last executing test programs: 1m38.967951978s ago: executing program 0 (id=170): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@resuid}, {@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x9, 0x5, 0x1, 0x7fd9}) 1m38.814079301s ago: executing program 0 (id=176): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x14, 0x200, 0x0}) 1m38.719493817s ago: executing program 0 (id=179): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="012800040000000000004b00000008000300", @ANYRES32=r2], 0x58}}, 0x0) 1m38.673702429s ago: executing program 0 (id=180): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@data_err_ignore}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m38.491270515s ago: executing program 32 (id=181): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r0, &(0x7f00000042c0)=""/191, 0xbf, 0x9a) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 1m38.481503778s ago: executing program 0 (id=183): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) 1m38.098382771s ago: executing program 0 (id=188): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x3, 0x6, 0xfffffeff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x80) 1m38.023695477s ago: executing program 33 (id=188): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x3, 0x6, 0xfffffeff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x80) 1m7.94587416s ago: executing program 6 (id=1163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x800000000002, 0x20000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x2, 0x0, 0x2b, 0x1}) 1m7.83308885s ago: executing program 6 (id=1170): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x8) 1m7.708631545s ago: executing program 6 (id=1175): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x2, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x600}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000440), 0x0, 0xd1a}]) 1m7.596615266s ago: executing program 6 (id=1183): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 1m7.45040908s ago: executing program 6 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1m7.13062574s ago: executing program 6 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) writev(r0, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}, {&(0x7f0000019480)="cb", 0x1}], 0x2) 1m7.068854741s ago: executing program 34 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) writev(r0, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}, {&(0x7f0000019480)="cb", 0x1}], 0x2) 59.223450326s ago: executing program 1 (id=1567): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x100000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) fallocate(r0, 0x0, 0x2, 0x7797db5f) 59.166215704s ago: executing program 1 (id=1569): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x200) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 59.114710289s ago: executing program 1 (id=1571): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "0108f9", 0xfffb, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 59.099185231s ago: executing program 1 (id=1572): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 59.030018783s ago: executing program 1 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33) 58.65435765s ago: executing program 1 (id=1574): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) getdents64(r0, 0x0, 0x52) 58.654237295s ago: executing program 35 (id=1574): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) getdents64(r0, 0x0, 0x52) 39.201906933s ago: executing program 8 (id=1849): syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xe7, "94c492eb2665203d36bec70800890100000000e1100a0000005900", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 39.163715695s ago: executing program 8 (id=1851): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x80000003, 0x58, 0x0, 0x0, 0x5, 0x8, 0x2, 0x31e}) 39.098712543s ago: executing program 8 (id=1854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f00302e4c"], 0x15) 38.989770143s ago: executing program 8 (id=1860): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x548, &(0x7f0000001740)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000200)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 38.737398715s ago: executing program 8 (id=1866): socket$inet6(0xa, 0x3, 0x5) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 38.249640871s ago: executing program 8 (id=1887): symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 38.162090683s ago: executing program 36 (id=1887): symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 33.84775538s ago: executing program 5 (id=2023): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325e671, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 33.816601908s ago: executing program 5 (id=2024): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/current_tracer\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 33.739054062s ago: executing program 5 (id=2025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="80f6b0cd17", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)='Ta', 0x2}], 0x1, &(0x7f0000000bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x2, 0x8058) 33.640694812s ago: executing program 5 (id=2028): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 33.570219547s ago: executing program 5 (id=2031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='\x00', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0x1}], 0x1}}], 0x1, 0x0) 32.693959081s ago: executing program 5 (id=2058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl(r0, 0xc0484e41, &(0x7f0000000a00)) 15.314931276s ago: executing program 37 (id=2058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl(r0, 0xc0484e41, &(0x7f0000000a00)) 1.519938682s ago: executing program 3 (id=2565): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x175}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) syz_io_uring_modify_offsets$flags(r1, r2, 0x68, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 1.506381869s ago: executing program 2 (id=2567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000004", "cffe06051000001d"}, 0x28) 1.430936672s ago: executing program 7 (id=2570): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1.389343315s ago: executing program 2 (id=2571): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 1.32881798s ago: executing program 7 (id=2573): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0xf8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/32, 0x20}, 0x8}], 0x1, 0x2, 0x0) 1.275112426s ago: executing program 2 (id=2574): unshare(0x22020600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) 1.212328737s ago: executing program 3 (id=2575): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40070) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.119877897s ago: executing program 3 (id=2576): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='+3\x06\xc7F\xb2?=']}, 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 1.082551188s ago: executing program 3 (id=2578): r0 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x6d8b, 0x80, 0x2, 0x29}, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0xffff, {"6938a03395f5ddccb9c20b8d6d1b4377"}, 0xb, 0xc76, 0xf}, @ib={0x1b, 0x80, 0x7, {"a5c217c7f55e233d74ec62f7f7a2b878"}, 0x101, 0x0, 0x3}}}, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r1, 0x20, {0x8b37, 0x8000000000000001}, 0x54}, 0x1) 1.049800476s ago: executing program 3 (id=2579): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4040880) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0xff8, 0xfffb}, 0x90) 1.021168664s ago: executing program 2 (id=2580): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.021040178s ago: executing program 4 (id=2581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000, @local, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000040)) 998.031898ms ago: executing program 4 (id=2582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 972.511456ms ago: executing program 4 (id=2583): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x4) 924.490903ms ago: executing program 4 (id=2585): io_setup(0x239f, &(0x7f0000000380)) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f000026a000/0x12000)=nil, 0x12000) munmap$binder(0x0, 0x20eeffff) 826.631198ms ago: executing program 4 (id=2587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 673.590627ms ago: executing program 4 (id=2589): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r0, 0x1) 461.556637ms ago: executing program 7 (id=2594): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 440.41422ms ago: executing program 7 (id=2596): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 408.467067ms ago: executing program 9 (id=2597): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xff, 0xffff, 0x0, 0x693fffd, 0xa0, 0x9, 0xfe}, &(0x7f0000000300)=0x9c) 382.153789ms ago: executing program 9 (id=2598): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 343.198567ms ago: executing program 9 (id=2599): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 185.240311ms ago: executing program 3 (id=2600): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 181.799881ms ago: executing program 7 (id=2610): r0 = socket(0x10, 0x80003, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xffff0001) close_range(r0, 0xffffffffffffffff, 0x0) 181.344457ms ago: executing program 9 (id=2601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:default_t:s0\x00'}]}, 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r1, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) 117.457132ms ago: executing program 9 (id=2602): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x9000004, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 102.111836ms ago: executing program 2 (id=2603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 91.436493ms ago: executing program 9 (id=2604): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.919308ms ago: executing program 7 (id=2605): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000890) 0s ago: executing program 2 (id=2606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9d", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffd4e, 0x41, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x61, 0x0, 0x0) kernel console output (not intermixed with test programs): 7][ T8787] EXT4-fs: Ignoring removed orlov option [ 73.878370][ T8787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.891036][ T8787] EXT4-fs error (device loop1): ext4_readdir:265: inode #12: block 80: comm syz.1.1572: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 73.902549][ T4710] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /348/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 73.909307][ T4710] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /348/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.913807][ T4710] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 73.918773][ T4710] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /348/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.923725][ T4710] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 73.928232][ T4710] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /348/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.932848][ T4710] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 73.937076][ T4710] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /348/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.937392][ T4710] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 74.191216][ T50] Bluetooth: hci1: command tx timeout [ 74.233505][ T5920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.328967][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.334788][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.343500][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.345637][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.347387][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.362885][ T8800] set_capacity_and_notify: 9 callbacks suppressed [ 74.362928][ T8800] loop2: detected capacity change from 0 to 256 [ 74.503575][ T8815] sctp: [Deprecated]: syz.7.1583 (pid 8815) Use of int in maxseg socket option. [ 74.503575][ T8815] Use struct sctp_assoc_value instead [ 74.655332][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 74.655373][ T30] audit: type=1800 audit(333.618:287): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 74.668231][ T30] audit: type=1800 audit(333.628:288): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122385 res=0 errno=0 [ 74.669489][ T30] audit: type=1800 audit(333.628:289): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122397 res=0 errno=0 [ 74.673107][ T30] audit: type=1800 audit(333.638:290): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122409 res=0 errno=0 [ 74.698438][ T30] audit: type=1800 audit(333.658:291): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 74.738161][ T30] audit: type=1800 audit(333.698:292): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 74.763169][ T30] audit: type=1800 audit(333.728:293): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 75.347835][ T30] audit: type=1800 audit(334.308:294): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 75.357759][ T30] audit: type=1800 audit(334.318:295): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 75.401511][ T30] audit: type=1800 audit(334.368:296): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 75.550099][ T8849] syzkaller1: entered allmulticast mode [ 75.741369][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1603'. [ 75.809392][ T8874] loop7: detected capacity change from 0 to 256 [ 75.990323][ T8892] loop7: detected capacity change from 0 to 8192 [ 76.000139][ T8894] loop3: detected capacity change from 0 to 128 [ 76.001616][ T8892] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.012498][ T8894] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.103812][ T8900] loop2: detected capacity change from 0 to 128 [ 76.121863][ T8900] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.147099][ T4724] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.171030][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.244633][ T8911] loop5: detected capacity change from 0 to 512 [ 76.250194][ T8911] EXT4-fs: Ignoring removed nobh option [ 76.266854][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1626'. [ 76.266887][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1626'. [ 76.275076][ T8911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.279087][ T8917] loop2: detected capacity change from 0 to 1024 [ 76.309705][ T8917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.328565][ T8917] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.335535][ T8917] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.337448][ T5281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.340548][ T8917] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.340548][ T8917] [ 76.340592][ T8917] EXT4-fs (loop2): Total free blocks count 0 [ 76.340608][ T8917] EXT4-fs (loop2): Free/Dirty block details [ 76.340624][ T8917] EXT4-fs (loop2): free_blocks=20480 [ 76.340641][ T8917] EXT4-fs (loop2): dirty_blocks=80 [ 76.340654][ T8917] EXT4-fs (loop2): Block reservation details [ 76.340666][ T8917] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 76.389544][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 76.394266][ T4718] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 76.403344][ T8933] input: syz0 as /devices/virtual/input/input5 [ 76.430654][ T4711] Bluetooth: hci2: command tx timeout [ 77.296496][ T8950] FAULT_INJECTION: forcing a failure. [ 77.296496][ T8950] name fail_futex, interval 1, probability 0, space 0, times 1 [ 77.296538][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.2.1641 Tainted: G L syzkaller #0 PREEMPT [ 77.296552][ T8950] Tainted: [L]=SOFTLOCKUP [ 77.296557][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.296563][ T8950] Call trace: [ 77.296567][ T8950] show_stack+0x2c/0x3c (C) [ 77.296587][ T8950] __dump_stack+0x30/0x40 [ 77.296600][ T8950] dump_stack_lvl+0xd8/0x12c [ 77.296612][ T8950] dump_stack+0x1c/0x28 [ 77.296624][ T8950] should_fail_ex+0x41c/0x590 [ 77.296633][ T8950] should_fail+0x14/0x24 [ 77.296641][ T8950] should_fail_futex+0x48/0x5c [ 77.296651][ T8950] futex_lock_pi_atomic+0x16c/0x7fc [ 77.296661][ T8950] futex_lock_pi+0x248/0x6e0 [ 77.296671][ T8950] do_futex+0x2f8/0x378 [ 77.296681][ T8950] __arm64_sys_futex+0x2e4/0x418 [ 77.296691][ T8950] invoke_syscall+0x98/0x244 [ 77.296703][ T8950] el0_svc_common+0xec/0x23c [ 77.296715][ T8950] do_el0_svc+0x4c/0x5c [ 77.296727][ T8950] el0_svc+0x64/0x260 [ 77.296738][ T8950] el0t_64_sync_handler+0x44/0x104 [ 77.296748][ T8950] el0t_64_sync+0x198/0x19c [ 77.428315][ T8960] loop7: detected capacity change from 0 to 1024 [ 77.430045][ T8960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.452331][ T8960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.481120][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 77.482254][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.493965][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 77.496243][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 77.501951][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 77.501985][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 77.531604][ T8972] trusted_key: syz.5.1651 sent an empty control message without MSG_MORE. [ 77.563932][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.564126][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.587475][ T8980] loop7: detected capacity change from 0 to 256 [ 77.626922][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.630144][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.770519][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.770606][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.770625][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.770640][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.510594][ T4711] Bluetooth: hci2: command tx timeout [ 80.590680][ T4711] Bluetooth: hci2: command tx timeout [ 82.613806][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 82.613852][ T30] audit: type=1800 audit(341.578:365): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 82.645101][ T30] audit: type=1800 audit(341.608:366): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 82.664697][ T30] audit: type=1800 audit(341.628:367): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 82.670814][ T4711] Bluetooth: hci2: command tx timeout [ 82.684357][ T30] audit: type=1800 audit(341.648:368): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 82.713121][ T30] audit: type=1800 audit(341.678:369): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 82.719344][ T30] audit: type=1800 audit(341.678:370): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 82.734973][ T30] audit: type=1800 audit(341.698:371): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 82.777611][ T30] audit: type=1800 audit(341.738:372): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 82.799984][ T30] audit: type=1800 audit(341.758:373): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 82.813651][ T30] audit: type=1800 audit(341.778:374): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 82.856316][ T9021] loop7: detected capacity change from 0 to 256 [ 82.865735][ T9021] FAT-fs (loop7): Directory bread(block 1285) failed [ 82.865781][ T9021] FAT-fs (loop7): Directory bread(block 1286) failed [ 82.865794][ T9021] FAT-fs (loop7): Directory bread(block 1287) failed [ 82.865835][ T9021] FAT-fs (loop7): Directory bread(block 1288) failed [ 82.876516][ T9021] FAT-fs (loop7): Directory bread(block 1285) failed [ 82.878753][ T9021] FAT-fs (loop7): Directory bread(block 1286) failed [ 82.881247][ T9021] FAT-fs (loop7): Directory bread(block 1287) failed [ 82.891719][ T9021] FAT-fs (loop7): Directory bread(block 1288) failed [ 82.893157][ T9021] FAT-fs (loop7): Directory bread(block 1285) failed [ 82.894384][ T9021] FAT-fs (loop7): Directory bread(block 1286) failed [ 83.117206][ T9040] input: syz1 as /devices/virtual/input/input6 [ 83.244819][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.244917][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.244982][ T8796] bridge_slave_0: entered allmulticast mode [ 83.245450][ T8796] bridge_slave_0: entered promiscuous mode [ 83.246852][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.246904][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.246963][ T8796] bridge_slave_1: entered allmulticast mode [ 83.247420][ T8796] bridge_slave_1: entered promiscuous mode [ 83.257184][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.258670][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.266245][ T8796] team0: Port device team_slave_0 added [ 83.267135][ T8796] team0: Port device team_slave_1 added [ 83.286982][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.287021][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.287037][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.289316][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.289327][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.289342][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.305989][ T8796] hsr_slave_0: entered promiscuous mode [ 83.306402][ T8796] hsr_slave_1: entered promiscuous mode [ 83.306626][ T8796] debugfs: 'hsr0' already exists in 'hsr' [ 83.306712][ T8796] Cannot create hsr debugfs directory [ 83.425629][ T8796] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 83.450104][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.451555][ T8796] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 83.458843][ T9078] loop5: detected capacity change from 0 to 512 [ 83.466180][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.466842][ T8796] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 83.472425][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.472831][ T8796] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 83.476396][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.484779][ T9078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.514338][ T9091] loop7: detected capacity change from 0 to 256 [ 83.517342][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.517390][ T8796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.517471][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.517499][ T8796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.547643][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.551109][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.552101][ T1368] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.555027][ T1368] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.583330][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.583381][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.595502][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.595562][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.598474][ T5281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.709744][ T9106] loop5: detected capacity change from 0 to 512 [ 83.750239][ T9106] EXT4-fs (loop5): 1 orphan inode deleted [ 83.753086][ T9106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.806135][ T5281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.825355][ T9129] sctp: [Deprecated]: syz.3.1691 (pid 9129) Use of int in max_burst socket option deprecated. [ 83.825355][ T9129] Use struct sctp_assoc_value instead [ 83.840085][ T1329] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 83.840124][ T1329] loop5: lost filesystem error report for type 5 error -117 [ 83.925858][ T9139] input: syz1 as /devices/virtual/input/input7 [ 83.990746][ T9146] loop3: detected capacity change from 0 to 512 [ 84.000274][ T9146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 84.000330][ T9146] System zones: 1-12 [ 84.012939][ T9146] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1695: missing EA_INODE flag [ 84.012985][ T9146] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 84.020488][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 84.020530][ C0] EXT4-fs (loop3): initial error at time 342: ext4_xattr_inode_iget:441: inode 12 [ 84.020574][ C0] EXT4-fs (loop3): last error at time 342: ext4_xattr_inode_iget:441: inode 12 [ 84.028185][ T9146] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1695: error while reading EA inode 12 err=-117 [ 84.028241][ T9146] loop3: lost filesystem error report for type 5 error -117 [ 84.033332][ T9146] EXT4-fs (loop3): 1 orphan inode deleted [ 84.033805][ T9146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.058739][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.076924][ T9155] input: syz1 as /devices/virtual/input/input8 [ 84.142109][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.205971][ T10] kernel read not supported for file /video9 (pid: 10 comm: kworker/0:1) [ 84.216225][ T9171] loop3: detected capacity change from 0 to 2048 [ 84.246146][ T9171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.277475][ T8796] veth0_vlan: entered promiscuous mode [ 84.302438][ T8796] veth1_vlan: entered promiscuous mode [ 84.312386][ T8796] veth0_macvtap: entered promiscuous mode [ 84.322398][ T8796] veth1_macvtap: entered promiscuous mode [ 84.325966][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.326994][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.332081][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.340900][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.352362][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.358636][ T1329] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.358913][ T1329] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386121][ T9182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 84.395445][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.395483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.444590][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.444631][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.504241][ T9187] loop7: detected capacity change from 0 to 2048 [ 84.597777][ T9187] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1705: bg 0: block 368: padding at end of block bitmap is not set [ 84.602602][ T9187] fs-verity (loop7, inode 13): Error -28 writing Merkle tree block 1 [ 84.604431][ T9187] fs-verity (loop7, inode 13): Error -28 building Merkle tree [ 84.617118][ T9196] loop3: detected capacity change from 0 to 1024 [ 84.624203][ T9196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.626392][ T9196] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 84.787615][ T9207] __nla_validate_parse: 143 callbacks suppressed [ 84.787673][ T9207] netlink: 51 bytes leftover after parsing attributes in process `syz.7.1712'. [ 84.878080][ T9211] can0: slcan on ptm0. [ 84.941952][ T9210] can0 (unregistered): slcan off ptm0. [ 85.041103][ T9223] ip_tables: iptables: counters copy to user failed while replacing table [ 85.052942][ T9223] tipc: Enabled bearer , priority 10 [ 85.171293][ T9137] kexec: Could not allocate control_code_buffer [ 85.266649][ T9239] syzkaller1: entered promiscuous mode [ 85.266686][ T9239] syzkaller1: entered allmulticast mode [ 85.556370][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1737'. [ 85.772241][ T9286] batadv_slave_1: entered promiscuous mode [ 85.776183][ T9285] batadv_slave_1: left promiscuous mode [ 85.924916][ T9299] vlan2: entered allmulticast mode [ 85.926094][ T9299] bond0: entered allmulticast mode [ 85.927216][ T9299] bond_slave_0: entered allmulticast mode [ 85.928577][ T9299] bond_slave_1: entered allmulticast mode [ 86.042994][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 86.117990][ T9311] loop5: detected capacity change from 0 to 512 [ 86.125069][ T9311] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.314885][ T9321] loop8: detected capacity change from 0 to 256 [ 86.504701][ T9331] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1770'. [ 86.504738][ T9331] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1770'. [ 86.519905][ T9333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 86.662783][ T9347] ip6erspan0: entered allmulticast mode [ 86.749452][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1778'. [ 86.967967][ T9381] binder: 9380:9381 ioctl 4018620d 0 returned -22 [ 86.972417][ T9381] binder: 9380:9381 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.975001][ T9381] binder: 9381 RLIMIT_NICE not set [ 86.987905][ T9383] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1785: iget: bad i_size value: 38620345925642 [ 86.987948][ T9383] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.988148][ T9383] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1785: couldn't read orphan inode 15 (err -117) [ 86.988164][ T9383] loop2: lost filesystem error report for type 5 error -117 [ 87.222518][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'. [ 87.250083][ T9408] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1791: bg 0: block 112: padding at end of block bitmap is not set [ 87.274763][ T9408] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 87.274807][ T9408] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.274807][ T9408] [ 87.274832][ T9408] EXT4-fs (loop5): Total free blocks count 0 [ 87.274848][ T9408] EXT4-fs (loop5): Free/Dirty block details [ 87.274868][ T9408] EXT4-fs (loop5): free_blocks=0 [ 87.274885][ T9408] EXT4-fs (loop5): dirty_blocks=0 [ 87.274897][ T9408] EXT4-fs (loop5): Block reservation details [ 87.274907][ T9408] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 87.298338][ T4805] kernel read not supported for file /video9 (pid: 4805 comm: kworker/1:5) [ 87.323712][ T5281] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 87.407626][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1795'. [ 87.407678][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1795'. [ 87.438140][ T9427] geneve2: entered promiscuous mode [ 87.438182][ T9427] geneve2: entered allmulticast mode [ 87.555073][ T9453] netlink: 'syz.3.1798': attribute type 2 has an invalid length. [ 92.639115][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 92.641327][ T30] audit: type=1800 audit(351.598:569): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 92.659764][ T9467] netlink: 'syz.8.1804': attribute type 1 has an invalid length. [ 92.659804][ T9467] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1804'. [ 92.672998][ T30] audit: type=1800 audit(351.638:570): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 92.687510][ T30] audit: type=1800 audit(351.648:571): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 92.716058][ T30] audit: type=1800 audit(351.678:572): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 92.719585][ T30] audit: type=1800 audit(351.678:573): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 92.719938][ T9470] set_capacity_and_notify: 2 callbacks suppressed [ 92.719948][ T9470] loop5: detected capacity change from 0 to 2048 [ 92.740739][ T9473] FAULT_INJECTION: forcing a failure. [ 92.740739][ T9473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.743108][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.8.1809 Tainted: G L syzkaller #0 PREEMPT [ 92.743128][ T9473] Tainted: [L]=SOFTLOCKUP [ 92.743132][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 92.743138][ T9473] Call trace: [ 92.743141][ T9473] show_stack+0x2c/0x3c (C) [ 92.743166][ T9473] __dump_stack+0x30/0x40 [ 92.743179][ T9473] dump_stack_lvl+0xd8/0x12c [ 92.743191][ T9473] dump_stack+0x1c/0x28 [ 92.743203][ T9473] should_fail_ex+0x41c/0x590 [ 92.743216][ T9473] should_fail_alloc_page+0xec/0x10c [ 92.743226][ T9473] prepare_alloc_pages+0x194/0x4a4 [ 92.743237][ T9473] __alloc_frozen_pages_noprof+0x134/0x320 [ 92.743248][ T9473] alloc_pages_mpol+0x1ec/0x3c0 [ 92.743258][ T9473] alloc_frozen_pages_noprof+0xc4/0x10c [ 92.743269][ T9473] alloc_pages_noprof+0x30/0x148 [ 92.743280][ T9473] get_free_pages_noprof+0x1c/0xbc [ 92.743290][ T9473] __kasan_populate_vmalloc+0x48/0x1d0 [ 92.743302][ T9473] alloc_vmap_area+0xdf4/0x13e8 [ 92.743314][ T9473] __get_vm_area_node+0x210/0x32c [ 92.743324][ T9473] __vmalloc_node_range_noprof+0x2c8/0x105c [ 92.743336][ T9473] __vmalloc_node_noprof+0xec/0x14c [ 92.743348][ T9473] dup_task_struct+0x380/0x82c [ 92.743357][ T9473] copy_process+0x600/0x32e8 [ 92.743365][ T9473] kernel_clone+0x234/0x9fc [ 92.743374][ T9473] __arm64_sys_clone+0x168/0x1d4 [ 92.743383][ T9473] invoke_syscall+0x98/0x244 [ 92.743396][ T9473] el0_svc_common+0xec/0x23c [ 92.743407][ T9473] do_el0_svc+0x4c/0x5c [ 92.743419][ T9473] el0_svc+0x64/0x260 [ 92.743430][ T9473] el0t_64_sync_handler+0x44/0x104 [ 92.743440][ T9473] el0t_64_sync+0x198/0x19c [ 92.752195][ T9470] loop5: p1 < > p4 [ 92.752195][ T9470] p4: [ 92.759140][ T9470] loop5: p4 size 722688 extends beyond EOD, truncated [ 92.774524][ T30] audit: type=1800 audit(351.718:574): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 92.778110][ T9473] syz.8.1809: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 92.780979][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.8.1809 Tainted: G L syzkaller #0 PREEMPT [ 92.780994][ T9473] Tainted: [L]=SOFTLOCKUP [ 92.780998][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 92.781004][ T9473] Call trace: [ 92.781006][ T9473] show_stack+0x2c/0x3c (C) [ 92.781028][ T9473] __dump_stack+0x30/0x40 [ 92.781040][ T9473] dump_stack_lvl+0xd8/0x12c [ 92.781052][ T9473] dump_stack+0x1c/0x28 [ 92.781063][ T9473] warn_alloc+0x1bc/0x1d0 [ 92.781073][ T9473] __vmalloc_node_range_noprof+0x2e8/0x105c [ 92.781085][ T9473] __vmalloc_node_noprof+0xec/0x14c [ 92.781097][ T9473] dup_task_struct+0x380/0x82c [ 92.781106][ T9473] copy_process+0x600/0x32e8 [ 92.781114][ T9473] kernel_clone+0x234/0x9fc [ 92.781123][ T9473] __arm64_sys_clone+0x168/0x1d4 [ 92.781132][ T9473] invoke_syscall+0x98/0x244 [ 92.781144][ T9473] el0_svc_common+0xec/0x23c [ 92.781156][ T9473] do_el0_svc+0x4c/0x5c [ 92.781167][ T9473] el0_svc+0x64/0x260 [ 92.781179][ T9473] el0t_64_sync_handler+0x44/0x104 [ 92.781189][ T9473] el0t_64_sync+0x198/0x19c [ 92.800657][ T9473] Mem-Info: [ 92.800674][ T9473] active_anon:388 inactive_anon:12611 isolated_anon:0 [ 92.800674][ T9473] active_file:2920 inactive_file:19150 isolated_file:0 [ 92.800674][ T9473] unevictable:768 dirty:456 writeback:5 [ 92.800674][ T9473] slab_reclaimable:9288 slab_unreclaimable:96652 [ 92.800674][ T9473] mapped:31850 shmem:4491 pagetables:1469 [ 92.800674][ T9473] sec_pagetables:0 bounce:0 [ 92.800674][ T9473] kernel_misc_reclaimable:0 [ 92.800674][ T9473] free:1434049 free_pcp:35519 free_cma:7616 [ 92.800698][ T9473] Node 0 active_anon:1552kB inactive_anon:50444kB active_file:11680kB inactive_file:76600kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:127400kB dirty:1824kB writeback:20kB shmem:17964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB kernel_stack:10216kB pagetables:5876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 92.800721][ T9473] Node 0 DMA free:3077888kB boost:0kB min:20348kB low:25432kB high:30516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 92.800748][ T9473] lowmem_reserve[]: 0 0 3651 3651 3651 [ 92.800768][ T9473] Node 0 Normal free:2658308kB boost:0kB min:24704kB low:30880kB high:37056kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1552kB inactive_anon:50444kB active_file:11680kB inactive_file:76600kB unevictable:3072kB writepending:1844kB zspages:368kB present:5242880kB managed:3739084kB mlocked:0kB bounce:0kB free_pcp:142076kB local_pcp:129400kB free_cma:0kB [ 92.800793][ T9473] lowmem_reserve[]: 0 0 0 0 0 [ 92.800810][ T9473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 92.800871][ T9473] Node 0 Normal: 326*4kB (UME) 165*8kB (UME) 112*16kB (UE) 547*32kB (UME) 184*64kB (UME) 45*128kB (UM) 70*256kB (UME) 66*512kB (UME) 51*1024kB (UM) 34*2048kB (UME) 597*4096kB (UM) = 2658336kB [ 92.800951][ T9473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.800958][ T9473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 92.800965][ T9473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 92.800972][ T9473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 92.800978][ T9473] 26557 total pagecache pages [ 92.800982][ T9473] 0 pages in swap cache [ 92.800986][ T9473] Free swap = 124836kB [ 92.800989][ T9473] Total swap = 124996kB [ 92.800993][ T9473] 2097152 pages RAM [ 92.800996][ T9473] 0 pages HighMem/MovableOnly [ 92.800999][ T9473] 392333 pages reserved [ 92.801002][ T9473] 8192 pages cma reserved [ 92.801006][ T9473] 11 pages hwpoisoned [ 92.817247][ T30] audit: type=1800 audit(351.778:575): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 92.845903][ T4344] loop5: p1 < > p4 [ 92.845903][ T4344] p4: [ 92.846513][ T4344] loop5: p4 size 722688 extends beyond EOD, truncated [ 92.865716][ T30] audit: type=1800 audit(351.828:576): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130533 res=0 errno=0 [ 92.873605][ T30] audit: type=1800 audit(351.838:577): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 92.881936][ T30] audit: type=1800 audit(351.848:578): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 92.984665][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1815'. [ 92.984709][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1815'. [ 93.021902][ T9491] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1816'. [ 93.103342][ T9493] ip6erspan0: entered allmulticast mode [ 93.183748][ T9499] Format for deleting device is "id" (uint). [ 93.405534][ T9519] bond0: option arp_interval: invalid value () [ 93.405573][ T9519] bond0: option arp_interval: allowed values 0 - 2147483647 [ 93.417629][ T9523] netlink: 'syz.7.1832': attribute type 2 has an invalid length. [ 93.458207][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1834'. [ 93.458258][ T9527] netlink: 'syz.8.1834': attribute type 26 has an invalid length. [ 93.542153][ T7587] udevd[7587]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 93.547717][ T6884] udevd[6884]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 93.602006][ T7587] udevd[7587]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 93.614875][ T6884] udevd[6884]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 93.700392][ T7587] udevd[7587]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 93.759203][ T4558] kernel write not supported for file /media2 (pid: 4558 comm: kworker/0:3) [ 93.783959][ T9561] loop2: detected capacity change from 0 to 512 [ 93.802798][ T9561] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 93.985408][ T9583] loop8: detected capacity change from 0 to 512 [ 94.004734][ T9584] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.239342][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.249177][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.256539][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.260803][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.263083][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.265130][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.267488][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.271943][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.274830][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.277012][ T8796] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 94.310053][ T9606] loop5: detected capacity change from 0 to 256 [ 94.472647][ T9621] loop3: detected capacity change from 0 to 1024 [ 94.483175][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 94.519074][ T9621] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 94.527870][ T9621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.536743][ T9621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.536743][ T9621] [ 94.537850][ T4797] kernel write not supported for file bpf-prog (pid: 4797 comm: kworker/1:3) [ 94.540358][ T9621] EXT4-fs (loop3): Total free blocks count 0 [ 94.540392][ T9621] EXT4-fs (loop3): Free/Dirty block details [ 94.540409][ T9621] EXT4-fs (loop3): free_blocks=20480 [ 94.540426][ T9621] EXT4-fs (loop3): dirty_blocks=80 [ 94.540441][ T9621] EXT4-fs (loop3): Block reservation details [ 94.540512][ T9621] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 94.557999][ T9621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 94.558039][ T9621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.558039][ T9621] [ 94.592379][ T9621] EXT4-fs error (device loop3): __ext4_remount:6844: comm syz.3.1875: Abort forced by user [ 94.618259][ T9635] FAULT_INJECTION: forcing a failure. [ 94.618259][ T9635] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.618300][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.2.1882 Tainted: G L syzkaller #0 PREEMPT [ 94.618315][ T9635] Tainted: [L]=SOFTLOCKUP [ 94.618320][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.618326][ T9635] Call trace: [ 94.618329][ T9635] show_stack+0x2c/0x3c (C) [ 94.618350][ T9635] __dump_stack+0x30/0x40 [ 94.618363][ T9635] dump_stack_lvl+0xd8/0x12c [ 94.618375][ T9635] dump_stack+0x1c/0x28 [ 94.618386][ T9635] should_fail_ex+0x41c/0x590 [ 94.618395][ T9635] should_fail+0x14/0x24 [ 94.618402][ T9635] should_fail_usercopy+0x20/0x30 [ 94.618411][ T9635] __arm64_sys_move_pages+0x1140/0x1aa0 [ 94.618422][ T9635] invoke_syscall+0x98/0x244 [ 94.618434][ T9635] el0_svc_common+0xec/0x23c [ 94.618446][ T9635] do_el0_svc+0x4c/0x5c [ 94.618457][ T9635] el0_svc+0x64/0x260 [ 94.618468][ T9635] el0t_64_sync_handler+0x44/0x104 [ 94.618478][ T9635] el0t_64_sync+0x198/0x19c [ 94.619553][ T4724] EXT4-fs unmount: 8 callbacks suppressed [ 94.660762][ T8796] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.709447][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.811767][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.845336][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.854020][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.854949][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'. [ 94.854961][ T9659] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1892'. [ 94.859897][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.864725][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.864979][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.917881][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1895'. [ 94.938641][ T9647] Injecting memory failure for pfn 0x136a03 at process virtual address 0x20003000 [ 94.939653][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.962334][ T9647] Memory failure: 0x136a03: recovery action for dirty LRU page: Recovered [ 95.026168][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.200411][ T9692] binder: 9692 RLIMIT_NICE not set [ 95.214723][ T12] bridge_slave_1: left allmulticast mode [ 95.214758][ T12] bridge_slave_1: left promiscuous mode [ 95.214850][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.224135][ T12] bridge_slave_0: left allmulticast mode [ 95.224164][ T12] bridge_slave_0: left promiscuous mode [ 95.224245][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.363457][ T9703] Console: switching to colour dummy device 80x25 [ 95.365913][ T9703] Console: switching to colour frame buffer device 128x48 [ 95.387648][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.393406][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.395981][ T12] bond0 (unregistering): Released all slaves [ 95.420243][ T9692] binder: 9691:9692 ioctl c0306201 20001a80 returned -14 [ 95.461167][ T9714] veth0: entered promiscuous mode [ 95.461663][ T9710] veth0: left promiscuous mode [ 95.524771][ T9725] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1912'. [ 95.534910][ T9725] loop2: detected capacity change from 0 to 256 [ 95.535269][ T9725] vfat: Unknown parameter 'ioKharset' [ 95.589098][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 95.657728][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.659329][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.661646][ T9656] bridge_slave_0: entered allmulticast mode [ 95.663309][ T9656] bridge_slave_0: entered promiscuous mode [ 95.665309][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.666766][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.668196][ T9656] bridge_slave_1: entered allmulticast mode [ 95.669938][ T9656] bridge_slave_1: entered promiscuous mode [ 95.766554][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.774339][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.785834][ T9747] loop5: detected capacity change from 0 to 2048 [ 95.814707][ T9747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.836608][ T12] hsr_slave_0: left promiscuous mode [ 95.843700][ T12] hsr_slave_1: left promiscuous mode [ 95.845181][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.845210][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.851630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.853320][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.867199][ T12] veth1_macvtap: left promiscuous mode [ 95.872704][ T12] veth0_macvtap: left promiscuous mode [ 95.872844][ T12] veth1_vlan: left promiscuous mode [ 95.872887][ T12] veth0_vlan: left promiscuous mode [ 95.880652][ T5281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.034477][ T12] team0 (unregistering): Port device team_slave_1 removed [ 96.036421][ T9775] loop5: detected capacity change from 0 to 1024 [ 96.048357][ T12] team0 (unregistering): Port device team_slave_0 removed [ 96.058176][ T9775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.077681][ T9775] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1923: bg 0: block 112: padding at end of block bitmap is not set [ 96.084291][ T9775] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 96.084323][ T9775] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.084323][ T9775] [ 96.084346][ T9775] EXT4-fs (loop5): Total free blocks count 0 [ 96.084359][ T9775] EXT4-fs (loop5): Free/Dirty block details [ 96.084372][ T9775] EXT4-fs (loop5): free_blocks=0 [ 96.084384][ T9775] EXT4-fs (loop5): dirty_blocks=64 [ 96.084394][ T9775] EXT4-fs (loop5): Block reservation details [ 96.084404][ T9775] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 96.126451][ T5281] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 96.127438][ T5281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.195353][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 96.202915][ T9656] team0: Port device team_slave_0 added [ 96.205221][ T9656] team0: Port device team_slave_1 added [ 96.236144][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.236177][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.236395][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.242168][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.242185][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.242202][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.279636][ T9656] hsr_slave_0: entered promiscuous mode [ 96.292211][ T9656] hsr_slave_1: entered promiscuous mode [ 96.292444][ T9656] debugfs: 'hsr0' already exists in 'hsr' [ 96.292474][ T9656] Cannot create hsr debugfs directory [ 96.381395][ T9656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 96.404540][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.407699][ T9656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 96.426174][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.426811][ T9656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 96.441391][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.476225][ T9656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 96.489061][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.549341][ T9819] loop3: detected capacity change from 0 to 512 [ 96.551425][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.560749][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.564901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.564950][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.569359][ T9819] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 96.569436][ T9819] System zones: 0-2, 18-18, 34-35 [ 96.571662][ T9819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.598050][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.598107][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.625813][ T9656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.632074][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.635118][ T9656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.700104][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 96.714834][ T9834] loop7: detected capacity change from 0 to 512 [ 96.731980][ T9834] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1939: iget: bad i_size value: 38620345925642 [ 96.732036][ T9834] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.732262][ T9834] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1939: couldn't read orphan inode 15 (err -117) [ 96.732277][ T9834] loop7: lost filesystem error report for type 5 error -117 [ 96.732875][ T9834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.786634][ T790] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 96.795750][ T9840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.804005][ T790] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 96.808643][ T9842] netlink: 'syz.3.1941': attribute type 11 has an invalid length. [ 96.811303][ T9840] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 96.811564][ T9840] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 128 (only 1 groups) [ 96.820777][ T790] EXT4-fs (loop7): This should not happen!! Data will be lost [ 96.820777][ T790] [ 96.820818][ T790] EXT4-fs (loop7): Total free blocks count 0 [ 96.820834][ T790] EXT4-fs (loop7): Free/Dirty block details [ 96.820849][ T790] EXT4-fs (loop7): free_blocks=0 [ 96.820863][ T790] EXT4-fs (loop7): dirty_blocks=65 [ 96.820874][ T790] EXT4-fs (loop7): Block reservation details [ 96.820883][ T790] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 96.829830][ T7875] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 96.835015][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.879078][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.910968][ T50] Bluetooth: hci2: command tx timeout [ 96.944517][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.195379][ T9656] veth0_vlan: entered promiscuous mode [ 97.195792][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.205123][ T9656] veth1_vlan: entered promiscuous mode [ 97.207383][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.240049][ T9656] veth0_macvtap: entered promiscuous mode [ 97.253090][ T9656] veth1_macvtap: entered promiscuous mode [ 97.256984][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.261609][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 97.269340][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.312008][ T7987] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312244][ T7987] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312439][ T7987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.313674][ T7987] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.352384][ T9901] pim6reg: entered allmulticast mode [ 97.364081][ T9901] pim6reg: left allmulticast mode [ 97.421274][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.424247][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.426941][ T9905] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.430390][ T9905] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 97.430440][ T9905] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1956: Corrupt directory, running e2fsck is recommended [ 97.437064][ T9905] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 97.447099][ T9905] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1956: corrupted in-inode xattr: e_name out of bounds [ 97.447169][ T9905] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.449893][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.449920][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.455457][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1956: couldn't read orphan inode 15 (err -117) [ 97.455490][ T9905] loop2: lost filesystem error report for type 5 error -117 [ 97.458491][ T9905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.541852][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.610385][ T9922] bond0: invalid NS target ff00:: specified for addition [ 97.611513][ T9922] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 97.646687][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 97.646736][ T30] audit: type=1800 audit(356.608:779): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 97.646958][ T9921] EXT4-fs error (device loop9): __ext4_fill_super:5600: comm syz.9.1889: inode #2: comm syz.9.1889: iget: illegal inode # [ 97.646982][ T9921] loop9: lost filesystem error report for type 5 error -117 [ 97.650510][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 97.650526][ C1] EXT4-fs (loop9): initial error at time 356: __ext4_fill_super:5600 [ 97.650543][ C1] EXT4-fs (loop9): last error at time 356: __ext4_fill_super:5600 [ 97.653039][ T9921] EXT4-fs (loop9): Remounting filesystem read-only [ 97.653055][ T9921] EXT4-fs (loop9): get root inode failed [ 97.653062][ T9921] EXT4-fs (loop9): mount failed [ 97.676528][ T9926] __nla_validate_parse: 4 callbacks suppressed [ 97.676570][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 97.691904][ T30] audit: type=1800 audit(356.648:780): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 97.716887][ T30] audit: type=1800 audit(356.678:781): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 97.732588][ T30] audit: type=1800 audit(356.698:782): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 97.740319][ T30] audit: type=1800 audit(356.698:783): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 97.769519][ T30] audit: type=1800 audit(356.728:784): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1969" name="carrier" dev="sysfs" ino=67417 res=0 errno=0 [ 97.807429][ T30] audit: type=1800 audit(356.768:785): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 97.817564][ T9942] set_capacity_and_notify: 4 callbacks suppressed [ 97.825584][ T30] audit: type=1800 audit(356.788:786): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 97.826545][ T9942] loop7: detected capacity change from 0 to 2048 [ 97.838429][ T30] audit: type=1800 audit(356.798:787): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 97.847213][ T30] audit: type=1800 audit(356.808:788): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 97.868109][ T9942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.942231][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.015948][ T9965] loop5: detected capacity change from 0 to 512 [ 98.025928][ T9967] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1982'. [ 98.034752][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1982'. [ 98.040405][ T9965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.067466][ T9973] loop9: detected capacity change from 0 to 128 [ 98.073010][ T9965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.116447][ T9965] EXT4-fs error (device loop5): ext4_empty_dir:3091: inode #12: block 32: comm syz.5.1981: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 98.132277][ T9965] EXT4-fs (loop5): Remounting filesystem read-only [ 98.132309][ T9965] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz.5.1981: directory missing '.' [ 98.164502][ T5281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.226242][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 98.226290][ T9983] bond0: Unable to set down