last executing test programs: 1m8.285013624s ago: executing program 1 (id=26): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000002380)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f00000023c0)={&(0x7f0000002400)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002440), 0x0, 0x0, 0x0, 0x804c040}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x5220, 0x0) 1m6.007799752s ago: executing program 1 (id=34): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001740)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4e, &(0x7f00000016c0)={@random="dfaef7b1246a", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xe02e, {[@mss={0x2, 0x4, 0x400}]}}}}}}}}, 0x0) 1m5.941076802s ago: executing program 1 (id=35): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_io_uring_setup(0x3ee8, &(0x7f0000001e00)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000001e80)=0x0, &(0x7f0000001ec0)=0x0, &(0x7f0000001f00)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001f40)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, r0, 0x1c, &(0x7f0000001fc0)={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0xadb1}}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x1000000, &(0x7f00000000c0)={[{@user_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@commit={'commit', 0x3d, 0x80000001}}], [{@measure}, {@subj_role={'subj_role', 0x3d, '\xed{[p,-\\/\xb7'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x0e\x00\x00\x00\x00\x00\x00\x00'}}, {@hash}]}, 0xfe, 0x7b9, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000001b40)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001b80)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x141c, &(0x7f00000020c0)={0x0, 0x91c1, 0x3400, 0x1, 0x8}, &(0x7f0000002140)=0x0, &(0x7f0000002180)=0x0, &(0x7f00000021c0)=0x0) syz_io_uring_modify_offsets$generic(r9, r10, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r9, r10, r11, &(0x7f0000002200)=@ublk_io_commit_and_fetch_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x104, 0x7acc, 0x0}}) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) setns(r13, 0x24020000) r14 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = syz_pidfd_open(r14, 0x0) setns(r15, 0x24020000) io_uring_enter(r8, 0x20, 0x20, 0x1, 0x0, 0x0) connect$unix(r6, &(0x7f0000001c40)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001cc0), 0x651, 0x0) recvmmsg(r6, &(0x7f0000001d00), 0x10106, 0x2, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000001d40)=0x6) setns(0xc9, 0x0) r16 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r16, 0x0, 0x0, 0x8000, &(0x7f0000001d80)={0x2, 0x4e21, @multicast1}, 0x10) 1m3.800765348s ago: executing program 1 (id=47): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x4000, &(0x7f0000002e40)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0xcd2}}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000002f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000003500)='.\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000002dc0)={[{@noload}, {@nojournal_checksum}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f0000000300)="$eJzs3c9vFFUcAPDvTH/w21bFHyBoFY3EH4WWnwcvGE08aGKiB4yn2haCLFRpTYQQrR7waEi8G48m/gWe9GLUk4lXvRsSYriAGs2YmZ0py7JbWLp00f18klnem3nLvO/MvN037+1uA+hbY/lDErExIn6JiJF69toCY/V/rlw6O/3HpbPTSWTZa78nRbnLl85OV0Wr522oZ7KszK9psd9zb0ZM1Wqzp8r8roUT7+yaP33m2WMnpo7OHp09OXnw4N4924f3T+7rSpx5XJe3fjC3bctLb5x/Zfrw+bd++Cqv78Zye2McXbJurH50W3qiyzvrtU0N6WSwhxWhIwMRkZ+uoaL9j8RArFvaNhIvftzTygG3VZZlWav359JiBvyPJdHrGgC9Ub3R5/e/1bJKXY87wsVDEe8eqMd/pVzqWwYjLcsMNd3fdtNYRBxe/PPzfInbMw4BAHCNbw5FxDOt+n9p3N9Q7q5yDmU0Iu6OiHsi4t6I2BwR90UUZR+IiAc73H/zDMn1/Z/0wi0FdpPy/t9z5dzWUv/v76yIvzQ6UOY2FfEPJUeO1WZ3l8dkZwytyfMTy+zj2xd+/rTdtsb+X77k+6/6gnXphcGmAbqZqYWpFYa95OJHEVsHm+IvJFFN4yQRsSUitnb0P2dZWjxGHHvqy23tSt04/mV0YZ4p+yLiyfr5X4ym+CtJ2/nJiQP7J/ftWhu12d1/ZVlWXBXX+/Gnc6+22/+K4u+C/Pyvb77+C0vxjyZrI+ZPnzlezNfOR/MM8Q2d+/WTtvc0t3r9DyevF+nhct37UwsLpyYihpOXG9b/03SXW5abvHrl5PHv3NEq/rR4jauifSgi8ot4e0Q8HBGPlHV/NCIei4gdy8T//fOPv915/MuMyndRHv/Mjc5/NJ7/zhMDx7/7uvP4K/n531ukdpZrbub172YruJJjBwAAAP8VafEZ+CQdX0qn6fh4/TP8m2N9WpubX3j6yNx7J2fqn5UfjaG0Gv8caRgPnSjHhqv85NWhmSK/pxw3/mxgXZEfn56rzfQ4duh3G9q0/9xvA72uHXDb+b4W9C/tH/qX9g/9S/uH/qX9Q/9q1f4/7EE9gNXn/R/6l/YP/Uv7h/6l/UNfavvd+HRFX/mXWIVE+QsNix08q/pRiS7sPdLOnzUYPT1iSQc/DHHnJAa7XufyT3REuWZNy8K9e00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopn8DAAD//7kl5Go=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x10b442, 0x0) write$FUSE_DIRENT(r5, 0x0, 0xff8b) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000a40)={'\x00', 0x0, 0xbe8, 0x4, 0xb5e, 0x6, 0x0}) ptrace$setregset(0x4205, r6, 0x2, &(0x7f0000000b80)={&(0x7f0000000ac0)="7b718879cc22389ae8ab2aee5edf7a56ae33a80b29c52082fff39d34c1ac8410b2a8b4ab1147baa13375e66c81ddd1294f5ef265cc991d7c692974bc52570e1220991321b22a7bd7e57cd40a77aa28e777915444e4d784e1bb4610b1ca488cdb2165ae2132770c219137a8e5016615d84a1a111b20ea2260ae64fd6bc5fb62e9aed04d99bdb0727ed717d88b6a35f9377680aebd487012", 0x97}) r7 = io_uring_setup(0x8, &(0x7f00000008c0)={0x0, 0x2b46, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000980)={0x100, 0x0, 0x1, '\x00', 0x1000a}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000009c0)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1) io_uring_enter(r7, 0x0, 0x1, 0x9, &(0x7f0000000a00), 0x18) syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./file1\x00', 0x980876, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000800)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x18) write$P9_RVERSION(r8, &(0x7f0000000880)={0x13, 0x65, 0xffff, 0x10001, 0x6, '9P2000'}, 0x13) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000140)=0xc) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x89, &(0x7f0000000c40)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002d00)={0x50, 0x0, r11, {0x7, 0x29, 0x5ee, 0xffffffffb084edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}}, 0x50) write$FUSE_LK(r5, &(0x7f0000002d80)={0x28, 0x7fffffffffffffff, r11, {{0xfffffffffffffffc, 0x8, 0x1, r6}}}, 0x28) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090029bd700002dcdf250a00000008000300", @ANYRES32=r4, @ANYBLOB="290200"/20], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 1m3.633091859s ago: executing program 0 (id=50): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) set_mempolicy_home_node(&(0x7f0000275000/0xd000)=nil, 0xd000, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m3.551741436s ago: executing program 0 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, &(0x7f00000003c0)='3', 0x4e) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000140)="933c5b76", &(0x7f0000000180)=""/137}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x4, 0xd7}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000011c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) move_pages(0x0, 0x1, &(0x7f0000001180)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000011c0), 0x0, 0x0) 1m3.229198176s ago: executing program 0 (id=54): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) 1m3.226002452s ago: executing program 0 (id=57): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000940)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000e80)={0x4, 0xd0c, 0x1000, 0x400000000b, 0x6, 0x6, 0x20000001002, 0xf64, 0x697}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000200)='0\x00', 0x2) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00') 1m3.154730157s ago: executing program 0 (id=59): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003540)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x84}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000003940)={&(0x7f0000003980)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000003a00)="671723d7c6012c", 0x10}, {&(0x7f0000003a40)="9efe80000000000002dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) socket$nl_netfilter(0x10, 0x3, 0xc) 1m2.944328369s ago: executing program 1 (id=64): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000001c00850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000007000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000085000000a000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x10, 0x3a, '\x00', 0x3a, ']-.*$&', 0x3a, './proc/thread-self/fail-nth'}, 0x42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) r6 = syz_io_uring_complete(0x0, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x80000000, 0x0) 1m2.852985675s ago: executing program 0 (id=65): r0 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x40f, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x8}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) brk(0x20000001) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000000c0)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="80c0f623e5ba0ec48de25e7aca7592f3ccdfd4f3674451c1b08ec7a8"]) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000500)=@isdn, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)}], 0x2, &(0x7f0000000700)=""/194, 0xc2}, 0x9}, {{&(0x7f0000000800)=@tipc=@id, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/121, 0x79}, {&(0x7f0000000a00)=""/70, 0x46}, {&(0x7f0000000a80)=""/8, 0x8}, {&(0x7f0000000ac0)=""/223, 0xdf}, {&(0x7f0000000bc0)=""/9, 0x9}, {&(0x7f0000000c00)=""/136, 0x88}, {&(0x7f0000000cc0)=""/92, 0x5c}], 0x9, &(0x7f0000000e00)=""/1, 0x1}, 0x7a9}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/220, 0xdc}], 0x1, &(0x7f0000000f80)=""/203, 0xcb}, 0x800}, {{&(0x7f0000001080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)=""/202, 0xca}, {&(0x7f0000001200)=""/38, 0x26}, {&(0x7f0000001240)=""/44, 0x2c}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/163, 0xa3}, {&(0x7f0000001480)=""/121, 0x79}], 0x6, &(0x7f0000001580)=""/109, 0x6d}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000001700)=""/179, 0xb3}, {&(0x7f00000017c0)=""/62, 0x3e}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/77, 0x4d}, {&(0x7f0000002880)=""/105, 0x69}, {&(0x7f0000002900)=""/31, 0x1f}, {&(0x7f0000002940)=""/177, 0xb1}], 0x9, &(0x7f0000002ac0)=""/32, 0x20}, 0x5c}, {{&(0x7f0000002b00)=@nfc, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/4, 0x4}, {&(0x7f0000002bc0)=""/56, 0x38}, {&(0x7f0000002c00)=""/232, 0xe8}, {&(0x7f0000002d00)=""/32, 0x20}], 0x4, &(0x7f0000002d80)=""/21, 0x15}, 0x3}], 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000440)=0xeffe, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfff4, 0x7, @mcast1, 0xb}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 1m2.839035795s ago: executing program 32 (id=65): r0 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x40f, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x8}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) brk(0x20000001) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000000c0)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="80c0f623e5ba0ec48de25e7aca7592f3ccdfd4f3674451c1b08ec7a8"]) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000500)=@isdn, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)}], 0x2, &(0x7f0000000700)=""/194, 0xc2}, 0x9}, {{&(0x7f0000000800)=@tipc=@id, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/121, 0x79}, {&(0x7f0000000a00)=""/70, 0x46}, {&(0x7f0000000a80)=""/8, 0x8}, {&(0x7f0000000ac0)=""/223, 0xdf}, {&(0x7f0000000bc0)=""/9, 0x9}, {&(0x7f0000000c00)=""/136, 0x88}, {&(0x7f0000000cc0)=""/92, 0x5c}], 0x9, &(0x7f0000000e00)=""/1, 0x1}, 0x7a9}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/220, 0xdc}], 0x1, &(0x7f0000000f80)=""/203, 0xcb}, 0x800}, {{&(0x7f0000001080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)=""/202, 0xca}, {&(0x7f0000001200)=""/38, 0x26}, {&(0x7f0000001240)=""/44, 0x2c}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/163, 0xa3}, {&(0x7f0000001480)=""/121, 0x79}], 0x6, &(0x7f0000001580)=""/109, 0x6d}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000001700)=""/179, 0xb3}, {&(0x7f00000017c0)=""/62, 0x3e}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/77, 0x4d}, {&(0x7f0000002880)=""/105, 0x69}, {&(0x7f0000002900)=""/31, 0x1f}, {&(0x7f0000002940)=""/177, 0xb1}], 0x9, &(0x7f0000002ac0)=""/32, 0x20}, 0x5c}, {{&(0x7f0000002b00)=@nfc, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/4, 0x4}, {&(0x7f0000002bc0)=""/56, 0x38}, {&(0x7f0000002c00)=""/232, 0xe8}, {&(0x7f0000002d00)=""/32, 0x20}], 0x4, &(0x7f0000002d80)=""/21, 0x15}, 0x3}], 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000440)=0xeffe, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfff4, 0x7, @mcast1, 0xb}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 1m2.301003741s ago: executing program 1 (id=72): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000002380)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f00000023c0)={&(0x7f0000002400)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002440)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x5220, 0x0) 1m2.038423s ago: executing program 33 (id=72): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000002380)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f00000023c0)={&(0x7f0000002400)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002440)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x5220, 0x0) 49.010351105s ago: executing program 5 (id=323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1002}) 48.912118468s ago: executing program 5 (id=324): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x4, 0x2}]}, 0x18}}, 0x0) 48.829065303s ago: executing program 5 (id=325): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2800088, &(0x7f0000000200)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2c2, &(0x7f0000000300)="$eJzs3buLY1UYAPDvZvJCi0SwEsELWlgtu9vaZJBZWEylplALXdxdkEkQdmDAB2amsrWxtLURBDv/CRv/A8FWsHNgBq7cVx5jJiY6UXR+v2Lm5NzznfOdew8TpsiX956fHD5M4/Hppz9Ft5tEYxCtOEuiH42oncSSwRcBAPyXnWVZ/JqVtolLIqK7u7QAgB0q3v/Pt3j//27nKQEAO/bGW2+/tj8cHryept24N/n8eJT/Z5//Lq/vP44PYhyP4nb04iIimynb97IsmzbTXD9emkyPR3nk5N0fqvn3f4mIZvWiX/xcjr8/PLiTlhbip3keT1XrD/L170Yvnl2x/v3hwd0V8TFqx8svLuR/K3rx4/vxYYzjYZFEGR+NiM/upOmr2Ze/ffJOnl4en0yPR51i3Fy2t+L2vbnDRwMAAAAAAAAAAAAAAAAAAAAAwP/Yrap2TieK+j15V1V/Z+8if9GKtNZfrs9Txif1RJfqA02z+Kquz3M7TdOsGjiPb8ZzzVllIAAAAAAAAAAAAAAAAAAAALjRjj76+PDBePzoybU06moA9cf6/+o8g4WeF2L94M58rUbVXDNz7NVjkoi1aeSb2Djn86rswboxjbjq0jNX5fzNtxvfuq//fO9Vo7XBmL/ZqE/X4YNk9T3sRN3TrQ/J94tj2rHhWu3lnu7smWZbHb/2yku9zbecnJQ7frromVaHrdzF8nOPZF1ir/xczlP1JJd30S7u6nJU1dOqehbCl5fobn6ei+QvS2bVOpJr/AsEAAAAAAAAAAAAAAAAAADUFj9F/Aena0MbWWdnaQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP2r+/f9bNKZV8AaD2/Hk6F/eIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfA7wEAAP//56xb2A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x101100, 0x108) getdents64(r0, &(0x7f00000012c0)=""/4096, 0x1000) 48.796463875s ago: executing program 5 (id=326): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f0000000100)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x91}}]}, 0x21, 0x4f3, &(0x7f0000000140)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000640)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000700)='./bus/file0\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000740), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000007c0)={0x0, {}, 0x0, {}, 0x40009cd, 0x4, 0x13, 0x0, "22536a030000000000000043a52dbc3a9ae8b04fcca15748328cb3e74d938981061383375e1d61471a2d2dfe00000000000500000000000400", "00106d0c31ef6c1f1ba4aa6d0c5ba9263626c0240010f9db74161ccff2c5cf5e", [0x5, 0x802]}) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x2004008, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 48.635934137s ago: executing program 5 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sec\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)=' /new_!omain\nfile read /etc/passwd task.uid=0-=ask.euid=0\n', 0x42) 48.261786584s ago: executing program 5 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c0000110001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 48.211229508s ago: executing program 34 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c0000110001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 35.408679634s ago: executing program 3 (id=663): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 35.408451661s ago: executing program 3 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 35.374025199s ago: executing program 3 (id=665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, 0x0, 0x0) 35.355667405s ago: executing program 3 (id=666): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x4000, &(0x7f0000002e40)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0xcd2}}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000002f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000003500)='.