last executing test programs: 4m30.46731781s ago: executing program 32 (id=100): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x10, 0x203}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x10) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000200)={{}, 0x1, 0x10, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000240), 0x18) 1m40.542242336s ago: executing program 33 (id=832): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0xe, 0x737, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}, @empty, 0x9, 0xa7e525d0c6d514dc, 0xfffffbff, 0x3}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000c00)=@raw=[@ldst={0x2, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000480)='syzkaller\x00', 0x4, 0xf9, &(0x7f0000000640)=""/249, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8000007, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x3, 0x7, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff, r2, 0x1, r2], &(0x7f0000000800)=[{0x3, 0x20005, 0xc, 0x6}, {0x0, 0x1, 0x1, 0x8}, {0x4, 0x5, 0x5, 0x7}, {0x5, 0x4, 0x0, 0x5}], 0x10, 0x3}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x6, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0x2, 0xb, 0xfffffffffffffff4, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xe, &(0x7f0000000280)=""/14, 0x41100, 0x40, '\x00', r1, @fallback=0x2, r2, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x2, 0xffffffff}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000900)=[r4], 0x0, 0x10, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) setrlimit(0xc, &(0x7f0000000100)={0x0, 0x7fffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82c00, 0x6b0ebd178df2bd79) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0xf, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0xa, 0x1e, 0xc, "faf900000080149989fc8dbebd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4da4100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x100000071, 0x0, 0x1, 0x10019, 0x10, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c5f83f1886fb50e076a3aa47b8b01c3e296834cc07fac507844c13922811fe7002dc8aada05a7c0bda02f7ff87fdc11bc403000000000000000000006667c388", "ee221bd6914010cf943aaaf1069be93a8dc7d78055821a5718fd6b88965c471e", [0x8, 0x6]}) keyctl$search(0x18, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="78cf3c3b7ab02db87425180000000000000000000000000000ca0ca2570000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000f0ffffffb7020000080000001823000071b04e9ee98d2c256de623cabb632a2caf2212c4c598ff545b6a6060c172dc356e799ba8c38d5547b04c2754501ebb185ceda6e4963300d2e724cdbfc4c3e5c603664b89fcdaa43cbadff04e0000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x18, 0x1, 0x100, &(0x7f0000001100)="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"}) 1m37.653182759s ago: executing program 3 (id=859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20003) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r2 = timerfd_create(0x8, 0x80800) timerfd_settime(r2, 0x0, &(0x7f00000004c0), 0x0) 1m37.150175705s ago: executing program 3 (id=866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) (async) sendto$inet(r0, &(0x7f0000000040)="4098b272", 0x4, 0x4000000, 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x7ffff006) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1m37.066976258s ago: executing program 3 (id=869): r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) 1m36.89263812s ago: executing program 3 (id=873): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80, 0x146) getdents64(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x1044, 0x0, 0x0, 0xf6, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m36.491293674s ago: executing program 3 (id=875): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) rseq(&(0x7f0000000000), 0x6c, 0x2000000000000000, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) syz_usbip_server_init(0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1000706, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r2, 0x8, 0x4000, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a541, 0x52) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) 1m36.30124756s ago: executing program 3 (id=876): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m30.209523966s ago: executing program 34 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 9) 1m29.756732787s ago: executing program 2 (id=925): socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080), 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x16, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x2}}) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB], 0x25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.799658153s ago: executing program 2 (id=929): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async, rerun: 64) r3 = socket(0x2b, 0x1, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f00005d1000/0x4000)=nil, 0x4000, 0xc) (async, rerun: 64) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r8) (async) ptrace$poke(0x1, r8, &(0x7f0000000080), 0x20000000) setsockopt$inet6_group_source_req(r3, 0x29, 0x4, 0x0, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r9, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000a5f6b2f078ed30000000000000000000000000000000000000000000000000000000000000000c0000000000000000002000000000000000000000000000e5000000000100"/108], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m28.491157862s ago: executing program 2 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b40000001800dd8d000000000000000002000000fd000006000000000600150004000000900016808c00088088000180840003"], 0xb4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, 0x0, &(0x7f0000000040)) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt(r4, 0x10001, 0x8, &(0x7f0000000340)="022c9b305d9b57d313d5ac8fda0d144c84518ec3023c8d0b2c1b03006a498d78d12836179fd0fb46ecb049b81295b8b3d145f1143e5cef5b82f61d68e3f7f2fa5785f7745e614817c8a79361e35244b37f6e9a1bec15e79ce3d8740d6c9a241f1302f44bade7208bfb7fc09d277b82dc6f9b8833bac7822aa57343d03062f20636347bde126b2a0d052e61b90f5e08918b2bb172ba5dfc55662d266fe791a81e124eb2b0528b6b2f8fcf9356c7125df0bd1d5b08a06964b040d654da11ed01fe115bccf294a76aedf2ae3e10b79183f01a", 0xd1) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000000)=0x1) 1m28.125449926s ago: executing program 2 (id=931): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000010002000008000f40fe000000", 0x24) syz_open_dev$tty20(0xc, 0x4, 0x1) 1m27.651308459s ago: executing program 35 (id=789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a7000000000000001800000000000000000000000000000095000000000000009500000000000000c2632ea0b2e6ccfa335522a2d852d003302d1274b264eb1baed7eb1987f9972891e94d5b8a9f494abafa4ca63268c6c70cea4cc91abdaee59a571e66c6371aaa06b3e052"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 1m27.087347378s ago: executing program 2 (id=934): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) r1 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x10000, 0x0, 0x10000001}) io_uring_enter(r1, 0x0, 0xffefffff, 0x21, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) 1m27.079780874s ago: executing program 2 (id=935): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nodelalloc}]}, 0x1, 0x5be, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x15) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'pim6reg0', 0x32, 0x35}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r2 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r2, r2, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 1m20.208778304s ago: executing program 36 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x90, 0xcb, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xe1}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1m19.976407351s ago: executing program 37 (id=876): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m13.394834345s ago: executing program 9 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000014c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0xc051) accept(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m11.676690666s ago: executing program 9 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0afcff0000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.749053791s ago: executing program 38 (id=935): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nodelalloc}]}, 0x1, 0x5be, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x15) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'pim6reg0', 0x32, 0x35}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r2 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r2, r2, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 1m10.466984422s ago: executing program 9 (id=1024): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xb456b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000e01}, 0x8080) 1m10.383622751s ago: executing program 9 (id=1025): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000140)=0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r3, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}, 0x1c, 0x0}, 0x400c040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x21c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x1cc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf2f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x21c}}, 0x4) 1m10.286391458s ago: executing program 9 (id=1028): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) 1m10.222945264s ago: executing program 9 (id=1031): bpf$PROG_LOAD(0xffffffffffffff90, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb593, &(0x7f000000cf3d)=""/195}, 0x23) 53.723022804s ago: executing program 39 (id=1031): bpf$PROG_LOAD(0xffffffffffffff90, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb593, &(0x7f000000cf3d)=""/195}, 0x23) 40.467302493s ago: executing program 1 (id=1301): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) (fail_nth: 1) 40.229048087s ago: executing program 1 (id=1302): socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0xe5) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400), 0xfe, 0x59c, &(0x7f0000000440)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff04, 0x0) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000008c0)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000001b00)=""/4119, 0x1017) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f40)={'vlan0\x00', &(0x7f0000000e40)=@ethtool_drvinfo={0x3, "ad2d53b155f55222074ac545b0b526834451f5c63771cddd30b1de1aee81de2a", "7d774b76005c8846835ae47ff6ba275800", "07ffda7e8037293db8c178f1f44bc1156e55e87a9c45eef2eef7630542683565", "70df1710d3518991326dbd966869e5a5a02f091c53bc8045071241d866110bdb", "c6eda83fa7ff6dedb263ae5efc60938baa18c9acce190528f7c8b31464be1e81", "183f19e71e9dc3962aa67400"}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 38.972673218s ago: executing program 1 (id=1308): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46aa67cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776cecb170c6c6a1fbf59567e1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558fd25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40"], 0xf9, 0x1213, &(0x7f0000000600)="$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") syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 37.802206052s ago: executing program 1 (id=1318): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7f, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) listns(&(0x7f0000001140)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0x4, 0x1}, 0x6) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r11, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000002340)={0x6, 0x0, &(0x7f0000002240)=[{&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/188, 0xbc}], &(0x7f00000022c0)=[0xceb3, 0x5, 0x7fffffff, 0x9, 0x0, 0x80, 0x4, 0x7, 0x64], 0x6}, 0x20) 37.536021458s ago: executing program 1 (id=1323): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipmr_delroute={0x2c, 0x19, 0x400, 0x70bd27, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5, 0x1000}, [@RTA_SRC={0x8, 0x2, @multicast2}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x2, 0xf, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x64, 0x0, 0xed, 0x71, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0xb, [{@empty}]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0xf, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf0f}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x1, 0x5, "7586bf"}, {0x1, 0xb, "79f97a41792b60a133"}]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0x3, [0x6]}, @ssrr={0x89, 0xf, 0xd9, [@dev={0xac, 0x14, 0x14, 0x30}, @local, @empty]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x3, [0xe4ba, 0xfffffd4d, 0x1ff]}, @lsrr={0x83, 0x13, 0x91, [@remote, @multicast2, @local, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x2, 0xf, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x64, 0x0, 0xed, 0x71, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0xb, [{@empty}]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0xf, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf0f}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x1, 0x5, "7586bf"}, {0x1, 0xb, "79f97a41792b60a133"}]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0x3, [0x6]}, @ssrr={0x89, 0xf, 0xd9, [@dev={0xac, 0x14, 0x14, 0x30}, @local, @empty]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x3, [0xe4ba, 0xfffffd4d, 0x1ff]}, @lsrr={0x83, 0x13, 0x91, [@remote, @multicast2, @local, @local]}]}}}}}) sendto$packet(r0, &(0x7f00000001c0)="eb9b3da5ab485fb422af137f591c86bd7d8c45a472836289adf72dc338d6242ddc38d9a37015c306a8c170b3fb5009aecc0c52107b5f472d5843abb73f948d0af18dc0af6977fd1a211bcabd7a50a72f4945eab0faaf67b59906", 0x5a, 0x40005, &(0x7f00000004c0)={0x11, 0xf5, r2, 0x1, 0x5, 0x6, @remote}, 0x14) (async) sendto$packet(r0, &(0x7f00000001c0)="eb9b3da5ab485fb422af137f591c86bd7d8c45a472836289adf72dc338d6242ddc38d9a37015c306a8c170b3fb5009aecc0c52107b5f472d5843abb73f948d0af18dc0af6977fd1a211bcabd7a50a72f4945eab0faaf67b59906", 0x5a, 0x40005, &(0x7f00000004c0)={0x11, 0xf5, r2, 0x1, 0x5, 0x6, @remote}, 0x14) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x1, @loopback, 0x5}, @ib={0x1b, 0x1, 0x35, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 37.423251861s ago: executing program 1 (id=1325): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=')\\%\x00', 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_emit_ethernet(0x6e, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=')\\%\x00', 0xfffffffffffffffe) (async) 28.013295586s ago: executing program 5 (id=1380): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 27.914975643s ago: executing program 5 (id=1382): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) openat(0xffffffffffffff9c, 0x0, 0xc00, 0x836d9fb164f927b3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x78088000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 26.06235975s ago: executing program 5 (id=1389): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, 0x0, 0x4, 0x37}, 0x94) 25.987143666s ago: executing program 5 (id=1391): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ptrace(0x10, 0x0) ptrace$getregs(0x4210, 0x0, 0x800000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x2}}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) fsetxattr$smack_xattr_label(r5, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f0000000100)={'GPL\x00'}, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 24.82912983s ago: executing program 5 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x5, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0xf00, 0x0, 0x800}, 0x20000000) 24.723188786s ago: executing program 5 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r4, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)='R', 0x1}], 0x1}}], 0x1, 0x48050) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002080), 0x40100, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000020c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x3020d0, 0x354f00}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000020c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x3020d0, 0x354f00}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 21.201953642s ago: executing program 40 (id=1325): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=')\\%\x00', 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_emit_ethernet(0x6e, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=')\\%\x00', 0xfffffffffffffffe) (async) 8.463367836s ago: executing program 41 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r4, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)='R', 0x1}], 0x1}}], 0x1, 0x48050) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002080), 0x40100, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000020c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x3020d0, 0x354f00}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000020c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x3020d0, 0x354f00}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 4.739220187s ago: executing program 6 (id=1511): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000480)={0xb, @output={0x0, 0x0, {0x2, 0x7ffffffd}, 0x4, 0x7}}) (fail_nth: 1) 4.7345596s ago: executing program 6 (id=1512): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000200)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x6, 0x0, 0x1}}, {@x25={0x805, {0x3, 0x2, 0x23, "93cec1f6126dc0b9e0"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x20, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0x42}, @exit, @btf_id={0x18, 