last executing test programs:

1m21.151960061s ago: executing program 0 (id=123):
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0)

1m21.117434887s ago: executing program 0 (id=124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd0a, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70")

1m21.034598779s ago: executing program 0 (id=127):
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x1e, 0x4, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4)

1m20.933200775s ago: executing program 0 (id=130):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f00000004c0), 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2008820, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m20.711642478s ago: executing program 0 (id=138):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x40050)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0)

1m19.366630193s ago: executing program 0 (id=159):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m19.316495571s ago: executing program 32 (id=159):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m0.557555237s ago: executing program 5 (id=332):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffbff9, 0x0, 0x0, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf9, 0x3, 0x0, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0)

1m0.486632338s ago: executing program 5 (id=334):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x9, 0x2, {0x2, @meta={0x53465052, 0x61a1a284, 0x82eb, 0x9186, 0x1f45ea2c}}, 0x8})

1m0.168511717s ago: executing program 5 (id=336):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$TCFLSH(r0, 0x80047456, 0xfffffffffffffffd)

59.732801153s ago: executing program 5 (id=339):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x48)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)

57.683454025s ago: executing program 5 (id=353):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_io_uring_setup(0x44f6, 0x0, &(0x7f0000005040), &(0x7f0000005080), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000080), 0x7ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r0}, 0x38)

55.817202159s ago: executing program 5 (id=374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x25, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x20040}, 0x4801)
unshare(0x22020600)
r6 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000100001080000000081", @ANYRES32=r7, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0xc804)
ptrace$poke(0x5, r1, 0x0, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64], 0x1, 0x2c9, &(0x7f0000001400)="$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")

55.74404055s ago: executing program 33 (id=374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x25, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x20040}, 0x4801)
unshare(0x22020600)
r6 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000100001080000000081", @ANYRES32=r7, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0xc804)
ptrace$poke(0x5, r1, 0x0, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64], 0x1, 0x2c9, &(0x7f0000001400)="$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")

4.122559252s ago: executing program 6 (id=876):
syz_io_uring_setup(0x24, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./dev\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c7974653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73687672746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=")
setpgid(0x0, 0x0)
r1 = getpgid(0x0)
setpgid(0x0, r1)
mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0)

4.020211748s ago: executing program 6 (id=883):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@rodir}, {}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@fat=@tz_utc}, {@fat=@check_strict}, {@shortname_win95}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x3, 0x27b, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)

3.886633508s ago: executing program 6 (id=885):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000002, 0x12, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)

3.862469762s ago: executing program 6 (id=889):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r2, 0x2, 0x40000004, 0x21000000, 0x2, [], [0x3, 0x0, 0x2, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0xc01]})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r0, 0x100000000)

3.751889768s ago: executing program 6 (id=892):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="400104a0702688e4"], 0x14)

3.710130985s ago: executing program 2 (id=893):
syz_io_uring_setup(0x24, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./dev\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c7974653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73687672746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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")
setpgid(0x0, 0x0)
r1 = getpgid(0x0)
setpgid(0x0, r1)
mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0)

3.580142094s ago: executing program 2 (id=896):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

3.338623401s ago: executing program 2 (id=901):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x9, 0x7, 0x7, 0x0, r0, 0x100}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50)

3.318014654s ago: executing program 2 (id=902):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000"], 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)
fstat(r4, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a6c0)={0x78, 0x0, 0x7fff, {0x8, 0x351, 0x0, {0x3, 0x4, 0x5, 0x0, 0x7fff, 0xbd2, 0x6, 0x4, 0xc5000, 0x2000, 0x0, r2, r3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.062740173s ago: executing program 2 (id=905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000400200000700000000000000", @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38)

2.450140836s ago: executing program 3 (id=910):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

2.42515536s ago: executing program 3 (id=911):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0x8, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x9, 0xc, 0x0, 0xf, 0x4, 0xc, 0x5, 0xa, 0x6, 0x8, 0x10, 0x8, 0x3, 0x5, 0x1], 0x1, [0x9, 0xfff, 0x5, 0xf, 0x5, 0x2a2, 0x0, 0x1, 0x7fff, 0x7, 0x1, 0x9, 0xfff, 0xfffb, 0x0, 0x10], [0xffff, 0x5, 0x7fff, 0x200, 0xa, 0x5, 0xe9a, 0xd1, 0x3, 0xfff, 0x1, 0xc000, 0x101, 0x3, 0x9, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884)

2.218625661s ago: executing program 2 (id=912):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50)

2.193105666s ago: executing program 34 (id=912):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50)

1.714721248s ago: executing program 4 (id=915):
syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20e, &(0x7f0000000780)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)

1.618561173s ago: executing program 4 (id=916):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

1.558798182s ago: executing program 4 (id=917):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x40002002, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xd, 0x0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.479085404s ago: executing program 4 (id=918):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00')
readv(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/108, 0x6c}], 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pidfd_getfd(0xffffffffffffffff, r7, 0x0)
ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f00000030c0)={0x2, 0x0, 0x8, 0x1a, 0x1f8, &(0x7f0000002cc0)="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"})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)

1.477428425s ago: executing program 1 (id=927):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x40002002, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xd, 0x0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.410595115s ago: executing program 3 (id=919):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100), 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')

1.358276793s ago: executing program 3 (id=920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.356439623s ago: executing program 1 (id=921):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

981.357641ms ago: executing program 1 (id=922):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38)

922.602689ms ago: executing program 1 (id=923):
socket$rds(0x15, 0x5, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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")
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82)
r2 = fanotify_init(0x81, 0x40000)
fanotify_mark(r2, 0x105, 0x800101b, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6bf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3)
truncate(&(0x7f0000000040)='./file2\x00', 0x10003)

673.966077ms ago: executing program 6 (id=924):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c)
listen(r3, 0x50)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c)
listen(r4, 0xb)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

574.249002ms ago: executing program 4 (id=925):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
write(r0, &(0x7f0000000000)='27', 0x2)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x1d, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setuid(0xee00)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000340)={0x5, [], 0x1, "b1042939b6976a"})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000320)={0x2, 0x15, @loopback}, 0x10)

514.352511ms ago: executing program 4 (id=926):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10)
listen(r0, 0xa)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10)

491.042015ms ago: executing program 3 (id=928):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

333.791659ms ago: executing program 3 (id=929):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x240040c0)

94.084365ms ago: executing program 1 (id=930):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')

0s ago: executing program 1 (id=931):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x40002002, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xd, 0x0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

