last executing test programs: 1m29.032296164s ago: executing program 1 (id=395): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (fail_nth: 5) 1m28.97715531s ago: executing program 1 (id=396): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 1m28.857619182s ago: executing program 1 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x80045510, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004200015bfb5f6485cb2f18367f1b"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0x7, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x40042}, 0x0) 1m28.731694526s ago: executing program 1 (id=398): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x2]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x2d4, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x4000000223ee9c4, 0x0, 0x0, 0xcaa5a8d8689d2732, 0x1}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000003c0)='./file0/file0/../file0\x00', 0x1400b0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cubic', 0x5) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x80) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r6, &(0x7f0000002c00)={0x2020}, 0x2020) 1m27.90484235s ago: executing program 1 (id=410): r0 = socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x5, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x20100, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="a00037bb6dd02fcc", 0xff5a, 0x4000054, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) socket(0x2b, 0x1, 0x1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400d3947235f54f98210000000000a5ea040000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r10 = request_key(&(0x7f0000001300)='id_resolver\x00', &(0x7f0000001340)={'syz', 0x2}, &(0x7f0000001380)='{]:\'#+\x00', 0xfffffffffffffff9) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="3d44e9747615652f37f1fe305ba9e9b78553640c02840d8856c45f69c0cab274e5e5e99e7bc362734269da975a9f5c5facecd185a9361bb423db3d5690dd630f62a5af6b35b7216f88469724222893fe1cf875669e63433baa607b700411c5a7367a686ec0da8c8c91c577a4d73e635b2c5f17b7433bf27e", 0x78, r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r11, &(0x7f0000000380)=ANY=[@ANYBLOB="080008000703030009000f0000000201f7d7ebe8f63f5655e18446846d469509b3f34946d1068f739a1fb7f3dfcad5f20fcaccade3d0f4db45a864f2"], 0x1f) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m27.463633756s ago: executing program 1 (id=412): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xff1e, 0xfffffffffffffe84, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x242, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54ee2cbf21a66489121f24fefd198059288c9b735e0298e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0abece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c60000000000000002e8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39767830c6f24cd4189b1f7aac072f363e6f4d9633391bc51086c573f6907058f857d748e2531c04896f0a276b55"}, 0x23) 1m27.446461627s ago: executing program 32 (id=412): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xff1e, 0xfffffffffffffe84, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x242, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54ee2cbf21a66489121f24fefd198059288c9b735e0298e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0abece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c60000000000000002e8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39767830c6f24cd4189b1f7aac072f363e6f4d9633391bc51086c573f6907058f857d748e2531c04896f0a276b55"}, 0x23) 7.699520146s ago: executing program 4 (id=1042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4a880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000003c0)) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd600004009e7c3ad3000008000900000b0000000000b1000000"], 0x3c}}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7020000000000000d0000000000000085000000c40000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYBLOB="2f430f3ec23eea64ea1b91a377ff5e4939f784c3fbfa72ccce9f441ab06dc0c432d36217178e4994b71ad451602922b438b7bc70c5f9b067e6f376751cdf6e06f06e19ba443e226b7bf01376d831a8e21d94c13e4afd87b95212f9b6e6131bdfa93b5d546864001782577366e3eb62744dd23ec8f47e", @ANYRESDEC=r6, @ANYRESHEX=r4, @ANYRESOCT=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r7}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200ffb703000008000000b7040000b98cad9585000000030000001811000000000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/183, 0xb5}, 0x200}], 0x4000062, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x5, 0x7f, 0xab, 0x9, 0x6, 0x5f, 0x9, 0x0, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x4551, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x7, 0x8000, 0x1, 0x42], [0x10200007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1ff, 0x66abcbd2, 0xea4, 0x2, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0x103, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x2000003, 0x5, 0x4000006, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4000400, 0x408, 0x6, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x0, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x11ab, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x40400004, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0x1ffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x5c5, 0x0, 0x7e, 0x5, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0x5, 0x6, 0x530e, 0x6c1b, 0x0, 0xfffffd29, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x6000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 6.684945297s ago: executing program 4 (id=1051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000600)={0x8, 0x1, 0x7, 0x1, 0x0, "d3d039e19a5db95bde6e85415d10430cf53244"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.900614379s ago: executing program 3 (id=1064): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x48}}, 0x400400c) (fail_nth: 6) 4.859676041s ago: executing program 3 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) 4.479790594s ago: executing program 4 (id=1066): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = syz_io_uring_setup(0xb00, &(0x7f0000000480)={0x0, 0x5962, 0x10000, 0x800, 0x4e}, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) listen(r1, 0x100101) accept4(r1, 0x0, 0x0, 0x80800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d70fadbcbe05a78d2855e"], 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB='enc=pkcs1 hash='], 0x0, 0x0) 4.105317591s ago: executing program 0 (id=1069): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0x22000000, {0x1, 0xc79, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffa, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 4.031738088s ago: executing program 0 (id=1070): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x4, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb023}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x109102) ioctl$VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f00000002c0)=@overlay={0x800004, 0x3, 0x4, 0x1000, 0x4616, {}, {0x1, 0x2, 0xaa, 0x9, 0x6, 0x4, "ffe1a85f"}, 0x2, 0x3, {}, 0x1}) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x38}}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.903702793s ago: executing program 0 (id=1073): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000100", @ANYRES16=r3, @ANYBLOB="00022bbd7000000000000200000008000b010100000008003f00feffffff"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0003000000000000e8fffff5ffffffff0000", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='l'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, 0x0) 3.894028939s ago: executing program 5 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r2 = syz_ublk_setup_io_uring(0x793e, &(0x7f0000000480)={0x0, 0xb9fe, 0x1000, 0x2, 0x231}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x0, 0x3520, 0x40000, 0x1, 0x17e}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb504, 0x100, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa081, 0x20, 0x1, 0x23}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc35d, 0x10, 0x0, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5086, 0x10000, 0x1, 0x3cc}, 0xffffffffffffffff}], 0x4, &(0x7f0000002b40)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xff}, 0x0, 0x0, '\x00', {0x3, 0x409, 0x0, &(0x7f0000001b40)=@buf_512="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"}}, &(0x7f0000002bc0)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f0000003c00)={0x28, 0x0, 0x0, r3, &(0x7f0000002c00)="a4288d04ca74dafdb096dcdc38bce8a7e01aa04836812cb14fcba26b50390c8378a0e75be78e0905cc2e35d9bf1ad74231060ca631c07d64f785d6ba373c6ffff0d6fa6b8cb596903216c78da9344c09be4f4f9eea03d03c7d8e81b8c42ba9caf00742254fec05fbf0ecf51fc828c31d2540a96a1d916d8ffb0fb74702380d7fe3ad77631574a6949c19b9e9ecabab8e11ba2777af39f3deda362bfbc8ab19ac845e4760275fe2d94f30fd864865b64f9b0ee4e8f77eddbf6e959c2a0b36510667d6fe973b90e50b164801755ef7d9cb1a236a6829d366ff495e09cc4ed43024b3c101eafd9cd022eed795cad8daaa4581e0f18ad58d086e7923d407ede8451f04c41a406c4c3851e958e8cd0b21ff1086a91333666d711f49b20e01fb090bd359247dbba5f9118a216f2150b1f8e099ef058d2f6f744c8dada3a3b4b6552c3fe8251a81d519eaf04b5e5830c14f0c549f8fd1741a90d6c1abdeb521e22e84cd5a677004e05db0a8039ed4639daa0bebfd1b7a74a06e5162a3824416bd670c9481f04808802ce2a3fe7cca8872095e18afebf2272ed552045585335bccb66a35c17b8ef70a8bee2658353d044d1728500f3a05101fa3e742d5c958bc113e79653a0966fa8beff33b9b9853bc7c00447f721f18d93890990f4daa7a8fcc525d7abf782cd4aa1ff0a82ea328df1fc5b536aa3103bfce56047f805fa129d9604c15c3e3ecbf18925838697282b4353aed7f8364e297c5930ddd4d3f0f9410488c83141fdf41dc15ff25179a5b8c317145e67d716662b512a12409546f1e6dd045f0429d23606d7adce355ba15d73f54c150066a51e19db7282f5d8edf585bf9b1b17d2c939ce8f58d875788bbeedecbd665e7fab0a6850d0eff73a609259daa2e838ce5776203a9741d91d95c043194aa3e9a8e9779c9fd90d928d43601c5e2084eefa9567fdcc466841b1d13dc8f19bf2984111978fadbc76bb5daee0130f6e21857516054fd249fd82fcae920e4d55c9ea5e473848cf87eee4b53df56f58980282ce9822d4edf2536290693673a78e06e34e7f0dc0e9dfecadf599ef18a39723a94f1912a1fb13054af7ee6e98e90b0e823a8cce33df552c7cd069c8eea8741545582fc1e28ab9f23264fb46d8be914a7a77f870914421549842066a9616195f9a77e5b64ff853590fc9e1e48f91815c7d13328f9ee76e8550629c102c08573c61421abbe2dd6081288465bea795a09385b9060f9095a14d63a668ab6f7e99e2f8965b655a097972f6f95f6ba1d7d431d881914e6d6503721c0348d12595ed39263b50f6c93b3eedc388104f851d236a7ddc01e710fb3861163d03ef60b14e61a90f515fad6aa84cb09893d8cac3be2e033d2c601c34f87425a74e1a688f06ade8feeedf3b06e9b7d6b16dc525f53a22f131f10b103a1e47bbc5c62601da5ada1eac3dffb67fcc456001c5eeb09b28981749902b1cd06f4051e073af82807f5eaf18aa357d33130ee5f21c3188f2f06b3746e5c34aec2baeccda1de81bfe963d31fd353312805ea43ecad00866f17973f2baa3d2aba0404b5ef9dc8f8a8452dd9aabdf3408c46ae52c789def63dad04f62af7b970513bb3565198da6b3306de1e573ad23c0f097f2c7195f3bb283dd01ba0efc86b6841bba184dfb4648a636e86baac7a8261b3338cdbd50ccd661aaedafdb596ad24bce34b6a17d95ff10384b4d4715c07679d3bdd9a1fbf1dc1e179ce15409b9a08e5aaf87112afdb36dabe6ec5aa34caab376c181bb678123b332f046c2668b6f14048c451a117a13467a291d96a9eed766926ff98cf39f279ddce32b2043cdad62f677931ee1d8ee2ebcae1d3d5ee00d56cde23d008281fce84a69bcf650e2f5052207c413f77b8a20f57339df79caa14d4f8e4f3610818f9a05898bb0faf61cf27cfc99c8b9e8abfe1512c31bdd55cdceb59b434d6865688582e508177a13135df0d7c596417c97d7e025a792615e11bf05edaa50606665548ad859dde43e77f2452034cd83e541cbd37789afc53c8f19ed1b840a327ad7ca02a3fb9e3a568f849083ab69dd8cc52d9e0c3fba873c4832cce6c91c50253bafb3bdf44356b66617c74754324d5b7065f100234cb963c32a0151a8d68cdcc587af74787d9910b1be2592d4da9c9d1700fc592ba7c93fb6adf1c8045569969746b0f8052f7dbaea1fc7b89d0d7c5440760f75e28c8ff13855afa70036f7bc9cac4cbfeb399d6b14f5caf3998b1afb0103863358abd59bf9eebcf8b921e91d70c453f6b53aea89f4cf84fb44055c126bda642435c9a0a175d937dd0e5fb76a73d4962c5c5346ea363d0f078bb6fceaf5e7e431fdb24ce756266cd6d9d1c7ca6f8843276c8d55bc4a3d6dc2c7b8487c550b91ccd59f1106cec69673fb04c5ead6bb3fc6223d7270eccf654c155089bd0f3a979d5fdad2332afa79ccfc39493167a57d00bbab419c4ff378220046c313659981a921916717a6fe1a8e50a36dffef5d77bb1f2fc36ff7dee4199f942cc582fc600b2f3015cf2be4e6f35035a7630eb1ee9c3485029b7b84e2a87981eb68b6cf81fe3f1aefe434cdcd915a88ff48725802f0c9fc36308f82f526c83b24ab1a4883290a9e86481e9bc75caef10c3ebe33f3dcf5cf2744a00e6b0212caac0c53eaed618d5f19b1e0972f7e78379473b038cd9f5489874e146c40cafbf03895893082a359bb434431042f4c081e38e9d33051a1385ea541fc782e30fac15d51fb650b7cf6e64806f989cbacf8d849c8066a851d7dc0953df93bc3304ca4fd71e8ebcdf2e20f83403f926aa8897dc5f242821fafb4c9ede5911bc23f534db5d11957cb14932d09635b55e1128260ad3867e061eb8715dfef09ec2e5f5be498bfbbb2c4f15ad46c4279d4fa6823c21ef49f85a06ba96986a543cc78926d2dc26c809cce1e56bbb15ade486babc4c9b717086a7d763185c1560bfc0521d397e47fbe6358363d8360095a80d49e0d5507ea22b9cd0ba6a3af47f6443eac373b9e133faa9d1f74bf0eede291c67f577c61434304d2f2810b1a03d1b84fcc7be49bd4e9cfbeb01bd47abf93b4135101e3acd531d5e07ddcf716684a0bf7c8c7130939ed5973ba4d0dea9f20a970e752d3dece264f6bc0a7d1604cc67e850fb254faa5a27a8ebad72e720b072118c19ff41f71568f182a5628e9c98d3ea9f65f7668bbea36c41d6201b1441c0de2ac111b1825695c7f27a1e8d943a0b918a8dacadd0233f9bd377a982c9ea5a050296421cf7f6afb88f72edd455911df110fb8bd8f1e3f2722f0367bacb19fcd9974cbb66f2a020dad79b9a848015e467a6be287dd2ca09a13af17a8ad6854167a65c54197c3cd261e6765f0e357e84eaa74322a2a8ae692c4fc3bcc62db2ced478ed1deae9cd51e46c1a4875a8a62c54a4ff132d51802c503120d70ef4ec19f59aa557b2d0e3cfcb088ac5204fa4298eaeb8c268eb71dc50efb0c633f24f41158a6c9c341c77dd136797974428a9d8bab83b20ee032b913b0e91fc19350d3e5fd0d4756d8aaee7019e3346e6c867757fc04b1c899a8a1e92261d5a97d2acdbc7aa20488603bfc3bd80c6c0743adbc4a3eed6d6e7d038a74d9760df9ffd2dd6c6611711492e36cb9072b080fc615da68d09cde51a3b86b38fe6af6b22d84eb8c779a8d8eafd1a04ed6d7ca24613dcd61fcecb271978871dd223096c31b93573f690cdc9fb0451d12759ac4e787b7548265c64a6df143869227794bc2436d2cd2a6ce46412eba0096fe6e55c271b6a7a57fa4bc944b3f39933cad8d55d238c2ce710f09b849ed82804b44a7ced6fb4ac6c12d4249eadb719532ee0c0c6b6f8b2736f8308410a170dac0a59ebbab357922bd9fe257e681621af0ab388852352c63fb02f0134223478c0641e439c5650923b278e1d33bb26a9d2035c7bf1e004a8aa8fde86e9ddb7e82670f68fc01c736c57531b51dc24d956ff6250a56a664572d2191c14c3c9352f63571577e36b651527c28667bca455dfb73ee497a1add46f33a6090edc2fa3773635493e07baab38572d710e63a9a08646c38d97b688d3bb00e1e07caa700d4f0f4c4297006bc5c7fd843d7b991f43eca59f022e1863d57a4abc9e819dd6c4f0f894646911b654c3dd26f7bd55f5de1338734e9f2740174411a4b6b1bce5d3cd71cf655c567208f4d3a5396e6d4fa87962f52fd45372b01b53c867eda1da8019ffc98eeef6443ae259b69125b0ef74435c70c720196d812b0b18f6e80e4bbafb8dc95228302c4fa76a3fc35d52b54f84aae03c2d388870452ce07e41ee168bf1b15dc97ccb960a9357635247725ab908d7d7362982105d89f6c3f0506d5402ecbd96f995ce133f002b0d390a17ee5a713df5542eadf1aac5e5fb37f3f16b8c577eeb84cb600822542f7ec392a8674e369e548fe111b49673e37876f712226d5e070c8402d1914c77a9d7b8c74de3175be7702be2952d428c28159686a9d0ebd45e5520fe907509638417a1b8bc238a53d7a8008641606e1c3d85fee2ba6ffacb80b41594b303173712dccccf2a4402a5f17a3b96168ce5fe84a06f3572bf20d0d20f43a850c8bad678b76f4601d943a2909485b225c811654f3e1ba41051f9e42941ccee3b84e7d92656e23b9b01e5edc5669fb04bbd5837b85bdb48fc2bdd5338f45d299cec35dc5800041cefa52fde20911e8f33c3487d02da6b93518968661331c2f1ddd9a38862f5e86eb88475b2f7701f7fb820da7fb05a0f6e2d4b671ad65c39f085fe83e5ec74196aaf18145e5ada6676ac65b1cde40e05ac6f604f75a694e44ffd8420edc7fec9531cec786cc158b1ee6816041f90c5eb7b9182127bb3fce80f4dfa43694eaf7c532bffb0a21343edc1ac64e53d0a8d267ee8609bc18921e60840ed99c549af94628c5bf6408f0e4ccb1d86be1818f3597640389311f234123c02dc53e383c11b0854b6abc56fd43d5c0b2542059317380c1dc6ca3c37f4fd9768798cef8c46fb7099ee64325778e1f42f52c8f97ddc089e206fce56bd2ac2f52254b12cdcf1ca4997a4a4404967c9b09b4d0888a5bfeea5f770be2fa8ae8014d36ea5a23494001c83c6ccc4d7da51dc5e5f05aea158def7ba7280037b4a994fab08c745be73b861237cd011fb128a7179f544b0c56ab607803b0ac6bc2357320cb6f80830365577072968274cddbe66605b0d17b0b74f37a71ed93603bbed8002a7162f2dcad00369ebf44f71072a9501f8c0296585a36ebeb7562e8e970f4ecaceb914bcce1fcfe5379639161802f7bcd7607c3ec0a6a784f9bafe4d13101d5d6afe68f0d0bba65958937a821e16a76a44687cf91948c4d93f8b0a1b8fd3cdd21589c71c35d0f530a71aa1e5377a3ff7d695ca758a29b6e093bae5e66c0d94f74789dad649ac32e22215c0d1f8c1d981085235cc4c273d08b774764f8d0f1978562481401406f07f3b124ec32e60a5dde4d3f5e04f38106d7caaf606a3c98c6046382b05839479f8a06045691bfae50c043f80a09abbb48c00d00905583c275eafd29cb1ca87a6adb0192a58dab28af55434fbe39cc9a7006f8f7b590ece9b3f03e46f0d992607bc1dd0d0a7223aa6a0dc27c68a3c38fd4fd006caacaaf8b09384ddac9e7eef5287d316b008f50dbbb37c9c9d23c17a8f2f35ac3dcefa68007cddc4277b0813c393fd667b56ff02793462898e2edb4b4c296bd346776a2e63a2adaeb62b766c74c489e29e4e09517f32b752945543b4b856cb68a3c3cc3fbb2c919cdf7909ecb512d7d349f43338", 0x1, 0x8, 0x3, 0x1, {0x0, 0x0, r1, 0x1}}, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 3.888845838s ago: executing program 0 (id=1075): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = syz_io_uring_setup(0xb00, &(0x7f0000000480)={0x0, 0x5962, 0x10000, 0x800, 0x4e}, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) listen(r1, 0x100101) accept4(r1, 0x0, 0x0, 0x80800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d70fadbcbe05a78d2855e9a68d708637331"], 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB='enc=pkcs1 hash='], 0x0, 0x0) 3.835931556s ago: executing program 2 (id=1076): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0xb00}, 0x0) 3.761805468s ago: executing program 5 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) (fail_nth: 6) 3.695785311s ago: executing program 2 (id=1078): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file2\x00', 0x18100d0, &(0x7f0000000b80)={[{@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@numtail}, {@utf8no}, {@rodir}, {}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8}, {@rodir}]}, 0x3, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1fc1ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) 3.482216005s ago: executing program 3 (id=1079): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xb}]}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r0, r4, 0x0, 0x20000000002) 3.473443296s ago: executing program 4 (id=1080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001140)={[{@nouid32}, {@noinit_itable}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noauto_da_alloc}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1db002, 0x100) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x60000000000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x2, 0x7, 0x10, 0x7, 0x7, 0x7, 0x7ff, 0x3, 0x1f, 0xc, 0x1b, 0x6, 0xffffffff, 0x5}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r10, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3.399705526s ago: executing program 5 (id=1081): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000600)={0x8, 0x1, 0x7, 0x1, 0x0, "d3d039e19a5db95bde6e85415d10430cf53244"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca", 0xda}], 0x1}}], 0x2, 0x42054) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.333206893s ago: executing program 3 (id=1082): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_ublk_setup_io_uring(0x6593, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05800720"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x1) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0xa, @pix_mp={0x2, 0xb2dd, 0x3631564e, 0x2, 0x8, [{0x2, 0x7fc}, {0x20000, 0x3550}, {0x5, 0x81}, {0x1, 0x3}, {0xd, 0x4}, {0x7df, 0x6314}, {0xffffffe7}, {0x3, 0x9}], 0x0, 0x7, 0x4, 0x0, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x25}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.572894112s ago: executing program 0 (id=1083): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x140, 0x24, 0xd0f, 0x1ffffe, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x140}}, 0x24008004) 1.535481632s ago: executing program 5 (id=1084): r0 = io_uring_setup(0x53fa, &(0x7f00000000c0)={0x0, 0xdad1, 0x40, 0x0, 0x15c}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB="66643d1ba405b57c56e6110c039a74aa7c9fa3914626318c7c238f91174b91d99840da0df565a2d27e8a4badfc0d2e62e14b0c2f663f9de16fe267b0bfdc4091f681e0559fecc9360654475b8d14515c52dfc591387ff19a25", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,\x00'], 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setrlimit(0x6, &(0x7f0000000340)={0x8, 0x6}) sendto$inet6(r3, &(0x7f0000000280)='\x00', 0x1, 0x4000014, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001c80)={0x0, 