last executing test programs:

6.33994559s ago: executing program 2 (id=924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) (async)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x100000)
bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00')
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000002b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000700)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0xaae, 0x9, 0x6af4fae4}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40881}, 0x4c015) (async)
read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020)
write$binfmt_script(r2, &(0x7f0000002980)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '{%]@\x84@'}], 0xa, "874f02886477addb72ec41edf8604ae13c9153706a0e0c1d462db180b6d58386e34579ad20ca10bb1a9fdbff4c7d47dccdda671fd23ed2d83ca7e84f4e47d92c93cd0ba5652fb0ffbb7e1935a64aba556118a81be3b47ba922928c58cea03394c2d02111fffb59c40017e3cc2732f60a8e592a246db8746144ee180f1ce4b18149325a12436c8fa0c04644dbf9fc8bc566d18c1541b0a8b3a0e90ff0f9f2e8d63d60e711f48714ebb98a6c59f71db2cf4d99105c6f6b3b1d3b"}, 0x130) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000100000061180000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r5)
sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x134, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1be00000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5a8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2a0}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xa83}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x939d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./file0\x00', 0xe) (async)
syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000002bc0)='./bus\x00', &(0x7f0000002c00), 0x8, &(0x7f0000002c40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x200)
chdir(&(0x7f0000002cc0)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000002d00)='./file2\x00', 0x81c0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.224004276s ago: executing program 2 (id=926):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="5f476cf53f84ffffffffffff0806000108000604000201000080000000000001aaaaaaaaaaaaac"], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000500)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x80080, 0x32)
close_range(r5, 0xffffffffffffffff, 0x0)
io_setup(0x5, &(0x7f0000000000))
syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0)

5.535651249s ago: executing program 0 (id=927):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000180))
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a882, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14)
openat$nullb(0xffffffffffffff9c, 0x0, 0x10042, 0x0)
unshare(0x2040400)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r6, &(0x7f0000000600)={&(0x7f0000000640)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000040000000000000010"], 0x20}, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vlan0\x00'})
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={<r8=>0x0}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000004c0)={r8, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000580)=0x84)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xaa3a6000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000340)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000003c0)=0x16, 0x4)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)=0xffffffff80000000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xe0}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5060}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

5.432249785s ago: executing program 0 (id=929):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000740)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x1, 0xe3b, 0x0)

5.323914426s ago: executing program 4 (id=933):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xf0a02, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = syz_create_resource$futex(&(0x7f0000000000)=0x2)
futex$unlock_wake_list64(r2, 0xb, 0xfffffff7, 0x0, &(0x7f0000000140)=0x80, 0x9)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x2b})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TCFLSH(r0, 0x541b, 0x2)

5.322984697s ago: executing program 4 (id=935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xe, 0x492f, 0x7f, 0x101, 0x1}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00')
lseek(r4, 0x1000000, 0x0)
socket$kcm(0x21, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r5}, 0x38)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000000)={0x7})
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c000680140004000000000000000000000000000000000114000500200100"], 0xc0}}, 0x0)

4.104413685s ago: executing program 0 (id=938):
syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000001a40)='./bus\x00', 0x21081e, &(0x7f0000001a80)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000001ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==")
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002000)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf4, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x7, 0x9, 0xa39, 0xd86, 0x574})
mkdirat(0xffffffffffffff9c, &(0x7f0000002080)='./security\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000020c0)='securityfs\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000002140)='\x00', 0x2810000, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000002380)="$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")
syz_mount_image$ext4(&(0x7f0000002640)='ext2\x00', &(0x7f0000002680)='./file1\x00', 0x3004006, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@abort}, {@user_xattr}, {@jqfmt_vfsv0}, {@errors_remount}, {@debug}, {@nouid32}, {@debug}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}], [{@fowner_eq}]}, 0x1, 0x56d, &(0x7f0000002780)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ")
socket$pppoe(0x18, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002d00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002d40)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000002d80)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000002dc0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002e40)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000002ec0), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000002f00)=0x2)
recvmmsg(r1, &(0x7f0000002f40), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000002fc0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000003040), 0x27, 0x0, &(0x7f0000003080)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)

4.098298474s ago: executing program 4 (id=940):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000000c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
io_setup(0xe70, &(0x7f0000000100)=<r4=>0x0)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0)
io_submit(r4, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x5, r5, &(0x7f00000002c0)="00cc3d0fced003b77b039f16dfc2bf90b6993cd0241cb8388d3b5b129a9e262eef9e2a72af093ace284f9917dbb6dbc6050000004eeb22a0d1972e49b837b79bad", 0x41, 0x2000}])
write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'cpu'}, {0x2d, 'rdma'}]}, 0xb)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x1, 0x6, 0x8057}]}}]}, 0x60}}, 0x44010)

4.097337989s ago: executing program 2 (id=941):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008003e000500000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000640)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x22}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0xfd90, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close(0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6c, &(0x7f0000000300)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@llc={0x4, {@snap={0x1, 0x0, '2', "dab207", 0xdcae, "d217f33e17fddf17b23b34bc02ba63c0734ecc6984e1ab07faa731191e4c56d1f073c35a4c4f4a98fd186b0e00766c62eb34ab915c534d0334a7a568386374b131fc545c0c12cd1a7e673501f611bc703b3b"}}}}}, &(0x7f00000003c0)={0x1, 0x2, [0x5a8, 0x1c3, 0xd81, 0x148]})
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800718, &(0x7f00000004c0)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noquota}, {@test_dummy_encryption}, {@inlinecrypt}, {@errors_remount}, {@init_itable}, {@errors_continue}, {@quota}]}, 0x4, 0x4a4, &(0x7f0000000a00)="$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")

3.169264063s ago: executing program 2 (id=942):
ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1, 0x4, 0x7c)

3.167843966s ago: executing program 0 (id=943):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xd, 0x10, &(0x7f0000000e80)=ANY=[], &(0x7f0000000f00)='GPL\x00', 0x4, 0x1002, &(0x7f0000000f40)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

3.166568293s ago: executing program 4 (id=945):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './config\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002600)={<r1=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000001640)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000024c0)="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", 0x123}], 0x1}, 0x8c0)
syz_open_dev$usbfs(&(0x7f0000001740), 0x1ff, 0x1501)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001780)={0x7, &(0x7f0000000140)=[{0x5, 0x2, 0x1, 0x4}, {0x5, 0x8, 0x86, 0x6}, {0x9, 0x1, 0x83, 0x7}, {0x3, 0x2, 0x0, 0x8}, {0x7, 0x3, 0x10, 0x5}, {0x7, 0x0, 0x1, 0xb}, {0x2, 0x2, 0x5, 0x5}]})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000400)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000002800)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
close_range(r3, 0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000001e80)='./file2\x00', 0x81c0, 0x0)
r5 = syz_ublk_setup_io_uring(0x60f9, &(0x7f0000000580)={0x0, 0x1b6c, 0x200, 0x8001, 0x804d}, &(0x7f00000020c0)=<r6=>0x0, &(0x7f0000002100)=<r7=>0x0, &(0x7f0000002140)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000002180)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000002200), 0x1, 0x40})
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000002240)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000022c0)=@new_dev={0x0, 0xa00, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0)
r9 = syz_io_uring_complete(r6, r7)
r10 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000080)={0x2e, 0x65, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@any_dev={0x3, 0xfb, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0xa2}}}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000001ec0)='./file2\x00', 0x0, 0x0, 0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="09000000650c0000fdffffffffffffff00000000ba5fc7d2cdaa6a72c9dccf4148a855962afcc265af6a518cc822ff061c47654907de575e9852e6c080b8f091eb1e3de5e76c367fd03a8b2446e4dab86f31c7fca5d24c74f2540e83274e76eb68df90de3f6167dd1c2babe413183879c5a9b429da42622f9bf543dc332fe395d98516e4f8d9cb360e110760f123c8306f6942642a5bf1016e0797ca7fe88b1693bb89a9b592bb3dce519aae18a1bce11964e08ad14ba31a9b", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRESDEC=r10, @ANYBLOB='\x00'/28], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x3, &(0x7f0000001800)=ANY=[@ANYBLOB="180000000000000000000000fc000000000000b534e024c062664e4f03ae3e386335f748783094c40e6c397b5ba590e44fe92f22ce6c7f4752f0fef11f65a68e9291820cd87e61ba756f12e3cc1ca3fafe7298e4af0dec523ed1d1943570d3bcffdfc20a59d01523627ccc09532ba9f34780ce9a5501b824f936eb56299f8d1cb41e14b2e93d4cfbbed0e567c9a3977031057281b936363dec5ce2cee4cb8520d82ce5d82e7361c119eebc9c59900726509479c2f99c593bc9cac892143e1febb2381401afed1eae75aa56180ea5b63efb669518f2bbfab5cae28e3fd92787b0399c234111d53b85e7ab9b703211d9b4ebd894bbb36996d519ddb5b67e14baec12716dff1bf9930e9a48adac99a75ffe"], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r12, 0x0, 0xe, 0x0, &(0x7f0000001bc0)='\x00'/14, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
lsetxattr$security_smack_transmute(&(0x7f0000000300)='./config\x00', &(0x7f0000000340), &(0x7f0000000380), 0x4, 0x3)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'ip_vti0\x00'})
prctl$PR_PAC_RESET_KEYS(0x36, 0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r11, &(0x7f0000001d40)="439238d1aee1b9d24bf6dbf49a21d6731c46db4b8ac8eb8efcd3faf9ea532ce84a33d52eea41c03921271f80f90e720f6aa3df6f2043a55dc9d082766bd15c89a2b6359871c9c25b5d9015cc45d22ac7b1defe54af313d5076409dc79d5e712153931e293c978bf2fd926d4d12151fb19423c5b246e7456805aa12c075fbee937fad00f0ea8fee472af5a2aed4086320f2b8654798b184d9be42b71f63599091d9a6da2ed375b685fbcaf7afa6e59db4a1ac149ea24e1add3f354c6a929462540420876eea1831ec53df60b2845fe08a4a5bf7d603090a953d30916f597c", &(0x7f0000001f40)=""/153}, 0x20)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000600)={r1, 0xfffffffffffffe01})

3.150724285s ago: executing program 3 (id=946):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004b00)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900b80006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)

3.088497754s ago: executing program 3 (id=947):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000880)='/sys/power/resume', 0x1c9a82, 0x0)
sendfile(r1, r1, 0x0, 0x81)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000014007000fcdbdf250200220000000000", @ANYRES32=r4, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001000000000008000a0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0)
sendto$inet6(r2, &(0x7f0000000840)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000008f800000000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000ca009500000000000000dd09000000000000bf91000000000000b702000003000000850000002a800000b70000000000000095"], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x3, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

3.027707056s ago: executing program 0 (id=948):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@data_journal}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00'/11], 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0x181081a, &(0x7f00000003c0)={[{@quota}, {@discard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001480)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=")
r1 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000001900)={0x17c04, r1, 0x3052, 0x973f, 0x81, 0x1})
r2 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000500)=0x1, 0x4)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000540))
r4 = mq_open(&(0x7f0000000180)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f00000001c0)={0x0, 0x1, 0xec})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001"], 0x68}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000)
read$FUSE(r5, &(0x7f0000003e00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
setpgid(0x0, r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dbg\x00', 0x0)
mount(0x0, &(0x7f00000005c0)='./dbg\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0)
write$sysctl(r7, &(0x7f0000001980)='0\x00', 0x2)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0xc, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000c40)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x42, 0x0)
pwrite64(r8, &(0x7f0000001440)='!', 0x1, 0x2cf2)
read$FUSE(r8, &(0x7f0000001d80)={0x2020}, 0xfdd1)
write$binfmt_script(r8, &(0x7f0000003dc0)={'#! ', './bus'}, 0xfffffffffffffe9d)
r9 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r9, 0xc02064a5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0})

3.012342147s ago: executing program 4 (id=949):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x1000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f00000004c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000640), 0xb5, 0x10, &(0x7f0000000680), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
getpid()

2.148141661s ago: executing program 3 (id=950):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x52e6, 0x4e38, 0xd8, &(0x7f0000000700)={[0x10]}, 0x8)
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000740)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x1, 0xe3b, 0x0)

1.979950204s ago: executing program 1 (id=951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xe, 0x492f, 0x7f, 0x101, 0x1}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00')
socket$kcm(0x21, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r3}, 0x38)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x7})
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c000680140004000000000000000000000000000000000114000500200100"], 0xc0}}, 0x0)

1.979481659s ago: executing program 2 (id=952):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x113080)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xc9, 0x20000000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000007b40)={0xd5, 0xfffffffffffffffc}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000007b80)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000007bc0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007c00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000007c40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000007cc0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000007d00), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000007d40)=0x6)
r4 = landlock_create_ruleset(&(0x7f0000007d80)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000007dc0)={0x1, 0x2}, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000007e00)={0x2}, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000007e40)={0xa, 0x4e22}, 0x1c)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
setuid(0xee01)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)

1.903890607s ago: executing program 0 (id=953):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xe228)
sched_setscheduler(r0, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008003e000500000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000640)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x22}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0xfd90, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close(0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6c, &(0x7f0000000300)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@llc={0x4, {@snap={0x1, 0x0, '2', "dab207", 0xdcae, "d217f33e17fddf17b23b34bc02ba63c0734ecc6984e1ab07faa731191e4c56d1f073c35a4c4f4a98fd186b0e00766c62eb34ab915c534d0334a7a568386374b131fc545c0c12cd1a7e673501f611bc703b3b"}}}}}, &(0x7f00000003c0)={0x1, 0x2, [0x5a8, 0x1c3, 0xd81, 0x148]})
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800718, &(0x7f00000004c0)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noquota}, {@test_dummy_encryption}, {@inlinecrypt}, {@errors_remount}, {@init_itable}, {@errors_continue}, {@quota}]}, 0x4, 0x4a4, &(0x7f0000000a00)="$eJzs281rXFUbAPDn3mQm7duPpH37frRWjRYhKCZNWrULN0oLIhUFXdRlTKYldNpIE8XWYlMRV4IUdS0uRf8CdyKIuhLcunIlhaLdtHUVuTf3JpM0k4R8zNjO7wd35px7z809T879OHPOTAAdqz97SSJ2RsSvEdE7l11coH/u7fbNy2N3dl4eS2J29tU/krzcrZuXx8qi5X47isxAGpF+kBQHWWzq4qWzo/V67UKRH5o+9+bQ1MVLT759bvRM7Uzt/MixY0ePDD/z9MhTmxJnFtetA+9NHtz/wuvXXho7de2NH7/O6ruz2N4Yx2bpzwL/cza3dNtjm32wNtuVv/bkr0l3myvDmnVFRNZclfz6742uWGi83jjxflsrB2yp7NnU03zzzCxwH0tirSUrDfcM4N5XPuizz7/l0oJuxz/GjefmPgBlcd8ulrkt3ZEWZSrzn283X39EnJr56/NsiS0ahwAAaPTR2Gcnq9ET79756sWs79E7vyWN/+bvvy2aEeqLiD2fnIi9EfHviNgXEf+JyMv+LyL+v8H63N3/Sa9v8E+uKOv/PVvMbS3u/5W9v+jrKnK78vgryemJeu1wROyOiIGo9GT54RWO8e3xXz5utq2x/5ct2fHLvmBRj+vdSwboxkenR6OykagX3LgacaB7ufiT+ZmArPX3R8SB+b3WNMGzu0xMPP7lwWaFVo+/ib61VmNls19k4c1k8c/EkvhLSeP85MRd85ND26JeOzxUnhV3++nnD19pdvx1x79JbtTm3hvaf2mRvqRxvnZqc4+/zvM/rSav5fPM1WLO8Z3R6ekLwxHV5GSerxZl8/UjC/uW+bJ8dv4PHFr++t9b7JPF/0BEZCfxgxHxUEQ8XNT9kYh4NCIOrRDjD8+vHn+kbWr/qxHjy97/5s//Je1/8dLZ8ta4sGbFRNfZ779pdvy1tf/RPDVQrMnvf6tYrjrdy1R5vf83AAAAuJek+Xfgk3RwPp2mg4Nz3+HfF/9K65NT00+cnnzr/Pjcd+X7opKWI129xXhofaJeG05mir9YSY5HvTZSDNGV46VHImJPRHzatT3PD45N1sfbHDt0uh1Nrv/M713N99vWshoCW2j7smtHqi2vCNAGS+fR08XZKy+HmwHcr/xeGzrXKtd/2qp6AK3n+Q+da7nr/8qS/ApzAcA9zPMfOld5/Rvlhw6TftfuGgBtpP8PHWnVH+/niaTJL+q3LLGtcU115cLVVlasFYk1NsoGEj3r3z2iTKRt/0dJbGGi3XcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzfF3AAAA///N+te0")

