last executing test programs: 1m35.883992733s ago: executing program 32 (id=63): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m15.583920663s ago: executing program 33 (id=323): mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1m6.896088464s ago: executing program 34 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2a245b23262d55239e3030303030303030303030303030303031"], 0x33) 53.444566525s ago: executing program 3 (id=625): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8000ffd, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) close(r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) 53.440281364s ago: executing program 3 (id=626): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="273f665d2e41029ec104489af076e60e", 0x10}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 53.41483061s ago: executing program 3 (id=627): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x1}]}]}, {0x0, [0x30, 0x2e, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) (fail_nth: 3) 53.355286776s ago: executing program 3 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bc1ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXbavr7hFZSFGhVEFA1h+gNoCC6EjcYQEiNx5QJqOzRNZ5im0yKtLMrSvYkkrvRPcGNcmLBy4c6d7tzgwgSVaKiJizH3zqUtbacdHqVDO59PcnvvOfd2vufMcM6Ze5jpCaBnnY2ItYgYiIh7ETGS5yf5FjdaW3rdq5ePp9dfPp5Ootm888+kGHlebPmd1Mf5Yw5FxA++G/HjZGfcxsrq/FS1WlnM06NLtYXRxsrqpblCnjMxOT45du3y1YkDq+uZ2m9efGfu1g9//7svPf/T2jd/mhar9LMTsb0e+1vr+MpW1YtR2pLXHxG3Og/2wevP//1w9KSt7TMRcS5r/yPRl72aAMBx1myORHNkaxoAOO7S+/9SJIVyPhdQikKhXG7N4Z2O4UK13li6OFJffjAT2RzWySgW7s9VK2P5XOHJKCZpejw73kxPbEtfjohTEfHzwY+ydHm6Xp3p5hsfAOhhH28b//8z2Br/AYBjbugtr/cRAQA4+t52/AcAjj7jPwD0nrcY/039A8Ax4f4fAHqP8R8Aes++4/+TwykHAHAovn/7dro11/O/fz3zcGX5W6WHl2YqjflybXm6PF1fXCjP1uuz1Up5utnc/M3fTu72eNV6fWH8ykaysbJ6t1ZffrB0d642NVu5WykeRqUAgD2dOvPsL0lErF3/KNtiy1oOxmo43grdLgDQNX3dLgDQNb7PA72rg3t80wBwzO2yRO8b2n5E6KnFX+GouvB58//Qq8z/Q+/6dPP/3z7wcgCHz/w/9K5mM7HmPwD0GHP8wDv9/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qFK2JYVythb4WvqzUC5HnIiIk1FM7s9VK2MR8UlE/HmwOJimx7tdaADgHRX+nuTrf10YOV/afnYg+e9gto+In/zyzi8eTS0tLY6n+f/ayF96mudPDHSjAgDAVjd2ZrXG6Xy/5Ub+1cvH06+3wyzii5utxUXTuOv51jrTH/3ZfiiKETH87yRPt6TvV/oOIP7ak4j43Gb9H22JUMrmQForn26Pn8Y+8R7ibz7/2+MX3ohfyM6l+2L2XHz2AMoCvebZzVY/mbe9tInl7a8QZ7P97u1/KOuh3t3r/m99R/9X2Oj/+nbET7I2f3YjvXdJXlz5w/d2ZDZHWueeRHyhf7f4yUb8pE3/e77DOv71i18+1+5c81cRF2L3+C21rJsdXaotjDZWVi/N1aZmK7OVBxMTk+OTY9cuX50YzeaoWz//uFuMf1y/+Em7+Gn9h9vEH9qn/l/rsP6//t+9H31lj/jf+Orur//pPeKnY+LXO4w/NXyj7fLdafyZNvXf7/W/2GH8539bnenwUgDgEDRWVuenqtXK4j4H6XvN/a5xcDQPYi3iAyhGfjAQH0Qxev6g2z0T8L5tNvpulwQAAAAAAAAAAAAAAGinsbI6Pxjv9+tE3a4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx9f/AwAA///Y/M97") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000240)) (async) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000940)=""/4105, 0x1009}, {&(0x7f0000002dc0)=""/4076, 0xfec}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000600)=""/134, 0x86}], 0x5}, 0x40000020) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000380)={0x1, 0x1, 0x95, 0x6, 0xe7, 0x7, 0x4, 0x7, 0xd, 0x2, 0x9, 0xd9, 0x4, 0x2}, 0xe) (async) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000040)) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x26, 0x0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000073fb663758a098f90000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x20980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x94) 53.214355324s ago: executing program 3 (id=630): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000140)="0000000001000000", 0x8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) 52.492260381s ago: executing program 3 (id=641): syslog(0x4, &(0x7f0000000040)=""/28, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VT_RELDISP(r0, 0x5605) (async) ioctl$VT_RELDISP(r0, 0x5605) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0xc1cf18fdca3c5bf2}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) geteuid() (async) r4 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fchown(r2, r4, r5) fremovexattr(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='us\fe_.#']) 52.481182501s ago: executing program 35 (id=641): syslog(0x4, &(0x7f0000000040)=""/28, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VT_RELDISP(r0, 0x5605) (async) ioctl$VT_RELDISP(r0, 0x5605) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0xc1cf18fdca3c5bf2}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) geteuid() (async) r4 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fchown(r2, r4, r5) fremovexattr(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='us\fe_.#']) 34.017330884s ago: executing program 8 (id=912): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x141000, 0x10, 0x3}, 0x18) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="7506000000000000003d312c73686f72746e616d653d77feedcf712c726f6469726c636851636b3d72656c617865642c757466383d312c726f6469722c6e6f7247ec6d6e756d7461696c3d302c6e66733d7374616c655f77772c73686f77657865632c73686f72746e616d653d6d697865642c636865636b3d73747269616d653d77696e6e742c757466383d302c696f636861727365743d6d616363726f617469616e2c6769643d6ed654fa62f8b3e3a7d3b4d06548465eb0210b42f5ef2cf8ac8e42a023ef4313298606bf50bb8cb590c86db3db943b9da0bd0000000000000000", @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,shortname=mixed,\x00'], 0x7, 0x2a6, &(0x7f0000000240)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x400000000161}}, {@shortname_winnt}, {@numtail}, {@fat=@check_normal}, {@utf8no}, {@utf8}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0xfd, 0x2c7, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = timerfd_create(0x1, 0x0) read(r5, 0x0, 0x0) chdir(0x0) 33.080556924s ago: executing program 8 (id=922): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getnexthop={0x38, 0x6a, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r1}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4060045}, 0x4040000) 33.08026194s ago: executing program 8 (id=923): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9c000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x20040040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x9}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004004}, 0x400d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) 32.982583113s ago: executing program 8 (id=927): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400), 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 32.879230789s ago: executing program 8 (id=929): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000d40)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) listen(r1, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 32.388842602s ago: executing program 8 (id=935): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) timerfd_create(0x300, 0x80800) 32.308535075s ago: executing program 36 (id=935): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) timerfd_create(0x300, 0x80800) 27.475018424s ago: executing program 9 (id=975): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b03000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x40002) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) 27.424063377s ago: executing program 9 (id=977): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000090000009500"/32], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x54e7e1e0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0x2, 0x0, 0x0, @loopback, 0x3c51}}, 0xc, 0x806}, &(0x7f0000000040)=0x90) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x3, 0x1000000000001}) 27.239045383s ago: executing program 9 (id=980): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)="0000000001000000", 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) 27.183124943s ago: executing program 9 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000001010103000000000000000002000000180001801400018008000100ffffffff0e000280e00000010c0019800800010002000000"], 0x38}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read(r1, &(0x7f0000000000)=""/31, 0x1f) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) lseek(r2, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1df) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) writev(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b33, 0xffffffffffffffff) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x109002, 0x0) ioctl$COMEDI_BUFINFO(r6, 0xc02c640e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0xfca804a0, 0x80, 0x0, &(0x7f0000001280)="e548df2a3df92d9269e617cb9c4433a87270bc2235db678b08c5dfe3dc9cda3924da3619879aca9c4fb6e9c1bd6e71378d04d965976833451c11a5af23253ae2711d744f0532db9ac529bb79803a534c4f63059b70fa29552bbb42c1d079275f49c11e6a8f985afe60e0a5e30a241fc78f53b4ce82c7ca48c3a57cca8d004b5f", 0x0, 0x9ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x804008, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 26.185344331s ago: executing program 9 (id=997): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], 0x18, 0x200008c0}, 0x6008045) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="060000000300010000", 0x9) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f00000003c0)=""/68, 0x1ff}) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2d696f202b626c6b696f202d6e65745f7072696f20c2ad91b7c09d381c48e1d256492f4c2615df08"], 0x15) r3 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0xfffffffb, 0xfffefffc, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', r5, 0x10, 0x0, 0xb0, 0x7, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x85f, 0x0, 0xf7, 0x2f, 0x0, @local, @empty}}}}) r6 = fsmount(r3, 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000580)='cpu.pressure\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x7fff7ffc}]}) mq_unlink(0x0) r7 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x800}, &(0x7f0000000380)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r7, 0x6, 0x0, 0x0, 0x0, 0x0) io_setup(0xffff8001, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1000, 0x5, [0x9, 0x1, 0x9, 0x2f, 0x7]}, &(0x7f0000000100)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000140)={r11, 0x400}, &(0x7f0000000200)=0x8) 25.982094722s ago: executing program 9 (id=988): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xb352, 0x400, 0x1, 0x26b}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb839, 0x400, 0x3, 0x314}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e16, 0x4000, 0x2, 0x181}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfcda, 0x6fcc5c2d667b8cf1, 0x0, 0x2f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f1a, 0x400, 0x2, 0x245}}], 0x4, &(0x7f0000001680)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x2, 0x37a, 0x0, &(0x7f0000000680)=@buf_512="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"}}, &(0x7f0000001700)) syz_io_uring_setup(0x68fc, &(0x7f0000001740)={0x0, 0xd78b, 0x4000, 0x0, 0x162, 0x0, r0}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r1, 0x80207501, &(0x7f0000001880)={0x0, 0xffff, 0x8, &(0x7f00000001c0)}) syz_open_dev$ublk_bdev(&(0x7f0000000100), r2, 0x101080) r3 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x9492, 0x110101, 0x6, 0x388}, &(0x7f0000000b40), &(0x7f0000000ac0), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, 0x0, 0x1) r4 = fsopen(0x0, 0x0) lseek(0xffffffffffffffff, 0x40000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x28020480) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000200), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x18) 25.923388767s ago: executing program 37 (id=988): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xb352, 0x400, 0x1, 0x26b}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb839, 0x400, 0x3, 0x314}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e16, 0x4000, 0x2, 0x181}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfcda, 0x6fcc5c2d667b8cf1, 0x0, 0x2f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f1a, 0x400, 0x2, 0x245}}], 0x4, &(0x7f0000001680)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x2, 0x37a, 0x0, &(0x7f0000000680)=@buf_512="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"}}, &(0x7f0000001700)) syz_io_uring_setup(0x68fc, &(0x7f0000001740)={0x0, 0xd78b, 0x4000, 0x0, 0x162, 0x0, r0}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r1, 0x80207501, &(0x7f0000001880)={0x0, 0xffff, 0x8, &(0x7f00000001c0)}) syz_open_dev$ublk_bdev(&(0x7f0000000100), r2, 0x101080) r3 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x9492, 0x110101, 0x6, 0x388}, &(0x7f0000000b40), &(0x7f0000000ac0), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, 0x0, 0x1) r4 = fsopen(0x0, 0x0) lseek(0xffffffffffffffff, 0x40000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x28020480) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000200), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x18) 11.582267024s ago: executing program 6 (id=1150): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt(r2, 0x112, 0x7, 0x0, 0x0) 11.444568174s ago: executing program 6 (id=1151): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6d70aff6b5fdbeffd7a5722c00"]) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @multicast1}, {0x6, @local}, 0x28, {0x2, 0x4e23, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2520000000002020207b1af8ff00000000bda100000000000007010000f8bcd5ffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0xc, 0x90, &(0x7f0000000380)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 11.432678431s ago: executing program 6 (id=1152): rt_sigreturn() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write$smackfs_logging(r0, &(0x7f0000000bc0)=0x2, 0x14) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="65727c6f72733d636f0325b62e5008c1"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4sZmJgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//8JWYxg==") futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) 11.399152379s ago: executing program 6 (id=1154): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x1f, r0, 0x2800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4f58}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000bc0)=""/88, 0x58}, {&(0x7f00000016c0)=""/4082, 0xff2}, {&(0x7f0000000040)=""/167, 0xa7}, {&(0x7f0000000980)=""/112, 0x70}], 0x4}}], 0x3, 0x40002000, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./sys\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c616c6c6f775f7f7296866a64f8823a3a04905d2cb3b10700f0bb99726561643d3c78303030303030303030303030303011362c616c6c6f775f", @ANYRESDEC=0x0, @ANYBLOB=',posixacl,defcontext=user_u,\x00'], 0x0, 0x0, &(0x7f0000000300)="9ecaf4fb1153e18a125b42c7188e34d3db6ae8deead96e32272ce60d4fe7cecaf4bb8789ab7298eefb28a0dc234a3d538c96912a34ffd3d92fd1b21b2f") mkdirat(r2, &(0x7f0000000380)='./file0/file0\x00', 0x12c) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x98, 0x0, &(0x7f0000000d00)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000ac0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000a40)=""/107, 0x6b, 0x2, 0xd}}, &(0x7f0000000b40)={0x0, 0x18, 0x30}}, 0x440}, @increfs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000c40)={@ptr={0x70742a85, 0x1, &(0x7f0000000b80)=""/40, 0x28, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000cc0)={0x0, 0x28, 0x40}}}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x199, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000dc0)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$eJzs3M9vFFUcAPDvTLflt62KP0DQKhqJPwotPw9eMJp40MREDxhPtS0EWajSmgghWj3g0ZB4Nx5N/As86cWoJxOvejckxHABNSZjZna2XZbd0rVbFtjPJ1n2vZ23zPvuzJt5895MA+hbo/k/ScTmiPgtIoZr2esLjNberl05P/XXlfNTSWTZG38mRbmrV85P1YvWv7eplsmyMr+uxXovvB0xWa3OnCnze+ZPvbdn7uy550+cmjw+c3zm9MThw/v37Rw6OHGgK3HmcV3d/tHsjm2vvHXxtamjF9/56Zu8vpvL5Y1xdMmG0dqv29JTXV5Zr21pSCeVHlaEjgxERL65Bov2PxwDsWFx2XC8/GlPKwesqSzLslbn59JCBtzFkuh1DYDeqJ/o8+vf+usWdT1uC5ePRLx/qBb/tfJVW1KJtCwz2HR9202jEXF04e8v81eszTgEAMB1vjsSEc+16v+l8WBDuXvKOZSRiLg3Iu6LiPsjYmtEPBBRlH0oIh7ucP3NMyQ39n/SS/8rsBXK+38vlHNbi/2/f7Mi/tLIQJnbUsQ/mBw7UZ3ZW/4mu2NwXZ4fX2Yd37/06+ftluXxJwtLfcB8/fW+YE16qdI0QDc9OT+5yrAXXf4kYnulKf5CEvVpnCQitkXE9o7+56UrjBPPfL2jXanG/m/r+JfRhXmm7KuIp2vbfyGa4q9L2s5Pjh86OHFgz/qozuz9J8uyYq9YslC+//zLhdfbrX9V8XdBvv03Nu//hcX4R5L1EXNnz50s5mvnonmG+KYu/P5Z22uam8ffev8fSt4s0kPlZx9Ozs+fGY8YSl698fOJpe+W+Upj/Lt3tYo/LY5x9WgfiYh8J94ZEY9GxGNl3R+PiCciYtcy8f/44pPvdh7/MqPyNZ0ealvK45++2faPxu3feWLg5A/fdh5/Xb799xep3eUnKzn+rbSCq/ntAAAA4E6RFvfAJ+nYYjpNx8Zq9/BvjY1pdXZu/tljsx+cnq7dKz8Sg2l9/HO4YTx0vBwbrucnloZgivy+ctz4i4ENRX5sarY63ePYod9tatP+c38M9Lp2wJrzvBb0L+0f+pf2D/1L+4f+pf1D/2rV/j/uQT2AW8/5H/qX9g/9q6n9d/Z0J3BHc/6HvtT22fh0VY/8S9z1iUg7/1YlelrnpIM/DHH7JCprXed1LRf1+sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8FAAD//4sz60A=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0xa93412, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 11.277312878s ago: executing program 6 (id=1156): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000fe0000"], 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r3 = syz_open_pts(r0, 0x200) r4 = dup3(r3, r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x400, 0x80, 0x2, 0xff, 0xb, "cfd73c940438f81e"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xa) 11.166156089s ago: executing program 4 (id=1158): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x2000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xfffffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f910, 0x976, '\x00', @p_u32=&(0x7f0000000200)=0x77bd4698}}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3000}) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x3, 0x0, 0x8, 0x48000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x40000000006}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x1a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x58, 0x0, &(0x7f0000000000)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaabbbb86dd6a1b81000018110000000000000000000000000000000000ff020000000000000000000000007788acce9100014e254e20001890780400400005000000090002"], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000740)={@broadcast, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "8fa2e84feee1b96033a7e853272b6c54bac9200a687a0fe733e9ebc22edb395a", "31c17fbe726b3c86a494b8f33654492a", {"46e0f9f4af2bf55f921cacbb11459fcb", "f8b8dbbd8c105d9af9e9247d607536cc"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@empty, 0x0, 0x1000, 0x4e21, 0x0, 0x2}, {0x3, 0x5, 0x0, 0x5, 0x3fb, 0x1fffffc, 0xfffffbfffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x9, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x80000000, 0xec0a}}, 0xe8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8ede", 0x4}], 0x2}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") 10.67656706s ago: executing program 4 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000b5a1d97b01b6523e84be6c0607da845396b06f5a9032f386c5660cc1e7b8870000000000000000005b236b9c6af6247c707f0b45ef28d86431876e74a1bda3397504b3557a6b26440f19327384d31d3cced42a4d6aabc7e350b3b3e2bfeb3ab8ec741946674b24d67aad5a36f4a271dbfeef5b9dac9577c3b00db99d8101d89a3016aae968e4b1d52f5794f2319d9345e779c73faf18c34b09592f583f47c3601e61daff73e2598370558a04ca4dd5c478b2552aed881230f065a7136bf7eabcf0eb6bc739dd0e15db3f0435724847f6cb488547", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.371254511s ago: executing program 6 (id=1161): socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x400, 0x13, 0x200, 0x2, 0x1b, "088aefdd2000000000000600"}) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240a00001e000100e14400000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000040005000c0003000000"], 