0x4, 0x3, 0x5, 0x2, 0x2a1}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0xfffffffffffffffe) syz_emit_ethernet(0x96, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="5f1126e81d1b", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x2, 0x7, 0x88, 0x64, 0x0, 0x8a, 0x2, 0x0, @private=0xa010101, @local, {[@noop]}}, {0x13, 0x2, 0x0, @loopback, "ce9eb11898b6911b93aef91bbd4d0c7b0d1da7d55346a9a389958e9bfe3a02e91b3ab6dc77c1c8784a459fd05176d1eeb59fd3f90447f88628eaf9551402ac3cf139810817869430e91b5fef58b87e62ebfca2260f37a7bbca8b12d61d116d68d044b7ef5877f872"}}}}}, &(0x7f0000000780)={0x0, 0x1, [0x2b3, 0x585, 0x973, 0xd7]}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYBLOB="e365694398e9dc9b52fe72fb4158ccf13e8f9f40b397de2559954422765887e87625b96e0afe46049261d0ddcb888f26367e0556161b347803dbed3aedf327fec79a51f55d2998afb97a4a45739d0ff40dcc215af4a91d2e747fbd8d7123b952a26c84933d479cfcdfa1adcb4f622b9af329034316a803d506009f4a305a6b4a7f61f7c64c9406b9e5d1703cf673486bcba9ded0e092d5e6ef77f55cf6ae7f2ed1b1ebe5dbf2dceb51e8eb37bb9fca9895cfe6582d54dadc67987e27b7", @ANYRES8=r7, @ANYRESDEC=r8, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.120173168s ago: executing program 2 (id=1085): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000009c0)=0x5, 0x2) 1.104121453s ago: executing program 0 (id=1086): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f", 0x17}], 0x1}}], 0x1, 0x20000044) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000a000000000000001a00000000000109022400010000e80b0904000001038002832667ed8a6f052274566e0581038936050a70ca059bf7b6a64ef9e079ebdee570323f10ea9702784cd9c7606999b1d787d2589ea04cb94e1ee9bd7b4120c760756cce7e76c68d666430112f277ffef629c46c2fe2e79dc677856ceb201028c4323906fd75cf390da9b91f99e2091cb60f46e4f2a91fba773052290200b5e76c8fff07b00000000000c29e69773b5d368564157cdd2ab2d9e0e082eb214f6f1cd3248c9ffe14a14318807fd7b167ad0329f6330200000043007f7dbb77"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) 1.097106547s ago: executing program 4 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000400)=@xdp={0x2c, 0x14, 0x0, 0x14}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002e00090025bd700000000000040000000800170004000000ec7fa0f6b68af846adee61f95fc8703e404726c3e27181ff3821db1fc6f17afa5b1e9b61c3c18bf46e5342b0ed0d471877bbe67a10bf7cd42ddce463da3eaaf6308b2c881999b5578405c0edfb12ed374df3b23ec0576db0cbfd7f170fab9dbc16e483f81773b7956aa345bfb5138b884a8d108b5385ca050171a1e22b9380d7fc1cde4b9af276a458d44cd741e6ec24bf"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) close(r3) socket$kcm(0x11, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="04ffb6265042ac88b8ee571ce4335014cec2b3ea4933464e233598941d5b746bcf67274ff8991a34ddc0137aa79531113e0b7c4bf00e3c69e160614856b4ef5ff53941093e0d469d0000000000000555c9b777c781af7f70b21283c50cab6450b955187be360de568b85aa0f30f3f6e419c5051366e274c5cbb25be7bd62ad3529917050036534336674f0d1bfb449aedf4788b4f32aa5dfe207e0d6d434f428ba69f58f9e3567d0e9a439e58842c88b3bdb25010080406a99"], 0xb9) 994.424394ms ago: executing program 2 (id=1088): syz_emit_ethernet(0x0, 0x0, 0x0) 915.758333ms ago: executing program 2 (id=1089): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@uni_xlate}, {@numtail}, {@fat=@errors_remount}, {@uni_xlate}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@fat=@showexec}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8}, {@numtail}]}, 0x1, 0x2ae, &(0x7f0000001980)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r0, &(0x7f0000000000), 0x0, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r4 = syz_io_uring_setup(0x2229, &(0x7f0000000200)={0x0, 0x87cf, 0x2, 0x1003, 0x8c}, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r4, 0x6eff, 0x708c, 0x4b, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) 915.015645ms ago: executing program 5 (id=1090): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getdents64(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000000800074000000000240002800c00028005000100000000001400018008000100ac1414bb080002007f000001240001801400018008000100e000000208000200ac1414000c00028005000100000000005c00068008000100"], 0xc0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10002bbd7000fcdbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="1400700005000100010000000500061d010000000a00180003030303030300006f71ae052cd294b5d6a4fb372a46a400feb153e70703574920a45d4699537dfcb69e98cd86a29046fa10d4f16ef5c78881bee837c48ff0e97effc715f910254e40258ae7a8720d9fb16b63ee71e359486b11cf080682268745fcbdd194"], 0x3c}, 0x1, 0x0, 0x0, 0x4c51}, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x161081) 898.525554ms ago: executing program 4 (id=1091): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000d00)={@private2, 0x0}, &(0x7f0000000d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x7, 0x0, 0x40, @loopback, @private0, 0x80, 0x20, 0x1, 0x7}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000300)="4d01000000000000000100e50414090b0092000000000000ab25234aecd4d153d7005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c", 0x37, 0x20000081, &(0x7f00000002c0)={0x11, 0x0, r6, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'erspan0\x00', &(0x7f0000000ec0)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x9, {{0xc, 0x4, 0x0, 0x3a, 0x30, 0x66, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x1a, [@multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x7, 0x7, {{0x22, 0x4, 0x1, 0x35, 0x88, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@noop, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xce, [@multicast2, @empty, @broadcast, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x1d}]}, @cipso={0x86, 0x4d, 0x0, [{0x0, 0xb, "89aecaaddf3d069fb3"}, {0x6, 0x5, "0efae5"}, {0x2, 0x11, "c8d9317e3037d012f0d94789fe144d"}, {0x7, 0xe, "bc2633698df784b59a45640a"}, {0x5, 0x8, "0916e2e91d69"}, {0x1, 0x8, "9031b8ae2b9d"}, {0xc322361ffbfaa020, 0x8, "af8eb2d37870"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={0x1, 0x58, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r13}, &(0x7f0000000000), &(0x7f0000000040)=r14}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r14, r12}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001180)={@local, 0x0}, &(0x7f00000011c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001200)={0xa8c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0xf, 0x36, 0x9}, {0x3, 0x6, 0x3, 0x200}, {0x0, 0x0, 0x40, 0x7f}, {0x7, 0x8, 0x1, 0x3}, {0x3, 0x3, 0x6, 0xa68}, {0x401, 0x4, 0x3, 0x1}, {0x6, 0xea, 0x7, 0x2}, {0x9, 0x8, 0x8d, 0x10001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfb}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x1, 0x9, 0x6}, {0xfff, 0x6, 0x11, 0x6}, {0x8, 0x10, 0x6, 0x5}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6af}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x438f5caf}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r6}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x66b}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r9}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r15}}}]}}]}, 0xa8c}}, 0x40) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f", 0x17}], 0x1}}], 0x1, 0x20000044) r16 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r17 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r21 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r18, r19, r20, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r21, 0x0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0, 0xc005, 0x1}) io_uring_enter(r17, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r16, 0x0, 0x0) syz_usb_control_io$hid(r16, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000100)={0x0, 0x11, 0x5f, {0x5f, 0xf, "e4f943a92ed8ad87efef064666e28b7b61a330f6da35d42e9e7388d40c0d3eaa0c526ab7416d7fe3c5b2a396a0d5bc2fc280b3892c1e6f98d21045957339c06796812043d4ec68e3ab2c28dd55f62e4ede14e53fc8d692cfff99775de6"}}, &(0x7f0000000300)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "ca625c91ec995b1e5d92a0c7a4b50bbbcb71a596548fccdc9b6bb460c82eebd4e7056d9e6e397ec7a4b6c685c2c883b0eb65c119fcfc91698ce5a46aa428377cc7a8b0feb9262ad37433e91cbe9fb28e06f4a8b5227f6c5c0d8e45610a41cd68cff2ca05076927a438fc429e30cae6d77a31a897b3d5c81635e71362c04ade539a0a4611cb31b60c00614eb8dcd802a09b4bbe23b8ec097269"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x40, 0x16, 0x41, "df8c3fe3517bbe0842279e9c972d934d80bdccf1b61b11480ca6409facf8a96f00ddfacbc137b7518ca9c0496fc69465a00450ae149ae387345e7869307a185012"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5c}, &(0x7f0000000500)={0x20, 0x0, 0x6b, {0x69, "5cccbdbbb54244f66eef5590c6295ee38dc9206ee1f1f3374e7da1155e8d57648f1597dec3b474ea0a879f7145db23805d5d8083a51b2767c49eb511722f5166552ffcde25ba354f7a3df627af6b4a6c685b6f5b6c31a7a925814f4646874f6b823c0c045170523799"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x3}}) 639.288674ms ago: executing program 3 (id=1092): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xb}]}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r0, r4, 0x0, 0x20000000002) 524.785563ms ago: executing program 3 (id=1093): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = syz_io_uring_setup(0xb00, &(0x7f0000000480)={0x0, 0x5962, 0x10000, 0x800, 0x4e}, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) listen(r1, 0x100101) accept4(r1, 0x0, 0x0, 0x80800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d70fadbcbe05a78d2855e9a68d70863733120686173"], 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB='enc=pkcs1 hash='], 0x0, 0x0) 20.212974ms ago: executing program 2 (id=1094): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r4], 0x14) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000d060108000000000000000000000000051d01000700000005000500020000000e0003006269746d61703a6970000000"], 0x34}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000280)={0x2b, @private=0xa010102, 0x4e21, 0x0, 'sh\x00', 0x29, 0x9, 0x3f}, 0x2c) preadv(r7, &(0x7f0000004140)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/194, 0xc2}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/18, 0x12}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/101, 0x65}, {&(0x7f0000003fc0)=""/89, 0x59}, {&(0x7f0000004040)=""/10, 0xa}, {&(0x7f0000004080)=""/176, 0xb0}], 0x9, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000001c0)={0xb, @sliced={0x6, [0xfff9, 0x6, 0x7, 0x0, 0x7, 0x0, 0x62, 0x0, 0x80, 0x6, 0x5, 0x200, 0xd, 0xfffd, 0x9, 0x9, 0xdc, 0x8, 0x6, 0xf, 0x8000, 0x8, 0x85, 0x1, 0x3, 0x7, 0x4, 0x80, 0x1, 0x5, 0x8b1f, 0x5, 0x9, 0x1a, 0xc, 0xa, 0x4, 0x6, 0x3a0, 0x1, 0x1, 0x3, 0x4, 0x2, 0x80, 0x5, 0x100, 0x1], 0x1}}) 0s ago: executing program 5 (id=1095): r0 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000040)='^[\x00', 0xc4000, &(0x7f0000000080)={@align=0x3, {0xa82, 0x200, 0x8, 0x3}}, 0x80000000, &(0x7f00000000c0), &(0x7f0000000140)=0xa122}) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}}}, 0x0) r3 = fsmount(r2, 0x1, 0xf9) fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x720, 0x12) kernel console output (not intermixed with test programs): de [ 128.970298][ T7367] EXT4-fs (loop4): 1 truncate cleaned up [ 128.970769][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.001244][ T7371] loop5: detected capacity change from 0 to 512 [ 129.001768][ T7371] EXT4-fs: inline encryption not supported [ 129.005359][ T7371] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.008365][ T7367] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 129.018371][ T7371] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 129.018433][ T7371] EXT4-fs (loop5): 1 truncate cleaned up [ 129.023137][ T7371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.041114][ T7371] netlink: 'syz.5.662': attribute type 4 has an invalid length. [ 129.068952][ T7371] netlink: 'syz.5.662': attribute type 4 has an invalid length. [ 129.081933][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.115295][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 129.135103][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.856235][ T5207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 129.943723][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 130.100889][ T7406] syzkaller0: entered promiscuous mode [ 130.100925][ T7406] syzkaller0: entered allmulticast mode [ 130.152683][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'. [ 130.169662][ T7408] syzkaller0: entered promiscuous mode [ 130.171302][ T7408] syzkaller0: entered allmulticast mode [ 130.174587][ T7410] binder: 7409:7410 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 130.180069][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.572634][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.573660][ T4722] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.623566][ T1054] atkbd serio0: keyboard reset failed on [ 130.651526][ T7429] netlink: 116 bytes leftover after parsing attributes in process `syz.3.683'. [ 130.713315][ T4714] Bluetooth: hci1: command 0x0419 tx timeout [ 131.059717][ T7433] loop2: detected capacity change from 0 to 256 [ 131.783806][ T7441] syzkaller0: entered promiscuous mode [ 131.783840][ T7441] syzkaller0: entered allmulticast mode [ 132.257373][ T4714] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.276089][ T4714] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 132.715004][ T4714] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.715135][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.726100][ T30] kauditd_printk_skb: 49945 callbacks suppressed [ 132.734859][ T30] audit: type=1400 audit(132.360:78569): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7447 comm="syz.4.689" opid=7447 ocomm="syz.4.689" [ 132.738430][ T30] audit: type=1400 audit(132.560:78570): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7447 comm="syz.4.689" saddr=10.128.0.169 src=30028 daddr=10.128.0.234 dest=40764 netif=enp0s0 [ 132.753119][ T30] audit: type=1400 audit(132.610:78571): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7449 comm="syz.5.688" name="newroot" dev="tmpfs" ino=2 [ 132.759086][ T30] audit: type=1400 audit(132.610:78572): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7449 comm="syz.5.688" name="/" dev="devtmpfs" ino=1 [ 132.838034][ T30] audit: type=1400 audit(132.610:78573): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=7449 comm="syz.5.688" name="video2" dev="devtmpfs" ino=819 [ 132.841981][ T30] audit: type=1400 audit(132.620:78574): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7449 comm="syz.5.688" path="/dev/video2" dev="devtmpfs" ino=819 [ 132.845542][ T30] audit: type=1400 audit(132.630:78575): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7449 comm="syz.5.688" path="/dev/video2" dev="devtmpfs" ino=819 [ 132.849641][ T30] audit: type=1400 audit(132.630:78576): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7449 comm="syz.5.688" path="/dev/video2" dev="devtmpfs" ino=819 [ 132.853282][ T30] audit: type=1400 audit(132.740:78577): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4701 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 132.938653][ T30] audit: type=1400 audit(132.860:78578): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4701 comm="udevd" name="/" dev="sysfs" ino=1 [ 133.545189][ T7459] lo speed is unknown, defaulting to 1000 [ 133.545245][ T7459] lo speed is unknown, defaulting to 1000 [ 133.545567][ T7459] lo speed is unknown, defaulting to 1000 [ 133.548009][ T7459] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.558486][ T7459] lo speed is unknown, defaulting to 1000 [ 133.558831][ T7459] lo speed is unknown, defaulting to 1000 [ 133.559170][ T7459] lo speed is unknown, defaulting to 1000 [ 133.559492][ T7459] lo speed is unknown, defaulting to 1000 [ 133.561086][ T7459] lo speed is unknown, defaulting to 1000 [ 133.702020][ T7471] syzkaller0: entered promiscuous mode [ 133.703371][ T7471] syzkaller0: entered allmulticast mode [ 133.715007][ T7471] loop5: detected capacity change from 0 to 1024 [ 133.768507][ T7467] loop2: detected capacity change from 0 to 256 [ 133.841119][ T7471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.905733][ T7471] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.693: lblock 3 mapped to illegal pblock 3 (length 3) [ 133.982616][ T7471] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 133.982661][ T7471] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.982661][ T7471] [ 134.001684][ T7471] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.693: lblock 8 mapped to illegal pblock 8 (length 8) [ 134.008385][ T7471] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 134.008441][ T7471] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.008441][ T7471] [ 134.016627][ T7471] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.693: lblock 0 mapped to illegal pblock 0 (length 3) [ 134.022554][ T7471] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 134.022591][ T7471] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.022591][ T7471] [ 134.218075][ T7471] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.693: bg 0: block 112: padding at end of block bitmap is not set [ 134.227364][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.693'. [ 134.330157][ T4714] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.377163][ T4236] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 134.380794][ T4236] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 134.380829][ T4236] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.380829][ T4236] [ 134.387224][ T15] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 134.387482][ T15] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 134.398815][ T6384] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 134.457442][ T7488] loop5: detected capacity change from 0 to 512 [ 134.462256][ T7488] EXT4-fs: inline encryption not supported [ 134.466088][ T7488] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.469808][ T7488] EXT4-fs (loop5): 1 truncate cleaned up [ 134.470916][ T7488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.579227][ T7491] overlay: Unknown parameter '/' [ 134.753791][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.755471][ T4714] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.859541][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.869846][ T7494] fuse: fd is not a fuse device [ 134.953370][ T7498] netlink: 184 bytes leftover after parsing attributes in process `syz.0.698'. [ 134.955171][ T7498] netlink: 184 bytes leftover after parsing attributes in process `syz.0.698'. [ 134.957840][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 134.965510][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 134.968839][ T7498] syzkaller0: entered promiscuous mode [ 134.970629][ T7498] syzkaller0: entered allmulticast mode [ 135.031895][ T7499] loop5: detected capacity change from 0 to 8189 [ 135.067900][ T7506] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 135.098877][ T7506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.141158][ T7506] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 135.190931][ T7514] loop4: detected capacity change from 0 to 2048 [ 135.209877][ T7516] loop5: detected capacity change from 0 to 512 [ 135.231437][ T7516] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.704: iget: bad i_size value: 38620345925642 [ 135.231476][ T7516] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.231652][ T7516] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.704: couldn't read orphan inode 15 (err -117) [ 135.231668][ T7516] loop5: lost filesystem error report for type 5 error -117 [ 135.233018][ T7516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.233991][ T7514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.240162][ T7516] EXT4-fs (loop5): shut down requested (1) [ 135.256187][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 135.297488][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.426011][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'. [ 135.728659][ T7527] can0: slcan on ttyS3. [ 135.771486][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 135.793093][ T7531] can0 (unregistered): slcan off ttyS3. [ 136.197147][ T7514] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.241915][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.410387][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.644744][ T7547] mmap: syz.4.712 (7547) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.652884][ T7547] lo speed is unknown, defaulting to 1000 [ 136.822639][ T7553] loop4: detected capacity change from 0 to 1024 [ 136.828031][ T7553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.851946][ T7553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.176740][ T7559] loop3: detected capacity change from 0 to 1024 [ 137.178847][ T7559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.183165][ T7561] loop5: detected capacity change from 0 to 128 [ 137.185268][ T7561] FAT-fs (loop5): bogus sectors per cluster 0 [ 137.185282][ T7561] FAT-fs (loop5): Can't find a valid FAT filesystem [ 137.195326][ T7559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.226419][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.313411][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.351231][ T7573] binder: 7567:7573 ioctl c0306201 0 returned -14 [ 137.414443][ T7574] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 137.423943][ T7574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.456743][ T7574] bond3: (slave veth0_to_bond): Releasing backup interface [ 137.482039][ T7574] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.627905][ T7581] loop2: detected capacity change from 0 to 1024 [ 137.641210][ T7581] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.721: Bad quota inum: 3, type: 1 [ 137.641245][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 137.641333][ T7581] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix. [ 137.641770][ T7581] EXT4-fs (loop2): mount failed [ 137.730218][ T30] kauditd_printk_skb: 46107 callbacks suppressed [ 137.730416][ T30] audit: type=1400 audit(137.720:98740): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="/" dev="sysfs" ino=1 [ 137.732314][ T30] audit: type=1400 audit(137.720:98741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4699 comm="udevd" name="/" dev="tmpfs" ino=1 [ 137.732336][ T30] audit: type=1400 audit(137.720:98742): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4699 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 137.732352][ T30] audit: type=1400 audit(137.720:98743): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4699 comm="udevd" name="links" dev="tmpfs" ino=59 [ 137.732367][ T30] audit: type=1400 audit(137.720:98744): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4699 comm="udevd" name="\x2fdisk\x2fby-diskseq\x2f215" dev="tmpfs" ino=4899 [ 137.732381][ T30] audit: type=1400 audit(137.720:98745): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4699 comm="udevd" name="b7:2" dev="tmpfs" ino=4900 [ 137.732395][ T30] audit: type=1400 audit(137.720:98746): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4699 comm="udevd" path="/run/udev/links/\x2fdisk\x2fby-diskseq\x2f215/b7:2" dev="tmpfs" ino=4900 [ 137.732409][ T30] audit: type=1400 audit(137.720:98747): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4699 comm="udevd" name="b7:2" dev="tmpfs" ino=4900 [ 137.732422][ T30] audit: type=1400 audit(137.720:98748): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4699 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 137.732435][ T30] audit: type=1400 audit(137.720:98749): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4699 comm="udevd" name="/" dev="tmpfs" ino=1 [ 137.760505][ T7584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.791797][ T7584] overlayfs: missing 'lowerdir' [ 137.850131][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 138.225013][ T7596] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.281373][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.308449][ T7602] binder: 7601:7602 tried to acquire reference to desc 0, got 1 instead [ 138.321074][ T7602] binder: 7601:7602 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 138.323991][ T7599] block nbd4: shutting down sockets [ 138.324076][ T7602] binder: 7602 RLIMIT_NICE not set [ 138.324234][ T7602] binder: undelivered transaction 17, copy_to_user failed [ 138.324259][ T7602] binder: 7601:7602 ioctl c0306201 20000440 returned -14 [ 138.333929][ T1054] binder: undelivered TRANSACTION_COMPLETE [ 138.496496][ T7613] syzkaller0: entered promiscuous mode [ 138.496528][ T7613] syzkaller0: entered allmulticast mode [ 138.636671][ T5207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.747624][ T7625] set_capacity_and_notify: 2 callbacks suppressed [ 138.748938][ T7625] loop0: detected capacity change from 0 to 1024 [ 138.783044][ T7625] 9p: Bad value for 'wfdno' [ 138.833736][ T7630] loop2: detected capacity change from 0 to 1024 [ 138.862403][ T7630] 9p: Bad value for 'wfdno' [ 138.905617][ T7630] syzkaller0: entered promiscuous mode [ 138.906833][ T7630] syzkaller0: entered allmulticast mode [ 139.027653][ T7637] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 139.029402][ T7637] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 139.065433][ T7639] loop0: detected capacity change from 0 to 256 [ 139.086288][ T7639] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 139.086319][ T7639] overlayfs: missing 'lowerdir' [ 139.184050][ T7645] loop0: detected capacity change from 0 to 512 [ 139.657894][ T7665] loop5: detected capacity change from 0 to 1024 [ 139.675632][ T7665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.745929][ T7668] loop3: detected capacity change from 0 to 1024 [ 139.792604][ T7670] loop4: detected capacity change from 0 to 256 [ 139.798399][ T7668] 9p: Bad value for 'wfdno' [ 139.815228][ T7670] FAT-fs (loop4): Directory bread(block 64) failed [ 139.816558][ T7670] FAT-fs (loop4): Directory bread(block 65) failed [ 139.816614][ T7670] FAT-fs (loop4): Directory bread(block 66) failed [ 139.816634][ T7670] FAT-fs (loop4): Directory bread(block 67) failed [ 139.816666][ T7670] FAT-fs (loop4): Directory bread(block 68) failed [ 139.816682][ T7670] FAT-fs (loop4): Directory bread(block 69) failed [ 139.816710][ T7670] FAT-fs (loop4): Directory bread(block 70) failed [ 139.816725][ T7670] FAT-fs (loop4): Directory bread(block 71) failed [ 139.816751][ T7670] FAT-fs (loop4): Directory bread(block 72) failed [ 139.816765][ T7670] FAT-fs (loop4): Directory bread(block 73) failed [ 139.839292][ T7668] syzkaller0: entered promiscuous mode [ 139.840515][ T7668] syzkaller0: entered allmulticast mode [ 139.918369][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.194299][ T7677] syz.4.751: attempt to access beyond end of device [ 140.194299][ T7677] loop4: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 140.326114][ T7685] syzkaller0: entered promiscuous mode [ 140.326151][ T7685] syzkaller0: entered allmulticast mode [ 140.373783][ T7693] FAULT_INJECTION: forcing a failure. [ 140.373783][ T7693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.373827][ T7693] CPU: 1 UID: 0 PID: 7693 Comm: syz.0.759 Tainted: G L syzkaller #0 PREEMPT [ 140.373842][ T7693] Tainted: [L]=SOFTLOCKUP [ 140.373846][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 140.373851][ T7693] Call trace: [ 140.373854][ T7693] show_stack+0x2c/0x3c (C) [ 140.373871][ T7693] __dump_stack+0x30/0x40 [ 140.373882][ T7693] dump_stack_lvl+0xd8/0x12c [ 140.373892][ T7693] dump_stack+0x1c/0x28 [ 140.373901][ T7693] should_fail_ex+0x41c/0x590 [ 140.373911][ T7693] should_fail+0x14/0x24 [ 140.373918][ T7693] should_fail_usercopy+0x20/0x30 [ 140.373927][ T7693] _copy_from_iter+0x188/0x1064 [ 140.373938][ T7693] sctp_user_addto_chunk+0x88/0x204 [ 140.373947][ T7693] sctp_datamsg_from_user+0x6e8/0xe68 [ 140.373958][ T7693] sctp_sendmsg_to_asoc+0xf74/0x13c0 [ 140.373967][ T7693] sctp_sendmsg+0xc70/0x17bc [ 140.373977][ T7693] inet_sendmsg+0xb4/0xd8 [ 140.373986][ T7693] __sock_sendmsg+0xc8/0x138 [ 140.373997][ T7693] __sys_sendto+0x254/0x338 [ 140.374006][ T7693] __arm64_sys_sendto+0xe4/0x104 [ 140.374016][ T7693] invoke_syscall+0x98/0x244 [ 140.374027][ T7693] el0_svc_common+0xec/0x23c [ 140.374036][ T7693] do_el0_svc+0x4c/0x5c [ 140.374045][ T7693] el0_svc+0x64/0x260 [ 140.374053][ T7693] el0t_64_sync_handler+0x48/0x148 [ 140.374060][ T7693] el0t_64_sync+0x198/0x19c [ 140.498298][ T7700] batman_adv: batadv0: Adding interface: virt_wifi0 [ 140.498333][ T7700] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 141.238639][ T7717] loop3: detected capacity change from 0 to 1024 [ 141.247275][ T7717] 9p: Bad value for 'wfdno' [ 141.272861][ T7717] syzkaller0: entered promiscuous mode [ 141.272897][ T7717] syzkaller0: entered allmulticast mode [ 141.429378][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.429581][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.877793][ T7733] syzkaller1: entered promiscuous mode [ 141.879031][ T7733] syzkaller1: entered allmulticast mode [ 142.031222][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'. [ 142.274109][ T7742] bond5: entered promiscuous mode [ 142.278789][ T7742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.314349][ T7742] vlan3: entered allmulticast mode [ 142.317354][ T7742] bond5: entered allmulticast mode [ 142.329817][ T7742] bridge2: entered promiscuous mode [ 142.331550][ T7742] bridge2: entered allmulticast mode [ 142.332628][ T7742] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 142.402024][ T7750] 9p: Bad value for 'wfdno' [ 142.680763][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 142.739977][ T30] kauditd_printk_skb: 64166 callbacks suppressed [ 142.740018][ T30] audit: type=1400 audit(143.712:132647): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="block" dev="sysfs" ino=13297 [ 142.740046][ T30] audit: type=1400 audit(143.712:132648): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="loop4" dev="sysfs" ino=15459 [ 142.740073][ T30] audit: type=1400 audit(143.712:132649): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="slaves" dev="sysfs" ino=15498 [ 142.740094][ T30] audit: type=1400 audit(143.712:132650): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 142.740117][ T30] audit: type=1400 audit(143.712:132651): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="/" dev="sysfs" ino=1 [ 142.740137][ T30] audit: type=1400 audit(143.712:132652): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="devices" dev="sysfs" ino=18 [ 142.740156][ T30] audit: type=1400 audit(143.712:132653): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="virtual" dev="sysfs" ino=1343 [ 142.740175][ T30] audit: type=1400 audit(143.712:132654): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="block" dev="sysfs" ino=13297 [ 142.740192][ T30] audit: type=1400 audit(143.712:132655): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="loop4" dev="sysfs" ino=15459 [ 142.740209][ T30] audit: type=1400 audit(143.712:132656): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4340 comm="udevd" name="slaves" dev="sysfs" ino=15498 [ 143.122180][ T7763] loop3: detected capacity change from 0 to 2048 [ 143.137435][ T7763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.144101][ T7763] FAULT_INJECTION: forcing a failure. [ 143.144101][ T7763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.147613][ T7763] CPU: 0 UID: 0 PID: 7763 Comm: syz.3.781 Tainted: G L syzkaller #0 PREEMPT [ 143.147641][ T7763] Tainted: [L]=SOFTLOCKUP [ 143.147648][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 143.147659][ T7763] Call trace: [ 143.147664][ T7763] show_stack+0x2c/0x3c (C) [ 143.147684][ T7763] __dump_stack+0x30/0x40 [ 143.147695][ T7763] dump_stack_lvl+0xd8/0x12c [ 143.147705][ T7763] dump_stack+0x1c/0x28 [ 143.147715][ T7763] should_fail_ex+0x41c/0x590 [ 143.147724][ T7763] should_fail+0x14/0x24 [ 143.147732][ T7763] should_fail_usercopy+0x20/0x30 [ 143.147741][ T7763] _copy_from_iter+0x188/0x1064 [ 143.147751][ T7763] file_tty_write+0x370/0x66c [ 143.147761][ T7763] tty_write+0x44/0x54 [ 143.147769][ T7763] vfs_write+0x51c/0xa0c [ 143.147779][ T7763] ksys_write+0x12c/0x228 [ 143.147789][ T7763] __arm64_sys_write+0x7c/0x90 [ 143.147798][ T7763] invoke_syscall+0x98/0x244 [ 143.147808][ T7763] el0_svc_common+0xec/0x23c [ 143.147818][ T7763] do_el0_svc+0x4c/0x5c [ 143.147827][ T7763] el0_svc+0x64/0x260 [ 143.147835][ T7763] el0t_64_sync_handler+0x48/0x148 [ 143.147843][ T7763] el0t_64_sync+0x198/0x19c [ 143.237979][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.347543][ T7776] loop5: detected capacity change from 0 to 256 [ 143.856998][ T7790] loop4: detected capacity change from 0 to 512 [ 143.863365][ T50] block nbd1: Receive control failed (result -32) [ 143.863366][ T4722] block nbd1: Receive control failed (result -32) [ 143.875733][ T7790] EXT4-fs (loop4): 1 orphan inode deleted [ 143.877243][ T7790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.891218][ T39] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 143.906987][ T7788] fuse: root generation should be zero [ 143.954718][ T7800] loop2: detected capacity change from 0 to 2048 [ 143.962519][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.055461][ T7803] FAULT_INJECTION: forcing a failure. [ 144.055461][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 144.055505][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.4.789 Tainted: G L syzkaller #0 PREEMPT [ 144.055523][ T7803] Tainted: [L]=SOFTLOCKUP [ 144.055527][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 144.055532][ T7803] Call trace: [ 144.055536][ T7803] show_stack+0x2c/0x3c (C) [ 144.055555][ T7803] __dump_stack+0x30/0x40 [ 144.055566][ T7803] dump_stack_lvl+0xd8/0x12c [ 144.055576][ T7803] dump_stack+0x1c/0x28 [ 144.055585][ T7803] should_fail_ex+0x41c/0x590 [ 144.055596][ T7803] should_failslab+0xc4/0x120 [ 144.055604][ T7803] kmem_cache_alloc_noprof+0x8c/0x610 [ 144.055613][ T7803] __es_insert_extent+0x1f4/0xa9c [ 144.055622][ T7803] ext4_es_cache_extent+0x228/0x7f8 [ 144.055630][ T7803] ext4_cache_extents+0x17c/0x248 [ 144.055637][ T7803] ext4_find_extent+0x1d8/0x74c [ 144.055644][ T7803] ext4_ext_map_blocks+0x24c/0x4954 [ 144.055652][ T7803] ext4_map_query_blocks+0x110/0x79c [ 144.055662][ T7803] ext4_map_blocks+0x3e4/0xc08 [ 144.055672][ T7803] ext4_readdir+0x610/0x25e8 [ 144.055678][ T7803] iterate_dir+0x290/0x458 [ 144.055688][ T7803] __arm64_sys_getdents64+0x11c/0x308 [ 144.055698][ T7803] invoke_syscall+0x98/0x244 [ 144.055708][ T7803] el0_svc_common+0xec/0x23c [ 144.055718][ T7803] do_el0_svc+0x4c/0x5c [ 144.055727][ T7803] el0_svc+0x64/0x260 [ 144.055735][ T7803] el0t_64_sync_handler+0x48/0x148 [ 144.055742][ T7803] el0t_64_sync+0x198/0x19c [ 144.208800][ T5207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.233755][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.258472][ T7808] loop0: detected capacity change from 0 to 2048 [ 144.781393][ T7818] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.990519][ T7808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.998810][ T7808] FAULT_INJECTION: forcing a failure. [ 144.998810][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 144.999108][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.0.795 Tainted: G L syzkaller #0 PREEMPT [ 144.999126][ T7808] Tainted: [L]=SOFTLOCKUP [ 144.999130][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 144.999135][ T7808] Call trace: [ 144.999138][ T7808] show_stack+0x2c/0x3c (C) [ 144.999157][ T7808] __dump_stack+0x30/0x40 [ 144.999167][ T7808] dump_stack_lvl+0xd8/0x12c [ 144.999177][ T7808] dump_stack+0x1c/0x28 [ 144.999186][ T7808] should_fail_ex+0x41c/0x590 [ 144.999196][ T7808] should_failslab+0xc4/0x120 [ 144.999204][ T7808] __kmalloc_node_noprof+0x104/0x74c [ 144.999213][ T7808] alloc_slab_obj_exts+0x104/0x2bc [ 144.999221][ T7808] __memcg_slab_post_alloc_hook+0x40c/0x898 [ 144.999232][ T7808] kmem_cache_alloc_noprof+0x310/0x610 [ 144.999240][ T7808] fanotify_handle_event+0x1164/0x355c [ 144.999249][ T7808] fsnotify+0xe48/0x1334 [ 144.999259][ T7808] __fsnotify_parent+0x44c/0x530 [ 144.999269][ T7808] fsnotify_pre_content+0x3b8/0x4a8 [ 144.999279][ T7808] vm_mmap_pgoff+0x424/0x46c [ 144.999288][ T7808] ksys_mmap_pgoff+0x364/0x5b4 [ 144.999298][ T7808] __arm64_sys_mmap+0x108/0x120 [ 144.999307][ T7808] invoke_syscall+0x98/0x244 [ 144.999317][ T7808] el0_svc_common+0xec/0x23c [ 144.999326][ T7808] do_el0_svc+0x4c/0x5c [ 144.999336][ T7808] el0_svc+0x64/0x260 [ 144.999344][ T7808] el0t_64_sync_handler+0x48/0x148 [ 144.999351][ T7808] el0t_64_sync+0x198/0x19c [ 145.133611][ T5225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.325229][ T7848] syzkaller0: entered promiscuous mode [ 145.326435][ T7848] syzkaller0: entered allmulticast mode [ 145.336771][ T7850] FAULT_INJECTION: forcing a failure. [ 145.336771][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 145.336806][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.0.805 Tainted: G L syzkaller #0 PREEMPT [ 145.336828][ T7850] Tainted: [L]=SOFTLOCKUP [ 145.336833][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 145.336840][ T7850] Call trace: [ 145.336844][ T7850] show_stack+0x2c/0x3c (C) [ 145.336861][ T7850] __dump_stack+0x30/0x40 [ 145.336873][ T7850] dump_stack_lvl+0xd8/0x12c [ 145.336883][ T7850] dump_stack+0x1c/0x28 [ 145.336892][ T7850] should_fail_ex+0x41c/0x590 [ 145.336902][ T7850] should_failslab+0xc4/0x120 [ 145.336911][ T7850] kmem_cache_alloc_noprof+0x8c/0x610 [ 145.336921][ T7850] dst_alloc+0xf4/0x15c [ 145.336932][ T7850] rt_dst_alloc+0x4c/0x240 [ 145.336940][ T7850] ip_route_input_rcu+0x1958/0x23f0 [ 145.336947][ T7850] ip_route_input_noref+0x178/0x27c [ 145.336954][ T7850] ip_rcv_finish_core+0x4c8/0x1824 [ 145.336963][ T7850] ip_rcv_finish+0x12c/0x230 [ 145.336971][ T7850] NF_HOOK+0x308/0x398 [ 145.336979][ T7850] ip_rcv+0x7c/0x9c [ 145.336986][ T7850] __netif_receive_skb_one_core+0xc8/0x110 [ 145.336997][ T7850] __netif_receive_skb+0x34/0x128 [ 145.337006][ T7850] netif_receive_skb+0x1e0/0xad0 [ 145.337015][ T7850] tun_rx_batched+0x180/0x620 [ 145.337023][ T7850] tun_get_user+0x2344/0x35f0 [ 145.337033][ T7850] tun_chr_write_iter+0xfc/0x168 [ 145.337043][ T7850] vfs_write+0x51c/0xa0c [ 145.337053][ T7850] ksys_write+0x12c/0x228 [ 145.337062][ T7850] __arm64_sys_write+0x7c/0x90 [ 145.337072][ T7850] invoke_syscall+0x98/0x244 [ 145.337082][ T7850] el0_svc_common+0xec/0x23c [ 145.337092][ T7850] do_el0_svc+0x4c/0x5c [ 145.337101][ T7850] el0_svc+0x64/0x260 [ 145.337109][ T7850] el0t_64_sync_handler+0x48/0x148 [ 145.337116][ T7850] el0t_64_sync+0x198/0x19c [ 145.537341][ T50] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 146.746120][ T7866] loop0: detected capacity change from 0 to 1024 [ 146.769187][ T7866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.766766][ T30] kauditd_printk_skb: 39893 callbacks suppressed [ 147.766810][ T30] audit: type=1400 audit(147.952:148321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7864 comm="syz.5.811" name="newroot" dev="tmpfs" ino=2 [ 147.766843][ T30] audit: type=1400 audit(147.952:148322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7864 comm="syz.5.811" name="/" dev="devtmpfs" ino=1 [ 147.766863][ T30] audit: type=1400 audit(147.952:148323): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7864 comm="syz.5.811" name="char" dev="devtmpfs" ino=872 [ 147.766883][ T30] audit: type=1400 audit(147.952:148324): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7864 comm="syz.5.811" name="char" dev="devtmpfs" ino=872 [ 147.766901][ T30] audit: type=1400 audit(147.952:148325): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7864 comm="syz.5.811" name="/" dev="devtmpfs" ino=1 [ 147.766918][ T30] audit: type=1400 audit(147.952:148326): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=7864 comm="syz.5.811" name="tty1" dev="devtmpfs" ino=23 [ 147.766936][ T30] audit: type=1400 audit(147.952:148327): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7864 comm="syz.5.811" path="/dev/tty1" dev="devtmpfs" ino=23 [ 147.766953][ T30] audit: type=1400 audit(148.062:148328): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7864 comm="syz.5.811" saddr=10.128.0.169 src=30028 daddr=10.128.0.234 dest=40764 netif=enp0s0 [ 147.766971][ T30] audit: type=1400 audit(148.562:148329): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7864 comm="syz.5.811" saddr=10.128.0.169 src=30028 daddr=10.128.0.234 dest=40764 netif=enp0s0 [ 147.770888][ T30] audit: type=1400 audit(148.752:148330): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7873 comm="modprobe" path="/lib/libc.so.6" dev="nvme0n1p2" ino=411 [ 147.777251][ T7875] loop3: detected capacity change from 0 to 1024 [ 