\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000002dc0)={[{@noload}, {@nojournal_checksum}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x10b442, 0x0) write$FUSE_DIRENT(r5, 0x0, 0xff8b) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000a40)={'\x00', 0x0, 0xbe8, 0x4, 0xb5e, 0x6, 0x0}) ptrace$setregset(0x4205, r6, 0x2, &(0x7f0000000b80)={&(0x7f0000000ac0)="7b718879cc22389ae8ab2aee5edf7a56ae33a80b29c52082fff39d34c1ac8410b2a8b4ab1147baa13375e66c81ddd1294f5ef265cc991d7c692974bc52570e1220991321b22a7bd7e57cd40a77aa28e777915444e4d784e1bb4610b1ca488cdb2165ae2132770c219137a8e5016615d84a1a111b20ea2260ae64fd6bc5fb62e9aed04d99bdb0727ed717d88b6a35f9377680aebd487012", 0x97}) r7 = io_uring_setup(0x8, &(0x7f00000008c0)={0x0, 0x2b46, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000980)={0x100, 0x0, 0x1, '\x00', 0x1000a}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000009c0)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1) io_uring_enter(r7, 0x0, 0x1, 0x9, &(0x7f0000000a00), 0x18) syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./file1\x00', 0x980876, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000800)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x18) write$P9_RVERSION(r8, &(0x7f0000000880)={0x13, 0x65, 0xffff, 0x10001, 0x6, '9P2000'}, 0x13) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000140)=0xc) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x89, &(0x7f0000000c40)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002d00)={0x50, 0x0, r11, {0x7, 0x29, 0x5ee, 0xffffffffb084edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}}, 0x50) write$FUSE_LK(r5, &(0x7f0000002d80)={0x28, 0x7fffffffffffffff, r11, {{0xfffffffffffffffc, 0x8, 0x1, r6}}}, 0x28) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090029bd700002dcdf250a00000008000300", @ANYRES32=r4, @ANYBLOB="290200"/20], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 34.489300152s ago: executing program 3 (id=700): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) 34.090743484s ago: executing program 3 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='0', 0x1) socket$kcm(0x29, 0x5, 0x0) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) 34.046041996s ago: executing program 35 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='0', 0x1) socket$kcm(0x29, 0x5, 0x0) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) 33.573179346s ago: executing program 4 (id=729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206012b000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080012"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) 33.528763299s ago: executing program 4 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c000180140003"], 0xcc}}, 0x0) 33.429090759s ago: executing program 4 (id=733): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x18, &(0x7f0000000300)={0x0, 0xe, 0x5, "0c9917e701"}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r2, &(0x7f0000000380)={@void, @void, @ipv6=@esp={0x6, 0x6, "777dc8", 0xe, 0x32, 0x0, @empty, @remote, {[], {0x4d2, 0x4, @basic={0x0, 0x0, 0xac00}}}}}, 0x36) 32.813195174s ago: executing program 4 (id=736): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000940)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000e80)={0x4, 0xd0c, 0x1000, 0x400000000b, 0x6, 0x6, 0x20000001002, 0xf64, 0x697}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000200)='0\x00', 0x2) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00') 32.563503359s ago: executing program 4 (id=740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000980)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @desc2}, &(0x7f0000000d00)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000001000)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001080), &(0x7f00000010c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x37, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x33, 0x31]}, &(0x7f0000001100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x33, 0x57, 0x0, 0x38]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f0000001540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001600), &(0x7f0000001640)={'fscrypt:', @desc3}, &(0x7f0000001680)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001780), &(0x7f00000017c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x1, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x7, 0x62, 0x36]}, &(0x7f0000001800)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001880), &(0x7f00000018c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001980), &(0x7f00000019c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 32.149649009s ago: executing program 4 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 32.082753192s ago: executing program 36 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 22.978235177s ago: executing program 7 (id=1035): r0 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='proto\x00', &(0x7f0000000380)='\xea\x00\t\x00', 0x0) 22.907196854s ago: executing program 7 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000019480)='./sec\x00', &(0x7f0000019540)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000196c0)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000019dc0)='address_group grp1 0-0.0.0-25..255.255.255\n', 0x2b) 22.858099826s ago: executing program 7 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}]}}}]}, 0x40}}, 0x404c840) 22.773132919s ago: executing program 7 (id=1046): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xb9, 0x2, 0x400}, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x3e0e, 0x0, 0x3, 0x28e}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x0, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x2, 0x1fe}}], 0x4, 0x0, &(0x7f0000000b80)) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/events/sched/filter\x00', 0x80081, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)='7', 0x1) write(r1, 0x0, 0x0) 22.639932212s ago: executing program 7 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./security/apparmor/.load\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5\x00', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1', 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)={[{}]}, 0xfd, 0x1cf, &(0x7f00000002c0)="$eJzKKC4sZmdgYPj7sSaZQYCBgYGFgYGRgYfhAgMjiMnAwsgAAUwQaj2U/wJKz4RK20D5zVB6IZSuuKW9bs0pvzMnPXW1lskyM7R6assji8ml9hi5SS7mkWBmCE09sqi4sio7MScntah4IUPFreSkitMnGFiu219TaZbgdPgjz+GQpOmgw3TExyNrRmMJ5yQpTTE2tkyFs2c+MDKwaRxheLSCeWOdZ15jXWHq1Ly0vKSqrKqseRMnbpzZ2NnYuHJiXVSa3yrGlhSXTU2djEwOW9QENjMbqk+y0Z7wrn3VwyQH1h4Pv+ZTxkqvU5kvGS8skjq1omrmhC9KsxkNvzPc4SlbIaGh4SRxRcKiwYThSJ1tgyvIiSkNDGkKYYxJamxibVvOzAlh5mdzW6DQknyCKfQox9KZEhYHhKpO/rTUfOuQ6DZj21MHtjM8h4/zrCnoEzQ6LsHgtFDwvwzImISGhjKNtUxLbRcwFmn8lfBabeyUweBuz7QMFqAsDSByJZQnC9aTkLzCQ0dT0yglOaFhk0RCkluBoTLD1j2cqwUaGJCiTYWBgWE7VCMsOq/BGKNgFIyCUTAKRsEoGAWjYBSMglEwCkYEAAQAAP//gKyW7Q==") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./security\x00', &(0x7f0000000540)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./security/apparmor/.load\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0), 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 22.412835333s ago: executing program 7 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=alway']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 22.36306855s ago: executing program 37 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=alway']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 20.657325207s ago: executing program 8 (id=1091): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) 20.65711832s ago: executing program 8 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) 20.61531441s ago: executing program 8 (id=1093): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x1, 0xfa}}, 0x14}}, 0x8000) 20.545270141s ago: executing program 8 (id=1095): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) 20.543674434s ago: executing program 8 (id=1096): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000440)=[{0x25, '\x00', @buffer={"382e5803ed92f7e3a82382b3f29b773f0d7a000000a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}]}) 20.444401735s ago: executing program 8 (id=1101): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002700)='./debug\x00', &(0x7f0000002780)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r1, &(0x7f0000002800)='br', 0x2) 5.392105387s ago: executing program 38 (id=1101): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002700)='./debug\x00', &(0x7f0000002780)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r1, &(0x7f0000002800)='br', 0x2) 396.24466ms ago: executing program 9 (id=1583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[], 0x7) 289.064568ms ago: executing program 9 (id=1584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000001400)={@void, @val={0x3, 0x3, 0x8, 0x13, 0x16, 0xc}, @ipv4=@icmp={{0x6, 0x4, 0x3, 0x37, 0x34, 0x64, 0x0, 0xf5, 0x1, 0x0, @multicast2, @loopback, {[@generic={0x82, 0x2}]}}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x1, 0xfffd, {0x5, 0x4, 0x2, 0x5, 0x6, 0x64, 0x2, 0x8, 0x8, 0x1, @loopback, @empty}}}}, 0x3e) 287.809537ms ago: executing program 6 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}}, 0x0) 287.053848ms ago: executing program 2 (id=1585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x200}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 249.35254ms ago: executing program 6 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 237.919391ms ago: executing program 9 (id=1587): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r3, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r2, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 221.697928ms ago: executing program 2 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000001540)="0400000000000000000000009001320038010000030000000000000000000000000000000000000000000000000000006d706174683000000000000000000000000000000000000000000000000000009cf0753e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20307ccf52") 203.355927ms ago: executing program 2 (id=1589): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time\x00') open_by_handle_at(r1, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x0) 202.466745ms ago: executing program 6 (id=1590): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget(0x2, 0x3, 0x200) r1 = semget(0x0, 0x2, 0x313) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 147.296092ms ago: executing program 6 (id=1591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 147.110994ms ago: executing program 2 (id=1593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='252:0 ', 0x6) 146.411055ms ago: executing program 9 (id=1594): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r0, &(0x7f00000002c0), 0x0}, 0x20) 135.190859ms ago: executing program 2 (id=1595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0) 82.017961ms ago: executing program 9 (id=1596): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000180)) 49.426696ms ago: executing program 6 (id=1604): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='252:0 ', 0x6) 46.588256ms ago: executing program 2 (id=1605): syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.089727ms ago: executing program 6 (id=1606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0) 0s ago: executing program 9 (id=1607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000002c0)='252:0 ', 0x6) kernel console output (not intermixed with test programs): nvoke_syscall+0x98/0x244 [ 62.489488][ T6625] el0_svc_common+0xec/0x23c [ 62.489500][ T6625] do_el0_svc+0x4c/0x5c [ 62.489511][ T6625] el0_svc+0x60/0x1d8 [ 62.489521][ T6625] el0t_64_sync_handler+0x44/0x104 [ 62.489529][ T6625] el0t_64_sync+0x198/0x19c [ 62.560410][ T6625] FAULT_INJECTION: forcing a failure. [ 62.560410][ T6625] name failslab, interval 1, probability 5, space 0, times 9996 [ 62.560426][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.6.518 Tainted: G L syzkaller #0 PREEMPT [ 62.560439][ T6625] Tainted: [L]=SOFTLOCKUP [ 62.560442][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.560454][ T6625] Call trace: [ 62.560457][ T6625] show_stack+0x2c/0x3c (C) [ 62.560471][ T6625] __dump_stack+0x30/0x40 [ 62.560482][ T6625] dump_stack_lvl+0xd8/0x12c [ 62.560492][ T6625] dump_stack+0x1c/0x28 [ 62.560502][ T6625] should_fail_ex+0x418/0x58c [ 62.560511][ T6625] should_failslab+0xc4/0x120 [ 62.560519][ T6625] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 62.560528][ T6625] kmemdup_noprof+0x44/0x8c [ 62.560537][ T6625] mpls_dev_sysctl_register+0xd4/0x234 [ 62.560547][ T6625] mpls_dev_notify+0x128/0x560 [ 62.560555][ T6625] notifier_call_chain+0x1a4/0x4cc [ 62.560565][ T6625] raw_notifier_call_chain+0x3c/0x50 [ 62.560576][ T6625] call_netdevice_notifiers_info+0xb8/0x120 [ 62.560585][ T6625] register_netdevice+0x1018/0x14c0 [ 62.560593][ T6625] register_netdev+0x4c/0x68 [ 62.560601][ T6625] loopback_net_init+0x64/0x150 [ 62.560611][ T6625] ops_init+0x2cc/0x528 [ 62.560622][ T6625] setup_net+0x118/0x2fc [ 62.560632][ T6625] copy_net_ns+0x454/0x698 [ 62.560642][ T6625] create_new_namespaces+0x304/0x50c [ 62.560652][ T6625] unshare_nsproxy_namespaces+0x120/0x170 [ 62.560662][ T6625] ksys_unshare+0x438/0x6e0 [ 62.560671][ T6625] __arm64_sys_unshare+0x40/0x54 [ 62.560680][ T6625] invoke_syscall+0x98/0x244 [ 62.560692][ T6625] el0_svc_common+0xec/0x23c [ 62.560703][ T6625] do_el0_svc+0x4c/0x5c [ 62.560713][ T6625] el0_svc+0x60/0x1d8 [ 62.560721][ T6625] el0t_64_sync_handler+0x44/0x104 [ 62.560729][ T6625] el0t_64_sync+0x198/0x19c [ 62.567623][ T6633] FAULT_INJECTION: forcing a failure. [ 62.567623][ T6633] name failslab, interval 1, probability 5, space 0, times 9995 [ 62.567647][ T6633] CPU: 0 UID: 0 PID: 6633 Comm: syz.3.522 Tainted: G L syzkaller #0 PREEMPT [ 62.567662][ T6633] Tainted: [L]=SOFTLOCKUP [ 62.567666][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.567680][ T6633] Call trace: [ 62.567684][ T6633] show_stack+0x2c/0x3c (C) [ 62.567704][ T6633] __dump_stack+0x30/0x40 [ 62.567720][ T6633] dump_stack_lvl+0xd8/0x12c [ 62.567732][ T6633] dump_stack+0x1c/0x28 [ 62.567744][ T6633] should_fail_ex+0x418/0x58c [ 62.567754][ T6633] should_failslab+0xc4/0x120 [ 62.567763][ T6633] __kmalloc_cache_node_noprof+0x98/0x618 [ 62.567776][ T6633] blkg_alloc+0xd8/0x6cc [ 62.567791][ T6633] blkg_conf_prep+0x530/0x934 [ 62.567803][ T6633] tg_set_conf+0x1e4/0x46c [ 62.567811][ T6633] tg_set_conf_uint+0x38/0x4c [ 62.567820][ T6633] cgroup_file_write+0x23c/0x6e4 [ 62.567831][ T6633] kernfs_fop_write_iter+0x260/0x3b8 [ 62.567845][ T6633] vfs_write+0x51c/0xa0c [ 62.567854][ T6633] ksys_write+0x12c/0x228 [ 62.567862][ T6633] __arm64_sys_write+0x84/0x98 [ 62.567871][ T6633] invoke_syscall+0x98/0x244 [ 62.567884][ T6633] el0_svc_common+0xec/0x23c [ 62.567896][ T6633] do_el0_svc+0x4c/0x5c [ 62.567908][ T6633] el0_svc+0x60/0x1d8 [ 62.567917][ T6633] el0t_64_sync_handler+0x44/0x104 [ 62.567926][ T6633] el0t_64_sync+0x198/0x19c [ 62.823199][ T6661] Boot memory [50000000 58000000] offlining attempted [ 62.850593][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 62.878171][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.878446][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.036784][ T6686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.159219][ T6686] md/raid:md0: invalid chunk size -61440 [ 63.159234][ T6686] md: pers->run() failed ... [ 63.283143][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.283418][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.388947][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 63.390017][ T6721] FAULT_INJECTION: forcing a failure. [ 63.390017][ T6721] name failslab, interval 1, probability 5, space 0, times 10000 [ 63.390036][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT [ 63.390049][ T6721] Tainted: [L]=SOFTLOCKUP [ 63.390053][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.390067][ T6721] Call trace: [ 63.390070][ T6721] show_stack+0x2c/0x3c (C) [ 63.390091][ T6721] __dump_stack+0x30/0x40 [ 63.390104][ T6721] dump_stack_lvl+0xd8/0x12c [ 63.390116][ T6721] dump_stack+0x1c/0x28 [ 63.390128][ T6721] should_fail_ex+0x418/0x58c [ 63.390137][ T6721] should_failslab+0xc4/0x120 [ 63.390146][ T6721] kmem_cache_alloc_node_noprof+0x98/0x604 [ 63.390157][ T6721] alloc_vmap_area+0x210/0x12ec [ 63.390167][ T6721] __get_vm_area_node+0x210/0x32c [ 63.390177][ T6721] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 63.390188][ T6721] __vmalloc_node_noprof+0xec/0x14c [ 63.390199][ T6721] vzalloc_noprof+0x3c/0x4c [ 63.390214][ T6721] vidtv_mux_init+0x18c/0x7e4 [ 63.390227][ T6721] vidtv_start_feed+0x2e0/0x49c [ 63.390237][ T6721] dmx_ts_feed_start_filtering+0x124/0x1fc [ 63.390247][ T6721] dvb_dmxdev_start_feed+0x1f4/0x2dc [ 63.390260][ T6721] dvb_dmxdev_filter_start+0x1bc/0xa8c [ 63.390273][ T6721] dvb_demux_do_ioctl+0x41c/0x4bc [ 63.390285][ T6721] dvb_usercopy+0x2a4/0x4d4 [ 63.390297][ T6721] dvb_demux_ioctl+0x3c/0x54 [ 63.390308][ T6721] __arm64_sys_ioctl+0x154/0x1cc [ 63.390317][ T6721] invoke_syscall+0x98/0x244 [ 63.390330][ T6721] el0_svc_common+0xec/0x23c [ 63.390342][ T6721] do_el0_svc+0x4c/0x5c [ 63.390354][ T6721] el0_svc+0x60/0x1d8 [ 63.390363][ T6721] el0t_64_sync_handler+0x44/0x104 [ 63.390371][ T6721] el0t_64_sync+0x198/0x19c [ 63.391885][ T6721] FAULT_INJECTION: forcing a failure. [ 63.391885][ T6721] name failslab, interval 1, probability 5, space 0, times 9999 [ 63.391901][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT [ 63.391918][ T6721] Tainted: [L]=SOFTLOCKUP [ 63.391922][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.391934][ T6721] Call trace: [ 63.391937][ T6721] show_stack+0x2c/0x3c (C) [ 63.391950][ T6721] __dump_stack+0x30/0x40 [ 63.391961][ T6721] dump_stack_lvl+0xd8/0x12c [ 63.391973][ T6721] dump_stack+0x1c/0x28 [ 63.391984][ T6721] should_fail_ex+0x418/0x58c [ 63.391992][ T6721] should_failslab+0xc4/0x120 [ 63.392001][ T6721] kmem_cache_alloc_noprof+0x94/0x5d4 [ 63.392009][ T6721] security_inode_alloc+0x40/0x304 [ 63.392020][ T6721] inode_init_always_gfp+0x704/0xb20 [ 63.392032][ T6721] alloc_inode+0x9c/0x198 [ 63.392043][ T6721] sock_alloc+0x4c/0x204 [ 63.392054][ T6721] __sock_create+0x108/0x670 [ 63.392065][ T6721] __sys_socket_create+0xc0/0x11c [ 63.392076][ T6721] __sys_socket+0x44/0xec [ 63.392086][ T6721] __arm64_sys_socket+0x84/0x9c [ 63.392097][ T6721] invoke_syscall+0x98/0x244 [ 63.392109][ T6721] el0_svc_common+0xec/0x23c [ 63.392121][ T6721] do_el0_svc+0x4c/0x5c [ 63.392132][ T6721] el0_svc+0x60/0x1d8 [ 63.392140][ T6721] el0t_64_sync_handler+0x44/0x104 [ 63.392148][ T6721] el0t_64_sync+0x198/0x19c [ 63.392888][ T6721] FAULT_INJECTION: forcing a failure. [ 63.392888][ T6721] name failslab, interval 1, probability 5, space 0, times 9998 [ 63.392901][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT [ 63.392911][ T6721] Tainted: [L]=SOFTLOCKUP [ 63.392914][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.392926][ T6721] Call trace: [ 63.392928][ T6721] show_stack+0x2c/0x3c (C) [ 63.392941][ T6721] __dump_stack+0x30/0x40 [ 63.392952][ T6721] dump_stack_lvl+0xd8/0x12c [ 63.392964][ T6721] dump_stack+0x1c/0x28 [ 63.392976][ T6721] should_fail_ex+0x418/0x58c [ 63.392984][ T6721] should_failslab+0xc4/0x120 [ 63.392991][ T6721] __kmalloc_noprof+0x108/0x6c8 [ 63.393000][ T6721] tomoyo_realpath_from_path+0xbc/0x4dc [ 63.393013][ T6721] tomoyo_path_number_perm+0x1f0/0x500 [ 63.393024][ T6721] tomoyo_path_mkdir+0xac/0xf8 [ 63.393036][ T6721] security_path_mkdir+0x160/0x318 [ 63.393046][ T6721] filename_mkdirat+0x1b8/0x3f4 [ 63.393057][ T6721] __arm64_sys_mkdirat+0x9c/0xc0 [ 63.393068][ T6721] invoke_syscall+0x98/0x244 [ 63.393080][ T6721] el0_svc_common+0xec/0x23c [ 63.393092][ T6721] do_el0_svc+0x4c/0x5c [ 63.393103][ T6721] el0_svc+0x60/0x1d8 [ 63.393111][ T6721] el0t_64_sync_handler+0x44/0x104 [ 63.393120][ T6721] el0t_64_sync+0x198/0x19c [ 63.393129][ T6721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.854461][ T6792] bond1: (slave lo): Releasing backup interface [ 63.873003][ T6792] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 63.909453][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.909664][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.944374][ T6721] FAULT_INJECTION: forcing a failure. [ 63.944374][ T6721] name failslab, interval 1, probability 5, space 0, times 9994 [ 63.944401][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT [ 63.944420][ T6721] Tainted: [L]=SOFTLOCKUP [ 63.944424][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.944437][ T6721] Call trace: [ 63.944440][ T6721] show_stack+0x2c/0x3c (C) [ 63.944458][ T6721] __dump_stack+0x30/0x40 [ 63.944469][ T6721] dump_stack_lvl+0xd8/0x12c [ 63.944479][ T6721] dump_stack+0x1c/0x28 [ 63.944489][ T6721] should_fail_ex+0x418/0x58c [ 63.944498][ T6721] should_failslab+0xc4/0x120 [ 63.944506][ T6721] kmem_cache_alloc_noprof+0x94/0x5d4 [ 63.944514][ T6721] __send_signal_locked+0x2f4/0xda8 [ 63.944523][ T6721] do_notify_parent+0xac4/0xcc8 [ 63.944530][ T6721] release_task+0x10ac/0x13bc [ 63.944542][ T6721] do_exit+0x1124/0x1a74 [ 63.944551][ T6721] do_group_exit+0x198/0x238 [ 63.944558][ T6721] get_signal+0xfb0/0x1094 [ 63.944566][ T6721] arch_do_signal_or_restart+0x288/0x444c [ 63.944576][ T6721] exit_to_user_mode_loop+0x70/0x17c [ 63.944586][ T6721] el0_svc+0x12c/0x1d8 [ 63.944595][ T6721] el0t_64_sync_handler+0x44/0x104 [ 63.944602][ T6721] el0t_64_sync+0x198/0x19c [ 63.984370][ T6792] bridge_slave_0: left allmulticast mode [ 63.984393][ T6792] bridge_slave_0: left promiscuous mode [ 63.984479][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.999112][ T6792] bridge_slave_1: left allmulticast mode [ 63.999124][ T6792] bridge_slave_1: left promiscuous mode [ 63.999185][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.013087][ T6792] bond0: (slave bond_slave_0): Releasing backup interface [ 64.051618][ T6792] bond0: (slave bond_slave_1): Releasing backup interface [ 64.052784][ T6815] __nla_validate_parse: 3 callbacks suppressed [ 64.052796][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 64.070326][ T6792] team0: Port device team_slave_0 removed [ 64.078325][ T6792] team0: Port device team_slave_1 removed [ 64.080798][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.082424][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.091151][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.094690][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.181005][ T6815] hsr_slave_0: left promiscuous mode [ 64.183092][ T6815] hsr_slave_1: left promiscuous mode [ 64.327824][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.328644][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.329441][ T6849] loop2: detected capacity change from 0 to 256 [ 64.466125][ T6851] net_ratelimit: 2276 callbacks suppressed [ 64.488397][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488425][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.497703][ T10] cfg80211: failed to load regulatory.db [ 64.527757][ T6851] bond0: (slave bond_slave_0): Releasing backup interface [ 64.555400][ T6851] bond0: (slave bond_slave_1): Releasing backup interface [ 64.588414][ T6851] team0: Port device team_slave_0 removed [ 64.591187][ T6851] team0: Port device team_slave_1 removed [ 64.593721][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.599939][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.604605][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.611133][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.997392][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 65.421886][ T6899] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.421990][ T6899] vhci_hcd vhci_hcd.2: invalid port number 96 [ 65.422012][ T6899] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 66.188360][ T6914] proc_fill_super: get root inode failed [ 66.238699][ T6930] fuse: Bad value for 'fd' [ 66.892848][ T6982] loop3: detected capacity change from 0 to 1024 [ 66.898554][ T6982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.909048][ T6982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.035114][ T6986] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.666: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 67.055476][ T4710] Bluetooth: hci3: command 0x0419 tx timeout [ 67.140912][ T6823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.759111][ T4713] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 67.759690][ T4713] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 67.797660][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.797939][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.082738][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.123238][ T1187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.219041][ T1187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.252368][ T4714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.254343][ T4714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.255563][ T4714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.261322][ T4714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.261876][ T4714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.292144][ T7099] xt_socket: unknown flags 0x4c [ 68.292810][ T1187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.380062][ T1187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.597638][ T7128] overlayfs: failed to clone lowerpath [ 68.608378][ T1187] bridge_slave_1: left allmulticast mode [ 68.608392][ T1187] bridge_slave_1: left promiscuous mode [ 68.608483][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.621789][ T1187] bridge_slave_0: left allmulticast mode [ 68.621802][ T1187] bridge_slave_0: left promiscuous mode [ 68.621899][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.741791][ T7137] netlink: 124 bytes leftover after parsing attributes in process `syz.4.731'. [ 68.741807][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 68.741816][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'. [ 68.852010][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.852290][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.874411][ T7143] loop6: detected capacity change from 0 to 512 [ 68.891355][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.907668][ T7143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.914817][ T7143] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 68.921969][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.929395][ T1234] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.929416][ T1234] EXT4-fs (loop6): This should not happen!! Data will be lost [ 68.929416][ T1234] [ 68.929427][ T1234] EXT4-fs (loop6): Total free blocks count 0 [ 68.929435][ T1234] EXT4-fs (loop6): Free/Dirty block details [ 68.929444][ T1234] EXT4-fs (loop6): free_blocks=65281 [ 68.929452][ T1234] EXT4-fs (loop6): dirty_blocks=1 [ 68.929459][ T1234] EXT4-fs (loop6): Block reservation details [ 68.929464][ T1234] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 68.931534][ T5141] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.946085][ T1187] bond0 (unregistering): Released all slaves [ 68.955958][ T1187] bond1 (unregistering): (slave lo): Releasing backup interface [ 68.969242][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.970320][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.985501][ T1187] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 68.986305][ T1187] bond1 (unregistering): Released all slaves [ 69.091545][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.091611][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.091702][ T7092] bridge_slave_0: entered allmulticast mode [ 69.092226][ T7092] bridge_slave_0: entered promiscuous mode [ 69.101669][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.101912][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.101998][ T7092] bridge_slave_1: entered allmulticast mode [ 69.102500][ T7092] bridge_slave_1: entered promiscuous mode [ 69.125635][ T4710] Bluetooth: hci3: command 0x0419 tx timeout [ 69.153717][ T7092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.154816][ T7092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.190769][ T7092] team0: Port device team_slave_0 added [ 69.192012][ T7092] team0: Port device team_slave_1 added [ 69.209394][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.209401][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.209416][ T7092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.209970][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.209977][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.209991][ T7092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.264597][ T1187] hsr_slave_0: left promiscuous mode [ 69.266697][ T1187] hsr_slave_1: left promiscuous mode [ 69.267067][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.267076][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.267463][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.267471][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.270971][ T1187] veth1_macvtap: left promiscuous mode [ 69.270996][ T1187] veth0_macvtap: left promiscuous mode [ 69.271042][ T1187] veth1_vlan: left promiscuous mode [ 69.271145][ T1187] veth0_vlan: left promiscuous mode [ 69.413454][ T7153] loop4: detected capacity change from 0 to 512 [ 69.417519][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 69.436797][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 69.439470][ T7153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.579736][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.6.738'. [ 69.634116][ T7092] hsr_slave_0: entered promiscuous mode [ 69.634536][ T7092] hsr_slave_1: entered promiscuous mode [ 69.683407][ T4708] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 69.684809][ T4708] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 69.979822][ T7177] binder: tried to use weak ref as strong ref [ 69.979831][ T7177] binder: 7176:7177 Acquire 1 refcount change on invalid ref 0 ret -22 [ 69.979923][ T7177] binder: 7176:7177 got transaction to invalid handle, 1 [ 69.979931][ T7177] binder: 7176:7177 cannot find target node [ 69.979944][ T7177] binder: 7176:7177 transaction async to 0:0 failed 25/29201/-22, code 0 size 96-24 line 3253 [ 69.980184][ T5003] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.036352][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.064232][ T7185] netlink: 'syz.6.750': attribute type 1 has an invalid length. [ 70.064257][ T7185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.064264][ T7185] IPv6: NLM_F_CREATE should be set when creating new route [ 70.069456][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.097437][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.752'. [ 70.113950][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.193089][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.197672][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.200102][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.203967][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.205720][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.208604][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.213631][ T7196] binder: tried to use weak ref as strong ref [ 70.213641][ T7196] binder: 7195:7196 Acquire 1 refcount change on invalid ref 0 ret -22 [ 70.213735][ T7196] binder: 7195:7196 got transaction to invalid handle, 1 [ 70.213744][ T7196] binder: 7195:7196 cannot find target node [ 70.213756][ T7196] binder: 7195:7196 transaction async to 0:0 failed 28/29201/-22, code 0 size 96-24 line 3253 [ 70.214006][ T6853] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.245116][ C0] net_ratelimit: 1627 callbacks suppressed [ 70.262974][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.325053][ T4710] Bluetooth: hci2: command tx timeout [ 70.349526][ T7012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.407696][ T7092] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 70.442972][ T7092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.443376][ T7092] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 70.468465][ T7092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.529781][ T7092] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 70.539713][ T7092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.611474][ T7092] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 70.630928][ T7092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.762127][ T12] bridge_slave_1: left allmulticast mode [ 70.762143][ T12] bridge_slave_1: left promiscuous mode [ 70.762239][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.763731][ T12] bridge_slave_0: left allmulticast mode [ 70.763741][ T12] bridge_slave_0: left promiscuous mode [ 70.763808][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.879588][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.891871][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.926208][ T12] bond0 (unregistering): Released all slaves [ 70.938256][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 71.149654][ T7249] loop2: detected capacity change from 0 to 512 [ 71.160953][ T7249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.172522][ T7249] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.182506][ T1265] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.182522][ T1265] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.182522][ T1265] [ 71.182529][ T1265] EXT4-fs (loop2): Total free blocks count 0 [ 71.182536][ T1265] EXT4-fs (loop2): Free/Dirty block details [ 71.182544][ T1265] EXT4-fs (loop2): free_blocks=65281 [ 71.182552][ T1265] EXT4-fs (loop2): dirty_blocks=1 [ 71.182558][ T1265] EXT4-fs (loop2): Block reservation details [ 71.182564][ T1265] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 71.184802][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.206576][ T4710] Bluetooth: hci3: command 0x0419 tx timeout [ 71.299291][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.299302][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.313171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.313183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.321524][ T7259] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 71.324192][ T7268] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 71.324216][ T7269] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 71.338454][ T12] veth1_macvtap: left promiscuous mode [ 71.338485][ T12] veth0_macvtap: left promiscuous mode [ 71.338541][ T12] veth1_vlan: left promiscuous mode [ 71.338579][ T12] veth0_vlan: left promiscuous mode [ 71.414804][ T7281] loop2: detected capacity change from 0 to 512 [ 71.471558][ T7281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.504093][ T7281] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 71.504106][ T7281] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.504745][ T7281] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 71.504761][ T7281] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.504761][ T7281] [ 71.504770][ T7281] EXT4-fs (loop2): Total free blocks count 0 [ 71.504778][ T7281] EXT4-fs (loop2): Free/Dirty block details [ 71.504788][ T7281] EXT4-fs (loop2): free_blocks=65281 [ 71.504799][ T7281] EXT4-fs (loop2): dirty_blocks=3 [ 71.504806][ T7281] EXT4-fs (loop2): Block reservation details [ 71.504812][ T7281] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 71.534251][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.668844][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.818934][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.819195][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.838749][ T7318] binder: 7317:7318 tried to acquire reference to desc 0, got 1 instead [ 71.841420][ T4799] binder: release 7317:7318 transaction 34 out, still active [ 71.841439][ T4799] binder: undelivered TRANSACTION_COMPLETE [ 71.860382][ T4799] binder: send failed reply for transaction 34, target dead [ 71.883981][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 71.898941][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.963630][ T7092] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.973903][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.973924][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.974509][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.974528][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.015768][ T4710] Bluetooth: Unexpected start frame (len 6) [ 72.066233][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.066256][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.066332][ T7193] bridge_slave_0: entered allmulticast mode [ 72.066985][ T7193] bridge_slave_0: entered promiscuous mode [ 72.080620][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.080811][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.080923][ T7193] bridge_slave_1: entered allmulticast mode [ 72.083393][ T7193] bridge_slave_1: entered promiscuous mode [ 72.127319][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.131296][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.169936][ T12] IPVS: stop unused estimator thread 0... [ 72.171279][ T7193] team0: Port device team_slave_0 added [ 72.174777][ T7193] team0: Port device team_slave_1 added [ 72.194111][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.194116][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.194126][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.194688][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.194695][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.194708][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.241554][ T7193] hsr_slave_0: entered promiscuous mode [ 72.241966][ T7193] hsr_slave_1: entered promiscuous mode [ 72.242238][ T7193] debugfs: 'hsr0' already exists in 'hsr' [ 72.242249][ T7193] Cannot create hsr debugfs directory [ 72.255266][ T4710] Bluetooth: hci0: command