1.271494275s ago: executing program 4 (id=954):
syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000001a40)='./bus\x00', 0x21081e, &(0x7f0000001a80)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000001ac0)="$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")
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002000)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf4, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x7, 0x9, 0xa39, 0xd86, 0x574})
mkdirat(0xffffffffffffff9c, &(0x7f0000002080)='./security\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000020c0)='securityfs\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000002140)='\x00', 0x2810000, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000002380)="$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")
syz_mount_image$ext4(&(0x7f0000002640)='ext2\x00', &(0x7f0000002680)='./file1\x00', 0x3004006, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@abort}, {@user_xattr}, {@jqfmt_vfsv0}, {@errors_remount}, {@debug}, {@nouid32}, {@debug}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}], [{@fowner_eq}]}, 0x1, 0x56d, &(0x7f0000002780)="$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")
socket$pppoe(0x18, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002d00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002d40)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000002d80)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000002dc0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002e40)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000002ec0), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000002f00)=0x2)
recvmmsg(r1, &(0x7f0000002f40), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000002fc0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000003040), 0x27, 0x0, &(0x7f0000003080)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)

1.143875736s ago: executing program 3 (id=955):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0xffffff1f, 0xff7f0000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x88, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.105528256s ago: executing program 1 (id=956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000504f9fffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x4b30, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8000})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000308010400000000000000000200000105000300010000010900"/40], 0x28}, 0x1, 0x0, 0x0, 0x20041000}, 0x42090)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000440)=0x2010, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000800)='clear_refs\x00')
writev(r8, &(0x7f0000000840)=[{&(0x7f0000000880)='2', 0x1}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000007c0)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r10, 0x5607, 0x800000018)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)

1.103087535s ago: executing program 2 (id=957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd0100000000001450000060000000002806"], 0xfdef)

916.613014ms ago: executing program 3 (id=958):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40)

788.147225ms ago: executing program 1 (id=959):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003580)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000003780)=ANY=[@ANYBLOB="4800000010000104000000000200000000000100", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x800)

779.070755ms ago: executing program 3 (id=960):
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x301, 0x20}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@generic={0x63, 0x1, 0x0, 0xe}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x100)
ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000280)={r0, 0xfffffffe})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$l2tp(r2, 0x0, &(0x7f0000000300))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r3 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @private0, 0x4}, 0x1c)
setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000580)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000005c0)=0x2, 0x4)
socket$kcm(0x2, 0xa, 0x2)

729.178528ms ago: executing program 1 (id=961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x209, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', 0x0})

259.419289ms ago: executing program 1 (id=962):
ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1, 0x4, 0x7c)

0s ago: executing program 1 (id=963):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000001c0), 0x80002c1, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat(r2, &(0x7f0000000340)='./file1\x00', 0xe01c2, 0x0)
write(r5, &(0x7f00000001c0)='3', 0x1)
write$binfmt_misc(r5, &(0x7f0000000240)="6336fcc59a0e2e5be7b58747e6", 0xd)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0xffffffffffffffff, 0x38)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x2008400, &(0x7f0000000300)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000900)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x10042, 0x0)
pread64(r6, 0x0, 0xfffffd64, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000200)={0x4, 0xfffffffc, 0x11, 0x20, 0x100, &(0x7f0000000500)="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"})
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0796050c"], 0xa)
readv(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