148.164455][ T7875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.171449][ T7875] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.810: lblock 3 mapped to illegal pblock 3 (length 3) [ 148.172203][ T7875] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 148.172220][ T7875] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.172220][ T7875] [ 148.174617][ T7875] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.810: lblock 8 mapped to illegal pblock 8 (length 8) [ 148.179110][ T7875] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 148.179132][ T7875] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.179132][ T7875] [ 148.180175][ T7875] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.810: lblock 0 mapped to illegal pblock 0 (length 3) [ 148.180473][ T7875] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 148.180487][ T7875] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.180487][ T7875] [ 148.349041][ T7889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.810: bg 0: block 112: padding at end of block bitmap is not set [ 148.519113][ T7877] tipc: Started in network mode [ 148.519157][ T7877] tipc: Node identity , cluster identity 4711 [ 148.519179][ T7877] tipc: Failed to obtain node identity [ 148.519196][ T7877] tipc: Enabling of bearer rejected, failed to enable media [ 148.523311][ T7874] lo speed is unknown, defaulting to 1000 [ 148.537315][ T7887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.812'. [ 148.537536][ T7888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.812'. [ 148.559226][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 148.596044][ T7893] FAULT_INJECTION: forcing a failure. [ 148.596044][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 148.598591][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.2.814 Tainted: G L syzkaller #0 PREEMPT [ 148.598606][ T7893] Tainted: [L]=SOFTLOCKUP [ 148.598609][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 148.598615][ T7893] Call trace: [ 148.598618][ T7893] show_stack+0x2c/0x3c (C) [ 148.598638][ T7893] __dump_stack+0x30/0x40 [ 148.598651][ T7893] dump_stack_lvl+0xd8/0x12c [ 148.598660][ T7893] dump_stack+0x1c/0x28 [ 148.598670][ T7893] should_fail_ex+0x41c/0x590 [ 148.598680][ T7893] should_failslab+0xc4/0x120 [ 148.598688][ T7893] kmem_cache_alloc_noprof+0x8c/0x610 [ 148.598698][ T7893] skb_clone+0x1ac/0x320 [ 148.598706][ T7893] __netlink_deliver_tap+0x364/0x6f4 [ 148.598717][ T7893] netlink_deliver_tap+0x1d8/0x1dc [ 148.598727][ T7893] netlink_unicast+0x5dc/0x7f8 [ 148.598736][ T7893] netlink_sendmsg+0x648/0x948 [ 148.598746][ T7893] __sock_sendmsg+0xc8/0x138 [ 148.598756][ T7893] ____sys_sendmsg+0x3d0/0x6c8 [ 148.598762][ T7893] ___sys_sendmsg+0x198/0x224 [ 148.598769][ T7893] __sys_sendmsg+0x160/0x214 [ 148.598776][ T7893] __arm64_sys_sendmsg+0x80/0x94 [ 148.598783][ T7893] invoke_syscall+0x98/0x244 [ 148.598793][ T7893] el0_svc_common+0xec/0x23c [ 148.598802][ T7893] do_el0_svc+0x4c/0x5c [ 148.598812][ T7893] el0_svc+0x64/0x260 [ 148.598820][ T7893] el0t_64_sync_handler+0x48/0x148 [ 148.598827][ T7893] el0t_64_sync+0x198/0x19c [ 148.635000][ T15] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 148.635321][ T15] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 148.635334][ T15] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.635334][ T15] [ 148.635757][ T15] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 148.635949][ T15] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 148.636215][ T4708] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 148.697825][ T5225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.702144][ T7901] FAULT_INJECTION: forcing a failure. [ 148.702144][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.702183][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.3.816 Tainted: G L syzkaller #0 PREEMPT [ 148.702196][ T7901] Tainted: [L]=SOFTLOCKUP [ 148.702200][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 148.702206][ T7901] Call trace: [ 148.702209][ T7901] show_stack+0x2c/0x3c (C) [ 148.702228][ T7901] __dump_stack+0x30/0x40 [ 148.702240][ T7901] dump_stack_lvl+0xd8/0x12c [ 148.702249][ T7901] dump_stack+0x1c/0x28 [ 148.702259][ T7901] should_fail_ex+0x41c/0x590 [ 148.702269][ T7901] should_fail+0x14/0x24 [ 148.702277][ T7901] should_fail_usercopy+0x20/0x30 [ 148.702286][ T7901] _inline_copy_from_user+0x3c/0x174 [ 148.702297][ T7901] kstrtouint_from_user+0xcc/0x174 [ 148.702306][ T7901] proc_fail_nth_write+0x9c/0x234 [ 148.702315][ T7901] vfs_write+0x2a4/0xa0c [ 148.702325][ T7901] ksys_write+0x12c/0x228 [ 148.702334][ T7901] __arm64_sys_write+0x7c/0x90 [ 148.702344][ T7901] invoke_syscall+0x98/0x244 [ 148.702354][ T7901] el0_svc_common+0xec/0x23c [ 148.702363][ T7901] do_el0_svc+0x4c/0x5c [ 148.702372][ T7901] el0_svc+0x64/0x260 [ 148.702381][ T7901] el0t_64_sync_handler+0x48/0x148 [ 148.702388][ T7901] el0t_64_sync+0x198/0x19c [ 148.832363][ T50] Bluetooth: hci4: unexpected event for opcode 0x2007 [ 150.236932][ T7925] syzkaller0: entered promiscuous mode [ 150.236987][ T7925] syzkaller0: entered allmulticast mode [ 150.305151][ T1054] IPVS: starting estimator thread 0... [ 150.306540][ T7930] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 150.307499][ T7931] netlink: 'syz.0.826': attribute type 11 has an invalid length. [ 150.333681][ T7930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.350937][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.825'. [ 150.410642][ T7932] IPVS: using max 59 ests per chain, 141600 per kthread [ 150.447658][ T7930] bond4: (slave veth0_to_bond): Releasing backup interface [ 150.489704][ T7943] loop2: detected capacity change from 0 to 1024 [ 150.490662][ T7943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.501190][ T7930] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 150.512197][ T7949] FAULT_INJECTION: forcing a failure. [ 150.512197][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 150.512232][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.4.831 Tainted: G L syzkaller #0 PREEMPT [ 150.512244][ T7949] Tainted: [L]=SOFTLOCKUP [ 150.512248][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 150.512253][ T7949] Call trace: [ 150.512257][ T7949] show_stack+0x2c/0x3c (C) [ 150.512273][ T7949] __dump_stack+0x30/0x40 [ 150.512285][ T7949] dump_stack_lvl+0xd8/0x12c [ 150.512295][ T7949] dump_stack+0x1c/0x28 [ 150.512304][ T7949] should_fail_ex+0x41c/0x590 [ 150.512314][ T7949] should_failslab+0xc4/0x120 [ 150.512322][ T7949] __kmalloc_cache_noprof+0x8c/0x624 [ 150.512331][ T7949] drm_atomic_state_alloc+0xbc/0x108 [ 150.512341][ T7949] drm_client_modeset_commit_atomic+0xf8/0x6b8 [ 150.512349][ T7949] drm_client_modeset_commit_locked+0xd0/0x494 [ 150.512357][ T7949] drm_fb_helper_pan_display+0x1b0/0x788 [ 150.512366][ T7949] fb_pan_display+0x2e4/0x53c [ 150.512373][ T7949] bit_update_start+0x4c/0x1c0 [ 150.512382][ T7949] fbcon_modechanged+0x3c4/0x5e8 [ 150.512390][ T7949] fbcon_update_vcs+0x3c/0x4c [ 150.512398][ T7949] do_fb_ioctl+0x760/0x7f4 [ 150.512406][ T7949] fb_ioctl+0x48/0x68 [ 150.512413][ T7949] __arm64_sys_ioctl+0x14c/0x1c4 [ 150.512423][ T7949] invoke_syscall+0x98/0x244 [ 150.512432][ T7949] el0_svc_common+0xec/0x23c [ 150.512442][ T7949] do_el0_svc+0x4c/0x5c [ 150.512451][ T7949] el0_svc+0x64/0x260 [ 150.512459][ T7949] el0t_64_sync_handler+0x48/0x148 [ 150.512473][ T7949] el0t_64_sync+0x198/0x19c [ 150.517907][ T7943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.558765][ T7951] netlink: 92 bytes leftover after parsing attributes in process `syz.0.832'. [ 150.589571][ T7953] overlayfs: missing 'workdir' [ 150.614288][ T7955] loop0: detected capacity change from 0 to 512 [ 150.633423][ T7955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.651985][ T5207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.676071][ T7958] binder: 7957:7958 tried to acquire reference to desc 0, got 1 instead [ 150.680951][ T7958] binder: 7957:7958 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 150.684250][ T7958] binder: 7958 RLIMIT_NICE not set [ 150.740363][ T7966] binder: 7957:7966 got reply transaction with no transaction stack [ 150.740402][ T7966] binder: 7957:7966 transaction reply to 0:0 failed 22/29201/-71, code 0 size 0-24 line 3139 [ 150.774114][ T7968] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 150.848506][ T7972] syzkaller0: entered promiscuous mode [ 150.848543][ T7972] syzkaller0: entered allmulticast mode [ 150.987783][ T7976] syzkaller0: entered promiscuous mode [ 150.989022][ T7976] syzkaller0: entered allmulticast mode [ 150.996200][ T7976] loop2: detected capacity change from 0 to 1024 [ 151.034875][ T7976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.046115][ T7976] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.841: lblock 3 mapped to illegal pblock 3 (length 3) [ 151.054009][ T7976] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 151.054053][ T7976] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.054053][ T7976] [ 151.061923][ T7976] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.841: lblock 8 mapped to illegal pblock 8 (length 8) [ 151.074865][ T7976] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 151.074907][ T7976] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.074907][ T7976] [ 151.075710][ T7976] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.841: lblock 0 mapped to illegal pblock 0 (length 3) [ 151.083199][ T7976] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 151.083225][ T7976] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.083225][ T7976] [ 151.111433][ T7976] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.841: bg 0: block 112: padding at end of block bitmap is not set [ 151.144155][ T7984] loop4: detected capacity change from 0 to 1024 [ 151.165314][ T7984] 9p: Bad value for 'wfdno' [ 151.194415][ T7988] lo speed is unknown, defaulting to 1000 [ 151.234162][ T4236] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 151.237102][ T4236] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 151.237136][ T4236] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.237136][ T4236] [ 151.238683][ T4236] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 151.240452][ T4236] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 151.241256][ T5207] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 151.373304][ T7996] loop2: detected capacity change from 0 to 1024 [ 151.378336][ T7996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.395107][ T7996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.505599][ T4469] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.531160][ T5207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.608373][ T8011] FAULT_INJECTION: forcing a failure. [ 151.608373][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.612726][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.2.850 Tainted: G L syzkaller #0 PREEMPT [ 151.612747][ T8011] Tainted: [L]=SOFTLOCKUP [ 151.612751][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 151.612756][ T8011] Call trace: [ 151.612760][ T8011] show_stack+0x2c/0x3c (C) [ 151.612783][ T8011] __dump_stack+0x30/0x40 [ 151.612795][ T8011] dump_stack_lvl+0xd8/0x12c [ 151.612805][ T8011] dump_stack+0x1c/0x28 [ 151.612814][ T8011] should_fail_ex+0x41c/0x590 [ 151.612824][ T8011] should_fail+0x14/0x24 [ 151.612832][ T8011] should_fail_usercopy+0x20/0x30 [ 151.612841][ T8011] _inline_copy_from_user+0x3c/0x174 [ 151.612850][ T8011] ____sys_sendmsg+0x254/0x6c8 [ 151.612857][ T8011] ___sys_sendmsg+0x198/0x224 [ 151.612863][ T8011] __sys_sendmmsg+0x208/0x588 [ 151.612870][ T8011] __arm64_sys_sendmmsg+0xa4/0xc0 [ 151.612877][ T8011] invoke_syscall+0x98/0x244 [ 151.612887][ T8011] el0_svc_common+0xec/0x23c [ 151.612897][ T8011] do_el0_svc+0x4c/0x5c [ 151.612906][ T8011] el0_svc+0x64/0x260 [ 151.612914][ T8011] el0t_64_sync_handler+0x48/0x148 [ 151.612921][ T8011] el0t_64_sync+0x198/0x19c [ 151.638508][ T8013] can0: slcan on ptm0. [ 151.904834][ T5225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.940637][ T8012] can0 (unregistered): slcan off ptm0. [ 151.961090][ T8020] binfmt_misc: register: failed to install interpreter file ./file0 [ 152.009536][ T8022] netlink: 116 bytes leftover after parsing attributes in process `syz.0.855'. [ 152.496547][ T8036] loop4: detected capacity change from 0 to 1024 [ 152.513650][ T8036] 9p: Bad value for 'wfdno' [ 152.539902][ T8037] loop5: detected capacity change from 0 to 1024 [ 152.542882][ T8037] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.554224][ T8037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.717370][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.770434][ T7835] audit_log_start: 66065 callbacks suppressed [ 152.771755][ T7835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.773235][ T7835] audit: audit_lost=74526 audit_rate_limit=0 audit_backlog_limit=64 [ 152.774887][ T7835] audit: backlog limit exceeded [ 152.775974][ T7835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.777352][ T7835] audit: audit_lost=74527 audit_rate_limit=0 audit_backlog_limit=64 [ 152.778941][ T7835] audit: backlog limit exceeded [ 152.780294][ T7835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.781588][ T7835] audit: audit_lost=74528 audit_rate_limit=0 audit_backlog_limit=64 [ 152.785869][ T7835] audit: backlog limit exceeded [ 152.786990][ T7835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.140182][ T8063] binder: 8059:8063 tried to acquire reference to desc 0, got 1 instead [ 153.143382][ T8063] binder: 8059:8063 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.146197][ T8063] binder: 8063 RLIMIT_NICE not set [ 153.146220][ T8063] binder: 8063 RLIMIT_NICE not set [ 153.156480][ T24] binder: release 8059:8063 transaction 27 out, still active [ 153.156520][ T24] binder: undelivered TRANSACTION_COMPLETE [ 153.159278][ T24] binder: release 8059:8063 transaction 27 in, still active [ 153.159313][ T24] binder: send failed reply for transaction 27, target dead [ 153.177244][ T8065] loop0: detected capacity change from 0 to 4096 [ 153.194683][ T8065] loop0: detected capacity change from 0 to 128 [ 153.208707][ T8065] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.141799][ T8077] FAULT_INJECTION: forcing a failure. [ 155.141799][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 155.144652][ T8083] tipc: Started in network mode [ 155.144667][ T8083] tipc: Node identity , cluster identity 4711 [ 155.144675][ T8083] tipc: Failed to obtain node identity [ 155.144685][ T8083] tipc: Enabling of bearer rejected, failed to enable media [ 155.150118][ T8081] lo speed is unknown, defaulting to 1000 [ 155.151693][ T5225] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.160320][ T8077] CPU: 0 UID: 0 PID: 8077 Comm: syz.2.868 Tainted: G L syzkaller #0 PREEMPT [ 155.160338][ T8077] Tainted: [L]=SOFTLOCKUP [ 155.160341][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 155.160348][ T8077] Call trace: [ 155.160351][ T8077] show_stack+0x2c/0x3c (C) [ 155.160371][ T8077] __dump_stack+0x30/0x40 [ 155.160387][ T8077] dump_stack_lvl+0xd8/0x12c [ 155.160398][ T8077] dump_stack+0x1c/0x28 [ 155.160407][ T8077] should_fail_ex+0x41c/0x590 [ 155.160419][ T8077] should_failslab+0xc4/0x120 [ 155.160427][ T8077] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 155.160437][ T8077] __alloc_skb+0x1f0/0x610 [ 155.160448][ T8077] netlink_ack+0x11c/0x890 [ 155.160459][ T8077] netlink_rcv_skb+0x21c/0x414 [ 155.160473][ T8077] rtnetlink_rcv+0x28/0x38 [ 155.160483][ T8077] netlink_unicast+0x600/0x7f8 [ 155.160492][ T8077] netlink_sendmsg+0x648/0x948 [ 155.160502][ T8077] __sock_sendmsg+0xc8/0x138 [ 155.160512][ T8077] ____sys_sendmsg+0x3d0/0x6c8 [ 155.160519][ T8077] ___sys_sendmsg+0x198/0x224 [ 155.160526][ T8077] __sys_sendmsg+0x160/0x214 [ 155.160533][ T8077] __arm64_sys_sendmsg+0x80/0x94 [ 155.160540][ T8077] invoke_syscall+0x98/0x244 [ 155.160550][ T8077] el0_svc_common+0xec/0x23c [ 155.160559][ T8077] do_el0_svc+0x4c/0x5c [ 155.160568][ T8077] el0_svc+0x64/0x260 [ 155.160577][ T8077] el0t_64_sync_handler+0x48/0x148 [ 155.160584][ T8077] el0t_64_sync+0x198/0x19c [ 155.201094][ T8087] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.247391][ T8091] netlink: 'syz.5.874': attribute type 1 has an invalid length. [ 155.284395][ T8091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.312867][ T8095] loop3: detected capacity change from 0 to 1024 [ 155.324134][ T8091] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.345020][ T8095] 9p: Bad value for 'wfdno' [ 155.414858][ T8104] syzkaller0: entered promiscuous mode [ 155.414949][ T8104] syzkaller0: entered allmulticast mode [ 156.262624][ T8127] openvswitch: netlink: Key type 254 is out of range max 32 [ 156.267408][ T8127] loop4: detected capacity change from 0 to 512 [ 156.298817][ T8127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.314083][ T8127] fuse: Unknown parameter '' [ 156.412608][ T8142] netlink: 'syz.5.887': attribute type 1 has an invalid length. [ 156.433987][ T8142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.446210][ T8142] bond1: (slave veth0_to_bond): Releasing backup interface [ 156.448744][ T8145] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 156.454350][ T8145] netlink: 116 bytes leftover after parsing attributes in process `syz.0.886'. [ 156.477010][ T8142] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 156.543819][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 156.772692][ T8155] lo speed is unknown, defaulting to 1000 [ 157.077466][ T8157] tipc: Started in network mode [ 157.077551][ T8157] tipc: Node identity , cluster identity 4711 [ 157.077591][ T8157] tipc: Failed to obtain node identity [ 157.077648][ T8157] tipc: Enabling of bearer rejected, failed to enable media [ 157.810281][ T30] kauditd_printk_skb: 32254 callbacks suppressed [ 157.810326][ T30] audit: type=1400 audit(158.562:189903): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" opid=8153 ocomm="syz.2.890" [ 157.810359][ T30] audit: type=1400 audit(158.572:189904): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810384][ T30] audit: type=1400 audit(158.572:189905): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810408][ T30] audit: type=1400 audit(158.572:189906): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810427][ T30] audit: type=1400 audit(158.572:189907): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=10.128.0.169 src=30028 daddr=10.128.0.234 dest=40764 netif=enp0s0 [ 157.810447][ T30] audit: type=1400 audit(158.572:189908): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810469][ T30] audit: type=1400 audit(158.572:189909): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810491][ T30] audit: type=1400 audit(158.572:189910): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810512][ T30] audit: type=1400 audit(158.582:189911): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.810530][ T30] audit: type=1400 audit(158.582:189912): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8153 comm="syz.2.890" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo [ 157.894841][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.930654][ T8163] loop0: detected capacity change from 0 to 1024 [ 157.969039][ T8163] 9p: Bad value for 'wfdno' [ 158.951532][ T8206] syzkaller0: entered promiscuous mode [ 158.953825][ T8206] syzkaller0: entered allmulticast mode [ 158.957712][ T8206] FAULT_INJECTION: forcing a failure. [ 158.957712][ T8206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.957739][ T8208] FAULT_INJECTION: forcing a failure. [ 158.957739][ T8208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.957976][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.2.904 Tainted: G L syzkaller #0 PREEMPT [ 158.957994][ T8208] Tainted: [L]=SOFTLOCKUP [ 158.957998][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 158.958003][ T8208] Call trace: [ 158.958005][ T8208] show_stack+0x2c/0x3c (C) [ 158.958022][ T8208] __dump_stack+0x30/0x40 [ 158.958033][ T8208] dump_stack_lvl+0xd8/0x12c [ 158.958042][ T8208] dump_stack+0x1c/0x28 [ 158.958051][ T8208] should_fail_ex+0x41c/0x590 [ 158.958061][ T8208] should_fail_alloc_page+0xec/0x10c [ 158.958070][ T8208] prepare_alloc_pages+0x194/0x4a4 [ 158.958079][ T8208] __alloc_frozen_pages_noprof+0x134/0x320 [ 158.958088][ T8208] alloc_pages_mpol+0x1ec/0x3c0 [ 158.958097][ T8208] alloc_frozen_pages_noprof+0xc4/0x10c [ 158.958106][ T8208] ___kmalloc_large_node+0x70/0x154 [ 158.958114][ T8208] __kmalloc_large_node_noprof+0x2c/0x8c [ 158.958123][ T8208] __kmalloc_noprof+0x3cc/0x6f0 [ 158.958131][ T8208] font_data_import+0x104/0x318 [ 158.958138][ T8208] fbcon_set_font+0x360/0x6ac [ 158.958148][ T8208] con_font_op+0x98c/0xc6c [ 158.958158][ T8208] vt_ioctl+0x1724/0x1e0c [ 158.958165][ T8208] tty_ioctl+0x880/0xd50 [ 158.958173][ T8208] __arm64_sys_ioctl+0x14c/0x1c4 [ 158.958183][ T8208] invoke_syscall+0x98/0x244 [ 158.958193][ T8208] el0_svc_common+0xec/0x23c [ 158.958203][ T8208] do_el0_svc+0x4c/0x5c [ 158.958212][ T8208] el0_svc+0x64/0x260 [ 158.958220][ T8208] el0t_64_sync_handler+0x48/0x148 [ 158.958227][ T8208] el0t_64_sync+0x198/0x19c [ 158.994377][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.4.903 Tainted: G L syzkaller #0 PREEMPT [ 158.994407][ T8206] Tainted: [L]=SOFTLOCKUP [ 158.994412][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 158.994419][ T8206] Call trace: [ 158.994423][ T8206] show_stack+0x2c/0x3c (C) [ 158.994445][ T8206] __dump_stack+0x30/0x40 [ 158.994456][ T8206] dump_stack_lvl+0xd8/0x12c [ 158.994466][ T8206] dump_stack+0x1c/0x28 [ 158.994475][ T8206] should_fail_ex+0x41c/0x590 [ 158.994489][ T8206] should_fail+0x14/0x24 [ 158.994497][ T8206] should_fail_usercopy+0x20/0x30 [ 158.994507][ T8206] simple_read_from_buffer+0xc4/0x238 [ 158.994516][ T8206] proc_fail_nth_read+0x1a8/0x248 [ 158.994524][ T8206] vfs_read+0x230/0x8c8 [ 158.994534][ T8206] ksys_read+0x12c/0x228 [ 158.994543][ T8206] __arm64_sys_read+0x7c/0x90 [ 158.994553][ T8206] invoke_syscall+0x98/0x244 [ 158.994563][ T8206] el0_svc_common+0xec/0x23c [ 158.994572][ T8206] do_el0_svc+0x4c/0x5c [ 158.994581][ T8206] el0_svc+0x64/0x260 [ 158.994589][ T8206] el0t_64_sync_handler+0x48/0x148 [ 158.994597][ T8206] el0t_64_sync+0x198/0x19c [ 159.037777][ T8210] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 159.052951][ T8210] bond5: entered promiscuous mode [ 159.056596][ T8210] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.092293][ T8213] FAULT_INJECTION: forcing a failure. [ 159.092293][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 159.092333][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.3.906 Tainted: G L syzkaller #0 PREEMPT [ 159.092348][ T8213] Tainted: [L]=SOFTLOCKUP [ 159.092353][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 159.092359][ T8213] Call trace: [ 159.092362][ T8213] show_stack+0x2c/0x3c (C) [ 159.092380][ T8213] __dump_stack+0x30/0x40 [ 159.092392][ T8213] dump_stack_lvl+0xd8/0x12c [ 159.092402][ T8213] dump_stack+0x1c/0x28 [ 159.092411][ T8213] should_fail_ex+0x41c/0x590 [ 159.092421][ T8213] should_failslab+0xc4/0x120 [ 159.092430][ T8213] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 159.092440][ T8213] __alloc_skb+0x1f0/0x610 [ 159.092451][ T8213] netlink_ack+0x11c/0x890 [ 159.092461][ T8213] netlink_rcv_skb+0x21c/0x414 [ 159.092478][ T8213] genl_rcv+0x38/0x50 [ 159.092485][ T8213] netlink_unicast+0x600/0x7f8 [ 159.092494][ T8213] netlink_sendmsg+0x648/0x948 [ 159.092504][ T8213] __sock_sendmsg+0xc8/0x138 [ 159.092514][ T8213] ____sys_sendmsg+0x3d0/0x6c8 [ 159.092521][ T8213] ___sys_sendmsg+0x198/0x224 [ 159.092527][ T8213] __sys_sendmsg+0x160/0x214 [ 159.092534][ T8213] __arm64_sys_sendmsg+0x80/0x94 [ 159.092541][ T8213] invoke_syscall+0x98/0x244 [ 159.092550][ T8213] el0_svc_common+0xec/0x23c [ 159.092560][ T8213] do_el0_svc+0x4c/0x5c [ 159.092569][ T8213] el0_svc+0x64/0x260 [ 159.092577][ T8213] el0t_64_sync_handler+0x48/0x148 [ 159.092584][ T8213] el0t_64_sync+0x198/0x19c [ 159.149780][ T8210] veth3: entered promiscuous mode [ 159.151894][ T8210] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 159.236420][ T8219] loop3: detected capacity change from 0 to 1024 [ 159.267231][ T8219] 9p: Bad value for 'wfdno' [ 159.325389][ T8226] netlink: 116 bytes leftover after parsing attributes in process `syz.2.910'. [ 160.159729][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 160.162602][ T8253] loop0: detected capacity change from 0 to 1024 [ 160.165816][ T8253] ext4: Unknown parameter 'obj_user' [ 160.825811][ T8261] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 160.869244][ T8261] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.886993][ T8261] bond5: (slave veth0_to_bond): Releasing backup interface [ 160.904141][ T8261] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.970572][ T8264] nbd4: detected capacity change from 0 to 63 [ 160.970792][ T8267] block nbd4: NBD_DISCONNECT [ 160.973840][ T8267] block nbd4: Disconnected due to user request. [ 160.976898][ T8267] block nbd4: shutting down sockets [ 160.977255][ T7835] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.977322][ T7835] Buffer I/O error on dev nbd4, logical block 0, async page read [ 160.977603][ T7835] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.977626][ T7835] Buffer I/O error on dev nbd4, logical block 1, async page read [ 160.977668][ T7835] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.977687][ T7835] Buffer I/O error on dev nbd4, logical block 2, async page read [ 160.977725][ T7835] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.977739][ T7835] Buffer I/O error on dev nbd4, logical block 3, async page read [ 160.977783][ T7835] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.977797][ T7835] Buffer I/O error on dev nbd4, logical block 0, async page read [ 160.977837][ T7835] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.977851][ T7835] Buffer I/O error on dev nbd4, logical block 1, async page read [ 160.982510][ T4356] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 160.982533][ T4356] Buffer I/O error on dev nbd4, logical block 2, async page read [ 160.982699][ T4356] Buffer I/O error on dev nbd4, logical block 3, async page read [ 160.985508][ T7835] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.985529][ T7835] Buffer I/O error on dev nbd4, logical block 0, async page read [ 160.985571][ T7835] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.985581][ T7835] Buffer I/O error on dev nbd4, logical block 1, async page read [ 160.985611][ T7835] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.988694][ T7835] ldm_validate_partition_table(): Disk read failed. [ 160.991981][ T7835] Dev nbd4: unable to read RDB block 0 [ 160.993325][ T7835] nbd4: unable to read partition table [ 161.003816][ T7835] ldm_validate_partition_table(): Disk read failed. [ 161.005322][ T7835] Dev nbd4: unable to read RDB block 0 [ 161.005728][ T7835] nbd4: unable to read partition table [ 161.126864][ C0] vcan0: j1939_tp_rxtimer: 0x00000000620900bc: rx timeout, send abort [ 161.626973][ C0] vcan0: j1939_tp_rxtimer: 0x0000000037fa7bfc: rx timeout, send abort [ 161.627562][ C0] vcan0: j1939_tp_rxtimer: 0x00000000620900bc: abort rx timeout. Force session deactivation [ 161.948551][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 162.124608][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b5426149: rx timeout, send abort [ 162.124821][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b5426149: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.127019][ C0] vcan0: j1939_tp_rxtimer: 0x0000000037fa7bfc: abort rx timeout. Force session deactivation [ 162.471737][ T8290] FAULT_INJECTION: forcing a failure. [ 162.471737][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 162.474981][ T8290] CPU: 1 UID: 0 PID: 8290 Comm: syz.5.928 Tainted: G L syzkaller #0 PREEMPT [ 162.475009][ T8290] Tainted: [L]=SOFTLOCKUP [ 162.475013][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 162.475019][ T8290] Call trace: [ 162.475023][ T8290] show_stack+0x2c/0x3c (C) [ 162.475047][ T8290] __dump_stack+0x30/0x40 [ 162.475062][ T8290] dump_stack_lvl+0xd8/0x12c [ 162.475074][ T8290] dump_stack+0x1c/0x28 [ 162.475085][ T8290] should_fail_ex+0x41c/0x590 [ 162.475097][ T8290] should_failslab+0xc4/0x120 [ 162.475107][ T8290] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 162.475118][ T8290] __alloc_skb+0x1f0/0x610 [ 162.475129][ T8290] nci_send_cmd+0x8c/0x304 [ 162.475138][ T8290] nci_reset_req+0x90/0xd8 [ 162.475145][ T8290] __nci_request+0x80/0x298 [ 162.475153][ T8290] nci_dev_up+0x274/0x588 [ 162.475160][ T8290] nfc_dev_up+0x138/0x308 [ 162.475168][ T8290] nfc_genl_dev_up+0x98/0xdc [ 162.475177][ T8290] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 162.475186][ T8290] genl_rcv_msg+0x43c/0x620 [ 162.475193][ T8290] netlink_rcv_skb+0x238/0x414 [ 162.475203][ T8290] genl_rcv+0x38/0x50 [ 162.475209][ T8290] netlink_unicast+0x600/0x7f8 [ 162.475219][ T8290] netlink_sendmsg+0x648/0x948 [ 162.475228][ T8290] __sock_sendmsg+0xc8/0x138 [ 162.475238][ T8290] ____sys_sendmsg+0x3d0/0x6c8 [ 162.475245][ T8290] ___sys_sendmsg+0x198/0x224 [ 162.475252][ T8290] __sys_sendmsg+0x160/0x214 [ 162.475259][ T8290] __arm64_sys_sendmsg+0x80/0x94 [ 162.475265][ T8290] invoke_syscall+0x98/0x244 [ 162.475278][ T8290] el0_svc_common+0xec/0x23c [ 162.475288][ T8290] do_el0_svc+0x4c/0x5c [ 162.475298][ T8290] el0_svc+0x64/0x260 [ 162.475306][ T8290] el0t_64_sync_handler+0x48/0x148 [ 162.475313][ T8290] el0t_64_sync+0x198/0x19c [ 162.497503][ T8290] nci: nci_send_cmd: no memory for command [ 162.580260][ T8300] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 162.580312][ T8300] FAULT_INJECTION: forcing a failure. [ 162.580312][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 162.580355][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.3.929 Tainted: G L syzkaller #0 PREEMPT [ 162.580372][ T8300] Tainted: [L]=SOFTLOCKUP [ 162.580376][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 162.580382][ T8300] Call trace: [ 162.580386][ T8300] show_stack+0x2c/0x3c (C) [ 162.580406][ T8300] __dump_stack+0x30/0x40 [ 162.580419][ T8300] dump_stack_lvl+0xd8/0x12c [ 162.580429][ T8300] dump_stack+0x1c/0x28 [ 162.580439][ T8300] should_fail_ex+0x41c/0x590 [ 162.580449][ T8300] should_failslab+0xc4/0x120 [ 162.580458][ T8300] kmem_cache_alloc_noprof+0x8c/0x610 [ 162.580471][ T8300] skb_ext_add+0x13c/0x728 [ 162.580482][ T8300] br_nf_forward_ip+0xb8/0x6ac [ 162.580492][ T8300] br_nf_forward+0x614/0x14e4 [ 162.580500][ T8300] nf_hook_slow+0xc8/0x224 [ 162.580509][ T8300] NF_HOOK+0x1ec/0x394 [ 162.580518][ T8300] __br_forward+0x2d8/0x43c [ 162.580528][ T8300] deliver_clone+0x70/0xcc [ 162.580536][ T8300] maybe_deliver+0x98/0x128 [ 162.580546][ T8300] br_flood+0x290/0x54c [ 162.580554][ T8300] br_handle_frame_finish+0xd98/0x1520 [ 162.580565][ T8300] br_nf_hook_thresh+0x344/0x3e8 [ 162.580573][ T8300] br_nf_pre_routing_finish+0xc00/0x1244 [ 162.580582][ T8300] NF_HOOK+0x5b0/0x63c [ 162.580590][ T8300] br_nf_pre_routing+0xc04/0x1168 [ 162.580598][ T8300] br_handle_frame+0xeb8/0x10e4 [ 162.580608][ T8300] __netif_receive_skb_core+0x848/0x2b60 [ 162.580617][ T8300] __netif_receive_skb_one_core+0x70/0x110 [ 162.580627][ T8300] __netif_receive_skb+0x34/0x128 [ 162.580635][ T8300] netif_receive_skb+0x1e0/0xad0 [ 162.580645][ T8300] tun_rx_batched+0x180/0x620 [ 162.580653][ T8300] tun_get_user+0x2344/0x35f0 [ 162.580663][ T8300] tun_chr_write_iter+0xfc/0x168 [ 162.580673][ T8300] vfs_write+0x51c/0xa0c [ 162.580683][ T8300] ksys_write+0x12c/0x228 [ 162.580692][ T8300] __arm64_sys_write+0x7c/0x90 [ 162.580702][ T8300] invoke_syscall+0x98/0x244 [ 162.580712][ T8300] el0_svc_common+0xec/0x23c [ 162.580722][ T8300] do_el0_svc+0x4c/0x5c [ 162.580731][ T8300] el0_svc+0x64/0x260 [ 162.580739][ T8300] el0t_64_sync_handler+0x48/0x148 [ 162.580746][ T8300] el0t_64_sync+0x198/0x19c [ 163.101364][ T30] kauditd_printk_skb: 42170 callbacks suppressed [ 163.102780][ T30] audit: type=1400 audit(164.082:214851): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.234 dest=40764 netif=enp0s0 [ 163.140570][ T30] audit: type=1400 audit(164.122:214852): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5207 comm="syz-executor" opid=8251 ocomm="syz.2.917" [ 163.143967][ T30] audit: type=1400 audit(164.122:214853): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5207 comm="syz-executor" opid=8251 ocomm="syz.2.917" [ 163.252560][ T30] audit: type=1400 audit(164.232:214854): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 163.252608][ T30] audit: type=1400 audit(164.232:214855): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 163.259023][ T30] audit: type=1400 audit(164.232:214856): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="syz-executor" name="fs" dev="sysfs" ino=2 [ 163.259067][ T30] audit: type=1400 audit(164.232:214857): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="syz-executor" name="fuse" dev="sysfs" ino=5060 [ 163.262410][ T30] audit: type=1400 audit(164.252:214858): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5207 comm="syz-executor" name="/" dev="fusectl" ino=1 [ 163.262512][ T30] audit: type=1400 audit(164.252:214859): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5207 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 [ 163.262590][ T30] audit: type=1400 audit(164.252:214860): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5207 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 [ 163.356522][ T8309] loop0: detected capacity change from 0 to 256 [ 163.367205][ T8311] binfmt_misc: register: failed to install interpreter file ./file0 [ 163.373178][ T8309] FAT-fs (loop0): Directory bread(block 64) failed [ 163.373215][ T8309] FAT-fs (loop0): Directory bread(block 65) failed [ 163.373241][ T8309] FAT-fs (loop0): Directory bread(block 66) failed [ 163.373253][ T8309] FAT-fs (loop0): Directory bread(block 67) failed [ 163.373304][ T8309] FAT-fs (loop0): Directory bread(block 68) failed [ 163.373316][ T8309] FAT-fs (loop0): Directory bread(block 69) failed [ 163.373337][ T8309] FAT-fs (loop0): Directory bread(block 70) failed [ 163.373348][ T8309] FAT-fs (loop0): Directory bread(block 71) failed [ 163.373369][ T8309] FAT-fs (loop0): Directory bread(block 72) failed [ 163.373380][ T8309] FAT-fs (loop0): Directory bread(block 73) failed [ 163.416138][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 163.467664][ T8316] loop2: detected capacity change from 0 to 1024 [ 163.482744][ T8316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.507692][ T8316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.727849][ T8329] syzkaller0: entered promiscuous mode [ 164.730105][ T8329] syzkaller0: entered allmulticast mode [ 164.793523][ T5207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.825612][ T8337] binfmt_misc: register: failed to install interpreter file ./file0 [ 164.828171][ T8338] FAULT_INJECTION: forcing a failure. [ 164.828171][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.828222][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.4.943 Tainted: G L syzkaller #0 PREEMPT [ 164.828241][ T8338] Tainted: [L]=SOFTLOCKUP [ 164.828245][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 164.828250][ T8338] Call trace: [ 164.828252][ T8338] show_stack+0x2c/0x3c (C) [ 164.828269][ T8338] __dump_stack+0x30/0x40 [ 164.828280][ T8338] dump_stack_lvl+0xd8/0x12c [ 164.828289][ T8338] dump_stack+0x1c/0x28 [ 164.828298][ T8338] should_fail_ex+0x41c/0x590 [ 164.828308][ T8338] should_fail+0x14/0x24 [ 164.828316][ T8338] should_fail_usercopy+0x20/0x30 [ 164.828325][ T8338] arch_do_signal_or_restart+0x1000/0x444c [ 164.828335][ T8338] exit_to_user_mode_loop+0x70/0x17c [ 164.828343][ T8338] el0_svc+0x18c/0x260 [ 164.828351][ T8338] el0t_64_sync_handler+0x48/0x148 [ 164.828358][ T8338] el0t_64_sync+0x198/0x19c [ 164.892392][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 164.898319][ T8340] syzkaller0: entered promiscuous mode [ 164.898356][ T8340] syzkaller0: entered allmulticast mode [ 165.029625][ T8350] loop3: detected capacity change from 0 to 1024 [ 165.030311][ T8350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.071302][ T8350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.115526][ T8364] FAULT_INJECTION: forcing a failure. [ 165.115526][ T8364] name failslab, interval 1, probability 0, space 0, times 0 [ 165.125440][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: syz.5.954 Tainted: G L syzkaller #0 PREEMPT [ 165.125461][ T8364] Tainted: [L]=SOFTLOCKUP [ 165.125465][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 165.125471][ T8364] Call trace: [ 165.125474][ T8364] show_stack+0x2c/0x3c (C) [ 165.125500][ T8364] __dump_stack+0x30/0x40 [ 165.125511][ T8364] dump_stack_lvl+0xd8/0x12c [ 165.125521][ T8364] dump_stack+0x1c/0x28 [ 165.125531][ T8364] should_fail_ex+0x41c/0x590 [ 165.125540][ T8364] should_failslab+0xc4/0x120 [ 165.125549][ T8364] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 165.125558][ T8364] __alloc_skb+0x1f0/0x610 [ 165.125569][ T8364] netlink_ack+0x11c/0x890 [ 165.125579][ T8364] netlink_rcv_skb+0x21c/0x414 [ 165.125588][ T8364] rtnetlink_rcv+0x28/0x38 [ 165.125598][ T8364] netlink_unicast+0x600/0x7f8 [ 165.125607][ T8364] netlink_sendmsg+0x648/0x948 [ 165.125617][ T8364] __sock_sendmsg+0xc8/0x138 [ 165.125626][ T8364] ____sys_sendmsg+0x3d0/0x6c8 [ 165.125633][ T8364] ___sys_sendmsg+0x198/0x224 [ 165.125640][ T8364] __sys_sendmsg+0x160/0x214 [ 165.125646][ T8364] __arm64_sys_sendmsg+0x80/0x94 [ 165.125653][ T8364] invoke_syscall+0x98/0x244 [ 165.125663][ T8364] el0_svc_common+0xec/0x23c [ 165.125673][ T8364] do_el0_svc+0x4c/0x5c [ 165.125682][ T8364] el0_svc+0x64/0x260 [ 165.125690][ T8364] el0t_64_sync_handler+0x48/0x148 [ 165.125698][ T8364] el0t_64_sync+0x198/0x19c [ 165.163916][ T8362] syzkaller0: entered promiscuous mode [ 165.163970][ T8362] syzkaller0: entered allmulticast mode [ 165.173534][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.183904][ T8362] tipc: Started in network mode [ 165.183947][ T8362] tipc: Node identity 06646bee566e, cluster identity 4711 [ 165.184157][ T8362] tipc: Enabled bearer , priority 0 [ 165.185250][ T8361] tipc: Resetting bearer [ 165.191266][ T8369] binfmt_misc: register: failed to install interpreter file ./file0 [ 165.216967][ T8361] tipc: Disabling bearer [ 165.594886][ T8376] syzkaller0: entered promiscuous mode [ 165.594919][ T8376] syzkaller0: entered allmulticast mode [ 165.597857][ T8376] FAULT_INJECTION: forcing a failure. [ 165.597857][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 165.597888][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.3.959 Tainted: G L syzkaller #0 PREEMPT [ 165.597905][ T8376] Tainted: [L]=SOFTLOCKUP [ 165.597908][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 165.597914][ T8376] Call trace: [ 165.597916][ T8376] show_stack+0x2c/0x3c (C) [ 165.597933][ T8376] __dump_stack+0x30/0x40 [ 165.597944][ T8376] dump_stack_lvl+0xd8/0x12c [ 165.597954][ T8376] dump_stack+0x1c/0x28 [ 165.597963][ T8376] should_fail_ex+0x41c/0x590 [ 165.597973][ T8376] should_failslab+0xc4/0x120 [ 165.597981][ T8376] kmem_cache_alloc_noprof+0x8c/0x610 [ 165.597990][ T8376] skb_clone+0x1ac/0x320 [ 165.597999][ T8376] netem_enqueue+0x994/0x230c [ 165.598007][ T8376] dev_qdisc_enqueue+0x60/0x450 [ 165.598015][ T8376] __dev_queue_xmit+0x13f4/0x2ba4 [ 165.598025][ T8376] packet_xmit+0x6c/0x314 [ 165.598033][ T8376] packet_sendmsg+0x319c/0x4110 [ 165.598043][ T8376] __sock_sendmsg+0xc8/0x138 [ 165.598052][ T8376] ____sys_sendmsg+0x3d0/0x6c8 [ 165.598059][ T8376] ___sys_sendmsg+0x198/0x224 [ 165.598066][ T8376] __sys_sendmsg+0x160/0x214 [ 165.598072][ T8376] __arm64_sys_sendmsg+0x80/0x94 [ 165.598079][ T8376] invoke_syscall+0x98/0x244 [ 165.598089][ T8376] el0_svc_common+0xec/0x23c [ 165.598098][ T8376] do_el0_svc+0x4c/0x5c [ 165.598107][ T8376] el0_svc+0x64/0x260 [ 165.598115][ T8376] el0t_64_sync_handler+0x48/0x148 [ 165.598122][ T8376] el0t_64_sync+0x198/0x19c [ 165.718491][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 165.856982][ T8397] loop3: detected capacity change from 0 to 512 [ 165.857606][ T8398] FAULT_INJECTION: forcing a failure. [ 165.857606][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 165.857626][ T8398] CPU: 1 UID: 0 PID: 8398 Comm: syz.4.967 Tainted: G L syzkaller #0 PREEMPT [ 165.857639][ T8398] Tainted: [L]=SOFTLOCKUP [ 165.857642][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 165.857648][ T8398] Call trace: [ 165.857651][ T8398] show_stack+0x2c/0x3c (C) [ 165.857669][ T8398] __dump_stack+0x30/0x40 [ 165.857681][ T8398] dump_stack_lvl+0xd8/0x12c [ 165.857691][ T8398] dump_stack+0x1c/0x28 [ 