last executing test programs: 2.029803081s ago: executing program 2 (id=478): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (fail_nth: 3) 1.914443787s ago: executing program 2 (id=480): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}]}}}]}, 0x3c}}, 0x0) 1.862311682s ago: executing program 2 (id=481): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c06e8fc55a10a0015000600142603600e120800020000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) socket$inet(0x2, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x0, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x2, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xbf, &(0x7f0000001e00)=""/4081, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.832652216s ago: executing program 3 (id=482): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace(0x10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x3) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) 1.695754933s ago: executing program 3 (id=483): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18001800010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.638239903s ago: executing program 1 (id=484): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xff, 0x9}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) 1.594386304s ago: executing program 3 (id=485): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$TIOCGETD(r2, 0x5424, 0xfffffffffffffffe) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 1.535571522s ago: executing program 1 (id=486): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') fchdir(r0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x5457, 0x9, 0x20, 0x0, "5b76fc726a00cd9420613be6850c125ae5b8808948d9a1ab62367302257afc3070ac3d66f5dd344cd12ab8c86ff9d6fe93d5873617c35f8d03ff5bc03fea758d", "b8a247b03b13577ac6f49862a1b3efa32a078ee76ffb7a720ec55c2e6eda93ed", [0x23afaf2e, 0x800]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f"], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4091, 0xffb) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) 1.434581114s ago: executing program 0 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0xc080) 1.433938858s ago: executing program 0 (id=489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x801c581f, 0x30000002000005c) 1.433704658s ago: executing program 1 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x40084) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) writev(r1, &(0x7f0000003e40)=[{&(0x7f0000003a80)='Ji%', 0x3}, {0x0}, {0x0}], 0x3) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 1.411943033s ago: executing program 0 (id=491): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) (fail_nth: 3) 1.338352434s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3, r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000000ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.020270586s ago: executing program 1 (id=494): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000017cbbab50000000000210000f3bb068e", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,flush,codepage=866,shortname=win95,iocharset=macgaelic,iocharset=euc-jp,shortname=win95,shortname=lower,shortname=mixed,rodir,rodir,shortname=win95,\x00'], 0x7f, 0x2cf, &(0x7f0000000680)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04c80c0d00001620"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./file0\x00', 0x80301, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0xb7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x1e) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0xa0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000002380)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000400)="f4", 0x1}], 0x123e}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7df43b9648b20bc5270e015a221f4e9a455f5ce90b79a515c5279d8ac9b86e1d229b8f02b3f1a39b73230c04ab9fd6da7772a3cd4b8089eed6871c9da6727c1b00"/74], 0x68}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000440)="e3dfd6635d93dd6fb40a20626b0b237c1ef1931055fb3a07acbae95c1c61d77c6d054b70aba71804c6b7feb58dfb444caa011fa9a0ce2fde58d4b6f2634e8aef77e9505148faa9d0d3615d1f24d90032e5fc036beda9"}, {&(0x7f00000004c0)="bef0cbbd5fd951b11574319b70690ddd9ebcf44b4879b0381fe22506c6814594ecf91c74a9bd192c21bfa358a812e9375d9fe4084671677404cdaba109"}, {&(0x7f0000000500)="391805032b1f5443fefd5413c30be19cb1c644e98f2adbd876cb4559a91a078448470c5fb63a1daa16921a5536a358ddb4f2ffac7e686158dc7c3dd33265cc4543f7a39f4e92c9b9704a8731368ea1403f"}, {&(0x7f0000001180)="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"}, {&(0x7f0000002180)="e12f29107610efb3ab662b992b62200ca653a164bd4fd1b8a05b3b00f5708ffa8aa40701666993f0d2188331ad47f6db9c6c37cc37a4c7641fcdc411ef7ebf05e9e66b9c3f53367b34c4201794563fbd9ecb50bdcf"}, {&(0x7f0000002200)}, {&(0x7f0000002240)="1a410d264fbf4ab353a3a540d87211b6bbaefa05f0dd0e6aacecdb2b687c2b3174007c3c28a2dfdf8eae59fddf4e2e06d77972eb24d823940e75d81d583fe6c4fe858611298c3ba67143fdaa0c3cc95cff18fca1ce7a44577f7a35bf566e135e25908ece8817e406609688dbcc86d7a7a668ad694418ab"}], 0x0, &(0x7f0000002340)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x3ff}}]}}], 0x2, 0x4) 562.147623ms ago: executing program 4 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r3, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200070000000800030006ac0f"], 0x44}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x12}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 533.929513ms ago: executing program 0 (id=499): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1, 0x4000000}, 0xc) 495.960241ms ago: executing program 0 (id=500): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 5) 446.203927ms ago: executing program 4 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0xc080) 424.247413ms ago: executing program 3 (id=502): syz_emit_ethernet(0x5d, &(0x7f0000000080)={@broadcast, @remote, @void, {@llc={0x4, {@llc={0xaa, 0xff, "9a", "73867545ff7c887ff53ccc3b600a47e78cbf0502221e75870182c03d5aa75603c806d8a815bdb229c0aadd7652c9c28d19745fec33c9b145fb5d1470f0cf2ddfe72a90273bd956769e9fdf55"}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x0, 0x0, 0x50424752}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x3, @meta={0x45314b52, 0x1060f1de, 0x124a, 0x3034, 0x49ed10f5}}) 399.943151ms ago: executing program 4 (id=503): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getresuid(&(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000280)={[], [{@dont_hash}, {@fowner_lt={'fowner<', r0}}, {@fowner_eq={'fowner', 0x3d, r1}}]}, 0xfe, 0x27a, &(0x7f0000000980)="$eJzs3TtoJHUcB/Df7CMPEyRqI4gPEBENhFgIgo02CoEQgoigQkTEShIhJthlrWwstFZJZRPEztyVxzXhmoNrc3cpcs0VF664cMVdscfs7OY2yYbsZV8h8/nAZua/+38t7Pc/m5CZCSC3JiLio4goRsRkRJQjImmu8Eb2mKgX10e3FiKq1c/uJ7V6WTnTaDcWEZWI+CCi1HhtdfOr3Yfbn77920r5rX82vxzt1/trtre7M7v/99yv/8+8t1qoPzde3za/j25KWjxXSiJe7MVg50RSGvQMaMf8z//dTHP/UkS8Wct/OQr1yP6+PHS1HO/+dVLbP+7deKWfcwW6r1otp8fAShXInULtO3BSmIqIbL9QmJrKvsPfKibxw9LyT5PfL60sfjfolQroSNNv3eMRO59cHr40diT/d4tZ/tvyfq8mCpzJcHvV0vx/Pr9xO93fL/Z4TsD58Gq2SfM/+c3aOyH/kDvyD/l1kP9Z+Ye8cfyHC+CM2ZV/uKhO//da+Yf8kn+4wMqNnUrLl+Uf8kv+Ib+e5n8kzX/jDwZDA54W0AfNx38AIF+qw4M+AxkYlEGvPwAAAAAAAAAAAAAAAAAAwHHro1sLjUe/xrz2Z8TexxFROjx+dgvTYu1+xBEjtZ/PPUjSageSrFlHvn69ww469G+Xz76ea/Perw3P3+nu+M/q+mu96feXw8UTL4a/thhRSStPl0rHP/9J/fN3qhP7f+GUhuVv2xugW5Ij5Q+/6O/4Rz3eGOz4M9sRV9L1Z7rV+leIl2vb1uvPePMlls/ox0cddgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDfPAkAAP//Z9RrGg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) ioctl$FIBMAP(r3, 0x1, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 334.28159ms ago: executing program 0 (id=504): socket$kcm(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x5400014e) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') r1 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0xe, @raw_data="716869135267d188b50c714102fe2b74901ae6e1f5ea28613f8b6a193f3b4925f5e17f966eae194d632c37324ee9b5e804098992fddee3226a5fbfbb32960a92a80616ef38afb18057d301e35b0829682fe7e915af1ada3316bd1f91afd9b32ed311d163b760c77fe077337d573d1f1cae0c370c58a6a3b8b8c127188f967bd556ec168ebb713225d4f537131d0ca4e63915c08f710366e790e2e46670976132375e66e148c7f711554ceb6fc3c4794922dc914baa0a266ad7965163537706905cd3a9d98c701fcb"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newtaction={0x88, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2398, 0x0, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x4, 0x3, 0x40, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x4) fsmount(0xffffffffffffffff, 0x0, 0xf4) r4 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb, 0x2}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000901002000000000000005000000000800040001000000", 0x24) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) r9 = io_uring_setup(0x261a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xe, 0xffffffffffffffff, 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40848c0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20004000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x40010, r4, 0x0) 334.008218ms ago: executing program 4 (id=505): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace(0x10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) r0 = syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x3) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) 325.024975ms ago: executing program 3 (id=506): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000080)) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000), 0x5000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000100001002abd70000008000000000000", @ANYRES32=0x0, @ANYBLOB="4000010000000000300016802c000180280001000800000000000000000000786b91adefd3940000000000000000000000003e050000000000000000000000080004000e04000014000300776c616e3000"/91], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 298.032822ms ago: executing program 4 (id=507): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='serial8250', 0xa) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x1, 0x0, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 226.286266ms ago: executing program 4 (id=508): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x21, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000009000000000000e8000a000000181100799468a434b15a3398136e58fcae254797c1e98a63db8505c81eb1d68e89861698254cdf150243c684294181d1acd3216257e294a562fa7d28ed3d7060ce8c81432dfb66e6fc9301163f45e0bd77106f7324570768fe6878c7efe57bcf35f93ff55623014496aeaf200c68c4c5bbe47e7409f3194039e0f52d6f3ec2d5be59189b27eb7fb4fcf3a8270726243b43f2e6eb63fadd2a92f814267a6d8378c13e40db6cc89c65f894b7a489776b4cdf561501ab6089f7923febd1a232703b304958ec809806bffdc7eb0b038499d55dedf528b869496cab62b15b88c31a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001800000002000000000000000040e72b028e00100100000018610000010000000000000009000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0xc, &(0x7f0000000540)=""/12, 0x41000, 0x16, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x80000001, 0x521b}, 0x10, r4, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)=[{0x5, 0x3, 0x1}], 0x10, 0xc}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r5) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0x1) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x636d80, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b45, 0x1000000000004) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) 119.250836ms ago: executing program 1 (id=509): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="270302", 0x3}], 0x1}, 0x15) (fail_nth: 3) 103.486964ms ago: executing program 2 (id=510): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b400", 0x2}], 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 2.325897ms ago: executing program 2 (id=511): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0xc0403d11, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/97, 0x61) r4 = socket$kcm(0x10, 0x2, 0x4) setuid(0xee01) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) lseek(r3, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000800), 0x0, 0x4c3, &(0x7f0000000200)="$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") mkdirat(r2, &(0x7f0000003000)='./file0\x00', 0xbf) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/d\x00', 0x103200, 0x63) openat(0xffffffffffffff9c, &(0x7f0000004000)='./file0/d/A11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x1, 0x0, 0x2, 0xf}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000004200)='./file0/d/B11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) 1.917322ms ago: executing program 2 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1bf) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000040)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000140)=""/240, &(0x7f0000000100)=0xf0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) 0s ago: executing program 1 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0xc080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 28.535258][ T4697] cgroup: Unknown subsys name 'net' [ 28.646064][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.647977][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.826133][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.635339][ T4726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.635382][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.636178][ T4728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.636526][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.636721][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.636996][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.638810][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.638833][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.638944][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.639018][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.639159][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.639966][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.640110][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.640544][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.640702][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.643910][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.644078][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.644761][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.645579][ T4727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.646168][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.646402][ T4727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.647723][ T4727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.648834][ T4727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.649079][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.650184][ T4727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.980366][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.982148][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.983709][ T4711] bridge_slave_0: entered allmulticast mode [ 29.984350][ T4711] bridge_slave_0: entered promiscuous mode [ 29.986090][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.986130][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.986205][ T4711] bridge_slave_1: entered allmulticast mode [ 29.986676][ T4711] bridge_slave_1: entered promiscuous mode [ 30.028577][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.037722][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.066568][ T4711] team0: Port device team_slave_0 added [ 30.066694][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.066757][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.066814][ T4713] bridge_slave_0: entered allmulticast mode [ 30.067642][ T4713] bridge_slave_0: entered promiscuous mode [ 30.068788][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.068809][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.068898][ T4713] bridge_slave_1: entered allmulticast mode [ 30.069374][ T4713] bridge_slave_1: entered promiscuous mode [ 30.077151][ T4711] team0: Port device team_slave_1 added [ 30.089765][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.092531][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.110097][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.111762][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.113567][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.120606][ T4713] team0: Port device team_slave_0 added [ 30.121896][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.121931][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.121946][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.142174][ T4713] team0: Port device team_slave_1 added [ 30.158809][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.158882][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.158980][ T4710] bridge_slave_0: entered allmulticast mode [ 30.159417][ T4710] bridge_slave_0: entered promiscuous mode [ 30.160662][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.160681][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.160774][ T4710] bridge_slave_1: entered allmulticast mode [ 30.161264][ T4710] bridge_slave_1: entered promiscuous mode [ 30.178560][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.178587][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.178614][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.179237][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.179245][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.179257][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.190888][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.190916][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.191007][ T4709] bridge_slave_0: entered allmulticast mode [ 30.191429][ T4709] bridge_slave_0: entered promiscuous mode [ 30.192072][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.192099][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.192182][ T4709] bridge_slave_1: entered allmulticast mode [ 30.192591][ T4709] bridge_slave_1: entered promiscuous mode [ 30.200517][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.201505][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.207810][ T4709] team0: Port device team_slave_0 added [ 30.208578][ T4709] team0: Port device team_slave_1 added [ 30.213135][ T4711] hsr_slave_0: entered promiscuous mode [ 30.214633][ T4711] hsr_slave_1: entered promiscuous mode [ 30.237209][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.240262][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.241595][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.242948][ T4712] bridge_slave_0: entered allmulticast mode [ 30.244083][ T4712] bridge_slave_0: entered promiscuous mode [ 30.245268][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.245306][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.245552][ T4712] bridge_slave_1: entered allmulticast mode [ 30.245991][ T4712] bridge_slave_1: entered promiscuous mode [ 30.251344][ T4713] hsr_slave_0: entered promiscuous mode [ 30.252753][ T4713] hsr_slave_1: entered promiscuous mode [ 30.253891][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.253939][ T4713] Cannot create hsr debugfs directory [ 30.257784][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.259101][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.263580][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.264225][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.264233][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.264248][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.274466][ T4709] hsr_slave_0: entered promiscuous mode [ 30.274779][ T4709] hsr_slave_1: entered promiscuous mode [ 30.274978][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.274988][ T4709] Cannot create hsr debugfs directory [ 30.276849][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.291549][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.295312][ T4710] team0: Port device team_slave_0 added [ 30.298630][ T4710] team0: Port device team_slave_1 added [ 30.303301][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.331361][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.332802][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.333683][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.334341][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.334348][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.334365][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.354869][ T4712] team0: Port device team_slave_0 added [ 30.358224][ T4712] team0: Port device team_slave_1 added [ 30.386284][ T4710] hsr_slave_0: entered promiscuous mode [ 30.386615][ T4710] hsr_slave_1: entered promiscuous mode [ 30.386800][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.386810][ T4710] Cannot create hsr debugfs directory [ 30.397072][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.398383][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.402946][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.404760][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.404769][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.404784][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.452252][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.455787][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.463308][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.465980][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.466338][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.468563][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.480678][ T4712] hsr_slave_0: entered promiscuous mode [ 30.481580][ T4712] hsr_slave_1: entered promiscuous mode [ 30.481801][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.481811][ T4712] Cannot create hsr debugfs directory [ 30.487404][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.490149][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.517368][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.520736][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.522461][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.525039][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.533042][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.535597][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.535942][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.538558][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.554797][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.554854][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.555009][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.555044][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.570964][ T4713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.574389][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.577714][ T4713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.580036][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.580386][ T4713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.582118][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.585410][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.585454][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.585528][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.585557][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.591604][ T4713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.593977][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.628180][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.628239][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.628330][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.628362][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.640672][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.647177][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.648594][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.650760][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.651096][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.652804][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.657666][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.659161][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.662040][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.663402][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.667194][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.668617][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.676580][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.678814][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.679440][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.680884][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.684399][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.684466][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.695531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.695578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.698076][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.711333][ T4712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.714793][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.729213][ T4712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.731675][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.733457][ T4712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.736091][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.737645][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.746850][ T4712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.749021][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.765084][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.767022][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.767063][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.780686][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.790336][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.790383][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.792805][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.806807][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.806856][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.811024][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.811521][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.821152][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821203][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.827740][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.858786][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.858838][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.859193][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.859217][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.868268][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.920932][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.934623][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.942543][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.942608][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.943279][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.943301][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.954725][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.956746][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.056717][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.067414][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.085648][ T4711] veth0_vlan: entered promiscuous mode [ 31.100628][ T4711] veth1_vlan: entered promiscuous mode [ 31.132388][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.141078][ T4711] veth0_macvtap: entered promiscuous mode [ 31.155470][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.168446][ T4711] veth1_macvtap: entered promiscuous mode [ 31.178862][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.187312][ T4710] veth0_vlan: entered promiscuous mode [ 31.195641][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.198689][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.209005][ T4713] veth0_vlan: entered promiscuous mode [ 31.211848][ T4710] veth1_vlan: entered promiscuous mode [ 31.234921][ T4713] veth1_vlan: entered promiscuous mode [ 31.242664][ T4709] veth0_vlan: entered promiscuous mode [ 31.263047][ T4710] veth0_macvtap: entered promiscuous mode [ 31.266195][ T4709] veth1_vlan: entered promiscuous mode [ 31.271953][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.273901][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.277507][ T4710] veth1_macvtap: entered promiscuous mode [ 31.280667][ T4712] veth0_vlan: entered promiscuous mode [ 31.292610][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.296316][ T4712] veth1_vlan: entered promiscuous mode [ 31.307568][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.311212][ T4709] veth0_macvtap: entered promiscuous mode [ 31.317119][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.317150][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.328829][ T4713] veth0_macvtap: entered promiscuous mode [ 31.330731][ T4709] veth1_macvtap: entered promiscuous mode [ 31.335469][ T4712] veth0_macvtap: entered promiscuous mode [ 31.337795][ T4712] veth1_macvtap: entered promiscuous mode [ 31.344387][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.347316][ T4713] veth1_macvtap: entered promiscuous mode [ 31.358718][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.367718][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.371735][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.377687][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.393952][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.401694][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.403880][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404167][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404296][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404355][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.410961][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.410983][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.454848][ T267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.456564][ T267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458228][ T267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.461400][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.464176][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.466506][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.484435][ T3474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.484914][ T3474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.484935][ T3474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.493309][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.493347][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.495036][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495103][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495119][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495133][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495148][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495161][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495174][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495187][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495200][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515047][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.515077][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.520704][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.520742][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.547387][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.547423][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.556999][ T4897] loop1: detected capacity change from 0 to 512 [ 31.570366][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.570392][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.611630][ T4897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.615176][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.615217][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.638806][ T4897] Bluetooth: MGMT ver 1.23 [ 31.641366][ T4900] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 31.742413][ T4725] Bluetooth: hci2: command tx timeout [ 31.742604][ T4725] Bluetooth: hci0: command tx timeout [ 31.742665][ T4725] Bluetooth: hci3: command tx timeout [ 31.742712][ T4725] Bluetooth: hci4: command tx timeout [ 31.742758][ T4725] Bluetooth: hci1: command tx timeout [ 31.762802][ T4908] loop1: detected capacity change from 0 to 512 [ 31.768370][ T4908] EXT4-fs (loop1): DAX unsupported by block device. [ 31.887292][ T4914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.491288][ T4949] FAULT_INJECTION: forcing a failure. [ 32.491288][ T4949] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.513764][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: syz.4.9 Not tainted syzkaller #0 PREEMPT [ 32.513796][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 32.513802][ T4949] Call trace: [ 32.513806][ T4949] show_stack+0x2c/0x3c (C) [ 32.513832][ T4949] __dump_stack+0x30/0x40 [ 32.513844][ T4949] dump_stack_lvl+0xd8/0x12c [ 32.513854][ T4949] dump_stack+0x1c/0x28 [ 32.513863][ T4949] should_fail_ex+0x41c/0x590 [ 32.513874][ T4949] should_fail+0x14/0x24 [ 32.513884][ T4949] should_fail_usercopy+0x20/0x30 [ 32.513890][ T4949] _copy_from_iter+0x424/0x1064 [ 32.513899][ T4949] ping_common_sendmsg+0xb4/0x29c [ 32.513908][ T4949] ping_v4_sendmsg+0x194/0x12fc [ 32.513915][ T4949] inet_sendmsg+0xb4/0xd8 [ 32.513923][ T4949] __sock_sendmsg+0xc8/0x17c [ 32.513932][ T4949] ____sys_sendmsg+0x3d0/0x6c8 [ 32.513941][ T4949] ___sys_sendmsg+0x198/0x224 [ 32.513950][ T4949] __sys_sendmsg+0x158/0x204 [ 32.513958][ T4949] __arm64_sys_sendmsg+0x88/0x9c [ 32.513967][ T4949] invoke_syscall+0x98/0x244 [ 32.513977][ T4949] el0_svc_common+0xec/0x23c [ 32.513986][ T4949] do_el0_svc+0x4c/0x5c [ 32.513996][ T4949] el0_svc+0x64/0x260 [ 32.514007][ T4949] el0t_64_sync_handler+0x48/0x148 [ 32.514017][ T4949] el0t_64_sync+0x198/0x19c [ 32.693692][ T4957] loop0: detected capacity change from 0 to 512 [ 32.884342][ T4967] block nbd4: NBD_DISCONNECT [ 32.907712][ T4957] EXT4-fs (loop0): 1 truncate cleaned up [ 32.908232][ T4957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.928535][ T4957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.110550][ T4994] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 33.169857][ T4998] 0x000000000006-0x000000020000 : "" [ 33.272013][ T4998] ftl_cs: FTL header corrupt! [ 33.488334][ T5009] loop4: detected capacity change from 0 to 128 [ 33.488774][ T5009] vfat: Bad value for 'time_offset' [ 33.631827][ T5023] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 33.800471][ T5025] FAULT_INJECTION: forcing a failure. [ 33.800471][ T5025] name failslab, interval 1, probability 0, space 0, times 1 [ 33.800572][ T5025] CPU: 0 UID: 0 PID: 5025 Comm: syz.0.24 Tainted: G L syzkaller #0 PREEMPT [ 33.800587][ T5025] Tainted: [L]=SOFTLOCKUP [ 33.800590][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 33.800596][ T5025] Call trace: [ 33.800599][ T5025] show_stack+0x2c/0x3c (C) [ 33.800624][ T5025] __dump_stack+0x30/0x40 [ 33.800636][ T5025] dump_stack_lvl+0xd8/0x12c [ 33.800647][ T5025] dump_stack+0x1c/0x28 [ 33.800656][ T5025] should_fail_ex+0x41c/0x590 [ 33.800668][ T5025] should_failslab+0xc4/0x120 [ 33.800676][ T5025] __kmalloc_cache_node_noprof+0x98/0x60c [ 33.800685][ T5025] __get_vm_area_node+0x188/0x32c [ 33.800694][ T5025] __vmalloc_node_range_noprof+0x2c8/0x105c [ 33.800704][ T5025] __vmalloc_node_noprof+0xec/0x14c [ 33.800712][ T5025] vmalloc_noprof+0x3c/0x4c [ 33.800721][ T5025] bpf_prog_calc_tag+0x60/0x30c [ 33.800729][ T5025] check_and_resolve_insns+0xc0/0x1c44 [ 33.800738][ T5025] bpf_check+0xde0/0x40dc [ 33.800747][ T5025] bpf_prog_load+0x1050/0x15f8 [ 33.800754][ T5025] __sys_bpf+0x870/0x8c8 [ 33.800760][ T5025] __arm64_sys_bpf+0xd0/0xec [ 33.800767][ T5025] invoke_syscall+0x98/0x244 [ 33.800777][ T5025] el0_svc_common+0xec/0x23c [ 33.800786][ T5025] do_el0_svc+0x4c/0x5c [ 33.800795][ T5025] el0_svc+0x64/0x260 [ 33.800806][ T5025] el0t_64_sync_handler+0x48/0x148 [ 33.800816][ T5025] el0t_64_sync+0x198/0x19c [ 33.800948][ T5025] syz.0.24: vmalloc error: size 72, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 33.801017][ T5025] CPU: 1 UID: 0 PID: 5025 Comm: syz.0.24 Tainted: G L syzkaller #0 PREEMPT [ 33.801028][ T5025] Tainted: [L]=SOFTLOCKUP [ 33.801031][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 33.801035][ T5025] Call trace: [ 33.801037][ T5025] show_stack+0x2c/0x3c (C) [ 33.801052][ T5025] __dump_stack+0x30/0x40 [ 33.801064][ T5025] dump_stack_lvl+0xd8/0x12c [ 33.801073][ T5025] dump_stack+0x1c/0x28 [ 33.801083][ T5025] warn_alloc+0x1bc/0x1d0 [ 33.801093][ T5025] __vmalloc_node_range_noprof+0x2e8/0x105c [ 33.801104][ T5025] __vmalloc_node_noprof+0xec/0x14c [ 33.801113][ T5025] vmalloc_noprof+0x3c/0x4c [ 33.801122][ T5025] bpf_prog_calc_tag+0x60/0x30c [ 33.801129][ T5025] check_and_resolve_insns+0xc0/0x1c44 [ 33.801138][ T5025] bpf_check+0xde0/0x40dc [ 33.801147][ T5025] bpf_prog_load+0x1050/0x15f8 [ 33.801154][ T5025] __sys_bpf+0x870/0x8c8 [ 33.801161][ T5025] __arm64_sys_bpf+0xd0/0xec [ 33.801167][ T5025] invoke_syscall+0x98/0x244 [ 33.801177][ T5025] el0_svc_common+0xec/0x23c [ 33.801187][ T5025] do_el0_svc+0x4c/0x5c [ 33.801196][ T5025] el0_svc+0x64/0x260 [ 33.801211][ T5025] el0t_64_sync_handler+0x48/0x148 [ 33.801221][ T5025] el0t_64_sync+0x198/0x19c [ 33.801230][ T5025] Mem-Info: [ 33.801235][ T5025] active_anon:52 inactive_anon:11226 isolated_anon:0 [ 33.801235][ T5025] active_file:2194 inactive_file:4718 isolated_file:0 [ 33.801235][ T5025] unevictable:768 dirty:1752 writeback:0 [ 33.801235][ T5025] slab_reclaimable:8590 slab_unreclaimable:88586 [ 33.801235][ T5025] mapped:35194 shmem:7033 pagetables:1091 [ 33.801235][ T5025] sec_pagetables:0 bounce:0 [ 33.801235][ T5025] kernel_misc_reclaimable:0 [ 33.801235][ T5025] free:1488119 free_pcp:6727 free_cma:7616 [ 33.801256][ T5025] Node 0 active_anon:208kB inactive_anon:44904kB active_file:8776kB inactive_file:18872kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:140776kB dirty:7008kB writeback:0kB shmem:28132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8776kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 33.801276][ T5025] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 33.801299][ T5025] lowmem_reserve[]: 0 0 3651 3651 3651 [ 33.801316][ T5025] Node 0 Normal free:2874588kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:208kB inactive_anon:44904kB active_file:8776kB inactive_file:18872kB unevictable:3072kB writepending:7008kB zspages:0kB present:5242880kB managed:3739156kB mlocked:0kB bounce:0kB free_pcp:26908kB local_pcp:7480kB free_cma:0kB [ 33.801337][ T5025] lowmem_reserve[]: 0 0 0 0 0 [ 33.801353][ T5025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 33.801409][ T5025] Node 0 Normal: 732*4kB (UME) 265*8kB (U) 41*16kB (UME) 285*32kB (UE) 55*64kB (UM) 16*128kB (UME) 3*256kB (UM) 1*512kB (U) 2*1024kB (ME) 2*2048kB (UM) 695*4096kB (UM) = 2874536kB [ 33.801481][ T5025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 33.801487][ T5025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 33.801494][ T5025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 33.801500][ T5025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 33.801505][ T5025] 13991 total pagecache pages [ 33.801509][ T5025] 0 pages in swap cache [ 33.801512][ T5025] Free swap = 124996kB [ 33.801516][ T5025] Total swap = 124996kB [ 33.801519][ T5025] 2097152 pages RAM [ 33.801522][ T5025] 0 pages HighMem/MovableOnly [ 33.801525][ T5025] 392315 pages reserved [ 33.801528][ T5025] 8192 pages cma reserved [ 33.801531][ T5025] 0 pages hwpoisoned [ 33.801709][ T4725] Bluetooth: hci4: command tx timeout [ 33.801731][ T4725] Bluetooth: hci3: command tx timeout [ 33.801749][ T4725] Bluetooth: hci0: command tx timeout [ 33.801762][ T4725] Bluetooth: hci2: command tx timeout [ 33.801861][ T4724] Bluetooth: hci1: command tx timeout [ 34.040056][ T5056] loop4: detected capacity change from 0 to 512 [ 34.057783][ T5056] EXT4-fs (loop4): 1 truncate cleaned up [ 34.058284][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.060145][ T5056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.150390][ T5021] Zero length message leads to an empty skb [ 34.177795][ T5065] loop3: detected capacity change from 0 to 8192 [ 34.233985][ T5068] 0x000000000006-0x000000020000 : "" [ 34.259532][ T5068] ftl_cs: FTL header corrupt! [ 34.499746][ T5065] Dev loop3: RDB in block 1 has bad checksum [ 34.575894][ T5085] loop0: detected capacity change from 0 to 1024 [ 34.576284][ T5085] EXT4-fs: inline encryption not supported [ 34.661308][ T5085] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 34.661368][ T5085] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 34.661379][ T5085] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.42: Failed to acquire dquot type 0 [ 34.661440][ T5085] loop0: lost filesystem error report for type 5 error -117 [ 34.663557][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 34.663576][ C1] EXT4-fs (loop0): initial error at time 34: ext4_acquire_dquot:7041 [ 34.663589][ C1] EXT4-fs (loop0): last error at time 34: ext4_acquire_dquot:7041 [ 34.689093][ T5085] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 34.964218][ T5085] EXT4-fs (loop0): 1 truncate cleaned up [ 34.964726][ T5085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.012369][ T5102] FAULT_INJECTION: forcing a failure. [ 35.012369][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 35.012415][ T5102] CPU: 1 UID: 0 PID: 5102 Comm: syz.1.45 Tainted: G L syzkaller #0 PREEMPT [ 35.012431][ T5102] Tainted: [L]=SOFTLOCKUP [ 35.012436][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.012442][ T5102] Call trace: [ 35.012446][ T5102] show_stack+0x2c/0x3c (C) [ 35.012466][ T5102] __dump_stack+0x30/0x40 [ 35.012480][ T5102] dump_stack_lvl+0xd8/0x12c [ 35.012490][ T5102] dump_stack+0x1c/0x28 [ 35.012499][ T5102] should_fail_ex+0x41c/0x590 [ 35.012512][ T5102] should_failslab+0xc4/0x120 [ 35.012521][ T5102] kmem_cache_alloc_noprof+0x94/0x5d8 [ 35.012530][ T5102] skb_clone+0x1ac/0x320 [ 35.012540][ T5102] __netlink_deliver_tap+0x364/0x6f4 [ 35.012550][ T5102] netlink_deliver_tap+0x1d8/0x1dc [ 35.012558][ T5102] __netlink_sendskb+0x78/0xd0 [ 35.012566][ T5102] netlink_sendskb+0x2c/0xdc [ 35.012574][ T5102] netlink_unicast+0x2c0/0x7f8 [ 35.012582][ T5102] netlink_ack+0x570/0x890 [ 35.012590][ T5102] netlink_rcv_skb+0x21c/0x414 [ 35.012598][ T5102] rtnetlink_rcv+0x28/0x38 [ 35.012605][ T5102] netlink_unicast+0x600/0x7f8 [ 35.012613][ T5102] netlink_sendmsg+0x648/0x948 [ 35.012622][ T5102] __sock_sendmsg+0xc8/0x17c [ 35.012630][ T5102] ____sys_sendmsg+0x3d0/0x6c8 [ 35.012638][ T5102] ___sys_sendmsg+0x198/0x224 [ 35.012647][ T5102] __sys_sendmsg+0x158/0x204 [ 35.012656][ T5102] __arm64_sys_sendmsg+0x88/0x9c [ 35.012665][ T5102] invoke_syscall+0x98/0x244 [ 35.012675][ T5102] el0_svc_common+0xec/0x23c [ 35.012684][ T5102] do_el0_svc+0x4c/0x5c [ 35.012693][ T5102] el0_svc+0x64/0x260 [ 35.012704][ T5102] el0t_64_sync_handler+0x48/0x148 [ 35.012714][ T5102] el0t_64_sync+0x198/0x19c [ 35.077020][ T5108] vxcan0: tx drop: invalid da for name 0x000000000000ee00 [ 35.165261][ T5116] loop4: detected capacity change from 0 to 256 [ 35.165620][ T5116] ======================================================= [ 35.165620][ T5116] WARNING: The mand mount option has been deprecated and [ 35.165620][ T5116] and is ignored by this kernel. Remove the mand [ 35.165620][ T5116] option from the mount to silence this warning. [ 35.165620][ T5116] ======================================================= [ 35.292947][ T5131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.55'. [ 35.312951][ T5134] loop3: detected capacity change from 0 to 512 [ 35.566353][ T5134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.582863][ T5134] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.57: corrupted xattr block 33: invalid header [ 35.624644][ T5134] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.57: corrupted xattr block 33: invalid header [ 35.637328][ T5134] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.57: corrupted xattr block 33: invalid header [ 35.694151][ T15] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.694220][ T15] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.699473][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.755297][ T5134] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.57: corrupted xattr block 33: invalid header [ 35.758391][ T5134] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 35.761428][ T5134] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 35.761451][ T5134] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.761451][ T5134] [ 35.761460][ T5134] EXT4-fs (loop3): Total free blocks count 0 [ 35.761468][ T5134] EXT4-fs (loop3): Free/Dirty block details [ 35.761480][ T5134] EXT4-fs (loop3): free_blocks=65280 [ 35.761492][ T5134] EXT4-fs (loop3): dirty_blocks=31 [ 35.761499][ T5134] EXT4-fs (loop3): Block reservation details [ 35.761505][ T5134] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 35.773402][ T5134] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 35.802972][ T5150] i2c i2c-0: new_device: Missing parameters [ 35.832885][ T5152] loop0: detected capacity change from 0 to 8 [ 35.842946][ T5154] FAULT_INJECTION: forcing a failure. [ 35.842946][ T5154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.842987][ T5154] CPU: 0 UID: 0 PID: 5154 Comm: syz.1.63 Tainted: G L syzkaller #0 PREEMPT [ 35.843001][ T5154] Tainted: [L]=SOFTLOCKUP [ 35.843005][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.843012][ T5154] Call trace: [ 35.843016][ T5154] show_stack+0x2c/0x3c (C) [ 35.843037][ T5154] __dump_stack+0x30/0x40 [ 35.843049][ T5154] dump_stack_lvl+0xd8/0x12c [ 35.843059][ T5154] dump_stack+0x1c/0x28 [ 35.843068][ T5154] should_fail_ex+0x41c/0x590 [ 35.843080][ T5154] should_fail+0x14/0x24 [ 35.843089][ T5154] should_fail_usercopy+0x20/0x30 [ 35.843096][ T5154] _copy_from_iter+0x188/0x1064 [ 35.843104][ T5154] kernfs_fop_write_iter+0x17c/0x3b8 [ 35.843114][ T5154] vfs_write+0x51c/0xa0c [ 35.843122][ T5154] ksys_write+0x12c/0x228 [ 35.843128][ T5154] __arm64_sys_write+0x84/0x98 [ 35.843135][ T5154] invoke_syscall+0x98/0x244 [ 35.843145][ T5154] el0_svc_common+0xec/0x23c [ 35.843154][ T5154] do_el0_svc+0x4c/0x5c [ 35.843163][ T5154] el0_svc+0x64/0x260 [ 35.843174][ T5154] el0t_64_sync_handler+0x48/0x148 [ 35.843184][ T5154] el0t_64_sync+0x198/0x19c [ 35.857249][ T4727] Bluetooth: hci1: command tx timeout [ 35.857275][ T4727] Bluetooth: hci2: command tx timeout [ 35.857293][ T4727] Bluetooth: hci0: command tx timeout [ 35.857309][ T4727] Bluetooth: hci3: command tx timeout [ 35.857324][ T4727] Bluetooth: hci4: command tx timeout [ 35.881533][ T5148] SQUASHFS error: zlib decompression failed, data probably corrupt [ 35.883949][ T5148] SQUASHFS error: Failed to read block 0x4de: -5 [ 35.885090][ T5148] SQUASHFS error: Unable to read data cache entry [4de] [ 35.886443][ T5148] SQUASHFS error: Unable to read page, block 4de, size 1 [ 35.888724][ T5148] SQUASHFS error: Unable to read data cache entry [4de] [ 35.890479][ T5148] SQUASHFS error: Unable to read page, block 4de, size 1 [ 35.894059][ T5148] SQUASHFS error: Unable to read data cache entry [4de] [ 35.895367][ T5148] SQUASHFS error: Unable to read page, block 4de, size 1 [ 35.896281][ T4713] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 35.898568][ T5148] SQUASHFS error: Unable to read data cache entry [4de] [ 35.899774][ T5148] SQUASHFS error: Unable to read page, block 4de, size 1 [ 35.901021][ T5148] SQUASHFS error: Unable to read data cache entry [4de] [ 35.901044][ T5148] SQUASHFS error: Unable to read page, block 4de, size 1 [ 35.901070][ T5148] SQUASHFS error: Unable to read data cache entry [4de] [ 35.901080][ T5148] SQUASHFS error: Unable to read page, block 4de, size 1 [ 35.924522][ T5158] syzkaller0: entered promiscuous mode [ 35.925701][ T5158] syzkaller0: entered allmulticast mode [ 35.946870][ T5156] i2c i2c-0: new_device: Missing parameters [ 35.976181][ T5160] fuse: Unexpected value for 'default_permissions' [ 35.981324][ T5162] vfat: Unknown parameter 'siortname' [ 35.984227][ T5160] EXT4-fs: Ignoring removed bh option [ 35.987006][ T5160] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 35.987075][ T5160] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.987125][ T5160] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: comm syz.3.66: inode #1: comm syz.3.66: iget: illegal inode # [ 35.987139][ T5160] loop3: lost filesystem error report for type 5 error -117 [ 35.987478][ T5160] EXT4-fs (loop3): Remounting filesystem read-only [ 35.987491][ T5160] EXT4-fs (loop3): no journal found [ 35.987500][ T5160] EXT4-fs (loop3): can't get journal size [ 35.991185][ T5160] EXT4-fs (loop3): failed to initialize system zone (-22) [ 35.991272][ T5160] EXT4-fs (loop3): mount failed [ 36.072176][ T5167] syzkaller0: entered promiscuous mode [ 36.072221][ T5167] syzkaller0: entered allmulticast mode [ 36.179076][ T5182] FAULT_INJECTION: forcing a failure. [ 36.179076][ T5182] name failslab, interval 1, probability 0, space 0, times 0 [ 36.179123][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: syz.3.75 Tainted: G L syzkaller #0 PREEMPT [ 36.179139][ T5182] Tainted: [L]=SOFTLOCKUP [ 36.179143][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.179149][ T5182] Call trace: [ 36.179153][ T5182] show_stack+0x2c/0x3c (C) [ 36.179174][ T5182] __dump_stack+0x30/0x40 [ 36.179185][ T5182] dump_stack_lvl+0xd8/0x12c [ 36.179200][ T5182] dump_stack+0x1c/0x28 [ 36.179210][ T5182] should_fail_ex+0x41c/0x590 [ 36.179222][ T5182] should_failslab+0xc4/0x120 [ 36.179230][ T5182] kmem_cache_alloc_noprof+0x94/0x5d8 [ 36.179239][ T5182] vm_area_dup+0x34/0x508 [ 36.179249][ T5182] __split_vma+0x1a8/0x884 [ 36.179257][ T5182] vms_gather_munmap_vmas+0x3d0/0x101c [ 36.179267][ T5182] mmap_region+0x710/0x1c38 [ 36.179274][ T5182] do_mmap+0xa50/0xf0c [ 36.179282][ T5182] vm_mmap_pgoff+0x298/0x46c [ 36.179291][ T5182] ksys_mmap_pgoff+0x364/0x5b4 [ 36.179299][ T5182] __arm64_sys_mmap+0x110/0x12c [ 36.179309][ T5182] invoke_syscall+0x98/0x244 [ 36.179319][ T5182] el0_svc_common+0xec/0x23c [ 36.179329][ T5182] do_el0_svc+0x4c/0x5c [ 36.179338][ T5182] el0_svc+0x64/0x260 [ 36.179350][ T5182] el0t_64_sync_handler+0x48/0x148 [ 36.179360][ T5182] el0t_64_sync+0x198/0x19c [ 36.207052][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.215264][ T5177] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.74: lblock 0 mapped to illegal pblock 0 (length 6) [ 36.222218][ T5177] EXT4-fs (loop0): Remounting filesystem read-only [ 36.240088][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 36.240483][ T5177] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 36.240494][ T5177] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 36.240503][ T5177] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.74'. [ 36.412505][ T5199] netlink: 'syz.3.81': attribute type 7 has an invalid length. [ 36.437622][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.438148][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.504090][ T5193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.510532][ T5193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.914566][ T40] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.934100][ T3211] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.936148][ T3211] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.938016][ T3211] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.940028][ T3211] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.942117][ T3211] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.945199][ T40] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.945246][ T40] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.960450][ T5214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 37.002866][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.022762][ T5218] set_capacity_and_notify: 3 callbacks suppressed [ 37.025472][ T5218] loop0: detected capacity change from 0 to 512 [ 37.030349][ T5218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'. [ 37.094222][ T5222] loop0: detected capacity change from 0 to 512 [ 37.099353][ T5222] EXT4-fs (loop0): DAX unsupported by block device. [ 37.321485][ T5228] netlink: 'syz.3.89': attribute type 19 has an invalid length. [ 37.586851][ T5236] loop4: detected capacity change from 0 to 512 [ 37.592887][ T5236] EXT4-fs (loop4): 1 truncate cleaned up [ 37.593373][ T5236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.602022][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.616531][ T5239] FAULT_INJECTION: forcing a failure. [ 37.616531][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 37.616578][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: syz.1.95 Tainted: G L syzkaller #0 PREEMPT [ 37.616591][ T5239] Tainted: [L]=SOFTLOCKUP [ 37.616595][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.616600][ T5239] Call trace: [ 37.616603][ T5239] show_stack+0x2c/0x3c (C) [ 37.616623][ T5239] __dump_stack+0x30/0x40 [ 37.616636][ T5239] dump_stack_lvl+0xd8/0x12c [ 37.616646][ T5239] dump_stack+0x1c/0x28 [ 37.616655][ T5239] should_fail_ex+0x41c/0x590 [ 37.616668][ T5239] should_failslab+0xc4/0x120 [ 37.616677][ T5239] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.616686][ T5239] __pmd_alloc+0xc4/0x75c [ 37.616694][ T5239] handle_mm_fault+0x1820/0x2514 [ 37.616701][ T5239] do_page_fault+0x4b0/0xb88 [ 37.616710][ T5239] do_translation_fault+0xc4/0x114 [ 37.616719][ T5239] do_mem_abort+0x70/0x194 [ 37.616728][ T5239] el1_abort+0x50/0x74 [ 37.616739][ T5239] el1h_64_sync_handler+0xdc/0x130 [ 37.616749][ T5239] el1h_64_sync+0x6c/0x70 [ 37.616756][ T5239] __arch_copy_from_user+0xdc/0x23c (P) [ 37.616764][ T5239] do_sock_getsockopt+0x210/0x720 [ 37.616775][ T5239] __sys_getsockopt+0xfc/0x168 [ 37.616783][ T5239] __arm64_sys_getsockopt+0xc8/0xe4 [ 37.616792][ T5239] invoke_syscall+0x98/0x244 [ 37.616802][ T5239] el0_svc_common+0xec/0x23c [ 37.616811][ T5239] do_el0_svc+0x4c/0x5c [ 37.616820][ T5239] el0_svc+0x64/0x260 [ 37.616830][ T5239] el0t_64_sync_handler+0x48/0x148 [ 37.616840][ T5239] el0t_64_sync+0x198/0x19c [ 37.896874][ T5242] 0x000000000006-0x000000020000 : "" [ 37.920517][ T5242] ftl_cs: FTL header corrupt! [ 37.953643][ T4727] Bluetooth: hci3: command tx timeout [ 37.953690][ T4727] Bluetooth: hci0: command tx timeout [ 37.953720][ T4727] Bluetooth: hci2: command tx timeout [ 37.953743][ T4727] Bluetooth: hci1: command tx timeout [ 37.956083][ T4724] Bluetooth: hci4: command tx timeout [ 38.467553][ T5267] syz.0.105 uses obsolete (PF_INET,SOCK_PACKET) [ 38.530725][ T5271] FAULT_INJECTION: forcing a failure. [ 38.530725][ T5271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.530801][ T5271] CPU: 1 UID: 0 PID: 5271 Comm: syz.3.103 Tainted: G L syzkaller #0 PREEMPT [ 38.530818][ T5271] Tainted: [L]=SOFTLOCKUP [ 38.530821][ T5271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.530827][ T5271] Call trace: [ 38.530830][ T5271] show_stack+0x2c/0x3c (C) [ 38.530850][ T5271] __dump_stack+0x30/0x40 [ 38.530860][ T5271] dump_stack_lvl+0xd8/0x12c [ 38.530870][ T5271] dump_stack+0x1c/0x28 [ 38.530879][ T5271] should_fail_ex+0x41c/0x590 [ 38.530891][ T5271] should_fail+0x14/0x24 [ 38.530901][ T5271] should_fail_usercopy+0x20/0x30 [ 38.530908][ T5271] strncpy_from_user+0x48/0x388 [ 38.530916][ T5271] strncpy_from_bpfptr+0x54/0x68 [ 38.530925][ T5271] bpf_prog_load+0x9a0/0x15f8 [ 38.530932][ T5271] __sys_bpf+0x870/0x8c8 [ 38.530938][ T5271] __arm64_sys_bpf+0xd0/0xec [ 38.530945][ T5271] invoke_syscall+0x98/0x244 [ 38.530955][ T5271] el0_svc_common+0xec/0x23c [ 38.530964][ T5271] do_el0_svc+0x4c/0x5c [ 38.530974][ T5271] el0_svc+0x64/0x260 [ 38.530985][ T5271] el0t_64_sync_handler+0x48/0x148 [ 38.530995][ T5271] el0t_64_sync+0x198/0x19c [ 38.761415][ T5278] syzkaller0: entered promiscuous mode [ 38.761516][ T5278] syzkaller0: entered allmulticast mode [ 38.795403][ T5283] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'. [ 39.246421][ T5296] loop3: detected capacity change from 0 to 256 [ 39.257983][ T4720] bridge0: entered promiscuous mode [ 39.260457][ T5296] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 39.261022][ T5296] FAT-fs (loop3): Filesystem has been set read-only [ 39.305863][ T5300] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.373073][ T5309] loop3: detected capacity change from 0 to 512 [ 39.375937][ T5309] ext4: Invalid gid '0x00000000ffffffff' [ 39.452061][ T5313] fuse: Bad value for 'rootmode' [ 39.478936][ T5315] syzkaller0: entered promiscuous mode [ 39.478967][ T5315] syzkaller0: entered allmulticast mode [ 39.483336][ T5315] tipc: Started in network mode [ 39.484697][ T5315] tipc: Node identity ea58aaede6f, cluster identity 4711 [ 39.486233][ T5315] tipc: Enabled bearer , priority 0 [ 39.488301][ T5315] syzkaller0: mtu greater than device maximum [ 39.490297][ T5314] tipc: Resetting bearer [ 39.495675][ T5314] tipc: Disabling bearer [ 39.540535][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 39.546546][ T5317] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 39.588005][ T5319] loop4: detected capacity change from 0 to 8192 [ 39.590336][ T5319] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.825683][ T5342] fuse: Bad value for 'rootmode' [ 39.842381][ T5336] loop3: detected capacity change from 0 to 8192 [ 39.844782][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 39.936564][ T5345] netlink: 'syz.4.135': attribute type 15 has an invalid length. [ 40.026377][ T5353] input: syz0 as /devices/virtual/input/input4 [ 40.609688][ T5371] loop3: detected capacity change from 0 to 512 [ 40.615445][ T5371] EXT4-fs (loop3): 1 truncate cleaned up [ 40.621085][ T5371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.627954][ T5371] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.143: bg 0: block 491: padding at end of block bitmap is not set [ 40.632503][ T5371] EXT4-fs (loop3): Remounting filesystem read-only [ 40.636020][ T5371] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 40.638197][ T5371] overlayfs: conflicting options: userxattr,metacopy=on [ 40.724269][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.068114][ T5378] can: request_module (can-proto-3) failed. [ 41.109276][ T5390] 0x000000000000-0x000000020000 : "" [ 41.113486][ T5390] ftl_cs: FTL header not found. [ 41.134915][ T5391] syzkaller0: entered promiscuous mode [ 41.137023][ T5391] syzkaller0: entered allmulticast mode [ 41.138032][ T5393] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 41.519491][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 41.550429][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 41.588676][ T5412] loop1: detected capacity change from 0 to 1024 [ 41.590565][ T5412] EXT4-fs: Ignoring removed nobh option [ 41.591908][ T5412] EXT4-fs: Ignoring removed nobh option [ 41.593044][ T5412] EXT4-fs: Ignoring removed orlov option [ 41.596578][ T5415] process 'syz.2.159' launched '/dev/fd/3' with NULL argv: empty string added [ 41.620614][ T5415] loop2: detected capacity change from 0 to 128 [ 41.631712][ T5412] EXT4-fs warning (device loop1): read_mmp_block:110: Error -117 while reading MMP block 255 [ 41.655902][ T5415] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.690891][ T4712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.691286][ T5412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.983292][ T5422] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.988841][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.127578][ T5428] fuse: Unknown parameter 'use00000000000000000000' [ 42.146260][ T5430] set_capacity_and_notify: 2 callbacks suppressed [ 42.149008][ T5430] loop4: detected capacity change from 0 to 128 [ 42.156255][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.159044][ T5430] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.165334][ T5430] FAULT_INJECTION: forcing a failure. [ 42.165334][ T5430] name failslab, interval 1, probability 0, space 0, times 0 [ 42.165371][ T5430] CPU: 1 UID: 0 PID: 5430 Comm: syz.4.163 Tainted: G L syzkaller #0 PREEMPT [ 42.165387][ T5430] Tainted: [L]=SOFTLOCKUP [ 42.165391][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.165398][ T5430] Call trace: [ 42.165401][ T5430] show_stack+0x2c/0x3c (C) [ 42.165422][ T5430] __dump_stack+0x30/0x40 [ 42.165433][ T5430] dump_stack_lvl+0xd8/0x12c [ 42.165444][ T5430] dump_stack+0x1c/0x28 [ 42.165453][ T5430] should_fail_ex+0x41c/0x590 [ 42.165464][ T5430] should_failslab+0xc4/0x120 [ 42.165472][ T5430] __kmalloc_noprof+0x108/0x6b8 [ 42.165481][ T5430] tomoyo_encode2+0x10c/0x330 [ 42.165490][ T5430] tomoyo_encode+0x34/0x50 [ 42.165497][ T5430] tomoyo_realpath_from_path+0x488/0x4dc [ 42.165505][ T5430] tomoyo_path_number_perm+0x1f0/0x500 [ 42.165512][ T5430] tomoyo_file_ioctl+0x2c/0x3c [ 42.165521][ T5430] security_file_ioctl+0xdc/0x2b0 [ 42.165528][ T5430] __arm64_sys_ioctl+0xb0/0x1cc [ 42.165539][ T5430] invoke_syscall+0x98/0x244 [ 42.165549][ T5430] el0_svc_common+0xec/0x23c [ 42.165558][ T5430] do_el0_svc+0x4c/0x5c [ 42.165568][ T5430] el0_svc+0x64/0x260 [ 42.165579][ T5430] el0t_64_sync_handler+0x48/0x148 [ 42.165589][ T5430] el0t_64_sync+0x198/0x19c [ 42.165691][ T5430] ERROR: Out of memory at tomoyo_realpath_from_path. [ 42.201945][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.270350][ T5440] loop0: detected capacity change from 0 to 512 [ 42.283901][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'. [ 42.358222][ T5451] loop0: detected capacity change from 0 to 512 [ 42.361096][ T5451] EXT4-fs (loop0): DAX unsupported by block device. [ 42.386877][ T5438] ucma_write: process 110 (syz.4.166) changed security contexts after opening file descriptor, this is not allowed. [ 42.474680][ T5456] loop3: detected capacity change from 0 to 512 [ 42.492983][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.551320][ T5456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.564392][ T5456] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.170: corrupted inode contents [ 42.570275][ T5456] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.170: mark_inode_dirty error [ 42.573919][ T5456] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.170: corrupted inode contents [ 42.577961][ T5456] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.170: mark_inode_dirty error [ 42.579148][ T5456] FAULT_INJECTION: forcing a failure. [ 42.579148][ T5456] name failslab, interval 1, probability 0, space 0, times 0 [ 42.579165][ T5456] CPU: 1 UID: 0 PID: 5456 Comm: syz.3.170 Tainted: G L syzkaller #0 PREEMPT [ 42.579177][ T5456] Tainted: [L]=SOFTLOCKUP [ 42.579180][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.579184][ T5456] Call trace: [ 42.579187][ T5456] show_stack+0x2c/0x3c (C) [ 42.579216][ T5456] __dump_stack+0x30/0x40 [ 42.579231][ T5456] dump_stack_lvl+0xd8/0x12c [ 42.579242][ T5456] dump_stack+0x1c/0x28 [ 42.579252][ T5456] should_fail_ex+0x41c/0x590 [ 42.579265][ T5456] should_failslab+0xc4/0x120 [ 42.579274][ T5456] __kmalloc_noprof+0x108/0x6b8 [ 42.579284][ T5456] qtree_write_dquot+0xd8/0x4e4 [ 42.579293][ T5456] v2_write_dquot+0x124/0x1f0 [ 42.579301][ T5456] dquot_commit+0x140/0x1f0 [ 42.579311][ T5456] ext4_write_dquot+0x1bc/0x324 [ 42.579322][ T5456] ext4_mark_dquot_dirty+0xe8/0x150 [ 42.579332][ T5456] dquot_alloc_inode+0x3bc/0x680 [ 42.579339][ T5456] __ext4_new_inode+0x26a8/0x3308 [ 42.579349][ T5456] ext4_mkdir+0x328/0x970 [ 42.579357][ T5456] vfs_mkdir+0x2dc/0x464 [ 42.579366][ T5456] filename_mkdirat+0x228/0x3f4 [ 42.579374][ T5456] __arm64_sys_mkdirat+0x9c/0xc0 [ 42.579383][ T5456] invoke_syscall+0x98/0x244 [ 42.579393][ T5456] el0_svc_common+0xec/0x23c [ 42.579402][ T5456] do_el0_svc+0x4c/0x5c [ 42.579412][ T5456] el0_svc+0x64/0x260 [ 42.579423][ T5456] el0t_64_sync_handler+0x48/0x148 [ 42.579433][ T5456] el0t_64_sync+0x198/0x19c [ 42.579445][ T5456] EXT4-fs error (device loop3): ext4_write_dquot:7021: comm syz.3.170: Failed to commit dquot type 0 [ 42.598507][ T5468] fuse: Unknown parameter 'user_i00000000000000000000' [ 42.717687][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 42.833690][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.986186][ T5482] netlink: 272 bytes leftover after parsing attributes in process `syz.2.177'. [ 43.034331][ T5487] loop2: detected capacity change from 0 to 512 [ 43.034892][ T5487] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.045340][ T5487] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 43.084501][ T4725] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 43.556465][ T5499] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 43.561130][ T5499] loop4: detected capacity change from 0 to 512 [ 43.570114][ T5499] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 44.574963][ T5511] fuse: Unknown parameter 'user_i00000000000000000000' [ 44.642197][ T5501] loop1: detected capacity change from 0 to 512 [ 44.646791][ T5513] loop7: detected capacity change from 0 to 7 [ 44.663414][ T5501] ext2: Unexpected value for 'sysvgroups' [ 44.736976][ T5517] netlink: 300 bytes leftover after parsing attributes in process `syz.4.189'. [ 44.756008][ T5513] Dev loop7: unable to read RDB block 7 [ 44.756051][ T5513] loop7: unable to read partition table [ 44.756146][ T5513] loop7: partition table beyond EOD, truncated [ 44.756177][ T5513] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 44.829826][ T5527] loop3: detected capacity change from 0 to 512 [ 44.847159][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 44.875850][ T5533] loop1: detected capacity change from 0 to 128 [ 44.882714][ T5533] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.189702][ T5543] EXT4-fs (loop3): DAX unsupported by block device. [ 45.209845][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 45.222113][ T5545] EXT4-fs (loop0): 1 truncate cleaned up [ 45.222662][ T5545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.225595][ T5545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.422462][ T5550] 0x000000000006-0x000000020000 : "" [ 45.503194][ T5550] ftl_cs: FTL header corrupt! [ 45.751075][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.867086][ T5563] netlink: 300 bytes leftover after parsing attributes in process `syz.4.203'. [ 45.969720][ T5567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.980283][ T5567] ip_tables: iptables: counters copy to user failed while replacing table [ 46.110871][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 46.121549][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.189549][ T5580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.211'. [ 46.586845][ T5590] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 46.586872][ T5590] unable to read xattr id index table [ 46.824805][ T5588] loop3: p2 < > p4 [ 46.827243][ T5588] loop3: p4 size 8192 extends beyond EOD, truncated [ 47.222325][ T4725] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 47.222381][ T4725] Bluetooth: hci0: Injecting HCI hardware error event [ 47.223272][ T4725] Bluetooth: hci0: hardware error 0x00 [ 47.334753][ T5598] netlink: 300 bytes leftover after parsing attributes in process `syz.0.215'. [ 47.335280][ T5596] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 47.335293][ T5596] netlink: 244 bytes leftover after parsing attributes in process `syz.1.214'. [ 47.390584][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 47.421996][ T5603] overlayfs: failed to resolve './file1': -2 [ 47.479108][ T5605] set_capacity_and_notify: 5 callbacks suppressed [ 47.480488][ T5605] loop3: detected capacity change from 0 to 512 [ 47.513320][ T5605] EXT4-fs (loop3): 1 truncate cleaned up [ 47.514792][ T5605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.525841][ T5608] loop0: detected capacity change from 0 to 512 [ 47.530467][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.534768][ T5608] EXT4-fs (loop0): 1 truncate cleaned up [ 47.535316][ T5608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.540854][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.859125][ T5613] 0x000000000006-0x000000020000 : "" [ 47.929314][ T5613] ftl_cs: FTL header corrupt! [ 48.130499][ T5625] loop2: detected capacity change from 0 to 256 [ 48.130948][ T5625] vfat: Unknown parameter 'codepa' [ 48.221618][ T5632] loop1: detected capacity change from 0 to 4096 [ 48.222010][ T5632] EXT4-fs: inline encryption not supported [ 48.222020][ T5632] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.222033][ T5632] EXT4-fs: Ignoring removed bh option [ 48.225309][ T5632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.228841][ T5632] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 48.228903][ T5632] System zones: 0-5 [ 48.230505][ T5632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.683937][ T5641] FAULT_INJECTION: forcing a failure. [ 48.683937][ T5641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.683984][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz.2.228 Tainted: G L syzkaller #0 PREEMPT [ 48.683999][ T5641] Tainted: [L]=SOFTLOCKUP [ 48.684004][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.684011][ T5641] Call trace: [ 48.684015][ T5641] show_stack+0x2c/0x3c (C) [ 48.684034][ T5641] __dump_stack+0x30/0x40 [ 48.684044][ T5641] dump_stack_lvl+0xd8/0x12c [ 48.684054][ T5641] dump_stack+0x1c/0x28 [ 48.684063][ T5641] should_fail_ex+0x41c/0x590 [ 48.684074][ T5641] should_fail+0x14/0x24 [ 48.684084][ T5641] should_fail_usercopy+0x20/0x30 [ 48.684091][ T5641] _copy_from_iter+0x188/0x1064 [ 48.684099][ T5641] netlink_sendmsg+0x570/0x948 [ 48.684109][ T5641] __sock_sendmsg+0xc8/0x17c [ 48.684118][ T5641] ____sys_sendmsg+0x3d0/0x6c8 [ 48.684127][ T5641] ___sys_sendmsg+0x198/0x224 [ 48.684135][ T5641] __sys_sendmsg+0x158/0x204 [ 48.684144][ T5641] __arm64_sys_sendmsg+0x88/0x9c [ 48.684153][ T5641] invoke_syscall+0x98/0x244 [ 48.684163][ T5641] el0_svc_common+0xec/0x23c [ 48.684172][ T5641] do_el0_svc+0x4c/0x5c [ 48.684181][ T5641] el0_svc+0x64/0x260 [ 48.684192][ T5641] el0t_64_sync_handler+0x48/0x148 [ 48.684207][ T5641] el0t_64_sync+0x198/0x19c [ 48.689287][ T5644] FAULT_INJECTION: forcing a failure. [ 48.689287][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 48.689312][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: syz.0.229 Tainted: G L syzkaller #0 PREEMPT [ 48.689323][ T5644] Tainted: [L]=SOFTLOCKUP [ 48.689327][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.689331][ T5644] Call trace: [ 48.689334][ T5644] show_stack+0x2c/0x3c (C) [ 48.689352][ T5644] __dump_stack+0x30/0x40 [ 48.689363][ T5644] dump_stack_lvl+0xd8/0x12c [ 48.689373][ T5644] dump_stack+0x1c/0x28 [ 48.689382][ T5644] should_fail_ex+0x41c/0x590 [ 48.689393][ T5644] should_failslab+0xc4/0x120 [ 48.689400][ T5644] __kmalloc_cache_noprof+0x94/0x5ec [ 48.689409][ T5644] __arm64_sys_mount+0x188/0x388 [ 48.689418][ T5644] invoke_syscall+0x98/0x244 [ 48.689428][ T5644] el0_svc_common+0xec/0x23c [ 48.689437][ T5644] do_el0_svc+0x4c/0x5c [ 48.689447][ T5644] el0_svc+0x64/0x260 [ 48.689457][ T5644] el0t_64_sync_handler+0x48/0x148 [ 48.689467][ T5644] el0t_64_sync+0x198/0x19c [ 48.728466][ T5650] loop3: detected capacity change from 0 to 8 [ 48.730518][ T5650] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 48.732714][ T5650] unable to read xattr id index table [ 48.740421][ T5650] SQUASHFS error: zlib decompression failed, data probably corrupt [ 48.740472][ T5650] SQUASHFS error: Failed to read block 0x9b: -5 [ 48.740488][ T5650] SQUASHFS error: Unable to read metadata cache entry [99] [ 48.740504][ T5650] SQUASHFS error: Unable to read inode 0x127 [ 48.768135][ T5650] binder: 5649:5650 Release 1 refcount change on invalid ref 3 ret -22 [ 48.975996][ T5668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 49.078237][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.121527][ T30] audit: type=1807 audit(49.090:2): action=measure res=1 [ 49.136756][ T5674] input: syz1 as /devices/virtual/input/input5 [ 49.196524][ T5673] ima: policy update completed [ 49.198319][ T30] audit: type=1802 audit(49.170:3): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.3.239" res=1 errno=0 [ 49.295368][ T5683] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 49.298064][ T30] audit: type=1800 audit(49.270:4): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 49.306221][ T30] audit: type=1800 audit(49.270:5): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 49.473720][ T4725] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 49.554802][ T30] audit: type=1800 audit(49.530:6): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 49.558287][ T30] audit: type=1800 audit(49.530:7): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 49.591510][ T30] audit: type=1800 audit(49.560:8): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 49.621404][ T5686] netlink: 'syz.1.242': attribute type 10 has an invalid length. [ 49.636471][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.645525][ T5686] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 49.658036][ T30] audit: type=1800 audit(49.630:9): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 49.693193][ T30] audit: type=1800 audit(49.660:10): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 49.721082][ T30] audit: type=1800 audit(49.690:11): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 49.740105][ T5698] netlink: 264 bytes leftover after parsing attributes in process `syz.0.248'. [ 49.785042][ T5705] loop0: detected capacity change from 0 to 512 [ 49.799580][ T5704] loop3: detected capacity change from 0 to 4096 [ 49.803072][ T5704] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 49.811971][ T5705] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.250: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 49.817123][ T5705] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 49.817428][ T5705] EXT4-fs (loop0): get root inode failed [ 49.820838][ T5705] EXT4-fs (loop0): mount failed [ 49.882921][ T5709] FAULT_INJECTION: forcing a failure. [ 49.882921][ T5709] name failslab, interval 1, probability 0, space 0, times 0 [ 49.882962][ T5709] CPU: 1 UID: 0 PID: 5709 Comm: syz.0.253 Tainted: G L syzkaller #0 PREEMPT [ 49.882976][ T5709] Tainted: [L]=SOFTLOCKUP [ 49.882980][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.882986][ T5709] Call trace: [ 49.882990][ T5709] show_stack+0x2c/0x3c (C) [ 49.883010][ T5709] __dump_stack+0x30/0x40 [ 49.883021][ T5709] dump_stack_lvl+0xd8/0x12c [ 49.883030][ T5709] dump_stack+0x1c/0x28 [ 49.883040][ T5709] should_fail_ex+0x41c/0x590 [ 49.883051][ T5709] should_failslab+0xc4/0x120 [ 49.883059][ T5709] kmem_cache_alloc_noprof+0x94/0x5d8 [ 49.883068][ T5709] do_getname+0x48/0x234 [ 49.883076][ T5709] __arm64_sys_renameat2+0xd8/0x124 [ 49.883085][ T5709] invoke_syscall+0x98/0x244 [ 49.883095][ T5709] el0_svc_common+0xec/0x23c [ 49.883104][ T5709] do_el0_svc+0x4c/0x5c [ 49.883113][ T5709] el0_svc+0x64/0x260 [ 49.883124][ T5709] el0t_64_sync_handler+0x48/0x148 [ 49.883134][ T5709] el0t_64_sync+0x198/0x19c [ 50.255890][ T5728] netlink: 292 bytes leftover after parsing attributes in process `syz.1.261'. [ 50.278449][ T5732] loop2: detected capacity change from 0 to 512 [ 50.290017][ T5732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 51.242208][ T5740] loop2: detected capacity change from 0 to 512 [ 51.263798][ T5740] EXT4-fs (loop2): DAX unsupported by block device. [ 52.020675][ T5769] netlink: 292 bytes leftover after parsing attributes in process `syz.3.274'. [ 52.157633][ T5776] FAULT_INJECTION: forcing a failure. [ 52.157633][ T5776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.160247][ T5776] CPU: 1 UID: 0 PID: 5776 Comm: syz.3.276 Tainted: G L syzkaller #0 PREEMPT [ 52.160273][ T5776] Tainted: [L]=SOFTLOCKUP [ 52.160276][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 52.160281][ T5776] Call trace: [ 52.160284][ T5776] show_stack+0x2c/0x3c (C) [ 52.160302][ T5776] __dump_stack+0x30/0x40 [ 52.160313][ T5776] dump_stack_lvl+0xd8/0x12c [ 52.160323][ T5776] dump_stack+0x1c/0x28 [ 52.160332][ T5776] should_fail_ex+0x41c/0x590 [ 52.160343][ T5776] should_fail+0x14/0x24 [ 52.160353][ T5776] should_fail_usercopy+0x20/0x30 [ 52.160360][ T5776] _inline_copy_from_user+0x3c/0x174 [ 52.160371][ T5776] move_addr_to_kernel+0x88/0x168 [ 52.160379][ T5776] __copy_msghdr+0x2e0/0x3d4 [ 52.160388][ T5776] copy_msghdr_from_user+0xe8/0x194 [ 52.160397][ T5776] ___sys_sendmsg+0x14c/0x224 [ 52.160406][ T5776] __sys_sendmsg+0x158/0x204 [ 52.160415][ T5776] __arm64_sys_sendmsg+0x88/0x9c [ 52.160424][ T5776] invoke_syscall+0x98/0x244 [ 52.160434][ T5776] el0_svc_common+0xec/0x23c [ 52.160443][ T5776] do_el0_svc+0x4c/0x5c [ 52.160452][ T5776] el0_svc+0x64/0x260 [ 52.160464][ T5776] el0t_64_sync_handler+0x48/0x148 [ 52.160474][ T5776] el0t_64_sync+0x198/0x19c [ 52.354542][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 52.558323][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.282'. [ 52.578100][ T5797] sch_fq: defrate 512 ignored. [ 52.610806][ T5801] warning: `syz.0.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.712813][ T5811] openvswitch: netlink: Missing valid actions attribute. [ 52.714300][ T5811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.714375][ T5810] loop1: detected capacity change from 0 to 512 [ 52.722843][ T5810] EXT4-fs (loop1): 1 truncate cleaned up [ 52.723361][ T5810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.734362][ T5810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.907828][ T5817] 0x000000000006-0x000000020000 : "" [ 53.120135][ T5817] ftl_cs: FTL header corrupt! [ 53.147668][ T5821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.196013][ T5825] FAULT_INJECTION: forcing a failure. [ 53.196013][ T5825] name failslab, interval 1, probability 0, space 0, times 0 [ 53.199838][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.0.292 Tainted: G L syzkaller #0 PREEMPT [ 53.199863][ T5825] Tainted: [L]=SOFTLOCKUP [ 53.199867][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 53.199874][ T5825] Call trace: [ 53.199878][ T5825] show_stack+0x2c/0x3c (C) [ 53.199904][ T5825] __dump_stack+0x30/0x40 [ 53.199915][ T5825] dump_stack_lvl+0xd8/0x12c [ 53.199925][ T5825] dump_stack+0x1c/0x28 [ 53.199935][ T5825] should_fail_ex+0x41c/0x590 [ 53.199947][ T5825] should_failslab+0xc4/0x120 [ 53.199956][ T5825] __kmalloc_noprof+0x108/0x6b8 [ 53.199965][ T5825] tomoyo_encode2+0x10c/0x330 [ 53.199974][ T5825] tomoyo_encode+0x34/0x50 [ 53.199982][ T5825] tomoyo_realpath_from_path+0x488/0x4dc [ 53.199991][ T5825] tomoyo_path_number_perm+0x1f0/0x500 [ 53.199998][ T5825] tomoyo_file_ioctl+0x2c/0x3c [ 53.200006][ T5825] security_file_ioctl+0xdc/0x2b0 [ 53.200014][ T5825] __arm64_sys_ioctl+0xb0/0x1cc [ 53.200025][ T5825] invoke_syscall+0x98/0x244 [ 53.200035][ T5825] el0_svc_common+0xec/0x23c [ 53.200044][ T5825] do_el0_svc+0x4c/0x5c [ 53.200053][ T5825] el0_svc+0x64/0x260 [ 53.200064][ T5825] el0t_64_sync_handler+0x48/0x148 [ 53.200075][ T5825] el0t_64_sync+0x198/0x19c [ 53.221936][ T5825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.411907][ T5832] fuse: Unknown parameter 'user_id00000000000000000000' [ 53.742736][ T5843] syzkaller0: entered promiscuous mode [ 53.745068][ T5843] syzkaller0: entered allmulticast mode [ 53.867184][ T5856] fuse: Bad value for 'fd' [ 53.909719][ T5862] loop1: detected capacity change from 0 to 512 [ 53.919749][ T5862] EXT4-fs (loop1): 1 truncate cleaned up [ 53.921713][ T5862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.930209][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.011252][ T5872] loop3: detected capacity change from 0 to 256 [ 54.103018][ T5875] 0x000000000006-0x000000020000 : "" [ 54.141050][ T5875] ftl_cs: FTL header corrupt! [ 54.302959][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 54.316671][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 54.316714][ T30] audit: type=1800 audit(54.290:72): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=100692 res=0 errno=0 [ 54.323601][ T30] audit: type=1800 audit(54.290:73): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=100651 res=0 errno=0 [ 54.333223][ T30] audit: type=1800 audit(54.300:74): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=100809 res=0 errno=0 [ 54.333279][ T30] audit: type=1800 audit(54.300:75): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=100680 res=0 errno=0 [ 54.336851][ T30] audit: type=1800 audit(54.310:76): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 54.346956][ T30] audit: type=1800 audit(54.320:77): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 54.357947][ T30] audit: type=1800 audit(54.330:78): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=100704 res=0 errno=0 [ 54.391335][ T30] audit: type=1800 audit(54.360:79): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 54.420372][ T30] audit: type=1800 audit(54.390:80): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.314" name="anon_fault_alloc" dev="sysfs" ino=1968 res=0 errno=0 [ 54.425533][ T30] audit: type=1800 audit(54.400:81): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.314" name="anon_fault_alloc" dev="sysfs" ino=2150 res=0 errno=0 [ 54.445652][ T5890] FAULT_INJECTION: forcing a failure. [ 54.445652][ T5890] name failslab, interval 1, probability 0, space 0, times 0 [ 54.445700][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.3.319 Tainted: G L syzkaller #0 PREEMPT [ 54.445717][ T5890] Tainted: [L]=SOFTLOCKUP [ 54.445722][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 54.445728][ T5890] Call trace: [ 54.445731][ T5890] show_stack+0x2c/0x3c (C) [ 54.445749][ T5890] __dump_stack+0x30/0x40 [ 54.445760][ T5890] dump_stack_lvl+0xd8/0x12c [ 54.445770][ T5890] dump_stack+0x1c/0x28 [ 54.445779][ T5890] should_fail_ex+0x41c/0x590 [ 54.445791][ T5890] should_failslab+0xc4/0x120 [ 54.445799][ T5890] __kmalloc_noprof+0x108/0x6b8 [ 54.445808][ T5890] rds_message_alloc+0x58/0x1d4 [ 54.445817][ T5890] rds_sendmsg+0xa68/0x1c64 [ 54.445825][ T5890] __sock_sendmsg+0xc8/0x17c [ 54.445834][ T5890] ____sys_sendmsg+0x3d0/0x6c8 [ 54.445843][ T5890] ___sys_sendmsg+0x198/0x224 [ 54.445851][ T5890] __sys_sendmsg+0x158/0x204 [ 54.445860][ T5890] __arm64_sys_sendmsg+0x88/0x9c [ 54.445869][ T5890] invoke_syscall+0x98/0x244 [ 54.445878][ T5890] el0_svc_common+0xec/0x23c [ 54.445888][ T5890] do_el0_svc+0x4c/0x5c [ 54.445897][ T5890] el0_svc+0x64/0x260 [ 54.445907][ T5890] el0t_64_sync_handler+0x48/0x148 [ 54.445917][ T5890] el0t_64_sync+0x198/0x19c [ 54.475369][ T5892] loop3: detected capacity change from 0 to 1024 [ 54.698835][ T5920] loop2: detected capacity change from 0 to 512 [ 54.713171][ T5920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.728987][ T5920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.327: bg 0: block 63: padding at end of block bitmap is not set [ 54.729048][ T5920] loop2: lost filesystem error report for type 5 error -117 [ 54.732194][ T5920] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.732566][ T5920] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.327: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 54.732587][ T5920] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.733587][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 54.733600][ C1] EXT4-fs (loop2): initial error at time 54: ext4_validate_block_bitmap:441 [ 54.733616][ C1] EXT4-fs (loop2): last error at time 54: ext4_xattr_inode_update_ref:1037: inode 11 [ 54.734227][ T5920] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.327: ea_inode dec ref err=-117 [ 54.734357][ T5920] EXT4-fs (loop2): 1 orphan inode deleted [ 54.735368][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.851702][ T5934] fuse: fd is not a fuse device [ 55.017229][ T5956] FAULT_INJECTION: forcing a failure. [ 55.017229][ T5956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.017266][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.3.341 Tainted: G L syzkaller #0 PREEMPT [ 55.017283][ T5956] Tainted: [L]=SOFTLOCKUP [ 55.017287][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 55.017293][ T5956] Call trace: [ 55.017296][ T5956] show_stack+0x2c/0x3c (C) [ 55.017316][ T5956] __dump_stack+0x30/0x40 [ 55.017326][ T5956] dump_stack_lvl+0xd8/0x12c [ 55.017341][ T5956] dump_stack+0x1c/0x28 [ 55.017351][ T5956] should_fail_ex+0x41c/0x590 [ 55.017365][ T5956] should_fail+0x14/0x24 [ 55.017374][ T5956] should_fail_usercopy+0x20/0x30 [ 55.017382][ T5956] _inline_copy_from_user+0x3c/0x174 [ 55.017392][ T5956] __arm64_sys_io_uring_register+0x5a8/0x1494 [ 55.017403][ T5956] invoke_syscall+0x98/0x244 [ 55.017413][ T5956] el0_svc_common+0x19c/0x23c [ 55.017422][ T5956] do_el0_svc+0x4c/0x5c [ 55.017432][ T5956] el0_svc+0x64/0x260 [ 55.017443][ T5956] el0t_64_sync_handler+0x48/0x148 [ 55.017453][ T5956] el0t_64_sync+0x198/0x19c [ 55.036437][ T5960] loop1: detected capacity change from 0 to 512 [ 55.038178][ T5960] EXT4-fs (loop1): 1 truncate cleaned up [ 55.038625][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.277517][ T5960] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.285117][ T5964] fuse: Unknown parameter 'group_i00000000000000000000' [ 55.452074][ T5973] 0x000000000006-0x000000020000 : "" [ 55.623266][ T5973] ftl_cs: FTL header corrupt! [ 