4)
[   77.332628][ T5818] netlink: 92 bytes leftover after parsing attributes in process `syz.1.249'.
[   77.626355][ T5824] netlink: 92 bytes leftover after parsing attributes in process `syz.0.250'.
[   78.212784][ T5837] netlink: 92 bytes leftover after parsing attributes in process `syz.2.255'.
[   78.352707][ T5843] IPv6: addrconf: prefix option has invalid lifetime
[   78.877528][ T5862] loop3: detected capacity change from 0 to 512
[   78.936835][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   78.951894][ T5862] EXT4-fs (loop3): shut down requested (0)
[   79.048266][ T5869] netlink: 92 bytes leftover after parsing attributes in process `syz.2.266'.
[   79.098881][ T4711] Bluetooth: hci5: command 0x1003 tx timeout
[   79.099178][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   79.341832][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   79.342579][ T5874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   79.342596][ T5874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   79.344726][ T5874] vhci_hcd vhci_hcd.0: Device attached
[   79.412558][ T5879] netlink: 92 bytes leftover after parsing attributes in process `syz.4.268'.
[   79.576247][ T5874] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[   79.576271][ T5874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   79.578829][ T5874] vhci_hcd vhci_hcd.0: Device attached
[   79.592546][ T5880] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[   79.592567][ T5880] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   79.592617][ T5880] vhci_hcd vhci_hcd.0: Device attached
[   79.594630][ T5874] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14)
[   79.594644][ T5874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   79.594705][ T5874] vhci_hcd vhci_hcd.0: Device attached
[   79.601558][   T24] usb 4-1: new high-speed USB device number 2 using vhci_hcd
[   79.614415][ T5883] vhci_hcd: connection closed
[   79.614858][ T5885] vhci_hcd: connection closed
[   79.615294][ T5877] vhci_hcd: connection closed
[   79.615410][ T5875] vhci_hcd: connection reset by peer
[   79.615934][ T5888] loop3: detected capacity change from 0 to 4096
[   79.618021][ T5565] vhci_hcd vhci_hcd.1: stop threads
[   79.625645][ T5888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.625672][ T5888] EXT4-fs (loop3): Test dummy encryption mode enabled
[   79.631241][ T5565] vhci_hcd vhci_hcd.1: release socket
[   79.632812][ T5888] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   79.632847][ T5888] System zones: 0-5
[   79.633719][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.634062][ T5565] vhci_hcd vhci_hcd.1: disconnect device
[   79.634625][ T5565] vhci_hcd vhci_hcd.1: stop threads
[   79.634638][ T5565] vhci_hcd vhci_hcd.1: release socket
[   79.634705][ T5565] vhci_hcd vhci_hcd.1: disconnect device
[   79.634859][ T5565] vhci_hcd vhci_hcd.1: stop threads
[   79.634866][ T5565] vhci_hcd vhci_hcd.1: release socket
[   79.635057][ T5565] vhci_hcd vhci_hcd.1: disconnect device
[   79.635255][ T5565] vhci_hcd vhci_hcd.1: stop threads
[   79.635265][ T5565] vhci_hcd vhci_hcd.1: release socket
[   79.635641][ T5565] vhci_hcd vhci_hcd.1: disconnect device
[   79.667046][ T5888] fscrypt: AES-256-XTS using blk-crypto-fallback
[   79.671730][ T5891] loop0: detected capacity change from 0 to 256
[   79.694628][ T5888] bone0: Unable to set down delay as MII monitoring is disabled
[   79.696917][ T5888] bone0 (unregistering): Released all slaves
[   79.792111][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.883619][ T1187] Bluetooth: hci5: Frame reassembly failed (-84)
[   80.109585][ T5909] loop3: detected capacity change from 0 to 512
[   80.406030][ T5909] EXT4-fs (loop3): Test dummy encryption mode enabled
[   80.448428][ T5909] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.275: EA inode 11 has unexpected i_nlink=2 ref_count=1
[   80.448504][ T5909] loop3: lost filesystem error report for type 5 error -117
[   80.452197][ T5909] EXT4-fs (loop3): 1 orphan inode deleted
[   80.456678][ T5909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.836378][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.982423][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.285'.
[   81.014100][ T5928] TC_ACT_REPEAT abuse ?
[   81.266916][ T5931] netlink: 92 bytes leftover after parsing attributes in process `syz.3.284'.
[   81.394800][ T5936] loop2: detected capacity change from 0 to 8
[   81.893270][ T5943] netlink: 92 bytes leftover after parsing attributes in process `syz.4.290'.
[   81.948943][ T4710] Bluetooth: hci5: command 0x1003 tx timeout
[   81.967764][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   82.091133][ T5946] Driver unsupported XDP return value 0 on prog  (id 85) dev N/A, expect packet loss!
[   82.097643][ T5946] capability: warning: `syz.1.291' uses deprecated v2 capabilities in a way that may be insecure
[   82.098487][   T30] audit: type=1400 audit(338.063:2): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=5945 comm="syz.1.291" name="64" dev="tmpfs" ino=358
[   82.098804][   T30] audit: type=1400 audit(338.063:3): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=5945 comm="syz.1.291" name="64" dev="tmpfs" ino=358
[   82.186772][ T5950] evm: overlay not supported
[   82.268994][ T5952] loop3: detected capacity change from 0 to 512
[   82.271092][ T5952] EXT4-fs (loop3): Test dummy encryption mode enabled
[   82.283500][ T5952] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.292: EA inode 11 has unexpected i_nlink=2 ref_count=1
[   82.283533][ T5952] loop3: lost filesystem error report for type 5 error -117
[   82.283763][ T5952] EXT4-fs (loop3): 1 orphan inode deleted
[   82.284211][ T5952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.412419][ T5960] FAULT_INJECTION: forcing a failure.
[   82.412419][ T5960] name failslab, interval 1, probability 0, space 0, times 0
[   82.412445][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.2.295 Not tainted syzkaller #0 PREEMPT 
[   82.412457][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   82.412462][ T5960] Call trace:
[   82.412465][ T5960]  show_stack+0x2c/0x3c (C)
[   82.412483][ T5960]  __dump_stack+0x30/0x40
[   82.412494][ T5960]  dump_stack_lvl+0xd8/0x12c
[   82.412510][ T5960]  dump_stack+0x1c/0x28
[   82.412519][ T5960]  should_fail_ex+0x418/0x58c
[   82.412532][ T5960]  should_failslab+0xc4/0x120
[   82.412545][ T5960]  __kmalloc_noprof+0x108/0x6c8
[   82.412553][ T5960]  tomoyo_encode2+0x10c/0x330
[   82.412563][ T5960]  tomoyo_encode+0x34/0x50
[   82.412572][ T5960]  tomoyo_mount_permission+0x5d0/0x7e4
[   82.412581][ T5960]  tomoyo_sb_mount+0x48/0x60
[   82.412590][ T5960]  security_sb_mount+0xfc/0x308
[   82.412598][ T5960]  path_mount+0xb8/0xa88
[   82.412608][ T5960]  do_mount+0xe8/0x148
[   82.412616][ T5960]  __arm64_sys_mount+0x33c/0x388
[   82.412626][ T5960]  invoke_syscall+0x98/0x244
[   82.412636][ T5960]  el0_svc_common+0xec/0x23c
[   82.412645][ T5960]  do_el0_svc+0x4c/0x5c
[   82.412654][ T5960]  el0_svc+0x60/0x1d8
[   82.412665][ T5960]  el0t_64_sync_handler+0x44/0x104
[   82.412675][ T5960]  el0t_64_sync+0x198/0x19c
[   82.581668][ T5966] loop2: detected capacity change from 0 to 4096
[   82.620215][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.285292][ T5984] netlink: 92 bytes leftover after parsing attributes in process `syz.1.303'.
[   83.753160][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.815766][ T5989] FAULT_INJECTION: forcing a failure.
[   83.815766][ T5989] name failslab, interval 1, probability 0, space 0, times 0
[   83.815791][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT 
[   83.815805][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   83.815811][ T5989] Call trace:
[   83.815815][ T5989]  show_stack+0x2c/0x3c (C)
[   83.815836][ T5989]  __dump_stack+0x30/0x40
[   83.815849][ T5989]  dump_stack_lvl+0xd8/0x12c
[   83.815862][ T5989]  dump_stack+0x1c/0x28
[   83.815875][ T5989]  should_fail_ex+0x418/0x58c
[   83.815889][ T5989]  should_failslab+0xc4/0x120
[   83.815903][ T5989]  __kmalloc_cache_node_noprof+0x98/0x618
[   83.815915][ T5989]  sbitmap_queue_init_node+0x1ac/0x380
[   83.815928][ T5989]  kyber_alloc_sched_data+0x1cc/0x3cc
[   83.815941][ T5989]  blk_mq_alloc_sched_res+0xe4/0x1bc
[   83.815954][ T5989]  elevator_change+0x124/0x35c
[   83.815966][ T5989]  elv_iosched_store+0x2a8/0x3bc
[   83.815978][ T5989]  queue_attr_store+0x1c0/0x24c
[   83.815988][ T5989]  sysfs_kf_write+0xe0/0x108
[   83.816001][ T5989]  kernfs_fop_write_iter+0x260/0x3b8
[   83.816013][ T5989]  vfs_write+0x51c/0xa0c
[   83.816023][ T5989]  ksys_write+0x12c/0x228
[   83.816032][ T5989]  __arm64_sys_write+0x84/0x98
[   83.816041][ T5989]  invoke_syscall+0x98/0x244
[   83.816054][ T5989]  el0_svc_common+0xec/0x23c
[   83.816067][ T5989]  do_el0_svc+0x4c/0x5c
[   83.816079][ T5989]  el0_svc+0x60/0x1d8
[   83.816093][ T5989]  el0t_64_sync_handler+0x44/0x104
[   83.816106][ T5989]  el0t_64_sync+0x198/0x19c
[   83.985277][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.985903][ T5995] loop3: detected capacity change from 0 to 512
[   83.989031][ T5995] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.044250][ T5995] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.309: bad orphan inode 131083
[   84.044277][ T5995] loop3: lost filesystem error report for type 5 error -117
[   84.044842][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.050457][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'.
[   84.051058][ T5995] cgroup: name respecified
[   84.159979][ T6003] netlink: 92 bytes leftover after parsing attributes in process `syz.0.310'.
[   84.365825][ T5019] Bluetooth: hci5: Frame reassembly failed (-84)
[   84.366836][ T5019] Bluetooth: hci5: Frame reassembly failed (-84)
[   84.366872][ T5019] Bluetooth: hci5: Frame reassembly failed (-84)
[   84.366898][ T5019] Bluetooth: hci5: Frame reassembly failed (-84)
[   84.366922][ T5019] Bluetooth: hci5: Frame reassembly failed (-84)
[   84.423267][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.429257][ T5019] Bluetooth: hci6: Frame reassembly failed (-84)
[   84.859874][ T6016] loop3: detected capacity change from 0 to 512
[   85.083304][ T6016] EXT4-fs (loop3): Test dummy encryption mode enabled
[   85.141967][ T6016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.314: EA inode 11 has unexpected i_nlink=2 ref_count=1
[   85.142034][ T6016] loop3: lost filesystem error report for type 5 error -117
[   85.145124][ T6016] EXT4-fs (loop3): 1 orphan inode deleted
[   85.149725][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.328244][ T6019] loop4: detected capacity change from 0 to 8
[   85.367121][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.389007][   T24] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   85.487690][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'.
[   85.948737][ T6033] loop4: detected capacity change from 0 to 512
[   85.952880][ T6033] EXT4-fs (loop4): Test dummy encryption mode enabled
[   85.959387][ T6033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.318: EA inode 11 has unexpected i_nlink=2 ref_count=1
[   85.959413][ T6033] loop4: lost filesystem error report for type 5 error -117
[   85.959700][ T6033] EXT4-fs (loop4): 1 orphan inode deleted
[   85.960416][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.421926][  T122] IPVS: starting estimator thread 0...
[   86.427552][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   86.507798][ T4711] Bluetooth: hci6: command 0x1003 tx timeout
[   86.509667][ T4710] Bluetooth: hci6: Opcode 0x1003 failed: -110
[   86.727113][ T6048] IPVS: using max 46 ests per chain, 110400 per kthread
[   86.730143][ T6054] loop2: detected capacity change from 0 to 512
[   86.733479][ T6054] EXT4-fs: Ignoring removed nobh option
[   86.750565][ T6054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.753752][ T6054] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.325: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   87.248240][ T6065] loop0: detected capacity change from 0 to 2048
[   87.301801][ T6065] loop0: detected capacity change from 0 to 256
[   87.319024][ T6065] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   87.508957][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.331'.
[   87.598877][ T6072] loop0: detected capacity change from 0 to 512
[   87.611595][ T6072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   87.619755][ T6072] EXT4-fs (loop0): 1 truncate cleaned up
[   87.620236][ T6072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.634201][ T6072] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #2: block 13: comm syz.0.331: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   87.659831][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.705683][ T6085] Injecting memory failure for pfn 0x13bc86 at process virtual address 0x20001000
[   87.713739][ T6085] Memory failure: 0x13bc86: Sending SIGBUS to syz.4.336:6085 due to hardware memory corruption
[   87.713825][ T6085] Memory failure: 0x13bc86: recovery action for dirty LRU page: Recovered
[   87.731952][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.315589][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'.
[   88.333515][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.341'.
[   88.344195][ T5568] Bluetooth: hci5: Frame reassembly failed (-84)
[   88.365414][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.411910][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   88.411931][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.341'.
[   88.411942][ T6102] netlink: 9 bytes leftover after parsing attributes in process `syz.0.341'.
[   88.440476][ T6104] FAULT_INJECTION: forcing a failure.
[   88.440476][ T6104] name failslab, interval 1, probability 0, space 0, times 0
[   88.440498][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT 
[   88.440516][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   88.440523][ T6104] Call trace:
[   88.440527][ T6104]  show_stack+0x2c/0x3c (C)
[   88.440550][ T6104]  __dump_stack+0x30/0x40
[   88.440566][ T6104]  dump_stack_lvl+0xd8/0x12c
[   88.440578][ T6104]  dump_stack+0x1c/0x28
[   88.440589][ T6104]  should_fail_ex+0x418/0x58c
[   88.440605][ T6104]  should_failslab+0xc4/0x120
[   88.440619][ T6104]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[   88.440629][ T6104]  debugfs_alloc_inode+0x2c/0x3c
[   88.440639][ T6104]  alloc_inode+0x68/0x198
[   88.440650][ T6104]  new_inode+0x20/0x50
[   88.440661][ T6104]  debugfs_get_inode+0x20/0x7c
[   88.440669][ T6104]  debugfs_create_symlink+0x98/0x17c
[   88.440677][ T6104]  ref_tracker_dir_symlink+0x21c/0x39c
[   88.440689][ T6104]  net_ns_net_debugfs+0xa4/0x100
[   88.440701][ T6104]  net_ns_net_init+0x20/0x34
[   88.440712][ T6104]  ops_init+0x2cc/0x528
[   88.440723][ T6104]  setup_net+0x118/0x2fc
[   88.440733][ T6104]  copy_net_ns+0x454/0x698
[   88.440744][ T6104]  create_new_namespaces+0x304/0x50c
[   88.440755][ T6104]  unshare_nsproxy_namespaces+0x120/0x170
[   88.440766][ T6104]  ksys_unshare+0x438/0x6cc
[   88.440776][ T6104]  __arm64_sys_unshare+0x40/0x54
[   88.440785][ T6104]  invoke_syscall+0x98/0x244
[   88.440797][ T6104]  el0_svc_common+0xec/0x23c
[   88.440809][ T6104]  do_el0_svc+0x4c/0x5c
[   88.440820][ T6104]  el0_svc+0x60/0x1d8
[   88.440833][ T6104]  el0t_64_sync_handler+0x44/0x104
[   88.440845][ T6104]  el0t_64_sync+0x198/0x19c
[   88.440869][ T6104] debugfs: out of free dentries, can not create symlink 'netns-3e-4026533332-notrefcnt'
[   88.589942][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.590121][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.194589][ T6176] loop3: detected capacity change from 0 to 512
[   89.198821][ T6176] EXT4-fs: Ignoring removed nobh option
[   89.231524][ T6176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.240675][ T6176] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.353: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   89.829635][ T6218] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.356'.
[   89.834584][ T6218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.847164][ T6218] loop0: detected capacity change from 0 to 2048
[   89.869293][ T6218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.878052][ T6218] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   89.878890][ T6218] EXT4-fs (loop0): Remounting filesystem read-only
[   89.891876][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.034460][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.115863][ T6234] loop3: detected capacity change from 0 to 512
[   90.118318][ T6234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   90.133180][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.494060][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   90.526513][ T6242] netlink: 'syz.2.364': attribute type 1 has an invalid length.
[   90.601964][   T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   90.898170][ T6248] FAULT_INJECTION: forcing a failure.
[   90.898170][ T6248] name failslab, interval 1, probability 0, space 0, times 0
[   90.898192][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.2.366 Not tainted syzkaller #0 PREEMPT 
[   90.898206][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   90.898213][ T6248] Call trace:
[   90.898217][ T6248]  show_stack+0x2c/0x3c (C)
[   90.898236][ T6248]  __dump_stack+0x30/0x40
[   90.898246][ T6248]  dump_stack_lvl+0xd8/0x12c
[   90.898256][ T6248]  dump_stack+0x1c/0x28
[   90.898266][ T6248]  should_fail_ex+0x418/0x58c
[   90.898277][ T6248]  should_failslab+0xc4/0x120
[   90.898289][ T6248]  __kmalloc_cache_noprof+0x94/0x5fc
[   90.898297][ T6248]  vkms_plane_duplicate_state+0x94/0x114
[   90.898308][ T6248]  drm_atomic_get_plane_state+0x208/0x568
[   90.898316][ T6248]  drm_client_modeset_commit_atomic+0x194/0x6b8
[   90.898328][ T6248]  drm_client_modeset_commit_locked+0xd0/0x494
[   90.898338][ T6248]  drm_fb_helper_pan_display+0x1b0/0x788
[   90.898349][ T6248]  fb_pan_display+0x2e4/0x53c
[   90.898358][ T6248]  ud_update_start+0xcc/0x2c0
[   90.898367][ T6248]  fbcon_modechanged+0x458/0x698
[   90.898374][ T6248]  fbcon_set_all_vcs+0x3e8/0x430
[   90.898381][ T6248]  rotate_all_store+0x33c/0x428
[   90.898389][ T6248]  dev_attr_store+0x6c/0x90
[   90.898398][ T6248]  sysfs_kf_write+0xe0/0x108
[   90.898409][ T6248]  kernfs_fop_write_iter+0x260/0x3b8
[   90.898418][ T6248]  vfs_write+0x51c/0xa0c
[   90.898425][ T6248]  ksys_write+0x12c/0x228
[   90.898432][ T6248]  __arm64_sys_write+0x84/0x98
[   90.898438][ T6248]  invoke_syscall+0x98/0x244
[   90.898448][ T6248]  el0_svc_common+0xec/0x23c
[   90.898458][ T6248]  do_el0_svc+0x4c/0x5c
[   90.898467][ T6248]  el0_svc+0x60/0x1d8
[   90.898478][ T6248]  el0t_64_sync_handler+0x44/0x104
[   90.898488][ T6248]  el0t_64_sync+0x198/0x19c
[   91.082360][   T26] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[   91.088867][   T26] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[   91.088886][   T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64
[   91.090473][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.090490][   T26] usb 1-1: Product: syz
[   91.090500][   T26] usb 1-1: Manufacturer: syz