165.857700][ T8398] should_fail_ex+0x41c/0x590 [ 165.857711][ T8398] should_failslab+0xc4/0x120 [ 165.857719][ T8398] kmem_cache_alloc_noprof+0x8c/0x610 [ 165.857728][ T8398] skb_clone+0x1ac/0x320 [ 165.857736][ T8398] __netlink_deliver_tap+0x364/0x6f4 [ 165.857747][ T8398] netlink_deliver_tap+0x1d8/0x1dc [ 165.857757][ T8398] netlink_unicast+0x5dc/0x7f8 [ 165.857766][ T8398] netlink_sendmsg+0x648/0x948 [ 165.857776][ T8398] __sock_sendmsg+0xc8/0x138 [ 165.857785][ T8398] ____sys_sendmsg+0x3d0/0x6c8 [ 165.857792][ T8398] ___sys_sendmsg+0x198/0x224 [ 165.857799][ T8398] __sys_sendmsg+0x160/0x214 [ 165.857806][ T8398] __arm64_sys_sendmsg+0x80/0x94 [ 165.857813][ T8398] invoke_syscall+0x98/0x244 [ 165.857823][ T8398] el0_svc_common+0xec/0x23c [ 165.857833][ T8398] do_el0_svc+0x4c/0x5c [ 165.857842][ T8398] el0_svc+0x64/0x260 [ 165.857850][ T8398] el0t_64_sync_handler+0x48/0x148 [ 165.857857][ T8398] el0t_64_sync+0x198/0x19c [ 165.861785][ T8397] EXT4-fs: Ignoring removed oldalloc option [ 165.891635][ T8397] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.893047][ T8397] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.923659][ T8401] FAULT_INJECTION: forcing a failure. [ 165.923659][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 165.923699][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.0.969 Tainted: G L syzkaller #0 PREEMPT [ 165.923716][ T8401] Tainted: [L]=SOFTLOCKUP [ 165.923721][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 165.923727][ T8401] Call trace: [ 165.923730][ T8401] show_stack+0x2c/0x3c (C) [ 165.923750][ T8401] __dump_stack+0x30/0x40 [ 165.923761][ T8401] dump_stack_lvl+0xd8/0x12c [ 165.923770][ T8401] dump_stack+0x1c/0x28 [ 165.923780][ T8401] should_fail_ex+0x41c/0x590 [ 165.923789][ T8401] should_failslab+0xc4/0x120 [ 165.923798][ T8401] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 165.923807][ T8401] __alloc_skb+0x1f0/0x610 [ 165.923818][ T8401] netlink_ack+0x11c/0x890 [ 165.923828][ T8401] netlink_rcv_skb+0x21c/0x414 [ 165.923838][ T8401] genl_rcv+0x38/0x50 [ 165.923844][ T8401] netlink_unicast+0x600/0x7f8 [ 165.923853][ T8401] netlink_sendmsg+0x648/0x948 [ 165.923863][ T8401] __sock_sendmsg+0xc8/0x138 [ 165.923872][ T8401] ____sys_sendmsg+0x3d0/0x6c8 [ 165.923879][ T8401] ___sys_sendmsg+0x198/0x224 [ 165.923886][ T8401] __sys_sendmsg+0x160/0x214 [ 165.923892][ T8401] __arm64_sys_sendmsg+0x80/0x94 [ 165.923899][ T8401] invoke_syscall+0x98/0x244 [ 165.923909][ T8401] el0_svc_common+0xec/0x23c [ 165.923918][ T8401] do_el0_svc+0x4c/0x5c [ 165.923928][ T8401] el0_svc+0x64/0x260 [ 165.923936][ T8401] el0t_64_sync_handler+0x48/0x148 [ 165.923943][ T8401] el0t_64_sync+0x198/0x19c [ 165.952184][ T8397] EXT4-fs (loop3): 1 truncate cleaned up [ 165.952713][ T8397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.970197][ T8397] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 165.977905][ T8397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.997228][ T8407] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 166.004543][ T8397] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 166.012726][ T8409] binfmt_misc: register: failed to install interpreter file ./file0 [ 166.067209][ T8410] loop0: detected capacity change from 0 to 256 [ 166.136329][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.139340][ T8410] FAT-fs (loop0): Directory bread(block 64) failed [ 166.142171][ T8410] FAT-fs (loop0): Directory bread(block 65) failed [ 166.143376][ T8410] FAT-fs (loop0): Directory bread(block 66) failed [ 166.145069][ T8410] FAT-fs (loop0): Directory bread(block 67) failed [ 166.145131][ T8410] FAT-fs (loop0): Directory bread(block 68) failed [ 166.145154][ T8410] FAT-fs (loop0): Directory bread(block 69) failed [ 166.145195][ T8410] FAT-fs (loop0): Directory bread(block 70) failed [ 166.145216][ T8410] FAT-fs (loop0): Directory bread(block 71) failed [ 166.145248][ T8410] FAT-fs (loop0): Directory bread(block 72) failed [ 166.145266][ T8410] FAT-fs (loop0): Directory bread(block 73) failed [ 166.400637][ T8413] binder: 8412:8413 got transaction to invalid handle, 1 [ 166.400669][ T8413] binder: 8412:8413 cannot find target node [ 166.400966][ T8413] binder: 8412:8413 transaction call to 0:0 failed 28/29201/-22, code 0 size 0-0 line 3236 [ 166.464372][ T8418] FAULT_INJECTION: forcing a failure. [ 166.464372][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 166.467440][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.3.977 Tainted: G L syzkaller #0 PREEMPT [ 166.467469][ T8418] Tainted: [L]=SOFTLOCKUP [ 166.467474][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 166.467480][ T8418] Call trace: [ 166.467484][ T8418] show_stack+0x2c/0x3c (C) [ 166.467510][ T8418] __dump_stack+0x30/0x40 [ 166.467524][ T8418] dump_stack_lvl+0xd8/0x12c [ 166.467535][ T8418] dump_stack+0x1c/0x28 [ 166.467545][ T8418] should_fail_ex+0x41c/0x590 [ 166.467556][ T8418] should_failslab+0xc4/0x120 [ 166.467565][ T8418] __kmalloc_noprof+0x100/0x6f0 [ 166.467574][ T8418] tomoyo_encode2+0x10c/0x330 [ 166.467585][ T8418] tomoyo_encode+0x34/0x50 [ 166.467595][ T8418] tomoyo_realpath_from_path+0x488/0x4dc [ 166.467605][ T8418] tomoyo_check_open_permission+0x1c4/0x394 [ 166.467615][ T8418] tomoyo_file_open+0x78/0xcc [ 166.467622][ T8418] security_file_open+0xbc/0x258 [ 166.467632][ T8418] do_dentry_open+0x2a8/0xfb8 [ 166.467641][ T8418] vfs_open+0x44/0x2dc [ 166.467650][ T8418] path_openat+0x22d4/0x2b88 [ 166.467658][ T8418] do_file_open+0x1c8/0x2e8 [ 166.467665][ T8418] do_sys_openat2+0x114/0x1e8 [ 166.467674][ T8418] do_sys_open+0xac/0xdc [ 166.467683][ T8418] __arm64_sys_openat+0xa0/0xbc [ 166.467692][ T8418] invoke_syscall+0x98/0x244 [ 166.467702][ T8418] el0_svc_common+0xec/0x23c [ 166.467712][ T8418] do_el0_svc+0x4c/0x5c [ 166.467721][ T8418] el0_svc+0x64/0x260 [ 166.467729][ T8418] el0t_64_sync_handler+0x48/0x148 [ 166.467737][ T8418] el0t_64_sync+0x198/0x19c [ 166.482654][ T8418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.690726][ T8426] lo speed is unknown, defaulting to 1000 [ 167.700618][ T8427] tipc: Started in network mode [ 167.701646][ T8427] tipc: Node identity , cluster identity 4711 [ 167.703710][ T8427] tipc: Failed to obtain node identity [ 167.704799][ T8427] tipc: Enabling of bearer rejected, failed to enable media [ 167.861028][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.981'. [ 167.861065][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.981'. [ 167.949615][ T8440] overlay: Unknown parameter 'obj_user' [ 168.110697][ T30] kauditd_printk_skb: 62342 callbacks suppressed [ 168.110748][ T30] audit: type=1400 audit(169.082:234825): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="loop2" dev="sysfs" ino=15225 [ 168.110782][ T30] audit: type=1400 audit(169.082:234826): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="holders" dev="sysfs" ino=15263 [ 168.110810][ T30] audit: type=1400 audit(169.082:234827): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 168.110836][ T30] audit: type=1400 audit(169.082:234828): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="/" dev="sysfs" ino=1 [ 168.110861][ T30] audit: type=1400 audit(169.082:234829): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="devices" dev="sysfs" ino=18 [ 168.110886][ T30] audit: type=1400 audit(169.082:234830): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="virtual" dev="sysfs" ino=1343 [ 168.110910][ T30] audit: type=1400 audit(169.082:234831): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="block" dev="sysfs" ino=13297 [ 168.110931][ T30] audit: type=1400 audit(169.082:234832): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4340 comm="udevd" name="loop2" dev="sysfs" ino=15225 [ 168.110950][ T30] audit: type=1400 audit(169.082:234833): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4340 comm="udevd" name="holders" dev="sysfs" ino=15263 [ 168.110968][ T30] audit: type=1400 audit(169.082:234834): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4340 comm="udevd" path="/sys/devices/virtual/block/loop2/holders" dev="sysfs" ino=15263 [ 168.222734][ T8458] loop4: detected capacity change from 0 to 512 [ 168.535821][ T8458] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 168.549027][ T8458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 168.549506][ T8458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.556313][ T8458] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.989: bg 0: block 361: padding at end of block bitmap is not set [ 168.556340][ T8458] loop4: lost filesystem error report for type 5 error -117 [ 168.557625][ T8458] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 168.557824][ T8458] loop4: lost filesystem error report for type 5 error -117 [ 168.561309][ T8458] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.989: attempt to clear invalid blocks 33619980 len 1 [ 168.561332][ T8458] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.567604][ T8458] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.989: invalid indirect mapped block 1811939328 (level 0) [ 168.567635][ T8458] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.569223][ T8458] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.989: invalid indirect mapped block 2185560079 (level 1) [ 168.569239][ T8458] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.569941][ C1] EXT4-fs (loop4): error count since last fsck: 5 [ 168.569956][ C1] EXT4-fs (loop4): initial error at time 169: ext4_validate_block_bitmap:441 [ 168.569968][ C1] EXT4-fs (loop4): last error at time 169: ext4_free_branches:1023: inode 11 [ 168.581980][ T8458] EXT4-fs (loop4): 1 truncate cleaned up [ 168.582824][ T8458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 169.399213][ T8474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.578283][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 169.613498][ T8475] syzkaller0: entered promiscuous mode [ 169.613530][ T8475] syzkaller0: entered allmulticast mode [ 170.111819][ T8485] FAULT_INJECTION: forcing a failure. [ 170.111819][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 170.115466][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.2.999 Tainted: G L syzkaller #0 PREEMPT [ 170.115489][ T8485] Tainted: [L]=SOFTLOCKUP [ 170.115494][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 170.115500][ T8485] Call trace: [ 170.115504][ T8485] show_stack+0x2c/0x3c (C) [ 170.115527][ T8485] __dump_stack+0x30/0x40 [ 170.115540][ T8485] dump_stack_lvl+0xd8/0x12c [ 170.115553][ T8485] dump_stack+0x1c/0x28 [ 170.115563][ T8485] should_fail_ex+0x41c/0x590 [ 170.115574][ T8485] should_failslab+0xc4/0x120 [ 170.115583][ T8485] __kmalloc_cache_noprof+0x8c/0x624 [ 170.115594][ T8485] netlbl_cipsov4_add+0x294/0x1ed8 [ 170.115604][ T8485] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 170.115613][ T8485] genl_rcv_msg+0x43c/0x620 [ 170.115621][ T8485] netlink_rcv_skb+0x238/0x414 [ 170.115631][ T8485] genl_rcv+0x38/0x50 [ 170.115638][ T8485] netlink_unicast+0x600/0x7f8 [ 170.115647][ T8485] netlink_sendmsg+0x648/0x948 [ 170.115657][ T8485] __sock_sendmsg+0xc8/0x138 [ 170.115667][ T8485] ____sys_sendmsg+0x3d0/0x6c8 [ 170.115674][ T8485] ___sys_sendmsg+0x198/0x224 [ 170.115681][ T8485] __sys_sendmsg+0x160/0x214 [ 170.115688][ T8485] __arm64_sys_sendmsg+0x80/0x94 [ 170.115695][ T8485] invoke_syscall+0x98/0x244 [ 170.115705][ T8485] el0_svc_common+0xec/0x23c [ 170.115714][ T8485] do_el0_svc+0x4c/0x5c [ 170.115723][ T8485] el0_svc+0x64/0x260 [ 170.115731][ T8485] el0t_64_sync_handler+0x48/0x148 [ 170.115739][ T8485] el0t_64_sync+0x198/0x19c [ 170.246171][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 170.246245][ T8491] syz_tun: left allmulticast mode [ 170.246275][ T8491] syz_tun: left promiscuous mode [ 170.246382][ T8491] bridge0: port 1(syz_tun) entered disabled state [ 170.346947][ T8496] syzkaller0: entered promiscuous mode [ 170.346980][ T8496] syzkaller0: entered allmulticast mode [ 170.859790][ T8506] loop0: detected capacity change from 0 to 1024 [ 170.860892][ T8506] EXT4-fs: Ignoring removed orlov option [ 170.861489][ T8506] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 170.864892][ T8506] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 170.865212][ T8506] EXT4-fs (loop0): orphan cleanup on readonly fs [ 170.866249][ T8506] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.1007: Invalid inode table block 0 in block_group 0 [ 170.866266][ T8506] loop0: lost filesystem error report for type 5 error -117 [ 170.867828][ T8506] EXT4-fs (loop0): Remounting filesystem read-only [ 170.867907][ T8506] EXT4-fs (loop0): 1 truncate cleaned up [ 170.870231][ T8506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.872439][ T8506] EXT4-fs (loop0): shut down requested (2) [ 170.901190][ T5225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.956752][ T8511] FAULT_INJECTION: forcing a failure. [ 170.956752][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 170.956789][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.3.1009 Tainted: G L syzkaller #0 PREEMPT [ 170.956803][ T8511] Tainted: [L]=SOFTLOCKUP [ 170.956807][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 170.956812][ T8511] Call trace: [ 170.956815][ T8511] show_stack+0x2c/0x3c (C) [ 170.956832][ T8511] __dump_stack+0x30/0x40 [ 170.956844][ T8511] dump_stack_lvl+0xd8/0x12c [ 170.956853][ T8511] dump_stack+0x1c/0x28 [ 170.956863][ T8511] should_fail_ex+0x41c/0x590 [ 170.956873][ T8511] should_failslab+0xc4/0x120 [ 170.956881][ T8511] kmem_cache_alloc_noprof+0x8c/0x610 [ 170.956890][ T8511] skb_clone+0x1ac/0x320 [ 170.956899][ T8511] nfnetlink_rcv+0x3c0/0x16ec [ 170.956907][ T8511] netlink_unicast+0x600/0x7f8 [ 170.956917][ T8511] netlink_sendmsg+0x648/0x948 [ 170.956927][ T8511] __sock_sendmsg+0xc8/0x138 [ 170.956936][ T8511] ____sys_sendmsg+0x3d0/0x6c8 [ 170.956943][ T8511] ___sys_sendmsg+0x198/0x224 [ 170.956950][ T8511] __sys_sendmsg+0x160/0x214 [ 170.956956][ T8511] __arm64_sys_sendmsg+0x80/0x94 [ 170.956963][ T8511] invoke_syscall+0x98/0x244 [ 170.956973][ T8511] el0_svc_common+0xec/0x23c [ 170.956982][ T8511] do_el0_svc+0x4c/0x5c [ 170.956992][ T8511] el0_svc+0x64/0x260 [ 170.957000][ T8511] el0t_64_sync_handler+0x48/0x148 [ 170.957007][ T8511] el0t_64_sync+0x198/0x19c [ 171.038634][ T50] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 171.113235][ T8519] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 171.134136][ T8519] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 171.672179][ T8521] siw: device registration error -23 [ 172.218430][ T8524] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1014'. [ 172.357873][ T8536] loop4: detected capacity change from 0 to 1024 [ 172.358453][ T8536] EXT4-fs: Ignoring removed bh option [ 172.359033][ T8536] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 172.376792][ T8536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.464107][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.475431][ T8548] syzkaller0: entered promiscuous mode [ 172.475467][ T8548] syzkaller0: entered allmulticast mode [ 172.514909][ T8548] loop5: detected capacity change from 0 to 1024 [ 172.527860][ T8548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.536141][ T8548] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1023: lblock 3 mapped to illegal pblock 3 (length 3) [ 172.537937][ T8548] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 172.537960][ T8548] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.537960][ T8548] [ 172.539610][ T8548] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.1023: lblock 8 mapped to illegal pblock 8 (length 8) [ 172.542070][ T8548] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 172.542085][ T8548] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.542085][ T8548] [ 172.542833][ T8548] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1023: lblock 0 mapped to illegal pblock 0 (length 3) [ 172.543337][ T8548] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 172.543353][ T8548] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.543353][ T8548] [ 172.597500][ T8548] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1023: bg 0: block 112: padding at end of block bitmap is not set [ 172.610071][ T1054] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.612769][ T8557] binfmt_misc: register: failed to install interpreter file ./file0 [ 172.906909][ T1054] usb 1-1: device descriptor read/64, error -71 [ 172.917669][ T39] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 172.918030][ T39] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 172.918048][ T39] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.918048][ T39] [ 172.918680][ T39] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 172.918847][ T39] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 172.919163][ T6384] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 173.090960][ T8565] loop5: detected capacity change from 0 to 512 [ 173.129100][ T4340] audit_log_start: 39969 callbacks suppressed [ 173.132007][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.132033][ C1] audit: audit_lost=107735 audit_rate_limit=0 audit_backlog_limit=64 [ 173.132054][ C1] audit: backlog limit exceeded [ 173.140739][ T4340] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.143078][ T4340] audit: audit_lost=107736 audit_rate_limit=0 audit_backlog_limit=64 [ 173.145978][ T4340] audit: backlog limit exceeded [ 173.153465][ T4340] audit: audit_backlog=66 > audit_backlog_limit=64 [ 173.155733][ T4340] audit: audit_lost=107737 audit_rate_limit=0 audit_backlog_limit=64 [ 173.158985][ T4340] audit: backlog limit exceeded [ 173.166199][ T4340] audit: audit_backlog=66 > audit_backlog_limit=64 [ 173.211813][ T1054] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.393320][ T1054] usb 1-1: device descriptor read/64, error -71 [ 173.454901][ T8567] binder: 8566:8567 got transaction to invalid handle, 1 [ 173.454933][ T8567] binder: 8566:8567 cannot find target node [ 173.454961][ T8567] binder: 8566:8567 transaction call to 0:0 failed 29/29201/-22, code 0 size 96-24 line 3236 [ 173.459525][ T4469] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.502988][ T1054] usb usb1-port1: attempt power cycle [ 173.581574][ T8575] FAULT_INJECTION: forcing a failure. [ 173.581574][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.581608][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.4.1032 Tainted: G L syzkaller #0 PREEMPT [ 173.581623][ T8575] Tainted: [L]=SOFTLOCKUP [ 173.581628][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 173.581633][ T8575] Call trace: [ 173.581636][ T8575] show_stack+0x2c/0x3c (C) [ 173.581655][ T8575] __dump_stack+0x30/0x40 [ 173.581668][ T8575] dump_stack_lvl+0xd8/0x12c [ 173.581678][ T8575] dump_stack+0x1c/0x28 [ 173.581687][ T8575] should_fail_ex+0x41c/0x590 [ 173.581697][ T8575] should_fail+0x14/0x24 [ 173.581705][ T8575] should_fail_usercopy+0x20/0x30 [ 173.581714][ T8575] _copy_to_iter+0x424/0x10f8 [ 173.581724][ T8575] simple_copy_to_iter+0x50/0x8c [ 173.581735][ T8575] __skb_datagram_iter+0xd4/0x77c [ 173.581744][ T8575] skb_copy_datagram_iter+0xf4/0x3e8 [ 173.581753][ T8575] netlink_recvmsg+0x244/0x868 [ 173.581764][ T8575] sock_recvmsg+0xd4/0x12c [ 173.581774][ T8575] ____sys_recvmsg+0x1b8/0x608 [ 173.581781][ T8575] ___sys_recvmsg+0x16c/0x1f4 [ 173.581788][ T8575] do_recvmmsg+0x294/0x7e8 [ 173.581794][ T8575] __sys_recvmmsg+0x200/0x270 [ 173.581801][ T8575] __arm64_sys_recvmmsg+0xdc/0x104 [ 173.581808][ T8575] invoke_syscall+0x98/0x244 [ 173.581818][ T8575] el0_svc_common+0xec/0x23c [ 173.581828][ T8575] do_el0_svc+0x4c/0x5c [ 173.581837][ T8575] el0_svc+0x64/0x260 [ 173.581845][ T8575] el0t_64_sync_handler+0x48/0x148 [ 173.581852][ T8575] el0t_64_sync+0x198/0x19c [ 173.718682][ T8583] Injecting memory failure for pfn 0x14d2b0 at process virtual address 0x20000000 [ 173.941237][ T8583] Memory failure: 0x14d2b0: recovery action for clean LRU page: Recovered [ 173.941304][ T8583] Injecting memory failure for pfn 0x1445e0 at process virtual address 0x20010000 [ 173.941489][ T8583] Memory failure: 0x1445e0: recovery action for clean LRU page: Recovered [ 173.941661][ T8583] Injecting memory failure for pfn 0x14d290 at process virtual address 0x20020000 [ 173.941719][ T8583] Memory failure: 0x14d290: recovery action for clean LRU page: Recovered [ 173.941745][ T8583] Injecting memory failure for