ode #15: comm syz.3.119: corrupted xattr block 33
[   45.188860][ T4809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   45.204452][ T4329] EXT4-fs (loop3): unmounting filesystem.
[   45.234745][ T4809] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #12: block 7: comm syz.0.130: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   45.365470][ T4331] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /25/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   45.377556][ T4331] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /25/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   45.674886][ T4331] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   45.699342][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.711190][ T4331] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /25/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   45.723942][ T4331] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /25/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   45.728463][ T4832] EXT4-fs: Ignoring removed i_version option
[   45.729791][ T4331] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   45.734275][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.737194][ T4331] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /25/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   45.742476][ T4331] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /25/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   45.752272][ T4331] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   45.759493][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.763781][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.767155][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.775308][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.782798][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   45.784818][ T4832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   45.788638][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.798368][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.806864][ T4832] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters
[   45.820068][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.823068][ T4832] EXT4-fs (loop4): Remounting filesystem read-only
[   45.840473][ T4331] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.880546][ T4339] EXT4-fs (loop4): unmounting filesystem.
[   46.135174][ T4852] set_capacity_and_notify: 8 callbacks suppressed
[   46.137348][ T4852] loop4: detected capacity change from 0 to 128
[   46.360408][ T4863] Config c/1 of g1 needs at least one function.
[   46.361795][ T4863] udc usbip-vudc.0: failed to start g1: -22
[   46.366132][ T4863] configfs-gadget.g1: probe of gadget.1 failed with error -22
[   46.370701][ T4863] UDC core: g1: couldn't find an available UDC or it's busy
[   46.634347][ T4331] EXT4-fs (loop0): unmounting filesystem.
[   46.653627][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   46.814701][ T4892] loop2: detected capacity change from 0 to 128
[   46.841477][ T4892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   46.853085][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.855409][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.856990][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.858899][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.861883][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   46.863211][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.865339][ T4892] capability: warning: `syz.2.165' uses 32-bit capabilities (legacy support in use)
[   47.197265][   T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.338356][   T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.359555][ T4913] loop1: detected capacity change from 0 to 1024
[   47.364193][ T4914] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   47.415458][   T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.428906][ T4913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   47.451635][ T4897] chnl_net:caif_netlink_parms(): no params data found
[   47.460963][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   47.503012][   T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.538440][ T4897] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.541100][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.543832][ T4897] device bridge_slave_0 entered promiscuous mode
[   47.547656][ T4897] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.549411][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.551924][ T4897] device bridge_slave_1 entered promiscuous mode
[   47.561175][ T4897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.564964][ T4897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.573412][ T4897] team0: Port device team_slave_0 added
[   47.575581][ T4897] team0: Port device team_slave_1 added
[   47.582284][ T4897] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.583647][ T4897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.588792][ T4897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.592141][ T4897] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.593553][ T4897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.600048][ T4897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.711840][ T4897] device hsr_slave_0 entered promiscuous mode
[   47.858755][ T4897] device hsr_slave_1 entered promiscuous mode
[   48.130064][ T4897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.133076][ T4897] Cannot create hsr debugfs directory
[   48.494396][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   48.532514][ T4945] netlink: 92 bytes leftover after parsing attributes in process `syz.3.179'.
[   48.534235][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'.
[   48.642865][ T4965] loop3: detected capacity change from 0 to 1024
[   48.669028][ T4965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   48.674505][ T4965] EXT4-fs (loop3): shut down requested (1)
[   48.688501][ T4329] EXT4-fs (loop3): unmounting filesystem.
[   48.722341][ T4897] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   48.811672][ T4897] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   49.830698][ T4347] Bluetooth: hci2: command 0x0409 tx timeout
[   50.242241][ T4897] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   50.310950][ T4897] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   50.419135][ T5017] loop4: detected capacity change from 0 to 8
[   50.481047][ T5025] FAULT_INJECTION: forcing a failure.
[   50.481047][ T5025] name fail_futex, interval 1, probability 0, space 0, times 1
[   50.483629][ T5025] CPU: 1 PID: 5025 Comm: syz.4.204 Not tainted syzkaller #0
[   50.484949][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   50.486968][ T5025] Call trace:
[   50.487619][ T5025]  dump_backtrace+0x1c4/0x1f0
[   50.488560][ T5025]  show_stack+0x2c/0x3c
[   50.489375][ T5025]  __dump_stack+0x30/0x40
[   50.490254][ T5025]  dump_stack_lvl+0xf4/0x15c
[   50.491208][ T5025]  dump_stack+0x1c/0x5c
[   50.492043][ T5025]  should_fail_ex+0x3cc/0x524
[   50.492959][ T5025]  should_fail+0x14/0x24
[   50.493853][ T5025]  get_futex_key+0x904/0xfb0
[   50.494803][ T5025]  futex_wake+0x10c/0x458
[   50.495711][ T5025]  do_futex+0x2c4/0x340
[   50.496587][ T5025]  __arm64_sys_futex+0x390/0x414
[   50.497604][ T5025]  invoke_syscall+0x98/0x290
[   50.498539][ T5025]  el0_svc_common+0x13c/0x258
[   50.499409][ T5025]  do_el0_svc+0x5c/0x134
[   50.500201][ T5025]  el0_svc+0x58/0x128
[   50.500964][ T5025]  el0t_64_sync_handler+0x84/0xf0
[   50.501929][ T5025]  el0t_64_sync+0x18c/0x190
[   50.606948][ T5034] loop4: detected capacity change from 0 to 512
[   50.630458][ T5034] EXT4-fs (loop4): Test dummy encryption mode enabled
[   50.643751][ T5034] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.207: inode has both inline data and extents flags
[   50.647726][ T5034] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.207: couldn't read orphan inode 15 (err -117)
[   50.654346][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   50.739327][ T4897] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.753815][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.755623][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.764255][ T4897] 8021q: adding VLAN 0 to HW filter on device team0
[   50.775325][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.777349][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.779218][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.780589][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.787922][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.791140][ T4339] EXT4-fs (loop4): unmounting filesystem.
[   50.793558][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.795445][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.798276][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.799550][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.825674][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.221772][ T5065] ip_tables: iptables: counters copy to user failed while replacing table
[   51.224217][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.236442][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.239249][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.260512][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.262220][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.264490][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.272853][ T5062] loop3: detected capacity change from 0 to 8192
[   51.275994][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.279440][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.288002][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.289976][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.294111][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.308122][ T5073] loop2: detected capacity change from 0 to 256
[   51.743460][ T4897] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.745383][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   51.746621][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   51.826274][ T5099] FAULT_INJECTION: forcing a failure.
[   51.826274][ T5099] name failslab, interval 1, probability 0, space 0, times 0
[   51.833460][ T5099] CPU: 1 PID: 5099 Comm: syz.2.225 Not tainted syzkaller #0
[   51.834823][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   51.836925][ T5099] Call trace:
[   51.837601][ T5099]  dump_backtrace+0x1c4/0x1f0
[   51.838559][ T5099]  show_stack+0x2c/0x3c
[   51.839397][ T5099]  __dump_stack+0x30/0x40
[   51.840277][ T5099]  dump_stack_lvl+0xf4/0x15c
[   51.841209][ T5099]  dump_stack+0x1c/0x5c
[   51.842038][ T5099]  should_fail_ex+0x3cc/0x524
[   51.842975][ T5099]  __should_failslab+0xc0/0x11c
[   51.843970][ T5099]  should_failslab+0x10/0x28
[   51.844851][ T5099]  __kmem_cache_alloc_node+0x7c/0x318
[   51.845877][ T5099]  __kmalloc_node+0xc8/0x184
[   51.846768][ T5099]  kvmalloc_node+0x88/0x1d4
[   51.847635][ T5099]  rhashtable_init+0x3b0/0xa10
[   51.848512][ T5099]  nft_rhash_init+0xf0/0x358
[   51.849403][ T5099]  nf_tables_newset+0x15a4/0x1d28
[   51.850370][ T5099]  nfnetlink_rcv+0xc7c/0x1c54
[   51.851231][ T5099]  netlink_unicast+0x5fc/0x80c
[   51.852122][ T5099]  netlink_sendmsg+0x6f0/0x9d8
[   51.853018][ T5099]  ____sys_sendmsg+0x588/0x90c
[   51.853915][ T5099]  __sys_sendmsg+0x288/0x374
[   51.854784][ T5099]  __arm64_sys_sendmsg+0x80/0x94
[   51.855698][ T5099]  invoke_syscall+0x98/0x290
[   51.856554][ T5099]  el0_svc_common+0x13c/0x258
[   51.857430][ T5099]  do_el0_svc+0x5c/0x134
[   51.858223][ T5099]  el0_svc+0x58/0x128
[   51.858971][ T5099]  el0t_64_sync_handler+0x84/0xf0
[   51.859903][ T5099]  el0t_64_sync+0x18c/0x190
[   51.869799][ T4347] Bluetooth: hci2: command 0x041b tx timeout
[   52.053059][ T5122] loop2: detected capacity change from 0 to 256
[   52.555467][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.557226][ T5140] loop3: detected capacity change from 0 to 256
[   52.557560][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.574775][ T4897] device veth0_vlan entered promiscuous mode
[   52.578649][ T4897] device veth1_vlan entered promiscuous mode
[   52.582736][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.588716][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.596208][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.598209][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   52.616169][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.617907][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.637775][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.640250][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.667046][ T4897] device veth0_macvtap entered promiscuous mode
[   52.682465][ T4897] device veth1_macvtap entered promiscuous mode
[   52.705118][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.709799][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.711545][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.749673][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.751999][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.755018][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.759095][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.765146][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.768250][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.773657][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.785014][ T4897] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.802922][   T27] kauditd_printk_skb: 16 callbacks suppressed
[   52.802930][   T27] audit: type=1326 audit(52.790:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.2.237" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79368 code=0x0
[   53.136503][ T5161] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   53.191792][ T5163] loop4: detected capacity change from 0 to 8192
[   53.609747][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.611537][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.613139][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.614777][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.656422][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.665081][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.669045][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.679686][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.685369][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.693897][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.698857][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.703966][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.705564][ T5176] loop1: detected capacity change from 0 to 256
[   53.716610][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.725373][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.734782][ T4897] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.764501][ T5182] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[   53.787116][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.789255][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.803287][ T4897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.805260][ T4897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.807027][ T4897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.812872][ T4897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.929908][ T4342] Bluetooth: hci2: command 0x040f tx timeout
[   54.661413][ T5219] loop3: detected capacity change from 0 to 256
[   54.747370][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.748918][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.760661][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.853823][   T56] device hsr_slave_0 left promiscuous mode
[   54.877432][ T5231] binder: 5230:5231 tried to acquire reference to desc 0, got 1 instead
[   54.897666][ T5231] binder: 5230:5231 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   54.900364][ T5231] binder: 5231 RLIMIT_NICE not set
[   54.901263][ T5231] binder: 5231 RLIMIT_NICE not set
[   54.943658][   T56] device hsr_slave_1 left promiscuous mode
[   55.010688][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.012509][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.018069][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.019356][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.022884][   T56] device bridge_slave_1 left promiscuous mode
[   55.025111][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.085563][ T5240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.263'.
[   55.131375][   T56] device bridge_slave_0 left promiscuous mode