delay as MII monitoring is disabled [ 98.365061][T10004] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1996'. [ 98.369096][T10007] loop7: detected capacity change from 0 to 1024 [ 98.369598][T10007] EXT4-fs: Ignoring removed bh option [ 98.398519][T10007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.418861][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 98.425709][T10007] EXT4-fs (loop7): shut down requested (0) [ 98.552458][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.573277][T10028] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2005'. [ 98.786968][T10046] syzkaller1: entered promiscuous mode [ 98.787070][T10046] syzkaller1: entered allmulticast mode [ 98.848749][T10052] input: syz0 as /devices/virtual/input/input11 [ 98.914375][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2017'. [ 98.914810][T10056] netlink: 'syz.5.2017': attribute type 7 has an invalid length. [ 98.914839][T10056] netlink: 'syz.5.2017': attribute type 8 has an invalid length. [ 98.914857][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 98.927500][T10056] erspan0: entered promiscuous mode [ 98.934724][T10056] gretap0: entered promiscuous mode [ 98.935836][T10058] loop9: detected capacity change from 0 to 512 [ 98.940287][T10056] erspan0: left promiscuous mode [ 98.953051][T10056] gretap0: left promiscuous mode [ 98.956839][T10058] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2018: iget: bad i_size value: 38620345925642 [ 98.956890][T10058] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.957520][T10058] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2018: couldn't read orphan inode 15 (err -117) [ 98.957542][T10058] loop9: lost filesystem error report for type 5 error -117 [ 98.968590][T10058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.990822][ T50] Bluetooth: hci2: command tx timeout [ 99.016611][T10058] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2018: bg 0: block 5: invalid block bitmap [ 99.069232][ T9656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.130278][T10077] loop9: detected capacity change from 0 to 512 [ 99.147074][T10077] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2021: iget: bad extended attribute block 134217728 [ 99.147122][T10077] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.150603][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 99.150619][ C1] EXT4-fs (loop9): initial error at time 358: ext4_orphan_get:1399: inode 15 [ 99.150639][ C1] EXT4-fs (loop9): last error at time 358: ext4_orphan_get:1399: inode 15 [ 99.153170][T10077] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2021: couldn't read orphan inode 15 (err -117) [ 99.153195][T10077] loop9: lost filesystem error report for type 5 error -117 [ 99.154362][T10077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.214868][T10077] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2021: invalid indirect mapped block 234881024 (level 0) [ 99.218384][T10077] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2021: invalid indirect mapped block 768 (level 1) [ 99.250437][ T9656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.448683][T10114] loop2: detected capacity change from 0 to 1024 [ 99.450378][T10114] EXT4-fs: Ignoring removed orlov option [ 99.455613][T10114] EXT4-fs: Ignoring removed orlov option [ 99.467786][T10114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.524170][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.586582][T10130] loop9: detected capacity change from 0 to 128 [ 99.588363][T10130] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.944506][T10182] xt_hashlimit: size too large, truncated to 1048576 [ 100.753932][T10246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.873186][T10258] vhci_hcd vhci_hcd.2: default hub control req: 800b v0000 i0000 l31125 [ 100.985022][T10270] netlink: 'syz.9.2077': attribute type 12 has an invalid length. [ 100.985061][T10270] netlink: 'syz.9.2077': attribute type 29 has an invalid length. [ 100.985071][T10270] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2077'. [ 100.985082][T10270] netlink: 'syz.9.2077': attribute type 1 has an invalid length. [ 100.985090][T10270] netlink: 'syz.9.2077': attribute type 2 has an invalid length. [ 100.993817][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.997321][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 100.997354][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 101.006049][T10272] FAULT_INJECTION: forcing a failure. [ 101.006049][T10272] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.006094][T10272] CPU: 1 UID: 60929 PID: 10272 Comm: syz.3.2078 Tainted: G L syzkaller #0 PREEMPT [ 101.006112][T10272] Tainted: [L]=SOFTLOCKUP [ 101.006116][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 101.006122][T10272] Call trace: [ 101.006125][T10272] show_stack+0x2c/0x3c (C) [ 101.006148][T10272] __dump_stack+0x30/0x40 [ 101.006161][T10272] dump_stack_lvl+0xd8/0x12c [ 101.006173][T10272] dump_stack+0x1c/0x28 [ 101.006184][T10272] should_fail_ex+0x41c/0x590 [ 101.006193][T10272] should_fail+0x14/0x24 [ 101.006200][T10272] get_futex_key+0x1ec/0x12b0 [ 101.006210][T10272] futex_wake+0x10c/0x594 [ 101.006225][T10272] do_futex+0x2c4/0x378 [ 101.006235][T10272] __arm64_sys_futex+0x2e4/0x418 [ 101.006246][T10272] invoke_syscall+0x98/0x244 [ 101.006258][T10272] el0_svc_common+0xec/0x23c [ 101.006270][T10272] do_el0_svc+0x4c/0x5c [ 101.006282][T10272] el0_svc+0x64/0x260 [ 101.006293][T10272] el0t_64_sync_handler+0x44/0x104 [ 101.006303][T10272] el0t_64_sync+0x198/0x19c [ 101.071001][ T50] Bluetooth: hci2: command tx timeout [ 102.240271][T10311] loop3: detected capacity change from 0 to 512 [ 102.243376][T10311] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.250662][T10311] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2094: corrupted in-inode xattr: e_value size too large [ 102.250709][T10311] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.250973][T10311] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2094: couldn't read orphan inode 15 (err -117) [ 102.250989][T10311] loop3: lost filesystem error report for type 5 error -117 [ 102.251568][T10311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.278485][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.339761][T10317] loop3: detected capacity change from 0 to 512 [ 102.356649][T10317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.373825][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.468496][T10327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 102.493905][T10330] bridge0: port 3(syz_tun) entered blocking state [ 102.493971][T10330] bridge0: port 3(syz_tun) entered disabled state [ 102.494138][T10330] syz_tun: entered allmulticast mode [ 102.495626][T10330] syz_tun: entered promiscuous mode [ 102.495992][T10330] bridge0: port 3(syz_tun) entered blocking state [ 102.496025][T10330] bridge0: port 3(syz_tun) entered forwarding state [ 102.499367][T10330] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 102.534629][T10334] Invalid ELF header magic: != ELF [ 102.571635][T10339] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2105: corrupted in-inode xattr: invalid ea_ino [ 102.571675][T10339] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.571862][T10339] EXT4-fs (loop7): Remounting filesystem read-only [ 102.572420][T10339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.603067][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.070530][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.071792][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 103.073476][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 103.150543][ T50] Bluetooth: hci2: command tx timeout [ 103.158579][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 103.158614][ T30] audit: type=1800 audit(362.118:944): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=62658 res=0 errno=0 [ 103.264263][ T30] audit: type=1800 audit(362.228:945): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=94401 res=0 errno=0 [ 105.390541][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 105.390650][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.392909][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 105.492468][ T30] audit: type=1800 audit(364.458:946): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=112623 res=0 errno=0 [ 107.618977][ T30] audit: type=1800 audit(366.578:947): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 107.619025][ T30] audit: type=1800 audit(366.578:948): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 107.633331][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 107.633372][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 107.636712][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.656331][ T30] audit: type=1800 audit(366.618:949): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2109" name="delete_device" dev="sysfs" ino=37363 res=0 errno=0 [ 107.659699][T10353] i2c i2c-0: delete_device: Can't find device in list [ 107.677238][ T30] audit: type=1800 audit(366.638:950): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 107.706748][ T30] audit: type=1800 audit(366.668:951): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 107.713599][ T30] audit: type=1800 audit(366.678:952): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139780 res=0 errno=0 [ 107.714641][ T30] audit: type=1800 audit(366.678:953): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139795 res=0 errno=0 [ 108.083036][T10394] set_capacity_and_notify: 1 callbacks suppressed [ 108.083507][T10394] loop2: detected capacity change from 0 to 1024 [ 108.084641][T10394] EXT4-fs: inline encryption not supported [ 108.084658][T10394] EXT4-fs: Ignoring removed bh option [ 108.087829][T10394] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.104173][T10394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.132557][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.183072][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 108.183116][ T30] audit: type=1800 audit(367.148:973): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 108.241667][ T30] audit: type=1800 audit(367.208:974): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 108.252878][ T30] audit: type=1800 audit(367.218:975): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 108.281460][ T30] audit: type=1800 audit(367.248:976): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 108.287776][ T30] audit: type=1800 audit(367.248:977): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 108.318617][ T30] audit: type=1800 audit(367.278:978): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 108.326738][ T30] audit: type=1800 audit(367.288:979): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 108.357231][ T30] audit: type=1800 audit(367.318:980): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 108.368837][ T30] audit: type=1800 audit(367.328:981): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 108.394343][ T30] audit: type=1800 audit(367.358:982): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 108.416186][T10428] FAULT_INJECTION: forcing a failure. [ 108.416186][T10428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.416233][T10428] CPU: 0 UID: 0 PID: 10428 Comm: syz.2.2137 Tainted: G L syzkaller #0 PREEMPT [ 108.416249][T10428] Tainted: [L]=SOFTLOCKUP [ 108.416253][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 108.416259][T10428] Call trace: [ 108.416262][T10428] show_stack+0x2c/0x3c (C) [ 108.416285][T10428] __dump_stack+0x30/0x40 [ 108.416298][T10428] dump_stack_lvl+0xd8/0x12c [ 108.416310][T10428] dump_stack+0x1c/0x28 [ 108.416321][T10428] should_fail_ex+0x41c/0x590 [ 108.416330][T10428] should_fail+0x14/0x24 [ 108.416338][T10428] should_fail_usercopy+0x20/0x30 [ 108.416346][T10428] _inline_copy_from_user+0x38/0x164 [ 108.416359][T10428] __arm64_sys_splice+0x22c/0x4ec [ 108.416370][T10428] invoke_syscall+0x98/0x244 [ 108.416383][T10428] el0_svc_common+0xec/0x23c [ 108.416395][T10428] do_el0_svc+0x4c/0x5c [ 108.416406][T10428] el0_svc+0x64/0x260 [ 108.416417][T10428] el0t_64_sync_handler+0x44/0x104 [ 108.416428][T10428] el0t_64_sync+0x198/0x19c [ 108.644436][T10459] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.644436][T10459] The task syz.3.2144 (10459) triggered the difference, watch for misbehavior. [ 108.673287][T10463] loop2: detected capacity change from 0 to 512 [ 108.693149][T10463] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2148: Failed to acquire dquot type 1 [ 108.693190][T10463] loop2: lost filesystem error report for type 5 error -117 [ 108.696373][T10463] EXT4-fs (loop2): 1 truncate cleaned up [ 108.696852][T10463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.737167][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.815106][T10476] __nla_validate_parse: 1 callbacks suppressed [ 108.815151][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2152'. [ 108.893973][T10484] loop2: detected capacity change from 0 to 1024 [ 108.894360][T10484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.939585][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.997007][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.027898][T10494] loop7: detected capacity change from 0 to 512 [ 109.028321][T10494] EXT4-fs: Ignoring removed oldalloc option [ 109.036522][T10494] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 109.043677][T10494] EXT4-fs (loop7): 1 truncate cleaned up [ 109.045704][T10494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.066022][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.403850][T10509] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 109.870571][ T4711] Bluetooth: hci6: command 0x1003 tx timeout [ 109.872801][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 110.052504][T10541] loop7: detected capacity change from 0 to 512 [ 110.052902][T10541] EXT4-fs: Ignoring removed