55.643112][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.741403][ T5989] fuse: Unknown parameter 'group_id00000000000000000000' [ 56.312331][ T6025] fuse: Unknown parameter 'group_id00000000000000000000' [ 56.331254][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.331446][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.381295][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.384348][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.546678][ T6030] team0: Device xfrm0 is of different type [ 56.563646][ T40] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.565655][ T40] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.567434][ T40] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.567458][ T40] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.567474][ T40] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.567489][ T40] netdevsim netdevsim10 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.662056][ T6035] loop3: detected capacity change from 0 to 8192 [ 56.672841][ T6035] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.682219][ T6035] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 56.682252][ T6035] FAT-fs (loop3): Filesystem has been set read-only [ 56.955029][ T6063] vxcan0: tx address claim with dlc 0 [ 57.086782][ T6067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.383'. [ 57.328601][ T6081] FAULT_INJECTION: forcing a failure. [ 57.328601][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.331317][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.3.391 Tainted: G L syzkaller #0 PREEMPT [ 57.331342][ T6081] Tainted: [L]=SOFTLOCKUP [ 57.331345][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 57.331351][ T6081] Call trace: [ 57.331353][ T6081] show_stack+0x2c/0x3c (C) [ 57.331375][ T6081] __dump_stack+0x30/0x40 [ 57.331389][ T6081] dump_stack_lvl+0xd8/0x12c [ 57.331399][ T6081] dump_stack+0x1c/0x28 [ 57.331408][ T6081] should_fail_ex+0x41c/0x590 [ 57.331423][ T6081] should_fail+0x14/0x24 [ 57.331433][ T6081] should_fail_usercopy+0x20/0x30 [ 57.331440][ T6081] _inline_copy_from_user+0x3c/0x174 [ 57.331452][ T6081] copy_msghdr_from_user+0xb8/0x194 [ 57.331462][ T6081] ___sys_sendmsg+0x14c/0x224 [ 57.331471][ T6081] __sys_sendmsg+0x158/0x204 [ 57.331479][ T6081] __arm64_sys_sendmsg+0x88/0x9c [ 57.331488][ T6081] invoke_syscall+0x98/0x244 [ 57.331498][ T6081] el0_svc_common+0xec/0x23c [ 57.331508][ T6081] do_el0_svc+0x4c/0x5c [ 57.331517][ T6081] el0_svc+0x64/0x260 [ 57.331529][ T6081] el0t_64_sync_handler+0x48/0x148 [ 57.331539][ T6081] el0t_64_sync+0x198/0x19c [ 57.386815][ T6089] FAULT_INJECTION: forcing a failure. [ 57.386815][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 57.389625][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.0.388 Tainted: G L syzkaller #0 PREEMPT [ 57.389650][ T6089] Tainted: [L]=SOFTLOCKUP [ 57.389653][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 57.389659][ T6089] Call trace: [ 57.389662][ T6089] show_stack+0x2c/0x3c (C) [ 57.389682][ T6089] __dump_stack+0x30/0x40 [ 57.389693][ T6089] dump_stack_lvl+0xd8/0x12c [ 57.389702][ T6089] dump_stack+0x1c/0x28 [ 57.389711][ T6089] should_fail_ex+0x41c/0x590 [ 57.389723][ T6089] should_failslab+0xc4/0x120 [ 57.389731][ T6089] __kmalloc_noprof+0x108/0x6b8 [ 57.389740][ T6089] drm_atomic_commit_init+0xf4/0x2ac [ 57.389749][ T6089] drm_atomic_commit_alloc+0xd0/0x108 [ 57.389755][ T6089] drm_client_modeset_commit_atomic+0xf8/0x6b8 [ 57.389766][ T6089] drm_client_modeset_commit_locked+0xd0/0x494 [ 57.389776][ T6089] drm_fb_helper_pan_display+0x1b0/0x788 [ 57.389786][ T6089] fb_pan_display+0x2e4/0x53c [ 57.389796][ T6089] fb_set_var+0x640/0xc30 [ 57.389805][ T6089] fbcon_resize+0x4d4/0x67c [ 57.389812][ T6089] vc_do_resize+0x414/0xbbc [ 57.389820][ T6089] __vc_resize+0x60/0x74 [ 57.389828][ T6089] vt_ioctl+0x1964/0x1e0c [ 57.389837][ T6089] tty_ioctl+0x880/0xd50 [ 57.389845][ T6089] __arm64_sys_ioctl+0x154/0x1cc [ 57.389856][ T6089] invoke_syscall+0x98/0x244 [ 57.389866][ T6089] el0_svc_common+0xec/0x23c [ 57.389876][ T6089] do_el0_svc+0x4c/0x5c [ 57.389885][ T6089] el0_svc+0x64/0x260 [ 57.389897][ T6089] el0t_64_sync_handler+0x48/0x148 [ 57.389907][ T6089] el0t_64_sync+0x198/0x19c [ 58.156195][ T6112] FAULT_INJECTION: forcing a failure. [ 58.156195][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.156244][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.3.400 Tainted: G L syzkaller #0 PREEMPT [ 58.156260][ T6112] Tainted: [L]=SOFTLOCKUP [ 58.156264][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 58.156269][ T6112] Call trace: [ 58.156272][ T6112] show_stack+0x2c/0x3c (C) [ 58.156295][ T6112] __dump_stack+0x30/0x40 [ 58.156306][ T6112] dump_stack_lvl+0xd8/0x12c [ 58.156316][ T6112] dump_stack+0x1c/0x28 [ 58.156325][ T6112] should_fail_ex+0x41c/0x590 [ 58.156336][ T6112] should_fail+0x14/0x24 [ 58.156346][ T6112] should_fail_usercopy+0x20/0x30 [ 58.156352][ T6112] _inline_copy_from_user+0x3c/0x188 [ 58.156362][ T6112] wext_handle_ioctl+0xbc/0x288 [ 58.156369][ T6112] sock_ioctl+0x154/0x7ec [ 58.156380][ T6112] __arm64_sys_ioctl+0x154/0x1cc [ 58.156391][ T6112] invoke_syscall+0x98/0x244 [ 58.156401][ T6112] el0_svc_common+0xec/0x23c [ 58.156410][ T6112] do_el0_svc+0x4c/0x5c [ 58.156420][ T6112] el0_svc+0x64/0x260 [ 58.156430][ T6112] el0t_64_sync_handler+0x48/0x148 [ 58.156440][ T6112] el0t_64_sync+0x198/0x19c [ 58.179903][ T6113] loop0: detected capacity change from 0 to 2048 [ 58.191057][ T6113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.200575][ T6113] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.203403][ T6113] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 3 with error 28 [ 58.203430][ T6113] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.203430][ T6113] [ 58.203439][ T6113] EXT4-fs (loop0): Total free blocks count 0 [ 58.203446][ T6113] EXT4-fs (loop0): Free/Dirty block details [ 58.203457][ T6113] EXT4-fs (loop0): free_blocks=2415919504 [ 58.203468][ T6113] EXT4-fs (loop0): dirty_blocks=48 [ 58.203474][ T6113] EXT4-fs (loop0): Block reservation details [ 58.203480][ T6113] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 58.228690][ T15] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 58.232675][ T4711] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 58.255860][ T6118] macsec0: entered allmulticast mode [ 58.255898][ T6118] veth1_macvtap: entered allmulticast mode [ 58.289081][ T6120] loop0: detected capacity change from 0 to 1024 [ 58.292254][ T6120] EXT4-fs: Ignoring removed orlov option [ 58.312519][ T6120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.325931][ T6124] bridge0: port 3(ipvlan2) entered blocking state [ 58.326778][ T6124] bridge0: port 3(ipvlan2) entered disabled state [ 58.326946][ T6124] ipvlan2: entered allmulticast mode [ 58.326961][ T6124] bridge0: entered allmulticast mode [ 58.333147][ T6124] ipvlan2: left allmulticast mode [ 58.333183][ T6124] bridge0: left allmulticast mode [ 58.397177][ T6133] fuse: Bad value for 'fd' [ 58.458911][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.506486][ T6143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.413'. [ 58.641700][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.408'. [ 58.887778][ T6165] fuse: Unknown parameter '0x0000000000000004' [ 58.892840][ T6163] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 58.939149][ T6170] binder: 6169:6170 tried to acquire reference to desc 0, got 1 instead [ 58.941446][ T6170] binder: 6169:6170 got transaction to context manager from process owning it [ 58.943685][ T6170] binder: 6169:6170 transaction call to 6169:0 failed 6/29201/-22, code 0 size 0-0 line 3243 [ 58.945888][ T6170] binder: 6169:6170 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 58.948545][ T6170] binder: 6170 RLIMIT_NICE not set [ 58.950271][ T6170] binder: 6170 RLIMIT_NICE not set [ 58.950529][ T6170] binder: 6169:6170 unknown command 2 [ 58.950545][ T6170] binder: 6169:6170 ioctl c0306201 200002c0 returned -22 [ 58.954996][ T4714] binder: release 6169:6170 transaction 5 out, still active [ 58.955029][ T4714] binder: undelivered TRANSACTION_COMPLETE [ 58.955048][ T4714] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.963984][ T4714] binder: release 6169:6170 transaction 5 in, still active [ 58.965381][ T4714] binder: send failed reply for transaction 5, target dead [ 59.044441][ T6172] loop0: detected capacity change from 0 to 256 [ 59.092896][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.411'. [ 59.111157][ T6174] netlink: 72 bytes leftover after parsing attributes in process `syz.1.422'. [ 59.170294][ T6172] veth3: entered promiscuous mode [ 59.172382][ T6172] veth3: entered allmulticast mode [ 59.195049][ T6172] 9p: Unknown uid 00000000004294967295 [ 59.350790][ T6179] loop2: detected capacity change from 0 to 512 [ 59.356942][ T6179] ext2: Bad value for 'journal_ioprio' [ 59.364416][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 59.364449][ T30] audit: type=1800 audit(59.339:181): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 59.402829][ T6179] loop2: detected capacity change from 0 to 1024 [ 59.406391][ T6179] EXT4-fs: Ignoring removed bh option [ 59.418918][ T30] audit: type=1800 audit(59.389:182): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 59.466174][ T6179] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.498259][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.515562][ T30] audit: type=1800 audit(59.489:183): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 59.590680][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.687324][ T30] audit: type=1800 audit(59.659:184): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 59.690857][ T6193] fuse: Unknown parameter '0x0000000000000004' [ 59.765075][ T30] audit: type=1800 audit(59.719:185): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 59.765121][ T30] audit: type=1800 audit(59.729:186): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 60.002510][ T30] audit: type=1800 audit(59.969:187): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 60.022718][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 60.032341][ T30] audit: type=1800 audit(59.999:188): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 60.118010][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.435'. [ 60.274250][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 60.417651][ T6225] 9pnet_fd: Insufficient options for proto=fd [ 60.527737][ T6236] fuse: Unknown parameter '0x0000000000000004' [ 60.578221][ T30] audit: type=1800 audit(60.549:189): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 61.009345][ T30] audit: type=1800 audit(60.979:190): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 61.063427][ T6257] loop2: detected capacity change from 0 to 512 [ 61.068949][ T6257] EXT4-fs (loop2): 1 truncate cleaned up [ 61.069449][ T6257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.074205][ T6257] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.274538][ T6268] 0x000000000006-0x000000020000 : "" [ 61.284983][ T6268] ftl_cs: FTL header corrupt! [ 61.532861][ T6275] fuse: Unknown parameter '0x0000000000000004' [ 61.553327][ T6277] loop0: detected capacity change from 0 to 4096 [ 61.889907][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.462'. [ 61.922680][ T6296] usb3503 0-0008: unknown mode is requested [ 61.922852][ T6296] usb3503 0-0008: usb3503_probe: probed in standby mode [ 61.925763][ T6296] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 62.027662][ T6299] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 62.601952][ T6339] loop1: detected capacity change from 0 to 512 [ 62.607326][ T6339] EXT4-fs (loop1): 1 truncate cleaned up [ 62.607833][ T6339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.610228][ T6339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.964471][ T6362] 0x000000000006-0x000000020000 : "" [ 63.036142][ T6362] ftl_cs: FTL header corrupt! [ 63.109910][ T6367] FAULT_INJECTION: forcing a failure. [ 63.109910][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 63.109952][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.2.478 Tainted: G L syzkaller #0 PREEMPT [ 63.109967][ T6367] Tainted: [L]=SOFTLOCKUP [ 63.109972][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 63.109978][ T6367] Call trace: [ 63.109981][ T6367] show_stack+0x2c/0x3c (C) [ 63.110003][ T6367] __dump_stack+0x30/0x40 [ 63.110015][ T6367] dump_stack_lvl+0xd8/0x12c [ 63.110024][ T6367] dump_stack+0x1c/0x28 [ 63.110033][ T6367] should_fail_ex+0x41c/0x590 [ 63.110045][ T6367] should_failslab+0xc4/0x120 [ 63.110053][ T6367] kmem_cache_alloc_noprof+0x94/0x5d8 [ 63.110062][ T6367] mas_alloc_nodes+0x234/0x2d8 [ 63.110072][ T6367] mas_preallocate+0x45c/0x708 [ 63.110081][ T6367] __split_vma+0x2bc/0x884 [ 63.110088][ T6367] vma_modify+0x1164/0x16e4 [ 63.110098][ T6367] vma_modify_policy+0x1d0/0x238 [ 63.110108][ T6367] mbind_range+0x160/0x3e4 [ 63.110117][ T6367] __arm64_sys_mbind+0x5c8/0x994 [ 63.110126][ T6367] invoke_syscall+0x98/0x244 [ 63.110136][ T6367] el0_svc_common+0xec/0x23c [ 63.110146][ T6367] do_el0_svc+0x4c/0x5c [ 63.110155][ T6367] el0_svc+0x64/0x260 [ 63.110165][ T6367] el0t_64_sync_handler+0x48/0x148 [ 63.110175][ T6367] el0t_64_sync+0x198/0x19c [ 63.145429][ T6360] loop0: detected capacity change from 0 to 4096 [ 63.164226][ T6360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.174443][ T6360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.367112][ T6385] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 63.491718][ T6397] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 63.543672][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.597436][ T6402] bond1: (slave veth3): Enslaving as an active interface with a down link [ 63.649421][ T6410] overlayfs: failed to clone lowerpath [ 63.659808][ T6397] bond1: (slave veth5): Enslaving as an active interface with a down link [ 63.682939][ T6397] veth0_virt_wifi: entered promiscuous mode [ 63.704524][ T6397] bond1: (slave veth0_virt_wifi): making interface the new active one [ 63.705613][ T6397] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 63.767794][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.492'. [ 63.767831][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 