tx timeout [ 72.357094][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 72.394301][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.418999][ T4710] Bluetooth: hci2: command tx timeout [ 72.626571][ T7193] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 72.632141][ T7193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.643785][ T7193] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 72.655897][ T7193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.656306][ T7193] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 72.660613][ T7193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.663065][ T7092] veth0_vlan: entered promiscuous mode [ 72.673789][ T7193] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 72.687259][ T7193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.689404][ T7092] veth1_vlan: entered promiscuous mode [ 72.720365][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 72.721081][ T7092] veth0_macvtap: entered promiscuous mode [ 72.722833][ T7092] veth1_macvtap: entered promiscuous mode [ 72.743651][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.753289][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.762411][ T7392] phram: illegal device length [ 72.775259][ T1187] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.775725][ T1187] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.775795][ T1187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.775850][ T1187] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.823699][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.851117][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.893996][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.894022][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.894429][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.894449][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.900901][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.900911][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.924319][ T7404] binder: tried to use weak ref as strong ref [ 72.924328][ T7404] binder: 7402:7404 Acquire 1 refcount change on invalid ref 0 ret -22 [ 72.924440][ T7404] binder: 7402:7404 got transaction to invalid handle, 1 [ 72.924451][ T7404] binder: 7402:7404 cannot find target node [ 72.973297][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.973307][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.034460][ T4400] 8021q: adding VLAN 0 to HW filter on device eth16 [ 73.112868][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.168934][ T7193] veth0_vlan: entered promiscuous mode [ 73.172826][ T7193] veth1_vlan: entered promiscuous mode [ 73.192608][ T7193] veth0_macvtap: entered promiscuous mode [ 73.194264][ T7193] veth1_macvtap: entered promiscuous mode [ 73.203894][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.213772][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.261984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.261997][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.290880][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.290889][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.295413][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296363][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296580][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296692][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.391714][ T7453] loop7: detected capacity change from 0 to 512 [ 73.441835][ T7453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.453229][ T7453] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 73.453523][ T7453] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 73.453539][ T7453] EXT4-fs (loop7): This should not happen!! Data will be lost [ 73.453539][ T7453] [ 73.453550][ T7453] EXT4-fs (loop7): Total free blocks count 0 [ 73.453558][ T7453] EXT4-fs (loop7): Free/Dirty block details [ 73.453566][ T7453] EXT4-fs (loop7): free_blocks=65281 [ 73.453575][ T7453] EXT4-fs (loop7): dirty_blocks=3 [ 73.453581][ T7453] EXT4-fs (loop7): Block reservation details [ 73.453588][ T7453] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 73.474694][ T4400] 8021q: adding VLAN 0 to HW filter on device eth17 [ 73.478493][ T7464] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.489690][ T6001] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.586363][ T7477] tcf_pedit_act: 7 callbacks suppressed [ 73.586384][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586393][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586401][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586407][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586413][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586418][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586424][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586429][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586434][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.586439][ T7477] tc action pedit offset must be on 32 bit boundaries [ 73.668556][ T7496] loop6: detected capacity change from 0 to 512 [ 73.669033][ T7496] EXT4-fs: Ignoring removed bh option [ 73.670693][ T7496] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 73.688887][ T4714] Bluetooth: hci4: unexpected cc 0x080e length: 5 > 3 [ 73.710637][ T7496] EXT4-fs (loop6): 1 truncate cleaned up [ 73.711448][ T7496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.730178][ T7506] loop9: detected capacity change from 0 to 512 [ 73.743965][ T4400] 8021q: adding VLAN 0 to HW filter on device eth18 [ 73.787159][ T7506] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.789060][ T5141] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.844820][ T7193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.915431][ T7515] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 74.160793][ T4400] 8021q: adding VLAN 0 to HW filter on device eth19 [ 74.264474][ T7551] loop2: detected capacity change from 0 to 512 [ 74.307659][ T7551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.326487][ T4714] Bluetooth: hci0: command tx timeout [ 74.338446][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.485039][ T4714] Bluetooth: hci2: command tx timeout [ 74.520879][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.521946][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.578961][ T7587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.578980][ T7587] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.748696][ T7605] netlink: 'syz.6.852': attribute type 30 has an invalid length. [ 74.769153][ T7596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.769168][ T7596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.827323][ T7596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.827343][ T7596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.919664][ T7596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.919694][ T7596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 75.125145][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 75.137643][ T1265] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 75.137667][ T1265] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.145046][ T1234] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 75.145070][ T1234] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.145090][ T1234] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 75.145100][ T1234] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.145115][ T1234] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 75.145125][ T1234] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.173510][ T1265] IPVS: starting estimator thread 0... [ 75.209720][ T7644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.281039][ T7658] net_ratelimit: 1610 callbacks suppressed [ 75.287826][ T7639] IPVS: using max 44 ests per chain, 105600 per kthread [ 75.502351][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.8.883'. [ 75.532233][ T7681] netlink: 56 bytes leftover after parsing attributes in process `syz.9.884'. [ 75.662985][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.663256][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.791829][ T7707] warn_alloc: 1 callbacks suppressed [ 75.791837][ T7707] syz.2.894: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 75.791885][ T7707] CPU: 0 UID: 0 PID: 7707 Comm: syz.2.894 Tainted: G L syzkaller #0 PREEMPT [ 75.791897][ T7707] Tainted: [L]=SOFTLOCKUP [ 75.791901][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.791914][ T7707] Call trace: [ 75.791917][ T7707] show_stack+0x2c/0x3c (C) [ 75.791937][ T7707] __dump_stack+0x30/0x40 [ 75.791951][ T7707] dump_stack_lvl+0xd8/0x12c [ 75.791963][ T7707] dump_stack+0x1c/0x28 [ 75.791974][ T7707] warn_alloc+0x1c4/0x1d8 [ 75.791984][ T7707] __vmalloc_node_range_noprof+0xc28/0xe9c [ 75.791996][ T7707] __kvmalloc_node_noprof+0x49c/0x7fc [ 75.792006][ T7707] ip_set_alloc+0x30/0x40 [ 75.792017][ T7707] hash_ipportnet_create+0x2b0/0xcd0 [ 75.792028][ T7707] ip_set_create+0x4ac/0x1108 [ 75.792038][ T7707] nfnetlink_rcv_msg+0xad8/0x1044 [ 75.792049][ T7707] netlink_rcv_skb+0x238/0x414 [ 75.792061][ T7707] nfnetlink_rcv+0x218/0x16ec [ 75.792070][ T7707] netlink_unicast+0x600/0x7f8 [ 75.792081][ T7707] netlink_sendmsg+0x648/0x948 [ 75.792093][ T7707] __sock_sendmsg+0xc8/0x17c [ 75.792105][ T7707] ____sys_sendmsg+0x3d0/0x6c8 [ 75.792117][ T7707] ___sys_sendmsg+0x198/0x224 [ 75.792129][ T7707] __sys_sendmsg+0x158/0x204 [ 75.792141][ T7707] __arm64_sys_sendmsg+0x88/0x9c [ 75.792152][ T7707] invoke_syscall+0x98/0x244 [ 75.792165][ T7707] el0_svc_common+0xec/0x23c [ 75.792177][ T7707] do_el0_svc+0x4c/0x5c [ 75.792188][ T7707] el0_svc+0x60/0x1d8 [ 75.792198][ T7707] el0t_64_sync_handler+0x44/0x104 [ 75.792206][ T7707] el0t_64_sync+0x198/0x19c [ 75.792216][ T7707] Mem-Info: [ 75.792221][ T7707] active_anon:22 inactive_anon:17200 isolated_anon:0 [ 75.792221][ T7707] active_file:3215 inactive_file:19929 isolated_file:0 [ 75.792221][ T7707] unevictable:768 dirty:311 writeback:0 [ 75.792221][ T7707] slab_reclaimable:9695 slab_unreclaimable:93129 [ 75.792221][ T7707] mapped:36451 shmem:11493 pagetables:1478 [ 75.792221][ T7707] sec_pagetables:0 bounce:0 [ 75.792221][ T7707] kernel_misc_reclaimable:0 [ 75.792221][ T7707] free:1439710 free_pcp:15451 free_cma:7616 [ 75.792243][ T7707] Node 0 active_anon:88kB inactive_anon:68800kB active_file:12860kB inactive_file:79716kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:145704kB dirty:1244kB writeback:0kB shmem:45972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10460kB pagetables:5912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 75.792265][ T7707] Node 0 DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 75.792289][ T7707] lowmem_reserve[]: 0 0 3637 3637 3637 [ 75.792308][ T7707] Node 0 Normal free:2680952kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:68800kB active_file:12860kB inactive_file:79716kB unevictable:3072kB writepending:1244kB zspages:0kB present:5242880kB managed:3724676kB mlocked:0kB bounce:0kB free_pcp:61800kB local_pcp:33692kB free_cma:0kB [ 75.792334][ T7707] lowmem_reserve[]: 0 0 0 0 0 [ 75.792351][ T7707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 75.792419][ T7707] Node 0 Normal: 5296*4kB (UME) 8681*8kB (UM) 1003*16kB (UM) 418*32kB (UME) 500*64kB (UME) 159*128kB (UME) 85*256kB (UME) 31*512kB (UM) 11*1024kB (M) 5*2048kB (M) 598*4096kB (UM) = 2680952kB [ 75.792499][ T7707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.792506][ T7707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 75.792513][ T7707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 75.792520][ T7707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 75.792527][ T7707] 34633 total pagecache pages [ 75.792531][ T7707] 0 pages in swap cache [ 75.792535][ T7707] Free swap = 124996kB [ 75.792538][ T7707] Total swap = 124996kB [ 75.792542][ T7707] 2097152 pages RAM [ 75.792545][ T7707] 0 pages HighMem/MovableOnly [ 75.792549][ T7707] 395935 pages reserved [ 75.792552][ T7707] 8192 pages cma reserved [ 75.792556][ T7707] 0 pages hwpoisoned [ 76.038921][ T7742] syzkaller0: entered promiscuous mode [ 76.038929][ T7742] syzkaller0: entered allmulticast mode [ 76.041644][ T7743] binder_user_error: 2 callbacks suppressed [ 76.041655][ T7743] binder: 7741:7743 tried to acquire reference to desc 0, got 1 instead [ 76.041839][ T7743] binder: 7741:7743 got transaction with invalid offsets ptr [ 76.041871][ T7743] binder_debug: 2 callbacks suppressed [ 76.041876][ T7743] binder: 7741:7743 transaction call to 7741:0 failed 47/29201/-22, code 0 size 104-24 line 3754 [ 76.042771][ T4891] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.113532][ T7752] loop2: detected capacity change from 0 to 512 [ 76.129755][ T7752] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 76.129775][ T7752] fserror_report: 3 callbacks suppressed [ 76.129782][ T7752] loop2: lost filesystem error report for type 5 error -12 [ 76.134998][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 76.135015][ C0] EXT4-fs (loop2): initial error at time 76: ext4_process_orphan:346 [ 76.135030][ C0] EXT4-fs (loop2): last error at time 76: ext4_process_orphan:346 [ 76.148356][ T7752] EXT4-fs (loop2): 2 truncates cleaned up [ 76.150889][ T7752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.162388][ T7752] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.907: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 76.171621][ T7752] ubi: mtd0 is already attached to ubi0 [ 76.197884][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.342146][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.342465][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.382634][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.922'. [ 76.538918][ T7818] tipc: Started in network mode [ 76.538927][ T7818] tipc: Node identity 2000004, cluster identity 4711 [ 76.538934][ T7818] tipc: Node number set to 33554436 [ 76.565223][ T4714] Bluetooth: hci2: command tx timeout [ 76.681763][ T7834] FAULT_INJECTION: forcing a failure. [ 76.681763][ T7834] name failslab, interval 1, probability 5, space 0, times 9993 [ 76.681780][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.7.936 Tainted: G L syzkaller #0 PREEMPT [ 76.681792][ T7834] Tainted: [L]=SOFTLOCKUP [ 76.681796][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.681809][ T7834] Call trace: [ 76.681812][ T7834] show_stack+0x2c/0x3c (C) [ 76.681833][ T7834] __dump_stack+0x30/0x40 [ 76.681848][ T7834] dump_stack_lvl+0xd8/0x12c [ 76.681860][ T7834] dump_stack+0x1c/0x28 [ 76.681872][ T7834] should_fail_ex+0x418/0x58c [ 76.681881][ T7834] should_failslab+0xc4/0x120 [ 76.681891][ T7834] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 76.681901][ T7834] bdev_alloc_inode+0x30/0x9c [ 76.681912][ T7834] alloc_inode+0x68/0x198 [ 76.681924][ T7834] new_inode+0x20/0x50 [ 76.681936][ T7834] bdev_alloc+0x34/0x33c [ 76.681944][ T7834] __alloc_disk_node+0x104/0x494 [ 76.681953][ T7834] __blk_alloc_disk+0xec/0x1a8 [ 76.681962][ T7834] dm_create+0x3ec/0xd94 [ 76.681974][ T7834] dev_create+0x108/0x258 [ 76.681985][ T7834] dm_ctl_ioctl+0x884/0xbbc [ 76.681994][ T7834] __arm64_sys_ioctl+0x154/0x1cc [ 76.682003][ T7834] invoke_syscall+0x98/0x244 [ 76.682016][ T7834] el0_svc_common+0xec/0x23c [ 76.682029][ T7834] do_el0_svc+0x4c/0x5c [ 76.682041][ T7834] el0_svc+0x60/0x1d8 [ 76.682050][ T7834] el0t_64_sync_handler+0x44/0x104 [ 76.682059][ T7834] el0t_64_sync+0x198/0x19c [ 76.951057][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.951245][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.129139][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.137681][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.364524][ T7866] lo speed is unknown, defaulting to 1000 [ 77.369418][ T7866] lo speed is unknown, defaulting to 1000 [ 77.391179][ T7866] lo speed is unknown, defaulting to 1000 [ 77.392601][ T7866] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.394151][ T7866] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.397093][ T1234] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.397127][ T1234] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.397144][ T1234] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.397159][ T1234] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.416887][ T7866] lo speed is unknown, defaulting to 1000 [ 77.417747][ T7866] lo speed is unknown, defaulting to 1000 [ 77.418128][ T7866] lo speed is unknown, defaulting to 1000 [ 77.418514][ T7866] lo speed is unknown, defaulting to 1000 [ 77.418885][ T7866] lo speed is unknown, defaulting to 1000 [ 77.734192][ T7914] loop6: detected capacity change from 0 to 1024 [ 77.760322][ T7914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.767650][ T7917] tmpfs: Bad value for 'huge' [ 77.796524][ T5141] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.046632][ T7956] tmpfs: Bad value for 'huge' [ 78.070228][ T7960] netlink: 200 bytes leftover after parsing attributes in process `syz.8.978'. [ 78.071725][ T7960] FAULT_INJECTION: forcing a failure. [ 78.071725][ T7960] name failslab, interval 1, probability 5, space 0, times 9992 [ 78.071743][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.8.978 Tainted: G L syzkaller #0 PREEMPT [ 78.071756][ T7960] Tainted: [L]=SOFTLOCKUP [ 78.071759][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.071773][ T7960] Call trace: [ 78.071776][ T7960] show_stack+0x2c/0x3c (C) [ 78.071798][ T7960] __dump_stack+0x30/0x40 [ 78.071811][ T7960] dump_stack_lvl+0xd8/0x12c [ 78.071823][ T7960] dump_stack+0x1c/0x28 [ 78.071835][ T7960] should_fail_ex+0x418/0x58c [ 78.071844][ T7960] should_failslab+0xc4/0x120 [ 78.071854][ T7960] __kmalloc_cache_noprof+0x94/0x5fc [ 78.071864][ T7960] __arm64_sys_mount+0x188/0x388 [ 78.071876][ T7960] invoke_syscall+0x98/0x244 [ 78.071889][ T7960] el0_svc_common+0xec/0x23c [ 78.071902][ T7960] do_el0_svc+0x4c/0x5c [ 78.071913][ T7960] el0_svc+0x60/0x1d8 [ 78.071923][ T7960] el0t_64_sync_handler+0x44/0x104 [ 78.071931][ T7960] el0t_64_sync+0x198/0x19c [ 78.072184][ T7960] FAULT_INJECTION: forcing a failure. [ 78.072184][ T7960] name failslab, interval 