0x24}}, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async, rerun: 64) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) (async, rerun: 64) socket$inet6(0x10, 0x2, 0x4) (async) socket(0x2000000015, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 10.233884681s ago: executing program 38 (id=1161): socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x400, 0x13, 0x200, 0x2, 0x1b, "088aefdd2000000000000600"}) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240a00001e000100e14400000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000040005000c0003000000"], 0x24}}, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async, rerun: 64) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) (async, rerun: 64) socket$inet6(0x10, 0x2, 0x4) (async) socket(0x2000000015, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 10.21873308s ago: executing program 4 (id=1165): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0xf00) 10.137328438s ago: executing program 4 (id=1168): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x1f, r0, 0x2800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4f58}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000bc0)=""/88, 0x58}, {&(0x7f00000016c0)=""/4082, 0xff2}, {&(0x7f0000000040)=""/167, 0xa7}, {&(0x7f0000000980)=""/112, 0x70}], 0x4}}], 0x3, 0x40002000, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./sys\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c616c6c6f775f7f7296866a64f8823a3a04905d2cb3b10700f0bb99726561643d3c78303030303030303030303030303011362c616c6c6f775f", @ANYRESDEC=0x0, @ANYBLOB=',posixacl,defcontext=user_u,\x00'], 0x0, 0x0, &(0x7f0000000300)="9ecaf4fb1153e18a125b42c7188e34d3db6ae8deead96e32272ce60d4fe7cecaf4bb8789ab7298eefb28a0dc234a3d538c96912a34ffd3d92fd1b21b2f") mkdirat(r2, &(0x7f0000000380)='./file0/file0\x00', 0x12c) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x98, 0x0, &(0x7f0000000d00)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000ac0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000a40)=""/107, 0x6b, 0x2, 0xd}}, &(0x7f0000000b40)={0x0, 0x18, 0x30}}, 0x440}, @increfs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000c40)={@ptr={0x70742a85, 0x1, &(0x7f0000000b80)=""/40, 0x28, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000cc0)={0x0, 0x28, 0x40}}}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x199, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000dc0)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0xa93412, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 9.90624778s ago: executing program 4 (id=1171): syz_emit_ethernet(0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaafd0180c240000286dd60fc414a002c3c0020010000000000000000000000000001fe8000aa0003000000000000c910ff02000000565864b18692100000000000000000000001f904e12cbe2e0084d8ac5fb9d421664c06c126aa4833397911e6359651d316e9888e481f7e3ee1e48792cb34aa1c2b4a022f2044362d0e4bad77dc098f94ba0efef674dd2b8b6eb63d074710aa00408333bbeb333849c9f778c784bbd379aad23e1bc2bf47b36af9f49d76ec5feaa14efd1920b208d0691716da2d0856588caa9d47bfb1904e813e029508"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001200010a2bbd70000000000080000000a07443d2ae29cda2986cafc8f476ec29a3c8f4ad11e1c5d17e2a0da76a5fa252cd14f71361059bf36031c1ef764fa17ad4b2ffa77bdb9c00faee39be34437eaa"], 0x14}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fanotify_init(0x500, 0x400) r4 = fcntl$dupfd(r2, 0x406, r2) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.584206727s ago: executing program 4 (id=1175): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r9 = socket(0x40000000015, 0x805, 0x0) getsockopt(r9, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8930, &(0x7f00000002c0)={'wlan1\x00'}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r11 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0xf0d, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffb}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x599}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000010) 9.515902217s ago: executing program 39 (id=1175): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r9 = socket(0x40000000015, 0x805, 0x0) getsockopt(r9, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8930, &(0x7f00000002c0)={'wlan1\x00'}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r11 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0xf0d, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffb}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x599}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000010) 3.336451788s ago: executing program 0 (id=1219): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x170bd26, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187014, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0x52, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x20000010) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000001240), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001) 3.026792348s ago: executing program 7 (id=1223): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) 2.964357988s ago: executing program 7 (id=1224): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 2.94595792s ago: executing program 2 (id=1226): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) 2.929310007s ago: executing program 2 (id=1227): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x1, 0x0, 0x64}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x20000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x3, 0x70bd2c, 0x25dfdbfe, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000002c0)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x0, 0x0, 0x40, "36a17181beae1d86c9fc2af47e84e12da917e3c98ca335413f7d4de1fd2c2264", 0x34363248}) r5 = syz_open_pts(r4, 0x141401) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x4, 0x2, 0x8}) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000200)={0x9, 0x9d5c, 0x0, 0xfffc}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x17, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x800}) close(r0) 2.926285651s ago: executing program 7 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="f00000001000010027bd700000010000ff010000000000000000000000000001ac14143d000000000000000000000000008107144e230405020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d4460000000000000000000000000000000000000000000000000000000400000000000000000000000000000002000100000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000fbffffffffffffff00000000020000001f00000000000000020000000000000002000000fcffffff000080002abd7000043500000a0001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="5e05ceef2f37ec930f87ff754cbede3a69b39d6961f49618363ce7536b5dd5b4cd9fed6fce890e7c6df0c884d17b978f72de5470a2a2561d78c61237ac74d42ef95d2b1f0452d6717f24505d35ed4fd0e0e85164a5ae58ff79496180", @ANYBLOB="df726ce2f6609302ffffb65fa52899f70bd3dc0a7c045d8ce9663e93496fa815902aa836d3a6d5f146b572c1d8d85e553dde16a7174956c654c3d8ab297644d8fab45ddd72322893e4fe3b91c5a244245dd9627caa411c2d6119c597c89d3d41acafb0252280505c37eafb2dcfdf6e312db5faa1de335127e296c4741c42009f16502a81a5e6a253000d6d86b86a13b4f91aac6f15b1bacb5a"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000280)=0x1) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffb}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2a000200010078", 0x7) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x6000004, 0x100010, r5, 0x48275000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4ef, 0x0, 0x13, r8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000080)={@none, 0x0, 0x3, 0x1ff, 0xfffb, 0x8000, "095e1361f67b906fcd5e9c53fe141407a41978a0d9d02899c9a8b1b8f0647615824413be3be435b6da6b0ca21bb0921811d624c8000fc048a5137c9a481e386109f223e79046bfadee264969425e8d32f8d3b7e55843424d675863053fa562f0f7a7c157d667d629cd7319c8ffc332642682590136d4cfea80fe42b1d2c06d42"}) ioctl(r2, 0x9, &(0x7f0000000340)="fc944a6f1530572fbaec147805de07498cc60541ae580daf55658d84eec4192abcc8884b5cda3499dc8d21") r9 = semget(0x1, 0x4, 0x39c) r10 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000003140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r10, &(0x7f0000003180)='0\x00', 0x2) semop(r9, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r9, &(0x7f0000000200)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x800}], 0x2) semctl$IPC_RMID(r9, 0x0, 0x0) semtimedop(r9, &(0x7f00000002c0)=[{0x1, 0x5}, {0x1, 0x3, 0x800}, {0x0, 0x400, 0x1000}], 0x3, &(0x7f0000000300)={0x0, 0x989680}) write$UHID_INPUT(r8, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) 2.81446937s ago: executing program 0 (id=1230): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") (async) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x113402, 0x49) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './bus'}, 0x9) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000004) fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='\x00\x00\x00', &(0x7f0000001280)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xc8&\xd3\x80\x92\xbe\n\xe8\x1b\xf9\xde\xa6D>\xac\xd4%\xe2\xacaW\xc3n\xe7K\xea\xb4\x86Kth\x98\xc4\xbb\xdey\xc8\xa9\x17\xb1\xf0v~%\xb8\xaeD\xb2$\xd0\x1cV\x04\x1c\xe8nlq\xb1\x7f\x1b\xea\x1d\x0fK\x06\xcc0-\\\x02\x02B=\xe8\x14\xc3\xacn\xb3\x18\x05\xaa\x887\xd8\x82\x8c9\x02\xf7G\xa2D\xe9U\xa0\x01\xf0L\xc1\xcd\x97\x04Az\xe1x;\xbbwK\x81/\xdc\xfcC\xaf\xc4K\xf4\xff\xb5\xdap\x92\xd3\xc7!\xca1\x8cs\x8d\x06\x8f\x06\xbac\x94-?]\x8bI\xdd\n|1\x9f\x03\xebr@\x96\xfbWX\x1b\xb9k\x13\xb5O\xe4cdO\x12\x80\xa6q\x84C\x92\xf3<3\xd2\xa5\xea*\xde\xb9w8=\x82L*\xf4\x1ag\xb7\xfcAi\x11\xe0\xdeJ\xd1\x8a0xffffffffffffffff}) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x50) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x53}, 0x6}], 0x1, 0x4c62ba6ed3, 0x0) (async) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0x1}], 0x1}}], 0x1, 0x400c015) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x8d, &(0x7f00000000c0)=[{0xcf84, 0x7, 0xa9, 0x1}, {0xa247, 0x2, 0x6, 0x2}]}) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) r7 = socket$inet6(0xa, 0x2, 0x0) close(r7) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x24e001, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_int(r7, 0x29, 0xcb, &(0x7f0000000040)=0x2005, 0x4) (async, rerun: 64) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @mcast1, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000037000037c5a581568fd11a0021000000f0ffffff"], 0x18}, 0x2404c082) 2.336508274s ago: executing program 0 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x2}, 0x4}) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 2.327469505s ago: executing program 2 (id=1236): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (fail_nth: 3) 2.239805631s ago: executing program 2 (id=1237): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0xc0403d11, 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@nouid32}, {@inlinecrypt}, {@noload}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xfd, 0xbe0, &(0x7f0000001c00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@nouid32}, {@inlinecrypt}, {@noload}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xfd, 0xbe0, &(0x7f0000001c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r2, &(0x7f0000000500)="06000000000000000200000004feffffff0000000000000000000000030000006c733100"/104, 0x68) fdatasync(r1) (async) fdatasync(r1) 2.196882945s ago: executing program 0 (id=1238): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) 2.196367355s ago: executing program 0 (id=1239): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) 2.104731821s ago: executing program 0 (id=1240): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x721000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x5c}, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4000814) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) landlock_create_ruleset(0x0, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x1fe000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x1) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 1.988991782s ago: executing program 2 (id=1241): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000000380)="e12cfad84c", 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000004c0)={r1}) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xcf0be2279761c16b) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) getsockopt(0xffffffffffffffff, 0x110, 0xc0000000, 0x0, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000280)={0xa, {"8d0000f692eec800", "000900000000000200"}, 0x7, 0x4}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) 1.707603818s ago: executing program 5 (id=1244): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x82, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x6}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x92b0, 0xa8a, 0xfd}}, @l2cap_conf_rsp={{0x5, 0x5, 0x19}, {0x2, 0xfffa, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xfff9}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x10, 0x4, 0x4, 0x2}}]}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x3, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x7, 0xec}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x7}}]}}, 0x4a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) unshare(0x20000100) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\\-*%{@+<),@:$'}, {0x20, 'devtmpfs\x00'}, {}, {0x20, 'devtmpfs\x00'}, {0x20, '/dev/sg0\x00'}], 0xa, "0368e4bc849ca77041cf11becbf7931416a9f739b8ca6738936650fee20a4d"}, 0x57) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x46a, 0x40, 0x5e, 0x8}, {0xfff1, 0xf1, 0x2, 0x400}, {0xff01, 0x6, 0x7, 0x3}, {0x8f5, 0x4, 0x58}, {0x2, 0xfb, 0xff, 0x71fb}]}) unshare(0x50800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000400)='./file1\x00', 0xa000, 0x81) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000480)={0x0, 'wg2\x00', {0x3}, 0x51}) r6 = syz_ublk_setup_io_uring(0x34f, &(0x7f00000004c0)={0x0, 0xe747, 0x9497f6e879db759d, 0x2, 0x26d, 0x0, r4}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @broadcast}, &(0x7f0000000640)=0xc) connect$packet(r5, &(0x7f0000000680)={0x11, 0xf6, r7, 0x1, 0x6, 0x6, @random="54418e082f5e"}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r8 = geteuid() mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x100000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}, {@access_any}, {@mmap}, {@msize={'msize', 0x3d, 0x3}}, {@cache_none}, {@access_client}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@uid_eq}, {@subj_type={'subj_type', 0x3d, '/dev/userfaultfd\x00'}}, {@uid_gt={'uid>', r8}}, {@euid_lt}]}}) 1.212810496s ago: executing program 1 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.171037839s ago: executing program 1 (id=1250): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) 1.128550353s ago: executing program 1 (id=1251): mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 669.112093ms ago: executing program 2 (id=1252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000040)) 655.74423ms ago: executing program 5 (id=1253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) 603.204948ms ago: executing program 5 (id=1254): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc040564a, &(0x7f00000000c0)={0x101b}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x5, 0x4800003e, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012bf14000000000000000000fe80000000000000000000000000002bfffffffd0000000014000d00200100000000000000000000000000000c001a"], 0x48}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x2, 0xfff, 0x2, 0x1}, 0x3d, [0x7fff, 0x8004, 0x7b, 0x3, 0x1, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0x86, 0x0, 0x3, 0x7ff, 0x8001, 0xf, 0x9, 0x503e47c1, 0xcde, 0x5, 0x3, 0x0, 0x5, 0x0, 0x6, 0x6, 0x498c, 0x2, 0x10, 0x4, 0x0, 0xe, 0x80000001, 0x6, 0x3, 0x2, 0x9e08, 0xc3, 0x8, 0xa, 0x10, 0x4430, 0xfffffffa, 0x5, 0x8, 0x109, 0x25, 0x8, 0x8, 0x1, 0x200, 0x9, 0x0, 0x1, 0x0, 0x8, 0x9, 0xd, 0x0, 0x5, 0x1, 0xc4b2, 0x5a, 0x9], [0x8, 0x5, 0xb54, 0x7, 0x6, 0x1000, 0x8, 0xb9, 0x0, 0x1, 0x7fffffff, 0x2, 0x3, 0x7f, 0x2f4, 0x3, 0x0, 0x80000000, 0x6, 0x7fff, 0x0, 0x0, 0xffa, 0x8, 0xb1, 0x4, 0xfffffef9, 0x9, 0x8, 0x15e, 0x6994412a, 0x3, 0x78, 0x8001, 0x0, 0x3, 0xe45e, 0x4000000, 0x6, 0x7f, 0x2, 0x80000001, 0x9, 0x80, 0x0, 0x200, 0x5, 0x5, 0x4a, 0x97, 0x8, 0x80000000, 0xffffff22, 0x80000000, 0x9, 0xfffff170, 0x6, 0x101, 0x7761, 0x100, 0xfffffff8, 0x3, 0x6, 0x8000], [0x3eda, 0x8, 0x3, 0x20dc, 0x2, 0x4, 0x4, 0x8f4ab43, 0x1, 0x9e6, 0x9, 0x6, 0x31f7, 0x1, 0x5, 0x9, 0xd0, 0xb8b0, 0xb, 0x8000, 0x800003, 0x8, 0xffff, 0xf85, 0x4f, 0x3, 0x9, 0x6, 0xfffffffc, 0x7, 0xff, 0x5, 0xd, 0x8, 0xb84, 0x7, 0x8, 0x8000, 0x4e501595, 0x3, 0x50000, 0x1, 0x3, 0x9, 0x9, 0xfff, 0x3, 0x5, 0x4, 0x5, 0xfff, 0x2, 0x2, 0x400, 0x6, 0x2, 0xfffffff9, 0x631ab3bb, 0x5, 0x5c5b, 0x503, 0x8, 0x1, 0x2], [0x9, 0x0, 0x3ff, 0x5, 0xffffffff, 0x0, 0x1, 0xb1e, 0x0, 0x47, 0x2, 0x1, 0xfffffffb, 0x8, 0x81, 0x7, 0x0, 0x6, 0xff000000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8, 0x9, 0x8, 0x8001, 0x9, 0xf0d, 0x5, 0x2, 0x101, 0x5, 0x9, 0x7ffc, 0x0, 0x2, 0xb, 0x3, 0x0, 0x9, 0x2, 0x4, 0x10001, 0x1ff, 0x3ff, 0x6, 0x80, 0x1, 0xb, 0x1ff, 0x0, 0x0, 0x4, 0x6e, 0xdb35, 0x8, 0x5, 0x8001, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) write$input_event(r4, &(0x7f0000000140)={{0x77359400}, 0x15, 0x7, 0xfffffffe}, 0x18) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x7, 0x3, 0x10, 0x2, 0x9, 0x5}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 428.415518ms ago: executing program 5 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000001f540)) (fail_nth: 3) 398.510065ms ago: executing program 5 (id=1256): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x50004, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x4b6ecc4d802e1d46, '\x00', @auto="6ae4efd915aadc889755afb95c8eee3e"}) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x60, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 358.787387ms ago: executing program 5 (id=1257): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x400, 0x800}, {0x1, 0xb7ba, 0x1000}], 0x2) semctl$GETNCNT(r0, 0x2, 0xe, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0xffffffffffffff7b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = getpid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r3, 0x0, 0x18, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r4, 0x800a6f2f, &(0x7f0000001080)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000001040)=r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x20000003, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) request_key(&(0x7f0000000080)='blacklist\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 227.140545ms ago: executing program 1 (id=1258): syz_emit_ethernet(0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaafd0180c240000286dd60fc414a002c3c0020010000000000000000000000000001fe8000aa0003000000000000c910ff02000000565864b18692100000000000000000000001f904e12cbe2e0084d8ac5fb9d421664c06c126aa4833397911e6359651d316e9888e481f7e3ee1e48792cb34aa1c2b4a022f2044362d0e4bad77dc098f94ba0efef674dd2b8b6eb63d074710aa00408333bbeb333849c9f778c784bbd379aad23e1bc2bf47b36af9f49d76ec5feaa14efd1920b208d0691716da2d0856588caa9d47bfb1904e813e029508"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001200010a2bbd70000000000080000000a07443d2ae29cda2986cafc8f476ec29a3c8f4ad11e1c5d17e2a0da76a5fa252cd14f71361059bf36031c1ef764fa17ad4b2ffa77bdb9c00faee39be34437eaa"], 