[   91.090513][   T26] usb 1-1: SerialNumber: syz
[   91.139804][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.158304][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'.
[   91.303774][   T26] usb 1-1: USB disconnect, device number 3
[   91.310442][ T4397] 8021q: adding VLAN 0 to HW filter on device macsec0
[   91.438548][ T6280] loop2: detected capacity change from 0 to 512
[   91.443413][ T6280] EXT4-fs: Ignoring removed nobh option
[   91.471507][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.480253][ T6280] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.369: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   91.651940][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'.
[   91.849952][   T30] audit: type=1326 audit(347.814:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c3788e8 code=0x7ffc0000
[   91.851041][   T30] audit: type=1326 audit(347.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c3788e8 code=0x7ffc0000
[   91.851473][   T30] audit: type=1326 audit(347.814:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.852659][   T30] audit: type=1326 audit(347.814:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.853836][   T30] audit: type=1326 audit(347.814:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.855064][   T30] audit: type=1326 audit(347.814:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.856300][   T30] audit: type=1326 audit(347.814:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.887364][   T30] audit: type=1326 audit(347.844:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.888444][ T6297] FAULT_INJECTION: forcing a failure.
[   91.888444][ T6297] name failslab, interval 1, probability 0, space 0, times 0
[   91.888466][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT 
[   91.888476][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   91.888481][ T6297] Call trace:
[   91.888484][ T6297]  show_stack+0x2c/0x3c (C)
[   91.888515][ T6297]  __dump_stack+0x30/0x40
[   91.888526][ T6297]  dump_stack_lvl+0xd8/0x12c
[   91.888536][ T6297]  dump_stack+0x1c/0x28
[   91.888546][ T6297]  should_fail_ex+0x418/0x58c
[   91.888557][ T6297]  should_failslab+0xc4/0x120
[   91.888569][ T6297]  __kmalloc_cache_noprof+0x94/0x5fc
[   91.888577][ T6297]  audit_log_d_path+0xc4/0x19c
[   91.888587][ T6297]  audit_log_d_path_exe+0x48/0x80
[   91.888596][ T6297]  audit_log_task+0x250/0x368
[   91.888603][ T6297]  audit_seccomp+0x74/0x14c
[   91.888610][ T6297]  __seccomp_filter+0xc88/0x1a7c
[   91.888619][ T6297]  __seccomp_permit_syscall+0xd8/0x27c
[   91.888628][ T6297]  syscall_trace_enter+0x2d4/0x6b4
[   91.888636][ T6297]  el0_svc_common+0x170/0x23c
[   91.888647][ T6297]  do_el0_svc+0x4c/0x5c
[   91.888656][ T6297]  el0_svc+0x60/0x1d8
[   91.888668][ T6297]  el0t_64_sync_handler+0x44/0x104
[   91.888678][ T6297]  el0t_64_sync+0x198/0x19c
[   91.889208][   T30] audit: type=1326 audit(347.854:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="<no_memory>" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   91.889233][   T30] audit: type=1326 audit(347.854:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9c35b7ac code=0x7ffc0000
[   92.114983][ T6307] netlink: 92 bytes leftover after parsing attributes in process `syz.3.374'.
[   92.330096][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.364271][ T5565] Bluetooth: hci5: Frame reassembly failed (-84)
[   92.397890][ T6311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'.
[   92.397962][ T6311] nbd: couldn't find device at index 134217728
[   92.400679][ T6311] binder: 6310:6311 ioctl 4018620d 0 returned -22
[   92.401012][ T6311] binder: 6310:6311 IncRefs 0 refcount change on invalid ref 0 ret -22
[   92.401462][ T6311] binder: 6310:6311 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   92.401475][ T6311] binder: 6310:6311 ioctl c0306201 20000540 returned -22
[   93.312573][ T6315] loop1: detected capacity change from 0 to 512
[   93.460321][ T6315] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.481509][ T6315] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.377: EA inode 11 has unexpected i_nlink=2 ref_count=1
[   93.481536][ T6315] loop1: lost filesystem error report for type 5 error -117
[   93.481825][ T6315] EXT4-fs (loop1): 1 orphan inode deleted
[   93.482273][ T6315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.895602][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.922289][ T6352] loop0: detected capacity change from 0 to 512
[   93.922626][ T6352] EXT4-fs: Ignoring removed nobh option
[   93.944664][ T6352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.963363][ T6352] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.386: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   94.426341][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   94.800532][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.853345][ T6377] loop0: detected capacity change from 0 to 512
[   94.854227][ T6377] EXT4-fs: Ignoring removed nobh option
[   94.875020][ T6377] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   94.875609][ T6377] EXT4-fs (loop0): Remounting filesystem read-only
[   94.876079][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   94.876090][    C0] EXT4-fs (loop0): initial error at time 350: ext4_mb_generate_buddy:1317
[   94.876102][    C0] EXT4-fs (loop0): last error at time 350: ext4_mb_generate_buddy:1317
[   94.876690][ T6377] EXT4-fs (loop0): 1 truncate cleaned up
[   94.877603][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.894045][ T6379] __nla_validate_parse: 1 callbacks suppressed
[   94.894062][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'.
[   95.564281][ T6398] netlink: 92 bytes leftover after parsing attributes in process `syz.2.392'.
[   96.603921][ T6341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.630879][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.705608][ T5565] Bluetooth: hci5: Frame reassembly failed (-84)
[   96.718255][ T6412] FAULT_INJECTION: forcing a failure.
[   96.718255][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.718325][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT 
[   96.718338][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   96.718344][ T6412] Call trace:
[   96.718347][ T6412]  show_stack+0x2c/0x3c (C)
[   96.718368][ T6412]  __dump_stack+0x30/0x40
[   96.718382][ T6412]  dump_stack_lvl+0xd8/0x12c
[   96.718394][ T6412]  dump_stack+0x1c/0x28
[   96.718406][ T6412]  should_fail_ex+0x418/0x58c
[   96.718422][ T6412]  should_fail+0x14/0x24
[   96.718433][ T6412]  should_fail_usercopy+0x20/0x30
[   96.718442][ T6412]  _inline_copy_from_user+0x38/0x164
[   96.718455][ T6412]  __arm64_sys_splice+0x22c/0x4ec
[   96.718467][ T6412]  invoke_syscall+0x98/0x244
[   96.718479][ T6412]  el0_svc_common+0xec/0x23c
[   96.718491][ T6412]  do_el0_svc+0x4c/0x5c
[   96.718508][ T6412]  el0_svc+0x60/0x1d8
[   96.718522][ T6412]  el0t_64_sync_handler+0x44/0x104
[   96.718535][ T6412]  el0t_64_sync+0x198/0x19c
[   96.771063][ T6416] loop1: detected capacity change from 0 to 512
[   96.771429][ T6416] EXT4-fs: Ignoring removed nobh option
[   96.828448][ T6416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.841647][ T6416] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 3: comm syz.1.402: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   97.896697][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   97.946709][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[   98.458080][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.525429][ T6446] syzkaller0: entered promiscuous mode
[   98.525449][ T6446] syzkaller0: entered allmulticast mode
[   98.658459][ T6452] loop1: detected capacity change from 0 to 512
[   98.664302][ T6452] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.411: iget: bad i_size value: 38620345925642
[   98.664387][ T6452] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   98.665598][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   98.665629][    C1] EXT4-fs (loop1): initial error at time 354: ext4_orphan_get:1403: inode 15
[   98.665653][    C1] EXT4-fs (loop1): last error at time 354: ext4_orphan_get:1403: inode 15
[   98.680523][ T6452] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.411: couldn't read orphan inode 15 (err -117)
[   98.680547][ T6452] loop1: lost filesystem error report for type 5 error -117
[   98.684517][ T6452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.703358][ T6452] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.411: bg 0: block 5: invalid block bitmap
[   98.712739][ T6452] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   98.712758][ T6452] EXT4-fs (loop1): This should not happen!! Data will be lost
[   98.712758][ T6452] 
[   98.712766][ T6452] EXT4-fs (loop1): Total free blocks count 0
[   98.712773][ T6452] EXT4-fs (loop1): Free/Dirty block details
[   98.712785][ T6452] EXT4-fs (loop1): free_blocks=0
[   98.712798][ T6452] EXT4-fs (loop1): dirty_blocks=2
[   98.712804][ T6452] EXT4-fs (loop1): Block reservation details
[   98.712810][ T6452] EXT4-fs (loop1): i_reserved_data_blocks=2
[   98.738125][ T6454] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9)
[   98.745739][ T4711] Bluetooth: hci5: command 0x1003 tx timeout
[   98.745805][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   98.764889][   T14] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[   98.838203][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'.
[   98.840305][ T4828] kernel read not supported for file /kmsg (pid: 4828 comm: kworker/0:7)
[   98.843248][ T6466] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.867005][ T6461] proc: Unknown parameter 'nfs_export'
[   98.867937][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.414'.
[   98.868008][ T6461] sch_fq: defrate 0 ignored.
[   98.887465][ T6474] loop0: detected capacity change from 0 to 256
[   98.894848][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'.
[   98.917252][ T6474] xt_l2tp: v2 doesn't support IP mode
[   98.965689][ T6482] loop1: detected capacity change from 0 to 8192
[   98.972141][ T5019] Bluetooth: hci5: Frame reassembly failed (-84)
[   99.031804][ T6486] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[   99.031826][ T6486] FAT-fs (loop0): Filesystem has been set read-only
[   99.032211][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[   99.447746][ T6493] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   99.447771][ T6493] FAULT_INJECTION: forcing a failure.
[   99.447771][ T6493] name failslab, interval 1, probability 0, space 0, times 0
[   99.447784][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.2.426 Not tainted syzkaller #0 PREEMPT 
[   99.447794][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   99.447799][ T6493] Call trace:
[   99.447802][ T6493]  show_stack+0x2c/0x3c (C)
[   99.447821][ T6493]  __dump_stack+0x30/0x40
[   99.447832][ T6493]  dump_stack_lvl+0xd8/0x12c
[   99.447841][ T6493]  dump_stack+0x1c/0x28
[   99.447851][ T6493]  should_fail_ex+0x418/0x58c
[   99.447863][ T6493]  should_failslab+0xc4/0x120
[   99.447875][ T6493]  kmem_cache_alloc_noprof+0x94/0x5d4
[   99.447883][ T6493]  skb_clone+0x1ac/0x320
[   99.447895][ T6493]  __netlink_deliver_tap+0x364/0x6f4
[   99.447906][ T6493]  netlink_deliver_tap+0x1d8/0x1dc
[   99.447915][ T6493]  __netlink_sendskb+0x78/0xd0
[   99.447924][ T6493]  netlink_sendskb+0x2c/0xdc
[   99.447932][ T6493]  netlink_unicast+0x2c0/0x7f8
[   99.447941][ T6493]  netlink_ack+0x570/0x890
[   99.447950][ T6493]  netlink_rcv_skb+0x21c/0x414
[   99.447958][ T6493]  rtnetlink_rcv+0x28/0x38
[   99.447967][ T6493]  netlink_unicast+0x600/0x7f8
[   99.447976][ T6493]  netlink_sendmsg+0x648/0x948
[   99.447985][ T6493]  __sock_sendmsg+0xc8/0x17c
[   99.447994][ T6493]  ____sys_sendmsg+0x3d0/0x6c8
[   99.448005][ T6493]  ___sys_sendmsg+0x198/0x224
[   99.448014][ T6493]  __sys_sendmsg+0x158/0x204
[   99.448023][ T6493]  __arm64_sys_sendmsg+0x88/0x9c
[   99.448032][ T6493]  invoke_syscall+0x98/0x244
[   99.448043][ T6493]  el0_svc_common+0xec/0x23c
[   99.448052][ T6493]  do_el0_svc+0x4c/0x5c
[   99.448061][ T6493]  el0_svc+0x60/0x1d8
[   99.448073][ T6493]  el0t_64_sync_handler+0x44/0x104
[   99.448083][ T6493]  el0t_64_sync+0x198/0x19c
[   99.842043][ T6507] loop0: detected capacity change from 0 to 512
[   99.843770][ T6501] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   99.853604][ T6501] bond1: (slave lo): Enslaving as an active interface with an up link
[   99.856061][ T6507] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.432: attempt to clear invalid blocks 2 len 1
[   99.856080][ T6507] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.856612][ T6507] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[   99.857038][ T6507] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.432: invalid indirect mapped block 1819239214 (level 0)
[   99.857055][ T6507] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.857362][ T6507] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.432: invalid indirect mapped block 1819239214 (level 1)
[   99.857379][ T6507] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.858561][ T6507] EXT4-fs (loop0): 1 truncate cleaned up
[   99.859022][ T6507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.861177][ T6501] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   99.897751][ T6505] syzkaller1: entered promiscuous mode
[   99.897767][ T6505] syzkaller1: entered allmulticast mode
[   99.979146][ T6517] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  100.000784][ T6520] FAULT_INJECTION: forcing a failure.
[  100.000784][ T6520] name failslab, interval 1, probability 0, space 0, times 0
[  100.000804][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.3.437 Not tainted syzkaller #0 PREEMPT 
[  100.000813][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  100.000818][ T6520] Call trace:
[  100.000821][ T6520]  show_stack+0x2c/0x3c (C)
[  100.000838][ T6520]  __dump_stack+0x30/0x40
[  100.000849][ T6520]  dump_stack_lvl+0xd8/0x12c
[  100.000859][ T6520]  dump_stack+0x1c/0x28
[  100.000868][ T6520]  should_fail_ex+0x418/0x58c
[  100.000880][ T6520]  should_failslab+0xc4/0x120
[  100.000892][ T6520]  __kmalloc_noprof+0x108/0x6c8
[  100.000900][ T6520]  security_sk_alloc+0x60/0x35c
[  100.000914][ T6520]  sk_prot_alloc+0xe0/0x1e8
[  100.000923][ T6520]  sk_alloc+0x44/0x320
[  100.000930][ T6520]  x25_alloc_socket+0x3c/0x290
[  100.000945][ T6520]  x25_make_new+0x88/0x540
[  100.000955][ T6520]  x25_rx_call_request+0x398/0x96c
[  100.000965][ T6520]  x25_lapb_receive_frame+0x300/0xcf8
[  100.000972][ T6520]  __netif_receive_skb_one_core+0xc8/0x110
[  100.000982][ T6520]  __netif_receive_skb+0x34/0x128
[  100.000990][ T6520]  netif_receive_skb+0x1e0/0x888
[  100.000999][ T6520]  tun_rx_batched+0x180/0x620
[  100.001009][ T6520]  tun_get_user+0x2330/0x36d0
[  100.001017][ T6520]  tun_chr_write_iter+0xfc/0x168
[  100.001025][ T6520]  vfs_write+0x51c/0xa0c
[  100.001033][ T6520]  ksys_write+0x12c/0x228
[  100.001039][ T6520]  __arm64_sys_write+0x84/0x98
[  100.001046][ T6520]  invoke_syscall+0x98/0x244
[  100.001056][ T6520]  el0_svc_common+0xec/0x23c
[  100.001065][ T6520]  do_el0_svc+0x4c/0x5c
[  100.001075][ T6520]  el0_svc+0x60/0x1d8
[  100.001085][ T6520]  el0t_64_sync_handler+0x44/0x104
[  100.001096][ T6520]  el0t_64_sync+0x198/0x19c
[  100.104614][ T6530] netlink: 'syz.3.439': attribute type 3 has an invalid length.
[  100.176938][ T6532] netlink: 92 bytes leftover after parsing attributes in process `syz.1.438'.
[  100.410847][ T6544] FAULT_INJECTION: forcing a failure.
[  100.410847][ T6544] name failslab, interval 1, probability 0, space 0, times 0
[  100.410867][ T6544] CPU: 1 UID: 0 PID: 6544 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT 
[  100.410877][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  100.410883][ T6544] Call trace:
[  100.410886][ T6544]  show_stack+0x2c/0x3c (C)
[  100.410906][ T6544]  __dump_stack+0x30/0x40
[  100.410918][ T6544]  dump_stack_lvl+0xd8/0x12c
[  100.410930][ T6544]  dump_stack+0x1c/0x28
[  100.410941][ T6544]  should_fail_ex+0x418/0x58c
[  100.410954][ T6544]  should_failslab+0xc4/0x120
[  100.410970][ T6544]  __kmalloc_cache_noprof+0x94/0x5fc
[  100.410980][ T6544]  __arm64_sys_memfd_create+0x258/0x3ec
[  100.410991][ T6544]  invoke_syscall+0x98/0x244
[  100.411003][ T6544]  el0_svc_common+0xec/0x23c
[  100.411015][ T6544]  do_el0_svc+0x4c/0x5c
[  100.411027][ T6544]  el0_svc+0x60/0x1d8
[  100.411040][ T6544]  el0t_64_sync_handler+0x44/0x104
[  100.411052][ T6544]  el0t_64_sync+0x198/0x19c
[  100.569744][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'.
[  100.710373][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.884752][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  100.884765][   T30] audit: type=1326 audit(356.845:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.1.446" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d788e8 code=0x0
[  100.985555][ T4711] Bluetooth: hci5: command 0x1003 tx timeout
[  100.985625][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  101.029481][ T6587] loop4: detected capacity change from 0 to 128
[  101.036536][ T6587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  101.036568][ T6587] System zones: 1-3, 19-19, 35-36
[  101.039252][ T6587] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.070946][ T4706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.109914][ T6593] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  101.273967][ T6603] overlayfs: overlapping lowerdir path
[  101.597760][ T6614] netlink: 92 bytes leftover after parsing attributes in process `syz.3.455'.
[  101.790652][ T6616] loop0: detected capacity change from 0 to 128
[  101.800191][ T6616] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.866425][ T6626] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers
[  102.188796][ T6632] loop2: detected capacity change from 0 to 128
[  102.194358][ T6632] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  102.236091][ T6636] FAULT_INJECTION: forcing a failure.
[  102.236091][ T6636] name failslab, interval 1, probability 0, space 0, times 0
[  102.236114][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.2.464 Not tainted syzkaller #0 PREEMPT 
[  102.236125][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  102.236131][ T6636] Call trace:
[  102.236134][ T6636]  show_stack+0x2c/0x3c (C)
[  102.236153][ T6636]  __dump_stack+0x30/0x40
[  102.236164][ T6636]  dump_stack_lvl+0xd8/0x12c
[  102.236173][ T6636]  dump_stack+0x1c/0x28
[  102.236183][ T6636]  should_fail_ex+0x418/0x58c
[  102.236195][ T6636]  should_failslab+0xc4/0x120
[  102.236206][ T6636]  __kmalloc_cache_noprof+0x94/0x5fc
[  102.236214][ T6636]  __arm64_sys_memfd_create+0x258/0x3ec
[  102.236224][ T6636]  invoke_syscall+0x98/0x244
[  102.236234][ T6636]  el0_svc_common+0xec/0x23c
[  102.236244][ T6636]  do_el0_svc+0x4c/0x5c
[  102.236253][ T6636]  el0_svc+0x60/0x1d8
[  102.236264][ T6636]  el0t_64_sync_handler+0x44/0x104
[  102.236274][ T6636]  el0t_64_sync+0x198/0x19c
[  102.261760][ T6639] loop2: detected capacity change from 0 to 128
[  102.265729][ T6639] EXT4-fs (loop2): Test dummy encryption mode enabled