63.860762][ T6428] FAULT_INJECTION: forcing a failure. [ 63.860762][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 63.860839][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.0.491 Tainted: G L syzkaller #0 PREEMPT [ 63.860858][ T6428] Tainted: [L]=SOFTLOCKUP [ 63.860862][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 63.860867][ T6428] Call trace: [ 63.860871][ T6428] show_stack+0x2c/0x3c (C) [ 63.860891][ T6428] __dump_stack+0x30/0x40 [ 63.860902][ T6428] dump_stack_lvl+0xd8/0x12c [ 63.860912][ T6428] dump_stack+0x1c/0x28 [ 63.860921][ T6428] should_fail_ex+0x41c/0x590 [ 63.860934][ T6428] should_failslab+0xc4/0x120 [ 63.860942][ T6428] __kmalloc_cache_noprof+0x94/0x5ec [ 63.860952][ T6428] i2c_new_client_device+0x88/0xadc [ 63.860962][ T6428] new_device_store+0x210/0x3d4 [ 63.860971][ T6428] dev_attr_store+0x6c/0x90 [ 63.860980][ T6428] sysfs_kf_write+0xe0/0x108 [ 63.860991][ T6428] kernfs_fop_write_iter+0x260/0x3b8 [ 63.861000][ T6428] vfs_write+0x51c/0xa0c [ 63.861007][ T6428] ksys_write+0x12c/0x228 [ 63.861014][ T6428] __arm64_sys_write+0x84/0x98 [ 63.861021][ T6428] invoke_syscall+0x98/0x244 [ 63.861031][ T6428] el0_svc_common+0xec/0x23c [ 63.861041][ T6428] do_el0_svc+0x4c/0x5c [ 63.861050][ T6428] el0_svc+0x64/0x260 [ 63.861063][ T6428] el0t_64_sync_handler+0x48/0x148 [ 63.861073][ T6428] el0t_64_sync+0x198/0x19c [ 64.089322][ T6434] loop1: detected capacity change from 0 to 256 [ 64.297953][ T6438] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 64.298028][ T6438] FAT-fs (loop1): Filesystem has been set read-only [ 64.450636][ T6442] fuse: Unknown parameter 'fd0x0000000000000004' [ 64.500236][ T24] cfg80211: failed to load regulatory.db [ 64.502584][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 64.502617][ T30] audit: type=1800 audit(64.469:247): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4946 res=0 errno=0 [ 64.505731][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.505762][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.561005][ T30] audit: type=1800 audit(64.529:248): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 64.580107][ T6459] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 64.598423][ T30] audit: type=1800 audit(64.569:249): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 64.607500][ T6463] FAULT_INJECTION: forcing a failure. [ 64.607500][ T6463] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 64.610168][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.0.500 Tainted: G L syzkaller #0 PREEMPT [ 64.610196][ T6463] Tainted: [L]=SOFTLOCKUP [ 64.610200][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.610205][ T6463] Call trace: [ 64.610209][ T6463] show_stack+0x2c/0x3c (C) [ 64.610233][ T6463] __dump_stack+0x30/0x40 [ 64.610245][ T6463] dump_stack_lvl+0xd8/0x12c [ 64.610255][ T6463] dump_stack+0x1c/0x28 [ 64.610264][ T6463] should_fail_ex+0x41c/0x590 [ 64.610276][ T6463] should_fail_alloc_page+0xec/0x10c [ 64.610284][ T6463] prepare_alloc_pages+0x194/0x4a4 [ 64.610293][ T6463] alloc_pages_bulk_noprof+0x10c/0x730 [ 64.610301][ T6463] __kasan_populate_vmalloc+0xc0/0x1d0 [ 64.610312][ T6463] alloc_vmap_area+0xdf4/0x13e8 [ 64.610321][ T6463] __get_vm_area_node+0x210/0x32c [ 64.610330][ T6463] __vmalloc_node_range_noprof+0x2c8/0x105c [ 64.610339][ T6463] __vmalloc_node_noprof+0xec/0x14c [ 64.610348][ T6463] __vmalloc_noprof+0x64/0x8c [ 64.610356][ T6463] bpf_prog_alloc_no_stats+0x60/0x488 [ 64.610365][ T6463] bpf_prog_alloc+0x48/0x110 [ 64.610371][ T6463] bpf_prog_load+0x5dc/0x15f8 [ 64.610379][ T6463] __sys_bpf+0x870/0x8c8 [ 64.610386][ T6463] __arm64_sys_bpf+0xd0/0xec [ 64.610392][ T6463] invoke_syscall+0x98/0x244 [ 64.610402][ T6463] el0_svc_common+0xec/0x23c [ 64.610412][ T6463] do_el0_svc+0x4c/0x5c [ 64.610421][ T6463] el0_svc+0x64/0x260 [ 64.610432][ T6463] el0t_64_sync_handler+0x48/0x148 [ 64.610442][ T6463] el0t_64_sync+0x198/0x19c [ 64.643255][ T6463] syz.0.500: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 64.646750][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.0.500 Tainted: G L syzkaller #0 PREEMPT [ 64.646771][ T6463] Tainted: [L]=SOFTLOCKUP [ 64.646775][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.646781][ T6463] Call trace: [ 64.646785][ T6463] show_stack+0x2c/0x3c (C) [ 64.646808][ T6463] __dump_stack+0x30/0x40 [ 64.646819][ T6463] dump_stack_lvl+0xd8/0x12c [ 64.646830][ T6463] dump_stack+0x1c/0x28 [ 64.646839][ T6463] warn_alloc+0x1bc/0x1d0 [ 64.646848][ T6463] __vmalloc_node_range_noprof+0x2e8/0x105c [ 64.646858][ T6463] __vmalloc_node_noprof+0xec/0x14c [ 64.646866][ T6463] __vmalloc_noprof+0x64/0x8c [ 64.646875][ T6463] bpf_prog_alloc_no_stats+0x60/0x488 [ 64.646883][ T6463] bpf_prog_alloc+0x48/0x110 [ 64.646890][ T6463] bpf_prog_load+0x5dc/0x15f8 [ 64.646898][ T6463] __sys_bpf+0x870/0x8c8 [ 64.646904][ T6463] __arm64_sys_bpf+0xd0/0xec [ 64.646911][ T6463] invoke_syscall+0x98/0x244 [ 64.646921][ T6463] el0_svc_common+0xec/0x23c [ 64.646930][ T6463] do_el0_svc+0x4c/0x5c [ 64.646940][ T6463] el0_svc+0x64/0x260 [ 64.646950][ T6463] el0t_64_sync_handler+0x48/0x148 [ 64.646960][ T6463] el0t_64_sync+0x198/0x19c [ 64.671347][ T6463] Mem-Info: [ 64.671957][ T6463] active_anon:55 inactive_anon:8150 isolated_anon:0 [ 64.671957][ T6463] active_file:2823 inactive_file:5148 isolated_file:0 [ 64.671957][ T6463] unevictable:768 dirty:700 writeback:0 [ 64.671957][ T6463] slab_reclaimable:9522 slab_unreclaimable:95328 [ 64.671957][ T6463] mapped:33217 shmem:3874 pagetables:1105 [ 64.671957][ T6463] sec_pagetables:0 bounce:0 [ 64.671957][ T6463] kernel_misc_reclaimable:0 [ 64.671957][ T6463] free:1475961 free_pcp:13076 free_cma:7616 [ 64.680876][ T30] audit: type=1800 audit(64.649:250): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 64.681787][ T6463] Node 0 active_anon:220kB inactive_anon:32500kB active_file:11292kB inactive_file:20592kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:132868kB dirty:2800kB writeback:0kB shmem:15496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9040kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 64.681820][ T6463] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 64.683923][ T6463] lowmem_reserve[]: 0 0 3651 3651 3651 [ 64.683951][ T6463] Node 0 Normal free:2825956kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:220kB inactive_anon:32500kB active_file:11292kB inactive_file:20592kB unevictable:3072kB writepending:2800kB zspages:24kB present:5242880kB managed:3739156kB mlocked:0kB bounce:0kB free_pcp:52476kB local_pcp:36200kB free_cma:0kB [ 64.683974][ T6463] lowmem_reserve[]: 0 0 0 0 0 [ 64.683991][ T6463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 64.684047][ T6463] Node 0 Normal: 143*4kB (UM) 571*8kB (UME) 541*16kB (UME) 91*32kB (UME) 49*64kB (UME) 53*128kB (UME) 93*256kB (UM) 39*512kB (UME) 17*1024kB (UME) 3*2048kB (UM) 667*4096kB (UM) = 2825988kB [ 64.684120][ T6463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.684127][ T6463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 64.684133][ T6463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 64.684139][ T6463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 64.684145][ T6463] 11869 total pagecache pages [ 64.684148][ T6463] 3 pages in swap cache [ 64.684152][ T6463] Free swap = 124976kB [ 64.684155][ T6463] Total swap = 124996kB [ 64.684158][ T6463] 2097152 pages RAM [ 64.684161][ T6463] 0 pages HighMem/MovableOnly [ 64.684164][ T6463] 392315 pages reserved [ 64.684167][ T6463] 8192 pages cma reserved [ 64.684170][ T6463] 0 pages hwpoisoned [ 64.711948][ T30] audit: type=1800 audit(64.679:251): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 64.734679][ T30] audit: type=1800 audit(64.709:252): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.503" name="file1" dev="tmpfs" ino=732 res=0 errno=0 [ 64.768539][ T30] audit: type=1800 audit(64.739:253): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 64.799674][ T6483] netlink: 'syz.4.507': attribute type 19 has an invalid length. [ 64.837765][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 64.887768][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.506'. [ 64.967980][ T30] audit: type=1800 audit(64.939:254): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 64.991504][ T30] audit: type=1800 audit(64.959:255): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 65.052600][ T30] audit: type=1800 audit(65.019:256): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 65.098027][ T6526] [ 65.098484][ T6526] ====================================================== [ 65.099822][ T6526] WARNING: possible circular locking dependency detected [ 65.101038][ T6526] syzkaller #0 Tainted: G L [ 65.102082][ T6526] ------------------------------------------------------ [ 65.103315][ T6526] syz.2.512/6526 is trying to acquire lock: [ 65.104325][ T6526] ffff0000c1572280 (&sb->s_type->i_mutex_key#33){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0x154/0x344 [ 65.106666][ T6526] [ 65.106666][ T6526] but task is already holding lock: [ 65.107993][ T6526] ffff0000f54cad18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x188/0x4b4 [ 65.109605][ T6526] [ 65.109605][ T6526] which lock already depends on the new lock. [ 65.109605][ T6526] [ 65.111486][ T6526] [ 65.111486][ T6526] the existing dependency chain (in reverse order) is: [ 65.113038][ T6526] [ 65.113038][ T6526] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 65.114349][ T6526] __mutex_lock+0x164/0xf14 [ 65.115197][ T6526] mutex_lock_nested+0x24/0x30 [ 65.116068][ T6526] tcm_set_name+0x34/0xd0 [ 65.116862][ T6526] function_make+0x18c/0x300 [ 65.117725][ T6526] configfs_mkdir+0x374/0x7d4 [ 65.118561][ T6526] vfs_mkdir+0x2dc/0x464 [ 65.119351][ T6526] filename_mkdirat+0x228/0x3f4 [ 65.120291][ T6526] __arm64_sys_mkdirat+0x9c/0xc0 [ 65.121222][ T6526] invoke_syscall+0x98/0x244 [ 65.122076][ T6526] el0_svc_common+0xec/0x23c [ 65.122930][ T6526] do_el0_svc+0x4c/0x5c [ 65.123739][ T6526] el0_svc+0x64/0x260 [ 65.124546][ T6526] el0t_64_sync_handler+0x48/0x148 [ 65.125474][ T6526] el0t_64_sync+0x198/0x19c [ 65.126311][ T6526] [ 65.126311][ T6526] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 65.127744][ T6526] __mutex_lock+0x164/0xf14 [ 65.128622][ T6526] mutex_lock_nested+0x24/0x30 [ 65.129528][ T6526] uvcg_streaming_header_allow_link+0x7c/0x47c [ 65.130688][ T6526] configfs_symlink+0x478/0xde0 [ 65.131560][ T6526] vfs_symlink+0x16c/0x290 [ 65.132378][ T6526] filename_symlinkat+0x18c/0x328 [ 65.133263][ T6526] __arm64_sys_symlinkat+0xb0/0xdc [ 65.134217][ T6526] invoke_syscall+0x98/0x244 [ 65.135063][ T6526] el0_svc_common+0xec/0x23c [ 65.135918][ T6526] do_el0_svc+0x4c/0x5c [ 65.136697][ T6526] el0_svc+0x64/0x260 [ 65.137428][ T6526] el0t_64_sync_handler+0x48/0x148 [ 65.138346][ T6526] el0t_64_sync+0x198/0x19c [ 65.139181][ T6526] [ 65.139181][ T6526] -> #0 (&sb->s_type->i_mutex_key#33){+.+.}-{4:4}: [ 65.140535][ T6526] __lock_acquire+0x17c0/0x2ebc [ 65.141408][ T6526] lock_acquire+0x140/0x364 [ 65.142233][ T6526] down_write+0x50/0xc0 [ 65.143017][ T6526] configfs_depend_item_unlocked+0x154/0x344 [ 65.144073][ T6526] usbg_make_tpg+0x230/0x4b4 [ 65.144941][ T6526] target_fabric_make_tpg+0x98/0x518 [ 65.145962][ T6526] configfs_mkdir+0x374/0x7d4 [ 65.146876][ T6526] vfs_mkdir+0x2dc/0x464 [ 65.147695][ T6526] filename_mkdirat+0x228/0x3f4 [ 65.148588][ T6526] __arm64_sys_mkdirat+0x9c/0xc0 [ 65.149448][ T6526] invoke_syscall+0x98/0x244 [ 65.150318][ T6526] el0_svc_common+0xec/0x23c [ 65.151161][ T6526] do_el0_svc+0x4c/0x5c [ 65.151923][ T6526] el0_svc+0x64/0x260 [ 65.152643][ T6526] el0t_64_sync_handler+0x48/0x148 [ 65.153595][ T6526] el0t_64_sync+0x198/0x19c [ 65.154419][ T6526] [ 65.154419][ T6526] other info that might help us debug this: [ 65.154419][ T6526] [ 65.156086][ T6526] Chain exists of: [ 65.156086][ T6526] &sb->s_type->i_mutex_key#33 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 65.156086][ T6526] [ 65.158596][ T6526] Possible unsafe locking scenario: [ 65.158596][ T6526] [ 65.159817][ T6526] CPU0 CPU1 [ 65.160692][ T6526] ---- ---- [ 65.161585][ T6526] lock(&opts->dep_lock); [ 65.162362][ T6526] lock(gadget_subsys.su_mutex); [ 65.163702][ T6526] lock(&opts->dep_lock); [ 65.164866][ T6526] lock(&sb->s_type->i_mutex_key#33); [ 65.165732][ T6526] [ 65.165732][ T6526] *** DEADLOCK *** [ 65.165732][ T6526] [ 65.167029][ T6526] 5 locks held by syz.2.512/6526: [ 65.167806][ T6526] #0: ffff0000c38b2450 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 65.169307][ T6526] #1: ffff0000f7a28f80 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 65.171009][ T6526] #2: ffff8000894834c8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x334/0x7d4 [ 65.172668][ T6526] #3: ffff80008977c100 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x14c/0x4b4 [ 65.174268][ T6526] #4: ffff0000f54cad18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x188/0x4b4 [ 65.175834][ T6526] [ 65.175834][ T6526] stack backtrace: [ 65.176799][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.2.512 Tainted: G L syzkaller #0 PREEMPT [ 65.178461][ T6526] Tainted: [L]=SOFTLOCKUP [ 65.179153][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 65.180816][ T6526] Call trace: [ 65.181364][ T6526] show_stack+0x2c/0x3c (C) [ 65.182107][ T6526] __dump_stack+0x30/0x40 [ 65.182842][ T6526] dump_stack_lvl+0xd8/0x12c [ 65.183610][ T6526] dump_stack+0x1c/0x28 [ 65.184284][ T6526] print_circular_bug+0x328/0x330 [ 65.185151][ T6526] check_noncircular+0x158/0x174 [ 65.185976][ T6526] __lock_acquire+0x17c0/0x2ebc [ 65.186817][ T6526] lock_acquire+0x140/0x364 [ 65.187589][ T6526] down_write+0x50/0xc0 [ 65.188272][ T6526] configfs_depend_item_unlocked+0x154/0x344 [ 65.189282][ T6526] usbg_make_tpg+0x230/0x4b4 [ 65.190060][ T6526] target_fabric_make_tpg+0x98/0x518 [ 65.190902][ T6526] configfs_mkdir+0x374/0x7d4 [ 65.191680][ T6526] vfs_mkdir+0x2dc/0x464 [ 65.192369][ T6526] filename_mkdirat+0x228/0x3f4 [ 65.193153][ T6526] __arm64_sys_mkdirat+0x9c/0xc0 [ 65.193985][ T6526] invoke_syscall+0x98/0x244 [ 65.194733][ T6526] el0_svc_common+0xec/0x23c [ 65.195515][ T6526] do_el0_svc+0x4c/0x5c [ 65.196244][ T6526] el0_svc+0x64/0x260 [ 65.196931][ T6526] el0t_64_sync_handler+0x48/0x148 [ 65.197781][ T6526] el0t_64_sync+0x198/0x19c