[   55.142112][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.911800][   T56] device veth1_macvtap left promiscuous mode
[   55.913655][   T56] device veth0_macvtap left promiscuous mode
[   55.934328][   T56] device veth1_vlan left promiscuous mode
[   55.968314][   T56] device veth0_vlan left promiscuous mode
[   56.009740][ T4347] Bluetooth: hci2: command 0x0419 tx timeout
[   56.244506][ T4379] binder: release 5230:5231 transaction 17 out, still active
[   56.246064][ T4379] binder: undelivered TRANSACTION_COMPLETE
[   56.247327][ T4379] binder: release 5230:5231 transaction 17 in, still active
[   56.248657][ T4379] binder: send failed reply for transaction 17, target dead
[   56.316818][ T5255] FAULT_INJECTION: forcing a failure.
[   56.316818][ T5255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.319352][ T5255] CPU: 0 PID: 5255 Comm: syz.4.271 Not tainted syzkaller #0
[   56.320764][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   56.322866][ T5255] Call trace:
[   56.323549][ T5255]  dump_backtrace+0x1c4/0x1f0
[   56.324501][ T5255]  show_stack+0x2c/0x3c
[   56.325339][ T5255]  __dump_stack+0x30/0x40
[   56.326184][ T5255]  dump_stack_lvl+0xf4/0x15c
[   56.327081][ T5255]  dump_stack+0x1c/0x5c
[   56.327939][ T5255]  should_fail_ex+0x3cc/0x524
[   56.328899][ T5255]  should_fail+0x14/0x24
[   56.329778][ T5255]  should_fail_usercopy+0x20/0x30
[   56.330791][ T5255]  iovec_from_user+0xcc/0x60c
[   56.331758][ T5255]  __import_iovec+0x80/0x4d4
[   56.332659][ T5255]  import_iovec+0x88/0xa4
[   56.333514][ T5255]  copy_msghdr_from_user+0x34c/0x4e0
[   56.334506][ T5255]  __sys_sendmsg+0x230/0x374
[   56.335354][ T5255]  __arm64_sys_sendmsg+0x80/0x94
[   56.336279][ T5255]  invoke_syscall+0x98/0x290
[   56.337144][ T5255]  el0_svc_common+0x13c/0x258
[   56.337997][ T5255]  do_el0_svc+0x5c/0x134
[   56.338792][ T5255]  el0_svc+0x58/0x128
[   56.339549][ T5255]  el0t_64_sync_handler+0x84/0xf0
[   56.340502][ T5255]  el0t_64_sync+0x18c/0x190
[   56.512903][ T5261] FAULT_INJECTION: forcing a failure.
[   56.512903][ T5261] name failslab, interval 1, probability 0, space 0, times 0
[   56.515308][ T5261] CPU: 0 PID: 5261 Comm: syz.1.274 Not tainted syzkaller #0
[   56.516541][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   56.518320][ T5261] Call trace:
[   56.518943][ T5261]  dump_backtrace+0x1c4/0x1f0
[   56.519848][ T5261]  show_stack+0x2c/0x3c
[   56.520662][ T5261]  __dump_stack+0x30/0x40
[   56.521521][ T5261]  dump_stack_lvl+0xf4/0x15c
[   56.522407][ T5261]  dump_stack+0x1c/0x5c
[   56.523204][ T5261]  should_fail_ex+0x3cc/0x524
[   56.524122][ T5261]  __should_failslab+0xc0/0x11c
[   56.525187][ T5261]  should_failslab+0x10/0x28
[   56.526152][ T5261]  __kmem_cache_alloc_node+0x7c/0x318
[   56.527299][ T5261]  kmalloc_trace+0x48/0x94
[   56.528160][ T5261]  vkms_atomic_crtc_duplicate_state+0x78/0x170
[   56.529337][ T5261]  drm_atomic_get_crtc_state+0x150/0x358
[   56.530513][ T5261]  drm_atomic_get_plane_state+0x380/0x41c
[   56.531676][ T5261]  drm_client_modeset_commit_atomic+0x190/0x6c8
[   56.532936][ T5261]  drm_client_modeset_commit_locked+0xd0/0x49c
[   56.534102][ T5261]  drm_client_modeset_commit+0x50/0x7c
[   56.535144][ T5261]  drm_fbdev_client_restore+0xbc/0x154
[   56.536160][ T5261]  drm_client_dev_restore+0x120/0x238
[   56.537124][ T5261]  drm_release+0x49c/0x5f4
[   56.537936][ T5261]  __fput+0x1b4/0x7b0
[   56.538667][ T5261]  ____fput+0x20/0x30
[   56.539400][ T5261]  task_work_run+0x1f4/0x280
[   56.540248][ T5261]  do_notify_resume+0x20f8/0x2c84
[   56.541184][ T5261]  el0_svc+0x98/0x128
[   56.542022][ T5261]  el0t_64_sync_handler+0x84/0xf0
[   56.543003][ T5261]  el0t_64_sync+0x18c/0x190
[   56.609742][ T5267] loop2: detected capacity change from 0 to 8
[   56.917026][ T5276] binder: BINDER_SET_CONTEXT_MGR already set
[   56.918303][ T5276] binder: 5274:5276 ioctl 4018620d 20004a80 returned -16
[   56.920300][ T5276] binder: tried to use weak ref as strong ref
[   56.921602][ T5276] binder: 5274:5276 Acquire 1 refcount change on invalid ref 0 ret -22
[   56.923252][ T5276] binder: 5274:5276 got transaction to invalid handle, 1
[   56.924484][ T5276] binder: 5276:5274 cannot find target node
[   56.925519][ T5276] binder: 5274:5276 transaction call to 0:0 failed 26/29201/-22, size 72-24 line 3062
[   56.940437][ T5276] binder: 5274:5276 got transaction to invalid handle, 3
[   56.941691][ T5276] binder: 5276:5274 cannot find target node
[   56.942739][ T5276] binder: 5274:5276 transaction call to 0:0 failed 27/29201/-22, size 0-0 line 3062
[   56.951446][ T5276] binder: 5274:5276 ioctl c0306201 200002c0 returned -14
[   56.971698][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[   57.076535][ T5287] loop1: detected capacity change from 0 to 8192
[   57.842379][ T5297] netlink: 44 bytes leftover after parsing attributes in process `syz.2.286'.
[   58.252098][ T5311] loop1: detected capacity change from 0 to 128
[   58.258213][ T5311] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   58.264777][ T5311] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   58.701020][ T4347] Bluetooth: hci3: unexpected cc 0x206e length: 9 > 3
[   59.053018][ T5314] slcan: can't register candev
[   59.263823][ T5327] loop4: detected capacity change from 0 to 8
[   60.428585][ T5337] loop2: detected capacity change from 0 to 8192
[   60.910877][ T5345] binder: 5344:5345 tried to acquire reference to desc 0, got 1 instead
[   60.915289][ T5345] binder: 5344:5345 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   60.917699][ T5345] binder: 5345 RLIMIT_NICE not set
[   60.918531][ T5345] binder: 5345 RLIMIT_NICE not set
[   60.921293][ T5345] binder: 5345 RLIMIT_NICE not set
[   60.922417][ T5345] binder: 5344:5345 got transaction with invalid data ptr
[   60.923828][ T5345] binder: 5344:5345 transaction reply to 5344:5345 failed 33/29201/-14, size 22-0 line 3582
[   61.482629][   T56] team0 (unregistering): Port device team_slave_1 removed
[   61.640525][   T56] team0 (unregistering): Port device team_slave_0 removed
[   61.803490][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.000158][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.451649][   T56] bond0 (unregistering): Released all slaves
[   63.761806][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.763187][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.764571][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.928329][ T5374] loop2: detected capacity change from 0 to 8192
[   64.321197][ T5387] FAULT_INJECTION: forcing a failure.
[   64.321197][ T5387] name failslab, interval 1, probability 0, space 0, times 0
[   64.337488][ T5387] CPU: 1 PID: 5387 Comm: syz.4.313 Not tainted syzkaller #0
[   64.338994][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   64.341060][ T5387] Call trace:
[   64.341683][ T5387]  dump_backtrace+0x1c4/0x1f0
[   64.342559][ T5387]  show_stack+0x2c/0x3c
[   64.343492][ T5387]  __dump_stack+0x30/0x40
[   64.344475][ T5387]  dump_stack_lvl+0xf4/0x15c
[   64.345523][ T5387]  dump_stack+0x1c/0x5c
[   64.346451][ T5387]  should_fail_ex+0x3cc/0x524
[   64.347436][ T5387]  __should_failslab+0xc0/0x11c
[   64.348470][ T5387]  should_failslab+0x10/0x28
[   64.349398][ T5387]  kmem_cache_alloc+0x88/0x310
[   64.350343][ T5387]  mas_alloc_nodes+0x284/0x758
[   64.351330][ T5387]  mas_preallocate+0x13c/0x310
[   64.352331][ T5387]  vma_expand+0x20c/0x728
[   64.353244][ T5387]  mmap_region+0xb08/0x1860
[   64.354189][ T5387]  do_mmap+0xa64/0x1210
[   64.355021][ T5387]  vm_mmap_pgoff+0x194/0x298
[   64.355923][ T5387]  ksys_mmap_pgoff+0xd0/0x5a0
[   64.356843][ T5387]  __arm64_sys_mmap+0x108/0x120
[   64.357793][ T5387]  invoke_syscall+0x98/0x290
[   64.358701][ T5387]  el0_svc_common+0x13c/0x258
[   64.359638][ T5387]  do_el0_svc+0x5c/0x134
[   64.360483][ T5387]  el0_svc+0x58/0x128
[   64.361276][ T5387]  el0t_64_sync_handler+0x84/0xf0
[   64.362380][ T5387]  el0t_64_sync+0x18c/0x190
[   64.547766][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[   64.549290][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[   64.632934][ T5414] loop4: detected capacity change from 0 to 256
[   65.163292][ T5428] FAULT_INJECTION: forcing a failure.
[   65.163292][ T5428] name failslab, interval 1, probability 0, space 0, times 0
[   65.171518][ T5428] CPU: 0 PID: 5428 Comm: syz.1.323 Not tainted syzkaller #0
[   65.172777][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   65.174665][ T5428] Call trace:
[   65.175273][ T5428]  dump_backtrace+0x1c4/0x1f0
[   65.176146][ T5428]  show_stack+0x2c/0x3c
[   65.176882][ T5428]  __dump_stack+0x30/0x40
[   65.177644][ T5428]  dump_stack_lvl+0xf4/0x15c
[   65.178445][ T5428]  dump_stack+0x1c/0x5c
[   65.179174][ T5428]  should_fail_ex+0x3cc/0x524
[   65.180030][ T5428]  __should_failslab+0xc0/0x11c
[   65.180956][ T5428]  should_failslab+0x10/0x28
[   65.181835][ T5428]  kmem_cache_alloc+0x88/0x310
[   65.182766][ T5428]  __proc_create+0x30c/0x718
[   65.183676][ T5428]  proc_mkdir+0x44/0x100
[   65.184486][ T5428]  cache_register_net+0x25c/0x48c
[   65.185393][ T5428]  nfsd_idmap_init+0xa0/0x1d4
[   65.186250][ T5428]  nfsd_init_net+0x60/0x1f4
[   65.187075][ T5428]  ops_init+0x2b0/0x53c
[   65.187833][ T5428]  setup_net+0x494/0xb6c
[   65.188590][ T5428]  copy_net_ns+0x2b8/0x578
[   65.189360][ T5428]  create_new_namespaces+0x30c/0x604
[   65.190324][ T5428]  unshare_nsproxy_namespaces+0x108/0x160
[   65.191366][ T5428]  ksys_unshare+0x3f0/0x70c
[   65.192190][ T5428]  __arm64_sys_unshare+0x3c/0x50
[   65.193081][ T5428]  invoke_syscall+0x98/0x290
[   65.193919][ T5428]  el0_svc_common+0x13c/0x258
[   65.194772][ T5428]  do_el0_svc+0x5c/0x134
[   65.195531][ T5428]  el0_svc+0x58/0x128
[   65.196232][ T5428]  el0t_64_sync_handler+0x84/0xf0
[   65.197122][ T5428]  el0t_64_sync+0x18c/0x190
[   65.261626][ T5436] FAULT_INJECTION: forcing a failure.
[   65.261626][ T5436] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.272153][ T5436] CPU: 1 PID: 5436 Comm: syz.2.326 Not tainted syzkaller #0
[   65.273489][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   65.275406][ T5436] Call trace:
[   65.276014][ T5436]  dump_backtrace+0x1c4/0x1f0
[   65.276894][ T5436]  show_stack+0x2c/0x3c
[   65.277667][ T5436]  __dump_stack+0x30/0x40
[   65.278453][ T5436]  dump_stack_lvl+0xf4/0x15c
[   65.279326][ T5436]  dump_stack+0x1c/0x5c
[   65.280099][ T5436]  should_fail_ex+0x3cc/0x524
[   65.280963][ T5436]  should_fail+0x14/0x24
[   65.281735][ T5436]  should_fail_usercopy+0x20/0x30
[   65.282653][ T5436]  copy_from_sockptr+0x70/0x1b0
[   65.283552][ T5436]  sk_setsockopt+0x1e0/0x2610
[   65.284408][ T5436]  sock_setsockopt+0x68/0x80
[   65.285228][ T5436]  __sys_setsockopt+0x330/0x50c
[   65.286097][ T5436]  __arm64_sys_setsockopt+0xc0/0xdc
[   65.287041][ T5436]  invoke_syscall+0x98/0x290
[   65.287888][ T5436]  el0_svc_common+0x13c/0x258
[   65.288755][ T5436]  do_el0_svc+0x5c/0x134
[   65.289533][ T5436]  el0_svc+0x58/0x128
[   65.290264][ T5436]  el0t_64_sync_handler+0x84/0xf0
[   65.291190][ T5436]  el0t_64_sync+0x18c/0x190
[   65.304294][ T5440] FAULT_INJECTION: forcing a failure.
[   65.304294][ T5440] name failslab, interval 1, probability 0, space 0, times 0
[   65.307050][ T5440] CPU: 1 PID: 5440 Comm: syz.4.327 Not tainted syzkaller #0
[   65.308276][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   65.310152][ T5440] Call trace:
[   65.310779][ T5440]  dump_backtrace+0x1c4/0x1f0
[   65.311695][ T5440]  show_stack+0x2c/0x3c
[   65.312503][ T5440]  __dump_stack+0x30/0x40
[   65.313317][ T5440]  dump_stack_lvl+0xf4/0x15c
[   65.314206][ T5440]  dump_stack+0x1c/0x5c
[   65.315014][ T5440]  should_fail_ex+0x3cc/0x524
[   65.315913][ T5440]  __should_failslab+0xc0/0x11c
[   65.316851][ T5440]  should_failslab+0x10/0x28
[   65.317815][ T5440]  kmem_cache_alloc+0x88/0x310
[   65.318728][ T5440]  __kernfs_new_node+0xec/0x5fc
[   65.319766][ T5440]  kernfs_new_node+0x120/0x230
[   65.320715][ T5440]  __kernfs_create_file+0x60/0x2e0
[   65.321712][ T5440]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[   65.322774][ T5440]  internal_create_group+0x3e8/0xb24
[   65.323804][ T5440]  sysfs_create_groups+0x60/0x134
[   65.324762][ T5440]  device_add_attrs+0xdc/0x6f8
[   65.325681][ T5440]  device_add+0x5ac/0xe4c
[   65.326518][ T5440]  netdev_register_kobject+0x170/0x2f4
[   65.327564][ T5440]  register_netdevice+0xf28/0x1650
[   65.328533][ T5440]  geneve_configure+0x4bc/0x898
[   65.329469][ T5440]  geneve_newlink+0x100/0x198
[   65.330404][ T5440]  rtnl_newlink+0x10b4/0x1af0
[   65.331338][ T5440]  rtnetlink_rcv_msg+0x694/0xcc4
[   65.332310][ T5440]  netlink_rcv_skb+0x220/0x3ec
[   65.333192][ T5440]  rtnetlink_rcv+0x28/0x38
[   65.334017][ T5440]  netlink_unicast+0x5fc/0x80c
[   65.334935][ T5440]  netlink_sendmsg+0x6f0/0x9d8
[   65.335844][ T5440]  ____sys_sendmsg+0x588/0x90c
[   65.336748][ T5440]  __sys_sendmsg+0x288/0x374
[   65.337635][ T5440]  __arm64_sys_sendmsg+0x80/0x94
[   65.338571][ T5440]  invoke_syscall+0x98/0x290
[   65.339460][ T5440]  el0_svc_common+0x13c/0x258
[   65.340367][ T5440]  do_el0_svc+0x5c/0x134
[   65.341200][ T5440]  el0_svc+0x58/0x128
[   65.341962][ T5440]  el0t_64_sync_handler+0x84/0xf0
[   65.342872][ T5440]  el0t_64_sync+0x18c/0x190
[   65.350090][ T5441] device syzkaller0 entered promiscuous mode
[   65.482293][ T5452] loop4: detected capacity change from 0 to 8192
[   65.836451][ T5467] loop1: detected capacity change from 0 to 256
[   66.398250][ T5496] loop1: detected capacity change from 0 to 1024
[   66.404091][ T5493] loop5: detected capacity change from 0 to 1024
[   66.418654][ T5496] ext4: Unknown parameter 'nouser_xattr'
[   66.431471][ T5499] FAULT_INJECTION: forcing a failure.
[   66.431471][ T5499] name failslab, interval 1, probability 0, space 0, times 0
[   66.497829][ T5499] CPU: 1 PID: 5499 Comm: syz.4.342 Not tainted syzkaller #0
[   66.499280][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   66.501344][ T5499] Call trace:
[   66.502003][ T5499]  dump_backtrace+0x1c4/0x1f0
[   66.502899][ T5499]  show_stack+0x2c/0x3c
[   66.503696][ T5499]  __dump_stack+0x30/0x40
[   66.504503][ T5499]  dump_stack_lvl+0xf4/0x15c
[   66.505338][ T5499]  dump_stack+0x1c/0x5c
[   66.506088][ T5499]  should_fail_ex+0x3cc/0x524
[   66.506945][ T5499]  __should_failslab+0xc0/0x11c
[   66.507840][ T5499]  should_failslab+0x10/0x28
[   66.508687][ T5499]  __kmem_cache_alloc_node+0x7c/0x318
[   66.509633][ T5499]  __kmalloc_node+0xc8/0x184
[   66.510477][ T5499]  kvmalloc_node+0x88/0x1d4
[   66.511295][ T5499]  alloc_netdev_mqs+0x94/0xc44
[   66.512177][ T5499]  ip6_tnl_locate+0x574/0x6d4
[   66.513040][ T5499]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[   66.514029][ T5499]  dev_ifsioc+0x810/0xc04
[   66.514841][ T5499]  dev_ioctl+0x530/0xc78
[   66.515638][ T5499]  sock_ioctl+0x778/0x828
[   66.516436][ T5499]  __arm64_sys_ioctl+0x14c/0x1c8
[   66.517344][ T5499]  invoke_syscall+0x98/0x290
[   66.518213][ T5499]  el0_svc_common+0x13c/0x258
[   66.519079][ T5499]  do_el0_svc+0x5c/0x134
[   66.519882][ T5499]  el0_svc+0x58/0x128
[   66.520662][ T5499]  el0t_64_sync_handler+0x84/0xf0
[   66.521576][ T5499]  el0t_64_sync+0x18c/0x190
[   66.764177][ T5510] loop1: detected capacity change from 0 to 4096
[   67.817482][ T5493] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   67.820517][ T5510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.829329][ T5507] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.341: corrupted inode contents
[   67.887250][ T5507] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #15: comm syz.1.341: mark_inode_dirty error
[   67.892365][ T5507] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.341: corrupted inode contents
[   67.900713][ T5507] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.341: mark_inode_dirty error
[   67.909152][ T5507] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.341: corrupted inode contents
[   67.916487][ T5507] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.341: mark_inode_dirty error
[   67.931213][ T5507] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.341: corrupted inode contents
[   67.933454][ T5507] EXT4-fs error (device loop1): ext4_truncate:4325: inode #15: comm syz.1.341: mark_inode_dirty error
[   67.945961][ T5507] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem
[   68.166160][ T5521] loop2: detected capacity change from 0 to 256
[   68.328729][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   68.375643][ T4897] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   68.382440][ T5526] loop4: detected capacity change from 0 to 8192