[  102.267335][ T6639] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.272109][ T6638] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  102.346651][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.528284][ T6649] process 'syz.2.467' launched './file1' with NULL argv: empty string added
[  102.549929][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'.
[  102.619614][ T6652] netlink: 92 bytes leftover after parsing attributes in process `syz.1.468'.
[  102.799224][ T6653] loop2: detected capacity change from 0 to 512
[  102.839798][ T6653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.846713][ T6653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.984363][ T4714] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  103.109393][ T6663] loop0: detected capacity change from 0 to 512
[  103.112412][ T4710] Bluetooth: Unexpected start frame (len 10)
[  103.112465][ T4710] Bluetooth: Unknown LE signaling command 0x03
[  103.112472][ T4710] Bluetooth: Wrong link type (-22)
[  103.123150][ T6667] FAULT_INJECTION: forcing a failure.
[  103.123150][ T6667] name failslab, interval 1, probability 0, space 0, times 0
[  103.123171][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT 
[  103.123180][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  103.123185][ T6667] Call trace:
[  103.123189][ T6667]  show_stack+0x2c/0x3c (C)
[  103.123209][ T6667]  __dump_stack+0x30/0x40
[  103.123219][ T6667]  dump_stack_lvl+0xd8/0x12c
[  103.123228][ T6667]  dump_stack+0x1c/0x28
[  103.123238][ T6667]  should_fail_ex+0x418/0x58c
[  103.123250][ T6667]  should_failslab+0xc4/0x120
[  103.123262][ T6667]  kmem_cache_alloc_noprof+0x94/0x5d4
[  103.123270][ T6667]  alloc_empty_file+0x6c/0x1cc
[  103.123278][ T6667]  path_openat+0x78/0x18f0
[  103.123287][ T6667]  do_file_open+0x1c8/0x2e8
[  103.123296][ T6667]  do_sys_openat2+0x114/0x1e8
[  103.123305][ T6667]  do_sys_open+0xb0/0xe0
[  103.123314][ T6667]  __arm64_sys_openat+0xa8/0xc4
[  103.123324][ T6667]  invoke_syscall+0x98/0x244
[  103.123334][ T6667]  el0_svc_common+0xec/0x23c
[  103.123343][ T6667]  do_el0_svc+0x4c/0x5c
[  103.123353][ T6667]  el0_svc+0x60/0x1d8
[  103.123365][ T6667]  el0t_64_sync_handler+0x44/0x104
[  103.123375][ T6667]  el0t_64_sync+0x198/0x19c
[  103.123576][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.124134][ T6663] EXT4-fs (loop0): Test dummy encryption mode enabled
[  103.124151][ T6663] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.124428][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.169351][ T6663] EXT4-fs error (device loop0): __ext4_fill_super:5621: inode #2: comm syz.0.471: iget: special inode unallocated
[  103.179535][ T6663] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  103.185045][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  103.185061][    C1] EXT4-fs (loop0): initial error at time 359: __ext4_fill_super:5621: inode 2
[  103.185076][    C1] EXT4-fs (loop0): last error at time 359: __ext4_fill_super:5621: inode 2
[  103.210981][ T6669] netlink: 92 bytes leftover after parsing attributes in process `syz.4.469'.
[  103.366318][ T6663] EXT4-fs (loop0): get root inode failed
[  103.366336][ T6663] EXT4-fs (loop0): mount failed
[  103.368126][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.372589][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.372768][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.372921][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.373046][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.390409][ T6667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  104.561865][ T6767] FAULT_INJECTION: forcing a failure.
[  104.561865][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.561887][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT 
[  104.561900][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  104.561907][ T6767] Call trace:
[  104.561911][ T6767]  show_stack+0x2c/0x3c (C)
[  104.561930][ T6767]  __dump_stack+0x30/0x40
[  104.561941][ T6767]  dump_stack_lvl+0xd8/0x12c
[  104.561951][ T6767]  dump_stack+0x1c/0x28
[  104.561961][ T6767]  should_fail_ex+0x418/0x58c
[  104.561973][ T6767]  should_fail+0x14/0x24
[  104.561982][ T6767]  should_fail_usercopy+0x20/0x30
[  104.561989][ T6767]  _inline_copy_from_user+0x3c/0x174
[  104.562001][ T6767]  move_addr_to_kernel+0x88/0x168
[  104.562009][ T6767]  __sys_bind+0x12c/0x268
[  104.562018][ T6767]  __arm64_sys_bind+0x84/0x9c
[  104.562027][ T6767]  invoke_syscall+0x98/0x244
[  104.562037][ T6767]  el0_svc_common+0xec/0x23c
[  104.562046][ T6767]  do_el0_svc+0x4c/0x5c
[  104.562055][ T6767]  el0_svc+0x60/0x1d8
[  104.562066][ T6767]  el0t_64_sync_handler+0x44/0x104
[  104.562076][ T6767]  el0t_64_sync+0x198/0x19c
[  104.567457][ T6763] syzkaller0: entered promiscuous mode
[  104.567470][ T6763] syzkaller0: entered allmulticast mode
[  104.990802][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'.
[  105.105751][ T6794] netlink: 92 bytes leftover after parsing attributes in process `syz.3.491'.
[  105.348263][ T6798] loop2: detected capacity change from 0 to 1024
[  105.358051][ T6798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.361254][ T6798] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  105.361425][ T6798] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.493: missing EA_INODE flag
[  105.362311][ T6798] EXT4-fs (loop2): Remounting filesystem read-only
[  105.380056][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.472121][ T6805] netlink: 92 bytes leftover after parsing attributes in process `syz.4.492'.
[  105.768043][ T6808] dlm: non-version read from control device 240
[  106.017230][ T6811] loop3: detected capacity change from 0 to 128
[  106.025690][ T6811] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  106.046145][ T6811] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.053723][ T6817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.053736][ T6817] IPv6: NLM_F_CREATE should be set when creating new route
[  106.060743][ T6811] overlayfs: upper fs needs to support d_type.
[  106.197686][ T4712] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  106.243659][ T1138] Bluetooth: hci5: Frame reassembly failed (-84)
[  106.243698][ T1138] Bluetooth: hci5: Frame reassembly failed (-84)
[  106.243724][ T1138] Bluetooth: hci5: Frame reassembly failed (-84)
[  106.243752][ T1138] Bluetooth: hci5: Frame reassembly failed (-84)
[  106.243775][ T1138] Bluetooth: hci5: Frame reassembly failed (-84)
[  106.452468][ T6843] netlink: 92 bytes leftover after parsing attributes in process `syz.1.506'.
[  107.563269][ T6891] loop2: detected capacity change from 0 to 4096
[  107.564120][ T6891] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.570981][ T6891] EXT4-fs (loop2): Test dummy encryption mode enabled
[  107.804471][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.841411][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.004380][ T6924] loop2: detected capacity change from 0 to 512
[  108.009218][ T6924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  108.022170][ T6924] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  108.022301][ T6924] EXT4-fs (loop2): orphan cleanup on readonly fs
[  108.031452][ T6924] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  108.031507][ T6924] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  108.031517][ T6924] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.529: Failed to acquire dquot type 1
[  108.031530][ T6924] loop2: lost filesystem error report for type 5 error -117
[  108.032488][ T6924] EXT4-fs (loop2): Remounting filesystem read-only
[  108.034439][ T6924] EXT4-fs (loop2): 1 truncate cleaned up
[  108.035182][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  108.035195][    C0] EXT4-fs (loop2): initial error at time 363: ext4_acquire_dquot:7069
[  108.035211][    C0] EXT4-fs (loop2): last error at time 363: ext4_acquire_dquot:7069
[  108.051606][ T6877] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  108.051622][ T6877] Quota error (device loop2): write_blk: dquota write failed
[  108.051629][ T6877] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  108.051636][ T6877] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  108.051644][ T6877] Quota error (device loop2): write_blk: dquota write failed
[  108.051650][ T6877] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  108.051675][ T6877] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  108.051682][ T6877] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  108.052588][ T6924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  108.067104][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.094426][ T6931] netlink: 'syz.2.531': attribute type 142 has an invalid length.
[  108.264618][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  108.359440][ T6948] FAULT_INJECTION: forcing a failure.
[  108.359440][ T6948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.359459][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.3.538 Not tainted syzkaller #0 PREEMPT 
[  108.359469][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  108.359474][ T6948] Call trace:
[  108.359477][ T6948]  show_stack+0x2c/0x3c (C)
[  108.359493][ T6948]  __dump_stack+0x30/0x40
[  108.359508][ T6948]  dump_stack_lvl+0xd8/0x12c
[  108.359518][ T6948]  dump_stack+0x1c/0x28
[  108.359528][ T6948]  should_fail_ex+0x418/0x58c
[  108.359542][ T6948]  should_fail+0x14/0x24
[  108.359553][ T6948]  should_fail_usercopy+0x20/0x30
[  108.359560][ T6948]  _inline_copy_from_user+0x3c/0x174
[  108.359571][ T6948]  copy_msghdr_from_user+0xb8/0x194
[  108.359581][ T6948]  ___sys_sendmsg+0x14c/0x224
[  108.359590][ T6948]  __sys_sendmsg+0x158/0x204
[  108.359599][ T6948]  __arm64_sys_sendmsg+0x88/0x9c
[  108.359608][ T6948]  invoke_syscall+0x98/0x244
[  108.359618][ T6948]  el0_svc_common+0xec/0x23c
[  108.359628][ T6948]  do_el0_svc+0x4c/0x5c
[  108.359637][ T6948]  el0_svc+0x60/0x1d8
[  108.359648][ T6948]  el0t_64_sync_handler+0x44/0x104
[  108.359658][ T6948]  el0t_64_sync+0x198/0x19c
[  108.485148][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'.
[  108.794528][ T6971] loop1: detected capacity change from 0 to 128
[  108.797463][ T6971] FAT-fs (loop1): bogus number of reserved sectors
[  108.797481][ T6971] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  108.797490][ T6971] FAT-fs (loop1): Can't find a valid FAT filesystem
[  108.831700][ T6975] syzkaller0: entered promiscuous mode
[  108.831718][ T6975] syzkaller0: entered allmulticast mode
[  109.001341][ T6984] loop2: detected capacity change from 0 to 512
[  109.001694][ T6984] EXT4-fs: Ignoring removed nobh option
[  109.115788][ T6988] netlink: 92 bytes leftover after parsing attributes in process `syz.1.550'.
[  109.299692][ T6984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.312183][ T6984] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.551: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  109.362095][ T6993] netlink: 64 bytes leftover after parsing attributes in process `syz.0.552'.
[  109.362401][ T6994] netlink: 64 bytes leftover after parsing attributes in process `syz.0.552'.
[  109.609457][ T7001] loop3: detected capacity change from 0 to 512
[  110.383518][ T7001] EXT4-fs (loop3): Test dummy encryption mode enabled
[  110.441069][ T7001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.553: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  110.441096][ T7001] loop3: lost filesystem error report for type 5 error -117
[  110.441479][ T7001] EXT4-fs (loop3): 1 orphan inode deleted
[  110.441970][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.518644][ T6998] random: crng reseeded on system resumption
[  110.525764][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.592074][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.652029][ T7015] Smack: duplicate mount options
[  110.652189][ T7015] pimreg: tun_chr_ioctl cmd 1074025681
[  110.933588][ T7019] netlink: 'syz.3.556': attribute type 57 has an invalid length.
[  110.968237][ T7022] can0: slcan on ttyS3.
[  111.086484][ T7021] can0 (unregistered): slcan off ttyS3.
[  111.172458][ T7038] netlink: 92 bytes leftover after parsing attributes in process `syz.0.560'.
[  111.673345][ T7045] netlink: 92 bytes leftover after parsing attributes in process `syz.4.562'.
[  111.941200][ T7077] netlink: 92 bytes leftover after parsing attributes in process `syz.3.567'.
[  112.302400][ T7085] FAULT_INJECTION: forcing a failure.
[  112.302400][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.302423][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.2.570 Not tainted syzkaller #0 PREEMPT 
[  112.302435][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  112.302441][ T7085] Call trace:
[  112.302444][ T7085]  show_stack+0x2c/0x3c (C)
[  112.302466][ T7085]  __dump_stack+0x30/0x40
[  112.302477][ T7085]  dump_stack_lvl+0xd8/0x12c
[  112.302486][ T7085]  dump_stack+0x1c/0x28
[  112.302496][ T7085]  should_fail_ex+0x418/0x58c
[  112.302513][ T7085]  should_fail+0x14/0x24
[  112.302522][ T7085]  should_fail_usercopy+0x20/0x30
[  112.302530][ T7085]  simple_read_from_buffer+0xc4/0x238
[  112.302540][ T7085]  proc_fail_nth_read+0x1a8/0x248
[  112.302551][ T7085]  vfs_read+0x230/0x8c8
[  112.302559][ T7085]  ksys_read+0x12c/0x228
[  112.302566][ T7085]  __arm64_sys_read+0x84/0x98
[  112.302574][ T7085]  invoke_syscall+0x98/0x244
[  112.302584][ T7085]  el0_svc_common+0xec/0x23c
[  112.302593][ T7085]  do_el0_svc+0x4c/0x5c
[  112.302603][ T7085]  el0_svc+0x60/0x1d8
[  112.302614][ T7085]  el0t_64_sync_handler+0x44/0x104
[  112.302624][ T7085]  el0t_64_sync+0x198/0x19c
[  112.382912][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'.
[  112.699512][ T7103] loop3: detected capacity change from 0 to 1024
[  112.771439][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.882608][ T7110] netlink: 92 bytes leftover after parsing attributes in process `syz.1.578'.
[  113.068571][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.196974][ T7127] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  113.308267][ T7135] ip_tables: iptables: counters copy to user failed while replacing table
[  113.380228][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'.
[  113.575300][ T7149] netlink: 92 bytes leftover after parsing attributes in process `syz.4.588'.
[  113.877659][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  113.877683][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  113.936325][ T7163] syzkaller0: entered promiscuous mode
[  113.936346][ T7163] syzkaller0: entered allmulticast mode
[  114.163452][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.167784][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.167994][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.168224][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.168382][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.168567][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.168707][ T7183] overlay: filesystem on ./file0 not supported as upperdir
[  114.168762][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169014][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169185][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169336][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169498][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169668][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169841][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.169990][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.170156][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.170304][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.170456][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.170613][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.170818][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.171110][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.172939][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.173127][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.173310][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.173461][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.173621][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.175075][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.187232][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.191725][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.195676][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.197446][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.198937][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.201142][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.203034][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.206097][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.206559][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.208291][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.211881][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.220882][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.242637][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.243102][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.243903][ T4711] Bluetooth: hci4: unexpected event for opcode 0x203d
[  114.244485][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.254687][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.255102][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.255336][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.256946][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.257122][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.257310][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.257480][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.257649][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.257807][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.259354][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.259576][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.259798][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.259973][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.260143][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.260314][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.262637][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.265457][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.273322][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.275484][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.281138][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.283371][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.286735][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.288387][ T7185] overlay: filesystem on ./file0 not supported as upperdir
[  114.325356][ T7191] loop2: detected capacity change from 0 to 2048
[  114.362416][ T7191]  loop2: p1 p4
[  114.362416][ T7191]  p1: <minix: p5 p6 >
[  114.363434][ T7191] loop2: partition table partially beyond EOD, truncated
[  114.372551][ T7191] loop2: p4 start 184549376 is beyond EOD, truncated
[  114.377189][ T7191] loop2: p6 start 184549376 is beyond EOD, truncated
[  115.127331][ T7213] FAULT_INJECTION: forcing a failure.
