbf730796a7a309da1358d593d32486c6673df8c0ed7a3948030000004163f1049c951acfe68356667392bdc01826ac1314fc50708ea845e467e554476510119781bc39bde4a7000000"}}}}}}}, 0xb1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) preadv(r0, &(0x7f0000000940), 0x0, 0x8, 0x80000000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) listns(&(0x7f0000000180)={0x20, 0x0, 0xcfa, 0x20000, 0x0, 0xffffffffffffffff}, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='100', 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000a00)=0x6, 0xdc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000a80)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000ac0)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000b00)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x28, r8, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa35d12) socket$nl_netfilter(0x10, 0x3, 0xc) 807.328578ms ago: executing program 0 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000f5ff00050000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e0054000000060a01040000000000000000050000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a6563740000140002800800010000000000050002000000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x8094}, 0x4010) 779.421645ms ago: executing program 0 (id=706): r0 = syz_open_dev$cec(&(0x7f0000000700), 0xffffffffffffffff, 0xc8520) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000007c0)={0x7, 0x5, 0xfff, 0x100008, 0x3, 0x6, "7fa0ff00", 0x1, 0x53, 0x5, 0xfa, 0x9, 0x41}) 758.563368ms ago: executing program 2 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="60040000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381"], 0x460}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd4, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x401, 0x97}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x88, 0xac, "7eff38d1ef8e02895d21d2111e5c6c95b1fb37e9b434672f180c741505653e6076c01f9d777d2e6049fa101b85f8e16bb50304c3858dfe84b33f6a63e14988206f033120090d30cf14035f2c2e12d5d75a5b29c10295ea541ba3dc2d6a82831bff3d6522fa7964d5ce05b2bc4880fe2d5ebdee11a00cb102f239f87ab03d884c1566d69a"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x40448c1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040017d00000000000000623500", @ANYRES32=r6, @ANYBLOB="08002b000800000008002c0001000000"], 0x2c}}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r7) (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x20000406, &(0x7f0000000d40)={[{@inlinecrypt}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x2000000}}, {@jqfmt_vfsold}, {@data_err_ignore}, {@grpjquota, 0x2e}, {@nouid32}, {@data_err_ignore}, {@jqfmt_vfsold}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f00000006c0)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 638.516979ms ago: executing program 0 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x7, 0x50000}]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel/reboot/hw_protection\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='\x00\x00', 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x2, @in={{0x2, 0x4e20, @broadcast}}, 0x4, 0x1000}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x2}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000004c0)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0xfca804a0, 0xb, 0x0, &(0x7f0000000580)="b8000005000000005baf23", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) getdents64(0xffffffffffffff9c, &(0x7f0000000000)=""/33, 0x21) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', 0x41}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000000c00060000000000000000000c00080000040000000000001c0007800c74"], 0x8c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e984}, 0x4) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 637.967002ms ago: executing program 2 (id=709): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19f, &(0x7f00000001c0)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000280)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) mq_notify(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x16, 0x1, @thr={&(0x7f0000000b40), &(0x7f0000001b40)="6a124b685e3503933fdb95c1f09ad0c9d9608dbba76476b611c1a0938649fdf2c275fe4d6d680425ebe1a8503a09fd7e50b2af1c8b93d7ee5e53d9d07082232d6fe42fc02f2cf8eac1055cffc75cf1138db9f7ffd217040355f8f076ecfdffed2d6c1cc701897dd767083122e1734b9bd0a1a3e16e96c9e23d53323bb9"}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a80)={0x2, &(0x7f0000000ac0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000b00)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 632.181378ms ago: executing program 6 (id=710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000003c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x488, &(0x7f0000000440)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[], 0x10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 196.563334ms ago: executing program 1 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000400)={0x1, 0x0, [{}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000d40)={0xc, {"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", 0x7c4}}, 0x1006) accept$alg(r2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000021c0)=@IORING_OP_FALLOCATE={0x11, 0x11, 0x0, @fd_index=0x3, 0x40, 0x0, 0x5}) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x2e, 0x4, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002240)=@new_dev={0x3, 0x8af, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x184}}}, &(0x7f0000002300)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r10 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x242) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file4\x00', 0xa08c54, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f67746e616d653d5e6f776d722c6e6e6f6e756d7461696c3d312c757466383d312c757466383d312c726f6469722c696f636861727365743d6370313235312c636f6465706167653d3836342c757466383d302c73686f72746e616d650000000065642c756e695f786c6174653d312c6e926e756d7461696c3d302c666c7573682c73686f72746e616d653d77696e39352c00"], 0x89, 0x2c8, &(0x7f0000000a00)="$eJzs3cuKI1UYAOC/0kl3okKycCWCBePCVTMzTzCNtDCYlZKFbrRxekCSMNCBgBeMs3IvuPIdfAcfQATfwIVLwZ2zEEsqqcq10jGMpqX9vsXUqVP/X+eSM6kQyOkPXx32Hz0ZPX76+c/RbCZRexAP4lkSnahF6csAAG6TZ1kWv2Uzu2LrcRwRWbs4qx2gewDAv2D6/E/yx/ru5z8AcDu8+977b591u+fvpGkzYvjVuJd/GMiPs+tnj+PjGMRl3I12/DH9mDD/tiD/96WH3fOop2n5ZcC4Fb2I4Qc/FOdnv0ZM8+9FOzrr+cdFVDoVrw8n417ecn5sxAtJxFmWzELuRztejsgaUdxkdnjrYff8frqZH73jeOPOt0X//7yM02jHTx/FkxjEo+ktFvlf3EvTN7Nvfv9sNoJeRDIZ906mcQvZ0UFeEAAAAAAAAAAAAAAAAAAAAAAA/hdO07nO8v455W6Ap6fV17fuD1Ts8DNZ2l/nbpqm5TY+414jZvn1eKUe9ZsbOQAAAAAAAAAAAAAAAAAAAPx3jD75tH8xGFxerRS+z/JC69qY9UJ9qab8Wf/urOpC/7uI3cHJ34jJC7WiN3lNHBUng2SjiaS8tJqeZ+w9ipN9glubjfYvorZtDuuDmHX+66obtq5t67WKAe5fKFfGtphydfUvkl1T16xeJEurrmzsapTssSCziqk72pp1/DyzsXyfF/utec2Pd/b4X9CqnKh8xI35ZK5mNfNXcqmm8bydXy2sv1Mk/8wbDgAAAAAAAAAAAAAAAAAAsNXiR7/xy8bFpzfSJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4uMXf/58XorNes16YFMnTmtr1wSdXo4pmOwceJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfcXwEAAP//R/RE6w==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BLKRAGET(r10, 0x1263, &(0x7f0000000d00)) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000001e00)={@private=0xa010121, @local, 0xffffffffffffffff, "7d070cb945acf46af31fe68cc18e2570792de7b0fe9e6127e21fc200edee3161", 0xfffffbfb, 0x20000006, 0x0, 0x7fff}, 0x3c) mkdirat(r7, &(0x7f0000000440)='./dev\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x20c01, 0x90) writev(r11, &(0x7f00000005c0)=[{&(0x7f0000001d80)="ab21057c", 0x4}, {&(0x7f0000001dc0)='_', 0x1}], 0x2) sendmsg$nl_route(r0, 0x0, 0x0) getpid() sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800010400000000000000000700000000000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="01000000fe80000000000000000000000000002b86dd0000"], 0x38}}, 0x0) add_key(&(0x7f0000000280)='blacklist\x00', 0x0, &(0x7f0000001e40)="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", 0x154, 0xffffffffffffffff) 196.009995ms ago: executing program 6 (id=712): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00001009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000100a00)={0x0, 0x0, &(0x7f0000100a40)={&(0x7f0000100a80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) 133.148916ms ago: executing program 6 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x60, &(0x7f0000000cc0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e002a3afffe800000000003400000000000000000fe8000000000000000000000000000aa"], 0x0) 84.381154ms ago: executing program 5 (id=714): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000000c0)=0xfc, 0x4) 82.968768ms ago: executing program 1 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xa, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000008b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.193312ms ago: executing program 0 (id=716): syz_emit_ethernet(0xae, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000000000000ff80000000"}, {0x3, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 610.268µs ago: executing program 6 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xa}, [@NDA_DST_MAC={0xa}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xba1}, 0xffffffffffffffff, 0x0, 0x3, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) prctl$PR_GET_CHILD_SUBREAPER(0xe) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) 186.647µs ago: executing program 1 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x4f, 0x0) write(r0, &(0x7f0000000100)='270', 0x3) syz_ublk_setup_io_uring(0x3a07, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x2760c000) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) r4 = syz_open_dev$mtd(&(0x7f0000000980), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000a00)={0xfffe, 0x10000, 0x1}}) 0s ago: executing program 0 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000a0000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e0054000000060a01040000000000000000050000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a6563740000140002800800010000000000050002000000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x8094}, 0x4010) kernel console output (not intermixed with test programs): oke_syscall+0x98/0x244 [ 48.296208][ T5576] el0_svc_common+0xec/0x23c [ 48.296217][ T5576] do_el0_svc+0x4c/0x5c [ 48.296227][ T5576] el0_svc+0x60/0x1d8 [ 48.296238][ T5576] el0t_64_sync_handler+0x44/0x104 [ 48.296247][ T5576] el0t_64_sync+0x198/0x19c [ 48.335061][ T5579] loop4: detected capacity change from 0 to 128 [ 48.343693][ T5579] FAULT_INJECTION: forcing a failure. [ 48.343693][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 48.343711][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT [ 48.343721][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.343726][ T5579] Call trace: [ 48.343729][ T5579] show_stack+0x2c/0x3c (C) [ 48.343748][ T5579] __dump_stack+0x30/0x40 [ 48.343758][ T5579] dump_stack_lvl+0xd8/0x12c [ 48.343768][ T5579] dump_stack+0x1c/0x28 [ 48.343778][ T5579] should_fail_ex+0x418/0x58c [ 48.343789][ T5579] should_failslab+0xc4/0x120 [ 48.343800][ T5579] kmem_cache_alloc_node_noprof+0x98/0x604 [ 48.343808][ T5579] __alloc_skb+0x1f0/0x610 [ 48.343818][ T5579] netlink_ack+0x11c/0x890 [ 48.343827][ T5579] netlink_rcv_skb+0x21c/0x414 [ 48.343836][ T5579] genl_rcv+0x38/0x50 [ 48.343845][ T5579] netlink_unicast+0x600/0x7f8 [ 48.343854][ T5579] netlink_sendmsg+0x648/0x948 [ 48.343863][ T5579] __sock_sendmsg+0xc8/0x17c [ 48.343871][ T5579] __sys_sendto+0x250/0x328 [ 48.343880][ T5579] __arm64_sys_sendto+0xec/0x10c [ 48.343897][ T5579] invoke_syscall+0x98/0x244 [ 48.343909][ T5579] el0_svc_common+0xec/0x23c [ 48.343919][ T5579] do_el0_svc+0x4c/0x5c [ 48.343930][ T5579] el0_svc+0x60/0x1d8 [ 48.343940][ T5579] el0t_64_sync_handler+0x44/0x104 [ 48.343950][ T5579] el0t_64_sync+0x198/0x19c [ 48.398464][ T5589] binder: 5588:5589 Acquire 1 refcount change on invalid ref 0 ret -22 [ 48.415766][ T5579] FAULT_INJECTION: forcing a failure. [ 48.415766][ T5579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.415784][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT [ 48.415795][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.415800][ T5579] Call trace: [ 48.415803][ T5579] show_stack+0x2c/0x3c (C) [ 48.415822][ T5579] __dump_stack+0x30/0x40 [ 48.415832][ T5579] dump_stack_lvl+0xd8/0x12c [ 48.415842][ T5579] dump_stack+0x1c/0x28 [ 48.415851][ T5579] should_fail_ex+0x418/0x58c [ 48.415863][ T5579] should_fail+0x14/0x24 [ 48.415872][ T5579] should_fail_usercopy+0x20/0x30 [ 48.415890][ T5579] put_user_ifreq+0x80/0x1ac [ 48.415903][ T5579] sock_do_ioctl+0x1c8/0x254 [ 48.415913][ T5579] sock_ioctl+0x55c/0x7ec [ 48.415925][ T5579] __arm64_sys_ioctl+0x154/0x1cc [ 48.415940][ T5579] invoke_syscall+0x98/0x244 [ 48.415951][ T5579] el0_svc_common+0xec/0x23c [ 48.415960][ T5579] do_el0_svc+0x4c/0x5c [ 48.415970][ T5579] el0_svc+0x60/0x1d8 [ 48.415980][ T5579] el0t_64_sync_handler+0x44/0x104 [ 48.415990][ T5579] el0t_64_sync+0x198/0x19c [ 48.467276][ T5594] loop4: detected capacity change from 0 to 128 [ 48.516324][ T5605] loop0: detected capacity change from 0 to 1024 [ 48.541260][ T5605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 48.615464][ T5605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.816604][ T5620] bond0: option all_slaves_active: invalid value (155) [ 48.953597][ T5620] loop2: detected capacity change from 0 to 512 [ 48.954204][ T5620] EXT4-fs: Ignoring removed i_version option [ 48.954217][ T5620] EXT4-fs: Ignoring removed nobh option [ 48.962287][ T5620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.982110][ T5620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 48.982157][ T5620] System zones: 1-12 [ 48.982254][ T5620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.982363][ T5620] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.229: corrupted in-inode xattr: overlapping e_value [ 48.982377][ T5620] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.982544][ T5620] EXT4-fs (loop2): Remounting filesystem read-only [ 48.992993][ T5620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.091466][ T5629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 49.129547][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 49.229080][ T5644] ip_tables: iptables: counters copy to user failed while replacing table [ 49.248414][ T5646] loop3: detected capacity change from 0 to 1024 [ 49.250845][ T5646] EXT4-fs: Ignoring removed bh option [ 49.264747][ T1517] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.266623][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.271521][ T5646] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.288791][ T5646] bond0: (slave bond_slave_0): Releasing backup interface [ 49.402130][ T1517] usb 1-1: device descriptor read/64, error -71 [ 49.412173][ T4747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.455716][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.675535][ T1517] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 49.722538][ T5666] xt_NETMAP: bad rangesize 37. [ 49.723343][ T5666] xt_NETMAP: bad rangesize 37. [ 50.066046][ T1517] usb 1-1: device descriptor read/64, error -71 [ 50.176745][ T1517] usb usb1-port1: attempt power cycle [ 50.223271][ T5685] FAULT_INJECTION: forcing a failure. [ 50.223271][ T5685] name failslab, interval 1, probability 0, space 0, times 0 [ 50.223292][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT [ 50.223302][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.223306][ T5685] Call trace: [ 50.223309][ T5685] show_stack+0x2c/0x3c (C) [ 50.223326][ T5685] __dump_stack+0x30/0x40 [ 50.223338][ T5685] dump_stack_lvl+0xd8/0x12c [ 50.223347][ T5685] dump_stack+0x1c/0x28 [ 50.223357][ T5685] should_fail_ex+0x418/0x58c [ 50.223369][ T5685] should_failslab+0xc4/0x120 [ 50.223381][ T5685] __kvmalloc_node_noprof+0x160/0x7fc [ 50.223390][ T5685] bpf_compute_postorder+0xd0/0x768 [ 50.223399][ T5685] bpf_check+0x1c4c/0x2428 [ 50.223410][ T5685] bpf_prog_load+0xf4c/0x1554 [ 50.223418][ T5685] __sys_bpf+0x7d4/0x82c [ 50.223425][ T5685] __arm64_sys_bpf+0xd0/0xec [ 50.223433][ T5685] invoke_syscall+0x98/0x244 [ 50.223443][ T5685] el0_svc_common+0xec/0x23c [ 50.223453][ T5685] do_el0_svc+0x4c/0x5c [ 50.223462][ T5685] el0_svc+0x60/0x1d8 [ 50.223473][ T5685] el0t_64_sync_handler+0x44/0x104 [ 50.223483][ T5685] el0t_64_sync+0x198/0x19c [ 50.287555][ T5689] bridge0: port 3(syz_tun) entered disabled state [ 50.289950][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.290090][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.328937][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.330971][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.510249][ T5706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.253'. [ 50.721943][ T5708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.754340][ T1517] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.776563][ T1517] usb 1-1: device descriptor read/8, error -71 [ 50.833059][ T5691] netlink: 'syz.4.253': attribute type 12 has an invalid length. [ 50.833514][ T26] vxcan1 speed is unknown, defaulting to 1000 [ 50.833545][ T26] syz2: Port: 1 Link DOWN [ 50.840627][ T26] vxcan1 speed is unknown, defaulting to 1000 [ 50.866495][ T54] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.866532][ T54] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.866548][ T54] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.866563][ T54] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.868510][ T30] audit: type=1400 audit(50.858:12): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=5719 comm="syz.2.260" name="file1" dev="tmpfs" ino=326 [ 50.869385][ T30] audit: type=1400 audit(50.858:13): lsm=SMACK fn=smack_inode_setxattr action=denied subject="_" object="l" requested=w pid=5719 comm="syz.2.260" name="file1" dev="tmpfs" ino=326 [ 50.927719][ T5733] FAULT_INJECTION: forcing a failure. [ 50.927719][ T5733] name failslab, interval 1, probability 0, space 0, times 0 [ 50.927740][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.2.266 Not tainted syzkaller #0 PREEMPT [ 50.927751][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.927756][ T5733] Call trace: [ 50.927759][ T5733] show_stack+0x2c/0x3c (C) [ 50.927778][ T5733] __dump_stack+0x30/0x40 [ 50.927791][ T5733] dump_stack_lvl+0xd8/0x12c [ 50.927802][ T5733] dump_stack+0x1c/0x28 [ 50.927814][ T5733] should_fail_ex+0x418/0x58c [ 50.927827][ T5733] should_failslab+0xc4/0x120 [ 50.927840][ T5733] __kmalloc_noprof+0x108/0x6c8 [ 50.927849][ T5733] rsassa_pkcs1_verify+0x240/0x930 [ 50.927859][ T5733] public_key_verify_signature+0x4a8/0x6b4 [ 50.927870][ T5733] x509_check_for_self_signed+0x2e0/0x3bc [ 50.927887][ T5733] x509_cert_parse+0x54c/0x65c [ 50.927898][ T5733] x509_key_preparse+0x74/0x630 [ 50.927908][ T5733] asymmetric_key_preparse+0xcc/0x1c0 [ 50.927918][ T5733] __key_create_or_update+0x2a4/0x848 [ 50.927927][ T5733] key_create_or_update+0x60/0x7c [ 50.927935][ T5733] __arm64_sys_add_key+0x384/0x43c [ 50.927945][ T5733] invoke_syscall+0x98/0x244 [ 50.927957][ T5733] el0_svc_common+0xec/0x23c [ 50.927968][ T5733] do_el0_svc+0x4c/0x5c [ 50.927980][ T5733] el0_svc+0x60/0x1d8 [ 50.927992][ T5733] el0t_64_sync_handler+0x44/0x104 [ 50.928004][ T5733] el0t_64_sync+0x198/0x19c [ 50.970913][ T5737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'. [ 50.980198][ T5739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.996689][ T5744] binder: 5742:5744 ioctl c0306201 20000200 returned -14 [ 50.997876][ T5744] binder: 5742:5744 tried to acquire reference to desc 0, got 1 instead [ 50.999430][ T5745] netlink: 'syz.2.271': attribute type 2 has an invalid length. [ 51.026380][ T1517] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 51.050675][ T1517] usb 1-1: device descriptor read/8, error -71 [ 51.055609][ T5757] IPVS: Unknown mcast interface: pimreg1 [ 51.055660][ T5756] IPVS: Unknown mcast interface: pimreg1 [ 51.056215][ T5754] loop1: detected capacity change from 0 to 256 [ 51.103863][ T5760] FAULT_INJECTION: forcing a failure. [ 51.103863][ T5760] name failslab, interval 1, probability 0, space 0, times 0 [ 51.103890][ T5760] CPU: 0 UID: 0 PID: 5760 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT [ 51.103901][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.103906][ T5760] Call trace: [ 51.103909][ T5760] show_stack+0x2c/0x3c (C) [ 51.103930][ T5760] __dump_stack+0x30/0x40 [ 51.103943][ T5760] dump_stack_lvl+0xd8/0x12c [ 51.103955][ T5760] dump_stack+0x1c/0x28 [ 51.103966][ T5760] should_fail_ex+0x418/0x58c [ 51.103980][ T5760] should_failslab+0xc4/0x120 [ 51.103993][ T5760] __kmalloc_noprof+0x108/0x6c8 [ 51.104002][ T5760] mpi_alloc+0x80/0x140 [ 51.104012][ T5760] mpi_read_raw_from_sgl+0x264/0x508 [ 51.104022][ T5760] rsa_enc+0x12c/0x30c [ 51.104030][ T5760] rsassa_pkcs1_verify+0x3f8/0x930 [ 51.104038][ T5760] public_key_verify_signature+0x4a8/0x6b4 [ 51.104050][ T5760] x509_check_for_self_signed+0x2e0/0x3bc [ 51.104061][ T5760] x509_cert_parse+0x54c/0x65c [ 51.104071][ T5760] x509_key_preparse+0x74/0x630 [ 51.104082][ T5760] asymmetric_key_preparse+0xcc/0x1c0 [ 51.104092][ T5760] __key_create_or_update+0x2a4/0x848 [ 51.104101][ T5760] key_create_or_update+0x60/0x7c [ 51.104109][ T5760] __arm64_sys_add_key+0x384/0x43c [ 51.104121][ T5760] invoke_syscall+0x98/0x244 [ 51.104134][ T5760] el0_svc_common+0xec/0x23c [ 51.104146][ T5760] do_el0_svc+0x4c/0x5c [ 51.104158][ T5760] el0_svc+0x60/0x1d8 [ 51.104170][ T5760] el0t_64_sync_handler+0x44/0x104 [ 51.104182][ T5760] el0t_64_sync+0x198/0x19c [ 51.166078][ T1517] usb usb1-port1: unable to enumerate USB device [ 51.179488][ T5772] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.196334][ T5775] binder: 5773:5775 ioctl c0306201 20000200 returned -14 [ 51.200304][ T5775] binder: 5773:5775 tried to acquire reference to desc 0, got 1 instead [ 51.223328][ T5778] loop3: detected capacity change from 0 to 128 [ 51.243763][ T5778] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.247106][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 51.253964][ T5778] ip_tables: iptables: counters copy to user failed while replacing table [ 51.295454][ T5789] binder: 5788:5789 ioctl c0306201 20000200 returned -14 [ 51.295965][ T5789] binder: 5788:5789 ioctl c0306201 0 returned -14 [ 51.301391][ T5791] loop4: detected capacity change from 0 to 512 [ 51.302956][ T5791] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 51.303054][ T5791] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.319628][ T5791] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 51.329524][ T5791] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 51.330099][ T5791] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.289: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 51.330132][ T5791] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.331629][ T5791] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.289: couldn't read orphan inode 13 (err -117) [ 51.331654][ T5791] loop4: lost filesystem error report for type 5 error -117 [ 51.332316][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.392883][ T5803] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.415098][ T5804] block nbd3: Cannot add socket to a running device [ 51.438485][ T5808] 0x000000000000-0x000000010000 : "" [ 51.441686][ T5808] ftl_cs: FTL header not found. [ 51.471271][ T5814] FAULT_INJECTION: forcing a failure. [ 51.471271][ T5814] name failslab, interval 1, probability 0, space 0, times 0 [ 51.471291][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT [ 51.471302][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.471307][ T5814] Call trace: [ 51.471310][ T5814] show_stack+0x2c/0x3c (C) [ 51.471329][ T5814] __dump_stack+0x30/0x40 [ 51.471341][ T5814] dump_stack_lvl+0xd8/0x12c [ 51.471353][ T5814] dump_stack+0x1c/0x28 [ 51.471364][ T5814] should_fail_ex+0x418/0x58c [ 51.471377][ T5814] should_failslab+0xc4/0x120 [ 51.471390][ T5814] __kmalloc_noprof+0x108/0x6c8 [ 51.471398][ T5814] rsassa_pkcs1_verify+0x240/0x930 [ 51.471408][ T5814] public_key_verify_signature+0x4a8/0x6b4 [ 51.471419][ T5814] x509_check_for_self_signed+0x2e0/0x3bc [ 51.471431][ T5814] x509_cert_parse+0x54c/0x65c [ 51.471441][ T5814] x509_key_preparse+0x74/0x630 [ 51.471451][ T5814] asymmetric_key_preparse+0xcc/0x1c0 [ 51.471461][ T5814] __key_create_or_update+0x2a4/0x848 [ 51.471470][ T5814] key_create_or_update+0x60/0x7c [ 51.471478][ T5814] __arm64_sys_add_key+0x384/0x43c [ 51.471487][ T5814] invoke_syscall+0x98/0x244 [ 51.471499][ T5814] el0_svc_common+0xec/0x23c [ 51.471511][ T5814] do_el0_svc+0x4c/0x5c [ 51.471522][ T5814] el0_svc+0x60/0x1d8 [ 51.471535][ T5814] el0t_64_sync_handler+0x44/0x104 [ 51.471547][ T5814] el0t_64_sync+0x198/0x19c [ 51.537420][ T5817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 51.555628][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.643904][ T5820] binder: 5819:5820 ioctl c0306201 20000200 returned -14 [ 51.689103][ T5827] veth1_macvtap: left promiscuous mode [ 51.689128][ T5827] macsec0: entered promiscuous mode [ 51.692079][ T5827] veth1_macvtap: entered promiscuous mode [ 51.692203][ T5827] macsec0: left promiscuous mode [ 51.693680][ T5827] FAULT_INJECTION: forcing a failure. [ 51.693680][ T5827] name failslab, interval 1, probability 0, space 0, times 0 [ 51.693712][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.2.303 Not tainted syzkaller #0 PREEMPT [ 51.693725][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.693732][ T5827] Call trace: [ 51.693736][ T5827] show_stack+0x2c/0x3c (C) [ 51.693756][ T5827] __dump_stack+0x30/0x40 [ 51.693768][ T5827] dump_stack_lvl+0xd8/0x12c [ 51.693781][ T5827] dump_stack+0x1c/0x28 [ 51.693792][ T5827] should_fail_ex+0x418/0x58c [ 51.693806][ T5827] should_failslab+0xc4/0x120 [ 51.693819][ T5827] kmem_cache_alloc_noprof+0x94/0x5d4 [ 51.693828][ T5827] security_file_alloc+0x3c/0x300 [ 51.693838][ T5827] init_file+0x90/0x28c [ 51.693847][ T5827] alloc_empty_file+0x80/0x1cc [ 51.693855][ T5827] alloc_file+0x58/0x98 [ 51.693863][ T5827] alloc_file_pseudo+0xe0/0x198 [ 51.693872][ T5827] sock_alloc_file+0xb4/0x1ac [ 51.693883][ T5827] __sys_socket+0x90/0xec [ 51.693893][ T5827] __arm64_sys_socket+0x84/0x9c [ 51.693915][ T5827] invoke_syscall+0x98/0x244 [ 51.693930][ T5827] el0_svc_common+0xec/0x23c [ 51.693942][ T5827] do_el0_svc+0x4c/0x5c [ 51.693954][ T5827] el0_svc+0x60/0x1d8 [ 51.693967][ T5827] el0t_64_sync_handler+0x44/0x104 [ 51.693979][ T5827] el0t_64_sync+0x198/0x19c [ 51.699799][ T5830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.827090][ T5848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.832030][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 51.875564][ T5852] binder: 5851:5852 ioctl c0306201 20000200 returned -14 [ 51.902402][ T5855] loop0: detected capacity change from 0 to 1024 [ 51.973556][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 51.977202][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 51.978915][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 51.980688][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 52.134849][ T4714] block nbd3: Receive control failed (result -32) [ 52.143067][ T5778] block nbd3: shutting down sockets [ 52.157257][ T5855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.167282][ T4747] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.200949][ T5855] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 52.226620][ T4745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.227478][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.262352][ T5862] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.264373][ T5864] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.270571][ T5862] loop3: detected capacity change from 0 to 512 [ 52.270980][ T5862] EXT4-fs: quotafile must be on filesystem root [ 52.351999][ T5873] netlink: 108 bytes leftover after parsing attributes in process `syz.0.321'. [ 52.383647][ T5871] loop4: detected capacity change from 0 to 512 [ 52.389881][ T5875] loop0: detected capacity change from 0 to 1024 [ 52.391838][ T5871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.391856][ T5871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.406964][ T5871] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 52.420746][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.426011][ T5871] EXT4-fs (loop4): 1 truncate cleaned up [ 52.436165][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.444336][ T5871] process 'syz.4.317' launched './file0/file0' with NULL argv: empty string added [ 52.727531][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.764436][ T5888] loop1: detected capacity change from 0 to 256 [ 53.293627][ T4745] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 53.294939][ T4745] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 53.333954][ T5905] loop0: detected capacity change from 0 to 512 [ 53.360633][ T5905] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.360746][ T5905] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.361066][ T5905] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.361425][ T5905] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 53.361529][ T5905] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.361548][ T5905] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.361693][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.328: couldn't read orphan inode 13 (err -117) [ 53.361706][ T5905] loop0: lost filesystem error report for type 5 error -117 [ 53.362259][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.473863][ T5916] loop2: detected capacity change from 0 to 4096 [ 53.494100][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.536842][ T4745] bridge0: port 1(syz_tun) entered disabled state [ 53.546912][ T4745] syz_tun (unregistering): left allmulticast mode [ 53.546934][ T4745] syz_tun (unregistering): left promiscuous mode [ 53.546966][ T4745] bridge0: port 1(syz_tun) entered disabled state [ 53.568805][ T5916] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 53.657810][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.808095][ T5925] loop3: detected capacity change from 0 to 2048 [ 53.975797][ T4745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.991290][ T5925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.036186][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.124585][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.133664][ T5936] bridge_slave_0: left allmulticast mode [ 54.133686][ T5936] bridge_slave_0: left promiscuous mode [ 54.133795][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.141824][ T5936] bridge_slave_1 (unregistering): left allmulticast mode [ 54.141847][ T5936] bridge_slave_1 (unregistering): left promiscuous mode [ 54.141889][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.176689][ T4715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.178044][ T4715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.178743][ T4715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.179224][ T4715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.179541][ T4715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.202416][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.208312][ T5938] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 54.260556][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.326285][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.395892][ T5962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.545377][ T4747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.648655][ T5971] EXT4-fs: Ignoring removed i_version option [ 54.648703][ T5971] EXT4-fs: Ignoring removed nobh option [ 54.735204][ T5971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.752011][ T5971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 54.752070][ T5971] System zones: 1-12 [ 54.752187][ T5971] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.752302][ T5971] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.349: corrupted in-inode xattr: overlapping e_value [ 54.752319][ T5971] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.752497][ T5971] EXT4-fs (loop1): Remounting filesystem read-only [ 54.753020][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.769380][ T5970] bond0: option all_slaves_active: invalid value (155) [ 54.769617][ T5939] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.924738][ T5979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 54.924912][ T5979] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.932921][ T5979] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 54.933276][ T5979] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 54.933395][ T5979] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 54.933414][ T5979] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.933559][ T5979] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.353: couldn't read orphan inode 13 (err -117) [ 54.933571][ T5979] loop3: lost filesystem error report for type 5 error -117 [ 54.936970][ T5979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.129709][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.136526][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.147955][ T14] bond0 (unregistering): Released all slaves [ 55.150433][ T5939] vxcan1 speed is unknown, defaulting to 1000 [ 55.168160][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.180897][ T5981] bridge_slave_1 (unregistering): left allmulticast mode [ 55.180922][ T5981] bridge_slave_1 (unregistering): left promiscuous mode [ 55.180956][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.316151][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.409693][ T6010] No control pipe specified [ 55.469737][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 55.685068][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.686456][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.686526][ T5939] bridge_slave_0: entered allmulticast mode [ 55.687038][ T5939] bridge_slave_0: entered promiscuous mode [ 55.736519][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.736549][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.736601][ T5939] bridge_slave_1: entered allmulticast mode [ 55.737099][ T5939] bridge_slave_1: entered promiscuous mode [ 55.751174][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.769912][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.809545][ T4747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.813151][ T5939] team0: Port device team_slave_0 added [ 55.813917][ T5939] team0: Port device team_slave_1 added [ 55.863844][ T6042] EXT4-fs (loop1): Test dummy encryption mode enabled [ 55.873516][ T14] hsr_slave_0: left promiscuous mode [ 55.874245][ T14] hsr_slave_1: left promiscuous mode [ 55.874540][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.874561][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.875039][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.875048][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.887447][ T14] veth1_macvtap: left promiscuous mode [ 55.887485][ T14] veth0_macvtap: left promiscuous mode [ 55.887533][ T14] veth1_vlan: left promiscuous mode [ 55.887558][ T14] veth0_vlan: left promiscuous mode [ 55.901751][ T6046] __nla_validate_parse: 7 callbacks suppressed [ 55.901767][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 55.908801][ T6048] FAULT_INJECTION: forcing a failure. [ 55.908801][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 55.908819][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.3.366 Not tainted syzkaller #0 PREEMPT [ 55.908829][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.908835][ T6048] Call trace: [ 55.908838][ T6048] show_stack+0x2c/0x3c (C) [ 55.908857][ T6048] __dump_stack+0x30/0x40 [ 55.908869][ T6048] dump_stack_lvl+0xd8/0x12c [ 55.908881][ T6048] dump_stack+0x1c/0x28 [ 55.908892][ T6048] should_fail_ex+0x418/0x58c [ 55.908913][ T6048] should_failslab+0xc4/0x120 [ 55.908925][ T6048] __kmalloc_cache_noprof+0x94/0x5fc [ 55.908934][ T6048] mpi_alloc+0x5c/0x140 [ 55.908945][ T6048] rsa_check_payload+0x4c/0xe4 [ 55.908954][ T6048] rsa_enc+0x150/0x30c [ 55.908961][ T6048] rsassa_pkcs1_verify+0x3f8/0x930 [ 55.908969][ T6048] public_key_verify_signature+0x4a8/0x6b4 [ 55.908981][ T6048] x509_check_for_self_signed+0x2e0/0x3bc [ 55.908992][ T6048] x509_cert_parse+0x54c/0x65c [ 55.909002][ T6048] x509_key_preparse+0x74/0x630 [ 55.909013][ T6048] asymmetric_key_preparse+0xcc/0x1c0 [ 55.909023][ T6048] __key_create_or_update+0x2a4/0x848 [ 55.909032][ T6048] key_create_or_update+0x60/0x7c [ 55.909040][ T6048] __arm64_sys_add_key+0x384/0x43c [ 55.909053][ T6048] invoke_syscall+0x98/0x244 [ 55.909065][ T6048] el0_svc_common+0xec/0x23c [ 55.909076][ T6048] do_el0_svc+0x4c/0x5c [ 55.909088][ T6048] el0_svc+0x60/0x1d8 [ 55.909101][ T6048] el0t_64_sync_handler+0x44/0x104 [ 55.909112][ T6048] el0t_64_sync+0x198/0x19c [ 55.958578][ T6042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.015462][ T6061] FAULT_INJECTION: forcing a failure. [ 56.015462][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 56.015482][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT [ 56.015492][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.015497][ T6061] Call trace: [ 56.015500][ T6061] show_stack+0x2c/0x3c (C) [ 56.015517][ T6061] __dump_stack+0x30/0x40 [ 56.015528][ T6061] dump_stack_lvl+0xd8/0x12c [ 56.015538][ T6061] dump_stack+0x1c/0x28 [ 56.015547][ T6061] should_fail_ex+0x418/0x58c [ 56.015559][ T6061] should_failslab+0xc4/0x120 [ 56.015570][ T6061] __kmalloc_noprof+0x108/0x6c8 [ 56.015578][ T6061] tomoyo_realpath_from_path+0xbc/0x4dc [ 56.015593][ T6061] tomoyo_path_number_perm+0x1f0/0x500 [ 56.015602][ T6061] tomoyo_file_ioctl+0x2c/0x3c [ 56.015611][ T6061] security_file_ioctl+0xdc/0x2b0 [ 56.015620][ T6061] __arm64_sys_ioctl+0xb0/0x1cc [ 56.015631][ T6061] invoke_syscall+0x98/0x244 [ 56.015642][ T6061] el0_svc_common+0xec/0x23c [ 56.015651][ T6061] do_el0_svc+0x4c/0x5c [ 56.015661][ T6061] el0_svc+0x60/0x1d8 [ 56.015672][ T6061] el0t_64_sync_handler+0x44/0x104 [ 56.015682][ T6061] el0t_64_sync+0x198/0x19c [ 56.015697][ T6061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.090073][ T6070] binder: 6069:6070 ioctl c0306201 20000200 returned -14 [ 56.094864][ T6070] binder: 6069:6070 tried to acquire reference to desc 0, got 1 instead [ 56.095769][ T6070] binder: 6069:6070 got transaction with invalid data ptr [ 56.095900][ T6070] binder: 6069:6070 transaction call to 6069:0 failed 22/29201/-14, code 0 size 0-24 line 3511 [ 56.096949][ T5695] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.134427][ T14] team0 (unregistering): Port device team_slave_1 removed [ 56.141004][ T14] team0 (unregistering): Port device team_slave_0 removed [ 56.214333][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.217837][ T6077] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 56.217972][ T6077] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.220522][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.220536][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.220552][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.221227][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.221234][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.221247][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.256701][ T6077] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 56.276032][ T6077] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 56.278029][ T6077] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.376: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.278058][ T6077] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.278447][ T6077] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.376: couldn't read orphan inode 13 (err -117) [ 56.278466][ T6077] loop3: lost filesystem error report for type 5 error -117 [ 56.279113][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.362262][ T4714] Bluetooth: hci3: command tx timeout [ 56.376861][ T5939] hsr_slave_0: entered promiscuous mode [ 56.377197][ T5939] hsr_slave_1: entered promiscuous mode [ 56.378082][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 56.378095][ T5939] Cannot create hsr debugfs directory [ 56.388017][ T6085] FAULT_INJECTION: forcing a failure. [ 56.388017][ T6085] name failslab, interval 1, probability 0, space 0, times 0 [ 56.388035][ T6085] CPU: 1 UID: 0 PID: 6085 Comm: syz.2.379 Not tainted syzkaller #0 PREEMPT [ 56.388046][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.388051][ T6085] Call trace: [ 56.388054][ T6085] show_stack+0x2c/0x3c (C) [ 56.388073][ T6085] __dump_stack+0x30/0x40 [ 56.388085][ T6085] dump_stack_lvl+0xd8/0x12c [ 56.388097][ T6085] dump_stack+0x1c/0x28 [ 56.388108][ T6085] should_fail_ex+0x418/0x58c [ 56.388121][ T6085] should_failslab+0xc4/0x120 [ 56.388134][ T6085] __kmalloc_noprof+0x108/0x6c8 [ 56.388143][ T6085] mpi_alloc+0x80/0x140 [ 56.388153][ T6085] mpi_read_raw_from_sgl+0x264/0x508 [ 56.388163][ T6085] rsa_enc+0x12c/0x30c [ 56.388171][ T6085] rsassa_pkcs1_verify+0x3f8/0x930 [ 56.388179][ T6085] public_key_verify_signature+0x4a8/0x6b4 [ 56.388191][ T6085] x509_check_for_self_signed+0x2e0/0x3bc [ 56.388202][ T6085] x509_cert_parse+0x54c/0x65c [ 56.388212][ T6085] x509_key_preparse+0x74/0x630 [ 56.388222][ T6085] asymmetric_key_preparse+0xcc/0x1c0 [ 56.388232][ T6085] __key_create_or_update+0x2a4/0x848 [ 56.388241][ T6085] key_create_or_update+0x60/0x7c [ 56.388249][ T6085] __arm64_sys_add_key+0x384/0x43c [ 56.388258][ T6085] invoke_syscall+0x98/0x244 [ 56.388270][ T6085] el0_svc_common+0xec/0x23c [ 56.388282][ T6085] do_el0_svc+0x4c/0x5c [ 56.388293][ T6085] el0_svc+0x60/0x1d8 [ 56.388306][ T6085] el0t_64_sync_handler+0x44/0x104 [ 56.388318][ T6085] el0t_64_sync+0x198/0x19c [ 56.476152][ T6091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.649717][ T5939] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.652731][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.654222][ T5939] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.656772][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.658585][ T5939] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.663947][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.664453][ T5939] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.666502][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.737578][ T6108] 9pnet_virtio: no channels available for device ./proc/file0 [ 56.740778][ T6107] 9pnet_virtio: no channels available for device ./proc/file0 [ 56.906132][ T14] Bluetooth: hci5: Frame reassembly failed (-84) [ 56.926356][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.977515][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.989822][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.994743][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.994770][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.996626][ T6120] FAULT_INJECTION: forcing a failure. [ 56.996626][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 56.996642][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT [ 56.996656][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.996662][ T6120] Call trace: [ 56.996666][ T6120] show_stack+0x2c/0x3c (C) [ 56.996687][ T6120] __dump_stack+0x30/0x40 [ 56.996700][ T6120] dump_stack_lvl+0xd8/0x12c [ 56.996711][ T6120] dump_stack+0x1c/0x28 [ 56.996720][ T6120] should_fail_ex+0x418/0x58c [ 56.996734][ T6120] should_failslab+0xc4/0x120 [ 56.996746][ T6120] __kmalloc_noprof+0x108/0x6c8 [ 56.996754][ T6120] tomoyo_encode2+0x10c/0x330 [ 56.996764][ T6120] tomoyo_encode+0x34/0x50 [ 56.996773][ T6120] tomoyo_realpath_from_path+0x488/0x4dc [ 56.996782][ T6120] tomoyo_path_number_perm+0x1f0/0x500 [ 56.996790][ T6120] tomoyo_file_ioctl+0x2c/0x3c [ 56.996800][ T6120] security_file_ioctl+0xdc/0x2b0 [ 56.996808][ T6120] __arm64_sys_ioctl+0xb0/0x1cc [ 56.996819][ T6120] invoke_syscall+0x98/0x244 [ 56.996829][ T6120] el0_svc_common+0xec/0x23c [ 56.996838][ T6120] do_el0_svc+0x4c/0x5c [ 56.996848][ T6120] el0_svc+0x60/0x1d8 [ 56.996858][ T6120] el0t_64_sync_handler+0x44/0x104 [ 56.996868][ T6120] el0t_64_sync+0x198/0x19c [ 56.998587][ T6120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.000446][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.000470][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.085126][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.134329][ T4747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.157763][ T6131] set_capacity_and_notify: 5 callbacks suppressed [ 57.157777][ T6131] loop1: detected capacity change from 0 to 512 [ 57.159399][ T6131] EXT4-fs: Ignoring removed orlov option [ 57.170491][ T6136] loop3: detected capacity change from 0 to 512 [ 57.184623][ T6136] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.219522][ T6131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.221623][ T6136] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.386: Allocating blocks 41-42 which overlap fs metadata [ 57.221641][ T6136] loop3: lost filesystem error report for type 5 error -117 [ 57.222849][ T6136] EXT4-fs (loop3): Remounting filesystem read-only [ 57.222968][ T6136] Quota error (device loop3): write_blk: dquota write failed [ 57.222981][ T6136] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 57.223037][ T6136] Quota error (device loop3): write_blk: dquota write failed [ 57.223077][ T6136] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 57.223196][ T6136] EXT4-fs (loop3): 1 truncate cleaned up [ 57.224061][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.292279][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.377049][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.485786][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 57.562006][ T5939] veth0_vlan: entered promiscuous mode [ 57.568235][ T5939] veth1_vlan: entered promiscuous mode [ 57.592947][ T5939] veth0_macvtap: entered promiscuous mode [ 57.593172][ T6182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.596061][ T5939] veth1_macvtap: entered promiscuous mode [ 57.604041][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.390'. [ 57.604058][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'. [ 57.604070][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.390'. [ 