0xe, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @printk={@s}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x100, 0xca, &(0x7f0000000500)=""/202, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xd, 0x7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x0, 0x5, 0x2, 0xa}, {0x0, 0x4, 0x10, 0xa}, {0x0, 0x2, 0x8, 0xa}, {0x1, 0x3, 0x2, 0x9}, {0x5, 0x5, 0xf, 0xb}, {0x1, 0x5, 0x10, 0x5}], 0x10, 0x7}, 0x94) unshare(0x8000000) r1 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000003c0)) 4.662835838s ago: executing program 6 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x47]}}]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x2, 0x1) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2840, 0x16f) move_pages(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000980)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000090500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000000680)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/26, 0x1a}], 0x8}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000, 0x20}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x44085) 4.022693107s ago: executing program 0 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000014c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0xc051) accept(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.318756489s ago: executing program 6 (id=1524): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$pptp(0x18, 0x1, 0x2) io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1ff, r2, 0x0}]) io_getevents(r1, 0x0, 0x3c, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3938700}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000480)={0xb, @output={0x0, 0x0, {0x2, 0x7ffffffd}, 0x4, 0x7}}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000580)={{}, "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"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000140)) r5 = msgget(0x2, 0x200) msgctl$IPC_RMID(r5, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f00000000c0)=""/71) syz_open_procfs(r4, &(0x7f0000000040)='net/udplite\x00') 2.758844868s ago: executing program 0 (id=1526): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x78088000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.681784742s ago: executing program 7 (id=1528): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x300, 0x0, {0x0, 0x0, 0x0, r4, 0xb456b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000e01}, 0x8080) 2.619228876s ago: executing program 8 (id=1530): syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="7a5c377c4c7bc561e69bd1330b00bafbc1e8a840518df80e4aed7401d2c350945f6bd3a46f7f52fdf13c7550ee49765283f77f632c1fc2e0b9de07fb2e3b5140a989a2bd200bbeca7b35cc6d8835ad19c94c15d591b4715512b14e30b871967cf359da8edbb9158d19149e84347524be49144b28f7910bd4ba27e17bac038f51bdb52cd37dbb19cdcfad85341b3eff116ce004bb35a4c73fdd6e4a7b1a4f99a8cb86018a241dc18e93d4b5b821401b5208428178770bde466ad5338609b0f0d584f6f256038e33600ef69fb534ff55063bd35c33f93362b37693c72a6df7e088e0325324c48f11f6e2f3a413c3c596e61ef49b603f19ada9fe58dce1edc0874eb1d56b7a1a5733d9075fc172a414bb095e748cc2f34bea9d20ec932d8a3e14f7d08315657f68efaa001de4f173af3e0739fc120a2511989e2bdf74b1f92d00bb623a7e", 0x143) 2.600822581s ago: executing program 4 (id=1531): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 2.583038086s ago: executing program 7 (id=1532): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa6f, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r2, &(0x7f0000000000)=""/134, 0x86) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x25, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000340), &(0x7f0000000400)=r5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}, [@alu={0x4, 0x1, 0xd, 0x7, 0x2, 0x100, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x59, &(0x7f0000000180)=""/89, 0x40f00, 0x4e, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1ca6e, r3, 0x7, &(0x7f00000002c0)=[r4, r6], &(0x7f0000000300)=[{0x5, 0x5, 0x7, 0x2}, {0x3, 0x5, 0x5}, {0x4, 0x5, 0x8, 0x6}, {0x4, 0x3, 0x6, 0x8}, {0x2, 0x2, 0x4, 0x4}, {0x4, 0x4, 0x1, 0x4}, {0x4, 0x1, 0x9}]}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x14, 0x14, 0x119, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 1.766893218s ago: executing program 6 (id=1533): socket$pptp(0x18, 0x1, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x60800, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980900}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r3, @ANYBLOB="010101000000ffdbdf252b00000008000300", @ANYRES32=r4, @ANYBLOB="0a00060050505050505000000500340046000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r6, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.766566498s ago: executing program 8 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = timerfd_create(0x8, 0x80800) timerfd_settime(r3, 0x0, &(0x7f00000004c0), 0x0) 1.763626211s ago: executing program 4 (id=1535): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000014c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0xc051) accept(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.599261374s ago: executing program 7 (id=1536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 1.510110588s ago: executing program 0 (id=1537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 1.432807818s ago: executing program 7 (id=1538): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000003c0)='./file0/file1\x00', 0xc00, &(0x7f0000000340)=ANY=[], 0x1, 0x2d5, &(0x7f0000000840)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) mmap(&(0x7f000025f000/0x4000)=nil, 0x4000, 0x2000004, 0x8031, 0xffffffffffffffff, 0x25104000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) unshare(0x26020480) flistxattr(0xffffffffffffffff, &(0x7f0000000680)=""/155, 0x9b) 732.097898ms ago: executing program 6 (id=1539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118af000000000095", @ANYBLOB="d36270f6d63455297e5b85e595c0b649d41c8aeb77b869b6c54d0fd1414d7b4294974fe1d644b3f79ac7fa53598b4bf0b1dd559678e4c9c2501d73ab5674fc13998813a350d96f1cdb0c52f0479bc7f4c8648509922ec12f391be4610d7e7d8bec4281fa885643bd6816be729f5e1d5b748ed684e67652cd15e6637ecb169347f802bfc061cbdef988b273c92e5657a6c8459fe0f700388156c6c80277eb46da117545272b4bf994e4b44e1b7e2b83f76354fbc7f86a5aa9216743ec24898f9bdde988c2f1cb7a6ec9138cdc9c1176ddbe06a6f6a99dc4ab77313c148439036a96a3611e57beee5816e7f075668275b5da328c", @ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xb787b14416c6952f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500000000001ec800"/28], 0x50) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7ff, 0x8, 0x100}) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000240)={0xa, 0x400a, 0xe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000340)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000400)={r10}) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x18) syz_io_uring_setup(0x39b5, &(0x7f0000000180)={0x0, 0x6e5f, 0x24, 0xfffffffe, 0x3d8, 0x0, r12}, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1d, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000400000000000000cf07000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500003fa07f17e5d2043acdb16b0083000000bf0900000000000055090100000000009500000000000000182500000000000000000000001600", @ANYRES32=r1, @ANYBLOB="00000000ff03000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085200000020000008520000005000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x79, &(0x7f0000000540)=""/121, 0x0, 0x11, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r6, r7, r12, r13, r14], &(0x7f0000000780)=[{0x4, 0x3, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x7}, {0x5, 0x1, 0x5, 0x1}, {0x3, 0x3, 0x0, 0x8}, {0x4, 0x1, 0xd, 0xb}], 0x10, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x122408, &(0x7f0000000080)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0xff, 0x4c5, &(0x7f0000000ac0)="$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") 691.527072ms ago: executing program 8 (id=1540): socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8202000fcff"], 0x25) 616.630526ms ago: executing program 8 (id=1541): fanotify_init(0x8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000000000)={0x19980330}, 0x0) 615.833926ms ago: executing program 0 (id=1542): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7f, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) listns(&(0x7f0000001140)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0) 570.618493ms ago: executing program 4 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@nolazytime}, {@errors_remount}, {@mblk_io_submit}, {@block_validity}]}, 0x1, 0x60e, &(0x7f00000003c0)="$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") r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d30000000000000080011"], 0x34}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000005c000380580000800800034000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='kv'], 0x2a) fchdir(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x94) 549.892238ms ago: executing program 7 (id=1544): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000}, @in={0x2, 0x4e20, @loopback}}}, 0x118) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80, 0x146) getdents64(r1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x1044, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x40000000) 548.901336ms ago: executing program 0 (id=1545): syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="7a5c377c4c7bc561e69bd1330b00bafbc1e8a840518df80e4aed7401d2c350945f6bd3a46f7f52fdf13c7550ee49765283f77f632c1fc2e0b9de07fb2e3b5140a989a2bd200bbeca7b35cc6d8835ad19c94c15d591b4715512b14e30b871967cf359da8edbb9158d19149e84347524be49144b28f7910bd4ba27e17bac038f51bdb52cd37dbb19cdcfad85341b3eff116ce004bb35a4c73fdd6e4a7b1a4f99a8cb86018a241dc18e93d4b5b821401b5208428178770bde466ad5338609b0f0d584f6f256038e33600ef69fb534ff55063bd35c33f93362b37693c72a6df7e088e0325324c48f11f6e2f3a413c3c596e61ef49b603f19ada9fe58dce1edc0874eb1d56b7a1a5733d9075fc172a414bb095e748cc2f34bea9d20ec932d8a3e14f7d08315657f68efaa001de4f173af3e0739fc120a2511989e2bdf74b1f92d00bb623a7e", 0x143) 541.092173ms ago: executing program 8 (id=1546): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x5, 0x4) 417.152213ms ago: executing program 8 (id=1547): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4fc, &(0x7f0000000d40)="$eJzs3c9vVNUeAPDvTDu0lELhPRbvvbz3QETREKY/gIawETYaQ0iMxJULqO3QNJ1hmk6JtLIoS/ckkrjSP8GdCxNWLty5050bXJigEg01cTHm3hnaob+1P8bOfD7J7b3nnGG+53Q458w9MHMCaFvHI2I+IvZFxI2I6KvnZ+pHXKodyeOePrk7uvDk7mgmqtVrP2XS8iQvGv5M4kD9Obsj4u03It7LrIxbmZ2bHCkWC9P1dP9Maaq/Mjt3ZiJbzxkaHhweuHD2/NC2tfVY6bPHr09ceeeLz//36Ov5Vz9IqtX74cG0rLEd26nW9Fz0NuR1RsSVnQjWJJ31vz/sPUlv+0dEnEj7f190pK8mANDKqtW+qPY1pgGAVpfc//dGJpuvrwX0Rjabz9fW8I5GT7ZYrsyc7ivfvjUW6RrW4chlb04UCwP1tcLDkcsk6cH0eik99Fz6fuFsRByJiPtd+9Py/Gi5ONbMNz4A0MYOLJv/f+2qzf8AQIvrbnYFAIBdZ/4HgPZj/geA9vMn5n+fDgSAFuH+HwDaj/kfANrPhvP/vd2pBwCwK966ejU5qgu1779+9k3dZ8YKlcl86fZofrQ8PZUfL5fHi4X8aLW60fMVy+WpwXOLycrs3PVS+fatmesTpZHxwvVCbicbAwBsypFjD79NJv35i/vTIxr2cjBXQ2vLNrsCQNN0NLsCQNP4PA+0r03c41sGgBa3yha9z1nzvwg9sPkr7FWn/m39H9rVVtb/rR3A3vbX1v9f2/Z6ALvPHA7tq1rN2PMfANqMNX5gS//+vy7fHQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDr6k2PTDaf7gU+n/zM5vMRByPicOQyNyeKhYGIOBQR33TlupL0YLMrDQBsUfaHTH3/r1N9J3uXl+7L/NaVniPi/Y+vfXRnZGZmejDJ/3kxf+ZBPX9oXzMaAAA0urQyqzZP188NN/JPn9wdfXbsZhUfX65tLprEXagftZLO6EzP3ZGLiJ5fMvV0TfJ+pWMb4s/fi4h/LbX/TkOE3nQNpLbz6fL4SeyDOxB/6fe/PH72ufjZtCw559LfxT+3oS7Qbh5ero2T9b6XdLF6/8vG8fS8ev/vTkeorUvGv2QsWVgx/mUXx7+OFfEzaZ8/vphevyaPz3355orMal+t7F7EfzpXi59ZjJ9ZffzNndxkG7/77/9PrFVW/STi1Krtf7YjdSkdZvtnSlP9ldm5MxOlkfHCeOHW0NDw4PDAhbPnh/rTNeraz69Wi/HjxdOH1oqftL9njfjd67c/Xtpk+z/9/ca7L6wT/5UXV3/9j64TP5kTX95k/JGeS2tu353EH1uj/Ru8/nF6k/EffT83tsmHAgC7oDI7NzlSLBamN7hI3mtu9BgXe/Mi5iO26wnTRYmI+Du0y8VWLpo9MgE7banTN7smAAAAAAAAAAAAAADAWiqzc5NdO/xprWa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb1RwAAAP//mz3Jtw==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) syz_read_part_table(0x1078, &(0x7f0000000000)="$eJzs0MFJxUAUBdA35n8zbtRO3AhubURswBbEZGEfdmAhliMIgvBkMkk60L85Z5GZkHn3hglO6iKPNSJyez/sX+btRER8P/T9+fJ8a0uppR3/ycx4mSOyHLfxscbNa9s8330+vUdct/RpbSk9aepZtx9ry1k2w7DUHe4vY9x/ZOjLOlh7Vl61ssevP7sYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhHvwEAAP//yRAapg==") 416.126957ms ago: executing program 4 (id=1548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xfb}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) 399.358166ms ago: executing program 0 (id=1549): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0xa, 0x6, 0x0, 0x9, 0x7, 0xb, 0xfffffffffffffffc, 0x8, 0x9657, 0x3, 0x7fffffff, 0x401, 0x1e, 0x9, 0x80000000000000, 0xcc0, 0x10048, 0x3, 0x94d6, 0xd, 0x2, 0x10000000010000c, 0x6, 0xfffffffffffffffa, 0x4, 0x2000000000000}) syz_open_dev$usbfs(0x0, 0x204, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 362.360605ms ago: executing program 7 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = timerfd_create(0x8, 0x80800) timerfd_settime(r3, 0x0, &(0x7f00000004c0), 0x0) 211.228811ms ago: executing program 4 (id=1551): socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8202000fcff"], 0x25) 0s ago: executing program 4 (id=1552): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ptrace(0x10, 0x0) ptrace$getregs(0x4210, 0x0, 0x800000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x2}}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) fsetxattr$smack_xattr_label(r5, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f0000000100)={'GPL\x00'}, 0x5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 235.855839][ T1950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.855865][ T1950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.884578][ T7951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.884606][ T7951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.985371][ T4404] 8021q: adding VLAN 0 to HW filter on device eth18 [ 236.135270][ T9540] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 236.140945][ T9543] loop5: detected capacity change from 0 to 1024 [ 236.141354][ T9543] EXT4-fs: Ignoring removed bh option [ 236.141716][ T9543] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 236.172891][ T9540] loop0: detected capacity change from 0 to 8192 [ 236.173305][ T9543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.178206][ T9540] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.219976][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.316268][ T4717] Bluetooth: hci3: command 0x0406 tx timeout [ 236.480306][ T4404] 8021q: adding VLAN 0 to HW filter on device eth19 [ 236.757277][ T9584] loop7: detected capacity change from 0 to 512 [ 236.784698][ T9588] FAULT_INJECTION: forcing a failure. [ 236.784698][ T9588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.787534][ T9584] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 236.790307][ T9588] CPU: 0 UID: 0 PID: 9588 Comm: syz.0.1008 Tainted: G L syzkaller #0 PREEMPT [ 236.790334][ T9588] Tainted: [L]=SOFTLOCKUP [ 236.790338][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 236.790343][ T9588] Call trace: [ 236.790347][ T9588] show_stack+0x2c/0x3c (C) [ 236.790370][ T9588] __dump_stack+0x30/0x40 [ 236.790381][ T9588] dump_stack_lvl+0xd8/0x12c [ 236.790391][ T9588] dump_stack+0x1c/0x28 [ 236.790401][ T9588] should_fail_ex+0x41c/0x590 [ 236.790412][ T9588] should_fail+0x14/0x24 [ 236.790421][ T9588] should_fail_usercopy+0x20/0x30 [ 236.790428][ T9588] _inline_copy_from_user+0x3c/0x174 [ 236.790439][ T9588] move_addr_to_kernel+0x88/0x168 [ 236.790448][ T9588] __sys_bind+0x12c/0x268 [ 236.790456][ T9588] __arm64_sys_bind+0x84/0x9c [ 236.790464][ T9588] invoke_syscall+0x98/0x244 [ 236.790474][ T9588] el0_svc_common+0xec/0x23c [ 236.790484][ T9588] do_el0_svc+0x4c/0x5c [ 236.790493][ T9588] el0_svc+0x64/0x260 [ 236.790504][ T9588] el0t_64_sync_handler+0x48/0x148 [ 236.790514][ T9588] el0t_64_sync+0x198/0x19c [ 236.846518][ T9594] loop0: detected capacity change from 0 to 512 [ 236.857332][ T9584] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -ENXIO [ 236.870613][ T9594] EXT4-fs: Mount option(s) incompatible with ext2 [ 236.974835][ T4728] Bluetooth: hci0: command tx timeout [ 237.625975][ T4728] Bluetooth: hci1: command 0x0406 tx timeout [ 238.153908][ T9607] loop7: detected capacity change from 0 to 8192 [ 238.162912][ T9607] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.443713][ T4728] Bluetooth: hci5: command tx timeout [ 239.174929][ T50] Bluetooth: hci0: command tx timeout [ 239.307490][ T9635] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1019'. [ 239.845933][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.851502][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1024'. [ 239.857609][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.858665][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.859091][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.859415][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.932430][ T9659] ip_tables: iptables: counters copy to user failed while replacing table [ 240.431058][ T6718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.431106][ T6718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38732 - 0 [ 240.570231][ T6718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.570290][ T6718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38732 - 0 [ 240.607950][ T9696] FAULT_INJECTION: forcing a failure. [ 240.607950][ T9696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.607986][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.5.1036 Tainted: G L syzkaller #0 PREEMPT [ 240.608002][ T9696] Tainted: [L]=SOFTLOCKUP [ 240.608006][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 