[   68.673046][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.684809][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.687382][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.702912][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.704220][ T4897] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   68.713162][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.714384][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.730390][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.785654][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.789172][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.807920][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.809353][ T4897] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   68.838895][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.844293][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.856325][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.876062][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.879115][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.891974][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.894532][ T4897] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   68.903938][ T4897] EXT4-fs (loop5): Remounting filesystem read-only
[   68.906343][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.913844][ T4897] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /7/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   68.935427][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.946819][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.956140][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.963416][ T5553] FAULT_INJECTION: forcing a failure.
[   68.963416][ T5553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.968917][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.969946][ T5553] CPU: 0 PID: 5553 Comm: syz.3.357 Not tainted syzkaller #0
[   68.972992][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   68.974924][ T5553] Call trace:
[   68.975551][ T5553]  dump_backtrace+0x1c4/0x1f0
[   68.976450][ T5553]  show_stack+0x2c/0x3c
[   68.976636][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.977244][ T5553]  __dump_stack+0x30/0x40
[   68.980707][ T5553]  dump_stack_lvl+0xf4/0x15c
[   68.981537][ T5553]  dump_stack+0x1c/0x5c
[   68.982288][ T5553]  should_fail_ex+0x3cc/0x524
[   68.983137][ T5553]  should_fail+0x14/0x24
[   68.983906][ T5553]  should_fail_usercopy+0x20/0x30
[   68.984816][ T5553]  copy_from_sockptr+0x70/0x1a8
[   68.985702][ T5553]  ip_mroute_setsockopt+0x5a8/0xce0
[   68.985742][ T4897] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   68.986648][ T5553]  do_ip_setsockopt+0x41c/0x2464
[   68.990219][ T5553]  ip_setsockopt+0x68/0x134
[   68.991045][ T5553]  raw_setsockopt+0xd8/0x288
[   68.991912][ T5553]  sock_common_setsockopt+0xb0/0xcc
[   68.992831][ T5553]  __sys_setsockopt+0x2fc/0x50c
[   68.993695][ T5553]  __arm64_sys_setsockopt+0xc0/0xdc
[   68.994615][ T5553]  invoke_syscall+0x98/0x290
[   68.995446][ T5553]  el0_svc_common+0x13c/0x258
[   68.996287][ T5553]  do_el0_svc+0x5c/0x134
[   68.997035][ T5553]  el0_svc+0x58/0x128
[   68.997759][ T5553]  el0t_64_sync_handler+0x84/0xf0
[   68.998678][ T5553]  el0t_64_sync+0x18c/0x190
[   69.088408][ T5560] loop4: detected capacity change from 0 to 256
[   69.205217][ T5569] binder: 5568:5569 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   69.208039][ T5569] binder: 5569 RLIMIT_NICE not set
[   69.278238][ T5574] binder: 5568:5574 got reply transaction with no transaction stack
[   69.282249][ T5574] binder_debug: 4 callbacks suppressed
[   69.282263][ T5574] binder: 5568:5574 transaction reply to 0:0 failed 35/29201/-71, size 22-0 line 2963
[   69.644603][  T113] cfg80211: failed to load regulatory.db
[   69.746619][ T5591] loop2: detected capacity change from 0 to 512
[   69.755047][ T5588] FAULT_INJECTION: forcing a failure.
[   69.755047][ T5588] name failslab, interval 1, probability 0, space 0, times 0
[   69.757535][ T5588] CPU: 0 PID: 5588 Comm: syz.1.370 Not tainted syzkaller #0
[   69.758843][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   69.760781][ T5588] Call trace:
[   69.761440][ T5588]  dump_backtrace+0x1c4/0x1f0
[   69.762381][ T5588]  show_stack+0x2c/0x3c
[   69.763161][ T5588]  __dump_stack+0x30/0x40
[   69.763978][ T5588]  dump_stack_lvl+0xf4/0x15c
[   69.764918][ T5588]  dump_stack+0x1c/0x5c
[   69.765748][ T5588]  should_fail_ex+0x3cc/0x524
[   69.766681][ T5588]  __should_failslab+0xc0/0x11c
[   69.767632][ T5588]  should_failslab+0x10/0x28
[   69.768534][ T5588]  kmem_cache_alloc+0x88/0x310
[   69.769407][ T5588]  __kernfs_new_node+0xec/0x5fc
[   69.770284][ T5588]  kernfs_new_node+0x120/0x230
[   69.771162][ T5588]  kernfs_create_link+0x98/0x1e4
[   69.772044][ T5588]  sysfs_do_create_link_sd+0x8c/0x120
[   69.773010][ T5588]  sysfs_create_link+0x74/0x94
[   69.773895][ T5588]  device_add+0x744/0xe4c
[   69.774711][ T5588]  netdev_register_kobject+0x170/0x2f4
[   69.775712][ T5588]  register_netdevice+0xf28/0x1650
[   69.776660][ T5588]  register_vlan_dev+0x350/0x734
[   69.777601][ T5588]  register_vlan_device+0x2c8/0x3fc
[   69.778566][ T5588]  vlan_ioctl_handler+0x2c8/0x64c
[   69.779492][ T5588]  sock_ioctl+0x570/0x828
[   69.780320][ T5588]  __arm64_sys_ioctl+0x14c/0x1c8
[   69.781239][ T5588]  invoke_syscall+0x98/0x290
[   69.782084][ T5588]  el0_svc_common+0x13c/0x258
[   69.782990][ T5588]  do_el0_svc+0x5c/0x134
[   69.783774][ T5588]  el0_svc+0x58/0x128
[   69.784458][ T5588]  el0t_64_sync_handler+0x84/0xf0
[   69.785328][ T5588]  el0t_64_sync+0x18c/0x190
[   69.786205][    C0] vkms_vblank_simulate: vblank timer overrun
[   69.797281][ T5591] EXT4-fs (loop2): Test dummy encryption mode enabled
[   69.817749][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.371: inode has both inline data and extents flags
[   69.832855][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.371: couldn't read orphan inode 15 (err -117)
[   69.838842][ T5591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   69.917040][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   70.312650][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   70.351414][ T5604] loop3: detected capacity change from 0 to 256
[   70.733461][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.735970][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.738206][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.740741][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.742665][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.744350][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.713206][ T5635] FAULT_INJECTION: forcing a failure.
[   71.713206][ T5635] name fail_futex, interval 1, probability 0, space 0, times 0
[   71.716433][ T5635] CPU: 1 PID: 5635 Comm: syz.2.384 Not tainted syzkaller #0
[   71.717680][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   71.719508][ T5635] Call trace:
[   71.720158][ T5635]  dump_backtrace+0x1c4/0x1f0
[   71.721085][ T5635]  show_stack+0x2c/0x3c
[   71.721924][ T5635]  __dump_stack+0x30/0x40
[   71.722785][ T5635]  dump_stack_lvl+0xf4/0x15c
[   71.723681][ T5635]  dump_stack+0x1c/0x5c
[   71.724495][ T5635]  should_fail_ex+0x3cc/0x524
[   71.725398][ T5635]  should_fail+0x14/0x24
[   71.726214][ T5635]  get_futex_key+0x904/0xfb0
[   71.727070][ T5635]  futex_wait_setup+0xbc/0x320
[   71.727957][ T5635]  futex_wait+0x164/0x424
[   71.728796][ T5635]  do_futex+0x2e8/0x340
[   71.729597][ T5635]  __arm64_sys_futex+0x390/0x414
[   71.730545][ T5635]  invoke_syscall+0x98/0x290
[   71.731399][ T5635]  el0_svc_common+0x13c/0x258
[   71.732292][ T5635]  do_el0_svc+0x5c/0x134
[   71.733081][ T5635]  el0_svc+0x58/0x128
[   71.733818][ T5635]  el0t_64_sync_handler+0x84/0xf0
[   71.734759][ T5635]  el0t_64_sync+0x18c/0x190
[   71.759321][ T5639] loop2: detected capacity change from 0 to 256
[   72.809959][ T4347] Bluetooth: hci2: command 0x0409 tx timeout
[   73.590606][ T5657] loop2: detected capacity change from 0 to 512
[   73.595908][ T5657] EXT4-fs (loop2): Test dummy encryption mode enabled
[   73.599473][ T5657] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.392: inode has both inline data and extents flags
[   73.606487][ T5657] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.392: couldn't read orphan inode 15 (err -117)
[   73.608686][ T5657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   73.631109][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   73.666100][ T5663] netlink: 10 bytes leftover after parsing attributes in process `syz.2.394'.
[   74.890210][ T4347] Bluetooth: hci2: command 0x041b tx timeout
[   76.969640][ T4347] Bluetooth: hci2: command 0x040f tx timeout
[   79.049651][ T4342] Bluetooth: hci2: command 0x0419 tx timeout
[   82.034903][ T5668] loop4: detected capacity change from 0 to 512
[   82.051373][ T5668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.053859][ T5668] EXT4-fs (loop4): orphan cleanup on readonly fs
[   82.055154][ T5668] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   82.057805][ T5668] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   82.059085][ T5668] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.396: bad orphan inode 768
[   82.061385][ T5668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   82.075163][ T4339] EXT4-fs (loop4): unmounting filesystem.
[   82.452822][ T1617] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.507722][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[   82.643368][ T1617] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.691013][ T5698] loop2: detected capacity change from 0 to 512
[   82.705195][ T5698] EXT4-fs (loop2): Test dummy encryption mode enabled
[   82.713383][ T1617] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.738976][ T5698] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.402: inode has both inline data and extents flags
[   82.742291][ T5698] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.402: couldn't read orphan inode 15 (err -117)
[   82.744963][ T5698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.776959][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   82.811285][ T1617] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.819353][ T5610] chnl_net:caif_netlink_parms(): no params data found
[   82.860831][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.865984][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.868849][ T5610] device bridge_slave_0 entered promiscuous mode
[   82.875604][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.877987][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.881624][ T5610] device bridge_slave_1 entered promiscuous mode
[   82.899095][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.905218][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.917223][ T5610] team0: Port device team_slave_0 added
[   82.919234][ T5610] team0: Port device team_slave_1 added
[   82.919427][ T5726] loop2: detected capacity change from 0 to 512
[   82.928481][ T5726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.935317][ T5726] EXT4-fs (loop2): orphan cleanup on readonly fs
[   82.936585][ T5726] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   82.959777][ T5726] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   82.961016][ T5726] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.406: bad orphan inode 768
[   82.963068][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.964221][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.969248][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.972052][ T5726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.983785][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.987370][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.001045][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.032614][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   83.072205][ T5610] device hsr_slave_0 entered promiscuous mode
[   83.161286][ T5610] device hsr_slave_1 entered promiscuous mode
[   83.191030][ T5610] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.221255][ T5610] Cannot create hsr debugfs directory
[   83.261768][ T5749] loop4: detected capacity change from 0 to 256
[   83.269325][ T5749] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[   83.503663][ T5730] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   83.517968][ T5741] binder: 5733:5741 unknown command 0
[   83.519011][ T5741] binder: 5733:5741 ioctl c0306201 200001c0 returned -22
[   83.610876][ T5762] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[   84.059081][ T5774] loop1: detected capacity change from 0 to 512
[   84.084563][ T5774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.108980][ T5774] EXT4-fs (loop1): orphan cleanup on readonly fs
[   84.110621][ T5774] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   84.114872][ T5774] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   84.116223][ T5774] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.418: bad orphan inode 768
[   84.127739][ T5610] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   84.150379][ T5774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   84.174966][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   84.211847][ T5610] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   84.282664][ T5610] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   85.093928][ T5610] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   85.246616][ T5807] binder: 5806:5807 ioctl 4018620d 0 returned -22
[   85.248249][ T5807] binder: 5806:5807 IncRefs 0 refcount change on invalid ref 0 ret -22
[   85.256188][ T5807] binder: 5806:5807 unknown command 1074553619
[   85.257329][ T5807] binder: 5806:5807 ioctl c0306201 20000640 returned -22
[   85.536927][ T5815] loop1: detected capacity change from 0 to 8192
[   85.597255][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.973395][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.975353][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.000496][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   86.010379][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.012764][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.014643][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.016067][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.078416][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.085373][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.087320][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.092341][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.093780][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.305533][ T5833] loop3: detected capacity change from 0 to 8
[   86.451649][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.456192][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.458330][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.465601][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.482258][ T5610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.486045][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.764447][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   86.766464][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   86.768415][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   86.770154][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.772743][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.774742][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.779070][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.781068][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.854134][ T5863] loop2: detected capacity change from 0 to 1024
[   86.868288][ T5863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   86.873728][ T5863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   86.893788][ T5863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   86.896630][ T5863] System zones: 0-1, 3-36
[   86.903251][ T5863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   87.594737][ T5883] loop3: detected capacity change from 0 to 8
[   87.779435][ T5872] FAULT_INJECTION: forcing a failure.
[   87.779435][ T5872] name failslab, interval 1, probability 0, space 0, times 0
[   87.789753][ T5872] CPU: 0 PID: 5872 Comm: syz.1.443 Not tainted syzkaller #0
[   87.791137][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   87.792955][ T5872] Call trace:
[   87.793536][ T5872]  dump_backtrace+0x1c4/0x1f0
[   87.794328][ T5872]  show_stack+0x2c/0x3c
[   87.795002][ T5872]  __dump_stack+0x30/0x40
[   87.795813][ T5872]  dump_stack_lvl+0xf4/0x15c
[   87.796642][ T5872]  dump_stack+0x1c/0x5c