57.610419][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.619385][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.698750][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.698776][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.698791][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.698806][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.709434][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.709449][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.725084][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.725100][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.794128][ T6187] No such timeout policy "syz1" [ 58.097297][ T6195] binder: 6194:6195 ioctl c0306201 20000200 returned -14 [ 58.100546][ T6195] binder: 6194:6195 tried to acquire reference to desc 0, got 1 instead [ 58.101073][ T5695] binder: release 6194:6195 transaction 27 out, still active [ 58.101090][ T5695] binder: undelivered TRANSACTION_COMPLETE [ 58.108520][ T5701] binder: send failed reply for transaction 27, target dead [ 58.112099][ T4747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.143782][ T6199] loop3: detected capacity change from 0 to 8 [ 58.152180][ T6199] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 58.152192][ T6199] unable to read xattr id index table [ 58.178617][ T6201] loop5: detected capacity change from 0 to 512 [ 58.178984][ T6201] EXT4-fs: Ignoring removed bh option [ 58.195828][ T6201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.381573][ T6223] loop1: detected capacity change from 0 to 512 [ 58.399595][ T6223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.426228][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.495011][ T6201] bridge_slave_0: left allmulticast mode [ 58.495033][ T6201] bridge_slave_0: left promiscuous mode [ 58.495188][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.585320][ T4715] Bluetooth: hci3: command tx timeout [ 58.612799][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.642004][ T6210] bridge_slave_1 (unregistering): left allmulticast mode [ 58.642029][ T6210] bridge_slave_1 (unregistering): left promiscuous mode [ 58.642063][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.737650][ T6234] binder: 6233:6234 ioctl c0306201 20000200 returned -14 [ 58.738794][ T6234] binder: 6233:6234 tried to acquire reference to desc 0, got 1 instead [ 58.739123][ T5701] binder: release 6233:6234 transaction 32 out, still active [ 58.739137][ T5701] binder: undelivered TRANSACTION_COMPLETE [ 58.758260][ T5701] binder: send failed reply for transaction 32, target dead [ 58.948828][ T6244] FAULT_INJECTION: forcing a failure. [ 58.948828][ T6244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.948848][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT [ 58.948858][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.948863][ T6244] Call trace: [ 58.948866][ T6244] show_stack+0x2c/0x3c (C) [ 58.948888][ T6244] __dump_stack+0x30/0x40 [ 58.948899][ T6244] dump_stack_lvl+0xd8/0x12c [ 58.948910][ T6244] dump_stack+0x1c/0x28 [ 58.948919][ T6244] should_fail_ex+0x418/0x58c [ 58.948931][ T6244] should_fail+0x14/0x24 [ 58.948940][ T6244] should_fail_usercopy+0x20/0x30 [ 58.948951][ T6244] simple_read_from_buffer+0xc4/0x238 [ 58.948961][ T6244] proc_fail_nth_read+0x1a8/0x248 [ 58.948970][ T6244] vfs_read+0x230/0x8c8 [ 58.948981][ T6244] ksys_read+0x12c/0x228 [ 58.948990][ T6244] __arm64_sys_read+0x84/0x98 [ 58.949000][ T6244] invoke_syscall+0x98/0x244 [ 58.949010][ T6244] el0_svc_common+0xec/0x23c [ 58.949020][ T6244] do_el0_svc+0x4c/0x5c [ 58.949029][ T6244] el0_svc+0x60/0x1d8 [ 58.949040][ T6244] el0t_64_sync_handler+0x44/0x104 [ 58.949050][ T6244] el0t_64_sync+0x198/0x19c [ 59.243464][ T4715] Bluetooth: hci5: command 0x1003 tx timeout [ 59.244058][ T4714] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 59.271231][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 59.414037][ C1] Unknown status report in ack skb [ 59.425365][ T6258] loop3: detected capacity change from 0 to 2048 [ 59.449176][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.463364][ T4747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.499621][ T6266] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 60.529386][ T6266] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 60.589781][ T6288] loop3: detected capacity change from 0 to 512 [ 60.615365][ T6288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 60.617462][ T6288] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.617989][ T6288] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.618938][ T6288] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 60.619791][ T6288] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.619820][ T6288] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.620010][ T6288] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.429: couldn't read orphan inode 13 (err -117) [ 60.620024][ T6288] loop3: lost filesystem error report for type 5 error -117 [ 60.620583][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.721776][ T6309] binder: 6308:6309 ioctl c0306201 20000200 returned -14 [ 60.724436][ T6309] binder: 6308:6309 tried to acquire reference to desc 0, got 1 instead [ 60.724768][ T6309] binder: 6308:6309 got transaction with invalid parent offset or type [ 60.724799][ T6309] binder: 6308:6309 transaction call to 6308:0 failed 37/29201/-22, code 0 size 104-24 line 3617 [ 60.725397][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.779930][ T6317] loop1: detected capacity change from 0 to 1024 [ 60.798586][ T4714] Bluetooth: hci3: command tx timeout [ 60.835236][ T6323] 0x000000000000-0x000000010000 : "" [ 60.841599][ T6323] ftl_cs: FTL header not found. [ 60.842161][ T6323] FAULT_INJECTION: forcing a failure. [ 60.842161][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 60.842179][ T6323] CPU: 1 UID: 0 PID: 6323 Comm: syz.2.439 Not tainted syzkaller #0 PREEMPT [ 60.842193][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.842199][ T6323] Call trace: [ 60.842203][ T6323] show_stack+0x2c/0x3c (C) [ 60.842223][ T6323] __dump_stack+0x30/0x40 [ 60.842239][ T6323] dump_stack_lvl+0xd8/0x12c [ 60.842251][ T6323] dump_stack+0x1c/0x28 [ 60.842262][ T6323] should_fail_ex+0x418/0x58c [ 60.842278][ T6323] should_failslab+0xc4/0x120 [ 60.842291][ T6323] kmem_cache_alloc_noprof+0x94/0x5d4 [ 60.842301][ T6323] __kernfs_new_node+0xf0/0x7d8 [ 60.842312][ T6323] kernfs_new_node+0xe8/0x130 [ 60.842321][ T6323] __kernfs_create_file+0x60/0x2e0 [ 60.842333][ T6323] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 60.842345][ T6323] sysfs_create_file_ns+0x110/0x198 [ 60.842357][ T6323] device_create_file+0xf4/0x1a4 [ 60.842367][ T6323] device_add+0x3d0/0x9e0 [ 60.842376][ T6323] __add_disk+0x450/0xbdc [ 60.842389][ T6323] add_disk_fwnode+0xd4/0x340 [ 60.842401][ T6323] device_add_disk+0x38/0x4c [ 60.842413][ T6323] add_mtd_blktrans_dev+0xb28/0x107c [ 60.842427][ T6323] mtdblock_add_mtd+0x158/0x218 [ 60.842435][ T6323] blktrans_notify_add+0xa8/0xf8 [ 60.842443][ T6323] add_mtd_device+0xedc/0x1504 [ 60.842453][ T6323] mtd_add_partition+0x318/0x438 [ 60.842465][ T6323] mtdchar_blkpg_ioctl+0x224/0x248 [ 60.842478][ T6323] mtdchar_ioctl+0x1218/0x1a7c [ 60.842490][ T6323] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 60.842502][ T6323] __arm64_sys_ioctl+0x154/0x1cc [ 60.842515][ T6323] invoke_syscall+0x98/0x244 [ 60.842528][ T6323] el0_svc_common+0xec/0x23c [ 60.842540][ T6323] do_el0_svc+0x4c/0x5c [ 60.842551][ T6323] el0_svc+0x60/0x1d8 [ 60.842568][ T6323] el0t_64_sync_handler+0x44/0x104 [ 60.842580][ T6323] el0t_64_sync+0x198/0x19c [ 60.922375][ T6330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.002462][ T6344] FAULT_INJECTION: forcing a failure. [ 61.002462][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.002482][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.5.446 Not tainted syzkaller #0 PREEMPT [ 61.002493][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.002498][ T6344] Call trace: [ 61.002501][ T6344] show_stack+0x2c/0x3c (C) [ 61.002519][ T6344] __dump_stack+0x30/0x40 [ 61.002530][ T6344] dump_stack_lvl+0xd8/0x12c [ 61.002540][ T6344] dump_stack+0x1c/0x28 [ 61.002550][ T6344] should_fail_ex+0x418/0x58c [ 61.002561][ T6344] should_fail+0x14/0x24 [ 61.002570][ T6344] should_fail_usercopy+0x20/0x30 [ 61.002580][ T6344] simple_read_from_buffer+0xc4/0x238 [ 61.002591][ T6344] proc_fail_nth_read+0x1a8/0x248 [ 61.002600][ T6344] vfs_read+0x230/0x8c8 [ 61.002611][ T6344] ksys_read+0x12c/0x228 [ 61.002620][ T6344] __arm64_sys_read+0x84/0x98 [ 61.002630][ T6344] invoke_syscall+0x98/0x244 [ 61.002640][ T6344] el0_svc_common+0xec/0x23c [ 61.002650][ T6344] do_el0_svc+0x4c/0x5c [ 61.002660][ T6344] el0_svc+0x60/0x1d8 [ 61.002670][ T6344] el0t_64_sync_handler+0x44/0x104 [ 61.002680][ T6344] el0t_64_sync+0x198/0x19c [ 61.050311][ T6349] binder: 6348:6349 ioctl c0306201 20000200 returned -14 [ 61.057686][ T6352] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.057822][ T6349] binder: 6348:6349 tried to acquire reference to desc 0, got 1 instead [ 61.062830][ T6349] binder: 6348:6349 got transaction with invalid parent offset or type [ 61.110746][ T6356] loop5: detected capacity change from 0 to 512 [ 61.148242][ T6357] Console: switching to colour dummy device 80x25 [ 61.162720][ T6356] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.450: Attempting to read directory block (0) that is past i_size (256) [ 61.162748][ T6356] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 61.171785][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 61.171804][ C0] EXT4-fs (loop5): initial error at time 60: dx_probe:791: inode 2 [ 61.171823][ C0] EXT4-fs (loop5): last error at time 60: dx_probe:791: inode 2 [ 61.175667][ T6356] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 61.193562][ T6360] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 61.198493][ T6358] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 61.307810][ T6372] loop2: detected capacity change from 0 to 1024 [ 61.369836][ T6377] EXT4-fs error (device loop5): ext4_xattr_set_entry:1676: inode #2: comm syz.5.450: corrupted xattr entries [ 61.459824][ T6381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.505899][ T6385] syzkaller0: entered promiscuous mode [ 61.505915][ T6385] syzkaller0: entered allmulticast mode [ 61.575415][ T6383] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.659699][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 61.659716][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 61.659726][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 61.724421][ T6391] netlink: 64 bytes leftover after parsing attributes in process `syz.3.460'. [ 61.752722][ T6383] vxcan1 speed is unknown, defaulting to 1000 [ 61.786220][ T6403] FAT-fs (loop1): Directory bread(block 1285) failed [ 61.786245][ T6403] FAT-fs (loop1): Directory bread(block 1286) failed [ 61.786258][ T6403] FAT-fs (loop1): Directory bread(block 1287) failed [ 61.786298][ T6403] FAT-fs (loop1): Directory bread(block 1288) failed [ 61.803212][ T6403] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 61.815632][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 61.986023][ T14] IPVS: starting estimator thread 0... [ 62.090968][ T6415] IPVS: using max 63 ests per chain, 151200 per kthread [ 62.857046][ T6446] Soft offlining pfn 0x216be0 at process virtual address 0x201c0000 [ 62.857062][ T6446] Soft offline: 0x216be0: page already poisoned [ 62.857073][ T6446] Soft offlining pfn 0x216be0 at process virtual address 0x201c1000 [ 62.857079][ T6446] Soft offline: 0x216be0: page already poisoned [ 62.870761][ T6449] Soft offlining pfn 0x216be0 at process virtual address 0x201c0000 [ 62.870779][ T6449] Soft offline: 0x216be0: page already poisoned [ 62.870791][ T6449] Soft offlining pfn 0x216be0 at process virtual address 0x201c1000 [ 62.870798][ T6449] Soft offline: 0x216be0: page already poisoned [ 63.033483][ T4714] Bluetooth: hci3: command tx timeout [ 63.073716][ T6455] set_capacity_and_notify: 2 callbacks suppressed [ 63.073742][ T6455] loop1: detected capacity change from 0 to 1024 [ 63.110761][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 63.112168][ T6459] warning: `syz.2.480' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.351755][ T6477] 0x0000000000fc-0x0000000100fc : "" [ 63.585749][ T6477] ftl_cs: FTL header not found. [ 63.586343][ T6477] FAULT_INJECTION: forcing a failure. [ 63.586343][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 63.586360][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.2.485 Not tainted syzkaller #0 PREEMPT [ 63.586371][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.586377][ T6477] Call trace: [ 63.586380][ T6477] show_stack+0x2c/0x3c (C) [ 63.586400][ T6477] __dump_stack+0x30/0x40 [ 63.586413][ T6477] dump_stack_lvl+0xd8/0x12c [ 63.586425][ T6477] dump_stack+0x1c/0x28 [ 63.586437][ T6477] should_fail_ex+0x418/0x58c [ 63.586451][ T6477] should_failslab+0xc4/0x120 [ 63.586464][ T6477] __kmalloc_cache_noprof+0x94/0x5fc [ 63.586474][ T6477] rand_initialize_disk+0x58/0xb8 [ 63.586486][ T6477] __alloc_disk_node+0x328/0x494 [ 63.586500][ T6477] __blk_mq_alloc_disk+0x74/0x10c [ 63.586509][ T6477] add_mtd_blktrans_dev+0x738/0x107c [ 63.586524][ T6477] mtdblock_add_mtd+0x158/0x218 [ 63.586532][ T6477] blktrans_notify_add+0xa8/0xf8 [ 63.586539][ T6477] add_mtd_device+0xedc/0x1504 [ 63.586549][ T6477] mtd_add_partition+0x318/0x438 [ 63.586561][ T6477] mtdchar_blkpg_ioctl+0x224/0x248 [ 63.586574][ T6477] mtdchar_ioctl+0x1218/0x1a7c [ 63.586586][ T6477] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 63.586599][ T6477] __arm64_sys_ioctl+0x154/0x1cc [ 63.586612][ T6477] invoke_syscall+0x98/0x244 [ 63.586625][ T6477] el0_svc_common+0xec/0x23c [ 63.586637][ T6477] do_el0_svc+0x4c/0x5c [ 63.586648][ T6477] el0_svc+0x60/0x1d8 [ 63.586665][ T6477] el0t_64_sync_handler+0x44/0x104 [ 63.586677][ T6477] el0t_64_sync+0x198/0x19c [ 63.735263][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 63.754508][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 63.769444][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.769630][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.769649][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.769667][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.841265][ T6501] loop2: detected capacity change from 0 to 512 [ 63.844580][ T6501] vfat: Unknown parameter '' [ 63.889461][ T6503] loop1: detected capacity change from 0 to 1024 [ 63.970493][ T6491] loop5: detected capacity change from 0 to 8192 [ 63.996202][ T6513] loop1: detected capacity change from 0 to 256 [ 64.006617][ T6513] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.013122][ T6513] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 64.013140][ T6513] FAT-fs (loop1): Filesystem has been set read-only [ 64.013180][ T6513] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 64.013193][ T6513] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 64.908612][ T6541] binder: 6540:6541 ioctl c0306201 20000200 returned -14 [ 64.909353][ T6541] binder: 6540:6541 tried to acquire reference to desc 0, got 1 instead [ 64.909578][ T6541] FAULT_INJECTION: forcing a failure. [ 64.909578][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 64.909592][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.3.505 Not tainted syzkaller #0 PREEMPT [ 64.909603][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.909608][ T6541] Call trace: [ 64.909611][ T6541] show_stack+0x2c/0x3c (C) [ 64.909630][ T6541] __dump_stack+0x30/0x40 [ 64.909643][ T6541] dump_stack_lvl+0xd8/0x12c [ 64.909653][ T6541] dump_stack+0x1c/0x28 [ 64.909662][ T6541] should_fail_ex+0x418/0x58c [ 64.909677][ T6541] should_failslab+0xc4/0x120 [ 64.909688][ T6541] __kmalloc_cache_noprof+0x94/0x5fc [ 64.909696][ T6541] binder_transaction+0x1430/0x5448 [ 64.909705][ T6541] binder_ioctl_write_read+0x964/0x9038 [ 64.909713][ T6541] binder_ioctl+0x438/0x1a0c [ 64.909722][ T6541] __arm64_sys_ioctl+0x154/0x1cc [ 64.909732][ T6541] invoke_syscall+0x98/0x244 [ 64.909742][ T6541] el0_svc_common+0xec/0x23c [ 64.909752][ T6541] do_el0_svc+0x4c/0x5c [ 64.909762][ T6541] el0_svc+0x60/0x1d8 [ 64.909772][ T6541] el0t_64_sync_handler+0x44/0x104 [ 64.909782][ T6541] el0t_64_sync+0x198/0x19c [ 64.909792][ T6541] binder_debug: 2 callbacks suppressed [ 64.909796][ T6541] binder: 6541:6540 cannot allocate work for transaction [ 64.909810][ T6541] binder: 6540:6541 transaction call to 6540:0 failed 47/29201/-12, code 0 size 104-24 line 3345 [ 64.910058][ T5695] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.069878][ T6547] loop2: detected capacity change from 0 to 512 [ 65.132345][ T6555] bond0: option all_slaves_active: invalid value (155) [ 65.151402][ T6555] loop3: detected capacity change from 0 to 512 [ 65.154300][ T6555] EXT4-fs: Ignoring removed i_version option [ 65.154344][ T6555] EXT4-fs: Ignoring removed nobh option [ 65.303502][ T6555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.317062][ T6555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 65.317109][ T6555] System zones: 1-12 [ 65.317211][ T6555] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.317404][ T6555] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.507: corrupted in-inode xattr: overlapping e_value [ 65.317420][ T6555] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.317648][ T6555] EXT4-fs (loop3): Remounting filesystem read-only [ 65.361126][ T6547] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.508: iget: bad i_size value: 2533274857506816 [ 65.372580][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.372775][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.393234][ T6560] binder: 6558:6560 got transaction to context manager from process owning it [ 65.393267][ T6560] binder: 6558:6560 transaction call to 6558:0 failed 49/29201/-22, code 0 size 80-24 line 3243 [ 65.399272][ T6560] binder: 6560 RLIMIT_NICE not set [ 65.418546][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.418588][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.419587][ T9] cfg80211: failed to load regulatory.db [ 65.452299][ T6565] binder: 6558:6565 got reply transaction with no transaction stack [ 65.452322][ T6565] binder: 6558:6565 transaction reply to 0:0 failed 50/29201/-71, code 0 size 72-24 line 3155 [ 65.453584][ T6565] binder: 6558:6565 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.453600][ T6565] binder: 6565 RLIMIT_NICE not set [ 65.453979][ T6565] binder: 6558:6565 BC_FREE_BUFFER no match for buffer at offset 0 [ 65.467204][ T6567] loop5: detected capacity change from 0 to 256 [ 65.478871][ T6567] netlink: 112 bytes leftover after parsing attributes in process `syz.5.511'. [ 65.549718][ T6569] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.642648][ T6573] netlink: 'syz.5.514': attribute type 21 has an invalid length. [ 65.881883][ T6598] loop5: detected capacity change from 0 to 256 [ 65.895369][ T6598] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.935634][ T4712] EXT4-fs unmount: 17 callbacks suppressed [ 65.935650][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.978067][ T6609] binder: 6605:6609 ioctl c0306201 20000200 returned -14 [ 65.982578][ T6609] binder: 6605:6609 tried to acquire reference to desc 0, got 1 instead [ 65.982837][ T6609] FAULT_INJECTION: forcing a failure. [ 65.982837][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 65.982853][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT [ 65.982865][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.982871][ T6609] Call trace: [ 65.982874][ T6609] show_stack+0x2c/0x3c (C) [ 65.982892][ T6609] __dump_stack+0x30/0x40 [ 65.982912][ T6609] dump_stack_lvl+0xd8/0x12c [ 65.982922][ T6609] dump_stack+0x1c/0x28 [ 65.982931][ T6609] should_fail_ex+0x418/0x58c [ 65.982943][ T6609] should_failslab+0xc4/0x120 [ 65.982955][ T6609] __kmalloc_cache_noprof+0x94/0x5fc [ 65.982963][ T6609] binder_alloc_new_buf+0x16c/0x2938 [ 65.982973][ T6609] binder_transaction+0x187c/0x5448 [ 65.982981][ T6609] binder_ioctl_write_read+0x964/0x9038 [ 65.982988][ T6609] binder_ioctl+0x438/0x1a0c [ 65.982997][ T6609] __arm64_sys_ioctl+0x154/0x1cc [ 65.983007][ T6609] invoke_syscall+0x98/0x244 [ 65.983021][ T6609] el0_svc_common+0xec/0x23c [ 65.983030][ T6609] do_el0_svc+0x4c/0x5c [ 65.983040][ T6609] el0_svc+0x60/0x1d8 [ 65.983050][ T6609] el0t_64_sync_handler+0x44/0x104 [ 65.983060][ T6609] el0t_64_sync+0x198/0x19c [ 65.983315][ T6609] binder: cannot allocate buffer: memory allocation failed [ 65.983341][ T6609] binder: 6605:6609 transaction call to 6605:0 failed 55/29201/-12, code 0 size 104-24 line 3408 [ 65.983547][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.012080][ T6614] binder: 6613:6614 ioctl c0306201 20000100 returned -14 [ 66.012697][ T6614] binder: 6613:6614 tried to acquire reference to desc 0, got 1 instead [ 66.012711][ T6614] binder: 6613:6614 ioctl c0306201 20000240 returned -14 [ 66.012835][ T6614] binder: 6613:6614 got transaction with invalid offset (5, min 0 max 112) or object. [ 66.012865][ T6614] binder: 6613:6614 transaction call to 6613:0 failed 60/29201/-22, code 0 size 112-4280 line 3524 [ 66.050413][ T6618] binder: BINDER_SET_CONTEXT_MGR already set [ 66.050426][ T6618] binder: 6613:6618 ioctl 4018620d 20000080 returned -16 [ 66.050996][ T6617] binder_alloc: binder_alloc_mmap_handler: 6613 20ffd000-21000000 already mapped failed -16 [ 66.051564][ T6614] binder: 6613:6614 ioctl c0306201 20000100 returned -14 [ 66.051681][ T6619] binder_alloc: 6613: binder_alloc_buf, no vma [ 66.051688][ T6619] binder: cannot allocate buffer: vma cleared, target dead or dying [ 66.051748][ T6617] binder: BINDER_SET_CONTEXT_MGR already set [ 66.051753][ T6617] binder: 6613:6617 ioctl 4018620d 200001c0 returned -16 [ 66.051800][ T6618] binder: 6613:6618 ioctl c0306201 20000240 returned -14 [ 66.957848][ T6643] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.958124][ T6638] netlink: 'syz.1.523': attribute type 10 has an invalid length. [ 66.958653][ T6638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.959174][ T6638] team0: Port device netdevsim1 added [ 66.972452][ T6640] netlink: 'syz.1.523': attribute type 10 has an invalid length. [ 66.973127][ T6644] 0x000000000300-0x000000010300 : "" [ 66.980130][ T6644] ftl_cs: FTL header not found. [ 66.980789][ T6644] FAULT_INJECTION: forcing a failure. [ 66.980789][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 66.980805][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT [ 66.980815][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.980822][ T6644] Call trace: [ 66.980825][ T6644] show_stack+0x2c/0x3c (C) [ 66.980845][ T6644] __dump_stack+0x30/0x40 [ 66.980861][ T6644] dump_stack_lvl+0xd8/0x12c [ 66.980873][ T6644] dump_stack+0x1c/0x28 [ 66.980885][ T6644] should_fail_ex+0x418/0x58c [ 66.980909][ T6644] should_failslab+0xc4/0x120 [ 66.980922][ T6644] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 66.980933][ T6644] kstrdup+0x50/0x104 [ 66.980942][ T6644] kstrdup_const+0x54/0x6c [ 66.980950][ T6644] kvasprintf_const+0x120/0x2e4 [ 66.980964][ T6644] kobject_set_name_vargs+0xd8/0x1c0 [ 66.980974][ T6644] dev_set_name+0xe8/0x13c [ 66.980984][ T6644] __add_disk+0x384/0xbdc [ 66.980997][ T6644] add_disk_fwnode+0xd4/0x340 [ 66.981009][ T6644] device_add_disk+0x38/0x4c [ 66.981021][ T6644] add_mtd_blktrans_dev+0xb28/0x107c [ 66.981036][ T6644] mtdblock_add_mtd+0x158/0x218 [ 66.981044][ T6644] blktrans_notify_add+0xa8/0xf8 [ 66.981052][ T6644] add_mtd_device+0xedc/0x1504 [ 66.981062][ T6644] mtd_add_partition+0x318/0x438 [ 66.981074][ T6644] mtdchar_blkpg_ioctl+0x224/0x248 [ 66.981087][ T6644] mtdchar_ioctl+0x1218/0x1a7c [ 66.981099][ T6644] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 66.981112][ T6644] __arm64_sys_ioctl+0x154/0x1cc [ 66.981125][ T6644] invoke_syscall+0x98/0x244 [ 66.981138][ T6644] el0_svc_common+0xec/0x23c [ 66.981150][ T6644] do_el0_svc+0x4c/0x5c [ 66.981164][ T6644] el0_svc+0x60/0x1d8 [ 66.981177][ T6644] el0t_64_sync_handler+0x44/0x104 [ 66.981189][ T6644] el0t_64_sync+0x198/0x19c [ 67.175454][ T6719] binder: 6717:6719 ioctl c0306201 20000200 returned -14 [ 67.176399][ T6719] FAULT_INJECTION: forcing a failure. [ 67.176399][ T6719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.176417][ T6719] CPU: 0 UID: 0 PID: 6719 Comm: syz.0.535 Not tainted syzkaller #0 PREEMPT [ 67.176426][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.176431][ T6719] Call trace: [ 67.176434][ T6719] show_stack+0x2c/0x3c (C) [ 67.176450][ T6719] __dump_stack+0x30/0x40 [ 67.176460][ T6719] dump_stack_lvl+0xd8/0x12c [ 67.176470][ T6719] dump_stack+0x1c/0x28 [ 67.176479][ T6719] should_fail_ex+0x418/0x58c [ 67.176491][ T6719] should_fail_alloc_page+0xec/0x10c [ 67.176502][ T6719] prepare_alloc_pages+0x194/0x484 [ 67.176509][ T6719] __alloc_frozen_pages_noprof+0x180/0x578 [ 67.176517][ T6719] alloc_pages_mpol+0x1fc/0x3d0 [ 67.176525][ T6719] alloc_frozen_pages_noprof+0xc4/0x10c [ 67.176533][ T6719] alloc_pages_noprof+0x30/0x148 [ 67.176541][ T6719] binder_alloc_new_buf+0x19ac/0x2938 [ 67.176551][ T6719] binder_transaction+0x187c/0x5448 [ 67.176558][ T6719] binder_ioctl_write_read+0x964/0x9038 [ 67.176565][ T6719] binder_ioctl+0x438/0x1a0c [ 67.176574][ T6719] __arm64_sys_ioctl+0x154/0x1cc [ 67.176588][ T6719] invoke_syscall+0x98/0x244 [ 67.176599][ T6719] el0_svc_common+0xec/0x23c [ 67.176609][ T6719] do_el0_svc+0x4c/0x5c [ 67.176618][ T6719] el0_svc+0x60/0x1d8 [ 67.176630][ T6719] el0t_64_sync_handler+0x44/0x104 [ 67.176639][ T6719] el0t_64_sync+0x198/0x19c [ 67.230912][ T6733] FAULT_INJECTION: forcing a failure. [ 67.230912][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.230936][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.0.540 Not tainted syzkaller #0 PREEMPT [ 67.230947][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.230952][ T6733] Call trace: [ 67.230955][ T6733] show_stack+0x2c/0x3c (C) [ 67.230973][ T6733] __dump_stack+0x30/0x40 [ 67.230984][ T6733] dump_stack_lvl+0xd8/0x12c [ 67.230994][ T6733] dump_stack+0x1c/0x28 [ 67.231003][ T6733] should_fail_ex+0x418/0x58c [ 67.231015][ T6733] should_fail+0x14/0x24 [ 67.231024][ T6733] should_fail_usercopy+0x20/0x30 [ 67.231034][ T6733] arch_do_signal_or_restart+0x1000/0x444c [ 67.231045][ T6733] exit_to_user_mode_loop+0x70/0x17c [ 67.231055][ T6733] el0_da+0x14c/0x1d4 [ 67.231066][ T6733] el0t_64_sync_handler+0xd8/0x104 [ 67.231075][ T6733] el0t_64_sync+0x198/0x19c [ 67.250764][ T6726] xt_hashlimit: size too large, truncated to 1048576 [ 67.307165][ T6737] loop5: detected capacity change from 0 to 256 [ 67.445976][ T4747] bridge0: port 1(syz_tun) entered disabled state [ 67.459741][ T4747] syz_tun (unregistering): left allmulticast mode [ 67.459761][ T4747] syz_tun (unregistering): left promiscuous mode [ 67.459788][ T4747] bridge0: port 1(syz_tun) entered disabled state [ 67.544549][ T6739] 0x000000000700-0x000000010700 : "" [ 67.547378][ T6739] ftl_cs: FTL header not found. [ 67.663691][ T6685] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.702654][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.703273][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.708489][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.708837][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.709047][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.753931][ T6685] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.770307][ T6764] autofs: Unknown parameter '' [ 67.770596][ T6761] netlink: 'syz.1.549': attribute type 83 has an invalid length. [ 67.819652][ T6750] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.836744][ T6685] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.869122][ T6750] vxcan1 speed is unknown, defaulting to 1000 [ 67.925956][ T6685] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.031327][ T6796] binder: 6795:6796 ioctl c0306201 20000200 returned -14 [ 68.032323][ T6796] FAULT_INJECTION: forcing a failure. [ 68.032323][ T6796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.032340][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.5.553 Not tainted syzkaller #0 PREEMPT [ 68.032350][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.032355][ T6796] Call trace: [ 68.032358][ T6796] show_stack+0x2c/0x3c (C) [ 68.032378][ T6796] __dump_stack+0x30/0x40 [ 68.032389][ T6796] dump_stack_lvl+0xd8/0x12c [ 68.032399][ T6796] dump_stack+0x1c/0x28 [ 68.032408][ T6796] should_fail_ex+0x418/0x58c [ 68.032420][ T6796] should_fail_alloc_page+0xec/0x10c [ 68.032431][ T6796] prepare_alloc_pages+0x194/0x484 [ 68.032439][ T6796] __alloc_frozen_pages_noprof+0x180/0x578 [ 68.032447][ T6796] alloc_pages_mpol+0x1fc/0x3d0 [ 68.032456][ T6796] alloc_frozen_pages_noprof+0xc4/0x10c [ 68.032464][ T6796] alloc_pages_noprof+0x30/0x148 [ 68.032472][ T6796] binder_alloc_new_buf+0x19ac/0x2938 [ 68.032482][ T6796] binder_transaction+0x187c/0x5448 [ 68.032490][ T6796] binder_ioctl_write_read+0x964/0x9038 [ 68.032497][ T6796] binder_ioctl+0x438/0x1a0c [ 68.032506][ T6796] __arm64_sys_ioctl+0x154/0x1cc [ 68.032517][ T6796] invoke_syscall+0x98/0x244 [ 68.032527][ T6796] el0_svc_common+0xec/0x23c [ 68.032537][ T6796] do_el0_svc+0x4c/0x5c [ 68.032546][ T6796] el0_svc+0x60/0x1d8 [ 68.032557][ T6796] el0t_64_sync_handler+0x44/0x104 [ 68.032567][ T6796] el0t_64_sync+0x198/0x19c [ 68.170966][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.183706][ T6685] bond0 (unregistering): Released all slaves [ 68.191786][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.191841][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.191906][ T6750] bridge_slave_0: entered allmulticast mode [ 68.192348][ T6750] bridge_slave_0: entered promiscuous mode [ 68.199544][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.199597][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.199654][ T6750] bridge_slave_1: entered allmulticast mode [ 68.200184][ T6750] bridge_slave_1: entered promiscuous mode [ 68.215382][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.218964][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.225279][ T6750] team0: Port device team_slave_0 added [ 68.226029][ T6750] team0: Port device team_slave_1 added [ 68.241579][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.241591][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.241604][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.242121][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.242128][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.242140][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.274526][ T6750] hsr_slave_0: entered promiscuous mode [ 68.274834][ T6750] hsr_slave_1: entered promiscuous mode [ 68.275026][ T6750] debugfs: 'hsr0' already exists in 'hsr' [ 68.275037][ T6750] Cannot create hsr debugfs directory [ 68.371094][ T6823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.404194][ T6828] binder: 6827:6828 ioctl c0306201 20000200 returned -14 [ 68.440408][ T6750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.452134][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.452531][ T6750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.454888][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.455192][ T6750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.456926][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.458261][ T6750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.460557][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.512444][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 68.574327][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.586309][ T6750] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.595806][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.595839][ T6704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.609680][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.609711][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.642659][ T6853] syz_tun: entered allmulticast mode [ 68.662426][ T6750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.662443][ T6750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.689488][ T6853] loop2: detected capacity change from 0 to 512 [ 68.704754][ T6853] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.561: corrupted in-inode xattr: invalid ea_ino [ 68.704778][ T6853] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.704947][ T6853] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.561: couldn't read orphan inode 15 (err -117) [ 68.704962][ T6853] loop2: lost filesystem error report for type 5 error -117 [ 68.705931][ T6853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.721578][ T6685] hsr_slave_0: left promiscuous mode [ 68.727971][ T6685] hsr_slave_1: left promiscuous mode [ 68.741500][ T6864] binder: 6861:6864 ioctl c0306201 20000200 returned -14 [ 68.742310][ T6864] FAULT_INJECTION: forcing a failure. [ 68.742310][ T6864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.742325][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.1.563 Not tainted syzkaller #0 PREEMPT [ 68.742334][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.742339][ T6864] Call trace: [ 68.742342][ T6864] show_stack+0x2c/0x3c (C) [ 68.742359][ T6864] __dump_stack+0x30/0x40 [ 68.742370][ T6864] dump_stack_lvl+0xd8/0x12c [ 68.742380][ T6864] dump_stack+0x1c/0x28 [ 68.742389][ T6864] should_fail_ex+0x418/0x58c [ 68.742401][ T6864] should_fail_alloc_page+0xec/0x10c [ 68.742412][ T6864] prepare_alloc_pages+0x194/0x484 [ 68.742420][ T6864] __alloc_frozen_pages_noprof+0x180/0x578 [ 68.742427][ T6864] alloc_pages_mpol+0x1fc/0x3d0 [ 68.742436][ T6864] alloc_frozen_pages_noprof+0xc4/0x10c [ 68.742444][ T6864] alloc_pages_noprof+0x30/0x148 [ 68.742452][ T6864] __pte_alloc+0x40/0x1c4 [ 68.742461][ T6864] get_locked_pte+0xb4/0xd8 [ 68.742469][ T6864] insert_page+0xe4/0x218 [ 68.742478][ T6864] vm_insert_page+0x254/0x32c [ 68.742487][ T6864] binder_alloc_new_buf+0x1ac8/0x2938 [ 68.742497][ T6864] binder_transaction+0x187c/0x5448 [ 68.742504][ T6864] binder_ioctl_write_read+0x964/0x9038 [ 68.742512][ T6864] binder_ioctl+0x438/0x1a0c [ 68.742520][ T6864] __arm64_sys_ioctl+0x154/0x1cc [ 68.742531][ T6864] invoke_syscall+0x98/0x244 [ 68.742541][ T6864] el0_svc_common+0xec/0x23c [ 68.742551][ T6864] do_el0_svc+0x4c/0x5c [ 68.742560][ T6864] el0_svc+0x60/0x1d8 [ 68.742571][ T6864] el0t_64_sync_handler+0x44/0x104 [ 68.742581][ T6864] el0t_64_sync+0x198/0x19c [ 68.742598][ T6864] binder_alloc: 6861: binder_install_single_page failed to insert page at offset 0 with -12 [ 68.773021][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.773039][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.777836][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.777853][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.797287][ T6685] veth1_macvtap: left promiscuous mode [ 68.797319][ T6685] veth0_macvtap: left promiscuous mode [ 68.797367][ T6685] veth1_vlan: left promiscuous mode [ 68.797412][ T6685] veth0_vlan: left promiscuous mode [ 68.854934][ T6877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.893908][ T6882] loop5: detected capacity change from 0 to 512 [ 68.903863][ T6882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 68.903978][ T6882] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.904783][ T6882] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 68.905210][ T6882] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 68.905335][ T6882] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.568: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 68.905356][ T6882] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 68.905531][ T6882] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.568: couldn't read orphan inode 13 (err -117) [ 68.905546][ T6882] loop5: lost filesystem error report for type 5 error -117 [ 68.915358][ T6882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.950150][ T6685] team0 (unregistering): Port device team_slave_1 removed [ 68.958517][ T6685] team0 (unregistering): Port device team_slave_0 removed [ 69.289565][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.334299][ T6869] Bluetooth: MGMT ver 1.23 [ 69.334597][ T6897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.366144][ T6901] loop0: detected capacity change from 0 to 512 [ 69.388601][ T6901] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 69.403189][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 69.403211][ C0] EXT4-fs (loop0): initial error at time 2000000003: mb_free_blocks:2049: inode 11: block 64 [ 69.403231][ C0] EXT4-fs (loop0): last error at time 2000000003: mb_free_blocks:2049: inode 11: block 64 [ 69.406045][ T6901] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #11: comm syz.0.571: corrupted inode contents [ 69.406061][ T6901] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.409596][ T6901] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #11: comm syz.0.571: mark_inode_dirty error [ 69.409630][ T6901] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.430735][ T6901] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.571: invalid indirect mapped block 1 (level 1) [ 69.430775][ T6901] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.432878][ T6901] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #11: comm syz.0.571: corrupted inode contents [ 69.432911][ T6901] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.434775][ T6901] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 69.434805][ T6901] loop0: lost filesystem error report for type 5 error -117 [ 69.448062][ T6901] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #11: comm syz.0.571: corrupted inode contents [ 69.448090][ T6901] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.458262][ T6901] EXT4-fs error (device loop0): ext4_truncate:4721: inode #11: comm syz.0.571: mark_inode_dirty error [ 69.458291][ T6901] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.459802][ T6901] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 69.459812][ T6901] loop0: lost filesystem error report for type 5 error -117 [ 69.460169][ T6901] EXT4-fs (loop0): 1 truncate cleaned up [ 69.460698][ T6901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.487371][ T6917] PKCS7: Unsupported SignerInfo version [ 69.571407][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.639528][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 69.741577][ T6750] veth0_vlan: entered promiscuous mode [ 69.751420][ T6750] veth1_vlan: entered promiscuous mode [ 69.752351][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.797806][ T6750] veth0_macvtap: entered promiscuous mode [ 69.804300][ T6750] veth1_macvtap: entered promiscuous mode [ 69.812195][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.828407][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.838933][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.862647][ T6960] 0x000000003f00-0x000000013f00 : "" [ 69.863184][ T4715] Bluetooth: hci4: command tx timeout [ 69.870121][ T6960] ftl_cs: FTL header not found. [ 69.870589][ T6960] FAULT_INJECTION: forcing a failure. [ 69.870589][ T6960] name failslab, interval 1, probability 0, space 0, times 0 [ 69.870606][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.0.577 Not tainted syzkaller #0 PREEMPT [ 69.870617][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 69.870624][ T6960] Call trace: [ 69.870627][ T6960] show_stack+0x2c/0x3c (C) [ 69.870648][ T6960] __dump_stack+0x30/0x40 [ 69.870661][ T6960] dump_stack_lvl+0xd8/0x12c [ 69.870673][ T6960] dump_stack+0x1c/0x28 [ 69.870692][ T6960] should_fail_ex+0x418/0x58c [ 69.870705][ T6960] should_failslab+0xc4/0x120 [ 69.870719][ T6960] __kmalloc_cache_noprof+0x94/0x5fc [ 69.870728][ T6960] percpu_ref_init+0xcc/0x2f0 [ 69.870740][ T6960] blkg_alloc+0xf8/0x6cc [ 69.870751][ T6960] blkcg_init_disk+0x198/0x290 [ 69.870762][ T6960] __alloc_disk_node+0x260/0x494 [ 69.870775][ T6960] __blk_mq_alloc_disk+0x74/0x10c [ 69.870784][ T6960] add_mtd_blktrans_dev+0x738/0x107c [ 69.870799][ T6960] mtdblock_add_mtd+0x158/0x218 [ 69.870807][ T6960] blktrans_notify_add+0xa8/0xf8 [ 69.870815][ T6960] add_mtd_device+0xedc/0x1504 [ 69.870824][ T6960] mtd_add_partition+0x318/0x438 [ 69.870836][ T6960] mtdchar_blkpg_ioctl+0x224/0x248 [ 69.870849][ T6960] mtdchar_ioctl+0x1218/0x1a7c [ 69.870861][ T6960] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 69.870874][ T6960] __arm64_sys_ioctl+0x154/0x1cc [ 69.870895][ T6960] invoke_syscall+0x98/0x244 [ 69.870908][ T6960] el0_svc_common+0xec/0x23c [ 69.870920][ T6960] do_el0_svc+0x4c/0x5c [ 69.870932][ T6960] el0_svc+0x60/0x1d8 [ 69.870945][ T6960] el0t_64_sync_handler+0x44/0x104 [ 69.870957][ T6960] el0t_64_sync+0x198/0x19c [ 69.918791][ T6700] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.919004][ T6687] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.919027][ T6687] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.919044][ T6687] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.937018][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.937036][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.949044][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.949058][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.070870][ T6995] loop6: detected capacity change from 0 to 2048 [ 70.089538][ T7001] syzkaller1: entered promiscuous mode [ 70.089556][ T7001] syzkaller1: entered allmulticast mode [ 70.092266][ T6995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.116741][ T6995] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 70.134184][ T7005] loop5: detected capacity change from 0 to 512 [ 70.135674][ T6995] EXT4-fs (loop6): Remounting filesystem read-only [ 70.139168][ T7005] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 70.139280][ T7005] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.140055][ T7005] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 70.160345][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.176779][ T7005] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 70.177030][ T7005] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.587: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 70.177053][ T7005] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 70.177232][ T7005] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.587: couldn't read orphan inode 13 (err -117) [ 70.177245][ T7005] loop5: lost filesystem error report for type 5 error -117 [ 70.185523][ T7005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.230275][ T7014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.234665][ T7016] netlink: 92 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234684][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234693][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234755][ T7016] netlink: 92 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234765][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234771][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234822][ T7016] netlink: 92 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234831][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234837][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.234879][ T7016] netlink: 92 bytes leftover after parsing attributes in process `syz.6.589'. [ 70.293537][ T7020] loop0: detected capacity change from 0 to 1024 [ 70.296049][ T7020] EXT4-fs: Ignoring removed nobh option [ 70.300734][ T7020] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 70.308288][ T7020] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 70.308537][ T7020] System zones: 0-1, 3-12 [ 70.309091][ T7020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.594469][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 70.628816][ T7039] xt_IDLETIMER: label is empty or not nul-terminated [ 70.796147][ T7076] netlink: 'syz.6.598': attribute type 1 has an invalid length. [ 70.796168][ T7076] netlink: 'syz.6.598': attribute type 2 has an invalid length. [ 70.809651][ T7079] loop1: detected capacity change from 0 to 1024 [ 70.810558][ T7079] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 70.810594][ T7079] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.813789][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 70.852915][ T7083] 9p: Bad value for 'rfdno' [ 70.862304][ T7079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.876545][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.930655][ T7090] 0x00000000fcff-0x00000001fcff : "" [ 70.937090][ T7090] ftl_cs: FTL header not found. [ 70.937543][ T7090] FAULT_INJECTION: forcing a failure. [ 70.937543][ T7090] name failslab, interval 1, probability 0, space 0, times 0 [ 70.937562][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.6.602 Not tainted syzkaller #0 PREEMPT [ 70.937577][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.937584][ T7090] Call trace: [ 70.937587][ T7090] show_stack+0x2c/0x3c (C) [ 70.937609][ T7090] __dump_stack+0x30/0x40 [ 70.937623][ T7090] dump_stack_lvl+0xd8/0x12c [ 70.937635][ T7090] dump_stack+0x1c/0x28 [ 70.937646][ T7090] should_fail_ex+0x418/0x58c [ 70.937659][ T7090] should_failslab+0xc4/0x120 [ 70.937673][ T7090] __kmalloc_cache_node_noprof+0x98/0x618 [ 70.937682][ T7090] __alloc_disk_node+0x70/0x494 [ 70.937695][ T7090] __blk_mq_alloc_disk+0x74/0x10c [ 70.937704][ T7090] add_mtd_blktrans_dev+0x738/0x107c [ 70.937718][ T7090] mtdblock_add_mtd+0x158/0x218 [ 70.937726][ T7090] blktrans_notify_add+0xa8/0xf8 [ 70.937734][ T7090] add_mtd_device+0xedc/0x1504 [ 70.937743][ T7090] mtd_add_partition+0x318/0x438 [ 70.937755][ T7090] mtdchar_blkpg_ioctl+0x224/0x248 [ 70.937768][ T7090] mtdchar_ioctl+0x1218/0x1a7c [ 70.937780][ T7090] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 70.937792][ T7090] __arm64_sys_ioctl+0x154/0x1cc [ 70.937805][ T7090] invoke_syscall+0x98/0x244 [ 70.937817][ T7090] el0_svc_common+0xec/0x23c [ 70.937829][ T7090] do_el0_svc+0x4c/0x5c [ 70.937840][ T7090] el0_svc+0x60/0x1d8 [ 70.937853][ T7090] el0t_64_sync_handler+0x44/0x104 [ 70.937864][ T7090] el0t_64_sync+0x198/0x19c [ 71.011839][ T7096] binder: 7095:7096 ioctl c0306201 20000200 returned -14 [ 71.013002][ T7096] binder_user_error: 5 callbacks suppressed [ 