pfn 0x14d080 at process virtual address 0x20030000 [ 173.941797][ T8583] Memory failure: 0x14d080: recovery action for clean LRU page: Recovered [ 173.941922][ T8583] Injecting memory failure for pfn 0x14d090 at process virtual address 0x20040000 [ 173.941974][ T8583] Memory failure: 0x14d090: recovery action for clean LRU page: Recovered [ 173.941997][ T8583] Injecting memory failure for pfn 0x14ce80 at process virtual address 0x20050000 [ 173.942046][ T8583] Memory failure: 0x14ce80: recovery action for clean LRU page: Recovered [ 173.942218][ T8583] Injecting memory failure for pfn 0x14ce90 at process virtual address 0x20060000 [ 173.942269][ T8583] Memory failure: 0x14ce90: recovery action for clean LRU page: Recovered [ 173.942292][ T8583] Injecting memory failure for pfn 0x14cc80 at process virtual address 0x20070000 [ 173.942340][ T8583] Memory failure: 0x14cc80: recovery action for clean LRU page: Recovered [ 173.942458][ T8583] Injecting memory failure for pfn 0x14cc90 at process virtual address 0x20080000 [ 173.942515][ T8583] Memory failure: 0x14cc90: recovery action for clean LRU page: Recovered [ 173.942538][ T8583] Injecting memory failure for pfn 0x14ca80 at process virtual address 0x20090000 [ 173.942586][ T8583] Memory failure: 0x14ca80: recovery action for clean LRU page: Recovered [ 173.942599][ T8583] Injecting memory failure for pfn 0x150ad0 at process virtual address 0x200a0000 [ 173.942720][ T8583] Memory failure: 0x150ad0: recovery action for clean LRU page: Recovered [ 173.942732][ T8583] Injecting memory failure for pfn 0x141ff0 at process virtual address 0x200b0000 [ 173.942950][ T8583] Memory failure: 0x141ff0: recovery action for clean LRU page: Recovered [ 173.942963][ T8583] Injecting memory failure for pfn 0x113cc0 at process virtual address 0x200c0000 [ 173.943071][ T8583] Memory failure: 0x113cc0: recovery action for clean LRU page: Recovered [ 173.943106][ T8583] Injecting memory failure for pfn 0x1580f0 at process virtual address 0x200d0000 [ 173.943452][ T8583] Memory failure: 0x1580f0: recovery action for clean LRU page: Recovered [ 173.943532][ T8583] Injecting memory failure for pfn 0x147890 at process virtual address 0x200e0000 [ 173.944340][ T8583] Memory failure: 0x147890: recovery action for clean LRU page: Recovered [ 173.944410][ T8583] Injecting memory failure for pfn 0x144fe0 at process virtual address 0x200f0000 [ 173.945391][ T8583] Memory failure: 0x144fe0: recovery action for clean LRU page: Recovered [ 173.945429][ T8583] Injecting memory failure for pfn 0x1504e0 at process virtual address 0x20100000 [ 173.946321][ T8583] Memory failure: 0x1504e0: recovery action for clean LRU page: Recovered [ 173.946392][ T8583] Injecting memory failure for pfn 0x1504f0 at process virtual address 0x20110000 [ 173.947235][ T8583] Memory failure: 0x1504f0: recovery action for clean LRU page: Recovered [ 173.947303][ T8583] Injecting memory failure for pfn 0x1504a0 at process virtual address 0x20120000 [ 173.948235][ T8583] Memory failure: 0x1504a0: recovery action for clean LRU page: Recovered [ 173.948253][ T8583] Injecting memory failure for pfn 0x1504b0 at process virtual address 0x20130000 [ 173.948354][ T8583] Memory failure: 0x1504b0: recovery action for clean LRU page: Recovered [ 173.948366][ T8583] Injecting memory failure for pfn 0x14fc80 at process virtual address 0x20140000 [ 173.948997][ T8583] Memory failure: 0x14fc80: recovery action for clean LRU page: Recovered [ 173.949067][ T8583] Injecting memory failure for pfn 0x14fc90 at process virtual address 0x20150000 [ 173.949774][ T8583] Memory failure: 0x14fc90: recovery action for clean LRU page: Recovered [ 173.949843][ T8583] Injecting memory failure for pfn 0x14fa80 at process virtual address 0x20160000 [ 173.950517][ T8583] Memory failure: 0x14fa80: recovery action for clean LRU page: Recovered [ 173.950590][ T8583] Injecting memory failure for pfn 0x14fa90 at process virtual address 0x20170000 [ 173.951289][ T8583] Memory failure: 0x14fa90: recovery action for clean LRU page: Recovered [ 173.951356][ T8583] Injecting memory failure for pfn 0x14f880 at process virtual address 0x20180000 [ 173.952134][ T8583] Memory failure: 0x14f880: recovery action for clean LRU page: Recovered [ 173.952202][ T8583] Injecting memory failure for pfn 0x14f890 at process virtual address 0x20190000 [ 173.952451][ T8583] Memory failure: 0x14f890: Failed to invalidate [ 173.952484][ T8583] Memory failure: 0x14f890: dirty LRU page still referenced by 1 users [ 173.952526][ T8583] Memory failure: 0x14f890: recovery action for dirty LRU page: Failed [ 174.001275][ T1054] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.021692][ T1054] usb 1-1: device descriptor read/8, error -71 [ 174.032759][ T8579] pim6reg: entered allmulticast mode [ 174.076986][ T8579] pim6reg: left allmulticast mode [ 174.088917][ T8588] FAULT_INJECTION: forcing a failure. [ 174.088917][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 174.088939][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.2.1035 Tainted: G L syzkaller #0 PREEMPT [ 174.088950][ T8588] Tainted: [L]=SOFTLOCKUP [ 174.088953][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 174.088958][ T8588] Call trace: [ 174.088961][ T8588] show_stack+0x2c/0x3c (C) [ 174.088979][ T8588] __dump_stack+0x30/0x40 [ 174.088991][ T8588] dump_stack_lvl+0xd8/0x12c [ 174.089001][ T8588] dump_stack+0x1c/0x28 [ 174.089010][ T8588] should_fail_ex+0x41c/0x590 [ 174.089020][ T8588] should_failslab+0xc4/0x120 [ 174.089029][ T8588] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 174.089039][ T8588] __alloc_skb+0x1f0/0x610 [ 174.089050][ T8588] sctp_ulpevent_new+0x34/0xb0 [ 174.089059][ T8588] sctp_ulpevent_notify_peer_addr_change+0x170/0x488 [ 174.089068][ T8588] sctp_assoc_control_transport+0x340/0x80c [ 174.089078][ T8588] sctp_do_8_2_transport_strike+0x2dc/0x7c0 [ 174.089087][ T8588] sctp_do_sm+0x670/0x4678 [ 174.089095][ T8588] sctp_primitive_REQUESTHEARTBEAT+0x98/0xcc [ 174.089104][ T8588] sctp_apply_peer_addr_params+0xe0/0x1450 [ 174.089111][ T8588] sctp_setsockopt_peer_addr_params+0x36c/0x540 [ 174.089121][ T8588] sctp_setsockopt+0x3c4/0xf48 [ 174.089130][ T8588] sock_common_setsockopt+0xb0/0xcc [ 174.089140][ T8588] do_sock_setsockopt+0x1f0/0x330 [ 174.089147][ T8588] __sys_setsockopt+0x104/0x170 [ 174.089153][ T8588] __arm64_sys_setsockopt+0xc0/0xdc [ 174.089160][ T8588] invoke_syscall+0x98/0x244 [ 174.089170][ T8588] el0_svc_common+0xec/0x23c [ 174.089179][ T8588] do_el0_svc+0x4c/0x5c [ 174.089189][ T8588] el0_svc+0x64/0x260 [ 174.089196][ T8588] el0t_64_sync_handler+0x48/0x148 [ 174.089204][ T8588] el0t_64_sync+0x198/0x19c [ 174.168361][ T8593] binder: 8592:8593 tried to acquire reference to desc 0, got 1 instead [ 174.261462][ T1054] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.394417][ T1054] usb 1-1: device descriptor read/8, error -71 [ 174.495246][ T8612] loop2: detected capacity change from 0 to 128 [ 174.503477][ T1054] usb usb1-port1: unable to enumerate USB device [ 174.514226][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 174.572595][ T8618] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.500538][ T8633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1052'. [ 175.562211][ T8633] loop0: detected capacity change from 0 to 1024 [ 175.564286][ T8633] EXT4-fs: Mount option(s) incompatible with ext2 [ 175.916864][ T8639] FAULT_INJECTION: forcing a failure. [ 175.916864][ T8639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.916895][ T8639] CPU: 1 UID: 0 PID: 8639 Comm: syz.0.1054 Tainted: G L syzkaller #0 PREEMPT [ 175.916910][ T8639] Tainted: [L]=SOFTLOCKUP [ 175.916914][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 175.916921][ T8639] Call trace: [ 175.916924][ T8639] show_stack+0x2c/0x3c (C) [ 175.916942][ T8639] __dump_stack+0x30/0x40 [ 175.916953][ T8639] dump_stack_lvl+0xd8/0x12c [ 175.916963][ T8639] dump_stack+0x1c/0x28 [ 175.916972][ T8639] should_fail_ex+0x41c/0x590 [ 175.916982][ T8639] should_fail+0x14/0x24 [ 175.916989][ T8639] should_fail_usercopy+0x20/0x30 [ 175.916998][ T8639] _inline_copy_from_user+0x3c/0x174 [ 175.917007][ T8639] copy_msghdr_from_user+0xb8/0x194 [ 175.917014][ T8639] ___sys_recvmsg+0x11c/0x1f4 [ 175.917021][ T8639] do_recvmmsg+0x294/0x7e8 [ 175.917028][ T8639] __sys_recvmmsg+0x1e0/0x270 [ 175.917034][ T8639] __arm64_sys_recvmmsg+0xdc/0x104 [ 175.917042][ T8639] invoke_syscall+0x98/0x244 [ 175.917051][ T8639] el0_svc_common+0xec/0x23c [ 175.917061][ T8639] do_el0_svc+0x4c/0x5c [ 175.917070][ T8639] el0_svc+0x64/0x260 [ 175.917078][ T8639] el0t_64_sync_handler+0x48/0x148 [ 175.917085][ T8639] el0t_64_sync+0x198/0x19c [ 175.946657][ T8641] loop3: detected capacity change from 0 to 512 [ 175.954728][ T8641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.961772][ T8641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 175.963290][ T8641] System zones: 1-12 [ 175.969486][ T8641] EXT4-fs (loop3): 1 truncate cleaned up [ 175.973649][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.026543][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.070812][ T8650] loop5: detected capacity change from 0 to 256 [ 176.085822][ T8647] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1057'. [ 176.085860][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 176.114806][ T8650] FAT-fs (loop5): Directory bread(block 64) failed [ 176.115716][ T8650] FAT-fs (loop5): Directory bread(block 65) failed [ 176.115993][ T8650] FAT-fs (loop5): Directory bread(block 66) failed [ 176.116013][ T8650] FAT-fs (loop5): Directory bread(block 67) failed [ 176.116054][ T8650] FAT-fs (loop5): Directory bread(block 68) failed [ 176.116067][ T8650] FAT-fs (loop5): Directory bread(block 69) failed [ 176.116091][ T8650] FAT-fs (loop5): Directory bread(block 70) failed [ 176.116102][ T8650] FAT-fs (loop5): Directory bread(block 71) failed [ 176.116124][ T8650] FAT-fs (loop5): Directory bread(block 72) failed [ 176.116135][ T8650] FAT-fs (loop5): Directory bread(block 73) failed [ 176.223007][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.223191][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.223273][ T8664] FAULT_INJECTION: forcing a failure. [ 177.223273][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 177.226222][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.3.1064 Tainted: G L syzkaller #0 PREEMPT [ 177.226253][ T8664] Tainted: [L]=SOFTLOCKUP [ 177.226258][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 177.226264][ T8664] Call trace: [ 177.226268][ T8664] show_stack+0x2c/0x3c (C) [ 177.226292][ T8664] __dump_stack+0x30/0x40 [ 177.226303][ T8664] dump_stack_lvl+0xd8/0x12c [ 177.226313][ T8664] dump_stack+0x1c/0x28 [ 177.226323][ T8664] should_fail_ex+0x41c/0x590 [ 177.226333][ T8664] should_failslab+0xc4/0x120 [ 177.226342][ T8664] __kmalloc_cache_noprof+0x8c/0x624 [ 177.226351][ T8664] nbd_alloc_and_init_config+0x88/0x214 [ 177.226361][ T8664] nbd_genl_connect+0x86c/0x15d4 [ 177.226369][ T8664] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 177.226378][ T8664] genl_rcv_msg+0x43c/0x620 [ 177.226385][ T8664] netlink_rcv_skb+0x238/0x414 [ 177.226394][ T8664] genl_rcv+0x38/0x50 [ 177.226401][ T8664] netlink_unicast+0x600/0x7f8 [ 177.226410][ T8664] netlink_sendmsg+0x648/0x948 [ 177.226419][ T8664] __sock_sendmsg+0xc8/0x138 [ 177.226430][ T8664] ____sys_sendmsg+0x3d0/0x6c8 [ 177.226437][ T8664] ___sys_sendmsg+0x198/0x224 [ 177.226443][ T8664] __sys_sendmsg+0x160/0x214 [ 177.226450][ T8664] __arm64_sys_sendmsg+0x80/0x94 [ 177.226457][ T8664] invoke_syscall+0x98/0x244 [ 177.226467][ T8664] el0_svc_common+0xec/0x23c [ 177.226481][ T8664] do_el0_svc+0x4c/0x5c [ 177.226490][ T8664] el0_svc+0x64/0x260 [ 177.226499][ T8664] el0t_64_sync_handler+0x48/0x148 [ 177.226506][ T8664] el0t_64_sync+0x198/0x19c [ 177.226539][ T8664] nbd: couldn't allocate config [ 177.798052][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 178.003447][ T8674] FAULT_INJECTION: forcing a failure. [ 178.003447][ T8674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.006972][ T8674] CPU: 0 UID: 0 PID: 8674 Comm: syz.5.1068 Tainted: G L syzkaller #0 PREEMPT [ 178.006987][ T8674] Tainted: [L]=SOFTLOCKUP [ 178.006990][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 178.006995][ T8674] Call trace: [ 178.006998][ T8674] show_stack+0x2c/0x3c (C) [ 178.007017][ T8674] __dump_stack+0x30/0x40 [ 178.007027][ T8674] dump_stack_lvl+0xd8/0x12c [ 178.007037][ T8674] dump_stack+0x1c/0x28 [ 178.007046][ T8674] should_fail_ex+0x41c/0x590 [ 178.007056][ T8674] should_fail+0x14/0x24 [ 178.007064][ T8674] should_fail_usercopy+0x20/0x30 [ 178.007073][ T8674] simple_read_from_buffer+0xc4/0x238 [ 178.007082][ T8674] proc_fail_nth_read+0x1a8/0x248 [ 178.007090][ T8674] vfs_read+0x230/0x8c8 [ 178.007099][ T8674] ksys_read+0x12c/0x228 [ 178.007109][ T8674] __arm64_sys_read+0x7c/0x90 [ 178.007118][ T8674] invoke_syscall+0x98/0x244 [ 178.007128][ T8674] el0_svc_common+0xec/0x23c [ 178.007137][ T8674] do_el0_svc+0x4c/0x5c [ 178.007147][ T8674] el0_svc+0x64/0x260 [ 178.007155][ T8674] el0t_64_sync_handler+0x48/0x148 [ 178.007162][ T8674] el0t_64_sync+0x198/0x19c [ 178.105606][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1070'. [ 178.105644][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1070'. [ 178.105655][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1070'. [ 178.136807][ T30] kauditd_printk_skb: 41295 callbacks suppressed [ 178.136837][ T30] audit: type=1400 audit(179.112:272040): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.234 dest=40764 netif=enp0s0 [ 178.143390][ T30] audit: type=1400 audit(179.122:272041): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6384 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 178.143466][ T30] audit: type=1400 audit(179.122:272042): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6384 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 178.143550][ T30] audit: type=1400 audit(179.122:272043): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6384 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 178.143602][ T30] audit: type=1400 audit(179.122:272044): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6384 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 178.143656][ T30] audit: type=1400 audit(179.122:272045): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=6384 comm="syz-executor" name="123" dev="tmpfs" ino=662 [ 178.143746][ T30] audit: type=1400 audit(179.122:272046): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6384 comm="syz-executor" path="/123" dev="tmpfs" ino=662 [ 178.143822][ T30] audit: type=1400 audit(179.122:272047): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6384 comm="syz-executor" path="/123" dev="tmpfs" ino=662 [ 178.143922][ T30] audit: type=1400 audit(179.122:272048): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6384 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 178.143967][ T30] audit: type=1400 audit(179.122:272049): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6384 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 178.409692][ T8698] FAULT_INJECTION: forcing a failure. [ 178.409692][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 178.409729][ T8698] CPU: 1 UID: 0 PID: 8698 Comm: syz.5.1077 Tainted: G L syzkaller #0 PREEMPT [ 178.409745][ T8698] Tainted: [L]=SOFTLOCKUP [ 178.409750][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 178.409755][ T8698] Call trace: [ 178.409759][ T8698] show_stack+0x2c/0x3c (C) [ 178.409777][ T8698] __dump_stack+0x30/0x40 [ 178.409788][ T8698] dump_stack_lvl+0xd8/0x12c [ 178.409798][ T8698] dump_stack+0x1c/0x28 [ 178.409807][ T8698] should_fail_ex+0x41c/0x590 [ 178.409817][ T8698] should_failslab+0xc4/0x120 [ 178.409825][ T8698] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 178.409834][ T8698] __alloc_skb+0x1f0/0x610 [ 178.409845][ T8698] netlink_ack+0x11c/0x890 [ 178.409855][ T8698] netlink_rcv_skb+0x21c/0x414 [ 178.409865][ T8698] nfnetlink_rcv+0x218/0x16ec [ 178.409873][ T8698] netlink_unicast+0x600/0x7f8 [ 178.409882][ T8698] netlink_sendmsg+0x648/0x948 [ 178.409892][ T8698] __sock_sendmsg+0xc8/0x138 [ 178.409901][ T8698] ____sys_sendmsg+0x3d0/0x6c8 [ 178.409908][ T8698] ___sys_sendmsg+0x198/0x224 [ 178.409917][ T8698] __sys_sendmsg+0x160/0x214 [ 178.409924][ T8698] __arm64_sys_sendmsg+0x80/0x94 [ 178.409931][ T8698] invoke_syscall+0x98/0x244 [ 178.409941][ T8698] el0_svc_common+0xec/0x23c [ 178.409950][ T8698] do_el0_svc+0x4c/0x5c [ 178.409959][ T8698] el0_svc+0x64/0x260 [ 178.409967][ T8698] el0t_64_sync_handler+0x48/0x148 [ 178.409975][ T8698] el0t_64_sync+0x198/0x19c [ 178.684521][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 178.686150][ T8703] loop2: detected capacity change from 0 to 256 [ 178.703894][ T4722] block nbd2: Receive control failed (result -1) [ 178.710889][ T8704] syzkaller0: entered promiscuous mode [ 178.710923][ T8704] syzkaller0: entered allmulticast mode [ 178.716458][ T8703] FAT-fs (loop2): Directory bread(block 64) failed [ 178.716498][ T8703] FAT-fs (loop2): Directory bread(block 65) failed [ 178.716526][ T8703] FAT-fs (loop2): Directory bread(block 66) failed [ 178.716539][ T8703] FAT-fs (loop2): Directory bread(block 67) failed [ 178.716561][ T8703] FAT-fs (loop2): Directory bread(block 68) failed [ 178.716572][ T8703] FAT-fs (loop2): Directory bread(block 69) failed [ 178.716594][ T8703] FAT-fs (loop2): Directory bread(block 70) failed [ 178.716604][ T8703] FAT-fs (loop2): Directory bread(block 71) failed [ 178.716626][ T8703] FAT-fs (loop2): Directory bread(block 72) failed [ 178.716636][ T8703] FAT-fs (loop2): Directory bread(block 73) failed [ 178.815294][ T8704] loop4: detected capacity change from 0 to 1024 [ 178.833629][ T4722] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 179.758731][ T8704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.764525][ T8704] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1080: lblock 3 mapped to illegal pblock 3 (length 3) [ 179.768223][ T8704] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 179.770965][ T8704] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.770965][ T8704] [ 179.775221][ T8704] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.1080: lblock 8 mapped to illegal pblock 8 (length 8) [ 179.777934][ T8704] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 179.781150][ T8704] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.781150][ T8704] [ 179.821398][ T8704] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1080: lblock 0 mapped to illegal pblock 0 (length 3) [ 179.854959][ T8704] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 179.854987][ T8704] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.854987][ T8704] [ 180.030486][ T4722] Bluetooth: hci1: command 0x0419 tx timeout [ 180.684971][ T8723] siw: device registration error -23 [ 181.044942][ T4985] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:9: lblock 4 mapped to illegal pblock 4 (length 2) [ 181.048271][ T4985] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 181.048305][ T4985] EXT4-fs (loop4): This should not happen!! Data will be lost [ 181.048305][ T4985] [ 181.062054][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 181.064995][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 181.070424][ T4710] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 181.086142][ T8725] fuse: Bad value for 'fd' [ 181.160858][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 181.273505][ T8737] loop2: detected capacity change from 0 to 256 [ 181.281411][ T8739] loop5: detected capacity change from 0 to 128 [ 181.295601][ T8739] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.320111][ T4306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 181.382798][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.382968][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.435311][ T8747] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1090'. [ 181.468360][ T4306] usb 1-1: device descriptor read/64, error -71 [ 181.536646][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 181.582107][ T4722] block nbd3: Receive control failed (result -1) [ 181.712894][ T4306] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.840143][ T4306] usb 1-1: device descriptor read/64, error -71 [ 181.950760][ T4306] usb usb1-port1: attempt power