240.608013][ T9696] Call trace: [ 240.608017][ T9696] show_stack+0x2c/0x3c (C) [ 240.608037][ T9696] __dump_stack+0x30/0x40 [ 240.608048][ T9696] dump_stack_lvl+0xd8/0x12c [ 240.608058][ T9696] dump_stack+0x1c/0x28 [ 240.608068][ T9696] should_fail_ex+0x41c/0x590 [ 240.608079][ T9696] should_fail+0x14/0x24 [ 240.608089][ T9696] should_fail_usercopy+0x20/0x30 [ 240.608095][ T9696] simple_read_from_buffer+0xc4/0x238 [ 240.608106][ T9696] proc_fail_nth_read+0x1a8/0x248 [ 240.608114][ T9696] vfs_read+0x230/0x8c8 [ 240.608121][ T9696] ksys_read+0x12c/0x228 [ 240.608128][ T9696] __arm64_sys_read+0x84/0x98 [ 240.608134][ T9696] invoke_syscall+0x98/0x244 [ 240.608144][ T9696] el0_svc_common+0xec/0x23c [ 240.608154][ T9696] do_el0_svc+0x4c/0x5c [ 240.608163][ T9696] el0_svc+0x64/0x260 [ 240.608175][ T9696] el0t_64_sync_handler+0x48/0x148 [ 240.608185][ T9696] el0t_64_sync+0x198/0x19c [ 240.687623][ T6718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.689603][ T6718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38732 - 0 [ 240.711765][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.711812][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.711951][ T9648] bridge_slave_0: entered allmulticast mode [ 240.712447][ T9648] bridge_slave_0: entered promiscuous mode [ 240.713715][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.713743][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.713829][ T9648] bridge_slave_1: entered allmulticast mode [ 240.714263][ T9648] bridge_slave_1: entered promiscuous mode [ 240.754038][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.759946][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.801336][ T6718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.801374][ T6718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38732 - 0 [ 240.836467][ T9648] team0: Port device team_slave_0 added [ 240.846282][ T9648] team0: Port device team_slave_1 added [ 240.885439][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.885473][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.885492][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.887936][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.887948][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.887966][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.966431][ T9648] hsr_slave_0: entered promiscuous mode [ 240.966817][ T9648] hsr_slave_1: entered promiscuous mode [ 240.967061][ T9648] debugfs: 'hsr0' already exists in 'hsr' [ 240.967078][ T9648] Cannot create hsr debugfs directory [ 241.035695][ T9715] netlink: 'syz.0.1039': attribute type 3 has an invalid length. [ 241.040741][ T6718] bridge_slave_1: left allmulticast mode [ 241.040756][ T6718] bridge_slave_1: left promiscuous mode [ 241.040823][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.048070][ T6718] bridge_slave_0: left allmulticast mode [ 241.048446][ T6718] bridge_slave_0: left promiscuous mode [ 241.048645][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.250354][ T6718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.277720][ T6718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.299014][ T6718] bond0 (unregistering): Released all slaves [ 241.302895][ T6718] bond1 (unregistering): Released all slaves [ 241.396876][ T6718] tipc: Left network mode [ 241.497602][ T9744] loop0: detected capacity change from 0 to 256 [ 241.506756][ T9744] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 241.506788][ T9744] FAT-fs (loop0): Filesystem has been set read-only [ 241.780704][ T6718] hsr_slave_0: left promiscuous mode [ 241.817998][ T6718] hsr_slave_1: left promiscuous mode [ 241.818349][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.818362][ T6718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.820932][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.820944][ T6718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.836356][ T6718] veth1_macvtap: left promiscuous mode [ 241.836388][ T6718] veth0_macvtap: left promiscuous mode [ 241.836433][ T6718] veth1_vlan: left promiscuous mode [ 241.836467][ T6718] veth0_vlan: left promiscuous mode [ 242.121154][ T50] Bluetooth: hci4: command tx timeout [ 242.182546][ T9776] loop5: detected capacity change from 0 to 512 [ 242.199796][ T9776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.223149][ T9776] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1046: Unimplemented hash flags: 0x0001 [ 242.223189][ T9776] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1046: Corrupt directory, running e2fsck is recommended [ 242.223279][ T9776] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.1046: path /148/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 242.331368][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.454148][ T6718] team0 (unregistering): Port device team_slave_1 removed [ 242.462603][ T6718] team0 (unregistering): Port device team_slave_0 removed [ 242.562371][ T9789] loop0: detected capacity change from 0 to 512 [ 242.601299][ T9789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.615478][ T9789] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1048: Unimplemented hash flags: 0x0001 [ 242.615511][ T9789] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1048: Corrupt directory, running e2fsck is recommended [ 242.615560][ T9789] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1048: path /10/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 242.661543][ T9798] tipc: Started in network mode [ 242.661587][ T9798] tipc: Node identity 56a9b5670d32, cluster identity 4711 [ 242.661687][ T9798] tipc: Enabled bearer , priority 0 [ 242.736942][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.785449][ T9809] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1052'. [ 242.994207][ T9822] loop5: detected capacity change from 0 to 4096 [ 243.160456][ T9822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.279058][ T9648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.294198][ T9648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.294565][ T9648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.297929][ T9648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.298783][ T9648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.304519][ T9648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.305637][ T9648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.316489][ T9648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.378342][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.451265][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.467174][ T9648] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.471461][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.471514][ T7951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.474838][ T9851] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1058'. [ 243.476533][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.476568][ T7951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.588537][ T9858] loop5: detected capacity change from 0 to 2048 [ 243.613846][ T9858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.811386][ T9648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.840596][ T9648] veth0_vlan: entered promiscuous mode [ 243.857500][ T9648] veth1_vlan: entered promiscuous mode [ 243.881292][ T4882] tipc: Node number set to 1536931175 [ 243.882504][ T9648] veth0_macvtap: entered promiscuous mode [ 243.898895][ T9648] veth1_macvtap: entered promiscuous mode [ 243.902229][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.903287][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.913664][ T7940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.913820][ T7940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.913845][ T7940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.913865][ T7940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.935462][ T9886] loop0: detected capacity change from 0 to 512 [ 243.965152][ T9886] EXT4-fs (loop0): inodes count not valid: 66 vs 32 [ 243.985887][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.985913][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.030292][ T9892] loop0: detected capacity change from 0 to 512 [ 244.034747][ T9757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.034788][ T9757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.040467][ T9892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.051354][ T9892] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1064: Unimplemented hash flags: 0x0001 [ 244.051387][ T9892] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1064: Corrupt directory, running e2fsck is recommended [ 244.053134][ T9892] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1064: path /15/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 244.240004][ T9908] loop7: detected capacity change from 0 to 512 [ 244.243189][ T9908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.260478][ T9908] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1067: Unimplemented hash flags: 0x0001 [ 244.260514][ T9908] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1067: Corrupt directory, running e2fsck is recommended [ 244.260651][ T9908] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1067: path /42/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 244.282474][ T9892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.350095][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.374277][ T50] Bluetooth: hci4: command tx timeout [ 244.411400][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.529936][ T9926] binder: 9925:9926 got transaction to invalid handle, 1 [ 244.534566][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.536530][ T9926] binder: 9925:9926 cannot find target node [ 244.538237][ T9926] binder: 9925:9926 transaction async to 0:0 failed 110/29201/-22, code 0 size 0-0 line 3252 [ 244.540903][ T4809] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.635802][ T50] Bluetooth: Frame is too long (len 32, expected len 4) [ 245.323775][ T9953] loop1: detected capacity change from 0 to 4096 [ 245.324532][ T9953] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.326787][ T9953] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 245.556645][ T9968] loop7: detected capacity change from 0 to 256 [ 245.795650][ T9968] vfat: Unknown parameter '' [ 245.796168][ T4404] 8021q: adding VLAN 0 to HW filter on device eth20 [ 245.915583][ T9968] loop7: detected capacity change from 0 to 512 [ 245.925819][ T9968] EXT4-fs (loop7): Test dummy encryption mode enabled [ 245.950068][ T9968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 245.950141][ T9968] System zones: 1-12 [ 245.958156][ T9968] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.964075][ T9968] EXT4-fs error (device loop7): htree_dirblock_to_tree:1051: inode #2: comm syz.7.1077: Directory hole found for htree leaf block 0 [ 245.969705][ T9968] EXT4-fs (loop7): Remounting filesystem read-only [ 246.055504][ T8862] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 246.097056][ T9989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 246.103196][ T9989] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1082: Unimplemented hash flags: 0x0001 [ 246.103236][ T9989] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1082: Corrupt directory, running e2fsck is recommended [ 246.103325][ T9989] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1082: path /21/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 246.121831][ T9991] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1083: inode has both inline data and extents flags [ 246.121867][ T9991] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.124497][ T9991] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1083: couldn't read orphan inode 15 (err -117) [ 246.124527][ T9991] loop7: lost filesystem error report for type 5 error -117 [ 246.128913][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 246.128937][ C0] EXT4-fs (loop7): initial error at time 489: ext4_orphan_get:1399: inode 15 [ 246.128982][ C0] EXT4-fs (loop7): last error at time 489: ext4_orphan_get:1404 [ 246.129500][ T9991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.199759][ T9991] netlink: 'syz.7.1083': attribute type 10 has an invalid length. [ 246.224759][ T9991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.225810][ T9991] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 246.245008][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.280624][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.281634][ T4404] 8021q: adding VLAN 0 to HW filter on device eth22 [ 246.327771][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1086'. [ 246.327813][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1086'. [ 246.341960][ T1067] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 246.342465][ T1067] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.350050][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1086'. [ 246.350088][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1086'. [ 246.389066][ T15] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.389347][ T1893] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.390322][ T1893] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.390370][ T1893] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.424691][T10011] gretap1: entered promiscuous mode [ 246.445572][ T4809] hid-generic 0005:4C4A:5505.0004: item fetching failed at offset 0/2 [ 246.445830][ T4809] hid-generic 0005:4C4A:5505.0004: probe with driver hid-generic failed with error -22 [ 246.490157][T10019] syz.7.1086 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 246.566435][T10019] bond1 (unregistering): Released all slaves [ 246.609174][T10021] fido_id[10021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.850154][ T50] Bluetooth: hci4: command tx timeout [ 246.860685][T10013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.869210][T10013] EXT4-fs (loop0): 1 truncate cleaned up [ 246.871180][T10013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.940586][T10039] Smack: duplicate mount options [ 246.949512][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.951510][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1091'. [ 246.961465][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1091'. [ 247.025201][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 247.027002][T10045] netlink: 74 bytes leftover after parsing attributes in process `syz.0.1090'. [ 247.081807][T10051] EXT4-fs: Ignoring removed bh option [ 247.107414][T10051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.187636][ T4404] 8021q: adding VLAN 0 to HW filter on device eth21 [ 247.213259][T10057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 247.219296][T10057] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1096: Unimplemented hash flags: 0x0001 [ 247.219331][T10057] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1096: Corrupt directory, running e2fsck is recommended [ 247.219389][T10057] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1096: path /25/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 247.582566][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.911039][T10088] overlayfs: workdir and upperdir must be separate subtrees [ 247.959776][ T4404] 8021q: adding VLAN 0 to HW filter on device eth23 [ 247.983767][ T4882] hid-generic 0000:FFFFFFFE:0800.0005: unknown main item tag 0x0 [ 247.983800][ T4882] hid-generic 0000:FFFFFFFE:0800.0005: unknown main item tag 0x0 [ 247.985810][ T4882] hid-generic 0000:FFFFFFFE:0800.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 248.009703][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.041023][T10097] Injecting memory failure for pfn 0x134d35 at process virtual address 0x20000000 [ 248.057745][T10097] Memory failure: 0x134d35: Sending SIGBUS to syz.0.1101:10097 due to hardware memory corruption [ 248.057840][T10097] Memory failure: 0x134d35: recovery action for dirty LRU page: Recovered [ 248.129910][T10111] binder: tried to use weak ref as strong ref [ 248.129942][T10111] binder: 10109:10111 Acquire 1 refcount change on invalid ref 0 ret -22 [ 248.130094][T10111] binder: 10109:10111 got transaction to invalid handle, 1 [ 248.130103][T10111] binder: 10109:10111 cannot find target node [ 248.130116][T10111] binder: 10109:10111 transaction async to 0:0 failed 113/29201/-22, code 0 size 0-0 line 3252 [ 248.133219][ T4809] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.189396][ T7951] wlan1: Trigger new scan to find an IBSS to join [ 248.301887][T10126] bond0: (slave team0): Releasing backup interface [ 248.312198][T10126] bridge_slave_0: left allmulticast mode [ 248.312235][T10126] bridge_slave_0: left promiscuous mode [ 248.312308][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.320819][T10126] bridge_slave_1: left allmulticast mode [ 248.321959][T10126] bridge_slave_1: left promiscuous mode [ 248.323152][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.334887][T10126] bond0: (slave bond_slave_0): Releasing backup interface [ 248.366207][T10126] bond0: (slave bond_slave_1): Releasing backup interface [ 248.397751][T10126] team0: Port device team_slave_0 removed [ 248.405517][T10126] team0: Port device team_slave_1 removed [ 248.405941][T10142] set_capacity_and_notify: 7 callbacks suppressed [ 248.405951][T10142] loop1: detected capacity change from 0 to 1024 [ 248.406293][T10142] EXT4-fs: Ignoring removed bh option [ 248.413131][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.419442][T10142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.426188][T10126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.504297][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.504335][T10126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.506591][T10126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.511610][T10133] team0: Mode changed to "activebackup" [ 248.521284][T10150] loop7: detected capacity change from 0 to 128 [ 248.533991][T10150] EXT4-fs (loop7): Test dummy encryption mode enabled [ 248.779425][T10150] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.802356][T10150] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 248.817949][ T4364] hid-generic 0000:FFFFFFFE:0800.0006: unknown main item tag 0x0 [ 248.819631][ T4364] hid-generic 0000:FFFFFFFE:0800.0006: unknown main item tag 0x0 [ 248.821826][ T4364] hid-generic 0000:FFFFFFFE:0800.