71.013014][ T7096] binder: 7095:7096 tried to acquire reference to desc 0, got 1 instead [ 71.053446][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.090728][ T7107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.140365][ T7092] FAULT_INJECTION: forcing a failure. [ 71.140365][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.140392][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.1.603 Not tainted syzkaller #0 PREEMPT [ 71.140404][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.140409][ T7092] Call trace: [ 71.140412][ T7092] show_stack+0x2c/0x3c (C) [ 71.140434][ T7092] __dump_stack+0x30/0x40 [ 71.140446][ T7092] dump_stack_lvl+0xd8/0x12c [ 71.140458][ T7092] dump_stack+0x1c/0x28 [ 71.140470][ T7092] should_fail_ex+0x418/0x58c [ 71.140483][ T7092] should_fail+0x14/0x24 [ 71.140495][ T7092] should_fail_usercopy+0x20/0x30 [ 71.140507][ T7092] arch_do_signal_or_restart+0x1000/0x444c [ 71.140520][ T7092] exit_to_user_mode_loop+0x70/0x17c [ 71.140532][ T7092] el0_svc+0x12c/0x1d8 [ 71.140545][ T7092] el0t_64_sync_handler+0x44/0x104 [ 71.140561][ T7092] el0t_64_sync+0x198/0x19c [ 71.173872][ T7119] loop5: detected capacity change from 0 to 1024 [ 71.195740][ T7119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.215349][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.227513][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.261558][ T7131] binder: 7129:7131 ioctl c0306201 20000200 returned -14 [ 71.265530][ T7131] binder: 7129:7131 tried to acquire reference to desc 0, got 1 instead [ 71.265800][ T7131] FAULT_INJECTION: forcing a failure. [ 71.265800][ T7131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.265813][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.0.613 Not tainted syzkaller #0 PREEMPT [ 71.265823][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.265827][ T7131] Call trace: [ 71.265830][ T7131] show_stack+0x2c/0x3c (C) [ 71.265849][ T7131] __dump_stack+0x30/0x40 [ 71.265862][ T7131] dump_stack_lvl+0xd8/0x12c [ 71.265872][ T7131] dump_stack+0x1c/0x28 [ 71.265887][ T7131] should_fail_ex+0x418/0x58c [ 71.265900][ T7131] should_fail+0x14/0x24 [ 71.265909][ T7131] should_fail_usercopy+0x20/0x30 [ 71.265920][ T7131] binder_alloc_copy_user_to_buffer+0x27c/0x430 [ 71.265931][ T7131] binder_transaction+0x1c8c/0x5448 [ 71.265938][ T7131] binder_ioctl_write_read+0x964/0x9038 [ 71.265946][ T7131] binder_ioctl+0x438/0x1a0c [ 71.265954][ T7131] __arm64_sys_ioctl+0x154/0x1cc [ 71.265966][ T7131] invoke_syscall+0x98/0x244 [ 71.265976][ T7131] el0_svc_common+0xec/0x23c [ 71.265986][ T7131] do_el0_svc+0x4c/0x5c [ 71.265995][ T7131] el0_svc+0x60/0x1d8 [ 71.266005][ T7131] el0t_64_sync_handler+0x44/0x104 [ 71.266015][ T7131] el0t_64_sync+0x198/0x19c [ 71.266025][ T7131] binder: 7129:7131 got transaction with invalid offsets ptr [ 71.266053][ T7131] binder_debug: 13 callbacks suppressed [ 71.266058][ T7131] binder: 7129:7131 transaction call to 7129:0 failed 89/29201/-14, code 0 size 104-24 line 3447 [ 71.266472][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.329679][ T7141] loop0: detected capacity change from 0 to 256 [ 71.351336][ T7141] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.378468][ T7141] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 71.378486][ T7141] FAT-fs (loop0): Filesystem has been set read-only [ 71.762405][ T7162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.788644][ T7165] loop0: detected capacity change from 0 to 512 [ 71.798983][ T7165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.799029][ T7165] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.828393][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.922261][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.943769][ T7179] FAULT_INJECTION: forcing a failure. [ 71.943769][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.943789][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT [ 71.943799][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.943803][ T7179] Call trace: [ 71.943806][ T7179] show_stack+0x2c/0x3c (C) [ 71.943824][ T7179] __dump_stack+0x30/0x40 [ 71.943834][ T7179] dump_stack_lvl+0xd8/0x12c [ 71.943844][ T7179] dump_stack+0x1c/0x28 [ 71.943853][ T7179] should_fail_ex+0x418/0x58c [ 71.943865][ T7179] should_fail+0x14/0x24 [ 71.943874][ T7179] should_fail_usercopy+0x20/0x30 [ 71.943890][ T7179] simple_read_from_buffer+0xc4/0x238 [ 71.943902][ T7179] proc_fail_nth_read+0x1a8/0x248 [ 71.943912][ T7179] vfs_read+0x230/0x8c8 [ 71.943923][ T7179] ksys_read+0x12c/0x228 [ 71.943934][ T7179] __arm64_sys_read+0x84/0x98 [ 71.943943][ T7179] invoke_syscall+0x98/0x244 [ 71.943954][ T7179] el0_svc_common+0xec/0x23c [ 71.943963][ T7179] do_el0_svc+0x4c/0x5c [ 71.943973][ T7179] el0_svc+0x60/0x1d8 [ 71.943984][ T7179] el0t_64_sync_handler+0x44/0x104 [ 71.943993][ T7179] el0t_64_sync+0x198/0x19c [ 71.958037][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.995813][ T7191] binder: 7188:7191 ioctl c0306201 20000200 returned -14 [ 71.997675][ T7191] binder: 7188:7191 tried to acquire reference to desc 0, got 1 instead [ 71.997966][ T7191] FAULT_INJECTION: forcing a failure. [ 71.997966][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.997979][ T7191] CPU: 0 UID: 0 PID: 7191 Comm: syz.1.625 Not tainted syzkaller #0 PREEMPT [ 71.997989][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.997994][ T7191] Call trace: [ 71.997996][ T7191] show_stack+0x2c/0x3c (C) [ 71.998015][ T7191] __dump_stack+0x30/0x40 [ 71.998026][ T7191] dump_stack_lvl+0xd8/0x12c [ 71.998036][ T7191] dump_stack+0x1c/0x28 [ 71.998045][ T7191] should_fail_ex+0x418/0x58c [ 71.998056][ T7191] should_fail+0x14/0x24 [ 71.998066][ T7191] should_fail_usercopy+0x20/0x30 [ 71.998076][ T7191] _inline_copy_from_user+0x3c/0x174 [ 71.998086][ T7191] binder_get_object+0xcc/0x2c8 [ 71.998094][ T7191] binder_transaction+0x26f4/0x5448 [ 71.998101][ T7191] binder_ioctl_write_read+0x964/0x9038 [ 71.998108][ T7191] binder_ioctl+0x438/0x1a0c [ 71.998117][ T7191] __arm64_sys_ioctl+0x154/0x1cc [ 71.998129][ T7191] invoke_syscall+0x98/0x244 [ 71.998139][ T7191] el0_svc_common+0xec/0x23c [ 71.998148][ T7191] do_el0_svc+0x4c/0x5c [ 71.998158][ T7191] el0_svc+0x60/0x1d8 [ 71.998169][ T7191] el0t_64_sync_handler+0x44/0x104 [ 71.998178][ T7191] el0t_64_sync+0x198/0x19c [ 71.998189][ T7191] binder: 7188:7191 got transaction with invalid offset (0, min 0 max 104) or object. [ 71.998221][ T7191] binder: 7188:7191 transaction call to 7188:0 failed 94/29201/-22, code 0 size 104-24 line 3524 [ 71.998439][ T5693] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.181762][ T7219] binder: 7218:7219 ioctl c0306201 20000200 returned -14 [ 72.185544][ T7219] binder: 7218:7219 tried to acquire reference to desc 0, got 1 instead [ 72.251909][ T7221] bond0: option all_slaves_active: invalid value (155) [ 72.270136][ T7221] EXT4-fs: Ignoring removed i_version option [ 72.270152][ T7221] EXT4-fs: Ignoring removed nobh option [ 72.373368][ T7223] bond0: option all_slaves_active: invalid value (155) [ 72.393933][ T7223] EXT4-fs: Ignoring removed i_version option [ 72.393995][ T7223] EXT4-fs: Ignoring removed nobh option [ 72.483743][ T7221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.485797][ T7223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.515492][ T7221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 72.515539][ T7221] System zones: 1-12 [ 72.515632][ T7221] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.515867][ T7221] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.631: corrupted in-inode xattr: overlapping e_value [ 72.515899][ T7221] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.516177][ T7221] EXT4-fs (loop1): Remounting filesystem read-only [ 72.516669][ T7221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.555342][ T7223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 72.555390][ T7223] System zones: 1-12 [ 72.555498][ T7223] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.555867][ T7223] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.633: corrupted in-inode xattr: overlapping e_value [ 72.556065][ T7223] EXT4-fs (loop2): Remounting filesystem read-only [ 72.556618][ T7223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.636690][ T7230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.663364][ T7240] binder: 7239:7240 ioctl c0306201 20000200 returned -14 [ 72.667654][ T7240] binder: 7239:7240 tried to acquire reference to desc 0, got 1 instead [ 72.668014][ T7240] binder: 7239:7240 got transaction with invalid parent offset or type [ 72.668042][ T7240] binder: 7239:7240 transaction call to 7239:0 failed 103/29201/-22, code 0 size 104-24 line 3617 [ 72.668059][ T7240] FAULT_INJECTION: forcing a failure. [ 72.668059][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.668072][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.5.640 Not tainted syzkaller #0 PREEMPT [ 72.668082][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.668086][ T7240] Call trace: [ 72.668089][ T7240] show_stack+0x2c/0x3c (C) [ 72.668108][ T7240] __dump_stack+0x30/0x40 [ 72.668119][ T7240] dump_stack_lvl+0xd8/0x12c [ 72.668128][ T7240] dump_stack+0x1c/0x28 [ 72.668138][ T7240] should_fail_ex+0x418/0x58c [ 72.668149][ T7240] should_fail+0x14/0x24 [ 72.668159][ T7240] should_fail_usercopy+0x20/0x30 [ 72.668169][ T7240] binder_ioctl_write_read+0x78f0/0x9038 [ 72.668178][ T7240] binder_ioctl+0x438/0x1a0c [ 72.668187][ T7240] __arm64_sys_ioctl+0x154/0x1cc [ 72.668198][ T7240] invoke_syscall+0x98/0x244 [ 72.668208][ T7240] el0_svc_common+0xec/0x23c [ 72.668218][ T7240] do_el0_svc+0x4c/0x5c [ 72.668228][ T7240] el0_svc+0x60/0x1d8 [ 72.668238][ T7240] el0t_64_sync_handler+0x44/0x104 [ 72.668248][ T7240] el0t_64_sync+0x198/0x19c [ 72.668257][ T7240] binder: 7239:7240 ioctl c0306201 20000380 returned -14 [ 72.669217][ T4808] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.727477][ T7246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.751789][ T7250] EXT4-fs (loop5): 1 truncate cleaned up [ 72.752216][ T7250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.796769][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.828425][ T7262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 72.828522][ T7262] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.828818][ T7262] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 72.829270][ T7262] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 72.829402][ T7262] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.648: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 72.829564][ T7262] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.648: couldn't read orphan inode 13 (err -117) [ 72.829577][ T7262] loop5: lost filesystem error report for type 5 error -117 [ 72.830139][ T7262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.902496][ T7265] bond0: option all_slaves_active: invalid value (155) [ 72.927590][ T7265] EXT4-fs: Ignoring removed i_version option [ 72.927642][ T7265] EXT4-fs: Ignoring removed nobh option [ 73.177381][ T7265] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 73.196918][ T7265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 73.196958][ T7265] System zones: 1-12 [ 73.197055][ T7265] EXT4-fs (loop6): orphan cleanup on readonly fs [ 73.197537][ T7265] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.642: corrupted in-inode xattr: overlapping e_value [ 73.197904][ T7265] EXT4-fs (loop6): Remounting filesystem read-only [ 73.198610][ T7265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.199767][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.206474][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.234229][ T4715] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19 [ 73.234248][ T4715] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 73.279247][ T7276] binder: 7274:7276 Acquire 1 refcount change on invalid ref 0 ret -22 [ 73.279275][ T7276] binder: 7274:7276 ioctl c0306201 20000200 returned -14 [ 73.339115][ T7282] pim6reg: tun_chr_ioctl cmd 1074025677 [ 73.339169][ T7282] pim6reg: linktype set to 1 [ 73.378927][ T7287] EXT4-fs: journaled quota format not specified [ 73.380286][ T4715] Bluetooth: hci4: command tx timeout [ 73.460296][ T7293] binder: 7292:7293 ioctl c0306201 20000200 returned -14 [ 73.461221][ T7293] binder: 7292:7293 tried to acquire reference to desc 0, got 1 instead [ 73.461509][ T7293] binder: 7292:7293 transaction call to 7292:0 failed 110/29201/-22, code 0 size 104-24 line 3617 [ 73.461531][ T7293] FAULT_INJECTION: forcing a failure. [ 73.461531][ T7293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.461543][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.1.658 Not tainted syzkaller #0 PREEMPT [ 73.461552][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 73.461557][ T7293] Call trace: [ 73.461560][ T7293] show_stack+0x2c/0x3c (C) [ 73.461578][ T7293] __dump_stack+0x30/0x40 [ 73.461589][ T7293] dump_stack_lvl+0xd8/0x12c [ 73.461599][ T7293] dump_stack+0x1c/0x28 [ 73.461608][ T7293] should_fail_ex+0x418/0x58c [ 73.461620][ T7293] should_fail+0x14/0x24 [ 73.461629][ T7293] should_fail_usercopy+0x20/0x30 [ 73.461640][ T7293] simple_read_from_buffer+0xc4/0x238 [ 73.461650][ T7293] proc_fail_nth_read+0x1a8/0x248 [ 73.461659][ T7293] vfs_read+0x230/0x8c8 [ 73.461670][ T7293] ksys_read+0x12c/0x228 [ 73.461680][ T7293] __arm64_sys_read+0x84/0x98 [ 73.461689][ T7293] invoke_syscall+0x98/0x244 [ 73.461700][ T7293] el0_svc_common+0xec/0x23c [ 73.461713][ T7293] do_el0_svc+0x4c/0x5c [ 73.461722][ T7293] el0_svc+0x60/0x1d8 [ 73.461734][ T7293] el0t_64_sync_handler+0x44/0x104 [ 73.461744][ T7293] el0t_64_sync+0x198/0x19c [ 73.468179][ T5693] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.529498][ T7302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 73.529517][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.534582][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 73.540194][ T7304] vhci_hcd: connection closed [ 73.549067][ T6680] vhci_hcd vhci_hcd.1: stop threads [ 73.549543][ T6680] vhci_hcd vhci_hcd.1: release socket [ 73.549569][ T6680] vhci_hcd vhci_hcd.1: disconnect device [ 73.658011][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.746496][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.804922][ T7318] binder: 7317:7318 ioctl c0306201 20000200 returned -14 [ 73.816064][ T7320] syzkaller0: entered promiscuous mode [ 73.816081][ T7320] syzkaller0: entered allmulticast mode [ 73.827224][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.928276][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.014588][ T7344] 0x00000000feff-0x00000001feff : "" [ 74.018679][ T7344] ftl_cs: FTL header not found. [ 74.021124][ T7344] FAULT_INJECTION: forcing a failure. [ 74.021124][ T7344] name failslab, interval 1, probability 0, space 0, times 0 [ 74.021145][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.5.674 Not tainted syzkaller #0 PREEMPT [ 74.021159][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.021165][ T7344] Call trace: [ 74.021169][ T7344] show_stack+0x2c/0x3c (C) [ 74.021188][ T7344] __dump_stack+0x30/0x40 [ 74.021201][ T7344] dump_stack_lvl+0xd8/0x12c [ 74.021213][ T7344] dump_stack+0x1c/0x28 [ 74.021224][ T7344] should_fail_ex+0x418/0x58c [ 74.021238][ T7344] should_failslab+0xc4/0x120 [ 74.021251][ T7344] kmem_cache_alloc_noprof+0x94/0x5d4 [ 74.021259][ T7344] security_inode_alloc+0x40/0x304 [ 