0x14}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fanotify_init(0x500, 0x400) r4 = fcntl$dupfd(r2, 0x406, r2) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) 122.20374ms ago: executing program 1 (id=1259): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) gettid() r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r3, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r2, 0x2b, 0x0, @val=@target_btf_id=r3}, 0x14) write(r0, 0x0, 0x0) 15.986315ms ago: executing program 7 (id=1260): r0 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)=')}\xc1,\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x4]}, {0x1, 0x4, 0x4}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) ioctl$FE_READ_BER(r1, 0x80046f46, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@private1, 0x9, 0x0, 0x2, 0xa, 0x6, 0xfff}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fstatfs(r1, &(0x7f0000000200)=""/98) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xe9, 0x200}}, './file0\x00'}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000002c0)={0x0, 0x2}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) chdir(&(0x7f0000000340)='./file0\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380)=0x0) syz_open_procfs$pagemap(r4, &(0x7f00000003c0)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000400)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x200083, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000480)={{r3}, 0x1000, 0xf6, 0x76}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000004c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$TCSBRK(r3, 0x5409, 0xffff) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000500), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000540)={0x3, 'vxcan1\x00', {0x8e}, 0x5}) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000580)=0x2) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f00000005c0)={0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000600)={r6}) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@random={'user.', ')}\xc1,\x00'}) ioctl$FE_READ_SNR(r1, 0x80026f48, &(0x7f00000006c0)) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000700)={0x0, @frame_sync}) r7 = syz_usb_connect$uac1(0x1, 0xda, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x83, 0x130, 0x38, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3b}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x4, 0x1, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x501, 0x4, 0xa, 0x7, 0xc2, 0xb5}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x2, 0x4, 0x0, 0x0, 0x6}, @selector_unit={0xb, 0x24, 0x5, 0xd, 0xd, "656f85793bad"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x3, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0x2, 0x50, {0x7, 0x25, 0x1, 0xc, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4b, 0xf, 0x10}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x10, 0xf, 0xb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xd511, 0x40, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x7fff, 0x8, "4affa247bfb7fd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x3, 0x9, {0x7, 0x25, 0x1, 0x8, 0x7, 0x81}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x110, 0xd, 0xa8, 0x4, 0x10, 0x5}, 0x8, &(0x7f0000000900)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x5, &(0x7f0000000940)=@string={0x5, 0x3, "42c453"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x2a, &(0x7f00000009c0)=@string={0x2a, 0x3, "591bed313941840a54cdf2b8312fc9038323d3583e52f36341391abc2146c4ec1fee21d32d0f24c9"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000b00)={0x14, &(0x7f0000000a40)={0x40, 0x30, 0x5a, {0x5a, 0xd, "e9f3fec97c797058ce10c4e030b25ba64a210bb8328383d038834cf3830dd8e7ae20264b60014ac61da7710ecb7e1febb823f0803cdbb8ce2b2e59281041c1c3e82b25137b2ab11f247b53d8f4a77262a63f5e35ccf01a88"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x15, @string={0x15, 0x3, "0e4564e1acb8dda1a25586279a69ff3ac0c27b"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x60, 0x30, 0x4b, "5b855502751146be61f107b2ad802ca155b6f1b5689460a0b81737ef369e8f75f375b1a9ab0e6b70071ba364baa450c08b8fa4592336d848534c600fe6355b49fd5a2a6478bf3c83a93158"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x81, 0x2, "eae1"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "1476bc"}, &(0x7f0000000cc0)={0x20, 0x83, 0x1, "87"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "25427f"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "b61420"}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r1) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48810}, 0x40085) 0s ago: executing program 1 (id=1261): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x7, 0x7fffffff, 0x1, @private1, @rand_addr=' \x01\x00', 0x40, 0x8000, 0x0, 0xffff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex=r0, 0xe, 0x0, 0xfff, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279rW1cUB/AjxcI0GbJkyuRkaKFkScgYQZMgKQkJCDVeQgsJJIQ0mhQIKFRgSIZEQ0I0GI9ejEGLf0yWRXEXGxs8G9PBYPBgKC32UvBiFdu3S4fiYplS+Hzgcbj3fu877/wBL/hfy8bvvV4vExG9wcONb/6e6P3D7eF2oXh3qHyz8jAiEz9ExK9DX/10cJL56/bRW+NyWm+k9cT42e6H3Tu59i/f/vHl48VmNp2PlLIxEhHnJjvDfRuSUzOVXzr/9l2t9LGef7Feamy9X1t9ML1TqHTuN1sz93K3n6bccqoDqb6KeryJl/EkqlGNZ1HrU/+x9ubV/Yul9tzzG3vF7qeFaylXjogzJ5z1OP1fX/r8qNW4dWX2wuj1+vxKZfuwaS+qg6fQHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvpvKL51/+65W+ljPv1gvNbber60+mN4pVDr3m62Ze7nbT1NuOdWBVF9FPd7Ey3gS1cjEs6j1qf9Ye/Pq/sVSe+75jb1i99PCtZQrn3DO4/Z/fenzo1bj1pXZC6PX6/Mrle0zR7nq4Cl9AAAAAAAAAAAAAAAAAAAAAEREoXh3qHyz8jAiE9/FQHz924/Zg/1e+t89E/H9zxFxOeU30v7E+Nnuh907ufbB4vFi84t0PpKec5Od4f9gHP6lPwMAAP//+g2V7g==") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) recvmmsg(r1, &(0x7f0000000c40)=[{{&(0x7f0000000700)=@generic, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/35, 0x23}, {&(0x7f0000000b80)=""/92, 0x5c}, {0x0}], 0x3}, 0x6}], 0x1, 0x2000, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x6008045) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000600), 0x400001, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000640)={0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000680)={0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f00000006c0)={0x853, 0x2, 0x0, 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0xff, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000c80), 0x404000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x2}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000540)={r10}) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r14, 0x20ffff) fcntl$addseals(r14, 0x409, 0x7) r15 = ioctl$UDMABUF_CREATE(r12, 0x40187542, &(0x7f00000002c0)={r14, 0x3, 0x0, 0x1000000000000}) r16 = fcntl$dupfd(r15, 0x0, r13) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r16}) ioctl$DRM_IOCTL_GEM_CLOSE(r11, 0x40086409, &(0x7f0000000000)={r17}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r2, 0xc010644f, &(0x7f00000007c0)={{0x18, 0xa, &(0x7f0000000a80)=[{r3, 0x1, 0x1, 0x5}, {0x0, 0x1, 0x1, 0x4}, {0x0, 0x1, 0x3}, {r5, 0x0, 0x4, 0x13}, {r4, 0x1, 0xffc0000, 0x101}, {r10, 0x1, 0xb, 0x5cb}, {r17, 0x1, 0x80, 0x80000001}, {r5, 0x1, 0x100000001, 0x5}, {r4, 0x0, 0x7, 0x80}, {r17, 0x0, 0x20000000000008, 0x5}]}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000a00)) kernel console output (not intermixed with test programs): e 08/14/2026 [ 99.595220][ T8285] Call trace: [ 99.595222][ T8285] show_stack+0x2c/0x3c (C) [ 99.595243][ T8285] __dump_stack+0x30/0x40 [ 99.595256][ T8285] dump_stack_lvl+0xd8/0x12c [ 99.595265][ T8285] dump_stack+0x1c/0x28 [ 99.595275][ T8285] should_fail_ex+0x418/0x58c [ 99.595287][ T8285] should_fail+0x14/0x24 [ 99.595297][ T8285] should_fail_usercopy+0x20/0x30 [ 99.595307][ T8285] simple_read_from_buffer+0xc4/0x238 [ 99.595319][ T8285] proc_fail_nth_read+0x1a8/0x248 [ 99.595327][ T8285] vfs_read+0x230/0x8c8 [ 99.595338][ T8285] ksys_read+0x12c/0x228 [ 99.595348][ T8285] __arm64_sys_read+0x84/0x98 [ 99.595357][ T8285] invoke_syscall+0x98/0x244 [ 99.595373][ T8285] el0_svc_common+0xec/0x23c [ 99.595383][ T8285] do_el0_svc+0x4c/0x5c [ 99.595393][ T8285] el0_svc+0x60/0x1d8 [ 99.595402][ T8285] el0t_64_sync_handler+0x44/0x104 [ 99.595411][ T8285] el0t_64_sync+0x198/0x19c [ 99.744635][ T8292] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 99.833446][ T8299] binder: 8297:8299 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 99.833468][ T8299] binder: 8299 RLIMIT_NICE not set [ 99.906521][ T8294] FAULT_INJECTION: forcing a failure. [ 99.906521][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 99.906545][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.5.874 Tainted: G L syzkaller #0 PREEMPT [ 99.906559][ T8294] Tainted: [L]=SOFTLOCKUP [ 99.906562][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.906567][ T8294] Call trace: [ 99.906570][ T8294] show_stack+0x2c/0x3c (C) [ 99.906588][ T8294] __dump_stack+0x30/0x40 [ 99.906598][ T8294] dump_stack_lvl+0xd8/0x12c [ 99.906608][ T8294] dump_stack+0x1c/0x28 [ 99.906617][ T8294] should_fail_ex+0x418/0x58c [ 99.906628][ T8294] should_failslab+0xc4/0x120 [ 99.906639][ T8294] kmem_cache_alloc_noprof+0x94/0x5d4 [ 99.906653][ T8294] vm_area_dup+0x34/0x5c8 [ 99.906664][ T8294] __split_vma+0x1a8/0x83c [ 99.906673][ T8294] vma_modify+0x1290/0x18f0 [ 99.906682][ T8294] vma_modify_flags+0x228/0x33c [ 99.906691][ T8294] mlock_fixup+0x290/0x624 [ 99.906698][ T8294] apply_vma_lock_flags+0x2e4/0x404 [ 99.906706][ T8294] do_mlock+0x464/0x638 [ 99.906712][ T8294] __arm64_sys_mlock+0x80/0xb4 [ 99.906719][ T8294] invoke_syscall+0x98/0x244 [ 99.906729][ T8294] el0_svc_common+0xec/0x23c [ 99.906739][ T8294] do_el0_svc+0x4c/0x5c [ 99.906748][ T8294] el0_svc+0x60/0x1d8 [ 99.906758][ T8294] el0t_64_sync_handler+0x44/0x104 [ 99.906767][ T8294] el0t_64_sync+0x198/0x19c [ 100.038923][ T8313] FAULT_INJECTION: forcing a failure. [ 100.038923][ T8313] name failslab, interval 1, probability 0, space 0, times 0 [ 100.038946][ T8313] CPU: 1 UID: 0 PID: 8313 Comm: syz.7.882 Tainted: G L syzkaller #0 PREEMPT [ 100.038961][ T8313] Tainted: [L]=SOFTLOCKUP [ 100.038965][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.038970][ T8313] Call trace: [ 100.038973][ T8313] show_stack+0x2c/0x3c (C) [ 100.038992][ T8313] __dump_stack+0x30/0x40 [ 100.039003][ T8313] dump_stack_lvl+0xd8/0x12c [ 100.039013][ T8313] dump_stack+0x1c/0x28 [ 100.039022][ T8313] should_fail_ex+0x418/0x58c [ 100.039034][ T8313] should_failslab+0xc4/0x120 [ 100.039045][ T8313] __kvmalloc_node_noprof+0x160/0x7fc [ 100.039054][ T8313] xt_alloc_table_info+0x58/0xc4 [ 100.039063][ T8313] do_ip6t_set_ctl+0x850/0xc38 [ 100.039073][ T8313] nf_setsockopt+0xa0/0xe4 [ 100.039083][ T8313] ipv6_setsockopt+0x130/0x16c [ 100.039090][ T8313] udpv6_setsockopt+0xa8/0xc0 [ 100.039099][ T8313] sock_common_setsockopt+0xb0/0xcc [ 100.039107][ T8313] do_sock_setsockopt+0x1f0/0x330 [ 100.039116][ T8313] __sys_setsockopt+0x104/0x170 [ 100.039123][ T8311] macsec1: entered promiscuous mode [ 100.039124][ T8313] __arm64_sys_setsockopt+0xc8/0xe4 [ 100.039134][ T8313] invoke_syscall+0x98/0x244 [ 100.039138][ T8311] macsec1: entered allmulticast mode [ 100.039145][ T8313] el0_svc_common+0xec/0x23c [ 100.039154][ T8313] do_el0_svc+0x4c/0x5c [ 100.039164][ T8313] el0_svc+0x60/0x1d8 [ 100.039173][ T8313] el0t_64_sync_handler+0x44/0x104 [ 100.039182][ T8313] el0t_64_sync+0x198/0x19c [ 100.187929][ T8308] loop5: detected capacity change from 0 to 8192 [ 100.197490][ T8308] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.216194][ T8323] loop7: detected capacity change from 0 to 2048 [ 100.388871][ T8323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.400079][ T8323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.977918][ T8334] loop7: detected capacity change from 0 to 2048 [ 100.984450][ T8334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.023000][ T8337] binder: 8336:8337 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.023026][ T8337] binder: 8337 RLIMIT_NICE not set [ 101.050277][ T8339] loop4: detected capacity change from 0 to 512 [ 101.055145][ T8339] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 101.066163][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.074266][ T8339] EXT4-fs (loop4): 1 truncate cleaned up [ 101.074755][ T8339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.108115][ T8339] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 101.115583][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.288161][ T30] audit: type=1326 audit(101.280:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8349 comm="syz.4.894" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff85379368 code=0x0 [ 101.394417][ T8352] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 101.411027][ T8354] FAULT_INJECTION: forcing a failure. [ 101.411027][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 101.411047][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.4.896 Tainted: G L syzkaller #0 PREEMPT [ 101.411059][ T8354] Tainted: [L]=SOFTLOCKUP [ 101.411062][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.411067][ T8354] Call trace: [ 101.411070][ T8354] show_stack+0x2c/0x3c (C) [ 101.411087][ T8354] __dump_stack+0x30/0x40 [ 101.411098][ T8354] dump_stack_lvl+0xd8/0x12c [ 101.411108][ T8354] dump_stack+0x1c/0x28 [ 101.411117][ T8354] should_fail_ex+0x418/0x58c [ 101.411128][ T8354] should_failslab+0xc4/0x120 [ 101.411141][ T8354] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 101.411152][ T8354] shmem_alloc_inode+0x2c/0x48 [ 101.411162][ T8354] alloc_inode+0x68/0x198 [ 101.411171][ T8354] new_inode+0x20/0x50 [ 101.411180][ T8354] shmem_get_inode+0xac/0x788 [ 101.411189][ T8354] __shmem_file_setup+0x168/0x284 [ 101.411198][ T8354] shmem_file_setup+0x40/0x54 [ 101.411207][ T8354] memfd_alloc_file+0x9c/0x2f0 [ 101.411215][ T8354] __arm64_sys_memfd_create+0x318/0x3ec [ 101.411224][ T8354] invoke_syscall+0x98/0x244 [ 101.411234][ T8354] el0_svc_common+0xec/0x23c [ 101.411244][ T8354] do_el0_svc+0x4c/0x5c [ 101.411253][ T8354] el0_svc+0x60/0x1d8 [ 101.411263][ T8354] el0t_64_sync_handler+0x44/0x104 [ 101.411271][ T8354] el0t_64_sync+0x198/0x19c [ 101.458709][ T8358] random: crng reseeded on system resumption [ 101.484320][ T8361] tipc: Enabling of bearer rejected, already enabled [ 101.488539][ T8361] loop4: detected capacity change from 0 to 1024 [ 101.489194][ T8361] EXT4-fs: Ignoring removed orlov option [ 101.491701][ T8361] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 101.492684][ T8361] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.492772][ T8361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.493207][ T8361] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 101.493218][ T8361] loop4: lost filesystem error report for type 5 error -117 [ 101.493410][ T8361] EXT4-fs (loop4): Remounting filesystem read-only [ 101.493429][ T8361] Quota error (device loop4): write_blk: dquota write failed [ 101.493458][ T8361] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 101.493511][ T8361] EXT4-fs (loop4): 1 truncate cleaned up [ 101.498551][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 101.498572][ C1] EXT4-fs (loop4): initial error at time 101: ext4_reserve_inode_write:6522 [ 101.498584][ C1] EXT4-fs (loop4): last error at time 101: ext4_reserve_inode_write:6522 [ 101.515016][ T8361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.542816][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.640437][ T8369] FAULT_INJECTION: forcing a failure. [ 101.640437][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.640458][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.7.903 Tainted: G L syzkaller #0 PREEMPT [ 101.640470][ T8369] Tainted: [L]=SOFTLOCKUP [ 101.640476][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.640481][ T8369] Call trace: [ 101.640484][ T8369] show_stack+0x2c/0x3c (C) [ 101.640503][ T8369] __dump_stack+0x30/0x40 [ 101.640514][ T8369] dump_stack_lvl+0xd8/0x12c [ 101.640524][ T8369] dump_stack+0x1c/0x28 [ 101.640534][ T8369] should_fail_ex+0x418/0x58c [ 101.640545][ T8369] should_fail+0x14/0x24 [ 101.640554][ T8369] should_fail_usercopy+0x20/0x30 [ 101.640563][ T8369] arch_do_signal_or_restart+0x2e18/0x444c [ 101.640573][ T8369] exit_to_user_mode_loop+0x70/0x17c [ 101.640584][ T8369] el0_svc+0x12c/0x1d8 [ 101.640594][ T8369] el0t_64_sync_handler+0x44/0x104 [ 101.640602][ T8369] el0t_64_sync+0x198/0x19c [ 101.655482][ T8372] loop5: detected capacity change from 0 to 1024 [ 101.655858][ T8372] EXT4-fs: Ignoring removed nobh option [ 101.655875][ T8372] EXT4-fs: Ignoring removed orlov option [ 101.658251][ T8372] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 101.692526][ T8372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.792327][ T5139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.061640][ T8386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.106170][ T8388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.111843][ T8388] loop5: detected capacity change from 0 to 512 [ 102.116440][ T8388] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.144315][ T8388] EXT4-fs (loop5): 1 truncate cleaned up [ 102.144797][ T8388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.159319][ T5139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.333843][ T8397] FAULT_INJECTION: forcing a failure. [ 102.333843][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.333867][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.5.910 Tainted: G L syzkaller #0 PREEMPT [ 102.333882][ T8397] Tainted: [L]=SOFTLOCKUP [ 102.333886][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.333892][ T8397] Call trace: [ 102.333895][ T8397] show_stack+0x2c/0x3c (C) [ 102.333914][ T8397] __dump_stack+0x30/0x40 [ 102.333925][ T8397] dump_stack_lvl+0xd8/0x12c [ 102.333935][ T8397] dump_stack+0x1c/0x28 [ 102.333944][ T8397] should_fail_ex+0x418/0x58c [ 102.333955][ T8397] should_fail+0x14/0x24 [ 102.333964][ T8397] should_fail_usercopy+0x20/0x30 [ 102.333975][ T8397] _copy_from_iter+0x188/0x1064 [ 102.333986][ T8397] netlink_sendmsg+0x570/0x948 [ 102.333996][ T8397] __sock_sendmsg+0xc8/0x17c [ 102.334005][ T8397] ____sys_sendmsg+0x3d0/0x6c8 [ 102.334013][ T8397] ___sys_sendmsg+0x198/0x224 [ 102.334021][ T8397] __sys_sendmsg+0x158/0x204 [ 102.334030][ T8397] __arm64_sys_sendmsg+0x88/0x9c [ 102.334039][ T8397] invoke_syscall+0x98/0x244 [ 102.334054][ T8397] el0_svc_common+0xec/0x23c [ 102.334064][ T8397] do_el0_svc+0x4c/0x5c [ 102.334073][ T8397] el0_svc+0x60/0x1d8 [ 102.334085][ T8397] el0t_64_sync_handler+0x44/0x104 [ 102.334094][ T8397] el0t_64_sync+0x198/0x19c [ 102.351543][ T8399] tipc: Enabling of bearer rejected, already enabled [ 102.362650][ T8399] loop7: detected capacity change from 0 to 1024 [ 102.363436][ T8399] EXT4-fs: Ignoring removed orlov option [ 102.365082][ T8399] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 102.375070][ T8399] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 102.375173][ T8399] EXT4-fs (loop7): orphan cleanup on readonly fs [ 102.375604][ T8399] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 102.375618][ T8399] loop7: lost filesystem error report for type 5 error -117 [ 102.375770][ T8399] EXT4-fs (loop7): Remounting filesystem read-only [ 102.375787][ T8399] Quota error (device loop7): write_blk: dquota write failed [ 102.375823][ T8399] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 102.375887][ T8399] EXT4-fs (loop7): 1 truncate cleaned up [ 102.377222][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 102.377231][ C1] EXT4-fs (loop7): initial error at time 102: ext4_reserve_inode_write:6522 [ 102.377245][ C1] EXT4-fs (loop7): last error at time 102: ext4_reserve_inode_write:6522 [ 102.410298][ T8399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.413973][ T8402] loop8: detected capacity change from 0 to 128 [ 102.421839][ T8402] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 102.438291][ T8402] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.473561][ T8407] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 102.474136][ T8407] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 102.491874][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.019185][ T8427] __nla_validate_parse: 4 callbacks suppressed [ 103.019200][ T8427] netlink: 112 bytes leftover after parsing attributes in process `syz.4.919'. [ 103.019215][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 103.019926][ T8427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.919'. [ 103.054436][ T8429] netlink: 'syz.8.912': attribute type 10 has an invalid length. [ 103.065186][ T8429] team0: Device veth0_vlan failed to register rx_handler [ 103.118150][ T8431] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 103.219218][ T8433] netlink: 72 bytes leftover after parsing attributes in process `syz.4.921'. [ 103.227381][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 103.237041][ T8434] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 103.293624][ T8433] smc: net device erspan0 applied user defined pnetid SYZ1 [ 103.302165][ T7387] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.436948][ T8445] loop8: detected capacity change from 0 to 1024 [ 103.460742][ T8445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.491863][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.493780][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.495713][ T7387] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 103.514244][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.514779][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.514966][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.515179][ T7387] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 103.515301][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.515419][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.515589][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.515771][ T7387] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 103.515885][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.515982][ T7387] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /35/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.516716][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.522128][ T8448] loop6: detected capacity change from 0 to 512 [ 103.524485][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.525288][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.526006][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.534534][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.536682][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.537710][ T7387] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.574674][ T8448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.588083][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.928'. [ 103.639053][ T8457] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 103.759980][ T6080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.014966][ T7985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.063859][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.150677][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.174915][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.175640][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.175992][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.176644][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.177652][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.234808][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.590113][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.601477][ T8469] lo speed is unknown, defaulting to 1000 [ 104.602492][ T8469] lo speed is unknown, defaulting to 1000 [ 104.731648][ T12] bridge_slave_1: left allmulticast mode [ 104.731671][ T12] bridge_slave_1: left promiscuous mode [ 104.731760][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.733462][ T12] bridge_slave_0: left allmulticast mode [ 104.733472][ T12] bridge_slave_0: left promiscuous mode [ 104.733530][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.832960][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.872375][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.883197][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 104.885366][ T8495] FAULT_INJECTION: forcing a failure. [ 104.885366][ T8495] name failslab, interval 1, probability 0, space 0, times 0 [ 104.885386][ T8495] CPU: 1 UID: 0 PID: 8495 Comm: syz.5.940 Tainted: G L syzkaller #0 PREEMPT [ 104.885399][ T8495] Tainted: [L]=SOFTLOCKUP [ 104.885402][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.885408][ T8495] Call trace: [ 104.885411][ T8495] show_stack+0x2c/0x3c (C) [ 104.885432][ T8495] __dump_stack+0x30/0x40 [ 104.885445][ T8495] dump_stack_lvl+0xd8/0x12c [ 104.885457][ T8495] dump_stack+0x1c/0x28 [ 104.885469][ T8495] should_fail_ex+0x418/0x58c [ 104.885482][ T8495] should_failslab+0xc4/0x120 [ 104.885495][ T8495] kmem_cache_alloc_noprof+0x94/0x5d4 [ 104.885510][ T8495] security_file_alloc+0x3c/0x300 [ 104.885520][ T8495] init_file+0x90/0x28c [ 104.885529][ T8495] alloc_empty_file+0x80/0x1cc [ 104.885537][ T8495] path_openat+0x78/0x18f0 [ 104.885547][ T8495] do_file_open+0x1c8/0x2e8 [ 104.885557][ T8495] do_sys_openat2+0x114/0x1e8 [ 104.885568][ T8495] do_sys_open+0xb0/0xe0 [ 104.885579][ T8495] __arm64_sys_openat+0xa8/0xc4 [ 104.885590][ T8495] invoke_syscall+0x98/0x244 [ 104.885603][ T8495] el0_svc_common+0xec/0x23c [ 104.885615][ T8495] do_el0_svc+0x4c/0x5c [ 104.885626][ T8495] el0_svc+0x60/0x1d8 [ 104.885638][ T8495] el0t_64_sync_handler+0x44/0x104 [ 104.885649][ T8495] el0t_64_sync+0x198/0x19c [ 104.913348][ T12] bond0 (unregistering): Released all slaves [ 104.937694][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.937869][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.937939][ T8469] bridge_slave_0: entered allmulticast mode [ 104.938754][ T8469] bridge_slave_0: entered promiscuous mode [ 104.943798][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.943904][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.943963][ T8469] bridge_slave_1: entered allmulticast mode [ 104.944414][ T8469] bridge_slave_1: entered promiscuous mode [ 104.962771][ T12] tipc: Disabling bearer [ 104.962843][ T12] tipc: Left network mode [ 104.966646][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.970635][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.979708][ T8469] team0: Port device team_slave_0 added [ 104.980520][ T8469] team0: Port device team_slave_1 added [ 104.988045][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.988055][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.988072][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.988681][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.988688][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.988704][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.002632][ T8469] hsr_slave_0: entered promiscuous mode [ 105.002908][ T8469] hsr_slave_1: entered promiscuous mode [ 105.128590][ T8505] netlink: 'syz.6.939': attribute type 10 has an invalid length. [ 105.150587][ T8505] team0: Device vxcan1 is of different type [ 105.195874][ T8469] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.201827][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.246725][ T8469] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.251746][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.252172][ T8469] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.253211][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.255761][ T8507] netlink: 'syz.4.943': attribute type 14 has an invalid length. [ 105.255993][ T8469] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 105.259075][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.375167][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 105.401720][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.405233][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.411983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.412010][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.444781][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.444813][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.469212][ T12] hsr_slave_0: left promiscuous mode [ 105.472391][ T12] hsr_slave_1: left promiscuous mode [ 105.472713][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.472726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.477046][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.477061][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.496879][ T12] veth1_macvtap: left promiscuous mode [ 105.496916][ T12] veth0_macvtap: left promiscuous mode [ 105.496973][ T12] veth1_vlan: left promiscuous mode [ 105.525839][ T8529] loop4: detected capacity change from 0 to 8192 [ 105.563942][ T8529] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.819585][ T12] team0 (unregistering): Port device team_slave_1 removed [ 105.848631][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.056155][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 106.072499][ T8469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.072519][ T8469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.247588][ T4713] Bluetooth: hci0: command tx timeout [ 106.404216][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.514847][ T8469] veth0_vlan: entered promiscuous mode [ 106.516950][ T8469] veth1_vlan: entered promiscuous mode [ 106.549269][ T8469] veth0_macvtap: entered promiscuous mode [ 106.552202][ T8469] veth1_macvtap: entered promiscuous mode [ 106.553925][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 106.561855][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.562876][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.576082][ T5628] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.576230][ T5628] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.576304][ T5628] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.576360][ T5628] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.635399][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.635417][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.650507][ T8595] i2c i2c-0: new_device: Missing parameters [ 106.650653][ T8595] i2c i2c-0: Failed to register i2c client saa7115_auto at 0x20 (-16) [ 106.666759][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.666776][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.785443][ T8614] netlink: 'syz.7.953': attribute type 1 has an invalid length. [ 106.788218][ T8606] bond1: invalid NS target :: specified for addition [ 106.788233][ T8606] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 107.035199][ T8606] bond1 (unregistering): Released all slaves [ 107.173181][ T8639] Bluetooth: MGMT ver 1.23 [ 107.193961][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 107.310811][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.7.958'. [ 107.424088][ T8651] netlink: 32 bytes leftover after parsing attributes in process `syz.7.959'. [ 107.516795][ T8655] loop7: detected capacity change from 0 to 1024 [ 107.517107][ T8655] EXT4-fs: Ignoring removed oldalloc option [ 107.517116][ T8655] EXT4-fs: Ignoring removed orlov option [ 107.540524][ T8655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.636711][ T8669] mmap: syz.7.961 (8669) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.645927][ T8666] bridge0: port 3(syz_tun) entered blocking state [ 107.645972][ T8666] bridge0: port 3(syz_tun) entered disabled state [ 107.646080][ T8666] syz_tun: entered allmulticast mode [ 107.646883][ T8666] syz_tun: entered promiscuous mode [ 107.647170][ T8666] bridge0: port 3(syz_tun) entered blocking state [ 107.647251][ T8666] bridge0: port 3(syz_tun) entered forwarding state [ 107.685460][ T8672] FAULT_INJECTION: forcing a failure. [ 107.685460][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 107.685483][ T8672] CPU: 0 UID: 60928 PID: 8672 Comm: syz.9.964 Tainted: G L syzkaller #0 PREEMPT [ 107.685498][ T8672] Tainted: [L]=SOFTLOCKUP [ 107.685502][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.685507][ T8672] Call trace: [ 107.685511][ T8672] show_stack+0x2c/0x3c (C) [ 107.685528][ T8672] __dump_stack+0x30/0x40 [ 107.685539][ T8672] dump_stack_lvl+0xd8/0x12c [ 107.685549][ T8672] dump_stack+0x1c/0x28 [ 107.685558][ T8672] should_fail_ex+0x418/0x58c [ 107.685569][ T8672] should_failslab+0xc4/0x120 [ 107.685579][ T8672] kmem_cache_alloc_noprof+0x94/0x5d4 [ 107.685591][ T8672] security_file_alloc+0x3c/0x300 [ 107.685599][ T8672] init_file+0x90/0x28c [ 107.685607][ T8672] alloc_empty_file+0x80/0x1cc [ 107.685614][ T8672] path_openat+0x78/0x18f0 [ 107.685622][ T8672] do_file_open+0x1c8/0x2e8 [ 107.685630][ T8672] do_sys_openat2+0x114/0x1e8 [ 107.685639][ T8672] do_sys_open+0xb0/0xe0 [ 107.685648][ T8672] __arm64_sys_openat+0xa8/0xc4 [ 107.685657][ T8672] invoke_syscall+0x98/0x244 [ 107.685667][ T8672] el0_svc_common+0xec/0x23c [ 107.685677][ T8672] do_el0_svc+0x4c/0x5c [ 107.685689][ T8672] el0_svc+0x60/0x1d8 [ 107.685699][ T8672] el0t_64_sync_handler+0x44/0x104 [ 107.685708][ T8672] el0t_64_sync+0x198/0x19c [ 107.724263][ T8663] Injecting memory failure for pfn 0x1520e0 at process virtual address 0x20001000 [ 107.727013][ T8663] Memory failure: 0x1520e0: recovery action for clean LRU page: Recovered [ 107.727028][ T8663] Injecting memory failure for pfn 0x14d58b at process virtual address 0x20002000 [ 107.727104][ T8663] Memory failure: 0x14d58b: recovery action for clean LRU page: Recovered [ 107.727113][ T8663] Injecting memory failure for pfn 0x151d3e at process virtual address 0x20003000 [ 107.727158][ T8663] Memory failure: 0x151d3e: recovery action for clean LRU page: Recovered [ 107.805882][ T8673] fuse: Bad value for 'fd' [ 107.867834][ T8679] loop9: detected capacity change from 0 to 2048 [ 107.882463][ T8679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.885005][ T8679] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.068368][ T8685] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 108.291591][ T8691] netlink: 71 bytes leftover after parsing attributes in process `syz.4.969'. [ 108.324105][ T8696] loop4: detected capacity change from 0 to 128 [ 108.328900][ T8696] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 108.332486][ T8696] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.369950][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.406897][ T8702] loop4: detected capacity change from 0 to 128 [ 108.420167][ T8702] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 108.422894][ T8702] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.423503][ T8702] FAULT_INJECTION: forcing a failure. [ 108.423503][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 108.423521][ T8702] CPU: 1 UID: 0 PID: 8702 Comm: syz.4.972 Tainted: G L syzkaller #0 PREEMPT [ 108.423534][ T8702] Tainted: [L]=SOFTLOCKUP [ 108.423538][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.423543][ T8702] Call trace: [ 108.423546][ T8702] show_stack+0x2c/0x3c (C) [ 108.423567][ T8702] __dump_stack+0x30/0x40 [ 108.423577][ T8702] dump_stack_lvl+0xd8/0x12c [ 108.423587][ T8702] dump_stack+0x1c/0x28 [ 108.423596][ T8702] should_fail_ex+0x418/0x58c [ 108.423607][ T8702] should_failslab+0xc4/0x120 [ 108.423618][ T8702] __kmalloc_cache_noprof+0x94/0x5fc [ 108.423626][ T8702] getname_long+0x5c/0x120 [ 108.423636][ T8702] do_getname+0x174/0x234 [ 108.423642][ T8702] getname_flags+0x2c/0x3c [ 108.423650][ T8702] do_sys_openat2+0xd0/0x1e8 [ 108.423659][ T8702] do_sys_open+0xb0/0xe0 [ 108.423668][ T8702] __arm64_sys_openat+0xa8/0xc4 [ 108.423677][ T8702] invoke_syscall+0x98/0x244 [ 108.423687][ T8702] el0_svc_common+0xec/0x23c [ 108.423697][ T8702] do_el0_svc+0x4c/0x5c [ 108.423706][ T8702] el0_svc+0x60/0x1d8 [ 108.423716][ T8702] el0t_64_sync_handler+0x44/0x104 [ 108.423725][ T8702] el0t_64_sync+0x198/0x19c [ 108.447150][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.566280][ T8709] loop6: detected capacity change from 0 to 256 [ 108.569671][ T8709] FAT-fs (loop6): Directory bread(block 1285) failed [ 108.569694][ T8709] FAT-fs (loop6): Directory bread(block 1286) failed [ 108.569707][ T8709] FAT-fs (loop6): Directory bread(block 1287) failed [ 108.569746][ T8709] FAT-fs (loop6): Directory bread(block 1288) failed [ 108.967348][ T8661] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 108.973694][ T8717] loop5: detected capacity change from 0 to 128 [ 109.018018][ T8719] FAULT_INJECTION: forcing a failure. [ 109.018018][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 109.018042][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.5.978 Tainted: G L syzkaller #0 PREEMPT [ 109.018062][ T8719] Tainted: [L]=SOFTLOCKUP [ 109.018066][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.018072][ T8719] Call trace: [ 109.018075][ T8719] show_stack+0x2c/0x3c (C) [ 109.018095][ T8719] __dump_stack+0x30/0x40 [ 109.018105][ T8719] dump_stack_lvl+0xd8/0x12c [ 109.018115][ T8719] dump_stack+0x1c/0x28 [ 109.018124][ T8719] should_fail_ex+0x418/0x58c [ 109.018135][ T8719] should_failslab+0xc4/0x120 [ 109.018146][ T8719] __kmalloc_cache_noprof+0x94/0x5fc [ 109.018154][ T8719] sctp_add_bind_addr+0x9c/0x2e8 [ 109.018165][ T8719] sctp_do_bind+0x32c/0x638 [ 109.018175][ T8719] sctp_connect_new_asoc+0x218/0x5ec [ 109.018186][ T8719] sctp_sendmsg+0xdd8/0x17bc [ 109.018196][ T8719] inet_sendmsg+0xb4/0xd8 [ 109.018205][ T8719] __sock_sendmsg+0xc8/0x17c [ 109.018213][ T8719] __sys_sendto+0x250/0x328 [ 109.018221][ T8719] __arm64_sys_sendto+0xec/0x10c [ 109.018229][ T8719] invoke_syscall+0x98/0x244 [ 109.018239][ T8719] el0_svc_common+0xec/0x23c [ 109.018249][ T8719] do_el0_svc+0x4c/0x5c [ 109.018258][ T8719] el0_svc+0x60/0x1d8 [ 109.018268][ T8719] el0t_64_sync_handler+0x44/0x104 [ 109.018276][ T8719] el0t_64_sync+0x198/0x19c [ 109.029484][ T8721] loop9: detected capacity change from 0 to 512 [ 109.055770][ T8721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.136528][ T4714] Bluetooth: hci0: command tx timeout [ 109.173369][ T8469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.207405][ T4713] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 109.266942][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.9.981'. [ 109.343417][ T8734] loop9: detected capacity change from 0 to 2048 [ 109.362319][ T8734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.386359][ T8734] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 109.588826][ T8743] netlink: 'syz.4.982': attribute type 10 has an invalid length. [ 109.602360][ T8743] team0: Device vxcan1 is of different type [ 110.101571][ T8469] overlayfs: failed lookup in lower (newroot/8, name='file0', err=-40): overlapping layers [ 110.101658][ T8469] overlayfs: failed lookup in lower (newroot/8, name='file0', err=-40): overlapping layers [ 110.253725][ T8469] bridge0: port 3(syz_tun) entered disabled state [ 110.261760][ T8469] syz_tun (unregistering): left allmulticast mode [ 110.261778][ T8469] syz_tun (unregistering): left promiscuous mode [ 110.261803][ T8469] bridge0: port 3(syz_tun) entered disabled state [ 110.356190][ T8756] loop4: detected capacity change from 0 to 2048 [ 110.376886][ T8756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.380671][ T8756] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.407994][ T8469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.469542][ T534] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.528381][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.530791][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.531611][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.532202][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.532473][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.563959][ T534] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.613316][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.663111][ T534] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.665587][ T8761] lo speed is unknown, defaulting to 1000 [ 110.665801][ T8772] FAULT_INJECTION: forcing a failure. [ 110.665801][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 110.665818][ T8772] CPU: 1 UID: 0 PID: 8772 Comm: syz.7.990 Tainted: G L syzkaller #0 PREEMPT [ 110.665830][ T8772] Tainted: [L]=SOFTLOCKUP [ 110.665834][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.665839][ T8772] Call trace: [ 110.665841][ T8772] show_stack+0x2c/0x3c (C) [ 110.665862][ T8772] __dump_stack+0x30/0x40 [ 110.665872][ T8772] dump_stack_lvl+0xd8/0x12c [ 110.665882][ T8772] dump_stack+0x1c/0x28 [ 110.665891][ T8772] should_fail_ex+0x418/0x58c [ 110.665902][ T8772] should_failslab+0xc4/0x120 [ 110.665913][ T8772] __kmalloc_noprof+0x108/0x6c8 [ 110.665924][ T8772] security_prepare_creds+0x60/0x35c [ 110.665934][ T8772] prepare_creds+0x500/0x7d0 [ 110.665944][ T8772] copy_creds+0xd8/0x7b0 [ 110.665954][ T8772] copy_process+0xa1c/0x34bc [ 110.665961][ T8772] kernel_clone+0x234/0x8e8 [ 110.665969][ T8772] __arm64_sys_clone+0x168/0x1d4 [ 110.665977][ T8772] invoke_syscall+0x98/0x244 [ 110.665987][ T8772] el0_svc_common+0xec/0x23c [ 110.665996][ T8772] do_el0_svc+0x4c/0x5c [ 110.666006][ T8772] el0_svc+0x60/0x1d8 [ 110.666015][ T8772] el0t_64_sync_handler+0x44/0x104 [ 110.666024][ T8772] el0t_64_sync+0x198/0x19c [ 110.666888][ T8761] lo speed is unknown, defaulting to 1000 [ 110.715272][ T534] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.799649][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.799677][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.799737][ T8761] bridge_slave_0: entered allmulticast mode [ 110.800146][ T8761] bridge_slave_0: entered promiscuous mode [ 110.816764][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.816791][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.816869][ T8761] bridge_slave_1: entered allmulticast mode [ 110.817474][ T8761] bridge_slave_1: entered promiscuous mode [ 110.822754][ T8786] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1002'. [ 110.824220][ T8787] ip_tables: iptables: counters copy to user failed while replacing table [ 110.832873][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1002'. [ 110.832908][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1002'. [ 110.854992][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.856890][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.904081][ T8761] team0: Port device team_slave_0 added [ 110.904805][ T8761] team0: Port device team_slave_1 added [ 110.932311][ T534] bridge_slave_1: left allmulticast mode [ 110.932334][ T534] bridge_slave_1: left promiscuous mode [ 110.932428][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.936693][ T534] bridge_slave_0: left allmulticast mode [ 110.936710][ T534] bridge_slave_0: left promiscuous mode [ 110.936787][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.052653][ T8803] loop6: detected capacity change from 0 to 512 [ 111.056719][ T8803] EXT4-fs: Ignoring removed orlov option [ 111.057190][ T8803] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 111.333173][ T8803] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #15: comm syz.6.996: corrupted xattr block 252: invalid header [ 111.333213][ T8803] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.335711][ T8803] EXT4-fs (loop6): Remounting filesystem read-only [ 111.335732][ T8803] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -117) [ 111.335825][ T8803] EXT4-fs (loop6): 1 orphan inode deleted [ 111.336277][ T8803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.361666][ T534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.373295][ T6080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.386301][ T534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.392983][ T534] bond0 (unregistering): Released all slaves [ 111.443481][ T8813] overlayfs: upper fs does not support tmpfile. [ 111.481747][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.481763][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.481779][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.489248][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.489261][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.489277][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.519868][ T8824] ip_tables: iptables: counters copy to user failed while replacing table [ 111.546049][ T8824] xt_CT: No such helper "syz1" [ 111.550987][ T8761] hsr_slave_0: entered promiscuous mode [ 111.551278][ T8761] hsr_slave_1: entered promiscuous mode [ 111.551578][ T8761] debugfs: 'hsr0' already exists in 'hsr' [ 111.551589][ T8761] Cannot create hsr debugfs directory [ 111.600904][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 111.615881][ T8831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1005'. [ 111.686361][ T8836] tipc: Enabling of bearer rejected, already enabled [ 111.694758][ T534] hsr_slave_0: left promiscuous mode [ 111.695066][ T534] hsr_slave_1: left promiscuous mode [ 111.695384][ T534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.695397][ T534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.695804][ T534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.695817][ T534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.702136][ T8836] EXT4-fs: Ignoring removed orlov option [ 111.707023][ T8836] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 111.707889][ T8836] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 111.707992][ T8836] EXT4-fs (loop7): orphan cleanup on readonly fs [ 111.708768][ T8836] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 111.708781][ T8836] loop7: lost filesystem error report for type 5 error -117 [ 111.708870][ T8836] EXT4-fs (loop7): Remounting filesystem read-only [ 111.708880][ T8836] Quota error (device loop7): write_blk: dquota write failed [ 111.708905][ T8836] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 111.708956][ T8836] EXT4-fs (loop7): 1 truncate cleaned up [ 111.710025][ T8836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.714530][ T534] veth1_macvtap: left promiscuous mode [ 111.714564][ T534] veth0_macvtap: left promiscuous mode [ 111.714613][ T534] veth1_vlan: left promiscuous mode [ 111.714648][ T534] veth0_vlan: left promiscuous mode [ 111.826087][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.881539][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1008'. [ 111.933978][ T534] team0 (unregistering): Port device team_slave_1 removed [ 111.944447][ T534] team0 (unregistering): Port device team_slave_0 removed [ 112.038924][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 112.044019][ T8861] FAULT_INJECTION: forcing a failure. [ 112.044019][ T8861] name failslab, interval 1, probability 0, space 0, times 0 [ 112.044038][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.6.1010 Tainted: G L syzkaller #0 PREEMPT [ 112.044050][ T8861] Tainted: [L]=SOFTLOCKUP [ 112.044053][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.044058][ T8861] Call trace: [ 112.044061][ T8861] show_stack+0x2c/0x3c (C) [ 112.044080][ T8861] __dump_stack+0x30/0x40 [ 112.044091][ T8861] dump_stack_lvl+0xd8/0x12c [ 112.044101][ T8861] dump_stack+0x1c/0x28 [ 112.044110][ T8861] should_fail_ex+0x418/0x58c [ 112.044121][ T8861] should_failslab+0xc4/0x120 [ 112.044132][ T8861] __kmalloc_cache_noprof+0x94/0x5fc [ 112.044140][ T8861] __sk_attach_prog+0x60/0x21c [ 112.044150][ T8861] sk_attach_bpf+0x90/0xd8 [ 112.044158][ T8861] sk_setsockopt+0x1d24/0x2658 [ 112.044169][ T8861] sock_setsockopt+0x68/0x80 [ 112.044179][ T8861] do_sock_setsockopt+0x1a0/0x330 [ 112.044187][ T8861] __sys_setsockopt+0x104/0x170 [ 112.044195][ T8861] __arm64_sys_setsockopt+0xc8/0xe4 [ 112.044203][ T8861] invoke_syscall+0x98/0x244 [ 112.044214][ T8861] el0_svc_common+0xec/0x23c [ 112.044223][ T8861] do_el0_svc+0x4c/0x5c [ 112.044233][ T8861] el0_svc+0x60/0x1d8 [ 112.044242][ T8861] el0t_64_sync_handler+0x44/0x104 [ 112.044251][ T8861] el0t_64_sync+0x198/0x19c [ 112.176842][ T8867] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1011'. [ 112.201007][ T8867] Bluetooth: MGMT ver 1.23 [ 112.283843][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 112.357740][ T8882] syzkaller1: entered promiscuous mode [ 112.357760][ T8882] syzkaller1: entered allmulticast mode [ 112.446018][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1012'. [ 112.446119][ T8890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.465637][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.559135][ T8761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.565944][ T8761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.567725][ T4714] Bluetooth: hci0: command tx timeout [ 112.569571][ T8761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.575186][ T8761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.575529][ T8761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.580459][ T8761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.582256][ T8761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.585569][ T8761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.661307][ T8894] set_capacity_and_notify: 2 callbacks suppressed [ 112.664424][ T8894] loop4: detected capacity change from 0 to 256 [ 112.741088][ T8894] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1013'. [ 112.758714][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 112.775359][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.796763][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.815246][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.815274][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.818206][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.818230][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.867559][ T8761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.083749][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.121906][ T8761] veth0_vlan: entered promiscuous mode [ 113.128739][ T8761] veth1_vlan: entered promiscuous mode [ 113.161166][ T8761] veth0_macvtap: entered promiscuous mode [ 113.166506][ T8761] veth1_macvtap: entered promiscuous mode [ 113.178983][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.182330][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.244929][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.244946][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.264295][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.264313][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.267673][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.269278][ T1253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.269412][ T1253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.269436][ T1253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.852134][ T8972] loop5: detected capacity change from 0 to 8192 [ 113.859496][ T8972] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.967889][ T8984] __nla_validate_parse: 1 callbacks suppressed [ 113.967904][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 113.967986][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.986200][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.288302][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 114.292916][ T9025] 9pnet_fd: Insufficient options for proto=fd [ 114.294376][ T9025] loop0: detected capacity change from 0 to 128 [ 114.294964][ T9025] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 114.314828][ T9025] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.320950][ T9025] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.334708][ T9025] overlay: ./file0 is not a directory [ 114.342177][ T9025] fuse: Bad value for 'fd' [ 114.433707][ T9035] loop0: detected capacity change from 0 to 8192 [ 114.462188][ T9035] loop0: AHDI p1 p2 p3 [ 114.462276][ T9035] loop0: p1 size 16383 extends beyond EOD, truncated [ 114.601824][ T4722] udevd[4722]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 114.648710][ T4714] Bluetooth: hci0: command tx timeout [ 114.720230][ T9064] FAULT_INJECTION: forcing a failure. [ 114.720230][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 114.720254][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.0.1035 Tainted: G L syzkaller #0 PREEMPT [ 114.720268][ T9064] Tainted: [L]=SOFTLOCKUP [ 114.720271][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.720276][ T9064] Call trace: [ 114.720279][ T9064] show_stack+0x2c/0x3c (C) [ 114.720300][ T9064] __dump_stack+0x30/0x40 [ 114.720313][ T9064] dump_stack_lvl+0xd8/0x12c [ 114.720323][ T9064] dump_stack+0x1c/0x28 [ 114.720332][ T9064] should_fail_ex+0x418/0x58c [ 114.720344][ T9064] should_failslab+0xc4/0x120 [ 114.720355][ T9064] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 114.720374][ T9064] kstrdup+0x50/0x104 [ 114.720382][ T9064] create_filter_start+0xd0/0x1bc [ 114.720392][ T9064] create_filter+0x88/0x178 [ 114.720404][ T9064] apply_event_filter+0x124/0x460 [ 114.720413][ T9064] event_filter_write+0x15c/0x218 [ 114.720422][ T9064] vfs_write+0x2a4/0xa0c [ 114.720433][ T9064] ksys_write+0x12c/0x228 [ 114.720443][ T9064] __arm64_sys_write+0x84/0x98 [ 114.720453][ T9064] invoke_syscall+0x98/0x244 [ 114.720463][ T9064] el0_svc_common+0xec/0x23c [ 114.720473][ T9064] do_el0_svc+0x4c/0x5c [ 114.720483][ T9064] el0_svc+0x60/0x1d8 [ 114.720492][ T9064] el0t_64_sync_handler+0x44/0x104 [ 114.720501][ T9064] el0t_64_sync+0x198/0x19c [ 115.366872][ T9102] loop7: detected capacity change from 0 to 8192 [ 115.374015][ T9102] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.543703][ T9125] loop5: detected capacity change from 0 to 256 [ 115.608495][ T9125] FAULT_INJECTION: forcing a failure. [ 115.608495][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 115.608518][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.5.1044 Tainted: G L syzkaller #0 PREEMPT [ 115.608532][ T9125] Tainted: [L]=SOFTLOCKUP [ 115.608537][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 115.608543][ T9125] Call trace: [ 115.608546][ T9125] show_stack+0x2c/0x3c (C) [ 115.608566][ T9125] __dump_stack+0x30/0x40 [ 115.608577][ T9125] dump_stack_lvl+0xd8/0x12c [ 115.608587][ T9125] dump_stack+0x1c/0x28 [ 115.608597][ T9125] should_fail_ex+0x418/0x58c [ 115.608609][ T9125] should_failslab+0xc4/0x120 [ 115.608621][ T9125] kmem_cache_alloc_node_noprof+0x98/0x604 [ 115.608632][ T9125] __alloc_skb+0x1f0/0x610 [ 115.608642][ T9125] tcp_stream_alloc_skb+0x44/0x2dc [ 115.608654][ T9125] tcp_connect+0xbb8/0x3228 [ 115.608662][ T9125] tcp_v4_connect+0xc3c/0x13e4 [ 115.608674][ T9125] __inet_stream_connect+0x1f4/0xc14 [ 115.608683][ T9125] inet_stream_connect+0x74/0xb0 [ 115.608691][ T9125] __sys_connect_file+0x13c/0x184 [ 115.608700][ T9125] __sys_connect+0x114/0x194 [ 115.608708][ T9125] __arm64_sys_connect+0x84/0x9c [ 115.608716][ T9125] invoke_syscall+0x98/0x244 [ 115.608727][ T9125] el0_svc_common+0xec/0x23c [ 115.608737][ T9125] do_el0_svc+0x4c/0x5c [ 115.608746][ T9125] el0_svc+0x60/0x1d8 [ 115.608756][ T9125] el0t_64_sync_handler+0x44/0x104 [ 115.608765][ T9125] el0t_64_sync+0x198/0x19c [ 115.999614][ T9164] netlink: 'syz.0.1050': attribute type 4 has an invalid length. [ 116.069890][ T9169] FAULT_INJECTION: forcing a failure. [ 116.069890][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 116.069918][ T9169] CPU: 1 UID: 0 PID: 9169 Comm: syz.0.1051 Tainted: G L syzkaller #0 PREEMPT [ 116.069933][ T9169] Tainted: [L]=SOFTLOCKUP [ 116.069937][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 116.069943][ T9169] Call trace: [ 116.069946][ T9169] show_stack+0x2c/0x3c (C) [ 116.069967][ T9169] __dump_stack+0x30/0x40 [ 116.069980][ T9169] dump_stack_lvl+0xd8/0x12c [ 116.069992][ T9169] dump_stack+0x1c/0x28 [ 116.070003][ T9169] should_fail_ex+0x418/0x58c [ 116.070017][ T9169] should_failslab+0xc4/0x120 [ 116.070030][ T9169] __kmalloc_noprof+0x108/0x6c8 [ 116.070044][ T9169] tomoyo_encode2+0x10c/0x330 [ 116.070056][ T9169] tomoyo_encode+0x34/0x50 [ 116.070066][ T9169] tomoyo_realpath_from_path+0x488/0x4dc [ 116.070076][ T9169] tomoyo_path_number_perm+0x1f0/0x500 [ 116.070086][ T9169] tomoyo_file_ioctl+0x2c/0x3c [ 116.070097][ T9169] security_file_ioctl+0xdc/0x2b0 [ 116.070108][ T9169] __arm64_sys_ioctl+0xb0/0x1cc [ 116.070121][ T9169] invoke_syscall+0x98/0x244 [ 116.070133][ T9169] el0_svc_common+0xec/0x23c [ 116.070145][ T9169] do_el0_svc+0x4c/0x5c [ 116.070157][ T9169] el0_svc+0x60/0x1d8 [ 116.070168][ T9169] el0t_64_sync_handler+0x44/0x104 [ 116.070179][ T9169] el0t_64_sync+0x198/0x19c [ 116.070194][ T9169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.199785][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 116.199812][ T9175] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 116.199823][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 116.213996][ T9175] geneve2: entered promiscuous mode [ 116.214012][ T9175] geneve2: entered allmulticast mode [ 116.232841][ T9175] loop0: detected capacity change from 0 to 512 [ 116.233181][ T9175] EXT4-fs: Ignoring removed i_version option [ 116.233197][ T9175] EXT4-fs: Ignoring removed bh option [ 116.235402][ T9185] loop7: detected capacity change from 0 to 1024 [ 116.235697][ T9185] EXT4-fs: Ignoring removed orlov option [ 116.243898][ T9185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.272803][ T9175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.287128][ T9175] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1053: bg 0: block 217: padding at end of block bitmap is not set [ 116.291125][ T9175] EXT4-fs (loop0): Remounting filesystem read-only [ 116.304759][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.359440][ T9199] loop7: detected capacity change from 0 to 510 [ 116.359765][ T9199] ext4: Unknown parameter 'trusted.overlay.impure' [ 116.388665][ T8761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.391941][ T1253] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 116.391967][ T1253] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 116.496608][ T9213] tipc: Enabling of bearer rejected, already enabled [ 116.506108][ T9213] loop7: detected capacity change from 0 to 1024 [ 116.506519][ T9213] EXT4-fs: Ignoring removed orlov option [ 116.512261][ T9213] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 116.522822][ T9213] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 116.522921][ T9213] EXT4-fs (loop7): orphan cleanup on readonly fs [ 116.523535][ T9213] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 116.523548][ T9213] loop7: lost filesystem error report for type 5 error -117 [ 116.523637][ T9213] EXT4-fs (loop7): Remounting filesystem read-only [ 116.523647][ T9213] Quota error (device loop7): write_blk: dquota write failed [ 116.523671][ T9213] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 116.523725][ T9213] EXT4-fs (loop7): 1 truncate cleaned up [ 116.526267][ T9213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.553000][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.728533][ T4714] Bluetooth: hci0: command tx timeout [ 116.829888][ T9248] FAT-fs (loop4): Directory bread(block 1285) failed [ 116.829915][ T9248] FAT-fs (loop4): Directory bread(block 1286) failed [ 116.829928][ T9248] FAT-fs (loop4): Directory bread(block 1287) failed [ 116.829973][ T9248] FAT-fs (loop4): Directory bread(block 1288) failed [ 116.939806][ T9230] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.614045][ T9261] EXT4-fs: Ignoring removed oldalloc option [ 117.614061][ T9261] EXT4-fs: Ignoring removed orlov option [ 117.769590][ T9261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.803180][ T9268] FAULT_INJECTION: forcing a failure. [ 117.803180][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 117.803200][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.4.1069 Tainted: G L syzkaller #0 PREEMPT [ 117.803214][ T9268] Tainted: [L]=SOFTLOCKUP [ 117.803217][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.803223][ T9268] Call trace: [ 117.803226][ T9268] show_stack+0x2c/0x3c (C) [ 117.803245][ T9268] __dump_stack+0x30/0x40 [ 117.803258][ T9268] dump_stack_lvl+0xd8/0x12c [ 117.803270][ T9268] dump_stack+0x1c/0x28 [ 117.803281][ T9268] should_fail_ex+0x418/0x58c [ 117.803294][ T9268] should_failslab+0xc4/0x120 [ 117.803307][ T9268] __kmalloc_cache_noprof+0x94/0x5fc [ 117.803316][ T9268] ppp_register_net_channel+0x68/0x520 [ 117.803330][ T9268] pppol2tp_connect+0xc90/0x13a0 [ 117.803344][ T9268] __sys_connect_file+0x13c/0x184 [ 117.803361][ T9268] __sys_connect+0x114/0x194 [ 117.803371][ T9268] __arm64_sys_connect+0x84/0x9c [ 117.803381][ T9268] invoke_syscall+0x98/0x244 [ 117.803393][ T9268] el0_svc_common+0xec/0x23c [ 117.803405][ T9268] do_el0_svc+0x4c/0x5c [ 117.803416][ T9268] el0_svc+0x60/0x1d8 [ 117.803427][ T9268] el0t_64_sync_handler+0x44/0x104 [ 117.803438][ T9268] el0t_64_sync+0x198/0x19c [ 117.878451][ T9265] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 118.112729][ T9281] tipc: Started in network mode [ 118.112749][ T9281] tipc: Node identity ac14140f, cluster identity 4711 [ 118.112834][ T9281] tipc: New replicast peer: 255.255.255.255 [ 118.112997][ T9281] tipc: Enabled bearer , priority 10 [ 118.116491][ T9281] set_capacity_and_notify: 3 callbacks suppressed [ 118.116501][ T9281] loop0: detected capacity change from 0 to 1024 [ 118.117134][ T9281] EXT4-fs: Ignoring removed orlov option [ 118.121836][ T9281] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 118.132268][ T9281] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.132371][ T9281] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.134087][ T9281] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 118.134104][ T9281] loop0: lost filesystem error report for type 5 error -117 [ 118.135157][ T9281] EXT4-fs (loop0): Remounting filesystem read-only [ 118.135169][ T9281] Quota error (device loop0): write_blk: dquota write failed [ 118.135197][ T9281] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 118.135252][ T9281] EXT4-fs (loop0): 1 truncate cleaned up [ 118.137226][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 118.137237][ C1] EXT4-fs (loop0): initial error at time 118: ext4_reserve_inode_write:6522 [ 118.137253][ C1] EXT4-fs (loop0): last error at time 118: ext4_reserve_inode_write:6522 [ 118.155764][ T9281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.183133][ T9286] loop5: detected capacity change from 0 to 8 [ 118.205664][ T8761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.215481][ T9286] SQUASHFS error: Unable to read directory block [631:26] [ 118.215930][ T9286] SQUASHFS error: Unable to read directory block [631:26] [ 118.216223][ T9286] SQUASHFS error: Unable to read directory block [631:26] [ 118.230315][ T9286] lo speed is unknown, defaulting to 1000 [ 118.231218][ T9286] lo speed is unknown, defaulting to 1000 [ 118.265196][ T9290] loop0: detected capacity change from 0 to 256 [ 118.266264][ T9288] syzkaller0: entered promiscuous mode [ 118.266281][ T9288] syzkaller0: entered allmulticast mode [ 118.392931][ T9297] loop4: detected capacity change from 0 to 1024 [ 118.396631][ T9297] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 118.398905][ T9297] JBD2: no valid journal superblock found [ 118.404542][ T9297] EXT4-fs (loop4): Could not load journal inode [ 118.454796][ T9300] FAULT_INJECTION: forcing a failure. [ 118.454796][ T9300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.454820][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.5.1078 Tainted: G L syzkaller #0 PREEMPT [ 118.454832][ T9300] Tainted: [L]=SOFTLOCKUP [ 118.454835][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 118.454840][ T9300] Call trace: [ 118.454843][ T9300] show_stack+0x2c/0x3c (C) [ 118.454861][ T9300] __dump_stack+0x30/0x40 [ 118.454870][ T9300] dump_stack_lvl+0xd8/0x12c [ 118.454880][ T9300] dump_stack+0x1c/0x28 [ 118.454889][ T9300] should_fail_ex+0x418/0x58c [ 118.454900][ T9300] should_fail+0x14/0x24 [ 118.454909][ T9300] should_fail_usercopy+0x20/0x30 [ 118.454919][ T9300] _copy_from_iter+0x188/0x1064 [ 118.454930][ T9300] netlink_sendmsg+0x570/0x948 [ 118.454940][ T9300] __sock_sendmsg+0xc8/0x17c [ 118.454948][ T9300] ____sys_sendmsg+0x3d0/0x6c8 [ 118.454957][ T9300] ___sys_sendmsg+0x198/0x224 [ 118.454965][ T9300] __sys_sendmsg+0x158/0x204 [ 118.454973][ T9300] __arm64_sys_sendmsg+0x88/0x9c [ 118.454982][ T9300] invoke_syscall+0x98/0x244 [ 118.454992][ T9300] el0_svc_common+0xec/0x23c [ 118.455001][ T9300] do_el0_svc+0x4c/0x5c [ 118.455011][ T9300] el0_svc+0x60/0x1d8 [ 118.455020][ T9300] el0t_64_sync_handler+0x44/0x104 [ 118.455029][ T9300] el0t_64_sync+0x198/0x19c [ 118.523122][ T6080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.598162][ T9304] FAULT_INJECTION: forcing a failure. [ 118.598162][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 118.598192][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.5.1081 Tainted: G L syzkaller #0 PREEMPT [ 118.598211][ T9304] Tainted: [L]=SOFTLOCKUP [ 118.598216][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 118.598223][ T9304] Call trace: [ 118.598227][ T9304] show_stack+0x2c/0x3c (C) [ 118.598250][ T9304] __dump_stack+0x30/0x40 [ 118.598265][ T9304] dump_stack_lvl+0xd8/0x12c [ 118.598278][ T9304] dump_stack+0x1c/0x28 [ 118.598289][ T9304] should_fail_ex+0x418/0x58c [ 118.598304][ T9304] should_failslab+0xc4/0x120 [ 118.598318][ T9304] __kmalloc_cache_noprof+0x94/0x5fc [ 118.598328][ T9304] ppp_register_net_channel+0x68/0x520 [ 118.598342][ T9304] pppol2tp_connect+0xc90/0x13a0 [ 118.598356][ T9304] __sys_connect_file+0x13c/0x184 [ 118.598375][ T9304] __sys_connect+0x114/0x194 [ 118.598384][ T9304] __arm64_sys_connect+0x84/0x9c [ 118.598394][ T9304] invoke_syscall+0x98/0x244 [ 118.598407][ T9304] el0_svc_common+0xec/0x23c [ 118.598419][ T9304] do_el0_svc+0x4c/0x5c [ 118.598431][ T9304] el0_svc+0x60/0x1d8 [ 118.598441][ T9304] el0t_64_sync_handler+0x44/0x104 [ 118.598452][ T9304] el0t_64_sync+0x198/0x19c [ 118.622258][ T9306] loop4: detected capacity change from 0 to 512 [ 118.641474][ T9306] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 118.641488][ T9306] FAT-fs (loop4): Filesystem has been set read-only [ 118.641593][ T9306] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 118.642006][ T9306] syz.4.1077: attempt to access beyond end of device [ 118.642006][ T9306] loop4: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 118.683654][ T9308] loop5: detected capacity change from 0 to 7 [ 118.779800][ T9314] loop0: detected capacity change from 0 to 8192 [ 118.785618][ T9314] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.807493][ T4714] Bluetooth: hci0: command tx timeout [ 118.856805][ T9308] Dev loop5: unable to read RDB block 7 [ 118.856829][ T9308] loop5: unable to read partition table [ 118.856908][ T9308] loop5: partition table beyond EOD, truncated [ 118.856939][ T9308] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 118.868429][ T9317] loop5: detected capacity change from 0 to 512 [ 118.869387][ T9317] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 118.945280][ T9317] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -ENXIO [ 119.060505][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1084'. [ 119.227349][ T4816] tipc: Node number set to 2886997007 [ 119.389683][ T9362] loop5: detected capacity change from 0 to 128 [ 119.391747][ T9362] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 119.405324][ T9362] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.486722][ T5139] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.525933][ T9373] dlm: no locking on control device [ 119.525964][ T9374] dlm: no locking on control device [ 120.560471][ T9429] loop6: detected capacity change from 0 to 512 [ 120.584731][ T9429] Quota error (device loop6): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 120.584781][ T9429] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 120.584794][ T9429] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1099: Failed to acquire dquot type 1 [ 120.584806][ T9429] loop6: lost filesystem error report for type 5 error -117 [ 120.586499][ T9429] EXT4-fs (loop6): 1 truncate cleaned up [ 120.586921][ T9429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.624522][ T6080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.762411][ T9450] EXT4-fs: Ignoring removed orlov option [ 120.789813][ T9450] overlay: Unknown parameter 'hash' [ 120.966342][ T9446] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.048527][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 121.048547][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 121.435377][ T9479] FAULT_INJECTION: forcing a failure. [ 121.435377][ T9479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.435400][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.5.1119 Tainted: G L syzkaller #0 PREEMPT [ 121.435414][ T9479] Tainted: [L]=SOFTLOCKUP [ 121.435418][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.435423][ T9479] Call trace: [ 121.435426][ T9479] show_stack+0x2c/0x3c (C) [ 121.435446][ T9479] __dump_stack+0x30/0x40 [ 121.435459][ T9479] dump_stack_lvl+0xd8/0x12c [ 121.435468][ T9479] dump_stack+0x1c/0x28 [ 121.435478][ T9479] should_fail_ex+0x418/0x58c [ 121.435490][ T9479] should_fail+0x14/0x24 [ 121.435499][ T9479] should_fail_usercopy+0x20/0x30 [ 121.435509][ T9479] _inline_copy_to_user+0x3c/0x144 [ 121.435522][ T9479] do_fcntl+0xa18/0x1568 [ 121.435531][ T9479] __arm64_sys_fcntl+0x118/0x1ac [ 121.435540][ T9479] invoke_syscall+0x98/0x244 [ 121.435553][ T9479] el0_svc_common+0xec/0x23c [ 121.435563][ T9479] do_el0_svc+0x4c/0x5c [ 121.435572][ T9479] el0_svc+0x60/0x1d8 [ 121.435582][ T9479] el0t_64_sync_handler+0x44/0x104 [ 121.435591][ T9479] el0t_64_sync+0x198/0x19c [ 121.474739][ T9480] FAULT_INJECTION: forcing a failure. [ 121.474739][ T9480] name fail_futex, interval 1, probability 0, space 0, times 1 [ 121.474762][ T9480] CPU: 1 UID: 0 PID: 9480 Comm: syz.7.1118 Tainted: G L syzkaller #0 PREEMPT [ 121.474775][ T9480] Tainted: [L]=SOFTLOCKUP [ 121.474779][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.474785][ T9480] Call trace: [ 121.474788][ T9480] show_stack+0x2c/0x3c (C) [ 121.474810][ T9480] __dump_stack+0x30/0x40 [ 121.474822][ T9480] dump_stack_lvl+0xd8/0x12c [ 121.474834][ T9480] dump_stack+0x1c/0x28 [ 121.474845][ T9480] should_fail_ex+0x418/0x58c [ 121.474857][ T9480] should_fail+0x14/0x24 [ 121.474868][ T9480] get_futex_key+0x1ec/0x12b0 [ 121.474879][ T9480] futex_wait_setup+0x58/0x674 [ 121.474890][ T9480] __futex_wait+0x108/0x25c [ 121.474901][ T9480] futex_wait+0x108/0x2c0 [ 121.474912][ T9480] do_futex+0x320/0x378 [ 121.474922][ T9480] __arm64_sys_futex+0x2e4/0x418 [ 121.474932][ T9480] invoke_syscall+0x98/0x244 [ 121.474944][ T9480] el0_svc_common+0xec/0x23c [ 121.474956][ T9480] do_el0_svc+0x4c/0x5c [ 121.474967][ T9480] el0_svc+0x60/0x1d8 [ 121.474978][ T9480] el0t_64_sync_handler+0x44/0x104 [ 121.474989][ T9480] el0t_64_sync+0x198/0x19c [ 121.485550][ T5628] IPVS: starting estimator thread 0... [ 121.491001][ T9480] FAULT_INJECTION: forcing a failure. [ 121.491001][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 121.491023][ T9480] CPU: 1 UID: 0 PID: 9480 Comm: syz.7.1118 Tainted: G L syzkaller #0 PREEMPT [ 121.491037][ T9480] Tainted: [L]=SOFTLOCKUP [ 121.491041][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.491046][ T9480] Call trace: [ 121.491049][ T9480] show_stack+0x2c/0x3c (C) [ 121.491067][ T9480] __dump_stack+0x30/0x40 [ 121.491079][ T9480] dump_stack_lvl+0xd8/0x12c [ 121.491090][ T9480] dump_stack+0x1c/0x28 [ 121.491101][ T9480] should_fail_ex+0x418/0x58c [ 121.491113][ T9480] should_failslab+0xc4/0x120 [ 121.491127][ T9480] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 121.491140][ T9480] sock_alloc_inode+0x30/0x180 [ 121.491152][ T9480] alloc_inode+0x68/0x198 [ 121.491162][ T9480] sock_alloc+0x4c/0x204 [ 121.491171][ T9480] __sock_create+0x108/0x670 [ 121.491179][ T9480] __sys_socket_create+0xc0/0x11c [ 121.491189][ T9480] __sys_socket+0x44/0xec [ 121.491198][ T9480] __arm64_sys_socket+0x84/0x9c [ 121.491207][ T9480] invoke_syscall+0x98/0x244 [ 121.491219][ T9480] el0_svc_common+0xec/0x23c [ 121.491231][ T9480] do_el0_svc+0x4c/0x5c [ 121.491242][ T9480] el0_svc+0x60/0x1d8 [ 121.491252][ T9480] el0t_64_sync_handler+0x44/0x104 [ 121.491263][ T9480] el0t_64_sync+0x198/0x19c [ 121.491275][ T9480] socket: no more sockets [ 121.520478][ T9480] 9pnet_fd: p9_fd_create_unix (9480): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 121.570125][ T9483] IPVS: using max 60 ests per chain, 144000 per kthread [ 121.627047][ T9496] dvmrp8: entered allmulticast mode [ 121.672323][ T9496] syz_tun: entered allmulticast mode [ 121.672462][ T9500] dvmrp8: left allmulticast mode [ 121.710054][ T9486] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 121.710092][ T9486] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 121.710102][ T9486] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1121: Failed to acquire dquot type 0 [ 121.756355][ T9507] FAULT_INJECTION: forcing a failure. [ 121.756355][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 121.756377][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.6.1124 Tainted: G L syzkaller #0 PREEMPT [ 121.756390][ T9507] Tainted: [L]=SOFTLOCKUP [ 121.756394][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.756398][ T9507] Call trace: [ 121.756401][ T9507] show_stack+0x2c/0x3c (C) [ 121.756419][ T9507] __dump_stack+0x30/0x40 [ 121.756429][ T9507] dump_stack_lvl+0xd8/0x12c [ 121.756439][ T9507] dump_stack+0x1c/0x28 [ 121.756448][ T9507] should_fail_ex+0x418/0x58c [ 121.756459][ T9507] should_failslab+0xc4/0x120 [ 121.756470][ T9507] kmem_cache_alloc_noprof+0x94/0x5d4 [ 121.756481][ T9507] skb_clone+0x1ac/0x320 [ 121.756491][ T9507] __netlink_deliver_tap+0x364/0x6f4 [ 121.756500][ T9507] netlink_deliver_tap+0x1d8/0x1dc [ 121.756509][ T9507] netlink_unicast+0x5dc/0x7f8 [ 121.756517][ T9507] netlink_sendmsg+0x648/0x948 [ 121.756525][ T9507] __sock_sendmsg+0xc8/0x17c [ 121.756533][ T9507] ____sys_sendmsg+0x3d0/0x6c8 [ 121.756542][ T9507] ___sys_sendmsg+0x198/0x224 [ 121.756550][ T9507] __sys_sendmsg+0x158/0x204 [ 121.756558][ T9507] __arm64_sys_sendmsg+0x88/0x9c [ 121.756567][ T9507] invoke_syscall+0x98/0x244 [ 121.756577][ T9507] el0_svc_common+0xec/0x23c [ 121.756587][ T9507] do_el0_svc+0x4c/0x5c [ 121.756596][ T9507] el0_svc+0x60/0x1d8 [ 121.756606][ T9507] el0t_64_sync_handler+0x44/0x104 [ 121.756615][ T9507] el0t_64_sync+0x198/0x19c [ 121.780145][ T9485] syz_tun: left allmulticast mode [ 121.840348][ T9511] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.844271][ T9511] EXT4-fs (loop5): 1 truncate cleaned up [ 121.964819][ T49] Bluetooth: Error in BCSP hdr checksum [ 122.228784][ T1253] Bluetooth: Error in BCSP hdr checksum [ 122.567345][ T93] Bluetooth: Error in BCSP hdr checksum [ 122.738456][ T9536] binder: Bad value for 'stats' [ 122.738973][ T9535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.748951][ T9538] FAULT_INJECTION: forcing a failure. [ 122.748951][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 122.748972][ T9538] CPU: 1 UID: 0 PID: 9538 Comm: syz.5.1135 Tainted: G L syzkaller #0 PREEMPT [ 122.748984][ T9538] Tainted: [L]=SOFTLOCKUP [ 122.748988][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 122.748993][ T9538] Call trace: [ 122.748996][ T9538] show_stack+0x2c/0x3c (C) [ 122.749013][ T9538] __dump_stack+0x30/0x40 [ 122.749023][ T9538] dump_stack_lvl+0xd8/0x12c [ 122.749033][ T9538] dump_stack+0x1c/0x28 [ 122.749042][ T9538] should_fail_ex+0x418/0x58c [ 122.749053][ T9538] should_failslab+0xc4/0x120 [ 122.749063][ T9538] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 122.749074][ T9538] hugetlbfs_alloc_inode+0xdc/0x128 [ 122.749083][ T9538] alloc_inode+0x68/0x198 [ 122.749092][ T9538] new_inode+0x20/0x50 [ 122.749100][ T9538] hugetlbfs_get_inode+0x80/0x724 [ 122.749111][ T9538] hugetlb_file_setup+0x20c/0x574 [ 122.749121][ T9538] ksys_mmap_pgoff+0x16c/0x5b4 [ 122.749129][ T9538] __arm64_sys_mmap+0x110/0x12c [ 122.749139][ T9538] invoke_syscall+0x98/0x244 [ 122.749149][ T9538] el0_svc_common+0xec/0x23c [ 122.749158][ T9538] do_el0_svc+0x4c/0x5c [ 122.749167][ T9538] el0_svc+0x60/0x1d8 [ 122.749177][ T9538] el0t_64_sync_handler+0x44/0x104 [ 122.749186][ T9538] el0t_64_sync+0x198/0x19c [ 123.241925][ T9549] FAULT_INJECTION: forcing a failure. [ 123.241925][ T9549] name failslab, interval 1, probability 0, space 0, times 0 [ 123.241948][ T9549] CPU: 0 UID: 0 PID: 9549 Comm: syz.0.1138 Tainted: G L syzkaller #0 PREEMPT [ 123.241963][ T9549] Tainted: [L]=SOFTLOCKUP [ 123.241967][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 123.241973][ T9549] Call trace: [ 123.241976][ T9549] show_stack+0x2c/0x3c (C) [ 123.241996][ T9549] __dump_stack+0x30/0x40 [ 123.242006][ T9549] dump_stack_lvl+0xd8/0x12c [ 123.242016][ T9549] dump_stack+0x1c/0x28 [ 123.242025][ T9549] should_fail_ex+0x418/0x58c [ 123.242036][ T9549] should_failslab+0xc4/0x120 [ 123.242047][ T9549] kmem_cache_alloc_noprof+0x94/0x5d4 [ 123.242058][ T9549] skb_clone+0x1ac/0x320 [ 123.242068][ T9549] pfkey_sendmsg+0x3bc/0xdf8 [ 123.242078][ T9549] __sock_sendmsg+0xc8/0x17c [ 123.242087][ T9549] ____sys_sendmsg+0x3d0/0x6c8 [ 123.242095][ T9549] ___sys_sendmsg+0x198/0x224 [ 123.242104][ T9549] __sys_sendmsg+0x158/0x204 [ 123.242112][ T9549] __arm64_sys_sendmsg+0x88/0x9c [ 123.242120][ T9549] invoke_syscall+0x98/0x244 [ 123.242131][ T9549] el0_svc_common+0xec/0x23c [ 123.242140][ T9549] do_el0_svc+0x4c/0x5c [ 123.242150][ T9549] el0_svc+0x60/0x1d8 [ 123.242159][ T9549] el0t_64_sync_handler+0x44/0x104 [ 123.242168][ T9549] el0t_64_sync+0x198/0x19c [ 123.316771][ T9555] set_capacity_and_notify: 4 callbacks suppressed [ 123.316785][ T9555] loop4: detected capacity change from 0 to 512 [ 123.346391][ T9555] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 3: comm syz.4.1141: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 