1, probability 5, space 0, times 9991 [ 78.072252][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.8.978 Tainted: G L syzkaller #0 PREEMPT [ 78.072264][ T7960] Tainted: [L]=SOFTLOCKUP [ 78.072267][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.072278][ T7960] Call trace: [ 78.072281][ T7960] show_stack+0x2c/0x3c (C) [ 78.072294][ T7960] __dump_stack+0x30/0x40 [ 78.072306][ T7960] dump_stack_lvl+0xd8/0x12c [ 78.072318][ T7960] dump_stack+0x1c/0x28 [ 78.072329][ T7960] should_fail_ex+0x418/0x58c [ 78.072337][ T7960] should_failslab+0xc4/0x120 [ 78.072345][ T7960] __kmalloc_cache_noprof+0x94/0x5fc [ 78.072355][ T7960] shrinker_alloc+0x68/0x9b0 [ 78.072367][ T7960] sget_fc+0xbd0/0x1520 [ 78.072386][ T7960] vfs_get_super+0x40/0x148 [ 78.072396][ T7960] get_tree_nodev+0x2c/0x3c [ 78.072407][ T7960] mqueue_get_tree+0xac/0xe8 [ 78.072417][ T7960] vfs_get_tree+0x90/0x28c [ 78.072427][ T7960] fc_mount+0x24/0xac [ 78.072438][ T7960] fc_mount_longterm+0x20/0x74 [ 78.072449][ T7960] mq_init_ns+0x3c8/0x638 [ 78.072457][ T7960] copy_ipcs+0x3c8/0x63c [ 78.072465][ T7960] create_new_namespaces+0x1a8/0x50c [ 78.072476][ T7960] unshare_nsproxy_namespaces+0x120/0x170 [ 78.072487][ T7960] ksys_unshare+0x438/0x6e0 [ 78.072497][ T7960] __arm64_sys_unshare+0x40/0x54 [ 78.072507][ T7960] invoke_syscall+0x98/0x244 [ 78.072519][ T7960] el0_svc_common+0xec/0x23c [ 78.072531][ T7960] do_el0_svc+0x4c/0x5c [ 78.072543][ T7960] el0_svc+0x60/0x1d8 [ 78.072551][ T7960] el0t_64_sync_handler+0x44/0x104 [ 78.072560][ T7960] el0t_64_sync+0x198/0x19c [ 78.078181][ T7954] vlan2: entered allmulticast mode [ 78.078199][ T7954] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 78.167313][ T7960] lo speed is unknown, defaulting to 1000 [ 78.186098][ T4714] block nbd7: Receive control failed (result -32) [ 78.190286][ T7960] FAULT_INJECTION: forcing a failure. [ 78.190286][ T7960] name failslab, interval 1, probability 5, space 0, times 9990 [ 78.190305][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.8.978 Tainted: G L syzkaller #0 PREEMPT [ 78.190318][ T7960] Tainted: [L]=SOFTLOCKUP [ 78.190321][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.190334][ T7960] Call trace: [ 78.190336][ T7960] show_stack+0x2c/0x3c (C) [ 78.190353][ T7960] __dump_stack+0x30/0x40 [ 78.190364][ T7960] dump_stack_lvl+0xd8/0x12c [ 78.190380][ T7960] dump_stack+0x1c/0x28 [ 78.190390][ T7960] should_fail_ex+0x418/0x58c [ 78.190399][ T7960] should_failslab+0xc4/0x120 [ 78.190408][ T7960] __kvmalloc_node_noprof+0x160/0x7fc [ 78.190418][ T7960] alloc_netdev_mqs+0xa50/0xf34 [ 78.190428][ T7960] sit_init_net+0x13c/0x43c [ 78.190439][ T7960] ops_init+0x2cc/0x528 [ 78.190449][ T7960] setup_net+0x118/0x2fc [ 78.190459][ T7960] copy_net_ns+0x454/0x698 [ 78.190468][ T7960] create_new_namespaces+0x304/0x50c [ 78.190479][ T7960] unshare_nsproxy_namespaces+0x120/0x170 [ 78.190489][ T7960] ksys_unshare+0x438/0x6e0 [ 78.190498][ T7960] __arm64_sys_unshare+0x40/0x54 [ 78.190506][ T7960] invoke_syscall+0x98/0x244 [ 78.190517][ T7960] el0_svc_common+0xec/0x23c [ 78.190527][ T7960] do_el0_svc+0x4c/0x5c [ 78.190537][ T7960] el0_svc+0x60/0x1d8 [ 78.190546][ T7960] el0t_64_sync_handler+0x44/0x104 [ 78.190554][ T7960] el0t_64_sync+0x198/0x19c [ 78.217820][ T7962] block nbd7: shutting down sockets [ 78.246643][ T7969] Bluetooth: MGMT ver 1.23 [ 78.246780][ T7964] lo speed is unknown, defaulting to 1000 [ 78.582329][ T7985] tmpfs: Bad value for 'huge' [ 78.827271][ T8021] tmpfs: Bad value for 'huge' [ 78.853596][ T8025] netlink: 'syz.9.1005': attribute type 21 has an invalid length. [ 78.853657][ T8025] netlink: 'syz.9.1005': attribute type 1 has an invalid length. [ 78.853668][ T8025] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1005'. [ 78.876686][ T8029] binder: 8028:8029 tried to acquire reference to desc 0, got 1 instead [ 78.876826][ T8029] binder: 8028:8029 got transaction with invalid parent offset or type [ 78.876836][ T8029] binder: 8029:8028 failed to fixup parent [ 78.876868][ T8029] binder: 8028:8029 transaction call to 8028:0 failed 52/29201/-22, code 0 size 104-24 line 3718 [ 78.877068][ T4816] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.986252][ T8043] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1013'. [ 79.025423][ T8049] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1017'. [ 79.025436][ T8049] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1017'. [ 79.031137][ T8052] tmpfs: Bad value for 'huge' [ 79.114747][ T8061] netlink: 'syz.7.1022': attribute type 1 has an invalid length. [ 79.114762][ T8061] netlink: 1260 bytes leftover after parsing attributes in process `syz.7.1022'. [ 79.245104][ T8081] tmpfs: Bad value for 'huge' [ 79.316705][ T8089] binder: 8087 invalid dec weak, ref 54 desc 0 s 1 w 0 [ 79.316729][ T8089] binder: 8087:8089 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.316741][ T8089] binder: 8089 RLIMIT_NICE not set [ 79.351686][ T8093] loop8: detected capacity change from 0 to 512 [ 79.381498][ T8093] EXT4-fs (loop8): Test dummy encryption mode enabled [ 79.395258][ T8093] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 79.396045][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.396298][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.397637][ T8093] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 79.398100][ T8093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.434117][ T7092] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.439854][ T8111] loop7: detected capacity change from 0 to 2048 [ 79.460950][ T8112] tmpfs: Bad value for 'huge' [ 79.492956][ T8111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.507121][ T8111] FAULT_INJECTION: forcing a failure. [ 79.507121][ T8111] name failslab, interval 1, probability 5, space 0, times 9989 [ 79.507144][ T8111] CPU: 0 UID: 0 PID: 8111 Comm: syz.7.1046 Tainted: G L syzkaller #0 PREEMPT [ 79.507157][ T8111] Tainted: [L]=SOFTLOCKUP [ 79.507160][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.507175][ T8111] Call trace: [ 79.507178][ T8111] show_stack+0x2c/0x3c (C) [ 79.507199][ T8111] __dump_stack+0x30/0x40 [ 79.507214][ T8111] dump_stack_lvl+0xd8/0x12c [ 79.507226][ T8111] dump_stack+0x1c/0x28 [ 79.507238][ T8111] should_fail_ex+0x418/0x58c [ 79.507248][ T8111] should_failslab+0xc4/0x120 [ 79.507257][ T8111] __kmalloc_cache_noprof+0x94/0x5fc [ 79.507269][ T8111] apply_subsystem_event_filter+0x19c/0x10dc [ 79.507284][ T8111] subsystem_filter_write+0xa0/0x108 [ 79.507294][ T8111] vfs_write+0x2a4/0xa0c [ 79.507304][ T8111] ksys_write+0x12c/0x228 [ 79.507312][ T8111] __arm64_sys_write+0x84/0x98 [ 79.507320][ T8111] invoke_syscall+0x98/0x244 [ 79.507334][ T8111] el0_svc_common+0xec/0x23c [ 79.507346][ T8111] do_el0_svc+0x4c/0x5c [ 79.507358][ T8111] el0_svc+0x60/0x1d8 [ 79.507367][ T8111] el0t_64_sync_handler+0x44/0x104 [ 79.507388][ T8111] el0t_64_sync+0x198/0x19c [ 79.540931][ T8120] FAULT_INJECTION: forcing a failure. [ 79.540931][ T8120] name failslab, interval 1, probability 5, space 0, times 10000 [ 79.540949][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.6.1049 Tainted: G L syzkaller #0 PREEMPT [ 79.540962][ T8120] Tainted: [L]=SOFTLOCKUP [ 79.540965][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.540979][ T8120] Call trace: [ 79.540982][ T8120] show_stack+0x2c/0x3c (C) [ 79.541001][ T8120] __dump_stack+0x30/0x40 [ 79.541014][ T8120] dump_stack_lvl+0xd8/0x12c [ 79.541026][ T8120] dump_stack+0x1c/0x28 [ 79.541037][ T8120] should_fail_ex+0x418/0x58c [ 79.541047][ T8120] should_failslab+0xc4/0x120 [ 79.541056][ T8120] __kmalloc_cache_noprof+0x94/0x5fc [ 79.541066][ T8120] vidtv_psi_pat_program_init+0x64/0x228 [ 79.541079][ T8120] vidtv_channel_s302m_init+0x1f4/0x784 [ 79.541091][ T8120] vidtv_channels_init+0x4c/0x94 [ 79.541102][ T8120] vidtv_mux_init+0x370/0x7e4 [ 79.541114][ T8120] vidtv_start_feed+0x2e0/0x49c [ 79.541124][ T8120] dmx_ts_feed_start_filtering+0x124/0x1fc [ 79.541134][ T8120] dvb_dmxdev_start_feed+0x1f4/0x2dc [ 79.541147][ T8120] dvb_dmxdev_filter_start+0x1bc/0xa8c [ 79.541159][ T8120] dvb_demux_do_ioctl+0x41c/0x4bc [ 79.541171][ T8120] dvb_usercopy+0x2a4/0x4d4 [ 79.541182][ T8120] dvb_demux_ioctl+0x3c/0x54 [ 79.541194][ T8120] __arm64_sys_ioctl+0x154/0x1cc [ 79.541203][ T8120] invoke_syscall+0x98/0x244 [ 79.541215][ T8120] el0_svc_common+0xec/0x23c [ 79.541227][ T8120] do_el0_svc+0x4c/0x5c [ 79.541239][ T8120] el0_svc+0x60/0x1d8 [ 79.541248][ T8120] el0t_64_sync_handler+0x44/0x104 [ 79.541257][ T8120] el0t_64_sync+0x198/0x19c [ 79.541923][ T8120] FAULT_INJECTION: forcing a failure. [ 79.541923][ T8120] name failslab, interval 1, probability 5, space 0, times 9999 [ 79.541938][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.6.1049 Tainted: G L syzkaller #0 PREEMPT [ 79.541953][ T8120] Tainted: [L]=SOFTLOCKUP [ 79.541957][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.541968][ T8120] Call trace: [ 79.541970][ T8120] show_stack+0x2c/0x3c (C) [ 79.541984][ T8120] __dump_stack+0x30/0x40 [ 79.541995][ T8120] dump_stack_lvl+0xd8/0x12c [ 79.542007][ T8120] dump_stack+0x1c/0x28 [ 79.542018][ T8120] should_fail_ex+0x418/0x58c [ 79.542026][ T8120] should_failslab+0xc4/0x120 [ 79.542034][ T8120] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 79.542044][ T8120] __d_alloc+0x50/0x600 [ 79.542053][ T8120] d_alloc_pseudo+0x2c/0xd8 [ 79.542062][ T8120] alloc_path_pseudo+0xe8/0x1d4 [ 79.542072][ T8120] alloc_file_pseudo+0xb0/0x198 [ 79.542081][ T8120] __shmem_file_setup+0x210/0x284 [ 79.542094][ T8120] shmem_file_setup+0x40/0x54 [ 79.542106][ T8120] memfd_alloc_file+0x9c/0x2f0 [ 79.542116][ T8120] __arm64_sys_memfd_create+0x318/0x3ec [ 79.542127][ T8120] invoke_syscall+0x98/0x244 [ 79.542139][ T8120] el0_svc_common+0xec/0x23c [ 79.542151][ T8120] do_el0_svc+0x4c/0x5c [ 79.542162][ T8120] el0_svc+0x60/0x1d8 [ 79.542170][ T8120] el0t_64_sync_handler+0x44/0x104 [ 79.542179][ T8120] el0t_64_sync+0x198/0x19c [ 79.542848][ T8120] FAULT_INJECTION: forcing a failure. [ 79.542848][ T8120] name failslab, interval 1, probability 5, space 0, times 9998 [ 79.542860][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.6.1049 Tainted: G L syzkaller #0 PREEMPT [ 79.542871][ T8120] Tainted: [L]=SOFTLOCKUP [ 79.542874][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.542885][ T8120] Call trace: [ 79.542887][ T8120] show_stack+0x2c/0x3c (C) [ 79.542901][ T8120] __dump_stack+0x30/0x40 [ 79.542912][ T8120] dump_stack_lvl+0xd8/0x12c [ 79.542924][ T8120] dump_stack+0x1c/0x28 [ 79.542936][ T8120] should_fail_ex+0x418/0x58c [ 79.542944][ T8120] should_failslab+0xc4/0x120 [ 79.542952][ T8120] __kmalloc_noprof+0x108/0x6c8 [ 79.542961][ T8120] tomoyo_realpath_from_path+0xbc/0x4dc [ 79.542974][ T8120] tomoyo_path_number_perm+0x1f0/0x500 [ 79.542985][ T8120] tomoyo_file_ioctl+0x2c/0x3c [ 79.542998][ T8120] security_file_ioctl+0xdc/0x2b0 [ 79.543009][ T8120] __arm64_sys_ioctl+0xb0/0x1cc [ 79.543017][ T8120] invoke_syscall+0x98/0x244 [ 79.543029][ T8120] el0_svc_common+0xec/0x23c [ 79.543041][ T8120] do_el0_svc+0x4c/0x5c [ 79.543053][ T8120] el0_svc+0x60/0x1d8 [ 79.543060][ T8120] el0t_64_sync_handler+0x44/0x104 [ 79.543069][ T8120] el0t_64_sync+0x198/0x19c [ 79.543078][ T8120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.543092][ T8120] FAULT_INJECTION: forcing a failure. [ 79.543092][ T8120] name failslab, interval 1, probability 5, space 0, times 9997 [ 79.543102][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.6.1049 Tainted: G L syzkaller #0 PREEMPT [ 79.543113][ T8120] Tainted: [L]=SOFTLOCKUP [ 79.543116][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.543126][ T8120] Call trace: [ 79.543129][ T8120] show_stack+0x2c/0x3c (C) [ 79.543141][ T8120] __dump_stack+0x30/0x40 [ 79.543152][ T8120] dump_stack_lvl+0xd8/0x12c [ 79.543164][ T8120] dump_stack+0x1c/0x28 [ 79.543176][ T8120] should_fail_ex+0x418/0x58c [ 79.543184][ T8120] should_failslab+0xc4/0x120 [ 79.543191][ T8120] __kmalloc_cache_noprof+0x94/0x5fc [ 79.543201][ T8120] __request_module+0x2dc/0x670 [ 79.543210][ T8120] dev_load+0x1c0/0x218 [ 79.543219][ T8120] dev_ioctl+0x48c/0xc88 [ 79.543227][ T8120] sock_do_ioctl+0x198/0x254 [ 79.543235][ T8120] sock_ioctl+0x55c/0x7ec [ 79.543248][ T8120] __arm64_sys_ioctl+0x154/0x1cc [ 79.543256][ T8120] invoke_syscall+0x98/0x244 [ 79.543268][ T8120] el0_svc_common+0xec/0x23c [ 79.543280][ T8120] do_el0_svc+0x4c/0x5c [ 79.543291][ T8120] el0_svc+0x60/0x1d8 [ 79.543299][ T8120] el0t_64_sync_handler+0x44/0x104 [ 79.543308][ T8120] el0t_64_sync+0x198/0x19c [ 79.584860][ T6001] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #17: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 79.585297][ T6001] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #17: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 79.589252][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 79.620011][ T6409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.681049][ T8129] syzkaller0: entered promiscuous mode [ 79.681059][ T8129] syzkaller0: entered allmulticast mode [ 79.860366][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.933640][ T4710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.942148][ T4710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.946844][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.952524][ T4710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.954091][ T4710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.954614][ T4710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.022942][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.083885][ T8147] lo speed is unknown, defaulting to 1000 [ 80.191803][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.251204][ T8175] syzkaller0: entered promiscuous mode [ 80.251219][ T8175] syzkaller0: entered allmulticast mode [ 80.324943][ C0] net_ratelimit: 3054 callbacks suppressed [ 80.327555][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.327855][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.570292][ T12] bond0 (unregistering): Released all slaves [ 80.573679][ T12] bond1 (unregistering): Released all slaves [ 80.587613][ T12] bond2 (unregistering): Released all slaves [ 80.636363][ T8202] ieee802154 phy0 wpan0: encryption failed: -126 [ 80.660710][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.661263][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.661410][ T8147] bridge_slave_0: entered allmulticast mode [ 80.663185][ T8147] bridge_slave_0: entered promiscuous mode [ 80.684792][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.684857][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.688674][ T8147] bridge_slave_1: entered allmulticast mode [ 80.689220][ T8147] bridge_slave_1: entered promiscuous mode [ 80.710600][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.711705][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.750673][ T8147] team0: Port device team_slave_0 added [ 80.751514][ T8147] team0: Port device team_slave_1 added [ 80.831053][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.831059][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.831071][ T8147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.834028][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.834034][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.834046][ T8147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.906092][ T8147] hsr_slave_0: entered promiscuous mode [ 80.907079][ T8147] hsr_slave_1: entered promiscuous mode [ 80.907348][ T8147] debugfs: 'hsr0' already exists in 'hsr' [ 80.907357][ T8147] Cannot create hsr debugfs directory [ 80.912978][ T12] hsr_slave_0: left promiscuous mode [ 80.913401][ T12] hsr_slave_1: left promiscuous mode [ 80.925574][ T12] veth1_macvtap: left promiscuous mode [ 80.925602][ T12] veth0_macvtap: left promiscuous mode [ 80.925653][ T12] veth1_vlan: left promiscuous mode [ 80.925687][ T12] veth0_vlan: left promiscuous mode [ 81.144425][ T8238] usb usb8: usbfs: process 8238 (syz.9.1083) did not claim interface 0 before use [ 81.454038][ T8253] ieee802154 phy0 wpan0: encryption failed: -126 [ 81.823107][ T8281] FAULT_INJECTION: forcing a failure. [ 81.823107][ T8281] name failslab, interval 1, probability 5, space 0, times 9995 [ 81.823134][ T8281] CPU: 0 UID: 0 PID: 8281 Comm: syz.9.1100 Tainted: G L syzkaller #0 PREEMPT [ 81.823147][ T8281] Tainted: [L]=SOFTLOCKUP [ 81.823151][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.823165][ T8281] Call trace: [ 81.823168][ T8281] show_stack+0x2c/0x3c (C) [ 81.823190][ T8281] __dump_stack+0x30/0x40 [ 81.823203][ T8281] dump_stack_lvl+0xd8/0x12c [ 81.823215][ T8281] dump_stack+0x1c/0x28 [ 81.823226][ T8281] should_fail_ex+0x418/0x58c [ 81.823235][ T8281] should_failslab+0xc4/0x120 [ 81.823245][ T8281] __kmalloc_noprof+0x108/0x6c8 [ 81.823254][ T8281] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 81.823264][ T8281] memcg_list_lru_alloc+0xc4/0xf8 [ 81.823273][ T8281] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 81.823287][ T8281] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 81.823296][ T8281] __d_alloc+0x50/0x600 [ 81.823306][ T8281] d_make_root+0x48/0x90 [ 81.823315][ T8281] bpf_fill_super+0x268/0x6dc [ 81.823328][ T8281] vfs_get_super+0xb8/0x148 [ 81.823339][ T8281] get_tree_nodev+0x2c/0x3c [ 81.823349][ T8281] bpf_get_tree+0x28/0x38 [ 81.823361][ T8281] vfs_get_tree+0x90/0x28c [ 81.823379][ T8281] vfs_cmd_create+0xb8/0x1d0 [ 81.823390][ T8281] vfs_fsconfig_locked+0x17c/0x2bc [ 81.823401][ T8281] __arm64_sys_fsconfig+0x634/0x72c [ 81.823411][ T8281] invoke_syscall+0x98/0x244 [ 81.823424][ T8281] el0_svc_common+0xec/0x23c [ 81.823436][ T8281] do_el0_svc+0x4c/0x5c [ 81.823447][ T8281] el0_svc+0x60/0x1d8 [ 81.823457][ T8281] el0t_64_sync_handler+0x44/0x104 [ 81.823465][ T8281] el0t_64_sync+0x198/0x19c [ 81.869475][ T8269] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 81.979788][ T4400] 8021q: adding VLAN 0 to HW filter on device eth20 [ 82.005159][ T4710] Bluetooth: hci3: command tx timeout [ 82.341726][ T4400] 8021q: adding VLAN 0 to HW filter on device eth21 [ 82.498351][ T8345] ubi: mtd0 is already attached to ubi0 [ 82.501786][ T8337] ubi0 error: ubi_open_volume: cannot open device 0, volume 7, error -19 [ 82.501810][ T8337] ubi0 error: rename_volumes: cannot open volume 7, error -19 [ 82.519387][ T4400] 8021q: adding VLAN 0 to HW filter on device eth22 [ 82.681640][ T4400] 8021q: adding VLAN 0 to HW filter on device eth23 [ 82.791988][ T8380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.139942][ T8438] syzkaller1: entered promiscuous mode [ 83.139953][ T8438] syzkaller1: entered allmulticast mode [ 83.609577][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 83.609594][ T30] audit: type=1326 audit(83.