[   87.797370][ T5872]  should_fail_ex+0x3cc/0x524
[   87.798223][ T5872]  __should_failslab+0xc0/0x11c
[   87.799080][ T5872]  should_failslab+0x10/0x28
[   87.800028][ T5872]  kmem_cache_alloc_node+0x8c/0x344
[   87.801045][ T5872]  __alloc_skb+0x128/0x728
[   87.801854][ T5872]  rtmsg_ifinfo_build_skb+0x90/0x1b4
[   87.802800][ T5872]  rtmsg_ifinfo+0xd0/0x1c4
[   87.803703][ T5872]  dev_close_many+0x23c/0x448
[   87.804630][ T5872]  dev_close+0x150/0x208
[   87.805466][ T5872]  __dev_change_net_namespace+0x51c/0x1378
[   87.806580][ T5872]  do_setlink+0x2b0/0x2158
[   87.807391][ T5872]  rtnl_newlink+0x142c/0x1af0
[   87.808253][ T5872]  rtnetlink_rcv_msg+0x694/0xcc4
[   87.809148][ T5872]  netlink_rcv_skb+0x220/0x3ec
[   87.810013][ T5872]  rtnetlink_rcv+0x28/0x38
[   87.810803][ T5872]  netlink_unicast+0x5fc/0x80c
[   87.811665][ T5872]  netlink_sendmsg+0x6f0/0x9d8
[   87.812542][ T5872]  ____sys_sendmsg+0x588/0x90c
[   87.813409][ T5872]  __sys_sendmsg+0x288/0x374
[   87.814234][ T5872]  __arm64_sys_sendmsg+0x80/0x94
[   87.815119][ T5872]  invoke_syscall+0x98/0x290
[   87.816079][ T5872]  el0_svc_common+0x13c/0x258
[   87.816998][ T5872]  do_el0_svc+0x5c/0x134
[   87.817811][ T5872]  el0_svc+0x58/0x128
[   87.818567][ T5872]  el0t_64_sync_handler+0x84/0xf0
[   87.819537][ T5872]  el0t_64_sync+0x18c/0x190
[   87.862857][ T5893] binder: 5892:5893 tried to acquire reference to desc 0, got 1 instead
[   87.864805][ T5893] binder: 5892:5893 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   87.867516][ T5893] binder: 5893 RLIMIT_NICE not set
[   87.868568][ T5893] binder: 5893 RLIMIT_NICE not set
[   87.873926][ T5893] binder: 5893 RLIMIT_NICE not set
[   87.874926][ T5893] binder_alloc: 5892: binder_alloc_buf, no vma
[   87.876094][ T5893] binder: cannot allocate buffer: vma cleared, target dead or dying
[   87.876117][ T5893] binder: 5892:5893 transaction reply to 5892:5893 failed 43/29189/-3, size 22-0 line 3247
[   87.879765][ T5893] binder: send failed reply for transaction 42 to 5892:5893
[   87.881529][ T4455] binder: undelivered TRANSACTION_COMPLETE
[   87.882792][ T4455] binder: undelivered TRANSACTION_ERROR: 29189
[   87.891695][ T4455] binder: undelivered TRANSACTION_ERROR: 29190
[   87.909211][ T5895] FAULT_INJECTION: forcing a failure.
[   87.909211][ T5895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.915373][ T5895] CPU: 0 PID: 5895 Comm: syz.4.449 Not tainted syzkaller #0
[   87.916689][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   87.918675][ T5895] Call trace:
[   87.919226][ T5895]  dump_backtrace+0x1c4/0x1f0
[   87.920111][ T5895]  show_stack+0x2c/0x3c
[   87.920908][ T5895]  __dump_stack+0x30/0x40
[   87.921706][ T5895]  dump_stack_lvl+0xf4/0x15c
[   87.922564][ T5895]  dump_stack+0x1c/0x5c
[   87.923325][ T5895]  should_fail_ex+0x3cc/0x524
[   87.924201][ T5895]  should_fail+0x14/0x24
[   87.924978][ T5895]  should_fail_usercopy+0x20/0x30
[   87.925880][ T5895]  comm_write+0xe4/0x368
[   87.926656][ T5895]  vfs_write+0x2a8/0x7c8
[   87.927409][ T5895]  ksys_write+0x12c/0x228
[   87.928198][ T5895]  __arm64_sys_write+0x7c/0x90
[   87.929070][ T5895]  invoke_syscall+0x98/0x290
[   87.929880][ T5895]  el0_svc_common+0x13c/0x258
[   87.930694][ T5895]  do_el0_svc+0x5c/0x134
[   87.931452][ T5895]  el0_svc+0x58/0x128
[   87.932165][ T5895]  el0t_64_sync_handler+0x84/0xf0
[   87.933043][ T5895]  el0t_64_sync+0x18c/0x190
[   87.995264][ T5901] FAULT_INJECTION: forcing a failure.
[   87.995264][ T5901] name failslab, interval 1, probability 0, space 0, times 0
[   87.997819][ T5901] CPU: 1 PID: 5901 Comm: syz.4.452 Not tainted syzkaller #0
[   87.999122][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   88.001027][ T5901] Call trace:
[   88.001641][ T5901]  dump_backtrace+0x1c4/0x1f0
[   88.002529][ T5901]  show_stack+0x2c/0x3c
[   88.003326][ T5901]  __dump_stack+0x30/0x40
[   88.004148][ T5901]  dump_stack_lvl+0xf4/0x15c
[   88.005024][ T5901]  dump_stack+0x1c/0x5c
[   88.005856][ T5901]  should_fail_ex+0x3cc/0x524
[   88.006792][ T5901]  __should_failslab+0xc0/0x11c
[   88.007820][ T5901]  should_failslab+0x10/0x28
[   88.008733][ T5901]  kmem_cache_alloc+0x88/0x310
[   88.009615][ T5901]  getname_flags+0xb8/0x458
[   88.010442][ T5901]  __arm64_sys_mkdirat+0x80/0xa8
[   88.011333][ T5901]  invoke_syscall+0x98/0x290
[   88.012158][ T5901]  el0_svc_common+0x13c/0x258
[   88.013001][ T5901]  do_el0_svc+0x5c/0x134
[   88.013786][ T5901]  el0_svc+0x58/0x128
[   88.014523][ T5901]  el0t_64_sync_handler+0x84/0xf0
[   88.015458][ T5901]  el0t_64_sync+0x18c/0x190
[   88.105284][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   88.124288][ T5905] loop2: detected capacity change from 0 to 128
[   88.125918][ T5905] FAT-fs (loop2): Unrecognized mount option "shortname=wi:" or missing value
[   88.566351][ T5916] loop1: detected capacity change from 0 to 8192
[   88.574508][ T5917] loop2: detected capacity change from 0 to 8
[   88.758249][ T5925] binder: 5924:5925 tried to acquire reference to desc 0, got 1 instead
[   88.779227][ T5925] binder: 5924:5925 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   88.782020][ T5925] binder: 5925 RLIMIT_NICE not set
[   88.782928][ T5925] binder: 5925 RLIMIT_NICE not set
[   88.785914][ T5925] binder_alloc: 5924: binder_alloc_buf, no vma
[   88.786918][ T5925] binder: cannot allocate buffer: vma cleared, target dead or dying
[   88.786944][ T5925] binder: 5924:5925 transaction reply to 5924:5925 failed 49/29189/-3, size 22-0 line 3247
[   88.801480][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.803201][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.806377][ T5925] binder: send failed reply for transaction 48 to 5924:5925
[   88.807471][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.809287][ T4379] binder: undelivered TRANSACTION_COMPLETE
[   88.932498][ T1617] device hsr_slave_0 left promiscuous mode
[   89.558888][ T1617] device hsr_slave_1 left promiscuous mode
[   89.600396][ T1617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.601868][ T1617] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.604020][ T1617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.605424][ T1617] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.607205][ T1617] device bridge_slave_1 left promiscuous mode
[   89.608801][ T1617] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.650398][ T1617] device bridge_slave_0 left promiscuous mode
[   89.652364][ T1617] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.820788][ T1617] device veth1_macvtap left promiscuous mode
[   89.821985][ T1617] device veth0_macvtap left promiscuous mode
[   89.823112][ T1617] device veth1_vlan left promiscuous mode
[   89.824122][ T1617] device veth0_vlan left promiscuous mode
[   89.830666][ T5961] loop3: detected capacity change from 0 to 8
[   90.628771][ T5966] binder_user_error: 1 callbacks suppressed
[   90.628780][ T5966] binder: 5965:5966 tried to acquire reference to desc 0, got 1 instead
[   90.634925][ T5966] binder: 5965:5966 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   90.637237][ T5966] binder: 5966 RLIMIT_NICE not set
[   90.638160][ T5966] binder: 5966 RLIMIT_NICE not set
[   90.639443][ T5966] binder: 5966 RLIMIT_NICE not set
[   90.640635][ T5966] binder_alloc: 5965: binder_alloc_buf, no vma
[   92.222081][ T1617] team0 (unregistering): Port device team_slave_1 removed
[   92.400435][ T1617] team0 (unregistering): Port device team_slave_0 removed
[   92.571438][ T1617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.780141][ T1617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.291935][ T1617] bond0 (unregistering): Released all slaves
[   94.587677][ T5945] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   94.589512][ T5945] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   94.651295][ T5987] loop1: detected capacity change from 0 to 256
[   94.775448][ T5997] loop3: detected capacity change from 0 to 8
[   94.858894][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.860886][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.875959][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.881125][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.907973][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.911778][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.953714][ T5610] device veth0_vlan entered promiscuous mode
[   94.963193][ T5610] device veth1_vlan entered promiscuous mode
[   95.003242][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   95.005298][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   95.007268][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.009491][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.022319][ T5610] device veth0_macvtap entered promiscuous mode
[   95.038085][ T5610] device veth1_macvtap entered promiscuous mode
[   95.082121][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.086479][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.090482][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.096846][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.098527][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.106307][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.110080][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.114783][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.117843][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.121126][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.123052][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.124892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.135450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.148489][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.153419][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.159093][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.166657][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.173225][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.183162][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.191194][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.193153][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.206494][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.216000][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.218348][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.240296][ T5610] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.246067][ T5610] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.247507][ T5610] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.248900][ T5610] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.323397][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.325341][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.343620][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.364721][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.366375][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.372837][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.761456][ T6042] overlayfs: failed to resolve './file0': -2
[   96.740070][ T6092] loop6: detected capacity change from 0 to 8
[   97.033826][ T6103] FAULT_INJECTION: forcing a failure.
[   97.033826][ T6103] name failslab, interval 1, probability 0, space 0, times 0
[   97.036637][ T6103] CPU: 0 PID: 6103 Comm: syz.4.495 Not tainted syzkaller #0
[   97.038006][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   97.039983][ T6103] Call trace:
[   97.040649][ T6103]  dump_backtrace+0x1c4/0x1f0
[   97.041567][ T6103]  show_stack+0x2c/0x3c
[   97.042380][ T6103]  __dump_stack+0x30/0x40
[   97.043231][ T6103]  dump_stack_lvl+0xf4/0x15c
[   97.044049][ T6103]  dump_stack+0x1c/0x5c
[   97.044806][ T6103]  should_fail_ex+0x3cc/0x524
[   97.045625][ T6103]  __should_failslab+0xc0/0x11c
[   97.046499][ T6103]  should_failslab+0x10/0x28
[   97.047342][ T6103]  __kmem_cache_alloc_node+0x7c/0x318
[   97.048318][ T6103]  __kmalloc_node+0xc8/0x184
[   97.049149][ T6103]  kvmalloc_node+0x88/0x1d4
[   97.050005][ T6103]  alloc_netdev_mqs+0x778/0xc44
[   97.050891][ T6103]  ip6_tnl_locate+0x574/0x6d4
[   97.051746][ T6103]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[   97.052746][ T6103]  dev_ifsioc+0x810/0xc04
[   97.053537][ T6103]  dev_ioctl+0x530/0xc78
[   97.054303][ T6103]  sock_ioctl+0x778/0x828
[   97.055066][ T6103]  __arm64_sys_ioctl+0x14c/0x1c8
[   97.055964][ T6103]  invoke_syscall+0x98/0x290
[   97.056777][ T6103]  el0_svc_common+0x13c/0x258
[   97.057611][ T6103]  do_el0_svc+0x5c/0x134
[   97.058372][ T6103]  el0_svc+0x58/0x128
[   97.059089][ T6103]  el0t_64_sync_handler+0x84/0xf0
[   97.060054][ T6103]  el0t_64_sync+0x18c/0x190
[   97.105232][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'.
[   97.163606][ T6117] loop4: detected capacity change from 0 to 8
[   97.226067][ T6118] overlayfs: failed to resolve './file0': -2
[   97.637261][ T6141] loop6: detected capacity change from 0 to 256
[   98.021425][ T6155] FAULT_INJECTION: forcing a failure.
[   98.021425][ T6155] name failslab, interval 1, probability 0, space 0, times 0
[   98.024655][ T6155] CPU: 1 PID: 6155 Comm: syz.2.510 Not tainted syzkaller #0
[   98.024762][ T6150] FAULT_INJECTION: forcing a failure.
[   98.024762][ T6150] name failslab, interval 1, probability 0, space 0, times 0
[   98.025947][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   98.030099][ T6155] Call trace:
[   98.030730][ T6155]  dump_backtrace+0x1c4/0x1f0
[   98.031614][ T6155]  show_stack+0x2c/0x3c
[   98.032398][ T6155]  __dump_stack+0x30/0x40
[   98.033248][ T6155]  dump_stack_lvl+0xf4/0x15c
[   98.034139][ T6155]  dump_stack+0x1c/0x5c
[   98.034954][ T6155]  should_fail_ex+0x3cc/0x524
[   98.035877][ T6155]  __should_failslab+0xc0/0x11c
[   98.036845][ T6155]  should_failslab+0x10/0x28
[   98.037722][ T6155]  kmem_cache_alloc+0x88/0x310
[   98.038655][ T6155]  pte_alloc_one+0x78/0x254
[   98.039518][ T6155]  __pte_alloc+0x30/0xac
[   98.040269][ T6155]  handle_mm_fault+0x25d8/0x3018
[   98.041151][ T6155]  __get_user_pages+0x340/0x770
[   98.042079][ T6155]  __get_user_pages_remote+0x188/0x684
[   98.043100][ T6155]  get_user_pages_remote+0x80/0xbc
[   98.044088][ T6155]  get_arg_page+0x18c/0x3b4
[   98.044942][ T6155]  copy_string_kernel+0x15c/0x254
[   98.045874][ T6155]  do_execveat_common+0x508/0x7fc
[   98.046829][ T6155]  __arm64_sys_execveat+0xd8/0xf4
[   98.047738][ T6155]  invoke_syscall+0x98/0x290
[   98.048581][ T6155]  el0_svc_common+0x13c/0x258
[   98.049461][ T6155]  do_el0_svc+0x5c/0x134
[   98.050273][ T6155]  el0_svc+0x58/0x128
[   98.051038][ T6155]  el0t_64_sync_handler+0x84/0xf0
[   98.051956][ T6155]  el0t_64_sync+0x18c/0x190
[   98.063079][ T6150] CPU: 0 PID: 6150 Comm: syz.3.509 Not tainted syzkaller #0
[   98.064516][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   98.066559][ T6150] Call trace:
[   98.067227][ T6150]  dump_backtrace+0x1c4/0x1f0
[   98.068175][ T6150]  show_stack+0x2c/0x3c
[   98.068972][ T6150]  __dump_stack+0x30/0x40
[   98.069780][ T6150]  dump_stack_lvl+0xf4/0x15c
[   98.070652][ T6150]  dump_stack+0x1c/0x5c
[   98.071457][ T6150]  should_fail_ex+0x3cc/0x524
[   98.072338][ T6150]  __should_failslab+0xc0/0x11c
[   98.073270][ T6150]  should_failslab+0x10/0x28
[   98.074126][ T6150]  __kmem_cache_alloc_node+0x7c/0x318
[   98.075125][ T6150]  kmalloc_trace+0x48/0x94
[   98.075946][ T6150]  __hw_addr_add_ex+0x1cc/0x5b0
[   98.076883][ T6150]  dev_addr_init+0x11c/0x1e0
[   98.077761][ T6150]  alloc_netdev_mqs+0x1f0/0xc44
[   98.078647][ T6150]  ip6_tnl_locate+0x574/0x6d4
[   98.079514][ T6150]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[   98.080505][ T6150]  dev_ifsioc+0x810/0xc04
[   98.081318][ T6150]  dev_ioctl+0x530/0xc78
[   98.082114][ T6150]  sock_ioctl+0x778/0x828
[   98.082917][ T6150]  __arm64_sys_ioctl+0x14c/0x1c8
[   98.083853][ T6150]  invoke_syscall+0x98/0x290
[   98.084731][ T6150]  el0_svc_common+0x13c/0x258
[   98.085592][ T6150]  do_el0_svc+0x5c/0x134
[   98.086414][ T6150]  el0_svc+0x58/0x128
[   98.087151][ T6150]  el0t_64_sync_handler+0x84/0xf0
[   98.088089][ T6150]  el0t_64_sync+0x18c/0x190
[   98.186988][ T6173] TC_ACT_REPEAT abuse ?
[   98.230683][ T6180] loop2: detected capacity change from 0 to 256
[   98.438791][ T6198] overlayfs: failed to resolve './file0': -2
[   98.705092][   T27] audit: type=1326 audit(98.690:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379368 code=0x0
[   98.832929][ T6230] loop6: detected capacity change from 0 to 256
[   99.339758][ T6272] loop3: detected capacity change from 0 to 1024
[   99.343481][ T6272] EXT4-fs: Ignoring removed bh option
[   99.345998][ T6272] EXT4-fs (loop3): unable to read superblock