orlov option [ 110.064907][T10541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.100798][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.465408][T10585] Injecting memory failure for pfn 0x13cd0a at process virtual address 0x2050a000 [ 110.467938][T10585] Memory failure: 0x13cd0a: unhandlable page. [ 110.470020][T10585] Memory failure: 0x13cd0a: recovery action for get hwpoison page: Ignored [ 110.515016][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 110.516827][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 110.555376][T10593] FAULT_INJECTION: forcing a failure. [ 110.555376][T10593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 110.555421][T10593] CPU: 0 UID: 0 PID: 10593 Comm: syz.2.2191 Tainted: G L syzkaller #0 PREEMPT [ 110.555437][T10593] Tainted: [L]=SOFTLOCKUP [ 110.555444][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 110.555452][T10593] Call trace: [ 110.555456][T10593] show_stack+0x2c/0x3c (C) [ 110.555478][T10593] __dump_stack+0x30/0x40 [ 110.555492][T10593] dump_stack_lvl+0xd8/0x12c [ 110.555504][T10593] dump_stack+0x1c/0x28 [ 110.555516][T10593] should_fail_ex+0x41c/0x590 [ 110.555525][T10593] should_fail+0x14/0x24 [ 110.555532][T10593] get_futex_key+0x1ec/0x12b0 [ 110.555543][T10593] futex_wait_setup+0x58/0x674 [ 110.555554][T10593] __futex_wait+0x108/0x25c [ 110.555564][T10593] futex_wait+0x108/0x2c0 [ 110.555574][T10593] do_futex+0x320/0x378 [ 110.555584][T10593] __arm64_sys_futex+0x2e4/0x418 [ 110.555594][T10593] invoke_syscall+0x98/0x244 [ 110.555606][T10593] el0_svc_common+0xec/0x23c [ 110.555618][T10593] do_el0_svc+0x4c/0x5c [ 110.555630][T10593] el0_svc+0x64/0x260 [ 110.555641][T10593] el0t_64_sync_handler+0x44/0x104 [ 110.555651][T10593] el0t_64_sync+0x198/0x19c [ 110.665734][T10605] loop3: detected capacity change from 0 to 512 [ 110.697353][T10605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.705711][T10611] loop2: detected capacity change from 0 to 128 [ 110.718401][T10611] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 110.797361][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.823318][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.952525][T10632] loop7: detected capacity change from 0 to 512 [ 110.958266][T10632] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 110.964817][T10632] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.2209: bad orphan inode 131083 [ 110.964859][T10632] loop7: lost filesystem error report for type 5 error -117 [ 110.965446][T10632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.045248][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.071430][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 111.120055][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2219'. [ 111.127245][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2219'. [ 111.371764][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 111.457296][T10694] smc: net device lo applied user defined pnetid SYZ0 [ 111.457376][T10694] smc: smcd device lo applied user defined pnetid SYZ0 [ 111.545280][T10704] gtp0: entered allmulticast mode [ 111.655790][T10713] loop9: detected capacity change from 0 to 128 [ 111.707085][T10718] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 111.901689][T10724] block nbd9: NBD_DISCONNECT [ 111.902961][T10724] block nbd9: Disconnected due to user request. [ 111.902991][T10724] block nbd9: shutting down sockets [ 112.030245][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2255'. [ 112.034670][ T4797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.353066][T10746] loop7: detected capacity change from 0 to 1024 [ 112.355871][T10746] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 112.360198][T10746] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.2260: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.365074][T10746] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.366569][T10746] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2260: Failed to acquire dquot type 0 [ 112.370719][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 112.370733][ C0] EXT4-fs (loop7): initial error at time 371: ext4_map_blocks:833: inode 3: block 1 [ 112.370760][ C0] EXT4-fs (loop7): last error at time 371: ext4_map_blocks:833: inode 3: block 1 [ 112.375603][T10746] loop7: lost filesystem error report for type 5 error -117 [ 112.376231][T10746] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.2260: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.379910][T10746] loop7: lost filesystem error report for type 5 error -117 [ 112.380219][T10746] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.2260: Invalid inode bitmap blk 0 in block_group 0 [ 112.381374][T10746] loop7: lost filesystem error report for type 5 error -117 [ 112.385227][T10746] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 112.385270][T10746] loop7: lost filesystem error report for type 5 error -117 [ 112.385414][T10746] EXT4-fs (loop7): 1 orphan inode deleted [ 112.386390][T10746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.393481][ T8854] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.394553][T10746] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2260: Invalid block bitmap block 0 in block_group 0 [ 112.400129][ T8854] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 112.412074][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.443362][T10750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.486363][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.593639][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 112.598898][T10763] vlan2: entered allmulticast mode [ 112.602827][T10763] dummy0: entered allmulticast mode [ 112.603027][T10763] bridge0: port 3(vlan2) entered blocking state [ 112.605090][T10763] bridge0: port 3(vlan2) entered disabled state [ 112.607105][T10763] vlan2: entered promiscuous mode [ 112.608124][T10763] dummy0: entered promiscuous mode [ 113.070674][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.470618][T10086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.110690][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.150961][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.190631][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.510617][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.230613][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.614051][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 117.614098][ T30] audit: type=1800 audit(376.578:1102): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 117.634489][ T30] audit: type=1800 audit(376.598:1103): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 117.664027][ T30] audit: type=1800 audit(376.618:1104): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 117.678860][T10771] binder: 10767:10771 ioctl 4018620d 0 returned -22 [ 117.685764][T10771] binder: 10767:10771 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 117.685812][T10771] binder: 10771 RLIMIT_NICE not set [ 117.690994][ T4711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.692499][ T4711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.693749][ T4711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.694541][ T4711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.694757][ T4711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.699927][T10773] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 117.700007][ T30] audit: type=1800 audit(376.658:1105): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 117.713146][ T30] audit: type=1800 audit(376.678:1106): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141786 res=0 errno=0 [ 117.716892][ T30] audit: type=1800 audit(376.678:1107): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 117.722451][ T30] audit: type=1800 audit(376.688:1108): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141797 res=0 errno=0 [ 117.737039][ T30] audit: type=1800 audit(376.698:1109): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 117.743157][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.744192][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.744343][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.747548][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.751821][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.758435][ T30] audit: type=1800 audit(376.718:1110): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 117.784654][ T30] audit: type=1800 audit(376.748:1111): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141816 res=0 errno=0 [ 117.933157][ T867] kernel write not supported for file /input/mice (pid: 867 comm: kworker/1:2) [ 118.067564][T10817] 9p: Unknown Cache mode or invalid value 777777777777777777 [ 118.252823][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.254322][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.255688][T10775] bridge_slave_0: entered allmulticast mode [ 118.257242][T10775] bridge_slave_0: entered promiscuous mode [ 118.259373][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.260613][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.260722][T10775] bridge_slave_1: entered allmulticast mode [ 118.261186][T10775] bridge_slave_1: entered promiscuous mode [ 118.270664][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.302273][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.336238][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.358944][T10775] team0: Port device team_slave_0 added [ 118.363095][T10775] team0: Port device team_slave_1 added [ 118.376778][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2300'. [ 118.380248][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.380280][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.380294][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.391714][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.391725][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.391741][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.472869][T10857] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 118.517082][T10775] hsr_slave_0: entered promiscuous mode [ 118.533828][T10775] hsr_slave_1: entered promiscuous mode [ 118.542371][T10775] debugfs: 'hsr0' already exists in 'hsr' [ 118.542409][T10775] Cannot create hsr debugfs directory [ 118.549863][T10868] set_capacity_and_notify: 1 callbacks suppressed [ 118.551332][T10868] loop2: detected capacity change from 0 to 512 [ 118.574448][T10868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.616456][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.915485][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.052700][T10775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.056001][T10775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.057712][T10775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.060049][T10775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.062085][T10775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.064538][T10775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.066561][T10775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.070129][T10775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.095689][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.095735][T10775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.095826][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.095862][T10775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.118009][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.123285][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.124832][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.133037][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.137559][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.137627][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.150068][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.150122][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.286290][T10775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.310856][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.329200][T10954] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2313'. [ 119.418039][T10775] veth0_vlan: entered promiscuous mode [ 119.428584][T10775] veth1_vlan: entered promiscuous mode [ 119.433768][T10967] loop3: detected capacity change from 0 to 256 [ 119.444565][T10967] FAT-fs (loop3): unable to read block(809802661888) for building NFS inode [ 119.452966][T10775] veth0_macvtap: entered promiscuous mode [ 119.455729][T10775] veth1_macvtap: entered promiscuous mode [ 119.470415][T10775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.474072][T10775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.487612][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.493114][ T7987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.550700][ T790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.550940][ T790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.555887][T10086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.564701][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.564739][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.577853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.577888][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.591968][ T4558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.592074][ T4558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.592146][ T4558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.600166][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.611164][ T4558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.790989][ T50] Bluetooth: hci5: command tx timeout [ 119.814475][T11002] loop7: detected capacity change from 0 to 1024 [ 119.814913][T11002] EXT4-fs: Ignoring removed bh option [ 119.824073][T11002] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 119.851909][T11002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.881749][T11010] loop2: detected