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.9.1142" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f7a9a8 code=0x0 [ 83.803708][ T8497] binder: 8496:8497 tried to acquire reference to desc 0, got 1 instead [ 83.804270][ T4816] binder: release 8496:8497 transaction 60 out, still active [ 83.817845][ T4816] binder: undelivered transaction 59, process died. [ 83.817870][ T4816] binder: send failed reply for transaction 60, target dead [ 84.085300][ T4710] Bluetooth: hci3: command tx timeout [ 84.111023][ T8534] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.148337][ T8537] FAULT_INJECTION: forcing a failure. [ 84.148337][ T8537] name failslab, interval 1, probability 5, space 0, times 9994 [ 84.148619][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.6.1160 Tainted: G L syzkaller #0 PREEMPT [ 84.148635][ T8537] Tainted: [L]=SOFTLOCKUP [ 84.148638][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.148653][ T8537] Call trace: [ 84.148656][ T8537] show_stack+0x2c/0x3c (C) [ 84.148678][ T8537] __dump_stack+0x30/0x40 [ 84.148691][ T8537] dump_stack_lvl+0xd8/0x12c [ 84.148703][ T8537] dump_stack+0x1c/0x28 [ 84.148715][ T8537] should_fail_ex+0x418/0x58c [ 84.148724][ T8537] should_failslab+0xc4/0x120 [ 84.148739][ T8537] __kmalloc_cache_node_noprof+0x98/0x618 [ 84.148750][ T8537] blkg_alloc+0xd8/0x6cc [ 84.148763][ T8537] blkg_conf_prep+0x530/0x934 [ 84.148775][ T8537] tg_set_conf+0x1e4/0x46c [ 84.148783][ T8537] tg_set_conf_uint+0x38/0x4c [ 84.148792][ T8537] cgroup_file_write+0x23c/0x6e4 [ 84.148802][ T8537] kernfs_fop_write_iter+0x260/0x3b8 [ 84.148815][ T8537] vfs_write+0x51c/0xa0c [ 84.148824][ T8537] ksys_write+0x12c/0x228 [ 84.148832][ T8537] __arm64_sys_write+0x84/0x98 [ 84.148840][ T8537] invoke_syscall+0x98/0x244 [ 84.148853][ T8537] el0_svc_common+0xec/0x23c [ 84.148865][ T8537] do_el0_svc+0x4c/0x5c [ 84.148877][ T8537] el0_svc+0x60/0x1d8 [ 84.148886][ T8537] el0t_64_sync_handler+0x44/0x104 [ 84.148894][ T8537] el0t_64_sync+0x198/0x19c [ 84.205275][ T8544] FAULT_INJECTION: forcing a failure. [ 84.205275][ T8544] name failslab, interval 1, probability 5, space 0, times 9993 [ 84.205481][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz.2.1161 Tainted: G L syzkaller #0 PREEMPT [ 84.205495][ T8544] Tainted: [L]=SOFTLOCKUP [ 84.205498][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.205513][ T8544] Call trace: [ 84.205516][ T8544] show_stack+0x2c/0x3c (C) [ 84.205536][ T8544] __dump_stack+0x30/0x40 [ 84.205549][ T8544] dump_stack_lvl+0xd8/0x12c [ 84.205560][ T8544] dump_stack+0x1c/0x28 [ 84.205572][ T8544] should_fail_ex+0x418/0x58c [ 84.205582][ T8544] should_failslab+0xc4/0x120 [ 84.205591][ T8544] __kmalloc_cache_noprof+0x94/0x5fc [ 84.205601][ T8544] bpf_int_jit_compile+0x1bc/0x1184 [ 84.205613][ T8544] __bpf_prog_select_runtime+0x3b0/0x768 [ 84.205626][ T8544] bpf_prog_select_runtime+0x2c/0x3c [ 84.205637][ T8544] bpf_prepare_filter+0xc74/0xdac [ 84.205651][ T8544] bpf_prog_create_from_user+0x1c4/0x26c [ 84.205663][ T8544] do_seccomp+0x6fc/0xbfc [ 84.205674][ T8544] __arm64_sys_seccomp+0x84/0x98 [ 84.205685][ T8544] invoke_syscall+0x98/0x244 [ 84.205698][ T8544] el0_svc_common+0xec/0x23c [ 84.205710][ T8544] do_el0_svc+0x4c/0x5c [ 84.205721][ T8544] el0_svc+0x60/0x1d8 [ 84.205731][ T8544] el0t_64_sync_handler+0x44/0x104 [ 84.205739][ T8544] el0t_64_sync+0x198/0x19c [ 84.237651][ T8549] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.422860][ T8561] tcf_pedit_act: 24 callbacks suppressed [ 84.422872][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422879][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422885][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422890][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422896][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422901][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422906][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422911][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422916][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.422921][ T8561] tc action pedit offset must be on 32 bit boundaries [ 84.608488][ T8574] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.705877][ T8585] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1172'. [ 84.847625][ T8597] gadgetfs: bound to dummy_udc driver [ 85.020228][ T8610] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.579418][ T8660] net_ratelimit: 921 callbacks suppressed [ 85.579432][ T8660] 0: reclassify loop, rule prio 0, protocol 800 [ 86.164959][ T4710] Bluetooth: hci3: command tx timeout [ 86.612044][ T8708] FAULT_INJECTION: forcing a failure. [ 86.612044][ T8708] name failslab, interval 1, probability 5, space 0, times 9992 [ 86.612067][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.9.1198 Tainted: G L syzkaller #0 PREEMPT [ 86.612080][ T8708] Tainted: [L]=SOFTLOCKUP [ 86.612084][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.612099][ T8708] Call trace: [ 86.612102][ T8708] show_stack+0x2c/0x3c (C) [ 86.612124][ T8708] __dump_stack+0x30/0x40 [ 86.612137][ T8708] dump_stack_lvl+0xd8/0x12c [ 86.612149][ T8708] dump_stack+0x1c/0x28 [ 86.612161][ T8708] should_fail_ex+0x418/0x58c [ 86.612170][ T8708] should_failslab+0xc4/0x120 [ 86.612179][ T8708] __kmalloc_cache_noprof+0x94/0x5fc [ 86.612189][ T8708] alloc_fs_context+0x7c/0xba4 [ 86.612200][ T8708] fs_context_for_mount+0x34/0x44 [ 86.612214][ T8708] mq_init_ns+0xdc/0x638 [ 86.612222][ T8708] copy_ipcs+0x3c8/0x63c [ 86.612231][ T8708] create_new_namespaces+0x1a8/0x50c [ 86.612243][ T8708] unshare_nsproxy_namespaces+0x120/0x170 [ 86.612254][ T8708] ksys_unshare+0x438/0x6e0 [ 86.612264][ T8708] __arm64_sys_unshare+0x40/0x54 [ 86.612274][ T8708] invoke_syscall+0x98/0x244 [ 86.612287][ T8708] el0_svc_common+0xec/0x23c [ 86.612299][ T8708] do_el0_svc+0x4c/0x5c [ 86.612311][ T8708] el0_svc+0x60/0x1d8 [ 86.612320][ T8708] el0t_64_sync_handler+0x44/0x104 [ 86.612329][ T8708] el0t_64_sync+0x198/0x19c [ 86.631786][ T8708] FAULT_INJECTION: forcing a failure. [ 86.631786][ T8708] name failslab, interval 1, probability 5, space 0, times 9991 [ 86.631808][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.9.1198 Tainted: G L syzkaller #0 PREEMPT [ 86.631821][ T8708] Tainted: [L]=SOFTLOCKUP [ 86.631825][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.631838][ T8708] Call trace: [ 86.631841][ T8708] show_stack+0x2c/0x3c (C) [ 86.631859][ T8708] __dump_stack+0x30/0x40 [ 86.631872][ T8708] dump_stack_lvl+0xd8/0x12c [ 86.631884][ T8708] dump_stack+0x1c/0x28 [ 86.631895][ T8708] should_fail_ex+0x418/0x58c [ 86.631905][ T8708] should_failslab+0xc4/0x120 [ 86.631914][ T8708] __kmalloc_cache_noprof+0x94/0x5fc [ 86.631923][ T8708] shrinker_alloc+0x68/0x9b0 [ 86.631935][ T8708] sget_fc+0xbd0/0x1520 [ 86.631945][ T8708] vfs_get_super+0x40/0x148 [ 86.631955][ T8708] get_tree_nodev+0x2c/0x3c [ 86.631965][ T8708] mqueue_get_tree+0xac/0xe8 [ 86.631974][ T8708] vfs_get_tree+0x90/0x28c [ 86.631985][ T8708] fc_mount+0x24/0xac [ 86.631995][ T8708] fc_mount_longterm+0x20/0x74 [ 86.632006][ T8708] mq_init_ns+0x3c8/0x638 [ 86.632014][ T8708] copy_ipcs+0x3c8/0x63c [ 86.632022][ T8708] create_new_namespaces+0x1a8/0x50c [ 86.632033][ T8708] unshare_nsproxy_namespaces+0x120/0x170 [ 86.632044][ T8708] ksys_unshare+0x438/0x6e0 [ 86.632054][ T8708] __arm64_sys_unshare+0x40/0x54 [ 86.632063][ T8708] invoke_syscall+0x98/0x244 [ 86.632076][ T8708] el0_svc_common+0xec/0x23c [ 86.632088][ T8708] do_el0_svc+0x4c/0x5c [ 86.632100][ T8708] el0_svc+0x60/0x1d8 [ 86.632109][ T8708] el0t_64_sync_handler+0x44/0x104 [ 86.632117][ T8708] el0t_64_sync+0x198/0x19c [ 86.692020][ T8708] lo speed is unknown, defaulting to 1000 [ 86.738609][ T8708] FAULT_INJECTION: forcing a failure. [ 86.738609][ T8708] name failslab, interval 1, probability 5, space 0, times 9990 [ 86.738628][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.9.1198 Tainted: G L syzkaller #0 PREEMPT [ 86.738640][ T8708] Tainted: [L]=SOFTLOCKUP [ 86.738643][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.738655][ T8708] Call trace: [ 86.738658][ T8708] show_stack+0x2c/0x3c (C) [ 86.738676][ T8708] __dump_stack+0x30/0x40 [ 86.738689][ T8708] dump_stack_lvl+0xd8/0x12c [ 86.738699][ T8708] dump_stack+0x1c/0x28 [ 86.738709][ T8708] should_fail_ex+0x418/0x58c [ 86.738717][ T8708] should_failslab+0xc4/0x120 [ 86.738726][ T8708] __kmalloc_cache_noprof+0x94/0x5fc [ 86.738735][ T8708] kobject_uevent_env+0x250/0x944 [ 86.738745][ T8708] kobject_uevent+0x2c/0x3c [ 86.738754][ T8708] netdev_queue_update_kobjects+0x2cc/0x5d4 [ 86.738766][ T8708] netdev_register_kobject+0x24c/0x328 [ 86.738777][ T8708] register_netdevice+0xd74/0x14c0 [ 86.738785][ T8708] __ip_tunnel_create+0x34c/0x4b0 [ 86.738794][ T8708] ip_tunnel_init_net+0x238/0x49c [ 86.738803][ T8708] ipgre_init_net+0x34/0x44 [ 86.738811][ T8708] ops_init+0x2cc/0x528 [ 86.738821][ T8708] setup_net+0x118/0x2fc [ 86.738830][ T8708] copy_net_ns+0x454/0x698 [ 86.738840][ T8708] create_new_namespaces+0x304/0x50c [ 86.738850][ T8708] unshare_nsproxy_namespaces+0x120/0x170 [ 86.738859][ T8708] ksys_unshare+0x438/0x6e0 [ 86.738868][ T8708] __arm64_sys_unshare+0x40/0x54 [ 86.738877][ T8708] invoke_syscall+0x98/0x244 [ 86.738887][ T8708] el0_svc_common+0xec/0x23c [ 86.738897][ T8708] do_el0_svc+0x4c/0x5c [ 86.738907][ T8708] el0_svc+0x60/0x1d8 [ 86.738914][ T8708] el0t_64_sync_handler+0x44/0x104 [ 86.738922][ T8708] el0t_64_sync+0x198/0x19c [ 87.136798][ T8734] FAULT_INJECTION: forcing a failure. [ 87.136798][ T8734] name failslab, interval 1, probability 5, space 0, times 9989 [ 87.136819][ T8734] CPU: 1 UID: 0 PID: 8734 Comm: syz.9.1206 Tainted: G L syzkaller #0 PREEMPT [ 87.136832][ T8734] Tainted: [L]=SOFTLOCKUP [ 87.136835][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.136850][ T8734] Call trace: [ 87.136853][ T8734] show_stack+0x2c/0x3c (C) [ 87.136874][ T8734] __dump_stack+0x30/0x40 [ 87.136887][ T8734] dump_stack_lvl+0xd8/0x12c [ 87.136899][ T8734] dump_stack+0x1c/0x28 [ 87.136911][ T8734] should_fail_ex+0x418/0x58c [ 87.136920][ T8734] should_failslab+0xc4/0x120 [ 87.136930][ T8734] __kmalloc_cache_noprof+0x94/0x5fc [ 87.136940][ T8734] alloc_fs_context+0x7c/0xba4 [ 87.136951][ T8734] fs_context_for_mount+0x34/0x44 [ 87.136960][ T8734] mq_init_ns+0xdc/0x638 [ 87.136969][ T8734] copy_ipcs+0x3c8/0x63c [ 87.136977][ T8734] create_new_namespaces+0x1a8/0x50c [ 87.136989][ T8734] unshare_nsproxy_namespaces+0x120/0x170 [ 87.137001][ T8734] ksys_unshare+0x438/0x6e0 [ 87.137011][ T8734] __arm64_sys_unshare+0x40/0x54 [ 87.137020][ T8734] invoke_syscall+0x98/0x244 [ 87.137033][ T8734] el0_svc_common+0xec/0x23c [ 87.137046][ T8734] do_el0_svc+0x4c/0x5c [ 87.137057][ T8734] el0_svc+0x60/0x1d8 [ 87.137067][ T8734] el0t_64_sync_handler+0x44/0x104 [ 87.137075][ T8734] el0t_64_sync+0x198/0x19c [ 87.137337][ T8734] FAULT_INJECTION: forcing a failure. [ 87.137337][ T8734] name failslab, interval 1, probability 5, space 0, times 9988 [ 87.137347][ T8734] CPU: 1 UID: 0 PID: 8734 Comm: syz.9.1206 Tainted: G L syzkaller #0 PREEMPT [ 87.137358][ T8734] Tainted: [L]=SOFTLOCKUP [ 87.137361][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.137372][ T8734] Call trace: [ 87.137374][ T8734] show_stack+0x2c/0x3c (C) [ 87.137393][ T8734] __dump_stack+0x30/0x40 [ 87.137405][ T8734] dump_stack_lvl+0xd8/0x12c [ 87.137417][ T8734] dump_stack+0x1c/0x28 [ 87.137429][ T8734] should_fail_ex+0x418/0x58c [ 87.137437][ T8734] should_failslab+0xc4/0x120 [ 87.137445][ T8734] __kmalloc_cache_noprof+0x94/0x5fc [ 87.137454][ T8734] shrinker_alloc+0x68/0x9b0 [ 87.137466][ T8734] sget_fc+0xbd0/0x1520 [ 87.137476][ T8734] vfs_get_super+0x40/0x148 [ 87.137486][ T8734] get_tree_nodev+0x2c/0x3c [ 87.137496][ T8734] mqueue_get_tree+0xac/0xe8 [ 87.137505][ T8734] vfs_get_tree+0x90/0x28c [ 87.137515][ T8734] fc_mount+0x24/0xac [ 87.137525][ T8734] fc_mount_longterm+0x20/0x74 [ 87.137536][ T8734] mq_init_ns+0x3c8/0x638 [ 87.137544][ T8734] copy_ipcs+0x3c8/0x63c [ 87.137552][ T8734] create_new_namespaces+0x1a8/0x50c [ 87.137563][ T8734] unshare_nsproxy_namespaces+0x120/0x170 [ 87.137574][ T8734] ksys_unshare+0x438/0x6e0 [ 87.137584][ T8734] __arm64_sys_unshare+0x40/0x54 [ 87.137593][ T8734] invoke_syscall+0x98/0x244 [ 87.137606][ T8734] el0_svc_common+0xec/0x23c [ 87.137618][ T8734] do_el0_svc+0x4c/0x5c [ 87.137630][ T8734] el0_svc+0x60/0x1d8 [ 87.137638][ T8734] el0t_64_sync_handler+0x44/0x104 [ 87.137647][ T8734] el0t_64_sync+0x198/0x19c [ 87.232147][ T8734] lo speed is unknown, defaulting to 1000 [ 87.296975][ T8734] FAULT_INJECTION: forcing a failure. [ 87.296975][ T8734] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.296999][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.9.1206 Tainted: G L syzkaller #0 PREEMPT [ 87.297013][ T8734] Tainted: [L]=SOFTLOCKUP [ 87.297017][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.297032][ T8734] Call trace: [ 87.297035][ T8734] show_stack+0x2c/0x3c (C) [ 87.297052][ T8734] __dump_stack+0x30/0x40 [ 87.297064][ T8734] dump_stack_lvl+0xd8/0x12c [ 87.297076][ T8734] dump_stack+0x1c/0x28 [ 87.297087][ T8734] should_fail_ex+0x418/0x58c [ 87.297096][ T8734] should_fail+0x14/0x24 [ 87.297104][ T8734] get_futex_key+0x1ec/0x12b0 [ 87.297115][ T8734] futex_wake+0x10c/0x594 [ 87.297126][ T8734] do_futex+0x2c4/0x378 [ 87.297137][ T8734] __arm64_sys_futex+0x2e4/0x418 [ 87.297148][ T8734] invoke_syscall+0x98/0x244 [ 87.297160][ T8734] el0_svc_common+0xec/0x23c [ 87.297172][ T8734] do_el0_svc+0x4c/0x5c [ 87.297184][ T8734] el0_svc+0x60/0x1d8 [ 87.297193][ T8734] el0t_64_sync_handler+0x44/0x104 [ 87.297201][ T8734] el0t_64_sync+0x198/0x19c [ 87.335836][ T8740] lo speed is unknown, defaulting to 1000 [ 87.443344][ T8735] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 87.443496][ T8735] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 88.075217][ T8784] loop6: detected capacity change from 0 to 2048 [ 88.245286][ T4710] Bluetooth: hci3: command tx timeout [ 88.700574][ T8820] loop2: detected capacity change from 0 to 256 [ 88.838091][ T8845] bridge_slave_0: left allmulticast mode [ 88.838101][ T8845] bridge_slave_0: left promiscuous mode [ 88.838200][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.840987][ T8845] bridge_slave_1: left allmulticast mode [ 88.840996][ T8845] bridge_slave_1: left promiscuous mode [ 88.841065][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.883962][ T8845] bond0: (slave bond_slave_0): Releasing backup interface [ 88.934309][ T8845] bond0: (slave bond_slave_1): Releasing backup interface [ 88.954412][ T8850] loop6: detected capacity change from 0 to 1024 [ 88.964552][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 88.974348][ T8845] team0: Port device team_slave_0 removed [ 88.986421][ T8845] team0: Port device team_slave_1 removed [ 88.986589][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.988482][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.007817][ T8852] hsr_slave_0: left promiscuous mode [ 89.012148][ T8852] hsr_slave_1: left promiscuous mode [ 89.023921][ T8850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.686452][ T8893] loop9: detected capacity change from 0 to 256 [ 89.828675][ T5141] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.049582][ T8929] loop9: detected capacity change from 0 to 256 [ 90.107320][ T8933] tcf_pedit_act: 58 callbacks suppressed [ 90.107328][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107336][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107343][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107350][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107356][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107362][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107368][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107373][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107379][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.107390][ T8933] tc action pedit offset must be on 32 bit boundaries [ 90.115265][ T8810] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 90.115289][ T8810] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 90.115325][ T8810] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 90.115337][ T8810] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 90.115355][ T8810] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 90.115365][ T8810] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 90.115386][ T8810] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 90.115397][ T8810] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 90.187463][ T8942] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 90.187471][ T8942] overlayfs: missing 'lowerdir' [ 90.240505][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1244'. [ 90.240635][ T8946] hsr_slave_0: left promiscuous mode [ 90.241113][ T8946] hsr_slave_1: left promiscuous mode [ 90.846914][ T9016] net_ratelimit: 1008 callbacks suppressed [ 90.846925][ T9016] 0: reclassify loop, rule prio 0, protocol 800 [ 90.914635][ T9023] ieee802154 phy0 wpan0: encryption failed: -126 [ 91.138605][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 91.141712][ T9053] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.275939][ T9075] loop6: detected capacity change from 0 to 256 [ 91.464547][ T9103] bond0: (slave xfrm0): The slave device specified does not support setting the MAC address [ 91.464798][ T9103] bond0: (slave xfrm0): Error -95 calling set_mac_address [ 91.532231][ T9111] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.589222][ T9121] loop9: detected capacity change from 0 to 256 [ 91.874849][ T9155] loop9: detected capacity change from 0 to 256 [ 91.879661][ T9153] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.998183][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1312'. [ 92.023113][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1311'. [ 92.037587][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.041628][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.244745][ T9195] ieee802154 phy0 wpan0: encryption failed: -126 [ 92.477261][ T9218] loop2: detected capacity change from 0 to 256 [ 92.687150][ T9237] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.825722][ T9249] loop6: detected capacity change from 0 to 256 [ 92.888294][ T9256] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.908486][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 93.129625][ T9278] loop9: detected capacity change from 0 to 256 [ 93.186767][ T9274] bond0: (slave bond_slave_0): Releasing backup interface [ 93.219966][ T9274] bond0: (slave bond_slave_1): Releasing backup interface [ 93.226488][ T9281] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.283066][ T9274] team0: Port device team_slave_0 removed [ 93.298871][ T9274] team0: Port device team_slave_1 removed [ 93.300293][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.301383][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.320141][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.321335][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.525347][ T8834] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 93.525376][ T8834] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.525400][ T8834] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 93.525411][ T8834] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.525426][ T8834] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 93.525437][ T8834] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.525451][ T8834] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 93.525460][ T8834] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.675659][ T9305] ieee802154 phy0 wpan0: encryption failed: -126 [ 93.786918][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1360'. [ 93.822592][ T9322] FAULT_INJECTION: forcing a failure. [ 93.822592][ T9322] name fail_futex, interval 1, probability 0, space 0, times 0 [ 93.822610][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.2.1364 Tainted: G L syzkaller #0 PREEMPT [ 93.822622][ T9322] Tainted: [L]=SOFTLOCKUP [ 93.822626][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.822639][ T9322] Call trace: [ 93.822642][ T9322] show_stack+0x2c/0x3c (C) [ 93.822661][ T9322] __dump_stack+0x30/0x40 [ 93.822673][ T9322] dump_stack_lvl+0xd8/0x12c [ 93.822685][ T9322] dump_stack+0x1c/0x28 [ 93.822696][ T9322] should_fail_ex+0x418/0x58c [ 93.822705][ T9322] should_fail+0x14/0x24 [ 93.822713][ T9322] get_futex_key+0x1ec/0x12b0 [ 93.822724][ T9322] futex_wait_setup+0x58/0x674 [ 93.822736][ T9322] __futex_wait+0x108/0x25c [ 93.822748][ T9322] futex_wait+0x108/0x2c0 [ 93.822759][ T9322] do_futex+0x320/0x378 [ 93.822770][ T9322] __arm64_sys_futex+0x2e4/0x418 [ 93.822781][ T9322] invoke_syscall+0x98/0x244 [ 93.822793][ T9322] el0_svc_common+0xec/0x23c [ 93.822805][ T9322] do_el0_svc+0x4c/0x5c [ 93.822816][ T9322] el0_svc+0x60/0x1d8 [ 93.822825][ T9322] el0t_64_sync_handler+0x44/0x104 [ 93.822834][ T9322] el0t_64_sync+0x198/0x19c [ 93.862210][ T9322] lo speed is unknown, defaulting to 1000 [ 93.874571][ T9322] FAULT_INJECTION: forcing a failure. [ 93.874571][ T9322] name failslab, interval 1, probability 5, space 0, times 9987 [ 93.874585][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.2.1364 Tainted: G L syzkaller #0 PREEMPT [ 93.874596][ T9322] Tainted: [L]=SOFTLOCKUP [ 93.874599][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.874610][ T9322] Call trace: [ 93.874612][ T9322] show_stack+0x2c/0x3c (C) [ 93.874626][ T9322] __dump_stack+0x30/0x40 [ 93.874637][ T9322] dump_stack_lvl+0xd8/0x12c [ 93.874647][ T9322] dump_stack+0x1c/0x28 [ 93.874657][ T9322] should_fail_ex+0x418/0x58c [ 93.874665][ T9322] should_failslab+0xc4/0x120 [ 93.874674][ T9322] kmem_cache_alloc_noprof+0x94/0x5d4 [ 93.874682][ T9322] __kernfs_new_node+0xf0/0x7d8 [ 93.874693][ T9322] kernfs_new_node+0xe8/0x130 [ 93.874702][ T9322] __kernfs_create_file+0x60/0x2e0 [ 93.874712][ T9322] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 93.874722][ T9322] internal_create_group+0x550/0xb30 [ 93.874730][ T9322] internal_create_groups+0x64/0x138 [ 93.874738][ T9322] sysfs_create_groups+0x2c/0x3c [ 93.874745][ T9322] device_add_attrs+0xdc/0x4e4 [ 93.874755][ T9322] device_add+0x420/0x9e0 [ 93.874764][ T9322] netdev_register_kobject+0x184/0x328 [ 93.874776][ T9322] register_netdevice+0xd74/0x14c0 [ 93.874784][ T9322] __ip_tunnel_create+0x34c/0x4b0 [ 93.874793][ T9322] ip_tunnel_init_net+0x238/0x49c [ 93.874801][ T9322] vti_init_net+0x3c/0x120 [ 93.874810][ T9322] ops_init+0x2cc/0x528 [ 93.874820][ T9322] setup_net+0x118/0x2fc [ 93.874830][ T9322] copy_net_ns+0x454/0x698 [ 93.874840][ T9322] create_new_namespaces+0x304/0x50c [ 93.874849][ T9322] unshare_nsproxy_namespaces+0x120/0x170 [ 93.874859][ T9322] ksys_unshare+0x438/0x6e0 [ 93.874867][ T9322] __arm64_sys_unshare+0x40/0x54 [ 93.874879][ T9322] invoke_syscall+0x98/0x244 [ 93.874890][ T9322] el0_svc_common+0xec/0x23c [ 93.874900][ T9322] do_el0_svc+0x4c/0x5c [ 93.874910][ T9322] el0_svc+0x60/0x1d8 [ 93.874918][ T9322] el0t_64_sync_handler+0x44/0x104 [ 93.874926][ T9322] el0t_64_sync+0x198/0x19c [ 93.950173][ T9326] loop6: detected capacity change from 0 to 1024 [ 93.965686][ T9326] EXT4-fs: Ignoring removed nobh option [ 93.965734][ T9326] EXT4-fs: Ignoring removed bh option [ 93.965743][ T9326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.970504][ T9324] lo speed is unknown, defaulting to 1000 [ 93.996850][ T9326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.053846][ T9327] lo speed is unknown, defaulting to 1000 [ 94.058764][ T5141] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /338/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 94.069277][ T5141] EXT4-fs (loop6): Remounting filesystem read-only [ 94.072217][ T5141] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.113196][ T9331] lo speed is unknown, defaulting to 1000 [ 94.138672][ T9322] FAULT_INJECTION: forcing a failure. [ 94.138672][ T9322] name failslab, interval 1, probability 5, space 0, times 9986 [ 94.138692][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.2.1364 Tainted: G L syzkaller #0 PREEMPT [ 94.138705][ T9322] Tainted: [L]=SOFTLOCKUP [ 94.138709][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.138722][ T9322] Call trace: [ 94.138726][ T9322] show_stack+0x2c/0x3c (C) [ 94.138744][ T9322] __dump_stack+0x30/0x40 [ 94.138759][ T9322] dump_stack_lvl+0xd8/0x12c [ 94.138770][ T9322] dump_stack+0x1c/0x28 [ 94.138780][ T9322] should_fail_ex+0x418/0x58c [ 94.138790][ T9322] should_failslab+0xc4/0x120 [ 94.138799][ T9322] kmem_cache_alloc_node_noprof+0x98/0x604 [ 94.138809][ T9322] __alloc_skb+0x1f0/0x610 [ 94.138822][ T9322] inet_netconf_notify_devconf+0x50/0x118 [ 94.138831][ T9322] __devinet_sysctl_unregister+0xa8/0xc0 [ 94.138844][ T9322] devinet_exit_net+0x98/0x130 [ 94.138854][ T9322] ops_undo_list+0x3cc/0x81c [ 94.138866][ T9322] setup_net+0x2a0/0x2fc [ 94.138876][ T9322] copy_net_ns+0x454/0x698 [ 94.138886][ T9322] create_new_namespaces+0x304/0x50c [ 94.138897][ T9322] unshare_nsproxy_namespaces+0x120/0x170 [ 94.138907][ T9322] ksys_unshare+0x438/0x6e0 [ 94.138916][ T9322] __arm64_sys_unshare+0x40/0x54 [ 94.138925][ T9322] invoke_syscall+0x98/0x244 [ 94.138936][ T9322] el0_svc_common+0xec/0x23c [ 94.138946][ T9322] do_el0_svc+0x4c/0x5c [ 94.138957][ T9322] el0_svc+0x60/0x1d8 [ 94.138965][ T9322] el0t_64_sync_handler+0x44/0x104 [ 94.138973][ T9322] el0t_64_sync+0x198/0x19c [ 94.298826][ T9340] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.690679][ T9370] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.927535][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1386'. [ 95.087314][ T9392] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.369248][ T26] kernel read not supported for file /mdstat (pid: 26 comm: kworker/1:1) [ 95.610295][ T9428] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.701702][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 95.742357][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.743503][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.164935][ C1] net_ratelimit: 518 callbacks suppressed [ 96.378417][ T9480] ip_tables: iptables: counters copy to user failed while replacing table [ 96.480238][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 96.719989][ T9518] FAULT_INJECTION: forcing a failure. [ 96.719989][ T9518] name failslab, interval 1, probability 5, space 0, times 9985 [ 96.720003][ T9518] CPU: 0 UID: 0 PID: 9518 Comm: syz.6.1442 Tainted: G L syzkaller #0 PREEMPT [ 96.720015][ T9518] Tainted: [L]=SOFTLOCKUP [ 96.720018][ T9518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.720031][ T9518] Call trace: [ 96.720034][ T9518] show_stack+0x2c/0x3c (C) [ 96.720048][ T9518] __dump_stack+0x30/0x40 [ 96.720061][ T9518] dump_stack_lvl+0xd8/0x12c [ 96.720072][ T9518] dump_stack+0x1c/0x28 [ 96.720084][ T9518] should_fail_ex+0x418/0x58c [ 96.720093][ T9518] should_failslab+0xc4/0x120 [ 96.720102][ T9518] __kmalloc_noprof+0x108/0x6c8 [ 96.720111][ T9518] ops_init+0x7c/0x528 [ 96.720123][ T9518] setup_net+0x118/0x2fc [ 96.720134][ T9518] copy_net_ns+0x454/0x698 [ 96.720146][ T9518] create_new_namespaces+0x304/0x50c [ 96.720157][ T9518] unshare_nsproxy_namespaces+0x120/0x170 [ 96.720168][ T9518] ksys_unshare+0x438/0x6e0 [ 96.720177][ T9518] __arm64_sys_unshare+0x40/0x54 [ 96.720187][ T9518] invoke_syscall+0x98/0x244 [ 96.720200][ T9518] el0_svc_common+0xec/0x23c [ 96.720211][ T9518] do_el0_svc+0x4c/0x5c [ 96.720223][ T9518] el0_svc+0x60/0x1d8 [ 96.720231][ T9518] el0t_64_sync_handler+0x44/0x104 [ 96.720240][ T9518] el0t_64_sync+0x198/0x19c [ 96.929102][ T4714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.930870][ T4714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.931370][ T4714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.933040][ T4714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.933520][ T4714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.998146][ T9536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.049859][ T9528] lo speed is unknown, defaulting to 1000 [ 97.258145][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.258176][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.258298][ T9528] bridge_slave_0: entered allmulticast mode [ 97.258913][ T9528] bridge_slave_0: entered promiscuous mode [ 97.265704][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.265726][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.265809][ T9528] bridge_slave_1: entered allmulticast mode [ 97.266334][ T9528] bridge_slave_1: entered promiscuous mode [ 97.357480][ T9528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.358687][ T9528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.363271][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 97.413726][ T9528] team0: Port device team_slave_0 added [ 97.418771][ T9528] team0: Port device team_slave_1 added [ 97.480837][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.480845][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.480856][ T9528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.485380][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.485392][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.485405][ T9528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.586471][ T9528] hsr_slave_0: entered promiscuous mode [ 97.592959][ T9528] hsr_slave_1: entered promiscuous mode [ 97.593231][ T9528] debugfs: 'hsr0' already exists in 'hsr' [ 97.593241][ T9528] Cannot create hsr debugfs directory [ 97.832909][ T9588] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 97.989269][ T9599] bond6: option resend_igmp: invalid value (18446744073709550471) [ 97.989277][ T9599] bond6: option resend_igmp: allowed values 0 - 255 [ 97.991140][ T9599] bond6 (unregistering): Released all slaves [ 98.170103][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1477'. [ 98.481662][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 98.498914][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 98.663567][ T9639] binder: 9638:9639 tried to acquire reference to desc 0, got 1 instead [ 98.663731][ T9639] binder: 9638:9639 got transaction with invalid offsets ptr [ 98.663765][ T9639] binder: 9638:9639 transaction call to 9638:0 failed 65/29201/-22, code 0 size 104-24 line 3754 [ 98.663972][ T4891] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.965021][ T4710] Bluetooth: hci5: command tx timeout [ 99.248209][ T1265] IPVS: starting estimator thread 0... [ 99.296503][ T9683] loop2: detected capacity change from 0 to 2048 [ 99.325768][ T9683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.355463][ T9681] IPVS: using max 60 ests per chain, 144000 per kthread [ 99.372799][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.622356][ T9705] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 99.622371][ T9705] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 99.868054][ T9725] loop2: detected capacity change from 0 to 8192 [ 99.961292][ T9729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.491578][ T9750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1542'. [ 100.737086][ T9774] loop2: detected capacity change from 0 to 2048 [ 100.741927][ T9774] EXT4-fs: Ignoring removed orlov option [ 100.778571][ T9774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.811614][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.910411][ T9790] device-mapper: table: 248:0: multipath: invalid number of path selector args (-EINVAL) [ 100.910428][ T9790] device-mapper: ioctl: error adding target to table [ 101.045016][ T4710] Bluetooth: hci5: command tx timeout [ 101.102351][ T9803] FAULT_INJECTION: forcing a failure. [ 101.102351][ T9803] name failslab, interval 1, probability 5, space 0, times 9983 [ 101.102386][ T9803] CPU: 0 UID: 0 PID: 9803 Comm: syz.2.1557 Tainted: G L syzkaller #0 PREEMPT [ 101.102401][ T9803] Tainted: [L]=SOFTLOCKUP [ 101.102406][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.102423][ T9803] Call trace: [ 101.102427][ T9803] show_stack+0x2c/0x3c (C) [ 101.102450][ T9803] __dump_stack+0x30/0x40 [ 101.102466][ T9803] dump_stack_lvl+0xd8/0x12c [ 101.102478][ T9803] dump_stack+0x1c/0x28 [ 101.102489][ T9803] should_fail_ex+0x418/0x58c [ 101.102499][ T9803] should_failslab+0xc4/0x120 [ 101.102509][ T9803] __kmalloc_cache_node_noprof+0x98/0x618 [ 101.102520][ T9803] throtl_pd_alloc+0xb8/0x350 [ 101.102529][ T9803] blkg_alloc+0x470/0x6cc [ 101.102541][ T9803] blkg_conf_prep+0x530/0x934 [ 101.102553][ T9803] tg_set_conf+0x1e4/0x46c [ 101.102562][ T9803] tg_set_conf_uint+0x38/0x4c [ 101.102570][ T9803] cgroup_file_write+0x23c/0x6e4 [ 101.102580][ T9803] kernfs_fop_write_iter+0x260/0x3b8 [ 101.102594][ T9803] vfs_write+0x51c/0xa0c [ 101.102603][ T9803] ksys_write+0x12c/0x228 [ 101.102611][ T9803] __arm64_sys_write+0x84/0x98 [ 101.102620][ T9803] invoke_syscall+0x98/0x244 [ 101.102633][ T9803] el0_svc_common+0xec/0x23c [ 101.102645][ T9803] do_el0_svc+0x4c/0x5c [ 101.102656][ T9803] el0_svc+0x60/0x1d8 [ 101.102666][ T9803] el0t_64_sync_handler+0x44/0x104 [ 101.102675][ T9803] el0t_64_sync+0x198/0x19c [ 101.277543][ T9825] device-mapper: table: 248:0: multipath: invalid number of path selector args (-EINVAL) [ 101.277559][ T9825] device-mapper: ioctl: error adding target to table [ 101.357618][ T4400] net_ratelimit: 81 callbacks suppressed [ 101.424449][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 101.459092][ T8824] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 101.460225][ T9840] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 101.610104][ T9847] FAULT_INJECTION: forcing a failure. [ 101.610104][ T9847] name failslab, interval 1, probability 5, space 0, times 9982 [ 101.610128][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz.6.1570 Tainted: G L syzkaller #0 PREEMPT [ 101.610141][ T9847] Tainted: [L]=SOFTLOCKUP [ 101.610145][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.610160][ T9847] Call trace: [ 101.610163][ T9847] show_stack+0x2c/0x3c (C) [ 101.610182][ T9847] __dump_stack+0x30/0x40 [ 101.610194][ T9847] dump_stack_lvl+0xd8/0x12c [ 101.610206][ T9847] dump_stack+0x1c/0x28 [ 101.610218][ T9847] should_fail_ex+0x418/0x58c [ 101.610227][ T9847] should_failslab+0xc4/0x120 [ 101.610236][ T9847] __kmalloc_cache_node_noprof+0x98/0x618 [ 101.610246][ T9847] throtl_pd_alloc+0xb8/0x350 [ 101.610255][ T9847] blkg_alloc+0x470/0x6cc [ 101.610267][ T9847] blkg_conf_prep+0x530/0x934 [ 101.610278][ T9847] tg_set_conf+0x1e4/0x46c [ 101.610286][ T9847] tg_set_conf_uint+0x38/0x4c [ 101.610294][ T9847] cgroup_file_write+0x23c/0x6e4 [ 101.610304][ T9847] kernfs_fop_write_iter+0x260/0x3b8 [ 101.610318][ T9847] vfs_write+0x51c/0xa0c [ 101.610326][ T9847] ksys_write+0x12c/0x228 [ 101.610334][ T9847] __arm64_sys_write+0x84/0x98 [ 101.610342][ T9847] invoke_syscall+0x98/0x244 [ 101.610354][ T9847] el0_svc_common+0xec/0x23c [ 101.610366][ T9847] do_el0_svc+0x4c/0x5c [ 101.610383][ T9847] el0_svc+0x60/0x1d8 [ 101.610393][ T9847] el0t_64_sync_handler+0x44/0x104 [ 101.610401][ T9847] el0t_64_sync+0x198/0x19c [ 101.784237][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1576'. [ 101.930687][ T9879] 0: reclassify loop, rule prio 0, protocol 800 [ 102.102874][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 102.215890][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 103.125185][ T4710] Bluetooth: hci5: command tx timeout [ 105.204932][ T4710] Bluetooth: hci5: command tx timeout [ 106.404906][ C0] net_ratelimit: 60 callbacks suppressed [ 111.764897][ C1] net_ratelimit: 8 callbacks suppressed [ 116.964905][ C1] net_ratelimit: 4 callbacks suppressed [ 122.174897][ C1] net_ratelimit: 4 callbacks suppressed [ 125.925456][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.925488][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.365000][ C1] net_ratelimit: 5 callbacks suppressed [ 132.564911][ C1] net_ratelimit: 7 callbacks suppressed [ 137.774899][ C1] net_ratelimit: 26 callbacks suppressed [ 140.882750][ T4714] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.883651][ T4714] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.884104][ T4714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.884761][ T4714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.898422][ T4714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.940269][ T9966] lo speed is unknown, defaulting to 1000 [ 141.123307][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.135008][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.135116][ T9966] bridge_slave_0: entered allmulticast mode [ 141.135627][ T9966] bridge_slave_0: entered promiscuous mode [ 141.136503][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.136523][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.136624][ T9966] bridge_slave_1: entered allmulticast mode [ 141.137104][ T9966] bridge_slave_1: entered promiscuous mode [ 141.163140][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.167346][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.206432][ T9966] team0: Port device team_slave_0 added [ 141.207349][ T9966] team0: Port device team_slave_1 added [ 141.235843][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.235850][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.235863][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.236553][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.236558][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.236568][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.306784][ T9966] hsr_slave_0: entered promiscuous mode [ 141.307194][ T9966] hsr_slave_1: entered promiscuous mode [ 141.307474][ T9966] debugfs: 'hsr0' already exists in 'hsr' [ 141.307484][ T9966] Cannot create hsr debugfs directory [ 142.974908][ C1] net_ratelimit: 38 callbacks suppressed [ 142.975206][ T4714] Bluetooth: hci6: command tx timeout [ 145.045945][ T4714] Bluetooth: hci6: command tx timeout [ 147.135303][ T4714] Bluetooth: hci6: command tx timeout [ 148.164899][ C1] net_ratelimit: 2 callbacks suppressed [ 149.205131][ T4714] Bluetooth: hci6: command tx timeout [ 153.364904][ C1] net_ratelimit: 6 callbacks suppressed [ 153.606158][ T4710] Bluetooth: hci4: command 0x0406 tx timeout [ 157.135960][ T4710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.137526][ T4710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.138158][ T4710] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.139012][ T4710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.139613][ T4710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.181702][ T9986] lo speed is unknown, defaulting to 1000 [ 157.367539][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.367667][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.367970][ T9986] bridge_slave_0: entered allmulticast mode [ 157.369856][ T9986] bridge_slave_0: entered promiscuous mode [ 157.385585][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.385610][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.385693][ T9986] bridge_slave_1: entered allmulticast mode [ 157.386184][ T9986] bridge_slave_1: entered promiscuous mode [ 157.430247][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.431370][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.463135][ T9986] team0: Port device team_slave_0 added [ 157.464645][ T9986] team0: Port device team_slave_1 added [ 157.496665][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.496671][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.496683][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.497256][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.497262][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.497274][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.553095][ T9986] hsr_slave_0: entered promiscuous mode [ 157.553502][ T9986] hsr_slave_1: entered promiscuous mode [ 157.553756][ T9986] debugfs: 'hsr0' already exists in 'hsr' [ 157.553766][ T9986] Cannot create hsr debugfs directory [ 158.564915][ C1] net_ratelimit: 34 callbacks suppressed [ 159.204986][ T4710] Bluetooth: hci7: command tx timeout [ 161.294922][ T4710] Bluetooth: hci7: command tx timeout [ 163.374927][ T4714] Bluetooth: hci7: command tx timeout [ 163.774908][ C1] net_ratelimit: 4 callbacks suppressed [ 163.844955][ T4714] Bluetooth: hci1: command 0x0406 tx timeout [ 165.444936][ T4710] Bluetooth: hci7: command tx timeout [ 168.964899][ C1] net_ratelimit: 4 callbacks suppressed [ 174.164944][ C1] net_ratelimit: 6 callbacks suppressed [ 179.364910][ C1] net_ratelimit: 4 callbacks suppressed [ 184.564912][ C1] net_ratelimit: 4 callbacks suppressed [ 187.367031][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.367064][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.367508][ T1595] aoe: packet could not be sent on syzkaller0. consider increasing tx_queue_len [ 189.764913][ C1] net_ratelimit: 5 callbacks suppressed [ 194.564938][ T4714] Bluetooth: hci2: command 0x0406 tx timeout [ 194.964910][ C1] net_ratelimit: 6 callbacks suppressed [ 200.164914][ C1] net_ratelimit: 3 callbacks suppressed [ 201.701577][ T4714] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 201.702532][ T4714] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 201.703030][ T4714] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 201.703718][ T4714] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 201.704146][ T4714] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 201.750534][T10009] lo speed is unknown, defaulting to 1000 [ 201.980775][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.994965][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.995082][T10009] bridge_slave_0: entered allmulticast mode [ 201.995608][T10009] bridge_slave_0: entered promiscuous mode [ 201.996461][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.996479][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.996593][T10009] bridge_slave_1: entered allmulticast mode [ 201.997080][T10009] bridge_slave_1: entered promiscuous mode [ 202.021412][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.022603][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.051029][T10009] team0: Port device team_slave_0 added [ 202.055696][T10009] team0: Port device team_slave_1 added [ 202.086505][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.086512][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.086525][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.088669][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.088676][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.088692][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.142043][T10009] hsr_slave_0: entered promiscuous mode [ 202.142485][T10009] hsr_slave_1: entered promiscuous mode [ 202.142733][T10009] debugfs: 'hsr0' already exists in 'hsr' [ 202.142744][T10009] Cannot create hsr debugfs directory [ 203.764965][ T4710] Bluetooth: hci8: command tx timeout [ 204.804997][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 205.364908][ C1] net_ratelimit: 58 callbacks suppressed [ 205.844955][ T4714] Bluetooth: hci8: command tx timeout [ 207.924931][ T4714] Bluetooth: hci8: command tx timeout [ 210.015043][ T4714] Bluetooth: hci8: command tx timeout [ 210.564901][ C1] net_ratelimit: 14 callbacks suppressed [ 215.774902][ C1] net_ratelimit: 13 callbacks suppressed [ 217.189094][ T4710] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 217.190977][ T4710] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 217.191935][ T4710] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 217.192976][ T4710] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 217.193376][ T4710] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 217.232646][T10029] lo speed is unknown, defaulting to 1000 [ 217.419448][T10029] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.427893][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.428036][T10029] bridge_slave_0: entered allmulticast mode [ 217.428573][T10029] bridge_slave_0: entered promiscuous mode [ 217.435894][T10029] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.436637][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.436806][T10029] bridge_slave_1: entered allmulticast mode [ 217.437328][T10029] bridge_slave_1: entered promiscuous mode [ 217.473727][T10029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.485939][T10029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.520936][T10029] team0: Port device team_slave_0 added [ 217.521841][T10029] team0: Port device team_slave_1 added [ 217.562421][T10029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.562428][T10029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.562442][T10029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.563030][T10029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.563036][T10029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.563049][T10029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.603351][T10029] hsr_slave_0: entered promiscuous mode [ 217.603764][T10029] hsr_slave_1: entered promiscuous mode [ 217.604014][T10029] debugfs: 'hsr0' already exists in 'hsr' [ 217.604024][T10029] Cannot create hsr debugfs directory [ 219.204941][ T4714] Bluetooth: hci9: command tx timeout [ 220.165087][ T4714] Bluetooth: hci5: command 0x0406 tx timeout [ 220.974912][ C1] net_ratelimit: 45 callbacks suppressed [ 221.284993][ T4710] Bluetooth: hci9: command tx timeout [ 223.374995][ T4710] Bluetooth: hci9: command tx timeout [ 225.444981][ T4710] Bluetooth: hci9: command tx timeout [ 226.164907][ C1] net_ratelimit: 4 callbacks suppressed [ 231.364920][ C1] net_ratelimit: 4 callbacks suppressed [ 233.455447][ T31] INFO: task syz-executor:8147 blocked for more than 143 seconds. [ 233.455463][ T31] Tainted: G L syzkaller #0 [ 233.455470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.455476][ T31] task:syz-executor state:D stack:0 pid:8147 tgid:8147 ppid:1 task_flags:0x480140 flags:0x00800011 [ 233.455491][ T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000036dc1143) [ 233.455500][ T31] Call trace: [ 233.455504][ T31] __switch_to+0x2b4/0x6e4 (T) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.455525][ T31] __schedule+0x135c/0x2b00 [ 233.455536][ T31] schedule+0x13c/0x20c [ 233.455547][ T31] schedule_timeout+0xc0/0x28c [ 233.455556][ T31] wait_for_common+0x220/0x394 [ 233.455566][ T31] wait_for_completion+0x18/0x24 [ 233.455576][ T31] remove_one+0x28c/0x380 [ 233.455587][ T31] __simple_recursive_removal+0x1a8/0x430 [ 233.455600][ T31] simple_recursive_removal+0x2c/0x3c [ 233.455610][ T31] debugfs_remove+0x60/0x88 [ 233.455618][ T31] nsim_dev_health_exit+0x44/0xb8 [ 233.455629][ T31] nsim_dev_reload_destroy+0x174/0x210 [ 233.455638][ T31] nsim_drv_remove+0x5c/0x114 [ 233.455646][ T31] nsim_bus_remove+0x20/0x30 [ 233.455655][ T31] device_remove+0xc4/0x134 [ 233.455665][ T31] device_release_driver_internal+0x124/0x20c [ 233.455674][ T31] device_release_driver+0x28/0x38 [ 233.455682][ T31] bus_remove_device+0x2d0/0x400 [ 233.455694][ T31] device_del+0x3ec/0x71c [ 233.455703][ T31] device_unregister+0x2c/0xf0 [ 233.455712][ T31] nsim_bus_dev_del+0x60/0x8c [ 233.455721][ T31] del_device_store+0x24c/0x2d4 [ 233.455731][ T31] bus_attr_store+0x80/0xa4 [ 233.455739][ T31] sysfs_kf_write+0xe0/0x108 [ 233.455747][ T31] kernfs_fop_write_iter+0x260/0x3b8 [ 233.455758][ T31] vfs_write+0x51c/0xa0c [ 233.455766][ T31] ksys_write+0x12c/0x228 [ 233.455774][ T31] __arm64_sys_write+0x84/0x98 [ 233.455782][ T31] invoke_syscall+0x98/0x244 [ 233.455794][ T31] el0_svc_common+0xec/0x23c [ 233.455804][ T31] do_el0_svc+0x4c/0x5c [ 233.455815][ T31] el0_svc+0x60/0x1d8 [ 233.455823][ T31] el0t_64_sync_handler+0x44/0x104 [ 233.455831][ T31] el0t_64_sync+0x198/0x19c [ 233.455845][ T31] INFO: task syz.8.1101:8284 blocked for more than 143 seconds. [ 233.455852][ T31] Tainted: G L syzkaller #0 [ 233.455857][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.455861][ T31] task:syz.8.1101 state:D stack:0 pid:8284 tgid:8283 ppid:7092 task_flags:0x400140 flags:0x00000001 [ 233.455873][ T31] dump_backtrace(regs = 0000000000000000 tsk = 00000000cb0abd95) [ 233.455879][ T31] Call trace: [ 233.455882][ T31] __switch_to+0x2b4/0x6e4 (T) [ 233.455893][ T31] __schedule+0x135c/0x2b00 [ 233.455903][ T31] schedule+0x13c/0x20c [ 233.455912][ T31] schedule_preempt_disabled+0x18/0x2c [ 233.455923][ T31] __mutex_lock+0x5d4/0x1078 [ 233.455933][ T31] mutex_lock_nested+0x24/0x30 [ 233.455944][ T31] devl_lock+0x24/0x34 [ 233.455955][ T31] devlink_health_report+0x4a4/0x93c [ 233.455966][ T31] nsim_dev_health_break_write+0x15c/0x208 [ 233.455976][ T31] full_proxy_write+0x11c/0x160 [ 233.455985][ T31] vfs_write+0x2a4/0xa0c [ 233.455993][ T31] ksys_write+0x12c/0x228 [ 233.456000][ T31] __arm64_sys_write+0x84/0x98 [ 233.456008][ T31] invoke_syscall+0x98/0x244 [ 233.456019][ T31] el0_svc_common+0xec/0x23c [ 233.456029][ T31] do_el0_svc+0x4c/0x5c [ 233.456040][ T31] el0_svc+0x60/0x1d8 [ 233.456047][ T31] el0t_64_sync_handler+0x44/0x104 [ 233.456055][ T31] el0t_64_sync+0x198/0x19c [ 233.456101][ T31] [ 233.456101][ T31] Showing all locks held in the system: [ 233.456106][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 233.456113][ T31] #0: ffff800089981960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 233.456146][ T31] locks held by getty/4491: 2, on CPU#0: [ 233.456152][ T31] #0: ffff0000d12410a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 233.456173][ T31] #1: ffff80009318e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 233.456201][ T31] locks held by syz-executor/8147: 7, on CPU#1: [ 233.456207][ T31] #0: ffff0000d04e6460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456230][ T31] #1: ffff0000daa79880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 233.456254][ T31] #2: ffff0000c9c75f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 233.456279][ T31] #3: ffff80008a266f80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 233.456301][ T31] #4: ffff0000f24a9128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock+0x90/0xc8 [ 233.456322][ T31] #5: ffff0000f24a8258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock+0x24/0x34 [ 233.456347][ T31] #6: ffff0000f9178ae0 (&sb->s_type->i_mutex_key#17/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x150/0x430 [ 233.456378][ T31] locks held by syz.8.1101/8284: 3, on CPU#1: [ 233.456384][ T31] #0: ffff0000d97ecef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 233.456405][ T31] #1: ffff0000c1dd0460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456427][ T31] #2: ffff0000f24a8258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock+0x24/0x34 [ 233.456452][ T31] locks held by kworker/u8:38/8834: 2, last CPU#0: [ 233.456458][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 233.456482][ T31] #1: ffff800095c17c20 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 233.456505][ T31] locks held by syz-executor/9528: 4, on CPU#1: [ 233.456511][ T31] #0: ffff0000d04e6460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456533][ T31] #1: ffff0000d9602c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 233.456555][ T31] #2: ffff0000c9c75f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 233.456581][ T31] #3: ffff80008a266f80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 233.456603][ T31] locks held by syz-executor/9966: 4, on CPU#0: [ 233.456608][ T31] #0: ffff0000d04e6460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456630][ T31] #1: ffff0000d794d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 233.456653][ T31] #2: ffff0000c9c75f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 233.456678][ T31] #3: ffff80008a266f80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 233.456700][ T31] locks held by syz-executor/9986: 4, on CPU#0: [ 233.456706][ T31] #0: ffff0000d04e6460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456728][ T31] #1: ffff0000f297fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 233.456750][ T31] #2: ffff0000c9c75f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 233.456775][ T31] #3: ffff80008a266f80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 233.456797][ T31] locks held by syz-executor/10009: 4, on CPU#1: [ 233.456803][ T31] #0: ffff0000d04e6460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456825][ T31] #1: ffff0000f0ce3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 233.456847][ T31] #2: ffff0000c9c75f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 233.456872][ T31] #3: ffff80008a266f80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 233.456894][ T31] locks held by syz-executor/10029: 4, on CPU#0: [ 233.456900][ T31] #0: ffff0000d04e6460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 233.456921][ T31] #1: ffff0000d9773880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 233.456944][ T31] #2: ffff0000c9c75f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 233.456969][ T31] #3: ffff80008a266f80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 233.456991][ T31] [ 233.456993][ T31] ============================================= [ 233.456993][ T31] [ 233.456999][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 233.600348][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 233.602324][ T31] Tainted: [L]=SOFTLOCKUP [ 233.603205][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 233.605185][ T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 233.606726][ T31] Call trace: [ 233.607356][ T31] show_stack+0x2c/0x3c (C) [ 233.608211][ T31] __dump_stack+0x30/0x40 [ 233.609037][ T31] dump_stack_lvl+0x30/0x12c [ 233.609936][ T31] dump_stack+0x1c/0x28 [ 233.610726][ T31] vpanic+0x594/0xaf8 [ 233.611466][ T31] vpanic+0x0/0xaf8 [ 233.612190][ T31] hung_task_panic+0x0/0x2c [ 233.613060][ T31] kthread+0x304/0x3d4 [ 233.613839][ T31] ret_from_fork+0x10/0x20 [ 233.614700][ T31] SMP: stopping secondary CPUs [ 233.615659][ T31] Kernel Offset: disabled [ 233.616470][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 233.617789][ T31] Memory Limit: none [ 234.050719][ T31] Rebooting in 86400 seconds..