[  115.127331][ T7213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.127353][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT 
[  115.127365][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  115.127373][ T7213] Call trace:
[  115.127378][ T7213]  show_stack+0x2c/0x3c (C)
[  115.127399][ T7213]  __dump_stack+0x30/0x40
[  115.127410][ T7213]  dump_stack_lvl+0xd8/0x12c
[  115.127420][ T7213]  dump_stack+0x1c/0x28
[  115.127429][ T7213]  should_fail_ex+0x418/0x58c
[  115.127441][ T7213]  should_fail+0x14/0x24
[  115.127451][ T7213]  should_fail_usercopy+0x20/0x30
[  115.127458][ T7213]  _inline_copy_from_user+0x3c/0x188
[  115.127468][ T7213]  memdup_user+0x78/0xec
[  115.127475][ T7213]  strndup_user+0x78/0xe0
[  115.127482][ T7213]  __arm64_sys_mount+0x120/0x388
[  115.127492][ T7213]  invoke_syscall+0x98/0x244
[  115.127511][ T7213]  el0_svc_common+0xec/0x23c
[  115.127523][ T7213]  do_el0_svc+0x4c/0x5c
[  115.127533][ T7213]  el0_svc+0x60/0x1d8
[  115.127544][ T7213]  el0t_64_sync_handler+0x44/0x104
[  115.127554][ T7213]  el0t_64_sync+0x198/0x19c
[  115.356863][ T7223] loop4: detected capacity change from 0 to 512
[  115.357629][ T7223] EXT4-fs: Ignoring removed nobh option
[  115.367651][ T7223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.377941][ T7223] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.613: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  115.427451][ T7227] loop3: detected capacity change from 0 to 512
[  115.432148][ T7227] EXT4-fs (loop3): Test dummy encryption mode enabled
[  115.721839][ T7227] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.611: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  115.721863][ T7227] loop3: lost filesystem error report for type 5 error -117
[  115.722054][ T7227] EXT4-fs (loop3): 1 orphan inode deleted
[  115.722527][ T7227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.982985][ T7238] netlink: 92 bytes leftover after parsing attributes in process `syz.0.615'.
[  116.258469][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.372171][ T7247] netlink: 92 bytes leftover after parsing attributes in process `syz.1.616'.
[  116.874350][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.621'.
[  116.990305][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.011268][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.011921][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.233352][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'.
[  117.286845][ T7275] loop1: detected capacity change from 0 to 512
[  117.289763][ T7275] EXT4-fs: Ignoring removed nobh option
[  117.311299][ T7275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.329882][ T7275] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 3: comm syz.1.628: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  117.752542][ T7282] FAULT_INJECTION: forcing a failure.
[  117.752542][ T7282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.752566][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.4.630 Not tainted syzkaller #0 PREEMPT 
[  117.752578][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  117.752583][ T7282] Call trace:
[  117.752586][ T7282]  show_stack+0x2c/0x3c (C)
[  117.752604][ T7282]  __dump_stack+0x30/0x40
[  117.752614][ T7282]  dump_stack_lvl+0xd8/0x12c
[  117.752623][ T7282]  dump_stack+0x1c/0x28
[  117.752633][ T7282]  should_fail_ex+0x418/0x58c
[  117.752644][ T7282]  should_fail+0x14/0x24
[  117.752653][ T7282]  should_fail_usercopy+0x20/0x30
[  117.752660][ T7282]  _inline_copy_from_user+0x3c/0x174
[  117.752671][ T7282]  copy_msghdr_from_user+0xb8/0x194
[  117.752681][ T7282]  ___sys_sendmsg+0x14c/0x224
[  117.752690][ T7282]  __sys_sendmsg+0x158/0x204
[  117.752700][ T7282]  __arm64_sys_sendmsg+0x88/0x9c
[  117.752709][ T7282]  invoke_syscall+0x98/0x244
[  117.752719][ T7282]  el0_svc_common+0xec/0x23c
[  117.752728][ T7282]  do_el0_svc+0x4c/0x5c
[  117.752737][ T7282]  el0_svc+0x60/0x1d8
[  117.752748][ T7282]  el0t_64_sync_handler+0x44/0x104
[  117.752758][ T7282]  el0t_64_sync+0x198/0x19c
[  118.085534][ T7293] netlink: 92 bytes leftover after parsing attributes in process `syz.3.633'.
[  118.301314][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.409430][ T7304] ip_tables: iptables: counters copy to user failed while replacing table
[  119.533616][ T7305] loop4: detected capacity change from 0 to 512
[  119.543249][ T7307] netlink: 92 bytes leftover after parsing attributes in process `syz.0.637'.
[  119.547671][ T7305] EXT4-fs (loop4): Test dummy encryption mode enabled
[  119.608873][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.609084][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.616572][ T7305] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.636: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  119.616593][ T7305] loop4: lost filesystem error report for type 5 error -117
[  119.616973][ T7305] EXT4-fs (loop4): 1 orphan inode deleted
[  119.617426][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.761290][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.906029][ T7328] loop1: detected capacity change from 0 to 512
[  119.906762][ T7328] EXT4-fs: Ignoring removed nobh option
[  119.979822][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'.
[  120.184743][ T7328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.200293][ T7328] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 3: comm syz.1.645: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  120.814895][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.902198][ T7366] netlink: 92 bytes leftover after parsing attributes in process `syz.3.650'.
[  121.597170][ T7376] netlink: 92 bytes leftover after parsing attributes in process `syz.2.653'.
[  122.249516][ T7174] Bluetooth: hci5: Frame reassembly failed (-84)
[  122.270080][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.270253][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.506365][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.658'.
[  122.803024][ T7399] loop4: detected capacity change from 0 to 512
[  122.804754][ T7399] EXT4-fs: Ignoring removed nobh option
[  122.818293][ T7399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.831600][ T7399] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.662: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  123.671434][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.769987][ T7420] netlink: 92 bytes leftover after parsing attributes in process `syz.2.666'.
[  124.136198][ T7426] netlink: 92 bytes leftover after parsing attributes in process `syz.4.667'.
[  124.263819][ T4710] Bluetooth: hci5: command 0x1003 tx timeout
[  124.264642][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  124.582959][ T7437] loop3: detected capacity change from 0 to 512
[  125.428886][ T7437] EXT4-fs (loop3): Test dummy encryption mode enabled
[  125.443090][ T7437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.670: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  125.443116][ T7437] loop3: lost filesystem error report for type 5 error -117
[  125.447939][ T7437] EXT4-fs (loop3): 1 orphan inode deleted
[  125.448412][ T7437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.474170][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.474338][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.639126][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'.
[  125.821208][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.902537][ T7177] Bluetooth: hci5: Frame reassembly failed (-84)
[  125.903754][ T6872] Bluetooth: hci5: Frame reassembly failed (-84)
[  125.943331][ T1593] ieee802154 phy0 wpan0: encryption failed: -22
[  125.943373][ T1593] ieee802154 phy1 wpan1: encryption failed: -22
[  126.122071][ T7469] netlink: 92 bytes leftover after parsing attributes in process `syz.0.683'.
[  126.247582][ T7471] netlink: 92 bytes leftover after parsing attributes in process `syz.1.684'.
[  126.371815][ T7474] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  126.375244][ T7474] overlay: filesystem on ./file0 not supported as upperdir
[  126.735910][ T7480] loop2: detected capacity change from 0 to 512
[  126.740136][ T7480] EXT4-fs (loop2): Test dummy encryption mode enabled
[  126.748026][ T7480] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.687: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  126.748045][ T7480] loop2: lost filesystem error report for type 5 error -117
[  126.757408][ T7480] EXT4-fs (loop2): 1 orphan inode deleted
[  126.758414][ T7480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.953117][ T7485] loop1: detected capacity change from 0 to 1024
[  126.955246][ T7485] EXT4-fs: Ignoring removed oldalloc option
[  126.955258][ T7485] EXT4-fs: Ignoring removed orlov option
[  126.977613][ T7485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  126.988387][ T7485] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.689: lblock 0 mapped to illegal pblock 0 (length 1)
[  126.993427][ T7485] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.689: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  127.013612][ T7485] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.689: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.020741][ T7485] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  127.020764][ T7485] EXT4-fs (loop1): This should not happen!! Data will be lost
[  127.020764][ T7485] 
[  127.021262][ T7485] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.689: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.048960][ T7485] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.689: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.050224][ T7485] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.689: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.051976][ T7485] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.689: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.095148][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  127.171360][ T7490] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  127.171381][ T7490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  127.171428][ T7490] vhci_hcd vhci_hcd.0: Device attached
[  127.180913][ T7490] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  127.180935][ T7490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  127.180969][ T7490] vhci_hcd vhci_hcd.0: Device attached
[  127.184180][ T7490] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  127.184197][ T7490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  127.184227][ T7490] vhci_hcd vhci_hcd.0: Device attached
[  127.184609][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.691'.
[  127.191846][ T7490] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14)
[  127.191867][ T7490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  127.191894][ T7490] vhci_hcd vhci_hcd.0: Device attached
[  127.199186][ T7494] vhci_hcd: connection closed
[  127.199421][ T7491] vhci_hcd: connection closed
[  127.199946][ T7497] vhci_hcd: connection closed
[  127.200450][ T5560] vhci_hcd vhci_hcd.1: stop threads
[  127.200470][ T5560] vhci_hcd vhci_hcd.1: release socket
[  127.200487][ T5560] vhci_hcd vhci_hcd.1: disconnect device
[  127.200567][ T7499] vhci_hcd: connection closed
[  127.200805][ T5560] vhci_hcd vhci_hcd.1: stop threads
[  127.200815][ T5560] vhci_hcd vhci_hcd.1: release socket
[  127.200828][ T5560] vhci_hcd vhci_hcd.1: disconnect device
[  127.200911][ T5560] vhci_hcd vhci_hcd.1: stop threads
[  127.200918][ T5560] vhci_hcd vhci_hcd.1: release socket
[  127.200928][ T5560] vhci_hcd vhci_hcd.1: disconnect device
[  127.201006][ T5560] vhci_hcd vhci_hcd.1: stop threads
[  127.201012][ T5560] vhci_hcd vhci_hcd.1: release socket
[  127.201022][ T5560] vhci_hcd vhci_hcd.1: disconnect device
[  127.267449][ T7504] loop4: detected capacity change from 0 to 2048
[  127.289345][ T7504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.295945][ T7504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.341266][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.342213][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.526558][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.786738][ T7521] FAULT_INJECTION: forcing a failure.
[  127.786738][ T7521] name failslab, interval 1, probability 0, space 0, times 0
[  127.786758][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.0.697 Not tainted syzkaller #0 PREEMPT 
[  127.786769][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  127.786774][ T7521] Call trace:
[  127.786777][ T7521]  show_stack+0x2c/0x3c (C)
[  127.786795][ T7521]  __dump_stack+0x30/0x40
[  127.786805][ T7521]  dump_stack_lvl+0xd8/0x12c
[  127.786815][ T7521]  dump_stack+0x1c/0x28
[  127.786824][ T7521]  should_fail_ex+0x418/0x58c
[  127.786835][ T7521]  should_failslab+0xc4/0x120
[  127.786847][ T7521]  __kmalloc_cache_noprof+0x94/0x5fc
[  127.786855][ T7521]  alloc_fs_context+0x7c/0xba4
[  127.786864][ T7521]  fs_context_for_mount+0x34/0x44
[  127.786871][ T7521]  do_new_mount+0x158/0x538
[  127.786881][ T7521]  path_mount+0x5f0/0xa88
[  127.786889][ T7521]  do_mount+0xe8/0x148
[  127.786898][ T7521]  __arm64_sys_mount+0x33c/0x388
[  127.786907][ T7521]  invoke_syscall+0x98/0x244
[  127.786918][ T7521]  el0_svc_common+0xec/0x23c
[  127.786927][ T7521]  do_el0_svc+0x4c/0x5c
[  127.786936][ T7521]  el0_svc+0x60/0x1d8
[  127.786947][ T7521]  el0t_64_sync_handler+0x44/0x104
[  127.786957][ T7521]  el0t_64_sync+0x198/0x19c
[  127.942473][ T4710] Bluetooth: hci5: command 0x1003 tx timeout
[  127.942568][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  127.973850][ T7525] syz_tun: entered allmulticast mode
[  128.038732][ T7526] Injecting memory failure for pfn 0x136d72 at process virtual address 0x20000000
[  128.046968][ T7526] Memory failure: 0x136d72: unhandlable page.
[  128.046988][ T7526] Memory failure: 0x136d72: recovery action for get hwpoison page: Ignored
[  128.047885][ T7529] FAULT_INJECTION: forcing a failure.
[  128.047885][ T7529] name failslab, interval 1, probability 0, space 0, times 0
[  128.047902][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.4.700 Not tainted syzkaller #0 PREEMPT 
[  128.047912][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  128.047917][ T7529] Call trace:
[  128.047920][ T7529]  show_stack+0x2c/0x3c (C)
[  128.047938][ T7529]  __dump_stack+0x30/0x40
[  128.047949][ T7529]  dump_stack_lvl+0xd8/0x12c
[  128.047958][ T7529]  dump_stack+0x1c/0x28
[  128.047967][ T7529]  should_fail_ex+0x418/0x58c
[  128.047979][ T7529]  should_failslab+0xc4/0x120
[  128.047990][ T7529]  __kmalloc_cache_node_noprof+0x98/0x618
[  128.047998][ T7529]  blk_mq_init_tags+0x94/0x284
[  128.048007][ T7529]  blk_mq_alloc_map_and_rqs+0xd8/0x810
[  128.048015][ T7529]  blk_mq_alloc_sched_tags+0x140/0x308
[  128.048025][ T7529]  blk_mq_alloc_sched_res+0x94/0x1bc
[  128.048034][ T7529]  elevator_change+0x124/0x35c
[  128.048044][ T7529]  elv_iosched_store+0x2a8/0x3bc
[  128.048052][ T7529]  queue_attr_store+0x1c0/0x24c
[  128.048060][ T7529]  sysfs_kf_write+0xe0/0x108
[  128.048070][ T7529]  kernfs_fop_write_iter+0x260/0x3b8
[  128.048080][ T7529]  vfs_write+0x51c/0xa0c
[  128.048086][ T7529]  ksys_write+0x12c/0x228
[  128.048093][ T7529]  __arm64_sys_write+0x84/0x98
[  128.048092][ T7524] syz_tun: left allmulticast mode
[  128.048100][ T7529]  invoke_syscall+0x98/0x244
[  128.048110][ T7529]  el0_svc_common+0xec/0x23c
[  128.048119][ T7529]  do_el0_svc+0x4c/0x5c
[  128.048129][ T7529]  el0_svc+0x60/0x1d8
[  128.048141][ T7529]  el0t_64_sync_handler+0x44/0x104
[  128.048151][ T7529]  el0t_64_sync+0x198/0x19c
[  128.057787][ T7532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  128.134919][ T7545] TC_ACT_REPEAT abuse ?
[  128.740125][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.742107][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.795696][ T7558] netlink: 'syz.2.710': attribute type 4 has an invalid length.
[  129.018433][ T7566] loop2: detected capacity change from 0 to 512
[  129.025536][ T7566] EXT4-fs: Ignoring removed nobh option
[  129.048524][ T7566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.050905][ T7566] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.714: resize_inode disabled but reserved GDT blocks non-zero
[  129.063988][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.101948][ T7571] can0: slcan on ttyS3.
[  129.143537][ T7571] can0 (unregistered): slcan off ttyS3.
[  129.187997][ T7579] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL)
[  129.188016][ T7579] device-mapper: ioctl: error adding target to table
[  129.259170][ T7585] IPVS: length: 43 != 24
[  129.263733][ T7585] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  129.263751][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  129.263791][ T7585] vhci_hcd vhci_hcd.0: Device attached
[  129.265072][ T7585] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12)
[  129.265084][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  129.265106][ T7585] vhci_hcd vhci_hcd.0: Device attached
[  129.266485][ T7585] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14)
[  129.266509][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  129.266547][ T7585] vhci_hcd vhci_hcd.0: Device attached
[  129.292392][ T7585] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17)
[  129.292425][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  129.292454][ T7585] vhci_hcd vhci_hcd.0: Device attached
[  129.293747][ T7585] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19)
[  129.293767][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  129.293799][ T7585] vhci_hcd vhci_hcd.0: Device attached
[  129.300409][ T7596] vhci_hcd: connection closed
[  129.300454][ T7594] vhci_hcd: connection closed
[  129.300587][ T7590] vhci_hcd: connection closed
[  129.300684][ T7586] vhci_hcd: connection closed
[  129.302081][ T7588] vhci_hcd: connection closed
[  129.302191][ T6872] vhci_hcd vhci_hcd.2: stop threads
[  129.302346][ T6872] vhci_hcd vhci_hcd.2: release socket
[  129.302362][ T6872] vhci_hcd vhci_hcd.2: disconnect device
[  129.319407][ T6872] vhci_hcd vhci_hcd.2: stop threads
[  129.319419][ T6872] vhci_hcd vhci_hcd.2: release socket
[  129.319436][ T6872] vhci_hcd vhci_hcd.2: disconnect device
[  129.319626][ T6872] vhci_hcd vhci_hcd.2: stop threads
[  129.319633][ T6872] vhci_hcd vhci_hcd.2: release socket
[  129.319647][ T6872] vhci_hcd vhci_hcd.2: disconnect device
[  129.320362][ T6872] vhci_hcd vhci_hcd.2: stop threads
[  129.320375][ T6872] vhci_hcd vhci_hcd.2: release socket
[  129.320386][ T6872] vhci_hcd vhci_hcd.2: disconnect device
[  129.320481][ T6872] vhci_hcd vhci_hcd.2: stop threads
[  129.320487][ T6872] vhci_hcd vhci_hcd.2: release socket
[  129.320508][ T6872] vhci_hcd vhci_hcd.2: disconnect device
[  129.955433][ T6872] Bluetooth: hci5: Frame reassembly failed (-84)
[  130.154672][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'.
[  130.408019][ T7622] loop3: detected capacity change from 0 to 512
[  130.408396][ T7622] EXT4-fs: Ignoring removed nobh option
[  130.439941][ T7622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.457594][ T7622] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.728: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  130.907249][ T7631] can0: slcan on ttyS3.