74.021269][ T7344] inode_init_always_gfp+0x704/0xb20 [ 74.021280][ T7344] alloc_inode+0x9c/0x198 [ 74.021290][ T7344] new_inode+0x20/0x50 [ 74.021301][ T7344] bdev_alloc+0x34/0x33c [ 74.021313][ T7344] __alloc_disk_node+0x104/0x494 [ 74.021326][ T7344] __blk_mq_alloc_disk+0x74/0x10c [ 74.021335][ T7344] add_mtd_blktrans_dev+0x738/0x107c [ 74.021349][ T7344] mtdblock_add_mtd+0x158/0x218 [ 74.021357][ T7344] blktrans_notify_add+0xa8/0xf8 [ 74.021364][ T7344] add_mtd_device+0xedc/0x1504 [ 74.021374][ T7344] mtd_add_partition+0x318/0x438 [ 74.021385][ T7344] mtdchar_blkpg_ioctl+0x224/0x248 [ 74.021398][ T7344] mtdchar_ioctl+0x1218/0x1a7c [ 74.021411][ T7344] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 74.021423][ T7344] __arm64_sys_ioctl+0x154/0x1cc [ 74.021435][ T7344] invoke_syscall+0x98/0x244 [ 74.021448][ T7344] el0_svc_common+0xec/0x23c [ 74.021463][ T7344] do_el0_svc+0x4c/0x5c [ 74.021474][ T7344] el0_svc+0x60/0x1d8 [ 74.021487][ T7344] el0t_64_sync_handler+0x44/0x104 [ 74.021500][ T7344] el0t_64_sync+0x198/0x19c [ 74.043777][ T7346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 74.043876][ T7346] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.044183][ T7346] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 74.044565][ T7346] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 74.044695][ T7346] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.675: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 74.044853][ T7346] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.675: couldn't read orphan inode 13 (err -117) [ 74.044865][ T7346] loop0: lost filesystem error report for type 5 error -117 [ 74.045433][ T7346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.413939][ T7362] netlink: 'syz.1.678': attribute type 25 has an invalid length. [ 74.461921][ T7369] set_capacity_and_notify: 9 callbacks suppressed [ 74.461935][ T7369] loop6: detected capacity change from 0 to 2048 [ 74.487038][ T7369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.501524][ T7369] macsec1: entered promiscuous mode [ 74.501541][ T7369] macsec1: entered allmulticast mode [ 74.622049][ T7390] loop5: detected capacity change from 0 to 1024 [ 74.657890][ T7390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.674632][ T7404] 0x00000000fffc-0x00000001fffc : "" [ 74.680461][ T7404] ftl_cs: FTL header not found. [ 74.681113][ T7404] FAULT_INJECTION: forcing a failure. [ 74.681113][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 74.681131][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.1.689 Not tainted syzkaller #0 PREEMPT [ 74.681144][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.681150][ T7404] Call trace: [ 74.681153][ T7404] show_stack+0x2c/0x3c (C) [ 74.681177][ T7404] __dump_stack+0x30/0x40 [ 74.681192][ T7404] dump_stack_lvl+0xd8/0x12c [ 74.681204][ T7404] dump_stack+0x1c/0x28 [ 74.681216][ T7404] should_fail_ex+0x418/0x58c [ 74.681231][ T7404] should_failslab+0xc4/0x120 [ 74.681245][ T7404] __kmalloc_noprof+0x108/0x6c8 [ 74.681254][ T7404] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 74.681264][ T7404] memcg_list_lru_alloc+0xc4/0xf8 [ 74.681272][ T7404] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 74.681285][ T7404] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 74.681294][ T7404] bdev_alloc_inode+0x30/0x9c [ 74.681304][ T7404] alloc_inode+0x68/0x198 [ 74.681315][ T7404] new_inode+0x20/0x50 [ 74.681326][ T7404] bdev_alloc+0x34/0x33c [ 74.681339][ T7404] __alloc_disk_node+0x104/0x494 [ 74.681352][ T7404] __blk_mq_alloc_disk+0x74/0x10c [ 74.681361][ T7404] add_mtd_blktrans_dev+0x738/0x107c [ 74.681376][ T7404] mtdblock_add_mtd+0x158/0x218 [ 74.681383][ T7404] blktrans_notify_add+0xa8/0xf8 [ 74.681391][ T7404] add_mtd_device+0xedc/0x1504 [ 74.681401][ T7404] mtd_add_partition+0x318/0x438 [ 74.681413][ T7404] mtdchar_blkpg_ioctl+0x224/0x248 [ 74.681425][ T7404] mtdchar_ioctl+0x1218/0x1a7c [ 74.681438][ T7404] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 74.681450][ T7404] __arm64_sys_ioctl+0x154/0x1cc [ 74.681463][ T7404] invoke_syscall+0x98/0x244 [ 74.681475][ T7404] el0_svc_common+0xec/0x23c [ 74.681487][ T7404] do_el0_svc+0x4c/0x5c [ 74.681499][ T7404] el0_svc+0x60/0x1d8 [ 74.681511][ T7404] el0t_64_sync_handler+0x44/0x104 [ 74.681523][ T7404] el0t_64_sync+0x198/0x19c [ 74.719551][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.850451][ T7418] loop1: detected capacity change from 0 to 128 [ 74.850787][ T7418] ubifs: Unknown parameter 'auth_' [ 74.858930][ T7420] loop9: detected capacity change from 0 to 524287997 [ 74.943908][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.085938][ T7445] syz.2.704 (7445): /proc/7444/oom_adj is deprecated, please use /proc/7444/oom_score_adj instead. [ 75.114263][ T7450] 0x00000000fffd-0x00000001fffd : "" [ 75.116909][ T7450] ftl_cs: FTL header not found. [ 75.117538][ T7450] FAULT_INJECTION: forcing a failure. [ 75.117538][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 75.117555][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.0.703 Not tainted syzkaller #0 PREEMPT [ 75.117567][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.117573][ T7450] Call trace: [ 75.117576][ T7450] show_stack+0x2c/0x3c (C) [ 75.117596][ T7450] __dump_stack+0x30/0x40 [ 75.117615][ T7450] dump_stack_lvl+0xd8/0x12c [ 75.117627][ T7450] dump_stack+0x1c/0x28 [ 75.117638][ T7450] should_fail_ex+0x418/0x58c [ 75.117652][ T7450] should_failslab+0xc4/0x120 [ 75.117665][ T7450] kmem_cache_alloc_noprof+0x94/0x5d4 [ 75.117674][ T7450] security_inode_alloc+0x40/0x304 [ 75.117683][ T7450] inode_init_always_gfp+0x704/0xb20 [ 75.117695][ T7450] alloc_inode+0x9c/0x198 [ 75.117705][ T7450] new_inode+0x20/0x50 [ 75.117716][ T7450] bdev_alloc+0x34/0x33c [ 75.117729][ T7450] __alloc_disk_node+0x104/0x494 [ 75.117741][ T7450] __blk_mq_alloc_disk+0x74/0x10c [ 75.117750][ T7450] add_mtd_blktrans_dev+0x738/0x107c [ 75.117764][ T7450] mtdblock_add_mtd+0x158/0x218 [ 75.117772][ T7450] blktrans_notify_add+0xa8/0xf8 [ 75.117780][ T7450] add_mtd_device+0xedc/0x1504 [ 75.117790][ T7450] mtd_add_partition+0x318/0x438 [ 75.117801][ T7450] mtdchar_blkpg_ioctl+0x224/0x248 [ 75.117814][ T7450] mtdchar_ioctl+0x1218/0x1a7c [ 75.117826][ T7450] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 75.117838][ T7450] __arm64_sys_ioctl+0x154/0x1cc [ 75.117851][ T7450] invoke_syscall+0x98/0x244 [ 75.117863][ T7450] el0_svc_common+0xec/0x23c [ 75.117874][ T7450] do_el0_svc+0x4c/0x5c [ 75.117886][ T7450] el0_svc+0x60/0x1d8 [ 75.117906][ T7450] el0t_64_sync_handler+0x44/0x104 [ 75.117918][ T7450] el0t_64_sync+0x198/0x19c [ 75.200634][ T7324] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.333217][ T7458] loop2: detected capacity change from 0 to 512 [ 75.335420][ T7458] EXT4-fs: Invalid commit interval 33554432, must be smaller than 21474836 [ 75.432526][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.462128][ T7462] loop2: detected capacity change from 0 to 512 [ 75.470176][ T7462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 75.470621][ T7462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.475135][ T7462] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 75.476740][ T7462] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 75.476947][ T7462] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.709: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 75.476969][ T7462] fserror_report: 4 callbacks suppressed [ 75.476975][ T7462] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 75.478343][ T7462] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.709: couldn't read orphan inode 13 (err -117) [ 75.478366][ T7462] loop2: lost filesystem error report for type 5 error -117 [ 75.479759][ T7462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.483863][ T30] audit: type=1326 audit(2000000009.148:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.483904][ T30] audit: type=1326 audit(2000000009.148:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.483931][ T30] audit: type=1326 audit(2000000009.148:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.483948][ T30] audit: type=1326 audit(2000000009.148:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.483963][ T30] audit: type=1326 audit(2000000009.148:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.483978][ T30] audit: type=1326 audit(2000000009.148:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.483994][ T30] audit: type=1326 audit(2000000009.148:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.484010][ T30] audit: type=1326 audit(2000000009.148:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.484025][ T30] audit: type=1326 audit(2000000009.148:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.484044][ T30] audit: type=1326 audit(2000000009.148:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.0.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d78be8 code=0x50000 [ 75.578527][ T6704] IPVS: starting estimator thread 0... [ 75.593247][ T4715] Bluetooth: hci4: command tx timeout [ 75.594822][ T7466] trusted_key: syz.6.710 sent an empty control message without MSG_MORE. [ 75.796367][ T7467] IPVS: using max 54 ests per chain, 129600 per kthread [ 75.942101][ T7474] loop1: detected capacity change from 0 to 256 [ 75.948300][ T7474] vfat: Unknown parameter 'shogtname' [ 76.044696][ T7488] 0x00000000fffe-0x00000001fffe : "" [ 76.049548][ T7488] ftl_cs: FTL header not found. [ 76.050172][ T7488] FAULT_INJECTION: forcing a failure. [ 76.050172][ T7488] name failslab, interval 1, probability 0, space 0, times 0 [ 76.050190][ T7488] CPU: 0 UID: 0 PID: 7488 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT [ 76.050202][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.050208][ T7488] Call trace: [ 76.050211][ T7488] show_stack+0x2c/0x3c (C) [ 76.050233][ T7488] __dump_stack+0x30/0x40 [ 76.050246][ T7488] dump_stack_lvl+0xd8/0x12c [ 76.050258][ T7488] dump_stack+0x1c/0x28 [ 76.050270][ T7488] should_fail_ex+0x418/0x58c [ 76.050284][ T7488] should_failslab+0xc4/0x120 [ 76.050297][ T7488] __kmalloc_cache_noprof+0x94/0x5fc [ 76.050306][ T7488] percpu_ref_init+0xcc/0x2f0 [ 76.050317][ T7488] blkg_alloc+0xf8/0x6cc [ 76.050329][ T7488] blkcg_init_disk+0x198/0x290 [ 76.050340][ T7488] __alloc_disk_node+0x260/0x494 [ 76.050353][ T7488] __blk_mq_alloc_disk+0x74/0x10c [ 76.050363][ T7488] add_mtd_blktrans_dev+0x738/0x107c [ 76.050377][ T7488] mtdblock_add_mtd+0x158/0x218 [ 76.050385][ T7488] blktrans_notify_add+0xa8/0xf8 [ 76.050393][ T7488] add_mtd_device+0xedc/0x1504 [ 76.050403][ T7488] mtd_add_partition+0x318/0x438 [ 76.050414][ T7488] mtdchar_blkpg_ioctl+0x224/0x248 [ 76.050427][ T7488] mtdchar_ioctl+0x1218/0x1a7c [ 76.050439][ T7488] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 76.050452][ T7488] __arm64_sys_ioctl+0x154/0x1cc [ 76.050465][ T7488] invoke_syscall+0x98/0x244 [ 76.050477][ T7488] el0_svc_common+0xec/0x23c [ 76.050490][ T7488] do_el0_svc+0x4c/0x5c [ 76.050501][ T7488] el0_svc+0x60/0x1d8 [ 76.050514][ T7488] el0t_64_sync_handler+0x44/0x104 [ 76.050526][ T7488] el0t_64_sync+0x198/0x19c [ 76.085709][ T7488] ------------[ cut here ]------------ [ 76.085721][ T7488] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x350/0x744, CPU#0: syz.1.718/7488 [ 76.099036][ T7488] Modules linked in: [ 76.099831][ T7488] CPU: 0 UID: 0 PID: 7488 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT [ 76.101834][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.104085][ T7488] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 76.105853][ T7488] pc : cleanup_srcu_struct+0x350/0x744 [ 76.107097][ T7488] lr : cleanup_srcu_struct+0x2f0/0x744 [ 76.108315][ T7488] sp : ffff800095af70c0 [ 76.109178][ T7488] x29: ffff800095af70f0 x28: 1fffe0001e741023 x27: 1ffff000110c1e4a [ 76.110869][ T7488] x26: dfff800000000000 x25: ffff80008977a960 x24: ffffffffffffffff [ 76.112628][ T7488] x23: ffff80008f4a5ba0 x22: ffff0000f3a08118 x21: fffffdffbf71f6c0 [ 76.114179][ T7488] x20: fffffdffbf71f4c0 x19: 0000000000000000 x18: 1fffe000349f7028 [ 76.115718][ T7488] x17: 0000000000000003 x16: ffff800089777000 x15: 0000000000000000 [ 76.117322][ T7488] x14: 00000000008d856e x13: 0000000000000001 x12: 0000000000000003 [ 76.118972][ T7488] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000268af [ 76.120594][ T7488] x8 : 0000000000000003 x7 : 0000000000000000 x6 : 0000000000000000 [ 76.122182][ T7488] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000805339e4 [ 76.123812][ T7488] x2 : 0000000000000001 x1 : ffff0000d4a83b00 x0 : 0000000000000001 [ 76.125518][ T7488] Call trace: [ 76.126197][ T7488] cleanup_srcu_struct+0x350/0x744 (P) [ 76.127289][ T7488] blk_mq_free_tag_set+0x33c/0x438 [ 76.128333][ T7488] add_mtd_blktrans_dev+0xb78/0x107c [ 76.129505][ T7488] mtdblock_add_mtd+0x158/0x218 [ 76.130543][ T7488] blktrans_notify_add+0xa8/0xf8 [ 76.131526][ T7488] add_mtd_device+0xedc/0x1504 [ 76.132430][ T7488] mtd_add_partition+0x318/0x438 [ 76.133412][ T7488] mtdchar_blkpg_ioctl+0x224/0x248 [ 76.134438][ T7488] mtdchar_ioctl+0x1218/0x1a7c [ 76.135351][ T7488] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 76.136382][ T7488] __arm64_sys_ioctl+0x154/0x1cc [ 76.137445][ T7488] invoke_syscall+0x98/0x244 [ 76.138421][ T7488] el0_svc_common+0xec/0x23c [ 76.139348][ T7488] do_el0_svc+0x4c/0x5c [ 76.140193][ T7488] el0_svc+0x60/0x1d8 [ 76.140995][ T7488] el0t_64_sync_handler+0x44/0x104 [ 76.142038][ T7488] el0t_64_sync+0x198/0x19c [ 76.142954][ T7488] irq event stamp: 1666 [ 76.143810][ T7488] hardirqs last enabled at (1665): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 76.145890][ T7488] hardirqs last disabled at (1666): [] el1_brk64+0x20/0x54 [ 76.147706][ T7488] softirqs last enabled at (1218): [] __alloc_skb+0x1c0/0x610 [ 76.149661][ T7488] softirqs last disabled at (1216): [] __alloc_skb+0x1a8/0x610 [ 76.151648][ T7488] ---[ end trace 0000000000000000 ]--- [ 76.263722][ T6700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.354624][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.380341][ T6700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.422988][ T6700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.497191][ T6700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.727533][ T6700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.744733][ T6700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.770629][ T6700] bond0 (unregistering): Released all slaves [ 76.904257][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 77.053009][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 77.300335][ T6700] hsr_slave_0: left promiscuous mode [ 77.300578][ T6700] hsr_slave_1: left promiscuous mode [ 77.300860][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.300872][ T6700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.301150][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.301160][ T6700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.312083][ T6700] veth1_macvtap: left promiscuous mode [ 77.312127][ T6700] veth0_macvtap: left promiscuous mode [ 77.312193][ T6700] veth1_vlan: left promiscuous mode [ 77.312227][ T6700] veth0_vlan: left promiscuous mode [ 77.420820][ T6700] team0 (unregistering): Port device team_slave_1 removed [ 77.428465][ T6700] team0 (unregistering): Port device team_slave_0 removed [ 77.474362][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 77.671972][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12