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 248.826155][T10156] syzkaller0: entered promiscuous mode [ 248.827659][T10156] syzkaller0: entered allmulticast mode [ 248.909639][T10159] fido_id[10159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.064450][ T4728] Bluetooth: hci4: command tx timeout [ 249.160981][ T8862] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.444458][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.458319][T10175] binder: tried to use weak ref as strong ref [ 249.459503][T10175] binder: 10174:10175 Acquire 1 refcount change on invalid ref 0 ret -22 [ 249.461211][T10175] binder: 10174:10175 got transaction to invalid handle, 1 [ 249.462745][T10175] binder: 10174:10175 cannot find target node [ 249.463868][T10175] binder: 10174:10175 transaction async to 0:0 failed 116/29201/-22, code 0 size 0-0 line 3252 [ 249.466392][ T4882] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.319705][T10216] loop0: detected capacity change from 0 to 8192 [ 250.334557][T10216] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.568910][T10141] Set syz1 is full, maxelem 65536 reached [ 250.595858][T10231] loop5: detected capacity change from 0 to 1024 [ 250.598155][T10231] EXT4-fs: Ignoring removed bh option [ 250.608982][T10231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.108719][T10247] tipc: Enabling of bearer rejected, failed to enable media [ 251.373989][T10284] loop7: detected capacity change from 0 to 512 [ 251.377330][T10284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 251.456962][T10284] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1138: Unimplemented hash flags: 0x0001 [ 251.457007][T10284] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1138: Corrupt directory, running e2fsck is recommended [ 251.457079][T10284] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1138: path /60/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 251.543555][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.550179][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.618223][T10300] loop7: detected capacity change from 0 to 512 [ 251.649974][T10300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 251.671034][T10300] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1143: Unimplemented hash flags: 0x0001 [ 251.671069][T10300] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1143: Corrupt directory, running e2fsck is recommended [ 251.671170][T10300] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1143: path /61/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 251.917525][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.433398][ T9757] wlan1: Trigger new scan to find an IBSS to join [ 253.367015][T10340] tipc: Enabling of bearer rejected, failed to enable media [ 253.415941][T10354] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 253.454539][T10370] loop0: detected capacity change from 0 to 512 [ 253.461193][T10370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 253.797250][ T1893] wlan1: Creating new IBSS network, BSSID 9a:4a:37:5e:a8:da [ 254.400153][T10373] loop7: detected capacity change from 0 to 512 [ 254.437114][T10373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 254.468768][T10373] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1156: Unimplemented hash flags: 0x0001 [ 254.468801][T10373] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1156: Corrupt directory, running e2fsck is recommended [ 254.468897][T10373] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1156: path /66/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 254.476486][T10377] loop5: detected capacity change from 0 to 4096 [ 254.482622][T10377] EXT4-fs (loop5): Test dummy encryption mode enabled [ 254.521007][T10377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.561587][ T4728] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 254.595172][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.639693][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.721794][T10395] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1155: Unimplemented hash flags: 0x0001 [ 254.721875][T10395] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1155: Corrupt directory, running e2fsck is recommended [ 254.722633][T10395] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1155: path /38/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 254.923402][T10399] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 254.923447][T10399] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 254.976230][T10406] FAULT_INJECTION: forcing a failure. [ 254.976230][T10406] name failslab, interval 1, probability 100, space 1, times 0 [ 254.978778][T10406] CPU: 1 UID: 0 PID: 10406 Comm: syz.7.1163 Tainted: G L syzkaller #0 PREEMPT [ 254.978794][T10406] Tainted: [L]=SOFTLOCKUP [ 254.978798][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 254.978803][T10406] Call trace: [ 254.978807][T10406] show_stack+0x2c/0x3c (C) [ 254.978828][T10406] __dump_stack+0x30/0x40 [ 254.978840][T10406] dump_stack_lvl+0xd8/0x12c [ 254.978850][T10406] dump_stack+0x1c/0x28 [ 254.978859][T10406] should_fail_ex+0x41c/0x590 [ 254.978871][T10406] should_failslab+0xc4/0x120 [ 254.978879][T10406] __kvmalloc_node_noprof+0x160/0x7d8 [ 254.978889][T10406] io_alloc_cache_init+0x48/0x154 [ 254.978900][T10406] io_ring_ctx_alloc+0x3b0/0x934 [ 254.978909][T10406] io_uring_create+0x6c/0x830 [ 254.978917][T10406] __arm64_sys_io_uring_setup+0x284/0x290 [ 254.978927][T10406] invoke_syscall+0x98/0x244 [ 254.978937][T10406] el0_svc_common+0xec/0x23c [ 254.978946][T10406] do_el0_svc+0x4c/0x5c [ 254.978955][T10406] el0_svc+0x64/0x260 [ 254.978966][T10406] el0t_64_sync_handler+0x48/0x148 [ 254.978976][T10406] el0t_64_sync+0x198/0x19c [ 254.981862][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.438493][T10425] loop5: detected capacity change from 0 to 512 [ 255.451533][T10425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.468498][T10425] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1169: Unimplemented hash flags: 0x0001 [ 255.468546][T10425] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1169: Corrupt directory, running e2fsck is recommended [ 255.508830][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.574793][T10433] loop5: detected capacity change from 0 to 512 [ 256.576053][T10433] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.599131][T10433] EXT4-fs (loop5): 1 truncate cleaned up [ 256.599617][T10433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.623014][T10441] loop7: detected capacity change from 0 to 512 [ 256.655118][T10441] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1173: iget: bad extra_isize 90 (inode size 256) [ 256.655163][T10441] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.658114][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 256.658128][ C1] EXT4-fs (loop7): initial error at time 498: ext4_xattr_inode_iget:441: inode 11 [ 256.658148][ C1] EXT4-fs (loop7): last error at time 498: ext4_xattr_inode_iget:441: inode 11 [ 256.668385][T10441] EXT4-fs (loop7): Remounting filesystem read-only [ 256.668477][T10441] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 256.668534][T10441] EXT4-fs (loop7): 1 orphan inode deleted [ 256.669188][T10441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.722898][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.726195][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.735170][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.736932][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.737182][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.745613][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.364624][ T7940] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.378147][T10480] loop1: detected capacity change from 0 to 8192 [ 257.717118][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.752258][ T7940] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.792036][T10513] loop1: detected capacity change from 0 to 512 [ 257.794940][T10513] EXT4-fs: Ignoring removed bh option [ 257.796648][T10513] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.796676][T10513] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 257.805416][T10513] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 257.809943][T10513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 257.813963][T10513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.835503][T10520] __nla_validate_parse: 1 callbacks suppressed [ 257.835536][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1187'. [ 257.861061][ T7940] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.973360][ T7940] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.998403][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.028370][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.028411][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.031045][T10444] bridge_slave_0: entered allmulticast mode [ 258.031530][T10444] bridge_slave_0: entered promiscuous mode [ 258.032224][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.032253][T10444] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.032342][T10444] bridge_slave_1: entered allmulticast mode [ 258.032774][T10444] bridge_slave_1: entered promiscuous mode [ 258.121114][T10444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.130001][T10444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.139177][T10444] team0: Port device team_slave_0 added [ 258.140089][T10444] team0: Port device team_slave_1 added [ 258.160157][T10444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.160179][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.160198][T10444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.165616][T10444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.165637][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.165656][T10444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.283611][T10444] hsr_slave_0: entered promiscuous mode [ 258.288671][T10444] hsr_slave_1: entered promiscuous mode [ 258.291615][T10444] debugfs: 'hsr0' already exists in 'hsr' [ 258.291655][T10444] Cannot create hsr debugfs directory [ 258.347531][T10568] netlink: 'syz.1.1194': attribute type 1 has an invalid length. [ 258.360534][T10567] loop7: detected capacity change from 0 to 512 [ 258.372260][T10568] bond1: entered promiscuous mode [ 258.373538][T10568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.375044][T10567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 258.390801][T10567] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1193: Unimplemented hash flags: 0x0001 [ 258.390836][T10567] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1193: Corrupt directory, running e2fsck is recommended [ 258.391125][T10567] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1193: path /76/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 258.440161][T10568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.440432][T10568] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 258.440445][T10568] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 258.460385][T10568] bond1: (slave ip6gre1): making interface the new active one [ 258.460413][T10568] ip6gre1: entered promiscuous mode [ 258.461777][T10568] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 258.466810][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.468180][ T7940] bridge_slave_1: left allmulticast mode [ 258.468212][ T7940] bridge_slave_1: left promiscuous mode [ 258.468308][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.483689][ T7940] bridge_slave_0: left allmulticast mode [ 258.483730][ T7940] bridge_slave_0: left promiscuous mode [ 258.483821][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.516893][T10580] loop7: detected capacity change from 0 to 512 [ 258.517242][T10580] EXT4-fs: Ignoring removed i_version option [ 258.520226][T10580] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 258.599195][T10587] loop7: detected capacity change from 0 to 8 [ 258.672346][ T7940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.697526][ T7940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.945533][ T4728] Bluetooth: hci2: command tx timeout [ 259.089217][ T7940] bond0 (unregistering): Released all slaves [ 260.192072][T10626] set_capacity_and_notify: 1 callbacks suppressed [ 260.192115][T10626] loop1: detected capacity change from 0 to 512 [ 260.195713][T10626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.202972][T10626] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1207: Unimplemented hash flags: 0x0001 [ 260.203012][T10626] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1207: Corrupt directory, running e2fsck is recommended [ 260.203110][T10626] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.1207: path /39/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 260.290300][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.327857][T10640] FAULT_INJECTION: forcing a failure. [ 260.327857][T10640] name failslab, interval 1, probability 100, space 1, times 0 [ 260.327893][T10640] CPU: 1 UID: 0 PID: 10640 Comm: syz.7.1211 Tainted: G L syzkaller #0 PREEMPT [ 260.327908][T10640] Tainted: [L]=SOFTLOCKUP [ 260.327913][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 260.327919][T10640] Call trace: [ 260.327922][T10640] show_stack+0x2c/0x3c (C) [ 260.327939][T10640] __dump_stack+0x30/0x40 [ 260.327951][T10640] dump_stack_lvl+0xd8/0x12c [ 260.327960][T10640] dump_stack+0x1c/0x28 [ 260.327969][T10640] should_fail_ex+0x41c/0x590 [ 260.327981][T10640] should_failslab+0xc4/0x120 [ 260.327989][T10640] __kvmalloc_node_noprof+0x160/0x7d8 [ 260.327998][T10640] io_alloc_cache_init+0x48/0x154 [ 260.328009][T10640] io_futex_cache_init+0x2c/0x40 [ 260.328018][T10640] io_ring_ctx_alloc+0x404/0x934 [ 260.328026][T10640] io_uring_create+0x6c/0x830 [ 260.328034][T10640] __arm64_sys_io_uring_setup+0x284/0x290 [ 260.328044][T10640] invoke_syscall+0x98/0x244 [ 260.328054][T10640] el0_svc_common+0xec/0x23c [ 260.328063][T10640] do_el0_svc+0x4c/0x5c [ 260.328072][T10640] el0_svc+0x64/0x260 [ 260.328083][T10640] el0t_64_sync_handler+0x48/0x148 [ 260.328093][T10640] el0t_64_sync+0x198/0x19c [ 260.508589][T10647] openvswitch: netlink: Message has 8 unknown bytes. [ 260.609966][T10668] loop1: detected capacity change from 0 to 512 [ 260.628261][T10668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.632467][T10668] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1215: Unimplemented hash flags: 0x0001 [ 260.632500][T10668] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1215: Corrupt directory, running e2fsck is recommended [ 260.711854][T10680] loop5: detected capacity change from 0 to 1024 [ 260.732428][T10680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.853388][T10689] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1215: Unimplemented hash flags: 0x0001 [ 260.853657][T10689] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1215: Corrupt directory, running e2fsck is recommended [ 261.013809][T10687] binder: 10685:10687 ioctl c0306201 0 returned -14 [ 261.019005][T10687] binder: 10685:10687 got transaction to invalid handle, 1 [ 261.020616][T10687] binder: 10685:10687 cannot find target node [ 261.021836][T10687] binder: 10685:10687 transaction async to 0:0 failed 120/29201/-22, code 0 size 0-0 line 3252 [ 261.038937][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.069207][ T7940] hsr_slave_0: left promiscuous mode [ 261.088399][ T7940] hsr_slave_1: left promiscuous mode [ 261.091388][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.091425][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.094745][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.094771][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.102552][T10697] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 261.102581][T10697] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 261.102606][T10697] netlink: 'syz.5.1218': attribute type 1 has an invalid length. [ 261.102621][T10697] netlink: 'syz.5.1218': attribute type 1 has an invalid length. [ 261.102634][T10697] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 261.102645][T10697] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 261.102656][T10697] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 261.102667][T10697] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 261.127598][ T7940] veth1_macvtap: left promiscuous mode [ 261.128911][ T7940] veth0_macvtap: left promiscuous mode [ 261.131251][ T7940] veth1_vlan: left promiscuous mode [ 261.131320][ T7940] veth0_vlan: left promiscuous mode [ 261.185499][ T4728] Bluetooth: hci2: command tx timeout [ 261.202217][T10708] loop0: detected capacity change from 0 to 512 [ 261.205207][T10708] EXT4-fs: inline