[  130.942906][ T7631] can0 (unregistered): slcan off ttyS3.
[  131.041634][ T7633] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  131.275610][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.494895][ T7659] netlink: 92 bytes leftover after parsing attributes in process `syz.4.739'.
[  131.607656][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'.
[  131.713478][ T7663] can0: slcan on ttyS3.
[  131.733104][ T7663] can0 (unregistered): slcan off ttyS3.
[  131.763880][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.764060][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.806691][ T7666] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  132.022127][ T4710] Bluetooth: hci5: command 0x1003 tx timeout
[  132.022890][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  132.307689][ T7678] loop4: detected capacity change from 0 to 2048
[  132.356850][ T7681] loop1: detected capacity change from 0 to 512
[  132.402388][ T7681] EXT4-fs: Ignoring removed nobh option
[  132.493997][ T7678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.564688][ T7678] ip_tables: iptables: counters copy to user failed while replacing table
[  132.580350][ T7681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.581743][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.596985][ T7681] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 3: comm syz.1.748: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  133.025392][ T7704] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  133.109865][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.110055][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.284937][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'.
[  133.300662][ T7716] netlink: 92 bytes leftover after parsing attributes in process `syz.0.756'.
[  133.322601][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.524033][ T7724] Smack: duplicate mount options
[  133.566040][ T7728] loop3: detected capacity change from 0 to 1024
[  133.571194][ T7728] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  133.761361][ T7738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.795605][ T7742] can0: slcan on ttyS3.
[  133.833649][ T7742] can0 (unregistered): slcan off ttyS3.
[  133.833908][ T7742] Falling back ldisc for ttyS3.
[  133.894372][ T7748] loop2: detected capacity change from 0 to 512
[  133.894731][ T7748] EXT4-fs: Ignoring removed nobh option
[  133.927426][ T7748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.944819][ T7748] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.770: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  134.058650][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.059267][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.411377][ T7768] netlink: 92 bytes leftover after parsing attributes in process `syz.1.776'.
[  134.438386][ T7774] loop1: detected capacity change from 0 to 1024
[  134.466616][ T7774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.558143][ T7781] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  134.558166][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  134.558820][ T7781] vhci_hcd vhci_hcd.0: Device attached
[  134.559642][ T7781] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11)
[  134.559655][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  134.559679][ T7781] vhci_hcd vhci_hcd.0: Device attached
[  134.560342][ T7781] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13)
[  134.560356][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  134.560381][ T7781] vhci_hcd vhci_hcd.0: Device attached
[  134.560996][ T7781] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15)
[  134.561009][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  134.561036][ T7781] vhci_hcd vhci_hcd.0: Device attached
[  134.563972][ T7790] vhci_hcd: connection closed
[  134.564035][ T7788] vhci_hcd: connection closed
[  134.564074][ T7786] vhci_hcd: connection closed
[  134.566138][ T7784] vhci_hcd: connection closed
[  134.635944][ T7792] ip_tables: iptables: counters copy to user failed while replacing table
[  134.692471][ T6872] vhci_hcd vhci_hcd.0: stop threads
[  134.692521][ T6872] vhci_hcd vhci_hcd.0: release socket
[  134.692582][ T6872] vhci_hcd vhci_hcd.0: disconnect device
[  134.693829][ T6872] vhci_hcd vhci_hcd.0: stop threads
[  134.693873][ T6872] vhci_hcd vhci_hcd.0: release socket
[  134.693928][ T6872] vhci_hcd vhci_hcd.0: disconnect device
[  134.694347][ T6872] vhci_hcd vhci_hcd.0: stop threads
[  134.694375][ T6872] vhci_hcd vhci_hcd.0: release socket
[  134.694416][ T6872] vhci_hcd vhci_hcd.0: disconnect device
[  134.694933][ T6872] vhci_hcd vhci_hcd.0: stop threads
[  134.694964][ T6872] vhci_hcd vhci_hcd.0: release socket
[  134.695006][ T6872] vhci_hcd vhci_hcd.0: disconnect device
[  134.829924][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.009016][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'.
[  135.137461][ T7807] netlink: 92 bytes leftover after parsing attributes in process `syz.4.783'.
[  135.299002][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.661733][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  135.813487][   T26] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  135.815258][   T26] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  135.815276][   T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64
[  135.819330][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.819352][   T26] usb 1-1: Product: syz
[  135.819361][   T26] usb 1-1: Manufacturer: syz
[  135.819367][   T26] usb 1-1: SerialNumber: syz
[  135.891105][   T30] audit: type=1326 audit(2695.859:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.3.794" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c3788e8 code=0x0
[  135.942713][ T7843] loop4: detected capacity change from 0 to 1024
[  135.943135][ T7843] EXT4-fs: Ignoring removed oldalloc option
[  135.943144][ T7843] EXT4-fs: Ignoring removed orlov option
[  135.958208][ T7843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.966697][ T7843] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.797: bg 0: block 112: padding at end of block bitmap is not set
[  135.969961][ T7843] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.797: lblock 0 mapped to illegal pblock 0 (length 1)
[  135.978652][ T7843] EXT4-fs error (device loop4): ext4_ext_remove_space:2977: inode #15: comm syz.4.797: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  135.980774][ T7842] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.797: lblock 0 mapped to illegal pblock 0 (length 1)
[  135.981474][ T7842] EXT4-fs error (device loop4): ext4_ext_remove_space:2977: inode #15: comm syz.4.797: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  135.994895][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  136.024029][ T7849] loop4: detected capacity change from 0 to 512
[  136.027598][ T7849] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  136.028732][ T7849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  136.028836][ T7849] EXT4-fs (loop4): orphan cleanup on readonly fs
[  136.029695][ T7849] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  136.029753][ T7849] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  136.029802][ T7849] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  136.030818][ T7849] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  136.031643][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  136.031661][    C0] EXT4-fs (loop4): initial error at time 2695: mb_free_blocks:2049: inode 12: block 14
[  136.031690][    C0] EXT4-fs (loop4): last error at time 2695: mb_free_blocks:2049: inode 12: block 14
[  136.033400][ T7849] EXT4-fs (loop4): Remounting filesystem read-only
[  136.033595][ T7849] EXT4-fs (loop4): 1 truncate cleaned up
[  136.034042][ T7849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  136.074972][   T26] usb 1-1: USB disconnect, device number 4
[  136.083040][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.128510][ T7853] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  136.162069][ T7860] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  136.191652][ T7862] loop4: detected capacity change from 0 to 2048
[  136.193794][ T7862] ext4: Unknown parameter 'nouser_xattr'
[  136.226789][ T7866] netlink: 'syz.2.803': attribute type 1 has an invalid length.
[  136.226807][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.803'.
[  136.253447][ T7866] FAULT_INJECTION: forcing a failure.
[  136.253447][ T7866] name failslab, interval 1, probability 0, space 0, times 0
[  136.253469][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.2.803 Not tainted syzkaller #0 PREEMPT 
[  136.253481][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  136.253487][ T7866] Call trace:
[  136.253496][ T7866]  show_stack+0x2c/0x3c (C)
[  136.253520][ T7866]  __dump_stack+0x30/0x40
[  136.253536][ T7866]  dump_stack_lvl+0xd8/0x12c
[  136.253548][ T7866]  dump_stack+0x1c/0x28
[  136.253559][ T7866]  should_fail_ex+0x418/0x58c
[  136.253573][ T7866]  should_failslab+0xc4/0x120
[  136.253586][ T7866]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[  136.253595][ T7866]  sock_alloc_inode+0x30/0x180
[  136.253609][ T7866]  alloc_inode+0x68/0x198
[  136.253620][ T7866]  sock_alloc+0x4c/0x204
[  136.253630][ T7866]  __sock_create+0x108/0x670
[  136.253639][ T7866]  __sys_socket_create+0xc0/0x11c
[  136.253650][ T7866]  __sys_socket+0x44/0xec
[  136.253660][ T7866]  __arm64_sys_socket+0x84/0x9c
[  136.253670][ T7866]  invoke_syscall+0x98/0x244
[  136.253683][ T7866]  el0_svc_common+0xec/0x23c
[  136.253694][ T7866]  do_el0_svc+0x4c/0x5c
[  136.253705][ T7866]  el0_svc+0x60/0x1d8
[  136.253719][ T7866]  el0t_64_sync_handler+0x44/0x104
[  136.253731][ T7866]  el0t_64_sync+0x198/0x19c
[  136.253743][ T7866] socket: no more sockets
[  136.503117][ T7894] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  136.551975][ T7898] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  136.561369][ T7870] mount: server  not responding, timed out
[  136.709973][ T7904] sctp: [Deprecated]: syz.0.817 (pid 7904) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.709973][ T7904] Use struct sctp_sack_info instead
[  136.729113][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.765717][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'.
[  136.876919][ T7924] loop4: detected capacity change from 0 to 2048
[  136.896654][ T7924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.992095][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.126301][ T7933] tun0: tun_chr_ioctl cmd 1074812118
[  137.304046][ T7931] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  137.346412][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.346597][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.475550][ T7952] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  137.525357][ T4711] Bluetooth: Unknown LE signaling command 0x03
[  137.525374][ T4711] Bluetooth: Wrong link type (-22)
[  137.964646][ T7968] loop4: detected capacity change from 0 to 512
[  137.967143][ T7968] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  137.967799][ T7968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e11c, mo2=0102]
[  137.967899][ T7968] EXT4-fs (loop4): orphan cleanup on readonly fs
[  138.543334][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'.
[  138.628501][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'.
[  138.688425][ T7968] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.836: attempt to clear invalid blocks 1024 len 1
[  138.688452][ T7968] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  138.699981][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  138.699999][    C0] EXT4-fs (loop4): initial error at time 2698: ext4_clear_blocks:876: inode 11
[  138.700017][    C0] EXT4-fs (loop4): last error at time 2698: ext4_clear_blocks:876: inode 11
[  138.700574][ T7968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.836: bg 0: block 361: padding at end of block bitmap is not set
[  138.700595][ T7968] loop4: lost filesystem error report for type 5 error -117
[  138.700755][ T7968] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  138.700765][ T7968] loop4: lost filesystem error report for type 5 error -117
[  138.700942][ T7968] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.836: invalid indirect mapped block 1811939328 (level 0)
[  138.700956][ T7968] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  138.701073][ T7968] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.836: invalid indirect mapped block 2185560079 (level 1)
[  138.701085][ T7968] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  138.701381][ T7968] EXT4-fs (loop4): 1 truncate cleaned up
[  138.701846][ T7968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  138.876695][ T7977] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.836: dx entry: limit 0 != root limit 125
[  138.876868][ T7977] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.836: Corrupt directory, running e2fsck is recommended
[  139.050818][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  139.058732][ T7980] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  139.092453][ T7991] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  139.191217][ T7998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'.
[  139.192962][ T7998] loop4: detected capacity change from 0 to 512
[  139.303974][ T8005] netlink: 92 bytes leftover after parsing attributes in process `syz.2.844'.
[  139.452360][ T7998] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.843: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  139.452393][ T7998] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  139.452644][ T7998] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.843: couldn't read orphan inode 11 (err -117)
[  139.452663][ T7998] loop4: lost filesystem error report for type 5 error -117
[  139.452883][ T7998] EXT4-fs (loop4): 1 truncate cleaned up
[  139.453372][ T7998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.466026][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.495268][ T7999] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  139.501924][ T4811] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  139.575401][ T8015] loop3: detected capacity change from 0 to 4096
[  139.585920][ T8018] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  139.587878][ T8015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.775242][ T4811] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  139.910569][ T4811] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  139.910667][ T4811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64
[  139.931078][ T4811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.931095][ T4811] usb 1-1: Product: syz
[  139.931102][ T4811] usb 1-1: Manufacturer: syz
[  139.931109][ T4811] usb 1-1: SerialNumber: syz
[  139.986299][ T8027] can0: slcan on ttyS3.
[  140.064715][ T8027] can0 (unregistered): slcan off ttyS3.
[  140.064849][ T8027] Falling back ldisc for ttyS3.
[  140.150082][ T4811] usb 1-1: USB disconnect, device number 5
[  140.246423][ T8034] netlink: 92 bytes leftover after parsing attributes in process `syz.4.856'.
[  140.428722][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.441637][ T8036] loop1: detected capacity change from 0 to 512
[  140.444496][ T8036] EXT4-fs: Ignoring removed nobh option
[  140.460665][ T8038] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  140.484263][ T8036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.899533][ T8046] netlink: 'syz.3.859': attribute type 3 has an invalid length.
[  141.220953][ T8065] netlink: 92 bytes leftover after parsing attributes in process `syz.2.863'.
[  141.443098][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.551304][ T8068] netlink: 92 bytes leftover after parsing attributes in process `syz.3.865'.
[  141.929137][ T8074] can0: slcan on ttyS3.
[  142.004102][ T8074] can0 (unregistered): slcan off ttyS3.
[  142.004246][ T8074] Falling back ldisc for ttyS3.
[  142.223163][ T8085] FAULT_INJECTION: forcing a failure.
[  142.223163][ T8085] name failslab, interval 1, probability 0, space 0, times 0
[  142.223359][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.3.869 Not tainted syzkaller #0 PREEMPT 
[  142.223371][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  142.223376][ T8085] Call trace:
[  142.223379][ T8085]  show_stack+0x2c/0x3c (C)
[  142.223398][ T8085]  __dump_stack+0x30/0x40
[  142.223409][ T8085]  dump_stack_lvl+0xd8/0x12c
[  142.223419][ T8085]  dump_stack+0x1c/0x28
[  142.223428][ T8085]  should_fail_ex+0x418/0x58c
[  142.223439][ T8085]  should_failslab+0xc4/0x120
[  142.223451][ T8085]  __kmalloc_cache_noprof+0x94/0x5fc
[  142.223459][ T8085]  vkms_plane_duplicate_state+0x58/0x114
[  142.223470][ T8085]  drm_atomic_get_plane_state+0x208/0x568
[  142.223478][ T8085]  drm_client_modeset_commit_atomic+0x194/0x6b8
[  142.223500][ T8085]  drm_client_modeset_commit_locked+0xd0/0x494
[  142.223511][ T8085]  drm_fb_helper_pan_display+0x1b0/0x788
[  142.223523][ T8085]  fb_pan_display+0x2e4/0x53c
[  142.223533][ T8085]  ud_update_start+0xcc/0x2c0
[  142.223542][ T8085]  fbcon_modechanged+0x458/0x698
[  142.223549][ T8085]  fbcon_set_all_vcs+0x3e8/0x430
[  142.223556][ T8085]  rotate_all_store+0x33c/0x428
[  142.223564][ T8085]  dev_attr_store+0x6c/0x90
[  142.223574][ T8085]  sysfs_kf_write+0xe0/0x108
[  142.223584][ T8085]  kernfs_fop_write_iter+0x260/0x3b8
[  142.223594][ T8085]  vfs_write+0x51c/0xa0c
[  142.223600][ T8085]  ksys_write+0x12c/0x228
[  142.223607][ T8085]  __arm64_sys_write+0x84/0x98
[  142.223614][ T8085]  invoke_syscall+0x98/0x244
[  142.223624][ T8085]  el0_svc_common+0xec/0x23c
[  142.223633][ T8085]  do_el0_svc+0x4c/0x5c
[  142.223643][ T8085]  el0_svc+0x60/0x1d8
[  142.223653][ T8085]  el0t_64_sync_handler+0x44/0x104
[  142.223664][ T8085]  el0t_64_sync+0x198/0x19c
[  142.550392][ T8088] netlink: 92 bytes leftover after parsing attributes in process `syz.4.871'.
[  142.947059][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'.
[  143.237765][ T8096] loop1: detected capacity change from 0 to 512
[  143.238092][ T8096] EXT4-fs: Ignoring removed nobh option
[  143.241370][ T8096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.283983][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'.
[  143.730511][ T8104] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  143.772155][ T8112] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  143.820033][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'.
[  143.838262][ T4711] Bluetooth: Unknown LE signaling command 0x03
[  143.838277][ T4711] Bluetooth: Wrong link type (-22)
[  143.838322][ T4711] Bluetooth: hci2: link tx timeout
[  143.838329][ T4711] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.962787][ T8125] netlink: 92 bytes leftover after parsing attributes in process `syz.4.880'.
[  144.190441][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.194629][ T8128] fuse: Bad value for 'fd'
[  144.230558][ T8132] loop3: detected capacity change from 0 to 512