123.354815][ T9555] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 12: comm syz.4.1141: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 123.355036][ T9555] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz.4.1141: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 123.356637][ T9555] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz.4.1141: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 123.356811][ T9555] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 18: comm syz.4.1141: lblock 17 mapped to illegal pblock 18 (length 1) [ 123.680311][ T9563] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.687027][ T9563] loop6: detected capacity change from 0 to 1024 [ 123.694085][ T9563] EXT4-fs: Ignoring removed bh option [ 123.695561][ T9563] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.705316][ T9563] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.1143: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.705338][ T9563] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.705441][ T9563] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 123.705457][ T9563] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.1143: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.705471][ T9563] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.705554][ T9563] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 123.705567][ T9563] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1143: Failed to acquire dquot type 0 [ 123.705579][ T9563] loop6: lost filesystem error report for type 5 error -117 [ 123.705871][ T9563] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 123.705883][ T9563] loop6: lost filesystem error report for type 5 error -117 [ 123.710107][ C0] EXT4-fs (loop6): error count since last fsck: 4 [ 123.710122][ C0] EXT4-fs (loop6): initial error at time 123: ext4_map_blocks:790: inode 3: block 2 [ 123.710142][ C0] EXT4-fs (loop6): last error at time 123: ext4_reserve_inode_write:6522 [ 123.738343][ T9563] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.1143: mark_inode_dirty error [ 123.738384][ T9563] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.738541][ T9563] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 123.738629][ T9563] EXT4-fs (loop6): 1 orphan inode deleted [ 123.757767][ T534] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.766713][ T534] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 123.766743][ T534] EXT4-fs error (device loop6): ext4_write_dquot:7049: comm kworker/u8:5: Failed to commit dquot type 0 [ 123.776307][ T534] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 123.826105][ T6080] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.826126][ T6080] loop6: lost filesystem error report for type 5 error -117 [ 123.828017][ T6080] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 123.828039][ T6080] loop6: lost filesystem error report for type 5 error -117 [ 123.828476][ T6080] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 123.828495][ T6080] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.828644][ T6080] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.828655][ T6080] loop6: lost filesystem error report for type 5 error -117 [ 123.864821][ T9566] loop6: detected capacity change from 0 to 256 [ 123.888641][ T9566] FAT-fs (loop6): Directory bread(block 1285) failed [ 123.888664][ T9566] FAT-fs (loop6): Directory bread(block 1286) failed [ 123.888675][ T9566] FAT-fs (loop6): Directory bread(block 1287) failed [ 123.888713][ T9566] FAT-fs (loop6): Directory bread(block 1288) failed [ 124.007446][ T4713] Bluetooth: hci5: command 0x1003 tx timeout [ 124.007631][ T4714] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 124.878472][ T9585] ip_tables: iptables: counters copy to user failed while replacing table [ 124.898702][ T4714] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 124.898731][ T4714] Bluetooth: hci3: Injecting HCI hardware error event [ 124.899876][ T4713] Bluetooth: hci3: hardware error 0x00 [ 124.954125][ T9588] tmpfs: Unknown parameter 'mpץr' [ 124.991653][ T9590] loop6: detected capacity change from 0 to 8 [ 124.992496][ T9590] squashfs: Unknown parameter 'er|ors' [ 125.083796][ T9596] fuse: Bad value for 'fd' [ 125.086218][ T9596] binder: 9595:9596 got reply transaction with no transaction stack [ 125.086237][ T9596] binder: 9595:9596 transaction reply to 0:0 failed 18/29201/-71, code 0 size 88-24 line 3155 [ 125.099583][ T4827] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.305213][ T9610] netlink: 'syz.4.1158': attribute type 10 has an invalid length. [ 125.348925][ T9610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.349814][ T9610] team0: Port device netdevsim1 added [ 125.353640][ T9610] loop4: detected capacity change from 0 to 512 [ 125.354405][ T9610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.357166][ T9610] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1158: bad orphan inode 131083 [ 125.357192][ T9610] loop4: lost filesystem error report for type 5 error -117 [ 125.358903][ T9610] EXT4-fs mount: 10 callbacks suppressed [ 125.359345][ T9610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.691999][ T9622] loop7: detected capacity change from 0 to 256 [ 125.693827][ T9622] FAT-fs (loop7): Directory bread(block 1285) failed [ 125.693844][ T9622] FAT-fs (loop7): Directory bread(block 1286) failed [ 125.693856][ T9622] FAT-fs (loop7): Directory bread(block 1287) failed [ 125.693891][ T9622] FAT-fs (loop7): Directory bread(block 1288) failed [ 125.765037][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.937823][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.937871][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.091702][ T1253] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.213351][ T1253] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.278606][ T9647] FAULT_INJECTION: forcing a failure. [ 126.278606][ T9647] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.278631][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.5.1164 Tainted: G L syzkaller #0 PREEMPT [ 126.278645][ T9647] Tainted: [L]=SOFTLOCKUP [ 126.278649][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.278655][ T9647] Call trace: [ 126.278658][ T9647] show_stack+0x2c/0x3c (C) [ 126.278680][ T9647] __dump_stack+0x30/0x40 [ 126.278697][ T9647] dump_stack_lvl+0xd8/0x12c [ 126.278708][ T9647] dump_stack+0x1c/0x28 [ 126.278720][ T9647] should_fail_ex+0x418/0x58c [ 126.278732][ T9647] should_fail+0x14/0x24 [ 126.278744][ T9647] get_futex_key+0x1ec/0x12b0 [ 126.278755][ T9647] futex_wait_setup+0x58/0x674 [ 126.278766][ T9647] __futex_wait+0x108/0x25c [ 126.278777][ T9647] futex_wait+0x108/0x2c0 [ 126.278788][ T9647] do_futex+0x320/0x378 [ 126.278798][ T9647] __arm64_sys_futex+0x2e4/0x418 [ 126.278809][ T9647] invoke_syscall+0x98/0x244 [ 126.278821][ T9647] el0_svc_common+0xec/0x23c [ 126.278832][ T9647] do_el0_svc+0x4c/0x5c [ 126.278844][ T9647] el0_svc+0x60/0x1d8 [ 126.278855][ T9647] el0t_64_sync_handler+0x44/0x104 [ 126.278866][ T9647] el0t_64_sync+0x198/0x19c [ 126.279493][ T13] IPVS: starting estimator thread 0... [ 126.300795][ T9647] FAULT_INJECTION: forcing a failure. [ 126.300795][ T9647] name failslab, interval 1, probability 0, space 0, times 0 [ 126.300820][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.5.1164 Tainted: G L syzkaller #0 PREEMPT [ 126.300834][ T9647] Tainted: [L]=SOFTLOCKUP [ 126.300837][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.300843][ T9647] Call trace: [ 126.300846][ T9647] show_stack+0x2c/0x3c (C) [ 126.300865][ T9647] __dump_stack+0x30/0x40 [ 126.300877][ T9647] dump_stack_lvl+0xd8/0x12c [ 126.300889][ T9647] dump_stack+0x1c/0x28 [ 126.300900][ T9647] should_fail_ex+0x418/0x58c [ 126.300913][ T9647] should_failslab+0xc4/0x120 [ 126.300925][ T9647] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 126.300939][ T9647] sock_alloc_inode+0x30/0x180 [ 126.300951][ T9647] alloc_inode+0x68/0x198 [ 126.300962][ T9647] sock_alloc+0x4c/0x204 [ 126.300970][ T9647] __sock_create+0x108/0x670 [ 126.300980][ T9647] __sys_socket_create+0xc0/0x11c [ 126.300989][ T9647] __sys_socket+0x44/0xec [ 126.300998][ T9647] __arm64_sys_socket+0x84/0x9c [ 126.301007][ T9647] invoke_syscall+0x98/0x244 [ 126.301019][ T9647] el0_svc_common+0xec/0x23c [ 126.301031][ T9647] do_el0_svc+0x4c/0x5c [ 126.301042][ T9647] el0_svc+0x60/0x1d8 [ 126.301054][ T9647] el0t_64_sync_handler+0x44/0x104 [ 126.301064][ T9647] el0t_64_sync+0x198/0x19c [ 126.301076][ T9647] socket: no more sockets [ 126.329144][ T9647] 9pnet_fd: p9_fd_create_unix (9647): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 126.339770][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.343100][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.343887][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.345639][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.345845][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.392768][ T1253] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.399727][ T9652] IPVS: using max 59 ests per chain, 141600 per kthread [ 126.414284][ T9654] fuse: Bad value for 'fd' [ 126.416527][ T9654] binder: 9653:9654 got reply transaction with no transaction stack [ 126.416547][ T9654] binder: 9653:9654 transaction reply to 0:0 failed 21/29201/-71, code 0 size 88-24 line 3155 [ 126.424464][ T4710] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.539228][ T9670] netlink: 'syz.5.1170': attribute type 10 has an invalid length. [ 126.539462][ T9671] Bluetooth: MGMT ver 1.23 [ 126.547055][ T1253] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.606769][ T9670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.607660][ T1085] lo speed is unknown, defaulting to 1000 [ 126.678575][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.678753][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.743260][ T9681] tipc: Enabling of bearer rejected, already enabled [ 126.746562][ T9681] loop7: detected capacity change from 0 to 1024 [ 126.757728][ T9681] EXT4-fs: Ignoring removed orlov option [ 126.765953][ T9681] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 126.767806][ T9681] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 126.767895][ T9681] EXT4-fs (loop7): orphan cleanup on readonly fs [ 126.768450][ T9681] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 126.768464][ T9681] loop7: lost filesystem error report for type 5 error -117 [ 126.768547][ T9681] EXT4-fs (loop7): Remounting filesystem read-only [ 126.768557][ T9681] Quota error (device loop7): write_blk: dquota write failed [ 126.768583][ T9681] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 126.768632][ T9681] EXT4-fs (loop7): 1 truncate cleaned up [ 126.769240][ T9681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.784626][ T9656] lo speed is unknown, defaulting to 1000 [ 126.784948][ T9656] lo speed is unknown, defaulting to 1000 [ 126.840194][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.929736][ T1253] bridge_slave_1: left allmulticast mode [ 126.929759][ T1253] bridge_slave_1: left promiscuous mode [ 126.929840][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.948013][ T1253] bridge_slave_0: left allmulticast mode [ 126.948033][ T1253] bridge_slave_0: left promiscuous mode [ 126.948111][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.970175][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.974601][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.975550][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.976109][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.976322][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.123662][ T1253] tipc: Disabling bearer [ 127.123723][ T1253] tipc: Left network mode [ 127.129791][ T4713] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 127.152679][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.152735][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.152787][ T9656] bridge_slave_0: entered allmulticast mode [ 127.153227][ T9656] bridge_slave_0: entered promiscuous mode [ 127.154626][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.154680][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.154730][ T9656] bridge_slave_1: entered allmulticast mode [ 127.155157][ T9656] bridge_slave_1: entered promiscuous mode [ 127.166259][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.170100][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.225077][ T9656] team0: Port device team_slave_0 added [ 127.226199][ T9656] team0: Port device team_slave_1 added [ 127.240936][ T9737] loop7: detected capacity change from 0 to 512 [ 127.243834][ T9737] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.249788][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.249798][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.249812][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.250346][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.250361][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.250373][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.260754][ T9656] hsr_slave_0: entered promiscuous mode [ 127.261047][ T9656] hsr_slave_1: entered promiscuous mode [ 127.278629][ T9737] EXT4-fs (loop7): 1 truncate cleaned up [ 127.281495][ T9737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.358707][ T9704] lo speed is unknown, defaulting to 1000 [ 127.405710][ T9704] lo speed is unknown, defaulting to 1000 [ 127.712286][ T1253] hsr_slave_0: left promiscuous mode [ 127.712711][ T1253] hsr_slave_1: left promiscuous mode [ 127.721023][ T1253] veth1_macvtap: left promiscuous mode [ 127.721052][ T1253] veth0_macvtap: left promiscuous mode [ 127.721099][ T1253] veth1_vlan: left promiscuous mode [ 127.721133][ T1253] veth0_vlan: left promiscuous mode [ 127.821799][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 127.825621][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 128.022596][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.022623][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.022677][ T9704] bridge_slave_0: entered allmulticast mode [ 128.023088][ T9704] bridge_slave_0: entered promiscuous mode [ 128.031732][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.031759][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.031818][ T9704] bridge_slave_1: entered allmulticast mode [ 128.033312][ T9704] bridge_slave_1: entered promiscuous mode [ 128.065589][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.110732][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.114098][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.123106][ T9704] team0: Port device team_slave_0 added [ 128.123847][ T9704] team0: Port device team_slave_1 added [ 128.182179][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.182193][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.182207][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.191980][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.191992][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.192010][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.221493][ T9704] hsr_slave_0: entered promiscuous mode [ 128.222524][ T9704] hsr_slave_1: entered promiscuous mode [ 128.223151][ T9704] debugfs: 'hsr0' already exists in 'hsr' [ 128.223175][ T9704] Cannot create hsr debugfs directory [ 128.293676][ T1253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.304938][ T9784] loop7: detected capacity change from 0 to 8192 [ 128.314971][ T9784] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.327342][ T4713] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 128.327384][ T4713] Bluetooth: hci0: Injecting HCI hardware error event [ 128.328767][ T4713] Bluetooth: hci0: hardware error 0x00 [ 128.407459][ T4714] Bluetooth: hci4: command tx timeout [ 128.424912][ T1253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.519910][ T1253] team0: Port device netdevsim1 removed [ 128.520931][ T1253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.586721][ T1253] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.593745][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 128.742585][ T1253] bridge_slave_1: left allmulticast mode [ 128.742608][ T1253] bridge_slave_1: left promiscuous mode [ 128.742685][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.744967][ T1253] bridge_slave_0: left allmulticast mode [ 128.744982][ T1253] bridge_slave_0: left promiscuous mode [ 128.745074][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.886372][ T1253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.912098][ T1253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.939109][ T1253] bond0 (unregistering): Released all slaves [ 128.941956][ T1253] bond1 (unregistering): Released all slaves [ 128.947616][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 128.991967][ T1253] tipc: Disabling bearer [ 128.992027][ T1253] tipc: Left network mode [ 129.013802][ T1253] IPVS: stopping backup sync thread 8434 ... [ 129.048848][ T4714] Bluetooth: hci1: command tx timeout [ 129.330455][ T1253] hsr_slave_0: left promiscuous mode [ 129.330743][ T1253] hsr_slave_1: left promiscuous mode [ 129.330998][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.331007][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.333891][ T1253] veth1_macvtap: left promiscuous mode [ 129.333918][ T1253] veth0_macvtap: left promiscuous mode [ 129.333963][ T1253] veth1_vlan: left promiscuous mode [ 129.333997][ T1253] veth0_vlan: left promiscuous mode [ 129.444129][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 129.450072][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 129.510037][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 129.663701][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 129.723315][ T9877] batman_adv: batadv0: Adding interface: syzkaller0 [ 129.723329][ T9877] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.723355][ T9877] batman_adv: batadv0: Interface activated: syzkaller0 [ 129.723879][ T9881] loop5: detected capacity change from 0 to 256 [ 129.739671][ T9875] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 129.740359][ T9881] FAT-fs (loop5): Directory bread(block 1285) failed [ 129.740387][ T9881] FAT-fs (loop5): Directory bread(block 1286) failed [ 129.740402][ T9881] FAT-fs (loop5): Directory bread(block 1287) failed [ 129.740447][ T9881] FAT-fs (loop5): Directory bread(block 1288) failed [ 129.762279][ T9875] batman_adv: batadv0: Removing interface: syzkaller0 [ 130.133423][ T9892] lo speed is unknown, defaulting to 1000 [ 130.284209][ T9656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.299210][ T4714] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 130.304302][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.318134][ T9656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.320512][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.320831][ T9656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.330513][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.365579][ T9656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.375272][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.446741][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.461253][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.463154][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.463179][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.466479][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.466502][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.488019][ T4714] Bluetooth: hci4: command tx timeout [ 130.488022][ T4713] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 130.675685][ T9973] loop7: detected capacity change from 0 to 4096 [ 130.676096][ T9973] ext4: Unknown parameter 'fow' [ 130.684601][ T9973] loop7: detected capacity change from 0 to 512 [ 130.684819][ T9973] EXT4-fs: Ignoring removed bh option [ 130.685375][ T9973] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.706319][ T9973] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.710525][ T9973] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1195: bg 0: block 248: padding at end of block bitmap is not set [ 130.710550][ T9973] loop7: lost filesystem error report for type 5 error -117 [ 130.711298][ T9973] Quota error (device loop7): write_blk: dquota write failed [ 130.711330][ T9973] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 130.711350][ T9973] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.1195: Failed to acquire dquot type 1 [ 130.711368][ T9973] loop7: lost filesystem error report for type 5 error -28 [ 130.712452][ T9973] EXT4-fs (loop7): 1 truncate cleaned up [ 130.712903][ T9973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 130.765076][ T6521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 130.801556][ T9704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.811819][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.813839][ T9704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 130.824783][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.825053][ T9987] loop5: detected capacity change from 0 to 128 [ 130.826226][ T9704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.835530][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.835845][ T9704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.843269][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.861841][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.914687][ T9656] veth0_vlan: entered promiscuous mode [ 130.916661][ T9656] veth1_vlan: entered promiscuous mode [ 130.966167][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.976037][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.991648][ T9656] veth0_macvtap: entered promiscuous mode [ 130.995281][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.995308][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.004371][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.004398][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.024905][ T9656] veth1_macvtap: entered promiscuous mode [ 131.040938][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.042004][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.044376][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.044601][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.044676][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.045283][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.120086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.120101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.129043][ T4713] Bluetooth: hci1: command tx timeout [ 131.150004][T10014] loop7: detected capacity change from 0 to 8192 [ 131.150155][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.150169][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.175462][T10014] loop7: p1 p2 p3 [ 131.177954][T10022] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 131.178089][T10022] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 131.195612][T10022] bond0: option slaves: interface +bond_sl does not exist! [ 131.282904][ T7491] udevd[7491]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 131.285500][ T7489] udevd[7489]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 131.340876][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.351562][ T4722] udevd[4722]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 131.370777][ T9704] veth0_vlan: entered promiscuous mode [ 131.386392][ T9704] veth1_vlan: entered promiscuous mode [ 131.423263][ T9704] veth0_macvtap: entered promiscuous mode [ 131.551400][T10045] loop5: detected capacity change from 0 to 8 [ 131.696440][ T9704] veth1_macvtap: entered promiscuous mode [ 131.715845][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.723660][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.792969][T10038] loop7: detected capacity change from 0 to 8192 [ 131.807342][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.808104][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.808123][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.808141][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.810765][T10038] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.848082][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.848094][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.876762][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.876777][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.051700][T10050] loop0: detected capacity change from 0 to 8192 [ 132.052621][T10050] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.196835][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1209'. [ 132.206947][T10071] FAULT_INJECTION: forcing a failure. [ 132.206947][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 132.206968][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.1.1208 Tainted: G L syzkaller #0 PREEMPT [ 132.206982][T10071] Tainted: [L]=SOFTLOCKUP [ 132.206985][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.206990][T10071] Call trace: [ 132.206993][T10071] show_stack+0x2c/0x3c (C) [ 132.207012][T10071] __dump_stack+0x30/0x40 [ 132.207022][T10071] dump_stack_lvl+0xd8/0x12c [ 132.207032][T10071] dump_stack+0x1c/0x28 [ 132.207041][T10071] should_fail_ex+0x418/0x58c [ 132.207052][T10071] should_failslab+0xc4/0x120 [ 132.207063][T10071] kmem_cache_alloc_noprof+0x94/0x5d4 [ 132.207074][T10071] skb_clone+0x1ac/0x320 [ 132.207084][T10071] __netlink_deliver_tap+0x364/0x6f4 [ 132.207093][T10071] netlink_deliver_tap+0x1d8/0x1dc [ 132.207101][T10071] netlink_unicast+0x5dc/0x7f8 [ 132.207109][T10071] netlink_sendmsg+0x648/0x948 [ 132.207118][T10071] __sock_sendmsg+0xc8/0x17c [ 132.207126][T10071] ____sys_sendmsg+0x3d0/0x6c8 [ 132.207134][T10071] ___sys_sendmsg+0x198/0x224 [ 132.207142][T10071] __sys_sendmsg+0x158/0x204 [ 132.207151][T10071] __arm64_sys_sendmsg+0x88/0x9c [ 132.207159][T10071] invoke_syscall+0x98/0x244 [ 132.207169][T10071] el0_svc_common+0xec/0x23c [ 132.207179][T10071] do_el0_svc+0x4c/0x5c [ 132.207188][T10071] el0_svc+0x60/0x1d8 [ 132.207204][T10071] el0t_64_sync_handler+0x44/0x104 [ 132.207214][T10071] el0t_64_sync+0x198/0x19c [ 132.353935][T10081] FAULT_INJECTION: forcing a failure. [ 132.353935][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 132.353959][T10081] CPU: 0 UID: 0 PID: 10081 Comm: syz.1.1212 Tainted: G L syzkaller #0 PREEMPT [ 132.353975][T10081] Tainted: [L]=SOFTLOCKUP [ 132.353979][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.353985][T10081] Call trace: [ 132.353988][T10081] show_stack+0x2c/0x3c (C) [ 132.354009][T10081] __dump_stack+0x30/0x40 [ 132.354020][T10081] dump_stack_lvl+0xd8/0x12c [ 132.354030][T10081] dump_stack+0x1c/0x28 [ 132.354040][T10081] should_fail_ex+0x418/0x58c [ 132.354051][T10081] should_failslab+0xc4/0x120 [ 132.354061][T10081] __kmalloc_cache_noprof+0x94/0x5fc [ 132.354070][T10081] ipv6_flowlabel_opt+0x10f0/0x1cd8 [ 132.354081][T10081] do_ipv6_setsockopt+0x10a4/0x2ba8 [ 132.354088][T10081] ipv6_setsockopt+0x68/0x16c [ 132.354096][T10081] udpv6_setsockopt+0xa8/0xc0 [ 132.354104][T10081] sock_common_setsockopt+0xb0/0xcc [ 132.354112][T10081] do_sock_setsockopt+0x1f0/0x330 [ 132.354121][T10081] __sys_setsockopt+0x104/0x170 [ 132.354129][T10081] __arm64_sys_setsockopt+0xc8/0xe4 [ 132.354138][T10081] invoke_syscall+0x98/0x244 [ 132.354148][T10081] el0_svc_common+0xec/0x23c [ 132.354158][T10081] do_el0_svc+0x4c/0x5c [ 132.354167][T10081] el0_svc+0x60/0x1d8 [ 132.354177][T10081] el0t_64_sync_handler+0x44/0x104 [ 132.354186][T10081] el0t_64_sync+0x198/0x19c [ 132.469195][ T4713] Bluetooth: hci2: hardware error 0x03 [ 132.859988][T10099] fuse: Unknown parameter 'oop0000000000121000' [ 133.147431][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 133.217258][ T4714] Bluetooth: hci1: command tx timeout [ 133.283901][T10156] FAULT_INJECTION: forcing a failure. [ 133.283901][T10156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.283924][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.7.1220 Tainted: G L syzkaller #0 PREEMPT [ 133.283936][T10156] Tainted: [L]=SOFTLOCKUP [ 133.283939][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.283945][T10156] Call trace: [ 133.283947][T10156] show_stack+0x2c/0x3c (C) [ 133.283965][T10156] __dump_stack+0x30/0x40 [ 133.283976][T10156] dump_stack_lvl+0xd8/0x12c [ 133.283986][T10156] dump_stack+0x1c/0x28 [ 133.283995][T10156] should_fail_ex+0x418/0x58c [ 133.284006][T10156] should_fail+0x14/0x24 [ 133.284015][T10156] should_fail_usercopy+0x20/0x30 [ 133.284025][T10156] simple_read_from_buffer+0xc4/0x238 [ 133.284035][T10156] proc_fail_nth_read+0x1a8/0x248 [ 133.284044][T10156] vfs_read+0x230/0x8c8 [ 133.284054][T10156] ksys_read+0x12c/0x228 [ 133.284063][T10156] __arm64_sys_read+0x84/0x98 [ 133.284073][T10156] invoke_syscall+0x98/0x244 [ 133.284083][T10156] el0_svc_common+0xec/0x23c [ 133.284092][T10156] do_el0_svc+0x4c/0x5c [ 133.284102][T10156] el0_svc+0x60/0x1d8 [ 133.284111][T10156] el0t_64_sync_handler+0x44/0x104 [ 133.284120][T10156] el0t_64_sync+0x198/0x19c [ 133.344356][T10164] loop2: detected capacity change from 0 to 128 [ 133.350817][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1221'. [ 133.402441][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 133.419726][T10170] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 133.420507][T10168] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 133.521757][T10187] Bluetooth: MGMT ver 1.23 [ 133.626518][T10201] loop0: detected capacity change from 0 to 512 [ 133.638644][T10199] FAT-fs (loop1): Directory bread(block 1285) failed [ 133.638668][T10199] FAT-fs (loop1): Directory bread(block 1286) failed [ 133.638755][T10199] FAT-fs (loop1): Directory bread(block 1287) failed [ 133.638803][T10199] FAT-fs (loop1): Directory bread(block 1288) failed [ 134.024825][ T4714] Bluetooth: hci2: unexpected event for opcode 0x005b [ 134.064116][T10220] netlink: 'syz.0.1235': attribute type 4 has an invalid length. [ 134.064136][T10220] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1235'. [ 134.138375][T10233] FAULT_INJECTION: forcing a failure. [ 134.138375][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.138406][T10233] CPU: 1 UID: 0 PID: 10233 Comm: syz.2.1236 Tainted: G L syzkaller #0 PREEMPT [ 134.138424][T10233] Tainted: [L]=SOFTLOCKUP [ 134.138428][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.138433][T10233] Call trace: [ 134.138436][T10233] show_stack+0x2c/0x3c (C) [ 134.138457][T10233] __dump_stack+0x30/0x40 [ 134.138468][T10233] dump_stack_lvl+0xd8/0x12c [ 134.138477][T10233] dump_stack+0x1c/0x28 [ 134.138487][T10233] should_fail_ex+0x418/0x58c [ 134.138498][T10233] should_fail+0x14/0x24 [ 134.138507][T10233] should_fail_usercopy+0x20/0x30 [ 134.138517][T10233] simple_read_from_buffer+0xc4/0x238 [ 134.138527][T10233] proc_fail_nth_read+0x1a8/0x248 [ 134.138535][T10233] vfs_read+0x230/0x8c8 [ 134.138546][T10233] ksys_read+0x12c/0x228 [ 134.138555][T10233] __arm64_sys_read+0x84/0x98 [ 134.138565][T10233] invoke_syscall+0x98/0x244 [ 134.138575][T10233] el0_svc_common+0xec/0x23c [ 134.138585][T10233] do_el0_svc+0x4c/0x5c [ 134.138594][T10233] el0_svc+0x60/0x1d8 [ 134.138604][T10233] el0t_64_sync_handler+0x44/0x104 [ 134.138613][T10233] el0t_64_sync+0x198/0x19c [ 134.326378][T10252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.343901][T10252] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ee1a8, mo2=0002] [ 134.343937][T10252] System zones: 0-5 [ 134.344626][T10252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.390663][T10258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.404082][T10258] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.1240: corrupted inode contents [ 134.404284][T10258] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.1240: mark_inode_dirty error [ 134.404443][T10258] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.1240: corrupted inode contents [ 134.404829][T10258] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.1240: mark_inode_dirty error [ 134.404987][T10258] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.1240: corrupted inode contents [ 134.405207][T10258] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.1240: mark_inode_dirty error [ 134.405598][T10258] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.1240: corrupted inode contents [ 134.429836][T10258] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.1240: mark_inode_dirty error [ 134.433464][ T9656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.433602][T10258] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem [ 134.435186][ T30] audit: type=1326 audit(134.420:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435293][ T30] audit: type=1326 audit(134.420:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435558][ T30] audit: type=1326 audit(134.420:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=444 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435650][ T30] audit: type=1326 audit(134.420:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435719][ T30] audit: type=1326 audit(134.420:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435830][ T30] audit: type=1326 audit(134.420:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435896][ T30] audit: type=1326 audit(134.420:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.435966][ T30] audit: type=1326 audit(134.420:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.0.1240" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96579368 code=0x7ffc0000 [ 134.585934][T10267] FAT-fs (loop2): Directory bread(block 1285) failed [ 134.585955][T10267] FAT-fs (loop2): Directory bread(block 1286) failed [ 134.585967][T10267] FAT-fs (loop2): Directory bread(block 1287) failed [ 134.586004][T10267] FAT-fs (loop2): Directory bread(block 1288) failed [ 134.809148][ T4713] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.809886][ T4713] Bluetooth: hci2: hardware error 0x03 [ 134.983201][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 135.089753][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 135.297331][ T4714] Bluetooth: hci1: command tx timeout [ 135.411020][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 135.855212][T10335] input: syz0 as /devices/virtual/input/input6 [ 135.861938][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1254'. [ 135.861964][T10335] netlink: 'syz.5.1254': attribute type 26 has an invalid length. [ 135.979709][T10345] FAULT_INJECTION: forcing a failure. [ 135.979709][T10345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.979732][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.5.1255 Tainted: G L syzkaller #0 PREEMPT [ 135.979746][T10345] Tainted: [L]=SOFTLOCKUP [ 135.979750][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.979756][T10345] Call trace: [ 135.979759][T10345] show_stack+0x2c/0x3c (C) [ 135.979778][T10345] __dump_stack+0x30/0x40 [ 135.979790][T10345] dump_stack_lvl+0xd8/0x12c [ 135.979800][T10345] dump_stack+0x1c/0x28 [ 135.979809][T10345] should_fail_ex+0x418/0x58c [ 135.979822][T10345] should_fail+0x14/0x24 [ 135.979831][T10345] should_fail_usercopy+0x20/0x30 [ 135.979841][T10345] _inline_copy_from_user+0x3c/0x174 [ 135.979854][T10345] pppol2tp_ioctl+0x64c/0x7f8 [ 135.979864][T10345] pppox_ioctl+0x18c/0x41c [ 135.979875][T10345] sock_do_ioctl+0x100/0x254 [ 135.979885][T10345] sock_ioctl+0x55c/0x7ec [ 135.979894][T10345] __arm64_sys_ioctl+0x154/0x1cc [ 135.979905][T10345] invoke_syscall+0x98/0x244 [ 135.979915][T10345] el0_svc_common+0xec/0x23c [ 135.979924][T10345] do_el0_svc+0x4c/0x5c [ 135.979934][T10345] el0_svc+0x60/0x1d8 [ 135.979944][T10345] el0t_64_sync_handler+0x44/0x104 [ 135.979952][T10345] el0t_64_sync+0x198/0x19c [ 136.039952][T10350] set_capacity_and_notify: 5 callbacks suppressed [ 136.039966][T10350] loop5: detected capacity change from 0 to 128 [ 136.169359][T10362] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.169359][T10362] The task syz.5.1257 (10362) triggered the difference, watch for misbehavior. [ 136.394419][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.394596][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.466324][T10383] loop1: detected capacity change from 0 to 2048 [ 136.517240][T10383] ------------[ cut here ]------------ [ 136.517251][T10383] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x6e0/0x7fc, CPU#1: syz.1.1261/10383 [ 136.520189][T10383] Modules linked in: [ 136.520885][T10383] CPU: 1 UID: 0 PID: 10383 Comm: syz.1.1261 Tainted: G L syzkaller #0 PREEMPT [ 136.522803][T10383] Tainted: [L]=SOFTLOCKUP [ 136.523567][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.525419][T10383] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 136.526797][T10383] pc : __kvmalloc_node_noprof+0x6e0/0x7fc [ 136.527813][T10383] lr : __kvmalloc_node_noprof+0x400/0x7fc [ 136.528778][T10383] sp : ffff8000977f7930 [ 136.529496][T10383] x29: ffff8000977f7980 x28: 00000000ffffffff x27: 0000001000000000 [ 136.530929][T10383] x26: 0001000000000000 x25: 0000000000000000 x24: 00000000000028c0 [ 136.532442][T10383] x23: ffff800082631c9c x22: ffff8000977f7ca8 x21: 0000008000000000 [ 136.533923][T10383] x20: ffff700012efef58 x19: 0000000000000000 x18: 0000000000000000 [ 136.535329][T10383] x17: ffff800080166554 x16: ffff800080cd9118 x15: ffff800082631978 [ 136.536719][T10383] x14: 0000000000000001 x13: 0000000000000005 x12: 0000000000000000 [ 136.538137][T10383] x11: 0000000000000000 x10: 0000000000000003 x9 : ffff800088a10ae0 [ 136.539544][T10383] x8 : 0000000000000cc0 x7 : 0000000000000000 x6 : ffff800080b83658 [ 136.540961][T10383] x5 : 00000000ffffffff x4 : 00000000000028c0 x3 : 0000008000000000 [ 136.542576][T10383] x2 : 0000008000000000 x1 : ffff0000cac43b00 x0 : 0000000000000001 [ 136.544152][T10383] Call trace: [ 136.544746][T10383] __kvmalloc_node_noprof+0x6e0/0x7fc (P) [ 136.545848][T10383] udmabuf_create+0x220/0xb34 [ 136.546737][T10383] udmabuf_ioctl+0x1b0/0x2b4 [ 136.547564][T10383] __arm64_sys_ioctl+0x154/0x1cc [ 136.548469][T10383] invoke_syscall+0x98/0x244 [ 136.549284][T10383] el0_svc_common+0xec/0x23c [ 136.550107][T10383] do_el0_svc+0x4c/0x5c [ 136.550854][T10383] el0_svc+0x60/0x1d8 [ 136.551577][T10383] el0t_64_sync_handler+0x44/0x104 [ 136.552484][T10383] el0t_64_sync+0x198/0x19c [ 136.553339][T10383] irq event stamp: 4140 [ 136.554121][T10383] hardirqs last enabled at (4139): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 136.556053][T10383] hardirqs last disabled at (4140): [] el1_brk64+0x20/0x54 [ 136.557591][T10383] softirqs last enabled at (4120): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 136.559493][T10383] softirqs last disabled at (4118): [] fpsimd_restore_current_state+0x44/0x9c8 [ 136.561291][T10383] ---[ end trace 0000000000000000 ]--- [ 136.887654][ T4713] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 141.321145][ T8761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.