[   99.630623][ T5981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.783270][ T6300] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   99.870212][ T6302] loop1: detected capacity change from 0 to 8
[   99.928430][ T6307] loop6: detected capacity change from 0 to 256
[  100.034109][ T6314] binder: tried to use weak ref as strong ref
[  100.035243][ T6314] binder: 6313:6314 Acquire 1 refcount change on invalid ref 0 ret -22
[  100.038430][ T6314] binder: 6313:6314 got transaction to invalid handle, 1
[  100.039832][ T6314] binder_debug: 8 callbacks suppressed
[  100.039841][ T6314] binder: 6314:6313 cannot find target node
[  100.052039][ T6314] binder: 6313:6314 transaction call to 0:0 failed 58/29201/-22, size 72-24 line 3062
[  100.327792][ T6314] binder: 6313:6314 ioctl c0306201 200002c0 returned -14
[  100.567460][ T6348] loop6: detected capacity change from 0 to 256
[  100.617154][ T6344] loop3: detected capacity change from 0 to 8
[  100.909050][ T6357] binder: tried to use weak ref as strong ref
[  100.910644][ T6357] binder: 6353:6357 Acquire 1 refcount change on invalid ref 0 ret -22
[  100.915762][ T6357] binder: 6353:6357 got transaction to invalid handle, 1
[  100.921368][ T6357] binder: 6357:6353 cannot find target node
[  100.924704][ T6357] binder: 6353:6357 transaction call to 0:0 failed 61/29201/-22, size 72-24 line 3062
[  100.930808][ T6357] binder: 6353:6357 ioctl c0306201 200002c0 returned -14
[  101.437982][ T6388] loop4: detected capacity change from 0 to 256
[  101.504176][ T3995] device veth1_macvtap left promiscuous mode
[  101.511948][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  101.513207][ T6395] binder: BINDER_SET_CONTEXT_MGR already set
[  101.514529][ T6395] binder: 6393:6395 ioctl 4018620d 20004a80 returned -16
[  101.538325][ T6395] binder: 6393:6395 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  101.550255][ T6395] binder: 6395 RLIMIT_NICE not set
[  101.589378][ T6409] binder: 6393:6409 got transaction to invalid handle, 3
[  101.591555][ T6409] binder: 6409:6393 cannot find target node
[  101.592760][ T6409] binder: 6393:6409 transaction call to 0:0 failed 64/29201/-22, size 0-0 line 3062
[  101.594780][ T6409] binder: 6393:6409 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  102.122363][ T6434] loop3: detected capacity change from 0 to 256
[  102.332976][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  102.338928][ T6452] loop3: detected capacity change from 0 to 256
[  102.573250][ T6466] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.933725][ T6486] loop1: detected capacity change from 0 to 256
[  102.971316][ T6484] binder: BINDER_SET_CONTEXT_MGR already set
[  102.973626][ T6484] binder: 6480:6484 ioctl 4018620d 20004a80 returned -16
[  103.289248][ T6497] binder: 6497:6480 cannot find target node
[  103.295724][ T6497] binder: 6480:6497 transaction call to 0:0 failed 67/29201/-22, size 0-0 line 3062
[  103.582802][ T6516] loop3: detected capacity change from 0 to 512
[  103.607121][ T6516] EXT4-fs: Ignoring removed oldalloc option
[  103.612662][ T6516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.629716][ T6516] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  103.631691][ T6516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  103.633913][ T6516] EXT4-fs (loop3): orphan cleanup on readonly fs
[  103.635276][ T6516] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  103.638891][ T6516] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  103.644820][ T6516] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  103.651521][ T6516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.606: bg 0: block 40: padding at end of block bitmap is not set
[  103.660175][ T6516] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  103.664586][ T6516] EXT4-fs (loop3): 1 truncate cleaned up
[  103.666927][ T6516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  103.697023][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  103.765260][ T4561] binder: undelivered TRANSACTION_ERROR: 29201
[  103.810060][ T6529] netlink: 72 bytes leftover after parsing attributes in process `syz.3.609'.
[  103.817735][ T6530] loop2: detected capacity change from 0 to 512
[  103.819199][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'.
[  103.833247][ T6530] EXT4-fs: inline encryption not supported
[  103.835962][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'.
[  103.838726][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'.
[  103.845069][ T6530] EXT4-fs: Ignoring removed i_version option
[  103.884008][ T6530] EXT4-fs (loop2): 1 orphan inode deleted
[  103.886836][ T6530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  104.052659][ T4332] EXT4-fs (loop2): unmounting filesystem.
[  104.386606][ T6554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.449737][ T6557] binder: BINDER_SET_CONTEXT_MGR already set
[  104.450900][ T6557] binder: 6556:6557 ioctl 4018620d 20004a80 returned -16
[  104.455961][ T4332] EXT4-fs (loop2): unmounting filesystem.
[  104.955011][ T6578] FAULT_INJECTION: forcing a failure.
[  104.955011][ T6578] name failslab, interval 1, probability 0, space 0, times 0
[  104.957429][ T6578] CPU: 0 PID: 6578 Comm: syz.3.623 Not tainted syzkaller #0
[  104.958662][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  104.960475][ T6578] Call trace:
[  104.961114][ T6578]  dump_backtrace+0x1c4/0x1f0
[  104.962011][ T6578]  show_stack+0x2c/0x3c
[  104.962797][ T6578]  __dump_stack+0x30/0x40
[  104.963614][ T6578]  dump_stack_lvl+0xf4/0x15c
[  104.964457][ T6578]  dump_stack+0x1c/0x5c
[  104.965187][ T6578]  should_fail_ex+0x3cc/0x524
[  104.966043][ T6578]  __should_failslab+0xc0/0x11c
[  104.966970][ T6578]  should_failslab+0x10/0x28
[  104.967817][ T6578]  kmem_cache_alloc+0x88/0x310
[  104.968693][ T6578]  __kernfs_new_node+0xec/0x5fc
[  104.969536][ T6578]  kernfs_new_node+0x120/0x230
[  104.970375][ T6578]  __kernfs_create_file+0x60/0x2e0
[  104.971304][ T6578]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[  104.972260][ T6578]  internal_create_group+0x3e8/0xb24
[  104.973215][ T6578]  sysfs_create_groups+0x60/0x134
[  104.974112][ T6578]  device_add_attrs+0xdc/0x6f8
[  104.974948][ T6578]  device_add+0x5ac/0xe4c
[  104.975788][ T6578]  netdev_register_kobject+0x170/0x2f4
[  104.976831][ T6578]  register_netdevice+0xf28/0x1650
[  104.977784][ T6578]  tun_set_iff+0x624/0xb84
[  104.978670][ T6578]  __tun_chr_ioctl+0x780/0x1dac
[  104.979544][ T6578]  tun_chr_ioctl+0x38/0x4c
[  104.980345][ T6578]  __arm64_sys_ioctl+0x14c/0x1c8
[  104.981229][ T6578]  invoke_syscall+0x98/0x290
[  104.982064][ T6578]  el0_svc_common+0x13c/0x258
[  104.982944][ T6578]  do_el0_svc+0x5c/0x134
[  104.983725][ T6578]  el0_svc+0x58/0x128
[  104.984455][ T6578]  el0t_64_sync_handler+0x84/0xf0
[  104.985365][ T6578]  el0t_64_sync+0x18c/0x190
[  105.019348][ T6583] set_capacity_and_notify: 2 callbacks suppressed
[  105.019357][ T6583] loop3: detected capacity change from 0 to 256
[  105.095854][ T6588] netlink: 'syz.3.627': attribute type 1 has an invalid length.
[  105.104260][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'.
[  105.112428][ T6588] bond1: (slave bridge1): making interface the new active one
[  105.114034][ T6588] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  105.275874][    T7] binder_debug: 2 callbacks suppressed
[  105.275883][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  105.844470][ T6627] loop2: detected capacity change from 0 to 512
[  105.870788][ T6627] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  105.874637][ T6627] EXT4-fs (loop2): orphan cleanup on readonly fs
[  105.876053][ T6627] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  105.879303][ T6627] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  105.881782][ T6627] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.643: bad orphan inode 768
[  105.884179][ T6627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  105.890965][ T6630] binder_user_error: 11 callbacks suppressed
[  105.890973][ T6630] binder: 6629:6630 got transaction to invalid handle, 1
[  105.893728][ T6630] binder: 6630:6629 cannot find target node
[  105.894894][ T6630] binder: 6629:6630 transaction call to 0:0 failed 74/29201/-22, size 72-24 line 3062
[  105.897761][ T6630] binder: 6629:6630 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  105.902811][ T6630] binder: 6630 RLIMIT_NICE not set
[  105.952820][ T6631] binder: 6629:6631 got transaction to invalid handle, 3
[  105.954324][ T6631] binder: 6631:6629 cannot find target node
[  105.955540][ T6631] binder: 6629:6631 transaction call to 0:0 failed 75/29201/-22, size 0-0 line 3062
[  105.957689][ T6631] binder: 6629:6631 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  105.960613][ T6631] binder: 6631 RLIMIT_NICE not set
[  106.973942][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  106.975318][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  107.274191][ T4332] EXT4-fs (loop2): unmounting filesystem.
[  107.418682][ T6665] binder: 6664:6665 got transaction to invalid handle, 1
[  107.421530][ T6665] binder: 6665:6664 cannot find target node
[  107.431298][ T6665] binder: 6664:6665 transaction call to 0:0 failed 79/29201/-22, size 72-24 line 3062
[  107.436937][ T6665] binder: 6664:6665 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  107.448151][ T6665] binder: 6665 RLIMIT_NICE not set
[  107.530001][ T6675] binder: 6664:6675 got transaction to invalid handle, 3
[  107.531529][ T6675] binder: 6675:6664 cannot find target node
[  108.558478][ T6686] Driver unsupported XDP return value 0 on prog  (id 32) dev N/A, expect packet loss!
[  108.560116][ T6690] loop3: detected capacity change from 0 to 512
[  108.632299][ T6690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  108.640447][ T6690] EXT4-fs (loop3): orphan cleanup on readonly fs
[  108.641744][ T6690] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  108.644078][ T6690] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  108.646818][ T6690] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.664: bad orphan inode 768
[  108.651931][ T6690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  109.376874][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  109.906680][ T6727] loop1: detected capacity change from 0 to 512
[  109.909005][ T6727] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  109.917841][ T6727] EXT4-fs (loop1): orphan cleanup on readonly fs
[  109.919174][ T6727] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  109.922305][ T6727] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  109.923574][ T6727] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.676: bad orphan inode 768
[  109.925693][ T6727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  109.938074][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  111.172471][ T6667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.210277][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'.
[  111.256906][ T4336] binder_debug: 7 callbacks suppressed
[  111.256920][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  111.259228][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  111.837152][ T6764] loop1: detected capacity change from 0 to 512
[  111.842079][ T6764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  111.845059][ T6764] EXT4-fs (loop1): orphan cleanup on readonly fs
[  111.846478][ T6764] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  111.849583][ T6764] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  111.859309][ T6764] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.688: bad orphan inode 768
[  111.866898][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  111.898418][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  111.917178][ T6773] binder: BINDER_SET_CONTEXT_MGR already set
[  111.918541][ T6773] binder: 6772:6773 ioctl 4018620d 20004a80 returned -16
[  111.923327][ T6773] binder_user_error: 8 callbacks suppressed
[  111.923333][ T6773] binder: 6772:6773 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  111.926860][ T6773] binder: 6773 RLIMIT_NICE not set
[  111.928478][ T6769] loop4: detected capacity change from 0 to 512
[  111.934646][ T6769] FAT-fs (loop4): Unrecognized mount option "uni_xlyte=0" or missing value
[  111.970143][ T5981] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  111.975951][ T6783] binder: 6772:6783 got transaction to invalid handle, 3
[  111.977447][ T6783] binder: 6783:6772 cannot find target node
[  111.984015][ T6783] binder: 6772:6783 transaction call to 0:0 failed 87/29201/-22, size 0-0 line 3062
[  112.162541][ T6802] FAULT_INJECTION: forcing a failure.
[  112.162541][ T6802] name failslab, interval 1, probability 0, space 0, times 0
[  112.165137][ T6802] CPU: 0 PID: 6802 Comm: syz.3.697 Not tainted syzkaller #0
[  112.166336][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  112.168119][ T6802] Call trace:
[  112.168689][ T6802]  dump_backtrace+0x1c4/0x1f0
[  112.169500][ T6802]  show_stack+0x2c/0x3c
[  112.170247][ T6802]  __dump_stack+0x30/0x40
[  112.171031][ T6802]  dump_stack_lvl+0xf4/0x15c
[  112.171830][ T6802]  dump_stack+0x1c/0x5c
[  112.172573][ T6802]  should_fail_ex+0x3cc/0x524
[  112.173431][ T6802]  __should_failslab+0xc0/0x11c
[  112.174276][ T6802]  should_failslab+0x10/0x28
[  112.175124][ T6802]  __kmem_cache_alloc_node+0x7c/0x318
[  112.176110][ T6802]  kmalloc_trace+0x48/0x94
[  112.176936][ T6802]  __hw_addr_add_ex+0x1cc/0x5b0
[  112.177851][ T6802]  dev_addr_init+0x11c/0x1e0
[  112.178693][ T6802]  alloc_netdev_mqs+0x1f0/0xc44
[  112.179580][ T6802]  ip6_tnl_locate+0x574/0x6d4
[  112.180442][ T6802]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[  112.181436][ T6802]  dev_ifsioc+0x810/0xc04
[  112.182230][ T6802]  dev_ioctl+0x530/0xc78
[  112.182965][ T6802]  sock_ioctl+0x778/0x828
[  112.183746][ T6802]  __arm64_sys_ioctl+0x14c/0x1c8
[  112.184627][ T6802]  invoke_syscall+0x98/0x290
[  112.185456][ T6802]  el0_svc_common+0x13c/0x258
[  112.186293][ T6802]  do_el0_svc+0x5c/0x134
[  112.187057][ T6802]  el0_svc+0x58/0x128
[  112.187771][ T6802]  el0t_64_sync_handler+0x84/0xf0
[  112.188829][ T6802]  el0t_64_sync+0x18c/0x190
[  112.189848][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.258946][ T6817] loop3: detected capacity change from 0 to 512
[  112.263878][ T6817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.267738][ T6817] EXT4-fs (loop3): orphan cleanup on readonly fs
[  112.269110][ T6817] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  112.272318][ T6817] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  112.273598][ T6817] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.701: bad orphan inode 768
[  112.275870][ T6817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  112.287416][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  112.516397][ T6844] loop4: detected capacity change from 0 to 512
[  112.534572][ T6844] FAT-fs (loop4): Unrecognized mount option "uni_xlyte=0" or missing value
[  112.598642][ T6855] FAULT_INJECTION: forcing a failure.
[  112.598642][ T6855] name failslab, interval 1, probability 0, space 0, times 0
[  112.602038][ T6855] CPU: 0 PID: 6855 Comm: syz.4.710 Not tainted syzkaller #0
[  112.603390][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  112.605195][ T6855] Call trace:
[  112.605784][ T6855]  dump_backtrace+0x1c4/0x1f0
[  112.606605][ T6855]  show_stack+0x2c/0x3c
[  112.607350][ T6855]  __dump_stack+0x30/0x40
[  112.608186][ T6855]  dump_stack_lvl+0xf4/0x15c
[  112.608988][ T6855]  dump_stack+0x1c/0x5c
[  112.609724][ T6855]  should_fail_ex+0x3cc/0x524
[  112.610579][ T6855]  __should_failslab+0xc0/0x11c
[  112.611449][ T6855]  should_failslab+0x10/0x28
[  112.612278][ T6855]  __kmem_cache_alloc_node+0x7c/0x318
[  112.613307][ T6855]  kmalloc_trace+0x48/0x94
[  112.614132][ T6855]  register_netdevice+0x3c8/0x1650
[  112.615094][ T6855]  ip6_tnl_create2+0x80/0x138
[  112.615954][ T6855]  ip6_tnl_locate+0x5e4/0x6d4
[  112.616803][ T6855]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[  112.617799][ T6855]  dev_ifsioc+0x810/0xc04
[  112.618599][ T6855]  dev_ioctl+0x530/0xc78
[  112.619371][ T6855]  sock_ioctl+0x778/0x828
[  112.620155][ T6855]  __arm64_sys_ioctl+0x14c/0x1c8
[  112.621055][ T6855]  invoke_syscall+0x98/0x290
[  112.621883][ T6855]  el0_svc_common+0x13c/0x258
[  112.622705][ T6855]  do_el0_svc+0x5c/0x134
[  112.623454][ T6855]  el0_svc+0x58/0x128
[  112.624150][ T6855]  el0t_64_sync_handler+0x84/0xf0
[  112.625048][ T6855]  el0t_64_sync+0x18c/0x190
[  112.625903][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.688865][ T6863] loop4: detected capacity change from 0 to 512