capacity change from 0 to 256 [ 119.883594][T11010] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.897820][T11002] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.2323: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 119.905529][T11002] EXT4-fs (loop7): Remounting filesystem read-only [ 119.919305][T11010] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.950279][ T7875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.257030][T11050] FAULT_INJECTION: forcing a failure. [ 120.257030][T11050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.259852][T11050] CPU: 0 UID: 0 PID: 11050 Comm: syz.3.2335 Tainted: G L syzkaller #0 PREEMPT [ 120.259878][T11050] Tainted: [L]=SOFTLOCKUP [ 120.259883][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 120.259890][T11050] Call trace: [ 120.259894][T11050] show_stack+0x2c/0x3c (C) [ 120.259919][T11050] __dump_stack+0x30/0x40 [ 120.259933][T11050] dump_stack_lvl+0xd8/0x12c [ 120.259945][T11050] dump_stack+0x1c/0x28 [ 120.259957][T11050] should_fail_ex+0x41c/0x590 [ 120.259966][T11050] should_fail+0x14/0x24 [ 120.259974][T11050] should_fail_usercopy+0x20/0x30 [ 120.259982][T11050] arch_do_signal_or_restart+0x1000/0x444c [ 120.259995][T11050] exit_to_user_mode_loop+0x70/0x17c [ 120.260006][T11050] el0_da+0x1a4/0x254 [ 120.260017][T11050] el0t_64_sync_handler+0xd8/0x104 [ 120.260027][T11050] el0t_64_sync+0x198/0x19c [ 120.584545][T11077] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 120.656678][T11084] loop4: detected capacity change from 0 to 128 [ 120.657134][T11084] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.665565][T11084] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.710052][ T790] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.720061][T11087] loop2: detected capacity change from 0 to 4096 [ 120.748060][T11087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.795764][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.866286][T11101] lapbether: lapb_data_request error - 4 [ 120.940292][T11107] overlayfs: invalid origin (0000007900696467655f736c6176655f300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 120.968366][T11112] FAULT_INJECTION: forcing a failure. [ 120.968366][T11112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.968410][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.3.2343 Tainted: G L syzkaller #0 PREEMPT [ 120.968425][T11112] Tainted: [L]=SOFTLOCKUP [ 120.968429][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 120.968435][T11112] Call trace: [ 120.968438][T11112] show_stack+0x2c/0x3c (C) [ 120.968460][T11112] __dump_stack+0x30/0x40 [ 120.968472][T11112] dump_stack_lvl+0xd8/0x12c [ 120.968484][T11112] dump_stack+0x1c/0x28 [ 120.968496][T11112] should_fail_ex+0x41c/0x590 [ 120.968505][T11112] should_fail+0x14/0x24 [ 120.968512][T11112] should_fail_usercopy+0x20/0x30 [ 120.968520][T11112] strncpy_from_user+0x48/0x388 [ 120.968530][T11112] do_getname+0x84/0x234 [ 120.968540][T11112] __arm64_sys_mkdirat+0x88/0xc0 [ 120.968550][T11112] invoke_syscall+0x98/0x244 [ 120.968562][T11112] el0_svc_common+0xec/0x23c [ 120.968574][T11112] do_el0_svc+0x4c/0x5c [ 120.968586][T11112] el0_svc+0x64/0x260 [ 120.968597][T11112] el0t_64_sync_handler+0x44/0x104 [ 120.968607][T11112] el0t_64_sync+0x198/0x19c [ 121.196065][T11146] loop3: detected capacity change from 0 to 1024 [ 121.203915][T11146] EXT4-fs: Ignoring removed orlov option [ 121.217256][T11146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec118, mo2=0002] [ 121.217312][T11146] System zones: 0-1, 3-12 [ 121.217860][T11146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.278865][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.847269][T11234] loop3: detected capacity change from 0 to 4096 [ 121.863047][T11234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.871691][ T50] Bluetooth: hci5: command tx timeout [ 121.914429][T11244] loop4: detected capacity change from 0 to 512 [ 121.954034][T11244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.972478][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.028374][T11258] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2391'. [ 122.108922][T10775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.142192][T11270] loop7: detected capacity change from 0 to 128 [ 122.143971][T11270] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.147669][T11270] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.202528][ T12] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.277348][T11283] net_ratelimit: 372 callbacks suppressed [ 122.277389][T11283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.277525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.284566][T11283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.285720][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.289478][T11282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.289638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.430758][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.680716][ T4558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.215678][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 123.215719][ T30] audit: type=1800 audit(382.178:1240): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 123.470673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.470781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.950520][ T50] Bluetooth: hci5: command tx timeout [ 125.951825][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.953158][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.030526][ T50] Bluetooth: hci5: command tx timeout [ 126.227229][ T4344] udevd[4344]: worker [6878] /devices/pci0000:00/0000:00:02.0/nvme/nvme0/nvme0n1/nvme0n1p1 is taking a long time [ 127.618663][ T30] audit: type=1800 audit(386.578:1241): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 127.634846][ T867] net_ratelimit: 6 callbacks suppressed [ 127.634880][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.659753][ T30] audit: type=1800 audit(386.618:1242): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 127.668500][ T30] audit: type=1800 audit(386.628:1243): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 127.679629][ T30] audit: type=1800 audit(386.638:1244): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 127.703761][ T30] audit: type=1800 audit(386.668:1245): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 127.732515][ T30] audit: type=1800 audit(386.698:1246): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 127.766085][T11318] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 127.773470][ T30] audit: type=1800 audit(386.738:1247): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 127.784092][ T30] audit: type=1800 audit(386.748:1248): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 127.835523][ T30] audit: type=1800 audit(386.798:1249): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 127.850816][T11325] sctp: [Deprecated]: syz.7.2419 (pid 11325) Use of int in max_burst socket option. [ 127.850816][T11325] Use struct sctp_assoc_value instead [ 127.917264][T11334] binder: 11333:11334 ioctl c0306201 0 returned -14 [ 128.054794][T11348] loop3: detected capacity change from 0 to 1024 [ 128.057588][T11348] EXT4-fs: Ignoring removed oldalloc option [ 128.060799][T11348] EXT4-fs (loop3): stripe (59979) is not aligned with cluster size (16), stripe is disabled [ 128.067324][T11351] FAULT_INJECTION: forcing a failure. [ 128.067324][T11351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.067364][T11351] CPU: 0 UID: 0 PID: 11351 Comm: syz.9.2430 Tainted: G L syzkaller #0 PREEMPT [ 128.067382][T11351] Tainted: [L]=SOFTLOCKUP [ 128.067387][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 128.067393][T11351] Call trace: [ 128.067396][T11351] show_stack+0x2c/0x3c (C) [ 128.067418][T11351] __dump_stack+0x30/0x40 [ 128.067433][T11351] dump_stack_lvl+0xd8/0x12c [ 128.067444][T11351] dump_stack+0x1c/0x28 [ 128.067456][T11351] should_fail_ex+0x41c/0x590 [ 128.067465][T11351] should_fail_alloc_page+0xec/0x10c [ 128.067476][T11351] prepare_alloc_pages+0x194/0x4a4 [ 128.067488][T11351] __alloc_frozen_pages_noprof+0x134/0x320 [ 128.067499][T11351] alloc_pages_mpol+0x1ec/0x3c0 [ 128.067509][T11351] folio_alloc_mpol_noprof+0x4c/0x248 [ 128.067520][T11351] alloc_migration_target_by_mpol+0x25c/0x494 [ 128.067533][T11351] migrate_pages_batch+0x6f0/0x2abc [ 128.067542][T11351] migrate_pages+0x1adc/0x2a5c [ 128.067551][T11351] __arm64_sys_mbind+0x73c/0x994 [ 128.067561][T11351] invoke_syscall+0x98/0x244 [ 128.067573][T11351] el0_svc_common+0xec/0x23c [ 128.067585][T11351] do_el0_svc+0x4c/0x5c [ 128.067596][T11351] el0_svc+0x64/0x260 [ 128.067608][T11351] el0t_64_sync_handler+0x44/0x104 [ 128.067618][T11351] el0t_64_sync+0x198/0x19c [ 128.069719][T11352] FAULT_INJECTION: forcing a failure. [ 128.069719][T11352] name fail_futex, interval 1, probability 0, space 0, times 0 [ 128.069736][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.7.2431 Tainted: G L syzkaller #0 PREEMPT [ 128.069748][T11352] Tainted: [L]=SOFTLOCKUP [ 128.069751][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 128.069756][T11352] Call trace: [ 128.069759][T11352] show_stack+0x2c/0x3c (C) [ 128.069774][T11352] __dump_stack+0x30/0x40 [ 128.069786][T11352] dump_stack_lvl+0xd8/0x12c [ 128.069798][T11352] dump_stack+0x1c/0x28 [ 128.069809][T11352] should_fail_ex+0x41c/0x590 [ 128.069817][T11352] should_fail+0x14/0x24 [ 128.069824][T11352] get_futex_key+0x1ec/0x12b0 [ 128.069834][T11352] futex_wake+0x10c/0x594 [ 128.069844][T11352] do_futex+0x2c4/0x378 [ 128.069854][T11352] __arm64_sys_futex+0x2e4/0x418 [ 128.069864][T11352] invoke_syscall+0x98/0x244 [ 128.069876][T11352] el0_svc_common+0xec/0x23c [ 128.069887][T11352] do_el0_svc+0x4c/0x5c [ 128.069899][T11352] el0_svc+0x64/0x260 [ 128.069909][T11352] el0t_64_sync_handler+0x44/0x104 [ 128.069919][T11352] el0t_64_sync+0x198/0x19c [ 128.118780][T11356] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2432'. [ 128.125940][T11348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 128.207073][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 128.231990][T11367] loop4: detected capacity change from 0 to 512 [ 128.237259][T11367] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.237357][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 128.237383][ T30] audit: type=1800 audit(387.198:1264): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 128.244396][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2439'. [ 128.249056][ T30] audit: type=1800 audit(387.208:1265): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 128.257392][ T30] audit: type=1800 audit(387.218:1266): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 128.261016][T11367] EXT4-fs (loop4): 1 truncate cleaned up [ 128.262625][T11367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.290837][ T30] audit: type=1800 audit(387.258:1267): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 128.308416][ T30] audit: type=1800 audit(387.268:1268): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 128.314868][T10775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.319689][T11375] loop9: detected capacity change from 0 to 512 [ 128.331666][ T30] audit: type=1800 audit(387.298:1269): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 128.346640][T11375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.358645][ T30] audit: type=1800 audit(387.318:1270): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 128.404141][ T9656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.423435][ T30] audit: type=1800 audit(387.388:1271): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 128.435400][ T30] audit: type=1800 audit(387.398:1272): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 128.451797][T11387] batadv_slave_0: entered promiscuous mode [ 128.453723][T11386] batadv_slave_0: left promiscuous mode [ 128.475967][T11390] loop3: detected capacity change from 0 to 8192 [ 128.485754][ T30] audit: type=1800 audit(387.448:1273): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 128.511243][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.585376][T11399] loop9: detected capacity change from 0 to 4096 [ 128.589406][T11399] EXT4-fs (loop9): Test dummy encryption mode enabled [ 128.593892][T11400] bond1: ARP target 9.0.0.0 is already present [ 128.594215][T11399] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.597264][T11400] bond1: option arp_ip_target: invalid value (9) [ 128.605266][T11400] bond1 (unregistering): Released all slaves [ 128.671052][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.677331][ T9656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.760892][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.869322][T11427] loop9: detected capacity change from 0 to 512 [ 128.894885][T11427] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.909712][T11427] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2463: corrupted inode contents [ 128.926258][T11427] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #2: comm syz.9.2463: mark_inode_dirty error [ 128.928765][T11427] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2463: corrupted inode contents [ 128.933703][T11427] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.2463: mark_inode_dirty error [ 128.941851][T11435] loop4: detected capacity change from 0 to 256 [ 128.947386][T11427] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.2463: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 128.947386][T11427] [ 128.954528][T11427] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2463: corrupted inode contents [ 128.959362][T11427] EXT4-fs error (device loop9): ext4_append:88: inode #2: comm syz.9.2463: mark_inode_dirty error [ 128.962922][T11427] EXT4-fs error (device loop9) in ext4_append:100: Corrupt filesystem [ 128.975647][T11427] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2463: corrupted inode contents [ 128.981002][T11427] EXT4-fs error (device loop9): add_dirent_to_buf:2151: inode #2: comm syz.9.2463: mark_inode_dirty error [ 128.993540][T11439] loop3: detected capacity change from 0 to 512 [ 128.993885][T11439] EXT4-fs: Ignoring removed bh option [ 129.005885][T11439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.071994][ T9656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.098055][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.194890][T11457] loop4: detected capacity change from 0 to 512 [ 129.213346][T11457] EXT4-fs (loop4): Test dummy encryption mode enabled [ 129.213393][T11457] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.219202][T11457] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2475: bad orphan inode 131083 [ 129.219248][T11457] loop4: lost filesystem error report for type 5 error -117 [ 129.220033][T11457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.230396][T11457] EXT4-fs (loop4): shut down requested (2) [ 129.252107][T10775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.269713][T11466] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2479'. [ 129.275888][T11466] gretap0: entered promiscuous mode [ 129.296789][T11466] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2479'. [ 129.296932][T11466] 0ªî{X¹¦: renamed from gretap0 [ 129.299444][T11466] 0ªî{X¹¦: left promiscuous mode [ 129.299457][T11466] 0ªî{X¹¦: entered allmulticast mode [ 129.301801][T11466] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 129.710774][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.792267][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.073557][T11464] block nbd3: shutting down sockets [ 130.139003][T11528] ima: policy update failed [ 130.229997][T11542] loop7: detected capacity change from 0 to 1024 [ 130.230378][T11542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.243162][T11542] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 130.258971][T11546] EXT4-fs: Ignoring removed nobh option [ 130.286252][T11546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.352489][T11560] vhci_hcd vhci_hcd.0: failed to lookup sock [ 130.361782][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2520'. [ 130.369964][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.478609][T11572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.528582][T11578] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.557948][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.598721][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.752546][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.819088][T11611] EXT4-fs: Ignoring removed oldalloc option [ 130.874039][T11611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.908414][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.108246][T11642] EXT4-fs: inline encryption not supported [ 131.108713][T11642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.108740][T11642] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.109598][T11642] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 131.109642][T11642] System zones: 0-5 [ 131.110716][T11642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.142941][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.173790][T11645] xt_hashlimit: size too large, truncated to 1048576 [ 131.239885][T11650] syzkaller1: entered promiscuous mode [ 131.239931][T11650] syzkaller1: entered allmulticast mode [ 131.635256][T11689] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 131.790666][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.142940][T11722] syzkaller1: entered promiscuous mode [ 132.142980][T11722] syzkaller1: entered allmulticast mode [ 132.443721][T11734] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 132.572999][T11746] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 132.577075][T11746] overlayfs: conflicting lowerdir path [ 132.830972][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.831037][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.957921][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.959728][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.961933][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.963734][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.966430][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.971165][T11773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.057035][T11785] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2612'. [ 133.460865][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 133.461570][ T30] audit: type=1400 audit(392.428:1495): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8854 comm="kworker/u8:9" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 133.663898][ T30] audit: type=1400 audit(392.628:1496): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 133.870775][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.888245][ T30] audit: type=1800 audit(392.848:1497): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 134.360877][ T30] audit: type=1400 audit(393.328:1498): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 134.559850][ T30] audit: type=1400 audit(393.518:1499): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 134.911087][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.111078][ T30] audit: type=1400 audit(395.078:1500): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=4814 comm="kworker/0:4" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 136.351844][ T30] audit: type=1400 audit(395.318:1501): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 136.898653][ T4344] udevd[4344]: worker [8266] /devices/virtual/misc/uhid/0005:046D:B012.0002/hidraw/hidraw0 is taking a long time [ 138.030907][ T867] net_ratelimit: 3 callbacks suppressed [ 138.030945][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.110957][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.910946][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.070699][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.550866][ T30] audit: type=1400 audit(398.518:1502): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 140.032834][ T30] audit: type=1400 audit(398.998:1503): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 140.111127][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.150671][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.321075][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.200636][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.230723][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.270597][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.360581][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.310613][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.351192][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.432056][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.433971][ T30] audit: type=1400 audit(405.398:1504): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=41 comm="pr/ttyAMA-1" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 147.203878][ T30] audit: type=1400 audit(406.168:1505): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 147.390629][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.391447][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.430601][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.470790][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.440604][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.510832][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.551898][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.552035][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.563537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.591051][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.630749][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.590644][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.670610][ T4810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.714767][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.750631][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.630635][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.790625][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.830906][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.871193][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.512953][ T30] audit: type=1400 audit(419.478:1506): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=36 comm="khugepaged" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 160.670609][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.910615][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.151354][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.535851][ T30] audit: type=1400 audit(420.498:1507): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 161.793899][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.810722][ T4361] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 161.810765][ T4361] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 161.810786][ T4361] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 161.852455][ T4361] nvme0n1: I/O Cmd(0x2) @ LBA 741936, 168 blocks, I/O Error (sct 0x3 / sc 0x71) [ 161.852491][ T4361] blk_print_req_error: 25 callbacks suppressed [ 161.852499][ T4361] I/O error, dev nvme0n1, sector 741936 op 0x0:(READ) flags 0x80700 phys_seg 21 prio class 2 [ 161.853080][ T4361] nvme0n1: I/O Cmd(0x2) @ LBA 80, 8 blocks, I/O Error (sct 0x3 / sc 0x71) [ 161.853095][ T4361] I/O error, dev nvme0n1, sector 80 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 161.853312][ T4361] nvme0n1: I/O Cmd(0x2) @ LBA 104, 16 blocks, I/O Error (sct 0x3 / sc 0x71) [ 161.853325][ T4361] I/O error, dev nvme0n1, sector 104 op 0x0:(READ) flags 0x880700 phys_seg 2 prio class 2 [ 161.853340][ T4361] nvme0n1: I/O Cmd(0x2) @ LBA 136, 48 blocks, I/O Error (sct 0x3 / sc 0x71) [ 161.853350][ T4361] I/O error, dev nvme0n1, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 2 [ 161.853386][ T4361] nvme0n1: I/O Cmd(0x2) @ LBA 200, 120 blocks, I/O Error (sct 0x3 / sc 0x71) [ 161.853396][ T4361] I/O error, dev nvme0n1, sector 200 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 2 [ 161.853423][ T4361] nvme0n1: I/O Cmd(0x2) @ LBA 328, 248 blocks, I/O Error (sct 0x3 / sc 0x71) [ 161.853433][ T4361] I/O error, dev nvme0n1, sector 328 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 161.891579][ T8854] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 161.903813][ T8854] nvme nvme0: Disabling device after reset failure: -19 [ 161. ** replaying previous printk message ** [ 161.930581][ T8854] Unable to handle kernel paging request at virtual address dfff800000000031 [ 161.930607][ T8854] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 161.930616][ T8854] Mem abort info: [ 161.930621][ T8854] ESR = 0x0000000096000005 [ 161.930627][ T8854] EC = 0x25: DABT (current EL), IL = 32 bits [ 161.930635][ T8854] SET = 0, FnV = 0 [ 161.930641][ T8854] EA = 0, S1PTW = 0 [ 161.930646][ T8854] FSC = 0x05: level 1 translation fault [ 161.930651][ T8854] Data abort info: [ 161.930654][ T8854] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 161.930659][ T8854] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 161.930664][ T8854] GCS = 0, Overlay = 0, DirtyBit = 0 [ 161.930669][ T8854] [dfff800000000031] address between user and kernel address ranges [ 161.930757][ T8854] Internal error: Oops: 0000000096000005 [#1] SMP [ 161.933589][ T30] audit: type=1400 audit(420.898:1508): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.151 dest=37994 netif=enp0s0 [ 161.948075][ T8854] Modules linked in: [ 161.948729][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT [ 161.950574][ T8854] Tainted: [L]=SOFTLOCKUP [ 161.951334][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 161.953057][ T8854] Workqueue: nvme-reset-wq nvme_reset_work [ 161.953985][ T8854] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 161.955317][ T8854] pc : blk_mq_complete_request_remote+0xc4/0x858 [ 161.956404][ T8854] lr : blk_mq_complete_request_remote+0x88/0x858 [ 161.957428][ T8854] sp : ffff80009a957900 [ 161.958116][ T8854] x29: ffff80009a957980 x28: ffff80009a957900 x27: dfff800000000000 [ 161.959472][ T8854] x26: 0000000000000000 x25: ffff0000c91273ea x24: dfff800000000000 [ 161.960881][ T8854] x23: ffff70001352af20 x22: 1fffe0001926c424 x21: 1fffe00019224e78 [ 161.962197][ T8854] x20: 000000000000018e x19: ffff0000c9362000 x18: 1fffe00034bbbe28 [ 161.963608][ T8854] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 [ 161.965032][ T8854] x14: ffff0001a5ddf14c x13: 0000000000000001 x12: 0000000000000004 [ 161.966453][ T8854] x11: ffff70001352af3c x10: ffff8000884bb5d7 x9 : 1fffe0001926c402 [ 161.967826][ T8854] x8 : 0000000000000031 x7 : ffff80008281b4e0 x6 : 0000000000000000 [ 161.969267][ T8854] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008281f228 [ 161.970732][ T8854] x2 : 0000000000000000 x1 : ffff0000c7500000 x0 : 0000000000000000 [ 161.972139][ T8854] Call trace: [ 161.972674][ T8854] blk_mq_complete_request_remote+0xc4/0x858 (P) [ 161.973764][ T8854] nvme_poll_cq+0x4ec/0x106c [ 161.974576][ T8854] nvme_dev_disable+0x384/0x540 [ 161.975402][ T8854] nvme_reset_work+0x510/0x69c [ 161.976202][ T8854] process_scheduled_works+0x788/0x10b8 [ 161.977162][ T8854] worker_thread+0x798/0xbd0 [ 161.977983][ T8854] kthread+0x304/0x3d4 [ 161.978682][ T8854] ret_from_fork+0x10/0x20 [ 161.979436][ T8854] Code: 97d02797 f9400288 91063914 d343fe88 (38f86908) [ 161.980610][ T8854] ---[ end trace 0000000000000000 ]--- [ 162.225059][ T8854] Kernel panic - not syncing: Oops: Fatal exception [ 162.226244][ T8854] SMP: stopping secondary CPUs [ 162.227104][ T8854] Kernel Offset: disabled [ 162.227819][ T8854] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 162.228970][ T8854] Memory Limit: none [ 162.479910][ T8854] Rebooting in 86400 seconds..