cycle [ 182.091390][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 182.134963][ T6384] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.190341][ T8763] [ 182.190781][ T8763] ====================================================== [ 182.191993][ T8763] WARNING: possible circular locking dependency detected [ 182.193137][ T8763] syzkaller #0 Tainted: G L [ 182.194133][ T8763] ------------------------------------------------------ [ 182.195384][ T8763] syz.5.1095/8763 is trying to acquire lock: [ 182.196453][ T8763] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x290/0x370 [ 182.198369][ T8763] [ 182.198369][ T8763] but task is already holding lock: [ 182.199569][ T8763] ffff0000c1919180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x40/0x398 [ 182.201170][ T8763] [ 182.201170][ T8763] which lock already depends on the new lock. [ 182.201170][ T8763] [ 182.202896][ T8763] [ 182.202896][ T8763] the existing dependency chain (in reverse order) is: [ 182.204345][ T8763] [ 182.204345][ T8763] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 182.205738][ T8763] down_write+0x50/0xc0 [ 182.206562][ T8763] kernfs_add_one+0x40/0x398 [ 182.207460][ T8763] kernfs_create_dir_ns+0xe0/0x138 [ 182.208447][ T8763] sysfs_create_dir_ns+0x120/0x1f4 [ 182.209394][ T8763] kobject_add_internal+0x290/0x6f0 [ 182.210432][ T8763] kobject_add_varg+0x9c/0xe8 [ 182.211370][ T8763] kobject_add+0x110/0x1c8 [ 182.212204][ T8763] device_add+0x394/0x9f0 [ 182.213030][ T8763] device_register+0x28/0x38 [ 182.213927][ T8763] register_cpu+0x270/0x524 [ 182.214767][ T8763] arch_register_cpu+0x160/0x224 [ 182.215754][ T8763] acpi_processor_add+0x8f0/0x13f0 [ 182.216816][ T8763] acpi_bus_attach+0x464/0x7e0 [ 182.217765][ T8763] acpi_dev_for_one_check+0xa0/0xb4 [ 182.218743][ T8763] device_for_each_child+0xf4/0x184 [ 182.219747][ T8763] acpi_dev_for_each_child+0x98/0xe4 [ 182.220754][ T8763] acpi_bus_attach+0x20c/0x7e0 [ 182.221638][ T8763] acpi_dev_for_one_check+0xa0/0xb4 [ 182.222747][ T8763] device_for_each_child+0xf4/0x184 [ 182.223734][ T8763] acpi_dev_for_each_child+0x98/0xe4 [ 182.224768][ T8763] acpi_bus_attach+0x20c/0x7e0 [ 182.225705][ T8763] acpi_bus_scan+0x104/0x310 [ 182.226709][ T8763] acpi_scan_init+0x168/0x3cc [ 182.227605][ T8763] acpi_init+0x15c/0x1f4 [ 182.228346][ T8763] do_one_initcall+0x274/0xc38 [ 182.229248][ T8763] do_initcall_level+0x12c/0x1c4 [ 182.230152][ T8763] do_initcalls+0x70/0xd0 [ 182.230944][ T8763] do_basic_setup+0x7c/0x90 [ 182.231758][ T8763] kernel_init_freeable+0x268/0x3a8 [ 182.232723][ T8763] kernel_init+0x24/0x1dc [ 182.233617][ T8763] ret_from_fork+0x10/0x20 [ 182.234513][ T8763] [ 182.234513][ T8763] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 182.235760][ T8763] cpus_read_lock+0x58/0x25c [ 182.236550][ T8763] static_key_slow_inc+0x1c/0x40 [ 182.237453][ T8763] udpv6_encap_enable+0x1c/0x28 [ 182.238392][ T8763] setup_udp_tunnel_sock+0x2a8/0x4dc [ 182.239381][ T8763] l2tp_tunnel_register+0xa80/0x1288 [ 182.240301][ T8763] pppol2tp_connect+0x6d8/0x13a0 [ 182.241188][ T8763] __sys_connect_file+0x13c/0x184 [ 182.242160][ T8763] __sys_connect+0x114/0x194 [ 182.243029][ T8763] __arm64_sys_connect+0x7c/0x94 [ 182.243942][ T8763] invoke_syscall+0x98/0x244 [ 182.244859][ T8763] el0_svc_common+0xec/0x23c [ 182.245769][ T8763] do_el0_svc+0x4c/0x5c [ 182.246632][ T8763] el0_svc+0x64/0x260 [ 182.247444][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.248429][ T8763] el0t_64_sync+0x198/0x19c [ 182.249272][ T8763] [ 182.249272][ T8763] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 182.250598][ T8763] lock_sock_nested+0x58/0x110 [ 182.251483][ T8763] inet_shutdown+0x74/0x354 [ 182.252284][ T8763] kernel_sock_shutdown+0x6c/0x80 [ 182.253138][ T8763] nbd_mark_nsock_dead+0x280/0x4f4 [ 182.254027][ T8763] recv_work+0x1d58/0x1e74 [ 182.254784][ T8763] process_scheduled_works+0x788/0x10b8 [ 182.255747][ T8763] worker_thread+0x798/0xbd0 [ 182.256513][ T8763] kthread+0x304/0x3d4 [ 182.257218][ T8763] ret_from_fork+0x10/0x20 [ 182.258015][ T8763] [ 182.258015][ T8763] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 182.259185][ T8763] __mutex_lock+0x164/0xed0 [ 182.259988][ T8763] mutex_lock_nested+0x24/0x30 [ 182.260807][ T8763] nbd_queue_rq+0x1f4/0xbd8 [ 182.261637][ T8763] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 182.262542][ T8763] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 182.263585][ T8763] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 182.264654][ T8763] blk_mq_run_hw_queue+0x300/0x4dc [ 182.265609][ T8763] blk_mq_dispatch_list+0xa28/0xb2c [ 182.266546][ T8763] blk_mq_flush_plug_list+0x3ac/0x494 [ 182.267496][ T8763] __blk_flush_plug+0x364/0x440 [ 182.268368][ T8763] __submit_bio+0x3a0/0x480 [ 182.269168][ T8763] submit_bio_noacct_nocheck+0x288/0xaac [ 182.270154][ T8763] submit_bio_noacct+0xd7c/0x17f0 [ 182.270982][ T8763] submit_bio+0x38c/0x528 [ 182.271753][ T8763] submit_bh_wbc+0x4c8/0x5ac [ 182.272582][ T8763] block_read_full_folio+0x47c/0x754 [ 182.273505][ T8763] blkdev_read_folio+0x28/0x38 [ 182.274308][ T8763] filemap_read_folio+0xf0/0x2fc [ 182.275186][ T8763] do_read_cache_folio+0x35c/0x5a8 [ 182.276053][ T8763] read_cache_folio+0x68/0x88 [ 182.276843][ T8763] read_part_sector+0xcc/0x708 [ 182.277648][ T8763] adfspart_check_ICS+0xa4/0x720 [ 182.278569][ T8763] bdev_disk_changed+0x6c4/0x11ec [ 182.279448][ T8763] blkdev_get_whole+0x15c/0x240 [ 182.280293][ T8763] bdev_open+0x2b4/0x880 [ 182.281011][ T8763] blkdev_open+0x2d4/0x408 [ 182.281784][ T8763] do_dentry_open+0x5c4/0xfb8 [ 182.282671][ T8763] vfs_open+0x44/0x2dc [ 182.283329][ T8763] path_openat+0x22d4/0x2b88 [ 182.284075][ T8763] do_file_open+0x1c8/0x2e8 [ 182.284843][ T8763] do_sys_openat2+0x114/0x1e8 [ 182.285703][ T8763] do_sys_open+0xac/0xdc [ 182.286449][ T8763] __arm64_sys_openat+0xa0/0xbc [ 182.287305][ T8763] invoke_syscall+0x98/0x244 [ 182.288234][ T8763] el0_svc_common+0xec/0x23c [ 182.288981][ T8763] do_el0_svc+0x4c/0x5c [ 182.289726][ T8763] el0_svc+0x64/0x260 [ 182.290451][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.291357][ T8763] el0t_64_sync+0x198/0x19c [ 182.292159][ T8763] [ 182.292159][ T8763] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 182.293353][ T8763] __mutex_lock+0x164/0xed0 [ 182.294141][ T8763] mutex_lock_nested+0x24/0x30 [ 182.294999][ T8763] nbd_queue_rq+0xb0/0xbd8 [ 182.295758][ T8763] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 182.296784][ T8763] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 182.298015][ T8763] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 182.299114][ T8763] blk_mq_run_hw_queue+0x300/0x4dc [ 182.300041][ T8763] blk_mq_dispatch_list+0xa28/0xb2c [ 182.300997][ T8763] blk_mq_flush_plug_list+0x3ac/0x494 [ 182.302021][ T8763] __blk_flush_plug+0x364/0x440 [ 182.302917][ T8763] __submit_bio+0x3a0/0x480 [ 182.303672][ T8763] submit_bio_noacct_nocheck+0x288/0xaac [ 182.304591][ T8763] submit_bio_noacct+0xd7c/0x17f0 [ 182.305445][ T8763] submit_bio+0x38c/0x528 [ 182.306232][ T8763] submit_bh_wbc+0x4c8/0x5ac [ 182.307053][ T8763] block_read_full_folio+0x47c/0x754 [ 182.307970][ T8763] blkdev_read_folio+0x28/0x38 [ 182.308715][ T8763] filemap_read_folio+0xf0/0x2fc [ 182.309583][ T8763] do_read_cache_folio+0x35c/0x5a8 [ 182.310473][ T8763] read_cache_folio+0x68/0x88 [ 182.311288][ T8763] read_part_sector+0xcc/0x708 [ 182.312073][ T8763] adfspart_check_ICS+0xa4/0x720 [ 182.312856][ T8763] bdev_disk_changed+0x6c4/0x11ec [ 182.313722][ T8763] blkdev_get_whole+0x15c/0x240 [ 182.314630][ T8763] bdev_open+0x2b4/0x880 [ 182.315446][ T8763] blkdev_open+0x2d4/0x408 [ 182.316289][ T8763] do_dentry_open+0x5c4/0xfb8 [ 182.317093][ T8763] vfs_open+0x44/0x2dc [ 182.317853][ T8763] path_openat+0x22d4/0x2b88 [ 182.318676][ T8763] do_file_open+0x1c8/0x2e8 [ 182.319424][ T8763] do_sys_openat2+0x114/0x1e8 [ 182.320237][ T8763] do_sys_open+0xac/0xdc [ 182.320997][ T8763] __arm64_sys_openat+0xa0/0xbc [ 182.321829][ T8763] invoke_syscall+0x98/0x244 [ 182.322664][ T8763] el0_svc_common+0xec/0x23c [ 182.323425][ T8763] do_el0_svc+0x4c/0x5c [ 182.324096][ T8763] el0_svc+0x64/0x260 [ 182.324804][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.325719][ T8763] el0t_64_sync+0x198/0x19c [ 182.326458][ T8763] [ 182.326458][ T8763] -> #4 (set->srcu){.+.+}-{0:0}: [ 182.327563][ T8763] __synchronize_srcu+0xc8/0x268 [ 182.328389][ T8763] synchronize_srcu+0x41c/0x5d4 [ 182.329280][ T8763] blk_mq_wait_quiesce_done+0x88/0xac [ 182.330203][ T8763] blk_mq_quiesce_queue+0x70/0x8c [ 182.331039][ T8763] elevator_switch+0x128/0x38c [ 182.331846][ T8763] elevator_change+0x204/0x35c [ 182.332661][ T8763] elevator_set_default+0x190/0x2b0 [ 182.333526][ T8763] blk_register_queue+0x2fc/0x3d4 [ 182.334407][ T8763] __add_disk+0x558/0xb44 [ 182.335121][ T8763] add_disk_fwnode+0xd4/0x404 [ 182.335974][ T8763] device_add_disk+0x38/0x4c [ 182.336785][ T8763] nbd_dev_add+0x598/0x880 [ 182.337576][ T8763] nbd_init+0x15c/0x174 [ 182.338276][ T8763] do_one_initcall+0x274/0xc38 [ 182.339089][ T8763] do_initcall_level+0x12c/0x1c4 [ 182.340032][ T8763] do_initcalls+0x70/0xd0 [ 182.340828][ T8763] do_basic_setup+0x7c/0x90 [ 182.341679][ T8763] kernel_init_freeable+0x268/0x3a8 [ 182.342612][ T8763] kernel_init+0x24/0x1dc [ 182.343366][ T8763] ret_from_fork+0x10/0x20 [ 182.344104][ T8763] [ 182.344104][ T8763] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 182.345350][ T8763] __mutex_lock+0x164/0xed0 [ 182.346158][ T8763] mutex_lock_nested+0x24/0x30 [ 182.346965][ T8763] elevator_change+0x188/0x35c [ 182.347784][ T8763] elevator_set_none+0xa8/0x13c [ 182.348618][ T8763] blk_mq_update_nr_hw_queues+0x4c4/0x11e0 [ 182.349607][ T8763] nbd_start_device+0x15c/0xa44 [ 182.350523][ T8763] nbd_genl_connect+0xffc/0x15d4 [ 182.351418][ T8763] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 182.352401][ T8763] genl_rcv_msg+0x43c/0x620 [ 182.353178][ T8763] netlink_rcv_skb+0x238/0x414 [ 182.354035][ T8763] genl_rcv+0x38/0x50 [ 182.354748][ T8763] netlink_unicast+0x600/0x7f8 [ 182.355582][ T8763] netlink_sendmsg+0x648/0x948 [ 182.356397][ T8763] __sock_sendmsg+0xc8/0x138 [ 182.357239][ T8763] ____sys_sendmsg+0x3d0/0x6c8 [ 182.358114][ T8763] ___sys_sendmsg+0x198/0x224 [ 182.358970][ T8763] __sys_sendmsg+0x160/0x214 [ 182.359793][ T8763] __arm64_sys_sendmsg+0x80/0x94 [ 182.360604][ T8763] invoke_syscall+0x98/0x244 [ 182.361424][ T8763] el0_svc_common+0xec/0x23c [ 182.362214][ T8763] do_el0_svc+0x4c/0x5c [ 182.362964][ T8763] el0_svc+0x64/0x260 [ 182.363587][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.364440][ T8763] el0t_64_sync+0x198/0x19c [ 182.365211][ T8763] [ 182.365211][ T8763] -> #2 (&q->q_usage_counter(io)#33){++++}-{0:0}: [ 182.366531][ T8763] blk_alloc_queue+0x488/0x590 [ 182.367290][ T8763] blk_mq_alloc_queue+0x148/0x284 [ 182.368088][ T8763] __blk_mq_alloc_disk+0x38/0x10c [ 182.368956][ T8763] nbd_dev_add+0x3d0/0x880 [ 182.369814][ T8763] nbd_init+0x15c/0x174 [ 182.370602][ T8763] do_one_initcall+0x274/0xc38 [ 182.371423][ T8763] do_initcall_level+0x12c/0x1c4 [ 182.372270][ T8763] do_initcalls+0x70/0xd0 [ 182.372999][ T8763] do_basic_setup+0x7c/0x90 [ 182.373773][ T8763] kernel_init_freeable+0x268/0x3a8 [ 182.374697][ T8763] kernel_init+0x24/0x1dc [ 182.375475][ T8763] ret_from_fork+0x10/0x20 [ 182.376205][ T8763] [ 182.376205][ T8763] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 182.377321][ T8763] fs_reclaim_acquire+0x90/0x110 [ 182.378153][ T8763] kmem_cache_alloc_noprof+0x58/0x610 [ 182.379065][ T8763] __kernfs_iattrs+0xd8/0x2d8 [ 182.379919][ T8763] __kernfs_setattr+0x48/0x2ac [ 182.380727][ T8763] kernfs_iop_setattr+0xc4/0x11c [ 182.381530][ T8763] notify_change+0x928/0xb7c [ 182.382285][ T8763] do_truncate+0x1a8/0x22c [ 182.383134][ T8763] path_openat+0x245c/0x2b88 [ 182.383950][ T8763] do_file_open+0x1c8/0x2e8 [ 182.384783][ T8763] do_sys_openat2+0x114/0x1e8 [ 182.385650][ T8763] do_sys_open+0xac/0xdc [ 182.386470][ T8763] __arm64_sys_openat+0xa0/0xbc [ 182.387286][ T8763] invoke_syscall+0x98/0x244 [ 182.388034][ T8763] el0_svc_common+0xec/0x23c [ 182.388822][ T8763] do_el0_svc+0x4c/0x5c [ 182.389574][ T8763] el0_svc+0x64/0x260 [ 182.390296][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.391107][ T8763] el0t_64_sync+0x198/0x19c [ 182.391900][ T8763] [ 182.391900][ T8763] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 182.393175][ T8763] __lock_acquire+0x17c0/0x2ebc [ 182.393993][ T8763] lock_acquire+0x140/0x364 [ 182.394790][ T8763] down_write+0x50/0xc0 [ 182.395537][ T8763] kernfs_link_sibling+0x290/0x370 [ 182.396431][ T8763] kernfs_add_one+0x1d4/0x398 [ 182.397198][ T8763] kernfs_create_dir_ns+0xe0/0x138 [ 182.398133][ T8763] sysfs_create_dir_ns+0x120/0x1f4 [ 182.398989][ T8763] kobject_add_internal+0x290/0x6f0 [ 182.399920][ T8763] kobject_add_varg+0x9c/0xe8 [ 182.400702][ T8763] kobject_add+0x110/0x1c8 [ 182.401459][ T8763] device_add+0x394/0x9f0 [ 182.402199][ T8763] __add_disk+0x3e8/0xb44 [ 182.402958][ T8763] add_disk_fwnode+0xd4/0x404 [ 182.403739][ T8763] device_add_disk+0x38/0x4c [ 182.404494][ T8763] loop_add+0x65c/0x8e4 [ 182.405191][ T8763] loop_probe+0x7c/0x100 [ 182.405862][ T8763] blk_probe_dev+0x12c/0x158 [ 182.406618][ T8763] blk_request_module+0x24/0xc0 [ 182.407381][ T8763] blkdev_get_no_open+0x4c/0xf8 [ 182.408284][ T8763] bdev_file_open_by_dev+0x80/0x1d8 [ 182.409180][ T8763] swsusp_check+0x68/0x418 [ 182.409958][ T8763] software_resume+0x50/0x418 [ 182.410797][ T8763] resume_store+0x280/0x3e4 [ 182.411524][ T8763] kobj_attr_store+0x6c/0x90 [ 182.412286][ T8763] sysfs_kf_write+0xe0/0x108 [ 182.413126][ T8763] kernfs_fop_write_iter+0x260/0x3b8 [ 182.414034][ T8763] vfs_write+0x51c/0xa0c [ 182.414799][ T8763] ksys_write+0x12c/0x228 [ 182.415610][ T8763] __arm64_sys_write+0x7c/0x90 [ 182.416428][ T8763] invoke_syscall+0x98/0x244 [ 182.417197][ T8763] el0_svc_common+0xec/0x23c [ 182.417969][ T8763] do_el0_svc+0x4c/0x5c [ 182.418687][ T8763] el0_svc+0x64/0x260 [ 182.419358][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.420176][ T8763] el0t_64_sync+0x198/0x19c [ 182.420978][ T8763] [ 182.420978][ T8763] other info that might help us debug this: [ 182.420978][ T8763] [ 182.422465][ T8763] Chain exists of: [ 182.422465][ T8763] &root->kernfs_iattr_rwsem --> cpu_hotplug_lock --> &root->kernfs_rwsem [ 182.422465][ T8763] [ 182.424736][ T8763] Possible unsafe locking scenario: [ 182.424736][ T8763] [ 182.425855][ T8763] CPU0 CPU1 [ 182.426701][ T8763] ---- ---- [ 182.427524][ T8763] lock(&root->kernfs_rwsem); [ 182.428257][ T8763] lock(cpu_hotplug_lock); [ 182.429321][ T8763] lock(&root->kernfs_rwsem); [ 182.430428][ T8763] lock(&root->kernfs_iattr_rwsem); [ 182.431209][ T8763] [ 182.431209][ T8763] *** DEADLOCK *** [ 182.431209][ T8763] [ 182.432528][ T8763] 8 locks held by syz.5.1095/8763: [ 182.433330][ T8763] #0: ffff0000da13a2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 182.434683][ T8763] #1: ffff0000d43d8410 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 182.436110][ T8763] #2: ffff0000f3497480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 182.437528][ T8763] #3: ffff0000c1cf9f08 (kn->active#56){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 182.439094][ T8763] #4: ffff800088aa6c20 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x48/0x418 [ 182.440703][ T8763] #5: ffff800088f71640 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x3c/0x158 [ 182.442142][ T8763] #6: ffff0000db3983a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xc0/0x404 [ 182.443816][ T8763] #7: ffff0000c1919180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x40/0x398 [ 182.445416][ T8763] [ 182.445416][ T8763] stack backtrace: [ 182.446371][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.5.1095 Tainted: G L syzkaller #0 PREEMPT [ 182.448198][ T8763] Tainted: [L]=SOFTLOCKUP [ 182.448876][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 182.450493][ T8763] Call trace: [ 182.451009][ T8763] show_stack+0x2c/0x3c (C) [ 182.451699][ T8763] __dump_stack+0x30/0x40 [ 182.452432][ T8763] dump_stack_lvl+0xd8/0x12c [ 182.453120][ T8763] dump_stack+0x1c/0x28 [ 182.453772][ T8763] print_circular_bug+0x328/0x330 [ 182.454541][ T8763] check_noncircular+0x158/0x174 [ 182.455352][ T8763] __lock_acquire+0x17c0/0x2ebc [ 182.456167][ T8763] lock_acquire+0x140/0x364 [ 182.456946][ T8763] down_write+0x50/0xc0 [ 182.457663][ T8763] kernfs_link_sibling+0x290/0x370 [ 182.458509][ T8763] kernfs_add_one+0x1d4/0x398 [ 182.459242][ T8763] kernfs_create_dir_ns+0xe0/0x138 [ 182.460028][ T8763] sysfs_create_dir_ns+0x120/0x1f4 [ 182.460824][ T8763] kobject_add_internal+0x290/0x6f0 [ 182.461607][ T8763] kobject_add_varg+0x9c/0xe8 [ 182.462313][ T8763] kobject_add+0x110/0x1c8 [ 182.463035][ T8763] device_add+0x394/0x9f0 [ 182.463760][ T8763] __add_disk+0x3e8/0xb44 [ 182.464434][ T8763] add_disk_fwnode+0xd4/0x404 [ 182.465139][ T8763] device_add_disk+0x38/0x4c [ 182.465868][ T8763] loop_add+0x65c/0x8e4 [ 182.466481][ T8763] loop_probe+0x7c/0x100 [ 182.467157][ T8763] blk_probe_dev+0x12c/0x158 [ 182.467841][ T8763] blk_request_module+0x24/0xc0 [ 182.468589][ T8763] blkdev_get_no_open+0x4c/0xf8 [ 182.469320][ T8763] bdev_file_open_by_dev+0x80/0x1d8 [ 182.470172][ T8763] swsusp_check+0x68/0x418 [ 182.470874][ T8763] software_resume+0x50/0x418 [ 182.471617][ T8763] resume_store+0x280/0x3e4 [ 182.472280][ T8763] kobj_attr_store+0x6c/0x90 [ 182.472979][ T8763] sysfs_kf_write+0xe0/0x108 [ 182.473659][ T8763] kernfs_fop_write_iter+0x260/0x3b8 [ 182.474492][ T8763] vfs_write+0x51c/0xa0c [ 182.475160][ T8763] ksys_write+0x12c/0x228 [ 182.475838][ T8763] __arm64_sys_write+0x7c/0x90 [ 182.476536][ T8763] invoke_syscall+0x98/0x244 [ 182.477231][ T8763] el0_svc_common+0xec/0x23c [ 182.477908][ T8763] do_el0_svc+0x4c/0x5c [ 182.478582][ T8763] el0_svc+0x64/0x260 [ 182.479207][ T8763] el0t_64_sync_handler+0x48/0x148 [ 182.480052][ T8763] el0t_64_sync+0x198/0x19c [ 182.485735][ T8765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1094'. [ 182.485961][ T8765] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 182.503620][ T8763] block device autoloading is deprecated and will be removed. [ 182.509878][ T8763] PM: Image not found (code -5) [ 182.541149][ T4306] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.560476][ T4306] usb 1-1: device descriptor read/8, error -71 [ 182.810030][ T4306] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 182.830405][ T4306] usb 1-1: device descriptor read/8, error -71 [ 182.940041][ T4306] usb usb1-port1: unable to enumerate USB device [ 184.080978][ T30] kauditd_printk_skb: 35577 callbacks suppressed [ 184.081900][ T30] audit: type=1400 audit(185.062:287497): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5225 comm="syz-executor" opid=8726 ocomm="syz.0.1086" [ 184.081967][ T30] audit: type=1400 audit(185.062:287498): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5225 comm="syz-executor" opid=8726 ocomm="syz.0.1086" [ 184.086297][ T30] audit: type=1400 audit(185.062:287499): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 184.086346][ T30] audit: type=1400 audit(185.062:287500): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 184.086409][ T30] audit: type=1400 audit(185.062:287501): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 184.086460][ T30] audit: type=1400 audit(185.062:287502): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 184.086514][ T30] audit: type=1400 audit(185.062:287503): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5225 comm="syz-executor" name="196" dev="tmpfs" ino=1064 [ 184.086599][ T30] audit: type=1400 audit(185.062:287504): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5225 comm="syz-executor" path="/196" dev="tmpfs" ino=1064 [ 184.086671][ T30] audit: type=1400 audit(185.062:287505): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5225 comm="syz-executor" path="/196" dev="tmpfs" ino=1064 [ 184.086753][ T30] audit: type=1400 audit(185.062:287506): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 184.170033][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 185.139022][ T8759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.260034][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 187.371575][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.371620][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.330737][ T50] Bluetooth: hci1: command 0x0419 tx timeout