[  112.694464][ T6863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.720899][ T6863] EXT4-fs (loop4): orphan cleanup on readonly fs
[  112.723746][ T6863] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  112.726893][ T6863] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  112.728386][ T6863] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.713: bad orphan inode 768
[  112.731663][ T6863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  112.750021][ T4339] EXT4-fs (loop4): unmounting filesystem.
[  112.761213][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  113.237750][ T6892] FAULT_INJECTION: forcing a failure.
[  113.237750][ T6892] name failslab, interval 1, probability 0, space 0, times 0
[  113.252918][ T6892] CPU: 0 PID: 6892 Comm: syz.1.722 Not tainted syzkaller #0
[  113.254277][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  113.256083][ T6892] Call trace:
[  113.256654][ T6892]  dump_backtrace+0x1c4/0x1f0
[  113.257505][ T6892]  show_stack+0x2c/0x3c
[  113.258261][ T6892]  __dump_stack+0x30/0x40
[  113.259063][ T6892]  dump_stack_lvl+0xf4/0x15c
[  113.259912][ T6892]  dump_stack+0x1c/0x5c
[  113.260663][ T6892]  should_fail_ex+0x3cc/0x524
[  113.261516][ T6892]  __should_failslab+0xc0/0x11c
[  113.262394][ T6892]  should_failslab+0x10/0x28
[  113.263238][ T6892]  __kmem_cache_alloc_node+0x7c/0x318
[  113.264232][ T6892]  __kmalloc_node+0xc8/0x184
[  113.265112][ T6892]  kvmalloc_node+0x88/0x1d4
[  113.265998][ T6892]  alloc_netdev_mqs+0x94/0xc44
[  113.266908][ T6892]  ip6_tnl_locate+0x574/0x6d4
[  113.267785][ T6892]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[  113.268780][ T6892]  dev_ifsioc+0x810/0xc04
[  113.269654][ T6892]  dev_ioctl+0x530/0xc78
[  113.270400][ T6892]  sock_ioctl+0x778/0x828
[  113.271159][ T6892]  __arm64_sys_ioctl+0x14c/0x1c8
[  113.272018][ T6892]  invoke_syscall+0x98/0x290
[  113.272854][ T6892]  el0_svc_common+0x13c/0x258
[  113.273681][ T6892]  do_el0_svc+0x5c/0x134
[  113.274418][ T6892]  el0_svc+0x58/0x128
[  113.275129][ T6892]  el0t_64_sync_handler+0x84/0xf0
[  113.276004][ T6892]  el0t_64_sync+0x18c/0x190
[  113.276850][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.392219][ T6912] binder: BINDER_SET_CONTEXT_MGR already set
[  113.432034][ T6913] loop1: detected capacity change from 0 to 512
[  113.440797][ T6912] binder: 6910:6912 ioctl 4018620d 20004a80 returned -16
[  113.444486][ T6912] binder: 6910:6912 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  113.446962][ T6912] binder: 6912 RLIMIT_NICE not set
[  113.449432][ T6913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  113.462168][ T6913] EXT4-fs (loop1): orphan cleanup on readonly fs
[  113.467834][ T6913] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  113.477326][ T6913] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  113.478479][ T6913] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.726: bad orphan inode 768
[  113.486717][ T6913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  113.496415][ T6919] binder: 6910:6919 got transaction to invalid handle, 3
[  113.498101][ T6919] binder: 6919:6910 cannot find target node
[  113.499277][ T6919] binder: 6910:6919 transaction call to 0:0 failed 89/29201/-22, size 0-0 line 3062
[  113.528879][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  113.811902][ T6958] FAULT_INJECTION: forcing a failure.
[  113.811902][ T6958] name failslab, interval 1, probability 0, space 0, times 0
[  113.814680][ T6958] CPU: 0 PID: 6958 Comm: syz.3.737 Not tainted syzkaller #0
[  113.815907][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  113.817903][ T6958] Call trace:
[  113.818536][ T6958]  dump_backtrace+0x1c4/0x1f0
[  113.819472][ T6958]  show_stack+0x2c/0x3c
[  113.820275][ T6958]  __dump_stack+0x30/0x40
[  113.821067][ T6958]  dump_stack_lvl+0xf4/0x15c
[  113.821915][ T6958]  dump_stack+0x1c/0x5c
[  113.822672][ T6958]  should_fail_ex+0x3cc/0x524
[  113.823442][ T6958]  __should_failslab+0xc0/0x11c
[  113.824273][ T6958]  should_failslab+0x10/0x28
[  113.825075][ T6958]  __kmem_cache_alloc_node+0x7c/0x318
[  113.825998][ T6958]  __kmalloc_node+0xc8/0x184
[  113.826822][ T6958]  kvmalloc_node+0x88/0x1d4
[  113.827628][ T6958]  alloc_netdev_mqs+0x62c/0xc44
[  113.828490][ T6958]  ip6_tnl_locate+0x574/0x6d4
[  113.829314][ T6958]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[  113.830252][ T6958]  dev_ifsioc+0x810/0xc04
[  113.830984][ T6958]  dev_ioctl+0x530/0xc78
[  113.831727][ T6958]  sock_ioctl+0x778/0x828
[  113.832490][ T6958]  __arm64_sys_ioctl+0x14c/0x1c8
[  113.833326][ T6958]  invoke_syscall+0x98/0x290
[  113.834135][ T6958]  el0_svc_common+0x13c/0x258
[  113.834950][ T6958]  do_el0_svc+0x5c/0x134
[  113.835697][ T6958]  el0_svc+0x58/0x128
[  113.836370][ T6958]  el0t_64_sync_handler+0x84/0xf0
[  113.837242][ T6958]  el0t_64_sync+0x18c/0x190
[  113.838093][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.927973][ T6972] tipc: Started in network mode
[  113.929161][ T6972] tipc: Node identity 7f000001, cluster identity 4711
[  113.931603][ T6972] tipc: Enabled bearer <udp:syz1>, priority 10
[  114.088723][ T6983] loop2: detected capacity change from 0 to 512
[  114.090949][ T6983] FAT-fs (loop2): Unrecognized mount option "uni_xlyte=0" or missing value
[  114.368832][ T6399] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  114.394412][ T5812] binder: undelivered TRANSACTION_ERROR: 29201
[  114.439480][ T6988] FAULT_INJECTION: forcing a failure.
[  114.439480][ T6988] name failslab, interval 1, probability 0, space 0, times 0
[  114.442157][ T6988] CPU: 1 PID: 6988 Comm: syz.1.749 Not tainted syzkaller #0
[  114.443383][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  114.444943][ T6988] Call trace:
[  114.445514][ T6988]  dump_backtrace+0x1c4/0x1f0
[  114.446402][ T6988]  show_stack+0x2c/0x3c
[  114.447205][ T6988]  __dump_stack+0x30/0x40
[  114.448021][ T6988]  dump_stack_lvl+0xf4/0x15c
[  114.448874][ T6988]  dump_stack+0x1c/0x5c
[  114.449652][ T6988]  should_fail_ex+0x3cc/0x524
[  114.450525][ T6988]  __should_failslab+0xc0/0x11c
[  114.451382][ T6988]  should_failslab+0x10/0x28
[  114.452251][ T6988]  __kmem_cache_alloc_node+0x7c/0x318
[  114.453271][ T6988]  kmalloc_trace+0x48/0x94
[  114.454079][ T6988]  register_netdevice+0x3c8/0x1650
[  114.455047][ T6988]  ip6_tnl_create2+0x80/0x138
[  114.455918][ T6988]  ip6_tnl_locate+0x5e4/0x6d4
[  114.456768][ T6988]  ip6_tnl_siocdevprivate+0x4c0/0xc38
[  114.457744][ T6988]  dev_ifsioc+0x810/0xc04
[  114.458576][ T6988]  dev_ioctl+0x530/0xc78
[  114.459357][ T6988]  sock_ioctl+0x778/0x828
[  114.460140][ T6988]  __arm64_sys_ioctl+0x14c/0x1c8
[  114.461052][ T6988]  invoke_syscall+0x98/0x290
[  114.461906][ T6988]  el0_svc_common+0x13c/0x258
[  114.462781][ T6988]  do_el0_svc+0x5c/0x134
[  114.463593][ T6988]  el0_svc+0x58/0x128
[  114.464348][ T6988]  el0t_64_sync_handler+0x84/0xf0
[  114.465334][ T6988]  el0t_64_sync+0x18c/0x190
[  114.602468][ T7009] loop6: detected capacity change from 0 to 512
[  114.607745][ T7009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  114.628442][ T7009] EXT4-fs (loop6): orphan cleanup on readonly fs
[  114.630885][ T7009] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  114.633292][ T7009] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  114.644264][ T7012] binder: BINDER_SET_CONTEXT_MGR already set
[  114.645529][ T7012] binder: 7011:7012 ioctl 4018620d 20004a80 returned -16
[  114.649514][ T7009] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.756: bad orphan inode 768
[  114.651418][ T7012] binder: 7011:7012 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  114.651589][ T7012] binder: 7012 RLIMIT_NICE not set
[  114.664426][ T7009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  114.693471][ T5610] EXT4-fs (loop6): unmounting filesystem.
[  114.702452][ T7015] binder: 7011:7015 got transaction to invalid handle, 3
[  114.703999][ T7015] binder: 7015:7011 cannot find target node
[  114.705208][ T7015] binder: 7011:7015 transaction call to 0:0 failed 91/29201/-22, size 0-0 line 3062
[  115.050749][    T7] tipc: Node number set to 2130706433
[  115.111853][ T7050] FAULT_INJECTION: forcing a failure.
[  115.111853][ T7050] name failslab, interval 1, probability 0, space 0, times 0
[  115.114551][ T7050] CPU: 0 PID: 7050 Comm: syz.3.766 Not tainted syzkaller #0
[  115.115815][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  115.117665][ T7050] Call trace:
[  115.118250][ T7050]  dump_backtrace+0x1c4/0x1f0
[  115.119084][ T7050]  show_stack+0x2c/0x3c
[  115.119931][ T7050]  __dump_stack+0x30/0x40
[  115.120831][ T7050]  dump_stack_lvl+0xf4/0x15c
[  115.121722][ T7050]  dump_stack+0x1c/0x5c
[  115.122534][ T7050]  should_fail_ex+0x3cc/0x524
[  115.123437][ T7050]  __should_failslab+0xc0/0x11c
[  115.124301][ T7050]  should_failslab+0x10/0x28
[  115.125111][ T7050]  __kmem_cache_alloc_node+0x7c/0x318
[  115.126036][ T7050]  kmalloc_trace+0x48/0x94
[  115.126807][ T7050]  mpi_alloc+0x5c/0x140
[  115.127515][ T7050]  mpi_read_raw_data+0x134/0x758
[  115.128396][ T7050]  rsa_set_pub_key+0x264/0x460
[  115.129234][ T7050]  pkcs1pad_set_pub_key+0xc0/0x1b4
[  115.130156][ T7050]  public_key_verify_signature+0x48c/0xb30
[  115.131183][ T7050]  x509_check_for_self_signed+0x2dc/0x3c0
[  115.132229][ T7050]  x509_cert_parse+0x4d8/0x6e0
[  115.133082][ T7050]  x509_key_preparse+0x74/0x5c8
[  115.133918][ T7050]  asymmetric_key_preparse+0xcc/0x17c
[  115.134837][ T7050]  key_create_or_update+0x394/0x868
[  115.135730][ T7050]  __arm64_sys_add_key+0x40c/0x520
[  115.136651][ T7050]  invoke_syscall+0x98/0x290
[  115.137441][ T7050]  el0_svc_common+0x13c/0x258
[  115.138259][ T7050]  do_el0_svc+0x5c/0x134
[  115.138999][ T7050]  el0_svc+0x58/0x128
[  115.139686][ T7050]  el0t_64_sync_handler+0x84/0xf0
[  115.140570][ T7050]  el0t_64_sync+0x18c/0x190
[  115.141536][    C0] vkms_vblank_simulate: vblank timer overrun
[  115.753489][ T7066] binder: 7065:7066 got transaction to invalid handle, 1
[  115.826340][   T56] nci: nci_ntf_packet: unsupported ntf opcode 0xf31
[  116.229145][ T7133] loop3: detected capacity change from 0 to 512
[  116.232909][ T7133] EXT4-fs: Ignoring removed nobh option
[  116.249379][ T7133] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  116.254674][ T7133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  116.256496][ T7133] EXT4-fs (loop3): orphan cleanup on readonly fs
[  116.260376][ T7133] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.781: attempt to clear invalid blocks 1024 len 1
[  116.264195][ T7133] EXT4-fs (loop3): Remounting filesystem read-only
[  116.265917][ T7133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.781: bg 0: block 361: padding at end of block bitmap is not set
[  116.268547][ T7133] EXT4-fs (loop3): Remounting filesystem read-only
[  116.273389][ T7133] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  116.275090][ T7133] EXT4-fs (loop3): Remounting filesystem read-only
[  116.276392][ T7133] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.781: invalid indirect mapped block 1811939328 (level 0)
[  116.279395][ T7133] EXT4-fs (loop3): Remounting filesystem read-only
[  116.289469][ T7133] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.781: invalid indirect mapped block 2185560079 (level 1)
[  116.296540][ T7133] EXT4-fs (loop3): Remounting filesystem read-only
[  116.298070][ T7133] EXT4-fs (loop3): 1 truncate cleaned up
[  116.299076][ T7133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  116.321117][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  116.573102][ T4377] binder_debug: 4 callbacks suppressed
[  116.573117][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  116.575647][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  116.657356][ T7178] binder: 7178:7175 cannot find target node
[  116.658664][ T7178] binder: 7175:7178 transaction call to 0:0 failed 99/29201/-22, size 72-24 line 3062
[  116.713026][ T7184] binder: 7184:7175 cannot find target node
[  116.714202][ T7184] binder: 7175:7184 transaction call to 0:0 failed 100/29201/-22, size 0-0 line 3062
[  117.494232][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  117.495498][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  118.256344][ T7206] FAULT_INJECTION: forcing a failure.
[  118.256344][ T7206] name failslab, interval 1, probability 0, space 0, times 0
[  118.258573][ T7206] CPU: 1 PID: 7206 Comm: syz.3.791 Not tainted syzkaller #0
[  118.259830][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  118.261745][ T7206] Call trace:
[  118.262355][ T7206]  dump_backtrace+0x1c4/0x1f0
[  118.263250][ T7206]  show_stack+0x2c/0x3c
[  118.264025][ T7206]  __dump_stack+0x30/0x40
[  118.264812][ T7206]  dump_stack_lvl+0xf4/0x15c
[  118.265659][ T7206]  dump_stack+0x1c/0x5c
[  118.266413][ T7206]  should_fail_ex+0x3cc/0x524
[  118.267280][ T7206]  __should_failslab+0xc0/0x11c
[  118.268146][ T7206]  should_failslab+0x10/0x28
[  118.268972][ T7206]  __kmem_cache_alloc_node+0x7c/0x318
[  118.269962][ T7206]  __kmalloc_node_track_caller+0xb8/0x174
[  118.270990][ T7206]  krealloc+0xa0/0x150
[  118.271729][ T7206]  nf_ct_ext_add+0x164/0x348
[  118.272578][ T7206]  init_conntrack+0x6d4/0xf60
[  118.273418][ T7206]  nf_conntrack_in+0xa74/0x1934
[  118.274298][ T7206]  ipv4_conntrack_local+0x10c/0x210
[  118.275221][ T7206]  nf_hook_slow+0xc8/0x208
[  118.276022][ T7206]  nf_hook+0x1d0/0x338
[  118.276772][ T7206]  __ip_local_out+0x4b8/0x5fc
[  118.277651][ T7206]  __ip_queue_xmit+0xc38/0x1718
[  118.278514][ T7206]  ip_queue_xmit+0x5c/0x7c
[  118.279298][ T7206]  __tcp_transmit_skb+0x17bc/0x2bcc
[  118.280207][ T7206]  tcp_connect+0x2268/0x3c88
[  118.281025][ T7206]  tcp_v4_connect+0xbb4/0x1460
[  118.281859][ T7206]  __inet_stream_connect+0x1f8/0xc48
[  118.282803][ T7206]  tcp_sendmsg_fastopen+0x314/0x564
[  118.283728][ T7206]  tcp_sendmsg_locked+0x2c50/0x3164
[  118.284649][ T7206]  tcp_sendmsg+0x40/0x64
[  118.285426][ T7206]  inet_sendmsg+0x154/0x27c
[  118.286241][ T7206]  __sys_sendto+0x324/0x440
[  118.287081][ T7206]  __arm64_sys_sendto+0xe4/0x104
[  118.287955][ T7206]  invoke_syscall+0x98/0x290
[  118.288785][ T7206]  el0_svc_common+0x13c/0x258
[  118.289636][ T7206]  do_el0_svc+0x5c/0x134
[  118.290435][ T7206]  el0_svc+0x58/0x128
[  118.291165][ T7206]  el0t_64_sync_handler+0x84/0xf0
[  118.292040][ T7206]  el0t_64_sync+0x18c/0x190
[  118.362277][ T7212] binder_user_error: 10 callbacks suppressed
[  118.362286][ T7212] binder: 7211:7212 got transaction to invalid handle, 1
[  118.364946][ T7212] binder: 7212:7211 cannot find target node
[  118.366092][ T7212] binder: 7211:7212 transaction call to 0:0 failed 104/29201/-22, size 0-0 line 3062
[  118.397446][ T7212] binder: 7211:7212 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  118.400039][ T7212] binder: 7212 RLIMIT_NICE not set
[  118.448322][ T7217] binder: 7211:7217 got reply transaction with no transaction stack
[  118.749244][ T7072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.352789][ T7246] loop3: detected capacity change from 0 to 128
[  119.419152][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  119.488750][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  119.552440][ T7267] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[  119.708084][ T7276] binder: tried to use weak ref as strong ref
[  119.709255][ T7276] binder: 7275:7276 Acquire 1 refcount change on invalid ref 0 ret -22
[  119.717226][ T7276] binder: 7275:7276 got transaction to invalid handle, 1
[  119.726647][ T7276] binder: 7275:7276 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  119.731248][ T7276] binder: 7276 RLIMIT_NICE not set
[  119.732367][ T7276] binder: 7275:7276 got reply transaction with no transaction stack
[  120.014345][ T7307] netlink: 'syz.6.821': attribute type 6 has an invalid length.
[  120.384573][ T7344] overlayfs: failed to resolve './bus': -2
[  120.625318][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'.
[  120.669010][ T7386] overlayfs: failed to resolve './bus': -2
[  120.697853][   T27] audit: type=1326 audit(120.680:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.6.844" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379368 code=0x0
[  120.774878][ T7399] loop3: detected capacity change from 0 to 512
[  120.776536][ T7399] FAT-fs (loop3): Unrecognized mount option "uni_xlyte=0" or missing value
[  120.801871][ T7404] input: syz0 as /devices/virtual/input/input3
[  120.826803][ T6399] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.888306][ T7403] device syzkaller0 entered promiscuous mode
[  121.014794][ T7430] loop1: detected capacity change from 0 to 1024