[  144.232810][ T8132] EXT4-fs: Ignoring removed nobh option
[  144.251934][ T8132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.258123][ T8132] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.886: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  144.274209][ T8134] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  144.377972][ T8143] netlink: 92 bytes leftover after parsing attributes in process `syz.1.885'.
[  144.913878][ T8147] netlink: 'syz.4.889': attribute type 10 has an invalid length.
[  144.924913][ T8147] team0: Port device dummy0 added
[  144.927381][ T8147] netlink: 'syz.4.889': attribute type 10 has an invalid length.
[  144.938706][ T8147] team0: Port device dummy0 removed
[  144.983668][ T8149] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  145.031173][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.891'.
[  145.031223][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'.
[  145.151220][ T8159] loop1: detected capacity change from 0 to 8
[  145.170472][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'.
[  145.218440][ T8159] SQUASHFS error: Failed to read block 0x6e6: -5
[  145.218455][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.218463][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.218623][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.218651][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.218658][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.218691][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.218717][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.218724][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.218736][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.218753][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.218759][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.218770][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.218944][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.218951][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.218962][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.218979][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.218984][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.218994][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219014][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219019][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219031][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219047][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219052][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219062][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219087][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219092][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219102][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219118][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219123][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219133][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219156][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219161][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219171][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219188][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219193][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219203][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.219226][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.219231][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.219241][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220019][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220025][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220036][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220054][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220059][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220070][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220085][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220090][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220100][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220117][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220122][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220132][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220148][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220153][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220163][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220181][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220186][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220197][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220212][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220217][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220228][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220247][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220252][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220262][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220278][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220283][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220293][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.220311][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.220316][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.220326][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334233][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334247][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334264][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334284][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334289][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334301][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334321][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334326][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334336][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334353][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334358][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334369][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334388][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334393][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334404][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334420][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334425][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334436][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334456][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334461][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334471][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334487][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334492][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334511][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334531][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334536][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334547][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334564][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334569][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.334580][ T8159] SQUASHFS error: Failed to read block 0x0: -5
[  145.334898][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.334904][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.335059][ T8159] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  145.335064][ T8159] SQUASHFS error: read_indexes: reading block [6e4:0]
[  145.372638][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.484248][ T8166] can0: slcan on ttyS3.
[  145.534199][ T8172] FAULT_INJECTION: forcing a failure.
[  145.534199][ T8172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.534219][ T8172] CPU: 0 UID: 0 PID: 8172 Comm: syz.0.897 Not tainted syzkaller #0 PREEMPT 
[  145.534228][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  145.534233][ T8172] Call trace:
[  145.534236][ T8172]  show_stack+0x2c/0x3c (C)
[  145.534253][ T8172]  __dump_stack+0x30/0x40
[  145.534263][ T8172]  dump_stack_lvl+0xd8/0x12c
[  145.534273][ T8172]  dump_stack+0x1c/0x28
[  145.534282][ T8172]  should_fail_ex+0x418/0x58c
[  145.534293][ T8172]  should_fail+0x14/0x24
[  145.534302][ T8172]  should_fail_usercopy+0x20/0x30
[  145.534309][ T8172]  simple_read_from_buffer+0xc4/0x238
[  145.534320][ T8172]  proc_fail_nth_read+0x1a8/0x248
[  145.534328][ T8172]  vfs_read+0x230/0x8c8
[  145.534336][ T8172]  ksys_read+0x12c/0x228
[  145.534342][ T8172]  __arm64_sys_read+0x84/0x98
[  145.534349][ T8172]  invoke_syscall+0x98/0x244
[  145.534359][ T8172]  el0_svc_common+0xec/0x23c
[  145.534368][ T8172]  do_el0_svc+0x4c/0x5c
[  145.534378][ T8172]  el0_svc+0x60/0x1d8
[  145.534389][ T8172]  el0t_64_sync_handler+0x44/0x104
[  145.534399][ T8172]  el0t_64_sync+0x198/0x19c
[  145.536305][ T8167] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  145.580345][ T8166] can0 (unregistered): slcan off ttyS3.
[  145.580479][ T8166] Falling back ldisc for ttyS3.
[  145.664255][ T8181] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000
[  145.784028][ T8197] netlink: 92 bytes leftover after parsing attributes in process `syz.2.899'.
[  145.858782][ T4710] Bluetooth: hci2: command 0x0406 tx timeout
[  146.014544][ T7174] Bluetooth: hci5: Frame reassembly failed (-84)
[  146.115382][ T8225] loop4: detected capacity change from 0 to 512
[  146.115767][ T8225] EXT4-fs: Ignoring removed nobh option
[  146.130198][ T8225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.138661][ T8225] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.905: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  147.009559][ T8242] loop3: detected capacity change from 0 to 512
[  147.144780][ T8242] EXT4-fs (loop3): Test dummy encryption mode enabled
[  147.188096][ T8242] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.908: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  147.188165][ T8242] loop3: lost filesystem error report for type 5 error -117
[  147.188630][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  147.188640][    C0] EXT4-fs (loop3): initial error at time 3219: ext4_xattr_inode_iget:473
[  147.188652][    C0] EXT4-fs (loop3): last error at time 3219: ext4_xattr_inode_iget:473
[  147.201463][ T8242] EXT4-fs (loop3): 1 orphan inode deleted
[  147.206150][ T8242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.560524][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.663443][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.713622][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[  147.714339][ T8256] netlink: 'syz.0.909': attribute type 2 has an invalid length.
[  147.714350][ T8256] netlink: 'syz.0.909': attribute type 11 has an invalid length.
[  147.714360][ T8256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'.
[  147.927363][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'.
[  148.019738][ T4710] Bluetooth: hci5: command 0x1003 tx timeout
[  148.020106][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  148.497345][ T8268] loop2: detected capacity change from 0 to 512
[  148.498069][ T8268] EXT4-fs (loop2): can't mount with both data=journal and delalloc
[  148.525410][ T8270] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  149.030165][ T7174] Bluetooth: hci5: Frame reassembly failed (-84)
[  149.215497][ T8298] loop4: detected capacity change from 0 to 512
[  149.224747][ T8298] EXT4-fs (loop4): Test dummy encryption mode enabled
[  149.362451][ T8298] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.923: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  149.362513][ T8298] loop4: lost filesystem error report for type 5 error -117
[  149.367487][ T8298] EXT4-fs (loop4): 1 orphan inode deleted
[  149.372092][ T8298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.841817][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.115372][ T8327] __nla_validate_parse: 1 callbacks suppressed
[  150.115386][ T8327] netlink: 92 bytes leftover after parsing attributes in process `syz.4.935'.
[  150.154877][ T8328] netlink: 92 bytes leftover after parsing attributes in process `syz.1.936'.
[  151.059118][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  151.180663][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'.
[  151.180759][ T8339] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  151.410788][ T8345] loop2: detected capacity change from 0 to 512
[  151.429998][ T8345] EXT4-fs (loop2): Test dummy encryption mode enabled
[  151.519684][ T8345] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.941: EA inode 11 has unexpected i_nlink=2 ref_count=1
[  151.519743][ T8345] loop2: lost filesystem error report for type 5 error -117
[  151.524401][ T8345] EXT4-fs (loop2): 1 orphan inode deleted
[  151.549931][ T8345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.104532][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.377936][ T8381] netlink: 92 bytes leftover after parsing attributes in process `syz.1.951'.
[  153.781295][ T4718] Bluetooth: hci3: command 0x0406 tx timeout
[  153.781748][ T4718] Bluetooth: hci1: command 0x0406 tx timeout
[  153.781784][ T4723] Bluetooth: hci0: command 0x0406 tx timeout
[  154.024547][ T8391] loop4: detected capacity change from 0 to 512
[  154.025420][ T8391] EXT4-fs: Ignoring removed nobh option
[  154.156281][ T8391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.258093][ T8391] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.954: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  154.307990][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'.
[  154.510987][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'.
[  155.434669][ T8420] loop1: detected capacity change from 0 to 128
[  155.468975][ T8420] EXT4-fs (loop1): Test dummy encryption mode enabled
[  155.719667][ T8420] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.773993][ T8420] ==================================================================
[  155.774009][ T8420] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x378/0x6bc
[  155.774031][ T8420] Read of size 96 at addr ffff0000cf6615c0 by task syz.1.963/8420
[  155.774040][ T8420] 
[  155.774045][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.1.963 Not tainted syzkaller #0 PREEMPT 
[  155.774055][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  155.774061][ T8420] Call trace:
[  155.774064][ T8420]  show_stack+0x2c/0x3c (C)
[  155.774078][ T8420]  __dump_stack+0x30/0x40
[  155.774090][ T8420]  dump_stack_lvl+0xd8/0x12c
[  155.774101][ T8420]  print_address_description+0xb0/0x238
[  155.774111][ T8420]  print_report+0x68/0x84
[  155.774118][ T8420]  kasan_report+0x8c/0xc4
[  155.774129][ T8420]  kasan_check_range+0x17c/0x1ac
[  155.774139][ T8420]  __asan_memcpy+0x3c/0x84
[  155.774150][ T8420]  soft_cursor+0x378/0x6bc
[  155.774159][ T8420]  ud_cursor+0xb40/0x1234
[  155.774169][ T8420]  fbcon_cursor+0x344/0x498
[  155.774177][ T8420]  hide_cursor+0xdc/0x2d0
[  155.774186][ T8420]  redraw_screen+0x200/0x51c
[  155.774195][ T8420]  vc_do_resize+0x884/0xbbc
[  155.774204][ T8420]  __vc_resize+0x60/0x74
[  155.774212][ T8420]  fbcon_do_set_font+0x3d8/0x734
[  155.774221][ T8420]  fbcon_set_font+0x4f0/0x6ac
[  155.774230][ T8420]  con_font_op+0x954/0xc4c
[  155.774240][ T8420]  vt_ioctl+0x1664/0x1d4c
[  155.774250][ T8420]  tty_ioctl+0x828/0xcb8
[  155.774259][ T8420]  __arm64_sys_ioctl+0x154/0x1cc
[  155.774267][ T8420]  invoke_syscall+0x98/0x244
[  155.774279][ T8420]  el0_svc_common+0xec/0x23c
[  155.774291][ T8420]  do_el0_svc+0x4c/0x5c
[  155.774302][ T8420]  el0_svc+0x60/0x1d8
[  155.774316][ T8420]  el0t_64_sync_handler+0x44/0x104
[  155.774328][ T8420]  el0t_64_sync+0x198/0x19c
[  155.774337][ T8420] 
[  155.774339][ T8420] Allocated by task 5274:
[  155.774344][ T8420]  kasan_save_track+0x40/0x78
[  155.774353][ T8420]  kasan_save_alloc_info+0x40/0x50
[  155.774362][ T8420]  __kasan_kmalloc+0x9c/0xb4
[  155.774369][ T8420]  __kmalloc_noprof+0x34c/0x6c8
[  155.774377][ T8420]  font_data_rotate+0x100/0x2f0
[  155.774386][ T8420]  fbcon_rotate_font+0x218/0x374
[  155.774394][ T8420]  fbcon_modechanged+0x19c/0x698
[  155.774401][ T8420]  fbcon_set_all_vcs+0x3e8/0x430
[  155.774408][ T8420]  rotate_all_store+0x33c/0x428
[  155.774415][ T8420]  dev_attr_store+0x6c/0x90
[  155.774425][ T8420]  sysfs_kf_write+0xe0/0x108
[  155.774436][ T8420]  kernfs_fop_write_iter+0x260/0x3b8
[  155.774446][ T8420]  vfs_write+0x51c/0xa0c
[  155.774452][ T8420]  ksys_write+0x12c/0x228
[  155.774458][ T8420]  __arm64_sys_write+0x84/0x98
[  155.774464][ T8420]  invoke_syscall+0x98/0x244
[  155.774474][ T8420]  el0_svc_common+0xec/0x23c
[  155.774484][ T8420]  do_el0_svc+0x4c/0x5c
[  155.774501][ T8420]  el0_svc+0x60/0x1d8
[  155.774512][ T8420]  el0t_64_sync_handler+0x44/0x104
[  155.774523][ T8420]  el0t_64_sync+0x198/0x19c
[  155.774530][ T8420] 
[  155.774532][ T8420] The buggy address belongs to the object at ffff0000cf660000
[  155.774532][ T8420]  which belongs to the cache kmalloc-4k of size 4096
[  155.774539][ T8420] The buggy address is located 1472 bytes to the right of
[  155.774539][ T8420]  allocated 4096-byte region [ffff0000cf660000, ffff0000cf661000)
[  155.774548][ T8420] 
[  155.774550][ T8420] The buggy address belongs to the physical page:
[  155.774554][ T8420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f660
[  155.774563][ T8420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  155.774569][ T8420] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  155.774579][ T8420] page_type: f5(slab)
[  155.774587][ T8420] raw: 05ffc00000000040 ffff0000c0002140 dead000000000100 dead000000000122
[  155.774594][ T8420] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  155.774602][ T8420] head: 05ffc00000000040 ffff0000c0002140 dead000000000100 dead000000000122
[  155.774609][ T8420] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  155.774616][ T8420] head: 05ffc00000000003 fffffdffc33d9801 00000000ffffffff 00000000ffffffff
[  155.774622][ T8420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  155.774626][ T8420] page dumped because: kasan: bad access detected
[  155.774630][ T8420] 
[  155.774631][ T8420] Memory state around the buggy address:
[  155.774636][ T8420]  ffff0000cf661480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.774641][ T8420]  ffff0000cf661500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.774646][ T8420] >ffff0000cf661580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.774650][ T8420]                                            ^
[  155.774655][ T8420]  ffff0000cf661600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.774660][ T8420]  ffff0000cf661680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.774664][ T8420] ==================================================================
[  155.774681][ T8420] Disabling lock debugging due to kernel taint
[  155.927953][   T51] Bluetooth: hci1: unexpected cc 0x0c05 length: 4 > 1
[  155.928024][   T51] Bluetooth: hci1: unexpected event for opcode 0x0c05
[  156.250663][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'.
[  156.260586][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.627974][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.