encryption not supported [ 261.206045][T10708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.209066][T10708] EXT4-fs (loop0): 1 truncate cleaned up [ 261.226448][T10708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.310612][ T7940] team0 (unregistering): Port device team_slave_1 removed [ 261.316411][ T7940] team0 (unregistering): Port device team_slave_0 removed [ 262.223719][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.277681][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.419945][T10721] loop1: detected capacity change from 0 to 128 [ 262.420167][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.512781][T10444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 262.563252][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.564288][T10444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 262.569606][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.571146][T10444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 262.581382][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.583757][T10444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 262.585969][T10723] loop5: detected capacity change from 0 to 8192 [ 262.589791][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.591138][T10723] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.702695][T10444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.708626][T10444] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.713003][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.713064][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.714054][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.714074][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.727867][T10444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.729838][T10444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.006695][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.008067][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.070222][ T30] audit: type=1326 audit(504.843:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7781a8 code=0x7ffc0000 [ 263.070266][ T30] audit: type=1326 audit(504.843:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7781a8 code=0x7ffc0000 [ 263.079637][ T30] audit: type=1326 audit(504.843:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9f75b06c code=0x7ffc0000 [ 263.084369][T10780] FAULT_INJECTION: forcing a failure. [ 263.084369][T10780] name failslab, interval 1, probability 100, space 1, times 0 [ 263.084372][ T30] audit: type=1326 audit(504.852:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9f75b06c code=0x7ffc0000 [ 263.084397][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.1.1234 Tainted: G L syzkaller #0 PREEMPT [ 263.084412][T10780] Tainted: [L]=SOFTLOCKUP [ 263.084416][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 263.084422][T10780] Call trace: [ 263.084425][T10780] show_stack+0x2c/0x3c (C) [ 263.084443][T10780] __dump_stack+0x30/0x40 [ 263.084454][T10780] dump_stack_lvl+0xd8/0x12c [ 263.084464][T10780] dump_stack+0x1c/0x28 [ 263.084473][T10780] should_fail_ex+0x41c/0x590 [ 263.084485][T10780] should_failslab+0xc4/0x120 [ 263.084493][T10780] kmem_cache_alloc_noprof+0x94/0x5d8 [ 263.084501][T10780] audit_log_start+0xfc/0x868 [ 263.084511][T10780] audit_seccomp+0x60/0x14c [ 263.084520][T10780] __seccomp_filter+0xc88/0x1a90 [ 263.084528][T10780] __secure_computing+0xd8/0x278 [ 263.084536][T10780] syscall_trace_enter+0x2d4/0x794 [ 263.084545][T10780] el0_svc_common+0x170/0x23c [ 263.084555][T10780] do_el0_svc+0x4c/0x5c [ 263.084565][T10780] el0_svc+0x64/0x260 [ 263.084576][T10780] el0t_64_sync_handler+0x48/0x148 [ 263.084585][T10780] el0t_64_sync+0x198/0x19c [ 263.084607][T10780] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 263.084619][T10780] audit: out of memory in audit_log_start [ 263.084683][ T30] audit: type=1326 audit(504.852:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff9f75b06c code=0x7ffc0000 [ 263.084713][ T30] audit: type=1326 audit(504.852:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9f75b06c code=0x7ffc0000 [ 263.084771][ T30] audit: type=1326 audit(504.852:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9f75b06c code=0x7ffc0000 [ 263.084824][ T30] audit: type=1326 audit(504.852:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.1.1234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7781a8 code=0x7ffc0000 [ 263.481245][ T4728] Bluetooth: hci2: command tx timeout [ 264.338214][T10805] loop7: detected capacity change from 0 to 2048 [ 264.341546][T10444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.365402][T10805] loop7: p1 p2 p3 p4 [ 264.365402][T10805] p1: [ 264.365498][T10805] loop7: p1 size 16779263 extends beyond EOD, truncated [ 264.369933][T10805] loop7: p2 size 458752 extends beyond EOD, truncated [ 264.370396][T10805] loop7: p3 start 3036676096 is beyond EOD, truncated [ 264.370407][T10805] loop7: p4 start 100663296 is beyond EOD, truncated [ 264.417498][ T6247] udevd[6247]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 264.436425][ T6251] udevd[6251]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 264.476740][T10444] veth0_vlan: entered promiscuous mode [ 264.480603][T10444] veth1_vlan: entered promiscuous mode [ 264.488310][T10444] veth0_macvtap: entered promiscuous mode [ 264.491106][T10444] veth1_macvtap: entered promiscuous mode [ 264.494968][T10444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.496170][T10444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.502561][ T9757] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.502697][ T9757] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.502781][ T9757] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.555320][ T7956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.586860][ T7940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.586888][ T7940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.599979][ T9757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.600006][ T9757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.636858][T10841] loop7: detected capacity change from 0 to 1024 [ 264.637469][T10841] EXT4-fs: Ignoring removed nobh option [ 264.637480][T10841] EXT4-fs: Ignoring removed orlov option [ 264.637921][T10841] EXT4-fs warning (device loop7): read_mmp_block:110: Error -117 while reading MMP block 255 [ 264.763962][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1 [ 264.832154][T10853] trusted_key: encrypted_key: key trusted:syz not found [ 264.880280][T10853] loop7: detected capacity change from 0 to 1024 [ 264.992742][T10853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.992948][T10853] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 265.001630][T10846] loop1: detected capacity change from 0 to 512 [ 265.002173][T10846] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.002462][T10846] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 265.009267][T10853] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 265.010522][T10853] EXT4-fs (loop7): orphan cleanup on readonly fs [ 265.012450][T10853] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1244: Freeing blocks not in datazone - block = 0, count = 4096 [ 265.013547][T10853] loop7: lost filesystem error report for type 5 error -117 [ 265.017857][T10853] EXT4-fs (loop7): Remounting filesystem read-only [ 265.017927][T10853] EXT4-fs (loop7): 1 orphan inode deleted [ 265.025277][T10846] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.1246: corrupted xattr block 252: invalid header [ 265.025317][T10846] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.028230][T10846] EXT4-fs (loop1): Remounting filesystem read-only [ 265.028283][T10846] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 265.028355][T10846] EXT4-fs (loop1): 1 orphan inode deleted [ 265.039498][T10853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.046025][T10846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.309996][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 265.349466][T10881] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1249'. [ 265.516950][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2 [ 265.666294][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 265.689008][T10910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.691440][ T4728] Bluetooth: hci2: command tx timeout [ 265.697717][T10910] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 265.706360][T10915] loop6: detected capacity change from 0 to 512 [ 265.708172][T10915] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.722569][T10915] EXT4-fs error (device loop6): __ext4_fill_super:5600: inode #2: comm syz.6.1256: iget: special inode unallocated [ 265.722607][T10915] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 265.726487][T10915] EXT4-fs (loop6): get root inode failed [ 265.726517][T10915] EXT4-fs (loop6): mount failed [ 265.745768][ T24] kernel read not supported for file task/7/net/mcfilter (pid: 24 comm: kworker/1:0) [ 266.922900][T10943] loop0: detected capacity change from 0 to 512 [ 266.943464][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1264'. [ 266.957655][T10943] EXT4-fs mount: 2 callbacks suppressed [ 266.957688][T10943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 266.961594][ T4728] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 266.963970][ T4728] CPU: 1 UID: 0 PID: 4728 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT [ 266.963993][ T4728] Tainted: [L]=SOFTLOCKUP [ 266.963998][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 266.964005][ T4728] Workqueue: hci2 hci_rx_work [ 266.964022][ T4728] Call trace: [ 266.964026][ T4728] show_stack+0x2c/0x3c (C) [ 266.964044][ T4728] __dump_stack+0x30/0x40 [ 266.964057][ T4728] dump_stack_lvl+0xd8/0x12c [ 266.964070][ T4728] dump_stack+0x1c/0x28 [ 266.964081][ T4728] sysfs_warn_dup+0x9c/0xb8 [ 266.964094][ T4728] sysfs_create_dir_ns+0x190/0x1f4 [ 266.964105][ T4728] kobject_add_internal+0x290/0x6f0 [ 266.964116][ T4728] kobject_add_varg+0x9c/0xe8 [ 266.964124][ T4728] kobject_add+0x110/0x1c8 [ 266.964133][ T4728] device_add+0x394/0x9e0 [ 266.964141][ T4728] hci_conn_add_sysfs+0xbc/0x1e8 [ 266.964153][ T4728] le_conn_complete_evt+0xc68/0x10f8 [ 266.964163][ T4728] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 266.964173][ T4728] hci_le_meta_evt+0x2b0/0x46c [ 266.964185][ T4728] hci_event_packet+0x4c0/0x9c8 [ 266.964196][ T4728] hci_rx_work+0x2f4/0xd78 [ 266.964204][ T4728] process_scheduled_works+0x788/0x10b8 [ 266.964215][ T4728] worker_thread+0x798/0xbd0 [ 266.964225][ T4728] kthread+0x304/0x3d4 [ 266.964234][ T4728] ret_from_fork+0x10/0x20 [ 266.964275][ T4728] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 266.964295][ T4728] Bluetooth: hci2: failed to register connection device [ 266.965731][T10943] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1263: Unimplemented hash flags: 0x0001 [ 266.965746][T10943] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1263: Corrupt directory, running e2fsck is recommended [ 266.965823][T10943] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1263: path /64/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 267.050610][T10956] loop1: detected capacity change from 0 to 512 [ 267.101602][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 267.124518][T10956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 267.124650][T10948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.124681][T10948] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 267.126107][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.139070][T10956] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1266: Unimplemented hash flags: 0x0001 [ 267.143598][T10956] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1266: Corrupt directory, running e2fsck is recommended [ 267.147665][T10956] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.1266: path /57/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 267.159862][T10948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.160046][T10948] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.177646][T10948] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.191355][T10948] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.193386][T10948] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 267.193441][T10948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 267.194041][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.195035][T10948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 267.202781][T10948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.202816][T10948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.215192][T10948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.233393][T10948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.233449][T10948] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.243763][T10948] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.245727][T10948] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.272474][T10965] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1269'. [ 267.272515][T10965] tipc: Invalid UDP bearer configuration [ 267.272536][T10965] tipc: Enabling of bearer rejected, failed to enable media [ 267.283527][T10965] loop1: detected capacity change from 0 to 256 [ 267.329139][T10971] FAULT_INJECTION: forcing a failure. [ 267.329139][T10971] name failslab, interval 1, probability 100, space 1, times 0 [ 267.329171][T10971] CPU: 0 UID: 0 PID: 10971 Comm: syz.6.1272 Tainted: G L syzkaller #0 PREEMPT [ 267.329185][T10971] Tainted: [L]=SOFTLOCKUP [ 267.329190][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 267.329196][T10971] Call trace: [ 267.329200][T10971] show_stack+0x2c/0x3c (C) [ 267.329220][T10971] __dump_stack+0x30/0x40 [ 267.329231][T10971] dump_stack_lvl+0xd8/0x12c [ 267.329241][T10971] dump_stack+0x1c/0x28 [ 267.329256][T10971] should_fail_ex+0x41c/0x590 [ 267.329269][T10971] should_failslab+0xc4/0x120 [ 267.329277][T10971] __kmalloc_cache_noprof+0x94/0x5ec [ 267.329286][T10971] audit_log_d_path+0xc4/0x19c [ 267.329295][T10971] audit_log_d_path_exe+0x48/0x80 [ 267.329304][T10971] audit_log_task+0x250/0x368 [ 267.329314][T10971] audit_seccomp+0x74/0x14c [ 267.329323][T10971] __seccomp_filter+0xc88/0x1a90 [ 267.329331][T10971] __secure_computing+0xd8/0x278 [ 267.329339][T10971] syscall_trace_enter+0x2d4/0x794 [ 267.329348][T10971] el0_svc_common+0x170/0x23c [ 267.329357][T10971] do_el0_svc+0x4c/0x5c [ 267.329367][T10971] el0_svc+0x64/0x260 [ 267.329378][T10971] el0t_64_sync_handler+0x48/0x148 [ 267.329388][T10971] el0t_64_sync+0x198/0x19c [ 267.356674][T10973] loop5: detected capacity change from 0 to 1024 [ 267.357032][T10973] EXT4-fs: inline encryption not supported [ 267.390335][T10973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.451594][T10978] loop6: detected capacity change from 0 to 8192 [ 267.497405][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 267.499231][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 267.573751][T10992] loop1: detected capacity change from 0 to 256 [ 267.694176][T11012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.840568][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1283'. [ 268.848684][T11057] veth0: entered promiscuous mode [ 268.967799][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 268.968079][ T30] audit: type=1326 audit(510.280:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 268.968119][ T30] audit: type=1326 audit(510.280:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 268.968147][T11069] FAULT_INJECTION: forcing a failure. [ 268.968147][T11069] name failslab, interval 1, probability 100, space 1, times 0 [ 268.968175][T11069] CPU: 0 UID: 0 PID: 11069 Comm: syz.7.1287 Tainted: G L syzkaller #0 PREEMPT [ 268.968191][T11069] Tainted: [L]=SOFTLOCKUP [ 268.968195][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 268.968202][T11069] Call trace: [ 268.968206][T11069] show_stack+0x2c/0x3c (C) [ 268.968226][T11069] __dump_stack+0x30/0x40 [ 268.968238][T11069] dump_stack_lvl+0xd8/0x12c [ 268.968253][T11069] dump_stack+0x1c/0x28 [ 268.968263][T11069] should_fail_ex+0x41c/0x590 [ 268.968274][T11069] should_failslab+0xc4/0x120 [ 268.968283][T11069] kmem_cache_alloc_noprof+0x94/0x5d8 [ 268.968291][T11069] audit_log_start+0xfc/0x868 [ 268.968301][T11069] audit_seccomp+0x60/0x14c [ 268.968310][T11069] __seccomp_filter+0xc88/0x1a90 [ 268.968319][T11069] __secure_computing+0xd8/0x278 [ 268.968327][T11069] syscall_trace_enter+0x2d4/0x794 [ 268.968336][T11069] el0_svc_common+0x170/0x23c [ 268.968346][T11069] do_el0_svc+0x4c/0x5c [ 268.968355][T11069] el0_svc+0x64/0x260 [ 268.968366][T11069] el0t_64_sync_handler+0x48/0x148 [ 268.968376][T11069] el0t_64_sync+0x198/0x19c [ 268.968391][T11069] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 268.968402][T11069] audit: out of memory in audit_log_start [ 268.970065][ T30] audit: type=1326 audit(510.280:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaf55b06c code=0x7ffc0000 [ 268.970091][ T30] audit: type=1326 audit(510.280:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffaf55b06c code=0x7ffc0000 [ 268.970110][ T30] audit: type=1326 audit(510.280:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 268.970127][ T30] audit: type=1326 audit(510.280:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffaf55b06c code=0x7ffc0000 [ 268.970144][ T30] audit: type=1326 audit(510.280:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffaf55b06c code=0x7ffc0000 [ 268.970159][ T30] audit: type=1326 audit(510.280:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11066 