[  121.023351][ T7431] overlayfs: failed to resolve './bus': -2
[  121.048327][ T7430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  121.098612][ T7440] loop2: detected capacity change from 0 to 512
[  121.116915][ T7440] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  121.124127][ T7440] EXT4-fs (loop2): orphan cleanup on readonly fs
[  121.132020][ T7440] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  121.134550][ T7440] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  121.138270][ T7440] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.857: bad orphan inode 768
[  121.147435][ T7440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  121.199201][ T4332] EXT4-fs (loop2): unmounting filesystem.
[  121.245011][ T7455] loop3: detected capacity change from 0 to 512
[  121.261726][ T7455] FAT-fs (loop3): Unrecognized mount option "uni_xlyte=0" or missing value
[  121.390228][ T7470] loop4: detected capacity change from 0 to 1024
[  121.402781][ T7470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  121.408130][ T7470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  121.426326][ T7470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  121.428037][ T7470] System zones: 0-1, 3-36
[  121.438915][ T7470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  121.963305][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  121.963782][ T7495] loop3: detected capacity change from 0 to 128
[  121.976501][ T7493] loop6: detected capacity change from 0 to 512
[  121.978413][ T7493] FAT-fs (loop6): Unrecognized mount option "uni_xlyte=0" or missing value
[  122.018464][ T7495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  122.045486][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  122.075149][ T7505] loop6: detected capacity change from 0 to 256
[  122.152386][   T27] audit: type=1326 audit(122.140:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.157222][   T27] audit: type=1326 audit(122.140:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.164443][   T27] audit: type=1326 audit(122.140:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.186137][   T27] audit: type=1326 audit(122.140:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.195218][   T27] audit: type=1326 audit(122.150:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.208904][   T27] audit: type=1326 audit(122.150:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.213798][   T27] audit: type=1326 audit(122.150:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.218504][   T27] audit: type=1326 audit(122.150:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.223113][   T27] audit: type=1326 audit(122.150:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.886" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e779368 code=0x7ffc0000
[  122.229038][ T4339] EXT4-fs (loop4): unmounting filesystem.
[  122.376939][ T7534] loop2: detected capacity change from 0 to 512
[  122.401661][ T7534] FAT-fs (loop2): Unrecognized mount option "uni_xlyte=0" or missing value
[  122.432560][ T6399] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  122.618479][ T7548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.624457][ T7548] EXT4-fs (loop4): orphan cleanup on readonly fs
[  122.627157][ T7548] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  122.633205][ T7548] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  122.634769][ T7548] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.898: bad orphan inode 768
[  122.637461][ T7548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  122.778574][ T7559] binder_alloc: 7558: binder_alloc_buf, no vma
[  122.783810][ T7559] binder_debug: 19 callbacks suppressed
[  122.783824][ T7559] binder: cannot allocate buffer: vma cleared, target dead or dying
[  122.784785][ T7559] binder: 7558:7559 transaction call to 7558:0 failed 127/29189/-3, size 0-0 line 3247
[  122.877049][ T7562] binder: 7558:7562 transaction reply to 0:0 failed 128/29201/-71, size 22-0 line 2963
[  122.997170][ T4332] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000)
[  122.998696][ T4332] FAT-fs (loop2): Filesystem has been set read-only
[  123.025258][ T4332] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  123.028831][ T4332] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  123.415913][ T4339] EXT4-fs (loop4): unmounting filesystem.
[  123.474636][ T7573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  123.491179][ T4339] EXT4-fs (loop4): unmounting filesystem.
[  123.601127][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  123.609147][ T4336] binder: undelivered TRANSACTION_ERROR: 29189
[  123.950077][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.955205][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.961351][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.963730][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.965320][ T4342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  123.966769][ T4342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.382752][ T7592] SQUASHFS error: Failed to read block 0x6e6: -5
[  124.383916][ T7592] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  124.385104][ T7592] SQUASHFS error: Unable to read directory block [6aa:26]
[  124.522794][   T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.526977][ T7597] set_capacity_and_notify: 5 callbacks suppressed
[  124.526989][ T7597] loop4: detected capacity change from 0 to 512
[  124.542796][ T7597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.548922][ T7597] EXT4-fs (loop4): orphan cleanup on readonly fs
[  124.551817][ T7597] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  124.556018][ T7597] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  124.570061][ T7597] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.917: bad orphan inode 768
[  124.572478][ T7597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  124.585431][ T4339] EXT4-fs (loop4): unmounting filesystem.
[  124.593073][   T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.622276][ T7601] loop1: detected capacity change from 0 to 512
[  124.628758][ T7601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.636373][ T7601] EXT4-fs (loop1): orphan cleanup on readonly fs
[  124.637604][ T7601] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  124.641109][ T7601] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  124.642246][ T7601] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.927: bad orphan inode 768
[  124.664114][ T7601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  124.708322][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  124.712254][   T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.729578][ T7611] binder_user_error: 19 callbacks suppressed
[  124.734752][ T7611] binder: 7609:7611 tried to acquire reference to desc 0, got 1 instead
[  124.736481][ T7611] binder_alloc: 7609: binder_alloc_buf, no vma
[  124.737642][ T7611] binder: cannot allocate buffer: vma cleared, target dead or dying
[  124.737663][ T7611] binder: 7609:7611 transaction call to 7609:0 failed 133/29189/-3, size 0-0 line 3247
[  124.742927][ T7611] binder: 7609:7611 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  124.745025][ T7611] binder: 7611 RLIMIT_NICE not set
[  125.074272][ T7615] binder: 7609:7615 got reply transaction with no transaction stack
[  125.081034][ T7615] binder: 7609:7615 transaction reply to 0:0 failed 134/29201/-71, size 22-0 line 2963
[  125.120779][   T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.138390][ T7619] loop1: detected capacity change from 0 to 8192
[  125.160981][ T7584] chnl_net:caif_netlink_parms(): no params data found
[  125.221054][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.223314][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.226812][ T7584] device bridge_slave_0 entered promiscuous mode
[  125.229127][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.232178][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.234430][ T7584] device bridge_slave_1 entered promiscuous mode
[  125.241592][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.244306][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.252281][ T7584] team0: Port device team_slave_0 added
[  125.255416][ T7584] team0: Port device team_slave_1 added
[  125.260880][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.262089][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.266793][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.269207][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.270700][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.275349][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.341059][ T7584] device hsr_slave_0 entered promiscuous mode
[  125.365225][ T7528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.385929][ T7584] device hsr_slave_1 entered promiscuous mode
[  125.420281][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.421939][ T7584] Cannot create hsr debugfs directory
[  125.557686][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  125.569698][ T4377] binder: undelivered TRANSACTION_ERROR: 29189
[  125.930317][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  125.932063][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  126.009787][ T4347] Bluetooth: hci3: command 0x0409 tx timeout
[  126.086303][ T7656] loop1: detected capacity change from 0 to 512
[  126.103519][ T7584] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  126.106868][ T7634] 
[  126.107273][ T7634] ======================================================
[  126.108459][ T7634] WARNING: possible circular locking dependency detected
[  126.109820][ T7634] syzkaller #0 Not tainted
[  126.110740][ T7634] ------------------------------------------------------
[  126.112140][ T7634] syz.4.926/7634 is trying to acquire lock:
[  126.113422][ T7634] ffff0000f8611f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe4/0x1ec
[  126.115901][ T7634] 
[  126.115901][ T7634] but task is already holding lock:
[  126.117431][ T7634] ffff0000f8610130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x514
[  126.119213][ T7634] 
[  126.119213][ T7634] which lock already depends on the new lock.
[  126.119213][ T7634] 
[  126.121119][ T7634] 
[  126.121119][ T7634] the existing dependency chain (in reverse order) is:
[  126.122916][ T7634] 
[  126.122916][ T7634] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  126.124628][ T7634]        lock_sock_nested+0x70/0x130
[  126.125773][ T7634]        smc_listen_out+0xf0/0x3b8
[  126.126847][ T7634]        smc_listen_work+0x480/0xdd0
[  126.127886][ T7634]        process_one_work+0x7e4/0x13bc
[  126.128947][ T7634]        worker_thread+0x8cc/0xfe8
[  126.129941][ T7634]        kthread+0x254/0x2e0
[  126.130958][ T7634]        ret_from_fork+0x10/0x20
[  126.132058][ T7634] 
[  126.132058][ T7634] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  126.133979][ T7634]        __lock_acquire+0x2808/0x6634
[  126.135018][ T7634]        lock_acquire+0x20c/0x638
[  126.135997][ T7634]        __flush_work+0x10c/0x1ec
[  126.136978][ T7634]        __cancel_work_timer+0x2f8/0x450
[  126.138022][ T7634]        cancel_work_sync+0x24/0x38
[  126.138982][ T7634]        smc_clcsock_release+0x64/0xe8
[  126.139987][ T7634]        __smc_release+0x56c/0x6c0
[  126.140950][ T7634]        smc_close_non_accepted+0xd8/0x254
[  126.142032][ T7634]        smc_close_active+0x9c0/0xd58
[  126.143056][ T7634]        __smc_release+0x490/0x6c0
[  126.144048][ T7634]        smc_release+0x258/0x514
[  126.144996][ T7634]        sock_close+0xac/0x1ec
[  126.145914][ T7634]        __fput+0x1b4/0x7b0
[  126.146788][ T7634]        ____fput+0x20/0x30
[  126.147651][ T7634]        task_work_run+0x1f4/0x280
[  126.148618][ T7634]        do_notify_resume+0x20f8/0x2c84
[  126.149711][ T7634]        el0_svc+0x98/0x128
[  126.150582][ T7634]        el0t_64_sync_handler+0x84/0xf0
[  126.151614][ T7634]        el0t_64_sync+0x18c/0x190
[  126.152534][ T7634] 
[  126.152534][ T7634] other info that might help us debug this:
[  126.152534][ T7634] 
[  126.154392][ T7634]  Possible unsafe locking scenario:
[  126.154392][ T7634] 
[  126.155703][ T7634]        CPU0                    CPU1
[  126.156679][ T7634]        ----                    ----
[  126.157672][ T7634]   lock(sk_lock-AF_SMC/1);
[  126.158526][ T7634]                                lock((work_completion)(&new_smc->smc_listen_work));
[  126.160249][ T7634]                                lock(sk_lock-AF_SMC/1);
[  126.161611][ T7634]   lock((work_completion)(&new_smc->smc_listen_work));
[  126.162890][ T7634] 
[  126.162890][ T7634]  *** DEADLOCK ***
[  126.162890][ T7634] 
[  126.164367][ T7634] 2 locks held by syz.4.926/7634:
[  126.165263][ T7634]  #0: ffff0000f9cf0810 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x74/0x1ec
[  126.167162][ T7634]  #1: ffff0000f8610130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x514
[  126.169025][ T7634] 
[  126.169025][ T7634] stack backtrace:
[  126.170095][ T7634] CPU: 1 PID: 7634 Comm: syz.4.926 Not tainted syzkaller #0
[  126.171415][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  126.173219][ T7634] Call trace:
[  126.173816][ T7634]  dump_backtrace+0x1c4/0x1f0
[  126.174690][ T7634]  show_stack+0x2c/0x3c
[  126.175478][ T7634]  __dump_stack+0x30/0x40
[  126.176284][ T7634]  dump_stack_lvl+0xf4/0x15c
[  126.177174][ T7634]  dump_stack+0x1c/0x5c
[  126.177981][ T7634]  print_circular_bug+0x148/0x1b0
[  126.178944][ T7634]  check_noncircular+0x264/0x2f8
[  126.179869][ T7634]  __lock_acquire+0x2808/0x6634
[  126.180796][ T7634]  lock_acquire+0x20c/0x638
[  126.181672][ T7634]  __flush_work+0x10c/0x1ec
[  126.182530][ T7634]  __cancel_work_timer+0x2f8/0x450
[  126.183498][ T7634]  cancel_work_sync+0x24/0x38
[  126.184382][ T7634]  smc_clcsock_release+0x64/0xe8
[  126.185323][ T7634]  __smc_release+0x56c/0x6c0
[  126.186200][ T7634]  smc_close_non_accepted+0xd8/0x254
[  126.187171][ T7634]  smc_close_active+0x9c0/0xd58
[  126.188107][ T7634]  __smc_release+0x490/0x6c0
[  126.188993][ T7634]  smc_release+0x258/0x514
[  126.189844][ T7634]  sock_close+0xac/0x1ec
[  126.190673][ T7634]  __fput+0x1b4/0x7b0
[  126.191440][ T7634]  ____fput+0x20/0x30
[  126.192212][ T7634]  task_work_run+0x1f4/0x280
[  126.193087][ T7634]  do_notify_resume+0x20f8/0x2c84
[  126.194047][ T7634]  el0_svc+0x98/0x128
[  126.194810][ T7634]  el0t_64_sync_handler+0x84/0xf0
[  126.195753][ T7634]  el0t_64_sync+0x18c/0x190
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  126.224369][ T7656] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.228636][ T7656] EXT4-fs: failed to create workqueue
[  126.234628][ T7656] EXT4-fs (loop1): mount failed
[  128.155311][   T56] device hsr_slave_0 left promiscuous mode
[  128.189790][   T56] device hsr_slave_1 left promiscuous mode
[  128.269658][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.271001][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.272561][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.273917][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.275422][   T56] device bridge_slave_1 left promiscuous mode
[  128.276485][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.320827][   T56] device bridge_slave_0 left promiscuous mode
[  128.321969][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.449722][   T56] device veth1_macvtap left promiscuous mode
[  128.450918][   T56] device veth0_macvtap left promiscuous mode
[  128.452060][   T56] device veth1_vlan left promiscuous mode
[  128.453114][   T56] device veth0_vlan left promiscuous mode
[  130.520408][   T56] team0 (unregistering): Port device team_slave_1 removed
[  130.690468][   T56] team0 (unregistering): Port device team_slave_0 removed
[  130.860765][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.082189][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.600563][   T56] bond0 (unregistering): Released all slaves
[  135.121963][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.200492][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.281255][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.360512][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.540447][   T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.620499][   T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.671016][   T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.770526][   T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.920714][   T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.020714][   T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.081165][   T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0