comm="syz.7.1287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 269.036105][T11074] tipc: Enabling of bearer rejected, failed to enable media [ 269.091335][T11075] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32) [ 269.113838][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.293030][T11096] FAULT_INJECTION: forcing a failure. [ 269.293030][T11096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.295657][T11096] CPU: 0 UID: 0 PID: 11096 Comm: syz.6.1294 Tainted: G L syzkaller #0 PREEMPT [ 269.295674][T11096] Tainted: [L]=SOFTLOCKUP [ 269.295678][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 269.295684][T11096] Call trace: [ 269.295688][T11096] show_stack+0x2c/0x3c (C) [ 269.295709][T11096] __dump_stack+0x30/0x40 [ 269.295721][T11096] dump_stack_lvl+0xd8/0x12c [ 269.295731][T11096] dump_stack+0x1c/0x28 [ 269.295741][T11096] should_fail_ex+0x41c/0x590 [ 269.295752][T11096] should_fail+0x14/0x24 [ 269.295762][T11096] should_fail_usercopy+0x20/0x30 [ 269.295768][T11096] _inline_copy_from_user+0x3c/0x174 [ 269.295779][T11096] sctp_setsockopt+0x184/0xf48 [ 269.295787][T11096] sock_common_setsockopt+0xb0/0xcc [ 269.295797][T11096] do_sock_setsockopt+0x1f0/0x330 [ 269.295806][T11096] __sys_setsockopt+0x104/0x170 [ 269.295815][T11096] __arm64_sys_setsockopt+0xc8/0xe4 [ 269.295824][T11096] invoke_syscall+0x98/0x244 [ 269.295833][T11096] el0_svc_common+0xec/0x23c [ 269.295843][T11096] do_el0_svc+0x4c/0x5c [ 269.295852][T11096] el0_svc+0x64/0x260 [ 269.295863][T11096] el0t_64_sync_handler+0x48/0x148 [ 269.295873][T11096] el0t_64_sync+0x198/0x19c [ 269.370052][ T4728] Bluetooth: hci3: command 0x0406 tx timeout [ 269.371333][ T4728] Bluetooth: hci1: command 0x0406 tx timeout [ 269.373993][ T4728] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 269.417587][ T4728] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.417699][ T4728] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.418348][ T4728] Bluetooth: hci5: command 0x0c1a tx timeout [ 269.557306][T11094] loop7: detected capacity change from 0 to 8192 [ 269.585173][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1297'. [ 269.610235][T11106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.616904][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.655955][T11115] loop0: detected capacity change from 0 to 1024 [ 269.656323][T11115] EXT4-fs: Ignoring removed bh option [ 269.680823][T11115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.695396][T11123] FAULT_INJECTION: forcing a failure. [ 269.695396][T11123] name failslab, interval 1, probability 100, space 1, times 0 [ 269.695440][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.1.1299 Tainted: G L syzkaller #0 PREEMPT [ 269.695456][T11123] Tainted: [L]=SOFTLOCKUP [ 269.695459][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 269.695464][T11123] Call trace: [ 269.695467][T11123] show_stack+0x2c/0x3c (C) [ 269.695484][T11123] __dump_stack+0x30/0x40 [ 269.695494][T11123] dump_stack_lvl+0xd8/0x12c [ 269.695504][T11123] dump_stack+0x1c/0x28 [ 269.695513][T11123] should_fail_ex+0x41c/0x590 [ 269.695525][T11123] should_failslab+0xc4/0x120 [ 269.695533][T11123] __kmalloc_noprof+0x108/0x6b8 [ 269.695542][T11123] tomoyo_realpath_from_path+0xbc/0x4dc [ 269.695551][T11123] tomoyo_path_number_perm+0x1f0/0x500 [ 269.695558][T11123] tomoyo_file_ioctl+0x2c/0x3c [ 269.695566][T11123] security_file_ioctl+0xdc/0x2b0 [ 269.695574][T11123] __arm64_sys_ioctl+0xb0/0x1cc [ 269.695584][T11123] invoke_syscall+0x98/0x244 [ 269.695594][T11123] el0_svc_common+0xec/0x23c [ 269.695603][T11123] do_el0_svc+0x4c/0x5c [ 269.695613][T11123] el0_svc+0x64/0x260 [ 269.695623][T11123] el0t_64_sync_handler+0x48/0x148 [ 269.695633][T11123] el0t_64_sync+0x198/0x19c [ 269.695646][T11123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.765595][T11126] loop6: detected capacity change from 0 to 512 [ 269.769668][T11126] EXT4-fs: old and new quota format mixing [ 269.790252][T11129] FAULT_INJECTION: forcing a failure. [ 269.790252][T11129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.795130][T11129] CPU: 1 UID: 0 PID: 11129 Comm: syz.1.1301 Tainted: G L syzkaller #0 PREEMPT [ 269.795151][T11129] Tainted: [L]=SOFTLOCKUP [ 269.795155][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 269.795160][T11129] Call trace: [ 269.795164][T11129] show_stack+0x2c/0x3c (C) [ 269.795185][T11129] __dump_stack+0x30/0x40 [ 269.795196][T11129] dump_stack_lvl+0xd8/0x12c [ 269.795207][T11129] dump_stack+0x1c/0x28 [ 269.795216][T11129] should_fail_ex+0x41c/0x590 [ 269.795227][T11129] should_fail+0x14/0x24 [ 269.795237][T11129] should_fail_usercopy+0x20/0x30 [ 269.795243][T11129] _inline_copy_from_user+0x3c/0x174 [ 269.795254][T11129] copy_msghdr_from_user+0xb8/0x194 [ 269.795267][T11129] ___sys_sendmsg+0x14c/0x224 [ 269.795277][T11129] __sys_sendmsg+0x158/0x204 [ 269.795285][T11129] __arm64_sys_sendmsg+0x88/0x9c [ 269.795294][T11129] invoke_syscall+0x98/0x244 [ 269.795304][T11129] el0_svc_common+0xec/0x23c [ 269.795314][T11129] do_el0_svc+0x4c/0x5c [ 269.795323][T11129] el0_svc+0x64/0x260 [ 269.795334][T11129] el0t_64_sync_handler+0x48/0x148 [ 269.795344][T11129] el0t_64_sync+0x198/0x19c [ 270.124588][T11137] netlink: 'syz.5.1303': attribute type 5 has an invalid length. [ 270.247670][T11141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.417643][T11141] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.1302: path /69/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 271.118523][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.368591][ T9648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.498469][T11170] syzkaller0: entered promiscuous mode [ 271.498501][T11170] syzkaller0: entered allmulticast mode [ 271.574265][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 271.576446][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1311'. [ 271.581176][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 271.582481][ T1963] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.582584][ T1963] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.582612][ T1963] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.582628][ T1963] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.585706][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 271.585730][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 271.596130][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1311'. [ 271.601275][T11168] set_capacity_and_notify: 1 callbacks suppressed [ 271.602638][T11168] loop1: detected capacity change from 0 to 8192 [ 271.622448][T11168] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.670626][ T4717] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.671812][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.672942][ T4728] Bluetooth: hci5: command 0x0c1a tx timeout [ 271.837372][T11191] loop5: detected capacity change from 0 to 1024 [ 271.947043][ T4728] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 272.042493][T11191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.062527][T11189] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1312: bg 0: block 112: padding at end of block bitmap is not set [ 272.063918][T11189] EXT4-fs (loop5): Remounting filesystem read-only [ 272.079002][T11199] loop6: detected capacity change from 0 to 512 [ 272.080730][T11199] EXT4-fs: Ignoring removed nobh option [ 272.085621][T11199] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 272.097697][T11199] EXT4-fs (loop6): 1 truncate cleaned up [ 272.098140][T11199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.559913][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.682729][T11262] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1320'. [ 272.972897][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.185993][T11311] 9p: Bad value for 'rfdno' [ 273.902125][ T4728] Bluetooth: hci3: command 0x0406 tx timeout [ 273.923704][ T4728] Bluetooth: hci5: command 0x0c1a tx timeout [ 273.923796][ T4728] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.923860][ T4728] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.494233][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 274.598558][T11331] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 274.682072][T11335] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1334'. [ 275.430677][T11344] 9p: Bad value for 'source' [ 275.457776][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1337'. [ 275.515699][ T50] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 275.584051][T11362] audit_log_lost: 61 callbacks suppressed [ 275.586472][ T30] audit: type=1326 audit(516.392:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5781a8 code=0x7ffc0000 [ 275.586514][ T30] audit: type=1326 audit(516.392:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5781a8 code=0x7ffc0000 [ 275.586533][ T30] audit: type=1326 audit(516.392:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbb55b06c code=0x7ffc0000 [ 275.586549][ T30] audit: type=1326 audit(516.392:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbb55b06c code=0x7ffc0000 [ 275.586656][ T30] audit: type=1326 audit(516.392:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffbb5781a8 code=0x7ffc0000 [ 275.586672][ T30] audit: type=1326 audit(516.392:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffbb55b06c code=0x7ffc0000 [ 275.586759][T11362] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 275.586787][T11362] audit: out of memory in audit_log_start [ 275.591825][ T30] audit: type=1326 audit(516.392:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffbb55b06c code=0x7ffc0000 [ 275.591846][ T30] audit: type=1326 audit(516.392:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.6.1341" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5781a8 code=0x7ffc0000 [ 276.090284][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 276.177903][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.079044][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1346'. [ 277.258078][T11393] FAULT_INJECTION: forcing a failure. [ 277.258078][T11393] name failslab, interval 1, probability 100, space 1, times 0 [ 277.258117][T11393] CPU: 0 UID: 0 PID: 11393 Comm: syz.5.1350 Tainted: G L syzkaller #0 PREEMPT [ 277.258132][T11393] Tainted: [L]=SOFTLOCKUP [ 277.258136][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 277.258142][T11393] Call trace: [ 277.258146][T11393] show_stack+0x2c/0x3c (C) [ 277.258164][T11393] __dump_stack+0x30/0x40 [ 277.258177][T11393] dump_stack_lvl+0xd8/0x12c [ 277.258187][T11393] dump_stack+0x1c/0x28 [ 277.258196][T11393] should_fail_ex+0x41c/0x590 [ 277.258208][T11393] should_failslab+0xc4/0x120 [ 277.258217][T11393] __kmalloc_noprof+0x108/0x6b8 [ 277.258226][T11393] security_sk_alloc+0x60/0x35c [ 277.258235][T11393] sk_prot_alloc+0xe0/0x1e8 [ 277.258244][T11393] sk_alloc+0x44/0x3ac [ 277.258254][T11393] kcm_ioctl+0x1d0/0xda4 [ 277.258264][T11393] sock_do_ioctl+0x100/0x254 [ 277.258273][T11393] sock_ioctl+0x55c/0x7ec [ 277.258282][T11393] __arm64_sys_ioctl+0x154/0x1cc [ 277.258293][T11393] invoke_syscall+0x98/0x244 [ 277.258302][T11393] el0_svc_common+0xec/0x23c [ 277.258312][T11393] do_el0_svc+0x4c/0x5c [ 277.258321][T11393] el0_svc+0x64/0x260 [ 277.258332][T11393] el0t_64_sync_handler+0x48/0x148 [ 277.258342][T11393] el0t_64_sync+0x198/0x19c [ 278.145586][T11400] xt_l2tp: invalid flags combination: 8 [ 278.330137][T11400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1352'. [ 278.374294][T11411] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1356'. [ 278.469274][T11412] loop6: detected capacity change from 0 to 8192 [ 278.566520][T11412] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.306499][T11460] loop6: detected capacity change from 0 to 1024 [ 281.306835][T11460] EXT4-fs: Ignoring removed nobh option [ 281.306865][T11460] EXT4-fs: Ignoring removed orlov option [ 281.319675][T11460] EXT4-fs warning (device loop6): read_mmp_block:110: Error -117 while reading MMP block 255 [ 281.346524][T11456] loop5: detected capacity change from 0 to 8192 [ 281.347290][T11456] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.509166][T11468] trusted_key: encrypted_key: key trusted:syz not found [ 281.718557][T11470] loop7: detected capacity change from 0 to 512 [ 281.723497][T11470] EXT4-fs (loop7): Test dummy encryption mode enabled [ 281.731904][T11470] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1374: inode has both inline data and extents flags [ 281.736376][T11470] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 281.737122][T11470] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1374: couldn't read orphan inode 15 (err -117) [ 281.741476][T11470] loop7: lost filesystem error report for type 5 error -117 [ 281.742170][T11470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.758787][T11470] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 281.853547][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.968456][T11479] loop7: detected capacity change from 0 to 512 [ 281.982987][T11479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 281.990439][T11479] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1376: Unimplemented hash flags: 0x0001 [ 281.990481][T11479] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1376: Corrupt directory, running e2fsck is recommended [ 281.990579][T11479] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1376: path /128/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 282.030510][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.522001][T11505] loop0: detected capacity change from 0 to 1024 [ 282.522365][T11505] EXT4-fs: Ignoring removed nobh option [ 282.522376][T11505] EXT4-fs: Ignoring removed orlov option [ 282.522806][T11505] EXT4-fs warning (device loop0): read_mmp_block:110: Error -117 while reading MMP block 255 [ 282.613033][T11507] loop6: detected capacity change from 0 to 1024 [ 282.901111][T11507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.940832][T11507] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 16: comm syz.6.1383: path /32/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 283.809402][T11517] loop7: detected capacity change from 0 to 1024 [ 283.809760][T11517] EXT4-fs: Ignoring removed nobh option [ 283.809786][T11517] EXT4-fs: Ignoring removed orlov option [ 283.814154][T11472] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 283.861469][T11517] EXT4-fs warning (device loop7): read_mmp_block:110: Error -117 while reading MMP block 255 [ 283.871560][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 283.938627][T11521] loop0: detected capacity change from 0 to 512 [ 283.960978][T11521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 283.982445][T11521] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1388: Unimplemented hash flags: 0x0001 [ 283.982477][T11521] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1388: Corrupt directory, running e2fsck is recommended [ 283.982573][T11521] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1388: path /87/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 284.236761][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.248063][T11526] loop6: detected capacity change from 0 to 256 [ 284.324633][T11532] trusted_key: encrypted_key: key trusted:syz not found [ 284.493776][T11533] loop5: detected capacity change from 0 to 1024 [ 284.494192][T11533] EXT4-fs: Ignoring removed bh option [ 284.542856][T11533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.952959][T11552] loop7: detected capacity change from 0 to 1024 [ 284.953312][T11552] EXT4-fs: Ignoring removed nobh option [ 284.953323][T11552] EXT4-fs: Ignoring removed orlov option [ 284.954771][T11552] EXT4-fs warning (device loop7): read_mmp_block:110: Error -117 while reading MMP block 255 [ 285.445167][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.555704][T11558] tipc: Enabling of bearer rejected, failed to enable media [ 285.590522][T11567] pim6reg: entered allmulticast mode [ 285.609223][T11571] loop6: detected capacity change from 0 to 512 [ 285.625325][T11571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.092657][T11583] loop0: detected capacity change from 0 to 512 [ 286.104529][T11583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 286.109966][T11583] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.1407: Unimplemented hash flags: 0x0001 [ 286.110000][T11583] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1407: Corrupt directory, running e2fsck is recommended [ 286.110050][T11583] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1407: path /95/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 286.177682][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.229467][T11592] netlink: 'syz.0.1410': attribute type 5 has an invalid length. [ 286.244870][T11592] loop0: detected capacity change from 0 to 1024 [ 286.247854][T11594] FAULT_INJECTION: forcing a failure. [ 286.247854][T11594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.247896][T11594] CPU: 0 UID: 0 PID: 11594 Comm: syz.7.1411 Tainted: G L syzkaller #0 PREEMPT [ 286.247910][T11594] Tainted: [L]=SOFTLOCKUP [ 286.247914][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 286.247921][T11594] Call trace: [ 286.247924][T11594] show_stack+0x2c/0x3c (C) [ 286.247943][T11594] __dump_stack+0x30/0x40 [ 286.247957][T11594] dump_stack_lvl+0xd8/0x12c [ 286.247967][T11594] dump_stack+0x1c/0x28 [ 286.247977][T11594] should_fail_ex+0x41c/0x590 [ 286.247988][T11594] should_fail+0x14/0x24 [ 286.247997][T11594] should_fail_usercopy+0x20/0x30 [ 286.248004][T11594] simple_read_from_buffer+0xc4/0x238 [ 286.248015][T11594] proc_fail_nth_read+0x1a8/0x248 [ 286.248023][T11594] vfs_read+0x230/0x8c8 [ 286.248030][T11594] ksys_read+0x12c/0x228 [ 286.248036][T11594] __arm64_sys_read+0x84/0x98 [ 286.248043][T11594] invoke_syscall+0x98/0x244 [ 286.248053][T11594] el0_svc_common+0xec/0x23c [ 286.248063][T11594] do_el0_svc+0x4c/0x5c [ 286.248072][T11594] el0_svc+0x64/0x260 [ 286.248083][T11594] el0t_64_sync_handler+0x48/0x148 [ 286.248093][T11594] el0t_64_sync+0x198/0x19c [ 286.252813][T11592] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.279659][T11592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.281562][T11592] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1410: bg 0: block 112: padding at end of block bitmap is not set [ 286.285015][T11592] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1410: lblock 0 mapped to illegal pblock 0 (length 1) [ 286.286705][T11592] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1410: lblock 0 mapped to illegal pblock 0 (length 1) [ 286.288168][T11592] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.1410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 286.290131][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 286.294716][T11591] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.1410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 286.294751][T11591] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 286.295936][T11591] EXT4-fs error (device loop0): ext4_evict_inode:278: comm syz.0.1410: couldn't truncate inode 15 (err -117) [ 286.313161][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.382965][T11598] tipc: Enabling of bearer rejected, failed to enable media [ 286.629498][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.755931][T11614] loop6: detected capacity change from 0 to 512 [ 286.758752][T11614] EXT4-fs: inline encryption not supported [ 286.762330][T11614] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.766654][T11614] EXT4-fs (loop6): 1 truncate cleaned up [ 286.767127][T11614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.038154][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.039530][T11626] loop7: detected capacity change from 0 to 1024 [ 288.039888][T11626] EXT4-fs: Ignoring removed nobh option [ 288.039899][T11626] EXT4-fs: Ignoring removed orlov option [ 288.049188][T11626] EXT4-fs warning (device loop7): read_mmp_block:110: Error -117 while reading MMP block 255 [ 288.407473][T11641] FAULT_INJECTION: forcing a failure. [ 288.407473][T11641] name failslab, interval 1, probability 100, space 1, times 0 [ 288.407514][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.6.1419 Tainted: G L syzkaller #0 PREEMPT [ 288.407532][T11641] Tainted: [L]=SOFTLOCKUP [ 288.407536][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 288.407542][T11641] Call trace: [ 288.407545][T11641] show_stack+0x2c/0x3c (C) [ 288.407563][T11641] __dump_stack+0x30/0x40 [ 288.407578][T11641] dump_stack_lvl+0xd8/0x12c [ 288.407587][T11641] dump_stack+0x1c/0x28 [ 288.407597][T11641] should_fail_ex+0x41c/0x590 [ 288.407609][T11641] should_failslab+0xc4/0x120 [ 288.407617][T11641] kmem_cache_alloc_noprof+0x94/0x5d8 [ 288.407627][T11641] skb_clone+0x1ac/0x320 [ 288.407638][T11641] __skb_tstamp_tx+0x3d0/0xa34 [ 288.407645][T11641] skb_tstamp_tx+0x54/0x64 [ 288.407652][T11641] veth_xmit+0x3d4/0xb8c [ 288.407662][T11641] dev_hard_start_xmit+0x1dc/0x9d4 [ 288.407670][T11641] __dev_queue_xmit+0xed4/0x2bc0 [ 288.407679][T11641] packet_xmit+0x6c/0x314 [ 288.407690][T11641] packet_sendmsg+0x319c/0x4110 [ 288.407699][T11641] __sock_sendmsg+0xc8/0x17c [ 288.407708][T11641] ____sys_sendmsg+0x3d0/0x6c8 [ 288.407717][T11641] ___sys_sendmsg+0x198/0x224 [ 288.407726][T11641] __sys_sendmsg+0x158/0x204 [ 288.407734][T11641] __arm64_sys_sendmsg+0x88/0x9c [ 288.407743][T11641] invoke_syscall+0x98/0x244 [ 288.407754][T11641] el0_svc_common+0xec/0x23c [ 288.407763][T11641] do_el0_svc+0x4c/0x5c [ 288.407772][T11641] el0_svc+0x64/0x260 [ 288.407784][T11641] el0t_64_sync_handler+0x48/0x148 [ 288.407794][T11641] el0t_64_sync+0x198/0x19c [ 288.556464][T11655] loop6: detected capacity change from 0 to 512 [ 288.568573][T11655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 288.582909][T11655] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.1421: Unimplemented hash flags: 0x0001 [ 288.582936][T11655] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1421: Corrupt directory, running e2fsck is recommended [ 288.583045][T11655] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.1421: path /43/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 288.674280][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.847620][T11672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 288.939532][T11678] EXT4-fs: Ignoring removed nobh option [ 288.939565][T11678] EXT4-fs: Ignoring removed orlov option [ 288.940007][T11678] EXT4-fs warning (device loop7): read_mmp_block:110: Error -117 while reading MMP block 255 [ 288.965707][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.366519][T11686] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.436628][ T4728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.440233][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.447811][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.450275][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.452097][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.742697][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.787694][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.789340][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.791152][T11691] bridge_slave_0: entered allmulticast mode [ 289.793080][T11691] bridge_slave_0: entered promiscuous mode [ 289.795450][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.796983][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.798608][T11691] bridge_slave_1: entered allmulticast mode [ 289.800373][T11691] bridge_slave_1: entered promiscuous mode [ 289.826991][T11691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.836111][T11691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.867302][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.874901][T11691] team0: Port device team_slave_0 added [ 289.895428][T11691] team0: Port device team_slave_1 added [ 290.135883][T11737] set_capacity_and_notify: 3 callbacks suppressed [ 290.135928][T11737] loop6: detected capacity change from 0 to 512 [ 290.146760][T11737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 290.167275][T11737] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.1432: Unimplemented hash flags: 0x0001 [ 290.169516][T11737] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1432: Corrupt directory, running e2fsck is recommended [ 290.173353][T11737] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.1432: path /49/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 290.185264][T11691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.185287][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.185314][T11691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.185961][T11691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.185976][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.185997][T11691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.235085][T11737] Bluetooth: MGMT ver 1.23 [ 290.244022][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.255858][T11691] hsr_slave_0: entered promiscuous mode [ 290.258161][T11691] hsr_slave_1: entered promiscuous mode [ 290.259528][T11691] debugfs: 'hsr0' already exists in 'hsr' [ 290.260767][T11691] Cannot create hsr debugfs directory [ 290.276955][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.281080][T11739] tipc: Enabling of bearer rejected, failed to enable media [ 290.339973][T11753] loop6: detected capacity change from 0 to 512 [ 290.340354][T11753] EXT4-fs: inline encryption not supported [ 290.350512][T11753] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 290.355775][T11753] EXT4-fs (loop6): 1 truncate cleaned up [ 290.356259][T11753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.366879][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.404575][T11764] loop7: detected capacity change from 0 to 1024 [ 290.404929][T11764] EXT4-fs: Ignoring removed nobh option [ 290.404955][T11764] EXT4-fs: Ignoring removed orlov option [ 290.405736][T11764] EXT4-fs warning (device loop7): read_mmp_block:110: Error -117 while reading MMP block 255 [ 291.698734][ T50] Bluetooth: hci0: command tx timeout [ 291.751604][T11779] loop0: detected capacity change from 0 to 512 [ 291.757688][T11779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.838970][ T30] audit: type=1326 audit(531.394:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 291.845302][ T30] audit: type=1326 audit(531.412:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffaf55b06c code=0x7ffc0000 [ 291.849818][ T30] audit: type=1326 audit(531.412:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 291.855577][ T30] audit: type=1326 audit(531.422:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 291.860299][ T30] audit: type=1326 audit(531.422:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 291.865212][ T30] audit: type=1326 audit(531.431:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 291.869801][ T30] audit: type=1326 audit(531.431:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5781a8 code=0x7ffc0000 [ 291.875978][ T30] audit: type=1326 audit(531.440:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffaf55b06c code=0x7ffc0000 [ 291.876946][ T9259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.887239][ T30] audit: type=1326 audit(531.440:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffaf577ea0 code=0x7ffc0000 [ 291.887290][ T30] audit: type=1326 audit(531.440:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11787 comm="syz.7.1437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffaf577f4c code=0x7ffc0000 [ 291.919695][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.986520][ T12] bridge_slave_1: left promiscuous mode [ 291.986624][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.989600][ T12] bridge_slave_0: left allmulticast mode [ 291.989838][ T12] bridge_slave_0: left promiscuous mode [ 291.989914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.019045][T11797] loop0: detected capacity change from 0 to 8192 [ 292.025137][T11797] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.069661][ T12] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 292.071525][ T12] ip6gre1 (unregistering): left promiscuous mode [ 292.199883][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.220574][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.233620][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.233833][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.252062][ T12] bond0 (unregistering): Released all slaves [ 292.254659][ T12] bond1 (unregistering): Released all slaves [ 293.509945][ T12] hsr_slave_0: left promiscuous mode [ 293.511426][ T12] hsr_slave_1: left promiscuous mode [ 293.511714][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.511732][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.515787][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.515808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.521995][ T12] veth1_macvtap: left promiscuous mode [ 293.523079][ T12] veth0_macvtap: left promiscuous mode [ 293.524258][ T12] veth1_vlan: left promiscuous mode [ 293.525312][ T12] veth0_vlan: left promiscuous mode [ 293.940872][ T50] Bluetooth: hci0: command tx timeout [ 294.539168][ T12] team0 (unregistering): Port device team_slave_1 removed [ 294.547878][ T12] team0 (unregistering): Port device team_slave_0 removed [ 294.991730][T11691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.006685][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.007013][T11691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.013751][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.015408][T11691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.017944][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.019753][T11691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.027402][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.120029][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.141237][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.148694][ T1963] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.148740][ T1963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.153724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.153775][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.309478][T11891] loop7: detected capacity change from 0 to 512 [ 295.315763][T11891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 295.413639][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.526746][T11691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.799244][T11926] Injecting memory failure for pfn 0x138a96 at process virtual address 0x20001000 [ 295.828982][T11691] veth0_vlan: entered promiscuous mode [ 295.856604][T11691] veth1_vlan: entered promiscuous mode [ 295.858207][T11926] Memory failure: 0x138a96: Sending SIGBUS to syz.6.1451:11926 due to hardware memory corruption [ 295.858268][T11926] Memory failure: 0x138a96: recovery action for dirty LRU page: Recovered [ 295.858294][T11926] Injecting memory failure for pfn 0x219260 at process virtual address 0x20002000 [ 295.858433][T11926] Memory failure: 0x219260: unhandlable page. [ 295.858444][T11926] Memory failure: 0x219260: recovery action for get hwpoison page: Ignored [ 295.862759][T11691] veth0_macvtap: entered promiscuous mode [ 295.863936][T11691] veth1_macvtap: entered promiscuous mode [ 295.867827][T11691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.869724][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.901688][ T8293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.904127][ T8293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.905896][ T8293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.907703][ T8293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.922292][ T8293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.922322][ T8293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.950239][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.950272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.050691][T11939] loop7: detected capacity change from 0 to 512 [ 296.079189][T11939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 296.258048][ T50] Bluetooth: hci0: command tx timeout [ 297.009879][T11939] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1452: Unimplemented hash flags: 0x0001 [ 297.009918][T11939] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1452: Corrupt directory, running e2fsck is recommended [ 297.065390][T11944] tipc: Enabling of bearer rejected, failed to enable media [ 297.167084][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.174324][T11969] loop6: detected capacity change from 0 to 1024 [ 297.174738][T11969] EXT4-fs: Ignoring removed bh option [ 297.186575][T11969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.164674][T11989] loop7: detected capacity change from 0 to 4096 [ 298.214398][T10444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.223059][T11989] EXT4-fs (loop7): Test dummy encryption mode enabled [ 298.224402][T11989] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 298.374141][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4 [ 298.394470][T11989] overlayfs: failed to resolve './bus': -2 [ 298.404948][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1462'. [ 298.404986][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1462'. [ 298.405203][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1462'. [ 298.405213][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1462'. [ 298.447062][ T50] Bluetooth: hci0: command tx timeout [ 298.522913][T12009] loop6: detected capacity change from 0 to 8192 [ 298.524987][T12009] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.581672][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 298.583683][ T30] audit: type=1326 audit(537.626:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11998 comm="syz.0.1463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 298.590629][ T30] audit: type=1326 audit(537.626:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11998 comm="syz.0.1463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 298.681659][ T30] audit: type=1326 audit(537.718:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11998 comm="syz.0.1463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=470 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 298.686250][ T30] audit: type=1326 audit(537.718:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11998 comm="syz.0.1463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 298.690693][ T30] audit: type=1326 audit(537.727:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11998 comm="syz.0.1463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 299.761668][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5 [ 299.897178][T12046] tipc: Enabling of bearer rejected, failed to enable media [ 301.249533][T12077] loop4: detected capacity change from 0 to 256 [ 301.274957][T12077] vfat: Unknown parameter 'uni_xlate_0' [ 301.275982][T12077] netlink: 'syz.4.1472': attribute type 10 has an invalid length. [ 301.275995][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'. [ 301.286245][T12077] team0: entered promiscuous mode [ 301.286280][T12077] team_slave_0: entered promiscuous mode [ 301.286382][T12077] team_slave_1: entered promiscuous mode [ 301.286455][T12077] team0: entered allmulticast mode [ 301.286470][T12077] team_slave_0: entered allmulticast mode [ 301.286488][T12077] team_slave_1: entered allmulticast mode [ 301.286961][T12077] bridge0: port 3(team0) entered blocking state [ 301.287000][T12077] bridge0: port 3(team0) entered disabled state [ 301.288267][T12077] bridge0: port 3(team0) entered blocking state [ 301.288315][T12077] bridge0: port 3(team0) entered forwarding state [ 301.416844][T12085] loop4: detected capacity change from 0 to 512 [ 301.424670][T12085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 301.924571][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.925642][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.926658][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.927037][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.927497][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.989397][T11691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.048022][T12117] loop6: detected capacity change from 0 to 128 [ 303.658883][T12141] loop4: detected capacity change from 0 to 1024 [ 303.738851][T12141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.860641][T12141] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.1481: path /6/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 304.168336][ T4728] Bluetooth: hci4: command tx timeout [ 304.652657][ T30] audit: type=1326 audit(543.229:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.1486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 304.660322][ T30] audit: type=1326 audit(543.229:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.1486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=470 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 304.660370][ T30] audit: type=1326 audit(543.229:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.1486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 304.677734][ T30] audit: type=1326 audit(543.248:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.1486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 304.739450][T11691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.743640][T12169] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1489'. [ 304.808968][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6 [ 304.813492][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.815057][T12101] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.819873][T12101] bridge_slave_0: entered allmulticast mode [ 304.820423][T12101] bridge_slave_0: entered promiscuous mode [ 304.826140][T12101] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.826231][T12101] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.828677][T12101] bridge_slave_1: entered allmulticast mode [ 304.829195][T12101] bridge_slave_1: entered promiscuous mode [ 304.852836][T12101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.860447][T12101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.886180][T12101] team0: Port device team_slave_0 added [ 304.888431][T12101] team0: Port device team_slave_1 added [ 304.914916][T12101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.914942][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.914971][T12101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.915658][T12101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.915672][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.915700][T12101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.947707][T12101] hsr_slave_0: entered promiscuous mode [ 304.949312][T12101] hsr_slave_1: entered promiscuous mode [ 304.955859][T12101] debugfs: 'hsr0' already exists in 'hsr' [ 304.955894][T12101] Cannot create hsr debugfs directory [ 304.974612][T12191] Invalid source name [ 304.974640][T12191] UBIFS error (pid: 12191): cannot open "/dev/loop0", error -22 [ 305.000367][T12191] lo: entered promiscuous mode [ 305.005223][T12191] batadv_slave_0: entered promiscuous mode [ 305.051835][T12189] batadv_slave_0: left promiscuous mode [ 305.052007][T12189] lo: left promiscuous mode [ 305.073283][T12203] loop4: detected capacity change from 0 to 256 [ 305.172919][T12214] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1502'. [ 305.183381][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7 [ 305.222995][ T30] audit: type=1326 audit(543.756:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.0.1501" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 305.227381][ T30] audit: type=1326 audit(543.756:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.0.1501" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 305.232894][ T30] audit: type=1326 audit(543.756:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.0.1501" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=470 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 305.237108][ T30] audit: type=1326 audit(543.756:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.0.1501" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 305.241492][ T30] audit: type=1326 audit(543.756:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.0.1501" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 305.433791][T12246] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1507'. [ 305.436463][T12248] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1507'. [ 305.500529][T12260] FAULT_INJECTION: forcing a failure. [ 305.500529][T12260] name failslab, interval 1, probability 100, space 1, times 0 [ 305.500563][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.6.1511 Tainted: G L syzkaller #0 PREEMPT [ 305.500580][T12260] Tainted: [L]=SOFTLOCKUP [ 305.500584][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 305.500590][T12260] Call trace: [ 305.500593][T12260] show_stack+0x2c/0x3c (C) [ 305.500612][T12260] __dump_stack+0x30/0x40 [ 305.500623][T12260] dump_stack_lvl+0xd8/0x12c [ 305.500632][T12260] dump_stack+0x1c/0x28 [ 305.500642][T12260] should_fail_ex+0x41c/0x590 [ 305.500653][T12260] should_failslab+0xc4/0x120 [ 305.500661][T12260] __kmalloc_noprof+0x108/0x6b8 [ 305.500670][T12260] tomoyo_realpath_from_path+0xbc/0x4dc [ 305.500680][T12260] tomoyo_path_number_perm+0x1f0/0x500 [ 305.500687][T12260] tomoyo_file_ioctl+0x2c/0x3c [ 305.500695][T12260] security_file_ioctl+0xdc/0x2b0 [ 305.500703][T12260] __arm64_sys_ioctl+0xb0/0x1cc [ 305.500713][T12260] invoke_syscall+0x98/0x244 [ 305.500723][T12260] el0_svc_common+0xec/0x23c [ 305.500732][T12260] do_el0_svc+0x4c/0x5c [ 305.500742][T12260] el0_svc+0x64/0x260 [ 305.500753][T12260] el0t_64_sync_handler+0x48/0x148 [ 305.500763][T12260] el0t_64_sync+0x198/0x19c [ 305.501744][T12260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.559423][T12101] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 305.569210][T12101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.570927][T12101] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 305.580701][T12101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.590501][T12101] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 305.596411][T12101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.598120][T12101] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 305.601328][T12101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.615887][T12101] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.615928][T12101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.616023][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.616057][T12101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.631387][T12281] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 305.649610][T12101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.654399][T12101] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.695823][ T30] audit: type=1326 audit(544.180:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12266 comm="syz.0.1513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3781a8 code=0x7ffc0000 [ 306.111797][T12101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.272365][T12101] veth0_vlan: entered promiscuous mode [ 306.276692][T12101] veth1_vlan: entered promiscuous mode [ 306.284926][T12101] veth0_macvtap: entered promiscuous mode [ 306.287694][T12101] veth1_macvtap: entered promiscuous mode [ 306.294083][T12101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.296957][T12101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.336034][T12335] loop4: detected capacity change from 0 to 512 [ 306.340683][T12335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.411550][ T6718] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.411658][ T6718] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.411674][ T6718] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.411689][ T6718] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.420507][ T4728] Bluetooth: hci4: command tx timeout [ 307.447296][ T7941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.449537][ T7941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.462572][ T7956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.462603][ T7956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.482360][T12345] loop7: detected capacity change from 0 to 128 [ 307.523231][T11691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.588092][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1528'. [ 307.593557][T12361] fuseblk: Bad value for 'fd' [ 307.654410][T12360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.671636][T12360] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 308.557820][T12383] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1533'. [ 308.703648][ T4728] Bluetooth: hci4: command tx timeout [ 309.509036][T12398] loop7: detected capacity change from 0 to 128 [ 309.740710][T12419] loop7: detected capacity change from 0 to 512 [ 309.762723][T12419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 309.767328][T12414] loop4: detected capacity change from 0 to 1024 [ 309.767666][T12414] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.768110][T12414] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 309.768123][T12414] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 309.768159][T12414] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 309.768812][T12414] EXT4-fs (loop4): journal inode is deleted [ 309.773391][T12419] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1544: Unimplemented hash flags: 0x0001 [ 309.773408][T12419] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1544: Corrupt directory, running e2fsck is recommended [ 309.773483][T12419] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1544: path /166/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 309.794754][T12414] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1543'. [ 309.794790][T12414] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1543'. [ 309.806685][T12420] loop6: detected capacity change from 0 to 512 [ 309.885080][T12434] loop8: detected capacity change from 0 to 512 [ 309.912287][ T8862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.989243][T12434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.277402][T12459] [ 310.277861][T12459] ====================================================== [ 310.279134][T12459] WARNING: possible circular locking dependency detected [ 310.280391][T12459] syzkaller #0 Tainted: G L [ 310.281526][T12459] ------------------------------------------------------ [ 310.282786][T12459] syz.8.1547/12459 is trying to acquire lock: [ 310.283842][T12459] ffff0000ee6c4260 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x134/0xde4 [ 310.285572][T12459] [ 310.285572][T12459] but task is already holding lock: [ 310.286824][T12459] ffff0000d8172c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 310.288606][T12459] [ 310.288606][T12459] which lock already depends on the new lock. [ 310.288606][T12459] [ 310.290387][T12459] [ 310.290387][T12459] the existing dependency chain (in reverse order) is: [ 310.291995][T12459] [ 310.291995][T12459] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 310.293505][T12459] percpu_down_read_internal+0x5c/0x294 [ 310.294589][T12459] ext4_writepages+0x170/0x2dc [ 310.295552][T12459] do_writepages+0x284/0x47c [ 310.296436][T12459] __writeback_single_inode+0x140/0x1880 [ 310.297469][T12459] writeback_single_inode+0x400/0xb20 [ 310.298475][T12459] write_inode_now+0x170/0x208 [ 310.299361][T12459] iput+0x7cc/0xc2c [ 310.299368][T12466] loop4: detected capacity change from 0 to 1024 [ 310.299687][T12466] EXT4-fs: Ignoring removed bh option [ 310.302100][T12459] ext4_xattr_block_set+0x1460/0x21e8 [ 310.303114][T12459] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 310.304254][T12459] __ext4_expand_extra_isize+0x2a4/0x378 [ 310.305352][T12459] __ext4_mark_inode_dirty+0x394/0x828 [ 310.306422][T12459] ext4_evict_inode+0x798/0xfb8 [ 310.307416][T12459] evict+0x4c0/0x74c [ 310.308179][T12459] iput+0x8f0/0xc2c [ 310.308961][T12459] ext4_process_orphan+0x24c/0x2c0 [ 310.309948][T12459] ext4_orphan_cleanup+0x7d4/0xd20 [ 310.310936][T12459] ext4_fill_super+0x4628/0x4e14 [ 310.311866][T12459] get_tree_bdev_flags+0x388/0x43c [ 310.312923][T12459] get_tree_bdev+0x2c/0x3c [ 310.313785][T12459] ext4_get_tree+0x28/0x38 [ 310.314703][T12459] vfs_get_tree+0x90/0x28c [ 310.315570][T12459] fc_mount+0x24/0xac [ 310.316325][T12459] do_new_mount+0x2a4/0x538 [ 310.317231][T12459] path_mount+0x5f0/0xa88 [ 310.318085][T12459] do_mount+0xe8/0x148 [ 310.318860][T12459] __arm64_sys_mount+0x33c/0x388 [ 310.319859][T12459] invoke_syscall+0x98/0x244 [ 310.320791][T12459] el0_svc_common+0xec/0x23c [ 310.321752][T12459] do_el0_svc+0x4c/0x5c [ 310.322601][T12459] el0_svc+0x64/0x260 [ 310.323458][T12459] el0t_64_sync_handler+0x48/0x148 [ 310.324482][T12459] el0t_64_sync+0x198/0x19c [ 310.325366][T12459] [ 310.325366][T12459] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 310.326706][T12459] __lock_acquire+0x17c0/0x2ebc [ 310.327681][T12459] lock_acquire+0x140/0x364 [ 310.328604][T12459] down_write+0x50/0xc0 [ 310.329424][T12459] ext4_xattr_set_handle+0x134/0xde4 [ 310.330453][T12459] ext4_initxattrs+0xa8/0x11c [ 310.331376][T12459] security_inode_init_security+0x244/0x370 [ 310.332519][T12459] ext4_init_security+0x44/0x58 [ 310.333536][T12459] __ext4_new_inode+0x286c/0x3308 [ 310.334480][T12459] ext4_ext_migrate+0x564/0xc54 [ 310.335487][T12459] ext4_ioctl+0x1e14/0x4430 [ 310.336344][T12459] __arm64_sys_ioctl+0x154/0x1cc [ 310.337288][T12459] invoke_syscall+0x98/0x244 [ 310.338199][T12459] el0_svc_common+0xec/0x23c [ 310.339080][T12459] do_el0_svc+0x4c/0x5c [ 310.339889][T12459] el0_svc+0x64/0x260 [ 310.340741][T12459] el0t_64_sync_handler+0x48/0x148 [ 310.341748][T12459] el0t_64_sync+0x198/0x19c [ 310.342658][T12459] [ 310.342658][T12459] other info that might help us debug this: [ 310.342658][T12459] [ 310.344585][T12459] Possible unsafe locking scenario: [ 310.344585][T12459] [ 310.346011][T12459] CPU0 CPU1 [ 310.346945][T12459] ---- ---- [ 310.347886][T12459] lock(&sbi->s_writepages_rwsem); [ 310.348784][T12459] lock(&ei->xattr_sem); [ 310.349992][T12459] lock(&sbi->s_writepages_rwsem); [ 310.351437][T12459] lock(&ei->xattr_sem); [ 310.352198][T12459] [ 310.352198][T12459] *** DEADLOCK *** [ 310.352198][T12459] [ 310.353705][T12459] 3 locks held by syz.8.1547/12459: [ 310.354610][T12459] #0: ffff0000d8176450 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc [ 310.356283][T12459] #1: ffff0000ee7157e0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1e0c/0x4430 [ 310.358108][T12459] #2: ffff0000d8172c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 310.359919][T12459] [ 310.359919][T12459] stack backtrace: [ 310.360883][T12459] CPU: 0 UID: 0 PID: 12459 Comm: syz.8.1547 Tainted: G L syzkaller #0 PREEMPT [ 310.362647][T12459] Tainted: [L]=SOFTLOCKUP [ 310.363396][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 310.365113][T12459] Call trace: [ 310.365638][T12459] show_stack+0x2c/0x3c (C) [ 310.366493][T12459] __dump_stack+0x30/0x40 [ 310.367239][T12459] dump_stack_lvl+0xd8/0x12c [ 310.368006][T12459] dump_stack+0x1c/0x28 [ 310.368666][T12459] print_circular_bug+0x328/0x330 [ 310.369562][T12459] check_noncircular+0x158/0x174 [ 310.370399][T12459] __lock_acquire+0x17c0/0x2ebc [ 310.371184][T12459] lock_acquire+0x140/0x364 [ 310.371914][T12459] down_write+0x50/0xc0 [ 310.372621][T12459] ext4_xattr_set_handle+0x134/0xde4 [ 310.373500][T12459] ext4_initxattrs+0xa8/0x11c [ 310.374368][T12459] security_inode_init_security+0x244/0x370 [ 310.375402][T12459] ext4_init_security+0x44/0x58 [ 310.376266][T12459] __ext4_new_inode+0x286c/0x3308 [ 310.377186][T12459] ext4_ext_migrate+0x564/0xc54 [ 310.378044][T12459] ext4_ioctl+0x1e14/0x4430 [ 310.378844][T12459] __arm64_sys_ioctl+0x154/0x1cc [ 310.379750][T12459] invoke_syscall+0x98/0x244 [ 310.380563][T12459] el0_svc_common+0xec/0x23c [ 310.381410][T12459] do_el0_svc+0x4c/0x5c [ 310.382159][T12459] el0_svc+0x64/0x260 [ 310.382853][T12459] el0t_64_sync_handler+0x48/0x148 [ 310.383745][T12459] el0t_64_sync+0x198/0x19c [ 310.390273][T12459] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #18: comm syz.8.1547: corrupted inode contents [ 310.390312][T12459] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 310.390410][T12459] EXT4-fs (loop8): Remounting filesystem read-only [ 310.390423][T12459] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -30) [ 310.390454][T12466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.406440][T12101] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.925623][ T4728] Bluetooth: hci4: command tx timeout [ 311.225180][T11691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.